Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131363a3a2f34382d3438203d3e20323134373632.roa
File:                     326131343a373538313a353131363a3a2f34382d3438203d3e20323134373632.roa (raw, json)
Hash identifier:          p9s/IW8aJ+m6sEWbZZDJOpbUhUBD5qDO0i1UEmSvsmQ=
Subject key identifier:   CB:F5:C6:84:B9:93:6E:87:1B:17:F7:F2:83:E8:58:64:D3:59:5E:65
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       449ED291845E072A23889C479F28B5D2B58A3F27
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131363a3a2f34382d3438203d3e20323134373632.roa
Signing time:             Thu 29 Oct 2026 22:09:29 +0000
ROA not before:           Thu 29 Oct 2026 22:04:29 +0000
ROA not after:            Thu 28 Oct 2027 22:09:29 +0000
asID:                     214762
IP address blocks:        2a14:7581:5116::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9e:d2:91:84:5e:07:2a:23:88:9c:47:9f:28:b5:d2:b5:8a:3f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:29 2026 GMT
            Not After : Oct 28 22:09:29 2027 GMT
        Subject: CN=CBF5C684B9936E871B17F7F283E85864D3595E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:a9:37:39:76:29:c8:f4:73:c4:5e:e0:9b:
                    45:0d:f6:7e:ab:e0:ed:06:a7:d7:55:01:a4:28:f6:
                    ea:34:fc:e0:9d:29:8d:fd:fe:eb:e9:7f:12:26:8b:
                    71:76:6c:73:8c:48:a2:2a:4b:59:7c:c4:eb:cc:71:
                    a7:8b:76:68:e9:8f:8d:c9:3b:13:6c:12:fc:5f:d5:
                    02:58:ff:ba:af:6e:9a:cd:f5:2a:8d:b6:75:04:50:
                    d5:57:94:ca:92:6b:27:4b:1e:36:db:0a:ac:fe:59:
                    58:bb:9f:a2:e4:88:18:fa:8e:7e:bc:5e:67:3a:e0:
                    f6:e8:01:96:30:3a:9e:21:ee:45:47:e8:98:cb:48:
                    a9:50:ca:cb:2a:44:44:ec:60:b7:85:98:54:39:ef:
                    d9:71:08:f1:41:c3:20:6f:d6:91:99:88:d9:d9:e0:
                    ed:86:b2:8d:91:db:0d:e9:b9:b2:fa:10:40:0b:b2:
                    85:6e:7c:30:f8:88:36:ab:cc:a9:35:dc:84:50:c7:
                    22:fe:d9:fa:ab:2f:85:a9:70:ff:35:f1:73:e5:25:
                    33:6c:1d:a7:9c:03:78:68:51:c5:fa:20:a7:d2:86:
                    ae:0c:17:0d:a6:6d:4f:52:35:2e:da:f5:f9:98:f3:
                    6c:ca:a5:82:30:de:7f:37:b8:9b:89:11:00:6d:b4:
                    69:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F5:C6:84:B9:93:6E:87:1B:17:F7:F2:83:E8:58:64:D3:59:5E:65
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131363a3a2f34382d3438203d3e20323134373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5116::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:93:c2:57:f1:ce:d0:d4:26:65:90:72:b9:10:80:b3:47:20:
         60:22:12:1c:19:eb:f5:dc:f3:13:36:33:6a:01:9a:61:b7:fb:
         f9:42:21:4b:de:00:5b:6a:24:97:dc:20:0d:7d:ef:3a:4a:31:
         3d:69:96:95:43:f4:3d:38:4b:3f:35:df:4e:02:0f:b4:04:12:
         ca:fb:9e:ae:63:85:5e:1f:a5:08:8d:f6:84:22:6b:be:e4:2b:
         ca:78:63:17:4b:fd:dc:47:c0:d7:b8:15:38:83:16:f7:4d:7d:
         81:d2:67:03:79:16:be:93:d4:cc:00:30:10:b7:5d:0f:cc:66:
         7b:a4:07:1b:03:2b:26:9a:49:30:1e:6b:45:3e:be:b4:d3:91:
         80:d7:33:42:23:ce:2b:b9:b3:86:69:73:33:23:4a:98:02:3d:
         af:d0:97:e8:59:ce:35:cf:b1:a8:f3:09:05:a4:70:af:e4:b0:
         37:28:8b:1a:63:5b:45:15:21:62:b5:6b:a6:30:4f:3d:80:c5:
         36:0f:d8:9c:d9:27:4c:40:f3:35:58:db:97:fe:23:de:aa:08:
         cc:3c:d6:ae:45:e5:66:30:3d:8b:8f:65:d9:9c:ce:d6:9e:cf:
         b8:00:9b:d8:a7:19:33:b8:7b:99:78:26:90:b6:2b:ad:40:8c:
         3c:01:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:01:15 2026 by rpki-client