
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353035303a3a2f34342d3438203d3e20323139313537.roa
File: 326131343a373538313a353035303a3a2f34342d3438203d3e20323139313537.roa (raw, json)
Hash identifier: A92xxqiufR+7PF4cCvVs7iy07rz0bP4UvbE1YSlUNGM=
Subject key identifier: 2B:4D:4F:23:D9:31:DF:E5:84:CA:CE:A1:EC:7D:E6:00:2E:4E:7B:72
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 78B93E947198C108D11F7708B8FC2F0AF2DEB2A3
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353035303a3a2f34342d3438203d3e20323139313537.roa
Signing time: Thu 29 Oct 2026 22:09:47 +0000
ROA not before: Thu 29 Oct 2026 22:04:47 +0000
ROA not after: Thu 28 Oct 2027 22:09:47 +0000
asID: 219157
IP address blocks: 2a14:7581:5050::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b9:3e:94:71:98:c1:08:d1:1f:77:08:b8:fc:2f:0a:f2:de:b2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Oct 29 22:04:47 2026 GMT
Not After : Oct 28 22:09:47 2027 GMT
Subject: CN=2B4D4F23D931DFE584CACEA1EC7DE6002E4E7B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4c:0a:04:1f:f7:5f:bb:62:fb:0f:21:ba:9e:
6e:2a:8f:ba:e6:ad:bf:bb:ae:35:0c:9a:e0:7d:e3:
4a:b4:6b:79:39:05:2a:03:70:b8:ff:d4:76:55:c4:
a8:78:f4:00:a4:e6:b2:28:82:92:61:d0:79:d7:e2:
c4:c3:46:7e:7a:55:50:a1:c9:dc:9d:47:08:ca:51:
20:1b:40:34:1c:8f:10:35:a2:f5:6b:d8:2a:85:0e:
03:e1:85:74:c9:0a:b4:51:56:a8:d6:d5:e3:b4:81:
85:27:b4:f3:68:4d:e2:09:84:8b:e7:21:26:73:46:
52:6d:74:e3:3f:d4:76:8f:f4:a7:f5:8c:15:e3:dc:
00:05:2e:59:81:fa:46:d3:ee:6d:08:db:e8:43:de:
00:a2:98:83:80:da:78:3b:e7:16:5b:ef:d5:9f:cd:
b0:2b:cb:51:ce:a9:af:60:81:1e:48:ea:65:b9:7a:
8a:ea:27:46:a5:82:7a:53:65:7a:43:42:3f:93:04:
0d:a5:07:f5:c3:97:9b:f2:88:5e:e5:f1:54:e2:12:
7f:8f:50:f2:82:b4:5d:ae:81:10:93:10:c3:f0:2d:
c6:e5:c0:8d:29:be:bf:7b:de:dd:0d:d8:31:55:34:
8b:3c:0c:c1:3d:f6:58:b0:5d:17:59:21:ea:60:2d:
54:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4D:4F:23:D9:31:DF:E5:84:CA:CE:A1:EC:7D:E6:00:2E:4E:7B:72
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353035303a3a2f34342d3438203d3e20323139313537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5050::/44
Signature Algorithm: sha256WithRSAEncryption
65:0c:80:43:72:40:c7:82:ce:02:70:a9:62:28:03:d0:e4:e3:
ce:1b:93:8e:ee:8b:ee:d6:4e:1d:aa:65:c5:cc:9c:24:c9:a3:
75:6e:7a:e3:1d:61:d0:e1:33:9e:6b:c4:f0:ed:bd:b8:b7:d3:
80:98:56:ab:f7:c2:5a:5c:2d:a8:4f:74:e4:f5:80:72:a0:1c:
03:87:bb:d4:93:c0:f2:e2:f0:24:a9:13:a5:3f:ce:c0:fe:d4:
74:8e:df:ae:18:be:2f:04:90:24:8c:f7:81:fd:27:d1:91:b6:
5a:53:a2:03:d8:b7:cf:a9:bc:54:50:e2:e2:61:e3:70:85:82:
e7:e1:37:e9:98:68:02:f4:ec:1f:6b:04:d0:fe:f1:0d:6b:cc:
11:80:55:b2:65:6f:a4:c8:a5:a9:34:19:30:95:fd:62:4f:6b:
4e:d6:28:05:13:de:ba:36:45:f0:4f:d4:df:d3:32:c7:a0:39:
85:40:b3:77:10:3e:d9:ec:a0:b2:b8:14:a4:34:32:73:c0:17:
e8:12:aa:89:b8:cf:d4:87:76:a7:85:87:89:e0:fa:d9:d2:35:
dd:8d:19:c8:3b:fd:f1:79:13:da:1c:fa:52:67:5b:cf:c8:b3:
5d:79:ab:b0:bf:33:14:60:aa:2d:f4:4e:05:51:93:75:89:88:
d8:b3:ba:04
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUeLk+lHGYwQjRH3cIuPwvCvLesqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA3QkI4MjA0NDA4OTZENkZBMDAyM0EwNzkwQ0QxRDc4
RTk3RjdBRjAeFw0yNjEwMjkyMjA0NDdaFw0yNzEwMjgyMjA5NDdaMDMxMTAvBgNV
BAMTKDJCNEQ0RjIzRDkzMURGRTU4NENBQ0VBMUVDN0RFNjAwMkU0RTdCNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWTAoEH/dfu2L7DyG6nm4qj7rm
rb+7rjUMmuB940q0a3k5BSoDcLj/1HZVxKh49ACk5rIogpJh0HnX4sTDRn56VVCh
ydydRwjKUSAbQDQcjxA1ovVr2CqFDgPhhXTJCrRRVqjW1eO0gYUntPNoTeIJhIvn
ISZzRlJtdOM/1HaP9Kf1jBXj3AAFLlmB+kbT7m0I2+hD3gCimIOA2ng75xZb79Wf
zbAry1HOqa9ggR5I6mW5eorqJ0algnpTZXpDQj+TBA2lB/XDl5vyiF7l8VTiEn+P
UPKCtF2ugRCTEMPwLcblwI0pvr973t0N2DFVNIs8DME99liwXRdZIepgLVSFAgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQUK01PI9kx3+WEys6h7H3mAC5Oe3IwHwYDVR0j
BBgwFoAUkHu4IEQIltb6ACOgeQzR146X968wDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcnBraS5zaHJkc2Vydi5jb20vcmVwby9NWU5P
Qy1ORVhUU0VSVi84LzkwN0JCODIwNDQwODk2RDZGQTAwMjNBMDc5MENEMUQ3OEU5
N0Y3QUYuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvOTA3QkI4MjA0NDA4OTZENkZB
MDAyM0EwNzkwQ0QxRDc4RTk3RjdBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGA
BggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLnNocmRzZXJ2LmNvbS9yZXBvL01ZTk9D
LU5FWFRTRVJWLzgvMzI2MTMxMzQzYTM3MzUzODMxM2EzNTMwMzUzMDNhM2EyZjM0
MzQyZDM0MzgyMDNkM2UyMDMyMzEzOTMxMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoUdYFQUDAN
BgkqhkiG9w0BAQsFAAOCAQEAZQyAQ3JAx4LOAnCpYigD0OTjzhuTju6L7tZOHapl
xcycJMmjdW564x1h0OEznmvE8O29uLfTgJhWq/fCWlwtqE905PWAcqAcA4e71JPA
8uLwJKkTpT/OwP7UdI7frhi+LwSQJIz3gf0n0ZG2WlOiA9i3z6m8VFDi4mHjcIWC
5+E36ZhoAvTsH2sE0P7xDWvMEYBVsmVvpMilqTQZMJX9Yk9rTtYoBRPeujZF8E/U
39Myx6A5hUCzdxA+2eygsrgUpDQyc8AX6BKqibjP1Id2p4WHieD62dI13Y0ZyDv9
8XkT2hz6Umdbz8izXXmrsL8zFGCqLfROBVGTdYmI2LO6BA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:22:14 2026 by rpki-client