Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130353a3a2f34382d3438203d3e20323138393034.roa
File:                     326131343a373538313a353130353a3a2f34382d3438203d3e20323138393034.roa (raw, json)
Hash identifier:          gLfC6kY55R3O2DQJudsFe9VaQriiVc6OsUU4hnJJzRc=
Subject key identifier:   E3:E9:2B:8F:AF:7F:F0:8F:D0:91:86:7D:23:BC:6A:3F:98:67:06:8E
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       4487A9D8DDBBCB32D9820EA68576E1DD390A7D21
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130353a3a2f34382d3438203d3e20323138393034.roa
Signing time:             Thu 29 Oct 2026 22:09:36 +0000
ROA not before:           Thu 29 Oct 2026 22:04:36 +0000
ROA not after:            Thu 28 Oct 2027 22:09:36 +0000
asID:                     218904
IP address blocks:        2a14:7581:5105::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:87:a9:d8:dd:bb:cb:32:d9:82:0e:a6:85:76:e1:dd:39:0a:7d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:36 2026 GMT
            Not After : Oct 28 22:09:36 2027 GMT
        Subject: CN=E3E92B8FAF7FF08FD091867D23BC6A3F9867068E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:ce:fb:40:aa:a8:ed:13:7e:b3:ad:1f:a7:
                    1f:c2:43:4b:1d:0b:59:61:9a:a1:02:02:be:fe:a9:
                    c6:d9:9b:50:7e:5f:3c:76:83:e4:4e:fb:5d:a2:0d:
                    b4:56:c8:df:ea:22:9c:73:ed:59:8b:59:02:15:ae:
                    a4:68:47:dc:27:2c:25:51:9e:bf:f7:2c:ba:5d:ed:
                    f7:f1:47:40:1d:7b:59:78:8f:17:10:2a:f5:e3:9c:
                    b9:12:b6:21:ff:a9:55:9b:1f:d7:e4:31:40:bc:ef:
                    f6:bb:4d:52:15:ed:3e:2c:e9:81:e5:b7:eb:6a:da:
                    a2:5b:7b:ab:e5:1c:0b:a7:3b:e1:a8:90:d4:0f:dc:
                    ca:77:75:7a:ab:e8:79:0b:97:30:97:f4:ba:88:99:
                    0e:2c:05:2e:4d:85:59:44:c1:87:ed:85:8c:12:12:
                    db:01:4a:db:19:2d:08:5b:7a:6e:f7:f6:86:b8:b6:
                    0b:f7:32:8d:45:87:01:83:83:23:1b:23:57:16:87:
                    8a:b4:fe:3f:e0:c4:f7:a3:24:98:74:c9:6f:60:c3:
                    af:25:40:6a:e5:52:45:7f:f0:df:26:3c:d4:47:54:
                    29:06:bc:02:0b:87:c1:ec:63:d9:e6:0f:ae:b2:d9:
                    66:b2:8a:ea:39:4b:fc:51:e9:59:f3:0b:ce:5c:b8:
                    3b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E9:2B:8F:AF:7F:F0:8F:D0:91:86:7D:23:BC:6A:3F:98:67:06:8E
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130353a3a2f34382d3438203d3e20323138393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5105::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:28:17:34:2e:f9:9b:5d:c0:c1:92:d4:b4:87:d0:26:2c:f2:
         3a:40:47:0c:2f:b7:0b:71:39:18:9a:2c:a7:84:8b:6b:ec:7b:
         d5:e4:d4:0c:fa:3c:b0:7f:f9:67:8f:e9:17:e3:fd:e7:d0:3e:
         48:0e:d6:56:04:a8:54:3f:1b:77:cc:4b:fc:fc:23:c3:56:f2:
         f4:d6:1d:b7:84:ae:74:b6:9a:de:de:1f:59:98:f8:ae:e5:d5:
         51:08:e7:c3:8e:e0:35:71:85:f9:d5:70:bf:fd:d1:87:17:49:
         9a:a0:8a:40:43:94:a4:eb:28:9a:e1:ea:fb:ac:d1:3e:86:5b:
         af:20:84:04:5a:ad:fb:a8:58:48:eb:5f:e4:43:2c:14:8d:68:
         a3:f0:36:50:71:54:fe:64:90:f2:c1:89:10:34:8e:1b:12:b8:
         75:34:5a:74:bf:a8:a7:47:e9:86:1c:c1:ac:07:93:6c:61:1e:
         43:7b:c2:b3:75:30:24:53:6f:4d:f4:49:64:aa:3a:74:de:16:
         ce:21:1b:21:5f:2a:f8:ea:c9:ae:8c:11:92:81:87:81:13:bc:
         c5:fe:5b:7a:5e:8e:7f:f8:ad:9d:56:83:1d:ec:02:36:e1:06:
         4f:5c:43:64:4d:95:54:5a:61:be:df:8e:fe:64:66:b5:cf:ab:
         bc:b7:a1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:23:46 2026 by rpki-client