Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353031303a3a2f34342d3438203d3e20323034343634.roa
File:                     326131343a373538313a353031303a3a2f34342d3438203d3e20323034343634.roa (raw, json)
Hash identifier:          WNHFz4QfoWbuTN/gHvJGdmK4tD7CSxi3ff/68f9kqxA=
Subject key identifier:   D3:A5:04:DC:6C:FA:2F:8B:A6:E3:1A:B7:2D:76:57:95:E2:8B:5D:5E
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       171D9DD31C9D71B796FE8D153E282D3FE4D5BAD6
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353031303a3a2f34342d3438203d3e20323034343634.roa
Signing time:             Thu 29 Oct 2026 22:09:34 +0000
ROA not before:           Thu 29 Oct 2026 22:04:34 +0000
ROA not after:            Thu 28 Oct 2027 22:09:34 +0000
asID:                     204464
IP address blocks:        2a14:7581:5010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1d:9d:d3:1c:9d:71:b7:96:fe:8d:15:3e:28:2d:3f:e4:d5:ba:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:34 2026 GMT
            Not After : Oct 28 22:09:34 2027 GMT
        Subject: CN=D3A504DC6CFA2F8BA6E31AB72D765795E28B5D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:50:34:6d:5a:0c:50:20:34:70:33:e5:5b:
                    22:36:33:a9:92:7f:69:f7:4e:84:7a:bb:07:f5:cd:
                    25:f7:b7:0f:11:04:c1:d6:a3:b9:da:37:61:2b:0e:
                    8d:a0:f9:7b:5e:3d:6f:2b:0e:da:52:da:12:1f:3e:
                    3c:87:cb:6f:70:c3:30:43:2b:35:19:70:bd:1c:f3:
                    93:3d:ac:e6:b3:87:e9:2b:64:9b:b3:d0:ff:74:a6:
                    be:ba:55:cd:3d:ec:a1:b7:a2:76:7f:a6:02:09:c9:
                    9f:5c:9f:a7:10:4f:6e:db:00:a6:77:cd:42:bb:9c:
                    f0:84:87:a0:fc:72:80:da:70:89:c6:3a:85:30:8e:
                    ff:76:e8:e3:91:fc:06:81:63:8a:50:15:6b:a8:63:
                    29:c2:a1:00:af:b5:72:4b:94:0a:7f:70:ad:dc:61:
                    77:89:d5:a0:8c:b2:3f:51:65:c1:99:3e:27:e3:fd:
                    12:76:3f:2e:26:d4:b2:5a:7b:90:a4:b7:cb:57:06:
                    66:5f:72:cd:6e:bb:00:c4:43:12:02:c6:18:a2:b1:
                    6a:96:46:ec:72:c4:3c:5c:1d:88:58:eb:59:35:d3:
                    62:e3:18:b1:61:aa:41:11:cc:0b:28:bb:f9:ec:d8:
                    89:ae:13:15:9f:58:f0:66:ff:cb:2e:08:da:ec:76:
                    88:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A5:04:DC:6C:FA:2F:8B:A6:E3:1A:B7:2D:76:57:95:E2:8B:5D:5E
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353031303a3a2f34342d3438203d3e20323034343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5010::/44

    Signature Algorithm: sha256WithRSAEncryption
         6d:73:44:9c:11:34:cf:f2:7b:a9:13:33:29:6f:04:9e:d9:c1:
         ae:c9:8a:50:e8:7b:d6:cc:50:8c:d7:ad:30:40:eb:43:6a:81:
         08:15:f6:9c:79:23:0b:a8:32:a0:fb:80:81:76:15:e2:f1:ef:
         61:2e:e7:9c:4f:8e:a2:13:e1:1b:26:a6:73:26:21:62:94:6f:
         10:82:b2:ab:92:88:4a:78:55:ec:e7:57:cb:05:81:a3:86:6d:
         80:f9:08:08:10:09:f7:c6:73:ad:86:b8:c3:8b:a6:21:c7:d7:
         52:d5:87:c5:e2:36:6e:df:c0:fb:24:dc:50:d2:17:f0:f3:81:
         4d:5a:87:4c:10:d0:63:72:23:86:fc:1a:5f:a8:b7:0a:76:df:
         e0:bf:64:58:ec:18:77:be:4c:7b:73:e6:99:26:7f:83:2e:af:
         1d:38:80:ad:be:a9:06:8e:66:2a:be:50:1c:d4:9b:69:37:8d:
         7a:cc:36:23:68:9a:84:eb:a5:70:47:49:b5:27:7c:d0:7e:30:
         be:44:c7:38:2c:b1:69:5f:d2:b8:d9:0a:37:9d:86:15:6c:4f:
         7e:3d:fc:44:f7:9b:55:b2:4d:e3:b4:e4:e4:bb:c5:31:5a:01:
         45:33:ed:08:22:04:7f:7a:47:f7:cb:2b:54:6a:ce:12:fb:ce:
         63:44:7f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:24:59 2026 by rpki-client