
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131373a3a2f34382d3438203d3e20323134373632.roa
File: 326131343a373538313a353131373a3a2f34382d3438203d3e20323134373632.roa (raw, json)
Hash identifier: 637WlN+JuS9D4p6CnFtpY9iZvLAclk0XE/lBDU5itIw=
Subject key identifier: 1C:A3:24:6E:6B:EB:36:E1:74:FC:AD:C5:4A:CD:FC:8A:1F:D5:0F:C6
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 10C89449D0C5684F8AB0BD66C675D5760F297D0E
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131373a3a2f34382d3438203d3e20323134373632.roa
Signing time: Thu 29 Oct 2026 22:09:35 +0000
ROA not before: Thu 29 Oct 2026 22:04:35 +0000
ROA not after: Thu 28 Oct 2027 22:09:35 +0000
asID: 214762
IP address blocks: 2a14:7581:5117::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c8:94:49:d0:c5:68:4f:8a:b0:bd:66:c6:75:d5:76:0f:29:7d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Oct 29 22:04:35 2026 GMT
Not After : Oct 28 22:09:35 2027 GMT
Subject: CN=1CA3246E6BEB36E174FCADC54ACDFC8A1FD50FC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:85:7c:41:17:4d:57:8e:32:f4:69:ba:49:
99:4e:88:d6:e5:49:25:3c:9d:7f:7d:27:e7:4d:bf:
c0:2f:26:4e:39:64:aa:0b:af:64:c2:51:d8:62:fc:
bf:77:fb:4d:09:fd:17:f2:99:b1:d1:d5:eb:43:d5:
4a:94:07:53:47:d4:8e:53:ab:b6:f6:48:17:de:37:
0b:94:a9:0e:e0:5f:79:c7:16:f8:b3:42:45:25:43:
d3:aa:33:6a:8a:3f:83:68:af:44:88:50:fc:b8:1b:
f1:02:06:f3:92:ac:7a:eb:d2:91:17:8b:3f:0c:eb:
6f:73:fd:91:3d:6e:03:7d:20:ce:99:03:0a:e9:b1:
b1:8e:e8:ec:e4:51:5b:e3:9d:38:aa:c3:ed:a7:3f:
38:9c:99:a3:8e:ad:25:73:e8:1b:1a:8c:b4:47:d3:
48:ea:84:e9:25:51:4b:50:8e:a9:5d:a1:72:09:57:
0b:34:45:b8:6a:97:1d:11:60:57:11:b9:e0:80:3e:
ff:3a:f4:e8:9e:c3:1f:5d:45:17:56:3d:f1:82:36:
ce:f2:a5:36:e9:ea:76:49:c2:5d:4c:fd:32:7e:f3:
b8:72:6d:a1:c4:72:9c:79:6f:d4:83:ab:5d:f1:96:
c8:96:30:04:eb:80:e0:84:c9:a2:0f:41:65:e3:8b:
5d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A3:24:6E:6B:EB:36:E1:74:FC:AD:C5:4A:CD:FC:8A:1F:D5:0F:C6
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131373a3a2f34382d3438203d3e20323134373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5117::/48
Signature Algorithm: sha256WithRSAEncryption
87:66:c0:c0:7d:0a:d0:dd:f8:a4:f5:3c:29:39:03:36:68:de:
e2:6d:e2:3b:17:f6:5a:ee:f4:39:59:69:c8:d4:40:44:86:89:
39:a8:53:e5:65:f6:6a:1c:97:24:0a:49:f8:69:ba:e9:1f:19:
f5:ff:98:55:e9:28:41:bd:38:c0:ec:d1:f4:4f:51:53:7d:30:
f5:b2:62:85:f3:7a:eb:83:50:52:59:91:1e:e9:87:c5:90:66:
67:b4:4a:7d:7f:57:f3:0d:01:0a:29:f3:26:72:8e:dd:1d:8f:
3e:03:e9:18:81:8b:96:f4:c0:79:dc:c3:94:06:b7:f0:f1:38:
f2:05:10:d5:8c:31:36:c0:fd:e0:6f:5d:fb:cd:14:98:d0:00:
15:bb:5f:3e:f5:a8:08:e2:f1:a3:45:f4:97:f0:49:02:eb:11:
c3:51:f9:e4:81:12:67:9c:10:e8:40:83:d8:0b:9a:87:5b:81:
c7:e7:5c:7f:b6:57:81:90:7d:33:6b:b8:91:54:ce:86:f3:4c:
5e:7a:d0:ab:02:ca:f5:09:22:1f:7b:eb:ec:11:82:30:cc:98:
2e:73:b1:6e:a1:62:19:fb:77:3f:04:4a:f0:98:c0:3a:ab:00:
ad:34:27:e9:74:00:fc:a7:f6:90:70:5f:4a:c4:39:e1:c7:be:
74:8f:09:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:40:45 2026 by rpki-client