Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131333a3a2f34382d3438203d3e20323030393132.roa
File:                     326131343a373538313a353131333a3a2f34382d3438203d3e20323030393132.roa (raw, json)
Hash identifier:          eJwq3+3sd3vtfSMSdjU6kw1iNP/3mNXu4/mmnvAomIA=
Subject key identifier:   E8:D0:F4:E6:DB:4F:C7:7B:5B:F3:6E:A5:9E:44:12:11:4A:9A:17:BA
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       574847ADB9D3C202A436DF4DFE82498C1CD2D757
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131333a3a2f34382d3438203d3e20323030393132.roa
Signing time:             Thu 29 Oct 2026 22:09:39 +0000
ROA not before:           Thu 29 Oct 2026 22:04:39 +0000
ROA not after:            Thu 28 Oct 2027 22:09:39 +0000
asID:                     200912
IP address blocks:        2a14:7581:5113::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:48:47:ad:b9:d3:c2:02:a4:36:df:4d:fe:82:49:8c:1c:d2:d7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:39 2026 GMT
            Not After : Oct 28 22:09:39 2027 GMT
        Subject: CN=E8D0F4E6DB4FC77B5BF36EA59E4412114A9A17BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:26:d2:e4:d4:67:49:ff:46:66:df:5d:d3:
                    02:95:be:ad:14:16:99:18:0e:97:4f:19:5c:01:95:
                    1e:b0:4a:e1:15:2e:44:e4:86:3e:af:7b:f2:e2:e1:
                    a5:67:17:42:aa:33:90:e3:34:0b:b2:d1:14:3a:4b:
                    f9:81:a7:8c:34:94:d0:e0:03:b9:77:cd:86:1b:62:
                    f1:85:20:b5:7b:9a:e2:74:a1:3a:41:d4:e2:c3:e4:
                    07:40:95:45:da:80:ec:d9:7c:1c:d4:d0:ec:d8:60:
                    2e:16:eb:4a:98:59:b9:06:05:f0:fa:87:92:35:c0:
                    87:86:f4:dd:df:49:9b:2c:3e:98:db:52:43:a7:c6:
                    1c:fc:02:bd:0f:c0:9f:49:19:7c:9d:d8:da:09:83:
                    00:41:c4:67:c8:fd:37:76:e9:18:f8:22:3f:33:19:
                    20:0b:91:8c:48:a4:cf:f4:91:23:9c:bf:04:00:14:
                    18:1a:fb:20:d7:f1:29:b5:d9:18:57:53:98:af:dc:
                    75:10:6e:74:bd:b8:5a:fb:dc:f4:bd:9f:5f:2d:f4:
                    ac:98:1f:c8:6d:99:4c:88:9c:8f:37:c4:ab:f1:ef:
                    c1:39:66:f5:42:b5:e3:3b:cc:6d:03:fd:91:8e:40:
                    25:b1:35:f7:3a:20:c7:03:d7:ae:1c:62:c3:e3:7e:
                    6f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D0:F4:E6:DB:4F:C7:7B:5B:F3:6E:A5:9E:44:12:11:4A:9A:17:BA
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131333a3a2f34382d3438203d3e20323030393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5113::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:81:97:4f:a6:31:23:73:8c:1a:02:83:2f:91:e1:bd:12:da:
         1c:7c:8c:fe:52:58:78:0e:61:48:3a:0d:8d:ec:32:d2:9e:99:
         cd:f3:dc:c2:8a:82:0f:99:5e:96:80:d6:fc:11:b1:51:a8:a8:
         97:14:97:02:85:48:35:3d:1a:0a:b2:f2:e4:ef:fe:c0:33:1e:
         b6:dc:33:82:d0:bc:10:0e:0d:ae:2d:a1:70:a2:4e:18:3f:0a:
         f9:aa:a2:30:3b:b5:5d:ed:87:4e:c9:d1:9f:ec:37:d3:3f:ee:
         36:8a:e0:b6:d8:2b:b0:a2:90:42:bc:57:e6:0a:f0:56:be:b7:
         77:4e:ac:a3:db:4b:c2:fc:b6:91:b8:b1:8f:27:4f:7d:e8:6d:
         82:08:40:60:38:85:1d:9b:99:2f:f6:cb:64:90:57:a1:81:2e:
         0f:f7:6a:33:96:64:e4:8d:4a:f6:1a:15:3a:75:bc:13:56:7a:
         9d:d1:80:5b:d7:26:1c:85:96:10:a3:b1:11:f3:d8:1d:1b:bb:
         53:65:4a:6d:b8:d4:6f:26:21:6a:7b:d4:01:83:7e:8b:69:8f:
         83:73:73:66:2c:65:b2:9f:c5:45:af:0b:3f:4b:fd:58:cd:65:
         57:ac:9b:91:db:24:d9:02:49:69:b1:ae:f0:b1:c3:3f:1e:c5:
         28:b8:fc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:41:04 2026 by rpki-client