Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130373a3a2f34382d3438203d3e20323034343634.roa
File:                     326131343a373538313a353130373a3a2f34382d3438203d3e20323034343634.roa (raw, json)
Hash identifier:          SsOX0qoFIb709iCwPRjJjlZ0OYpl8HiBwejIOSUvxAs=
Subject key identifier:   2A:59:CA:C3:25:2B:80:BC:26:37:1F:C6:20:43:A5:35:14:B7:75:BB
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       690595CC000D40E59E16BECC0E6ED1D12BA4ADC2
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130373a3a2f34382d3438203d3e20323034343634.roa
Signing time:             Thu 29 Oct 2026 22:09:40 +0000
ROA not before:           Thu 29 Oct 2026 22:04:40 +0000
ROA not after:            Thu 28 Oct 2027 22:09:40 +0000
asID:                     204464
IP address blocks:        2a14:7581:5107::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:05:95:cc:00:0d:40:e5:9e:16:be:cc:0e:6e:d1:d1:2b:a4:ad:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:40 2026 GMT
            Not After : Oct 28 22:09:40 2027 GMT
        Subject: CN=2A59CAC3252B80BC26371FC62043A53514B775BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e0:ef:41:d3:92:ff:21:f5:a0:55:de:bc:dd:
                    48:ea:5c:a7:b5:4f:ca:30:e5:87:0b:ab:e7:35:95:
                    ee:2a:5d:68:c9:e2:a0:b1:5d:d3:ce:47:32:53:14:
                    2a:fb:33:fb:8c:c5:43:71:ec:79:b9:b1:5c:6e:35:
                    07:2b:1a:cb:b3:56:34:09:8b:d5:ee:4c:58:99:6e:
                    16:6f:8d:1e:5f:f5:03:b2:9f:d4:db:a3:60:27:ab:
                    18:c2:70:6f:43:bb:c2:3e:8e:48:53:fe:b4:2e:92:
                    7f:c4:50:bb:c0:25:a3:ce:ef:1b:ab:bc:35:34:50:
                    20:81:7e:71:5d:c9:83:9a:d0:0c:a4:97:2d:66:e2:
                    63:f1:9b:33:ec:aa:1f:af:c7:9a:2e:c2:ee:55:8f:
                    f5:af:fa:eb:35:e2:a2:e9:d5:da:4a:eb:43:a2:d1:
                    02:f5:19:2c:a3:c7:74:f5:7b:87:06:a4:f6:68:88:
                    16:9c:cd:36:17:07:bc:81:ca:66:e4:d9:cc:9d:95:
                    7d:72:94:e0:3c:40:00:f0:52:82:2f:46:7c:69:dd:
                    63:dc:11:42:af:0b:8f:30:35:2f:f8:84:5a:1b:69:
                    81:3e:16:cc:f9:91:47:2b:e0:26:52:ea:da:fe:61:
                    df:e2:17:57:c2:1c:37:b5:f3:74:5e:39:64:d7:55:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:59:CA:C3:25:2B:80:BC:26:37:1F:C6:20:43:A5:35:14:B7:75:BB
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130373a3a2f34382d3438203d3e20323034343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5107::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:33:35:ad:e1:cb:dd:08:ba:74:d8:7e:4e:3d:c4:10:54:92:
         29:b6:6c:3c:56:23:27:6d:5b:45:41:73:df:2b:2e:c8:2f:06:
         d0:d6:58:ab:0a:e0:ae:fa:77:70:88:f3:1b:10:b3:ae:9a:7f:
         9e:62:fe:25:b2:3c:f0:e3:32:72:d8:5a:71:af:d6:f5:d1:bb:
         46:bf:a3:27:e9:9b:e2:2a:6e:5e:d5:6e:99:bf:11:a1:5c:03:
         98:d9:ca:a9:49:39:b7:d1:d2:20:b1:69:a8:01:dd:37:3b:db:
         ac:38:57:2d:fc:9d:ae:46:0a:a2:4d:31:2f:04:6e:fc:3c:04:
         f2:d2:f7:5f:ca:22:a8:76:b5:38:53:ab:df:d3:06:6e:6b:c1:
         48:48:fc:7c:03:ad:28:7b:50:fb:68:b2:47:12:80:20:46:09:
         4a:35:73:00:b8:57:26:10:a8:3a:92:77:cc:18:42:35:74:4c:
         41:e8:89:6a:7c:61:5a:4c:a4:6f:21:6f:2c:8b:89:96:94:2c:
         46:ce:e1:66:49:d3:2d:b7:7f:2f:ab:c7:a8:df:82:1f:7b:1c:
         3d:07:e9:69:81:74:4a:d0:fb:d8:a2:a1:da:36:02:51:ab:0b:
         f0:94:3b:1c:11:76:4b:ed:6e:ba:4b:e7:c7:26:4c:d6:32:bc:
         ce:bb:5a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:21:10 2026 by rpki-client