
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131343a3a2f34382d3438203d3e20323030393132.roa
File: 326131343a373538313a353131343a3a2f34382d3438203d3e20323030393132.roa (raw, json)
Hash identifier: u9NPjaT+eG5W3PvOHYzmmtswSuuMN4Q8nVGnBbcPAAE=
Subject key identifier: 45:51:06:8C:25:C1:32:71:41:AE:E4:0F:26:2F:97:85:8E:E6:B0:2F
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 4C2F3AFC9B706350C061EE1B688B64978D677016
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131343a3a2f34382d3438203d3e20323030393132.roa
Signing time: Thu 29 Oct 2026 22:09:50 +0000
ROA not before: Thu 29 Oct 2026 22:04:50 +0000
ROA not after: Thu 28 Oct 2027 22:09:50 +0000
asID: 200912
IP address blocks: 2a14:7581:5114::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:2f:3a:fc:9b:70:63:50:c0:61:ee:1b:68:8b:64:97:8d:67:70:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Oct 29 22:04:50 2026 GMT
Not After : Oct 28 22:09:50 2027 GMT
Subject: CN=4551068C25C1327141AEE40F262F97858EE6B02F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:48:71:89:82:22:84:0c:c0:fe:d7:a8:9b:0e:
74:c7:8c:3f:4a:2c:c8:17:25:b8:44:98:4c:74:3d:
1b:33:1d:ea:d3:de:d5:42:6e:0b:a9:d6:83:8a:82:
86:f8:d8:83:93:6b:59:fe:2a:f6:f2:a5:d5:bb:6d:
fb:23:b4:87:59:68:63:cd:5d:f9:db:82:55:bb:0a:
c8:f4:fd:9d:ea:d1:97:a9:bf:25:f0:80:db:d3:cb:
ab:a3:6d:d9:4b:a6:71:a3:a9:0c:d5:87:4f:3a:cc:
2e:4f:19:ef:5a:b9:89:63:57:63:a9:68:1f:d2:3e:
9b:24:f8:8c:ee:0d:de:6c:44:a6:b5:c4:32:61:67:
ad:cc:be:5d:a3:c7:2e:f6:1a:4f:ad:40:70:d1:b7:
03:4c:11:82:32:b1:f6:a7:52:c1:e4:d8:bd:47:e7:
ce:93:42:b6:ea:44:45:c2:c6:80:82:fb:86:bb:7c:
4e:31:17:c4:83:33:aa:09:d0:a7:4d:fd:9e:a8:fc:
72:7d:a0:3f:6b:d7:bb:89:82:50:b6:ea:70:ef:76:
b3:35:38:48:56:7b:f4:9e:c4:55:7a:e3:21:6f:00:
1b:ff:7f:f8:9e:00:66:3e:6e:f9:42:63:c4:9e:d5:
09:1f:8e:52:36:df:41:df:76:6b:3a:a6:c3:4f:d7:
c2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:51:06:8C:25:C1:32:71:41:AE:E4:0F:26:2F:97:85:8E:E6:B0:2F
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131343a3a2f34382d3438203d3e20323030393132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5114::/48
Signature Algorithm: sha256WithRSAEncryption
03:88:92:0c:63:a5:45:90:d9:f3:fc:e4:ee:07:97:bb:9c:b0:
68:71:0f:10:f7:2e:fc:02:63:a9:33:5a:17:47:3a:76:50:d6:
59:99:ae:28:92:dc:17:2c:f0:f5:df:86:0d:39:28:a2:13:e2:
c9:e1:6c:5b:32:4c:ed:75:9b:fc:40:fa:ca:9a:90:0b:85:c7:
bf:d2:e8:c0:fc:b1:7d:bf:c5:eb:09:86:47:01:62:02:3d:8b:
9d:24:15:ab:f3:54:94:71:f8:f2:be:ac:76:f4:21:0c:0f:32:
db:02:1b:3e:31:9a:3a:8c:5a:21:98:2b:47:5b:66:d5:70:0f:
f4:b8:5d:ff:a1:97:57:9e:a0:d8:1e:e3:69:30:55:e3:d8:65:
46:24:13:1f:ad:75:94:01:a7:e4:3c:be:5a:d2:f4:28:2e:fb:
d0:6a:3b:47:10:c8:5f:72:9c:fc:d7:ef:34:20:f6:b6:dc:7a:
41:57:d3:56:43:10:d4:23:27:df:69:e5:20:17:14:dc:29:c9:
47:6a:3c:89:9c:37:1c:db:47:78:7d:cc:4c:06:70:a6:68:f4:
1f:d4:bb:7b:c3:b5:68:87:71:9e:33:ce:60:7e:b9:ba:ac:69:
13:2f:df:da:06:c2:e0:73:88:0f:24:1d:27:1e:32:51:14:66:
80:a7:b8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:31 2026 by rpki-client