Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353038303a3a2f34342d3438203d3e20323034343634.roa
File:                     326131343a373538313a353038303a3a2f34342d3438203d3e20323034343634.roa (raw, json)
Hash identifier:          VEpMATBehKVA1pUxFHadkjSBYrtx4CeiIxwPeIWZfNk=
Subject key identifier:   AB:26:3A:14:3F:77:B9:E9:9E:15:3A:91:C1:C0:C4:90:80:68:29:58
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       0F209F9BBE6362CC9CE57BCC6EAEA20488DB6ABE
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353038303a3a2f34342d3438203d3e20323034343634.roa
Signing time:             Thu 29 Oct 2026 22:27:26 +0000
ROA not before:           Thu 29 Oct 2026 22:22:26 +0000
ROA not after:            Thu 28 Oct 2027 22:27:26 +0000
asID:                     204464
IP address blocks:        2a14:7581:5080::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:20:9f:9b:be:63:62:cc:9c:e5:7b:cc:6e:ae:a2:04:88:db:6a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:22:26 2026 GMT
            Not After : Oct 28 22:27:26 2027 GMT
        Subject: CN=AB263A143F77B9E99E153A91C1C0C49080682958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e0:7e:e0:0c:65:b9:36:4a:eb:1c:aa:c3:57:
                    2c:ae:22:15:18:9f:33:d5:a6:04:a9:ad:ea:c5:87:
                    eb:5c:cc:c7:d2:b5:0f:cc:2b:9b:b2:dd:f0:ee:b0:
                    df:4f:8c:38:ae:43:25:ab:aa:d5:90:51:ee:5e:c4:
                    6d:4d:bd:f0:d5:a3:11:33:ea:e2:33:e1:44:d6:02:
                    51:7a:aa:02:e8:ae:89:2a:51:58:9c:ea:05:ae:6b:
                    9f:5b:45:e8:ff:eb:fc:75:32:f1:53:f2:87:56:8e:
                    d4:a2:9f:9d:32:6c:86:24:b2:b1:5d:63:0a:30:7c:
                    28:0a:78:58:94:72:29:db:c6:b8:10:f7:1e:a5:cd:
                    53:8d:a1:55:5b:eb:db:12:29:18:e2:71:2f:81:60:
                    c4:94:b8:81:22:b6:2d:11:40:47:0f:19:d6:43:cd:
                    4f:42:ca:e0:4a:78:9a:53:56:13:85:48:77:9b:16:
                    f4:bb:4d:6b:3e:92:24:29:25:41:43:b0:33:09:74:
                    3d:5e:48:4c:18:e6:18:e1:84:40:fd:13:f7:eb:86:
                    6f:b9:3e:5a:bb:a0:74:08:1e:27:97:af:49:21:4e:
                    f6:8d:d8:e2:a9:f0:7b:ee:5d:98:07:e7:40:0d:f5:
                    18:bb:fd:b5:c5:cb:58:8d:6d:d7:b7:46:8f:e6:3a:
                    c4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:26:3A:14:3F:77:B9:E9:9E:15:3A:91:C1:C0:C4:90:80:68:29:58
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353038303a3a2f34342d3438203d3e20323034343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5080::/44

    Signature Algorithm: sha256WithRSAEncryption
         86:1e:e0:b0:05:80:53:55:12:ed:5c:22:e5:ed:b6:fe:f7:c4:
         ab:0f:e3:fe:d5:6a:53:a8:d5:b5:8e:ab:30:19:89:39:e0:e9:
         52:1a:94:7c:37:19:b7:cd:e1:8c:fe:c6:e7:a2:41:b9:37:74:
         fa:84:f9:8a:db:c8:0f:b2:e0:4e:0e:e4:6e:8e:ce:96:57:a5:
         4b:36:ac:0f:53:d4:8e:b7:7c:47:75:51:60:33:5d:1a:93:f5:
         74:f5:3c:e5:b9:91:18:29:2f:24:89:6d:5d:77:1a:cb:f3:fa:
         b0:72:fb:0f:39:fa:e2:04:12:65:b3:56:61:b1:06:6e:35:5c:
         c1:ee:58:57:ed:28:88:73:60:eb:de:9b:08:77:77:1a:c9:6e:
         71:d0:cb:02:aa:bf:19:88:f6:15:77:0a:c5:40:e1:44:43:c2:
         a5:47:b0:81:a6:e1:96:0f:80:96:7d:02:ca:dc:dd:af:f0:be:
         f9:91:6b:b1:bb:9e:36:a6:38:cd:98:2e:6b:41:43:28:43:0c:
         e4:71:ae:ea:aa:69:dd:99:65:11:1e:8b:db:75:79:d4:59:92:
         83:81:9a:ea:c4:05:fb:3e:5b:cd:9e:db:e9:a8:0b:83:90:52:
         fb:b8:36:44:18:87:8b:dc:bf:06:3b:85:df:11:ef:5d:23:80:
         49:97:32:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:58 2026 by rpki-client