Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130303a3a2f34302d3438203d3e20323034343634.roa
File:                     326131343a373538313a353130303a3a2f34302d3438203d3e20323034343634.roa (raw, json)
Hash identifier:          f7Q7dHAM1ASWB356lsym3MulH6pFXHUMhV/EVlcXvu4=
Subject key identifier:   65:17:0B:4F:0C:80:07:15:EB:CA:AC:7A:27:AD:C0:19:30:F1:37:6B
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       386579F9B9A4A9829826E649C493997961791D95
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130303a3a2f34302d3438203d3e20323034343634.roa
Signing time:             Sun 01 Nov 2026 03:45:44 +0000
ROA not before:           Sun 01 Nov 2026 03:40:44 +0000
ROA not after:            Sun 31 Oct 2027 03:45:44 +0000
asID:                     204464
IP address blocks:        2a14:7581:5100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:65:79:f9:b9:a4:a9:82:98:26:e6:49:c4:93:99:79:61:79:1d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Nov  1 03:40:44 2026 GMT
            Not After : Oct 31 03:45:44 2027 GMT
        Subject: CN=65170B4F0C800715EBCAAC7A27ADC01930F1376B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:d3:f1:ec:32:8c:bc:b6:26:8f:5e:93:aa:
                    a8:53:cb:f8:fd:88:e2:48:03:bf:0c:e1:d3:ab:9a:
                    25:5e:2c:52:8a:c1:57:ea:89:7c:e7:a0:b0:90:b1:
                    11:84:df:ba:02:49:35:ea:61:10:48:1d:71:19:7d:
                    95:38:4d:86:86:3e:92:f6:34:0c:0a:67:1f:4e:6c:
                    f0:4d:d7:ae:99:af:9f:d2:3f:63:bd:6e:b5:43:8e:
                    c5:52:98:db:a6:bb:b9:4a:d9:7a:83:15:ff:d8:7a:
                    f8:b1:4c:36:e2:ad:2a:e0:ba:2f:8a:2b:cb:c6:20:
                    9a:14:98:e8:6b:ff:32:6d:5e:b5:9a:c2:dc:b0:61:
                    8f:6f:d9:c2:da:03:44:af:5e:0e:91:a2:44:ae:d5:
                    61:41:6a:31:b0:14:19:26:b9:6f:e3:36:2e:4c:e9:
                    1c:eb:4b:7c:0e:8c:16:34:80:6a:68:04:c7:eb:9f:
                    72:39:25:54:c3:16:c1:71:5e:cd:0e:81:ac:8b:b9:
                    f9:3a:2d:f0:93:4f:6a:7c:c9:1b:27:55:86:9f:34:
                    2a:ad:32:a7:67:c0:ab:d5:84:5c:5f:a5:b6:38:2d:
                    41:be:60:f1:76:1a:28:29:13:e3:1f:a3:5d:79:cc:
                    4e:0d:fc:7f:10:54:67:52:0f:70:4a:3d:84:c2:4f:
                    69:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:17:0B:4F:0C:80:07:15:EB:CA:AC:7A:27:AD:C0:19:30:F1:37:6B
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130303a3a2f34302d3438203d3e20323034343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:6b:dd:0f:1f:68:20:ae:0c:c1:e8:9a:bf:af:ae:36:8f:9b:
         22:38:2a:8e:e2:f6:8a:c6:e0:60:d1:7e:36:13:73:c7:d7:ee:
         c9:05:d5:e8:e2:54:01:47:2d:ea:b8:04:e5:6f:c8:2d:86:46:
         da:44:81:65:ed:f5:14:c2:aa:76:6b:12:f3:9a:55:b0:25:52:
         44:b4:28:67:95:46:e6:88:44:bd:4d:0b:81:e1:ed:f7:ae:8f:
         18:f9:37:a4:b8:11:d4:09:60:ce:a4:ec:e6:88:5f:c9:53:8d:
         af:47:d8:83:e8:29:e4:3c:a4:fa:5c:ef:0a:52:31:69:be:81:
         00:06:29:33:a0:16:01:fe:43:69:de:07:48:24:bb:72:43:fe:
         a8:65:b7:77:02:e8:bf:0a:0b:72:04:85:17:53:48:a7:fc:ae:
         1c:cc:27:a8:88:10:73:fc:d2:ee:bf:b2:c2:0e:71:d9:1f:7f:
         a1:ad:8f:22:9e:81:4d:91:34:e7:e1:69:88:fe:af:87:61:ac:
         c1:54:b5:51:46:e3:25:7d:bf:13:08:7d:b7:6b:1e:03:51:66:
         81:ac:60:fb:b5:0e:ef:c7:14:8e:dd:26:d3:c8:f3:07:9f:d2:
         c3:2d:01:ea:51:24:5d:60:fd:4c:13:ea:71:56:8f:0d:1e:15:
         a6:9d:1b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:00 2026 by rpki-client