Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353034303a3a2f34342d3438203d3e20323138393034.roa
File:                     326131343a373538313a353034303a3a2f34342d3438203d3e20323138393034.roa (raw, json)
Hash identifier:          t5I+k/axDPbzM+iEWaLIRdOZVBMvPzrOYZd+6aMBjac=
Subject key identifier:   73:B2:83:E6:44:FF:DD:96:21:EF:C2:D2:62:FD:09:89:CA:E2:19:5C
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       283135BA1BE36A4860289D44371684AF9A7B0CB7
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353034303a3a2f34342d3438203d3e20323138393034.roa
Signing time:             Thu 29 Oct 2026 22:09:45 +0000
ROA not before:           Thu 29 Oct 2026 22:04:45 +0000
ROA not after:            Thu 28 Oct 2027 22:09:45 +0000
asID:                     218904
IP address blocks:        2a14:7581:5040::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:31:35:ba:1b:e3:6a:48:60:28:9d:44:37:16:84:af:9a:7b:0c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:45 2026 GMT
            Not After : Oct 28 22:09:45 2027 GMT
        Subject: CN=73B283E644FFDD9621EFC2D262FD0989CAE2195C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6b:43:aa:5d:fd:1c:fb:54:5a:69:52:9a:f4:
                    e9:ae:bd:f0:84:c3:5f:f4:fa:d7:6a:a1:bc:10:e3:
                    cb:06:8a:9a:9d:6f:6b:ea:7d:46:67:de:3c:14:f5:
                    43:d0:26:48:22:73:7f:23:dc:b2:5e:a0:34:c0:b6:
                    93:57:5a:13:56:19:ec:35:ac:dc:51:a7:7a:d8:ea:
                    d2:27:ab:4f:35:3b:43:e2:68:a3:7d:f3:fb:ac:fe:
                    24:11:9c:66:dc:23:32:43:4f:d7:58:ab:4b:ca:fd:
                    c3:2e:60:2e:34:b9:56:ed:68:bb:a0:ed:38:81:fa:
                    2a:29:18:90:44:84:0d:39:80:9b:23:c9:aa:0c:53:
                    5e:c5:a9:02:0c:13:f6:db:7d:fc:77:b4:19:24:4c:
                    12:c0:bd:c0:07:60:d1:2a:8e:61:17:b5:75:93:b9:
                    cc:df:b8:c2:b7:90:a4:86:21:d3:09:c1:5f:b0:f9:
                    fb:2d:a9:36:62:f6:a4:6b:a6:c9:40:1b:08:55:95:
                    55:88:36:06:59:a3:43:97:dc:38:ab:7c:24:d6:7c:
                    93:99:16:d1:7f:5a:08:03:b3:48:d4:35:df:25:aa:
                    cc:40:b5:0f:a2:39:f8:a9:fd:d1:a4:93:25:e0:3b:
                    50:49:c0:5f:03:14:8d:49:f3:6a:7a:96:80:15:d9:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B2:83:E6:44:FF:DD:96:21:EF:C2:D2:62:FD:09:89:CA:E2:19:5C
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353034303a3a2f34342d3438203d3e20323138393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5040::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:1a:0c:90:68:bd:09:7e:51:e8:a0:82:cb:5d:17:ca:e6:d5:
         ca:7f:a2:e0:5b:ba:ae:ef:ef:30:4a:f9:cd:0e:82:47:e4:16:
         11:4d:e8:b4:59:1d:91:fd:a7:12:3c:69:da:38:3e:75:f0:45:
         8a:84:86:78:cd:56:e0:ae:fd:c1:df:fc:23:57:f9:fd:84:93:
         ce:36:ee:a9:df:b7:72:c2:d3:76:68:02:3d:6c:1b:77:87:28:
         7f:69:f4:9d:5e:ca:72:6c:e0:08:a8:8b:30:7e:22:19:9a:cd:
         df:24:c3:f0:71:9d:c9:6f:68:85:86:3e:32:2f:cd:a2:2b:f0:
         b7:1c:d0:63:92:42:f1:e7:c1:6a:59:c6:cc:2c:97:46:9f:0a:
         a0:b2:3e:0e:6a:9d:c2:e7:cd:f3:e9:03:e9:66:10:f0:5a:7f:
         04:cb:25:c9:58:72:06:7f:43:18:df:c3:e4:5e:90:0f:dc:39:
         6d:32:b9:c1:ba:a3:f0:6e:99:84:93:b5:69:88:bd:fe:17:24:
         29:a1:4b:6f:72:19:63:b9:66:b6:8f:9d:03:c6:31:58:83:e1:
         15:64:c5:f5:fc:f1:50:a9:91:c4:e4:a0:5d:87:ee:89:08:46:
         49:05:5a:c5:55:97:9a:71:ac:79:bb:40:b5:2c:31:f9:78:66:
         da:6f:f5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:42:33 2026 by rpki-client