Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130343a3a2f34382d3438203d3e20323139313537.roa
File:                     326131343a373538313a353130343a3a2f34382d3438203d3e20323139313537.roa (raw, json)
Hash identifier:          t9t126bXcUENed+sYdrApirMt9X0KF89cH2siVpk5S0=
Subject key identifier:   85:16:5A:14:5E:4E:5C:B1:C1:0E:22:85:02:70:97:E8:0B:B0:9F:21
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       4C8F975BE29C65EDFAC723E738DAD0C9D8C1CB74
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130343a3a2f34382d3438203d3e20323139313537.roa
Signing time:             Thu 29 Oct 2026 22:09:46 +0000
ROA not before:           Thu 29 Oct 2026 22:04:46 +0000
ROA not after:            Thu 28 Oct 2027 22:09:46 +0000
asID:                     219157
IP address blocks:        2a14:7581:5104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8f:97:5b:e2:9c:65:ed:fa:c7:23:e7:38:da:d0:c9:d8:c1:cb:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:46 2026 GMT
            Not After : Oct 28 22:09:46 2027 GMT
        Subject: CN=85165A145E4E5CB1C10E2285027097E80BB09F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:05:be:bb:6f:48:4c:da:50:c8:73:4b:af:
                    6e:11:a1:44:65:6f:63:4c:e2:62:de:19:9e:20:15:
                    32:17:df:14:f6:a4:da:4f:36:43:50:5e:38:db:ed:
                    29:9e:5f:7e:8d:5c:d7:65:63:5c:cc:cf:47:94:1c:
                    43:27:02:38:4e:ef:c3:11:07:d8:ac:f7:c3:af:9b:
                    6c:51:e3:1e:30:9a:16:9f:36:0a:f1:ae:22:43:9f:
                    3a:0e:bc:31:fa:76:f6:11:81:89:f0:43:f7:d7:9a:
                    3e:db:39:c4:64:a2:f6:b9:0c:16:da:c2:39:c3:c1:
                    a9:c5:1e:0b:66:0b:71:b2:69:cd:ca:f0:6a:5e:43:
                    78:b0:6e:ef:63:72:21:d4:1b:a8:fd:ef:74:75:39:
                    ce:4e:25:e8:37:14:80:95:81:9a:e9:b0:2d:f4:06:
                    5e:f4:70:4d:cb:cf:65:ea:37:0b:2a:b8:71:9b:e1:
                    30:4b:f0:8f:17:ad:50:4f:cd:ff:fa:bb:92:8d:67:
                    13:08:29:bd:e9:43:7d:1b:c4:20:54:d6:90:e5:dc:
                    75:b7:28:c5:16:2d:1f:7f:ef:30:e2:74:cf:e5:eb:
                    3e:67:90:bb:ce:c0:b7:a0:db:0d:84:d4:a3:81:b2:
                    77:e2:86:37:18:90:6d:af:ef:84:1a:ff:2e:62:0c:
                    e6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:16:5A:14:5E:4E:5C:B1:C1:0E:22:85:02:70:97:E8:0B:B0:9F:21
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130343a3a2f34382d3438203d3e20323139313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5104::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:e6:65:0c:47:d8:bc:d4:6e:11:f7:d4:46:7c:cc:c5:ad:e5:
         42:ea:ab:18:46:6b:c4:f9:e7:b2:41:79:03:5e:86:35:14:d6:
         2d:79:bd:ef:2e:16:8c:25:05:ac:84:c5:a9:ab:30:a8:4f:c7:
         7a:ad:73:6d:9a:6f:c5:68:10:68:7d:29:bd:27:a2:8f:42:3a:
         94:92:2b:a2:f7:5b:bc:d8:12:96:e3:8b:f3:64:c0:9c:65:34:
         19:ab:88:28:f9:6c:52:9c:70:25:be:a3:d1:36:37:66:c3:1e:
         5d:c1:99:ea:d0:a8:31:02:ce:92:5d:1b:f2:6c:f2:a7:23:31:
         01:09:63:83:17:70:70:fe:20:0d:90:c1:d9:ed:1e:9d:44:f5:
         90:3f:08:a6:db:b7:95:62:76:7d:ca:92:c2:65:ef:8f:1d:e6:
         42:31:42:a5:89:91:4b:dc:87:e7:04:6f:70:f4:ce:14:df:99:
         a1:8e:62:7f:e3:37:bc:5d:5b:7a:d0:6f:ca:73:61:12:a7:fa:
         9b:36:ce:c5:1c:b2:bf:58:a2:9c:3c:96:ed:35:4f:fb:95:18:
         0e:6c:e6:95:51:5e:d9:53:c9:fb:81:b4:e7:10:80:bc:d7:71:
         1c:61:57:8b:71:25:21:96:8c:8d:ad:64:9d:54:fd:32:cd:11:
         6b:dd:cb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:03 2026 by rpki-client