
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130343a3a2f34382d3438203d3e20323139313537.roa
File: 326131343a373538313a353130343a3a2f34382d3438203d3e20323139313537.roa (raw, json)
Hash identifier: t9t126bXcUENed+sYdrApirMt9X0KF89cH2siVpk5S0=
Subject key identifier: 85:16:5A:14:5E:4E:5C:B1:C1:0E:22:85:02:70:97:E8:0B:B0:9F:21
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 4C8F975BE29C65EDFAC723E738DAD0C9D8C1CB74
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130343a3a2f34382d3438203d3e20323139313537.roa
Signing time: Thu 29 Oct 2026 22:09:46 +0000
ROA not before: Thu 29 Oct 2026 22:04:46 +0000
ROA not after: Thu 28 Oct 2027 22:09:46 +0000
asID: 219157
IP address blocks: 2a14:7581:5104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:8f:97:5b:e2:9c:65:ed:fa:c7:23:e7:38:da:d0:c9:d8:c1:cb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Oct 29 22:04:46 2026 GMT
Not After : Oct 28 22:09:46 2027 GMT
Subject: CN=85165A145E4E5CB1C10E2285027097E80BB09F21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:41:05:be:bb:6f:48:4c:da:50:c8:73:4b:af:
6e:11:a1:44:65:6f:63:4c:e2:62:de:19:9e:20:15:
32:17:df:14:f6:a4:da:4f:36:43:50:5e:38:db:ed:
29:9e:5f:7e:8d:5c:d7:65:63:5c:cc:cf:47:94:1c:
43:27:02:38:4e:ef:c3:11:07:d8:ac:f7:c3:af:9b:
6c:51:e3:1e:30:9a:16:9f:36:0a:f1:ae:22:43:9f:
3a:0e:bc:31:fa:76:f6:11:81:89:f0:43:f7:d7:9a:
3e:db:39:c4:64:a2:f6:b9:0c:16:da:c2:39:c3:c1:
a9:c5:1e:0b:66:0b:71:b2:69:cd:ca:f0:6a:5e:43:
78:b0:6e:ef:63:72:21:d4:1b:a8:fd:ef:74:75:39:
ce:4e:25:e8:37:14:80:95:81:9a:e9:b0:2d:f4:06:
5e:f4:70:4d:cb:cf:65:ea:37:0b:2a:b8:71:9b:e1:
30:4b:f0:8f:17:ad:50:4f:cd:ff:fa:bb:92:8d:67:
13:08:29:bd:e9:43:7d:1b:c4:20:54:d6:90:e5:dc:
75:b7:28:c5:16:2d:1f:7f:ef:30:e2:74:cf:e5:eb:
3e:67:90:bb:ce:c0:b7:a0:db:0d:84:d4:a3:81:b2:
77:e2:86:37:18:90:6d:af:ef:84:1a:ff:2e:62:0c:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:16:5A:14:5E:4E:5C:B1:C1:0E:22:85:02:70:97:E8:0B:B0:9F:21
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130343a3a2f34382d3438203d3e20323139313537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5104::/48
Signature Algorithm: sha256WithRSAEncryption
35:e6:65:0c:47:d8:bc:d4:6e:11:f7:d4:46:7c:cc:c5:ad:e5:
42:ea:ab:18:46:6b:c4:f9:e7:b2:41:79:03:5e:86:35:14:d6:
2d:79:bd:ef:2e:16:8c:25:05:ac:84:c5:a9:ab:30:a8:4f:c7:
7a:ad:73:6d:9a:6f:c5:68:10:68:7d:29:bd:27:a2:8f:42:3a:
94:92:2b:a2:f7:5b:bc:d8:12:96:e3:8b:f3:64:c0:9c:65:34:
19:ab:88:28:f9:6c:52:9c:70:25:be:a3:d1:36:37:66:c3:1e:
5d:c1:99:ea:d0:a8:31:02:ce:92:5d:1b:f2:6c:f2:a7:23:31:
01:09:63:83:17:70:70:fe:20:0d:90:c1:d9:ed:1e:9d:44:f5:
90:3f:08:a6:db:b7:95:62:76:7d:ca:92:c2:65:ef:8f:1d:e6:
42:31:42:a5:89:91:4b:dc:87:e7:04:6f:70:f4:ce:14:df:99:
a1:8e:62:7f:e3:37:bc:5d:5b:7a:d0:6f:ca:73:61:12:a7:fa:
9b:36:ce:c5:1c:b2:bf:58:a2:9c:3c:96:ed:35:4f:fb:95:18:
0e:6c:e6:95:51:5e:d9:53:c9:fb:81:b4:e7:10:80:bc:d7:71:
1c:61:57:8b:71:25:21:96:8c:8d:ad:64:9d:54:fd:32:cd:11:
6b:dd:cb:41
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUTI+XW+KcZe36xyPnONrQydjBy3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA3QkI4MjA0NDA4OTZENkZBMDAyM0EwNzkwQ0QxRDc4
RTk3RjdBRjAeFw0yNjEwMjkyMjA0NDZaFw0yNzEwMjgyMjA5NDZaMDMxMTAvBgNV
BAMTKDg1MTY1QTE0NUU0RTVDQjFDMTBFMjI4NTAyNzA5N0U4MEJCMDlGMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQQW+u29ITNpQyHNLr24RoURl
b2NM4mLeGZ4gFTIX3xT2pNpPNkNQXjjb7SmeX36NXNdlY1zMz0eUHEMnAjhO78MR
B9is98Ovm2xR4x4wmhafNgrxriJDnzoOvDH6dvYRgYnwQ/fXmj7bOcRkova5DBba
wjnDwanFHgtmC3Gyac3K8GpeQ3iwbu9jciHUG6j973R1Oc5OJeg3FICVgZrpsC30
Bl70cE3Lz2XqNwsquHGb4TBL8I8XrVBPzf/6u5KNZxMIKb3pQ30bxCBU1pDl3HW3
KMUWLR9/7zDidM/l6z5nkLvOwLeg2w2E1KOBsnfihjcYkG2v74Qa/y5iDOYDAgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQUhRZaFF5OXLHBDiKFAnCX6AuwnyEwHwYDVR0j
BBgwFoAUkHu4IEQIltb6ACOgeQzR146X968wDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcnBraS5zaHJkc2Vydi5jb20vcmVwby9NWU5P
Qy1ORVhUU0VSVi84LzkwN0JCODIwNDQwODk2RDZGQTAwMjNBMDc5MENEMUQ3OEU5
N0Y3QUYuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvOTA3QkI4MjA0NDA4OTZENkZB
MDAyM0EwNzkwQ0QxRDc4RTk3RjdBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGA
BggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLnNocmRzZXJ2LmNvbS9yZXBvL01ZTk9D
LU5FWFRTRVJWLzgvMzI2MTMxMzQzYTM3MzUzODMxM2EzNTMxMzAzNDNhM2EyZjM0
MzgyZDM0MzgyMDNkM2UyMDMyMzEzOTMxMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYFRBDAN
BgkqhkiG9w0BAQsFAAOCAQEANeZlDEfYvNRuEffURnzMxa3lQuqrGEZrxPnnskF5
A16GNRTWLXm97y4WjCUFrITFqaswqE/Heq1zbZpvxWgQaH0pvSeij0I6lJIrovdb
vNgSluOL82TAnGU0GauIKPlsUpxwJb6j0TY3ZsMeXcGZ6tCoMQLOkl0b8mzypyMx
AQljgxdwcP4gDZDB2e0enUT1kD8Iptu3lWJ2fcqSwmXvjx3mQjFCpYmRS9yH5wRv
cPTOFN+ZoY5if+M3vF1betBvynNhEqf6mzbOxRyyv1iinDyW7TVP+5UYDmzmlVFe
2VPJ+4G05xCAvNdxHGFXi3ElIZaMja1knVT9Ms0Ra93LQQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:03 2026 by rpki-client