Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131383a3a2f34382d3438203d3e20323134373632.roa
File:                     326131343a373538313a353131383a3a2f34382d3438203d3e20323134373632.roa (raw, json)
Hash identifier:          nq1Q81cRa8H4lkp16mVu8E2Fky6VJKAcrFELCfpEkbk=
Subject key identifier:   A9:74:2B:F8:CD:24:0C:9A:E3:90:AE:BA:41:D8:FB:F0:DA:76:B9:BF
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       2B18BBA7682A39503262DD03C94F1C6E7AD44A43
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131383a3a2f34382d3438203d3e20323134373632.roa
Signing time:             Thu 29 Oct 2026 22:09:33 +0000
ROA not before:           Thu 29 Oct 2026 22:04:33 +0000
ROA not after:            Thu 28 Oct 2027 22:09:33 +0000
asID:                     214762
IP address blocks:        2a14:7581:5118::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:18:bb:a7:68:2a:39:50:32:62:dd:03:c9:4f:1c:6e:7a:d4:4a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:33 2026 GMT
            Not After : Oct 28 22:09:33 2027 GMT
        Subject: CN=A9742BF8CD240C9AE390AEBA41D8FBF0DA76B9BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:99:5c:cb:aa:1f:ad:c5:02:5b:21:7d:15:
                    dd:06:33:8d:29:41:5c:0a:b8:90:f9:5f:5a:74:c3:
                    16:68:9d:7c:89:e9:d7:2d:6c:04:87:b7:ab:14:01:
                    ba:f2:ac:14:46:53:89:72:92:e4:8f:dd:9d:ed:72:
                    7f:0f:66:6e:6a:b7:4e:b8:0b:04:d6:a4:40:89:62:
                    6d:9b:7d:fa:cb:7a:20:bb:51:98:35:f2:7e:13:e6:
                    b7:3a:d4:b1:ad:fe:ab:55:be:f7:e7:f2:bb:1d:bb:
                    94:3c:75:99:17:b5:9e:1c:3f:86:31:e0:92:e3:14:
                    aa:6c:01:19:5e:a0:cd:30:1f:04:47:41:7c:c5:be:
                    ec:2a:6f:4a:a5:80:11:f0:07:f3:87:b7:89:b7:c6:
                    a7:ae:7a:6e:cc:f6:d2:0b:d3:97:56:9c:f8:71:2f:
                    63:43:26:57:12:93:96:16:ec:a2:8e:d2:bd:1a:72:
                    c2:80:bc:98:42:c1:bb:8a:d7:33:d1:0f:71:90:c4:
                    b6:72:d2:32:0a:89:30:b4:b8:b9:dd:7c:26:11:c6:
                    79:68:c3:dc:f7:63:77:60:45:fa:e3:83:a5:cb:d2:
                    a7:a1:f9:6f:60:6d:23:10:c4:84:bd:e8:69:de:d2:
                    19:fa:9b:2a:9a:8d:7c:ea:2c:bb:5c:23:ed:4c:25:
                    30:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:74:2B:F8:CD:24:0C:9A:E3:90:AE:BA:41:D8:FB:F0:DA:76:B9:BF
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131383a3a2f34382d3438203d3e20323134373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5118::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:de:2e:64:bc:33:cb:34:ff:2b:37:22:7e:6e:0a:27:83:8d:
         86:8b:af:6f:29:d6:db:68:c2:c8:a9:b1:ea:a8:f7:26:eb:58:
         b5:ba:11:9d:4a:43:d2:17:ca:7d:ca:b2:dd:93:e1:5f:7a:1d:
         ec:b2:82:d9:af:96:c9:c6:f9:73:94:2a:a9:b7:8c:ff:c4:cf:
         49:16:27:39:34:2f:19:46:69:51:76:b5:bd:9f:ef:f6:10:a4:
         2a:7a:24:a8:3b:6a:d3:97:af:9f:e2:5f:04:93:8a:65:46:37:
         3e:58:a0:11:28:25:40:a5:80:4a:4f:e8:57:cc:21:ec:71:c2:
         8c:20:94:15:1f:79:b5:27:bf:0d:61:5f:b0:0b:a4:61:99:ec:
         d3:87:b3:36:0f:94:91:e7:86:16:37:a0:b7:78:7c:4a:fe:e4:
         a2:a4:aa:60:10:78:fa:c2:3c:e1:a6:05:f8:1f:8c:df:90:a3:
         a0:ee:61:c1:c3:42:60:08:1d:16:3c:87:68:6b:f5:dc:89:a9:
         18:9d:d7:76:4b:9f:38:4a:b4:ef:ad:5c:3b:0d:87:9b:ae:ff:
         6b:72:63:bb:90:d8:c0:2e:7f:a8:ef:76:36:ce:d7:95:f4:f3:
         af:e1:fd:bf:15:7b:c1:b8:de:cf:7d:51:b3:20:2a:7d:f2:54:
         73:48:cc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:06:08 2026 by rpki-client