Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130383a3a2f34382d3438203d3e20323134303333.roa
File:                     326131343a373538313a353130383a3a2f34382d3438203d3e20323134303333.roa (raw, json)
Hash identifier:          6nOq5Ot/TY+VLGz/v5go6B/Mlz/23dFuIV9oxl0GdJA=
Subject key identifier:   6B:BA:B9:2E:71:75:76:A8:83:C5:94:9E:5B:13:6E:62:3E:45:DD:05
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       61D38B2A43F35099AF8131C74003639DD921AB2D
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130383a3a2f34382d3438203d3e20323134303333.roa
Signing time:             Thu 29 Oct 2026 22:09:28 +0000
ROA not before:           Thu 29 Oct 2026 22:04:28 +0000
ROA not after:            Thu 28 Oct 2027 22:09:28 +0000
asID:                     214033
IP address blocks:        2a14:7581:5108::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d3:8b:2a:43:f3:50:99:af:81:31:c7:40:03:63:9d:d9:21:ab:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:28 2026 GMT
            Not After : Oct 28 22:09:28 2027 GMT
        Subject: CN=6BBAB92E717576A883C5949E5B136E623E45DD05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9f:48:d2:c6:80:18:91:f7:ff:9c:a3:ed:4b:
                    66:ef:c1:95:9f:2a:72:79:75:e4:0d:a2:49:74:38:
                    f4:72:4b:22:42:a6:64:8e:95:39:b1:32:a3:eb:ff:
                    57:7a:7d:a9:ea:7d:4a:5f:e3:5f:df:9e:fa:4d:23:
                    e3:29:17:12:5d:4b:f1:3a:61:db:00:08:e2:1f:75:
                    6d:ff:6e:10:b1:ff:6a:87:3b:96:0b:56:bb:d7:b0:
                    13:a0:98:54:bb:3e:94:68:42:d1:b2:0c:26:a4:35:
                    88:db:1c:b3:86:b0:a2:d3:8d:e3:99:f1:f3:c8:92:
                    d5:32:97:4e:03:71:eb:f9:2c:8a:86:5f:59:6a:11:
                    1c:f4:7a:a9:75:41:8e:3b:7e:9f:d7:6d:74:aa:1d:
                    0c:90:61:d7:2c:61:ca:f3:cf:a5:68:03:fe:44:5f:
                    d5:6d:e4:10:92:ec:f1:07:1c:66:44:63:a2:bf:b2:
                    25:7b:94:26:3c:6f:ef:5b:82:c4:04:48:88:56:80:
                    3a:8a:0d:36:77:a9:e8:7a:a6:fe:5b:cd:f8:79:0a:
                    2e:f5:1e:ae:98:fd:98:4d:28:85:38:4a:77:ba:0b:
                    bc:c4:88:0a:0f:2e:0b:d8:6a:22:2b:3b:2b:47:97:
                    5c:3c:73:a5:58:0a:4f:ee:80:77:f4:b5:f3:e0:34:
                    03:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BA:B9:2E:71:75:76:A8:83:C5:94:9E:5B:13:6E:62:3E:45:DD:05
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353130383a3a2f34382d3438203d3e20323134303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5108::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:f3:b9:ac:4f:7a:22:57:0c:ea:ad:8b:c5:48:f7:64:69:ab:
         30:f5:42:b5:2c:d0:30:7a:34:87:72:0e:9f:7e:84:49:83:0b:
         68:47:3c:8c:c0:af:ce:9c:d6:c5:af:36:8f:c1:e8:0d:00:da:
         95:81:77:18:eb:e1:f0:5e:a6:c1:7e:5b:ad:ee:0c:17:21:cb:
         76:70:f6:a6:d1:63:82:e4:2a:d5:b0:1f:5d:04:63:03:cc:e0:
         8c:ca:ab:38:e2:a4:24:60:6a:ad:90:6e:97:0e:7f:1d:e8:0f:
         8a:80:5f:0b:02:b9:c7:41:2e:9c:bd:0f:82:9d:fb:97:6f:d1:
         0d:dd:e3:01:bf:6f:89:cd:dd:f8:52:60:77:16:26:9d:b5:a4:
         91:93:91:0d:99:9a:a6:4b:99:b3:6f:ce:21:0a:54:46:17:1c:
         f8:ee:c8:eb:f8:86:29:82:c6:58:78:b7:05:6d:19:22:78:5d:
         85:b0:b8:2f:11:7f:26:3e:d5:09:97:e6:c8:28:18:ef:f7:03:
         e5:be:45:b0:5d:e1:9f:47:f7:95:2b:85:85:24:41:e5:45:44:
         71:19:6a:6b:dc:31:64:fe:39:34:1d:d9:c2:0b:56:0e:c8:20:
         7d:71:a1:96:78:87:09:8a:1d:27:d8:e0:a5:a3:a7:10:ca:9d:
         fc:fb:85:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:26:52 2026 by rpki-client