Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131393a3a2f34382d3438203d3e20313937383036.roa
File:                     326131343a373538313a353131393a3a2f34382d3438203d3e20313937383036.roa (raw, json)
Hash identifier:          kyo1ljD2WbRycO0z9WVwUvgQGUOQ3OXtXh1OGmBKXus=
Subject key identifier:   14:2D:A2:19:CC:EE:6B:3B:6F:7D:DF:A0:77:03:EA:70:E7:5E:27:D6
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       7504D79D66FC0129FC000FFFF261059E8419AED2
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131393a3a2f34382d3438203d3e20313937383036.roa
Signing time:             Thu 29 Oct 2026 22:09:38 +0000
ROA not before:           Thu 29 Oct 2026 22:04:38 +0000
ROA not after:            Thu 28 Oct 2027 22:09:38 +0000
asID:                     197806
IP address blocks:        2a14:7581:5119::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:04:d7:9d:66:fc:01:29:fc:00:0f:ff:f2:61:05:9e:84:19:ae:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:38 2026 GMT
            Not After : Oct 28 22:09:38 2027 GMT
        Subject: CN=142DA219CCEE6B3B6F7DDFA07703EA70E75E27D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fd:b1:36:f6:42:32:2e:7b:97:51:c9:31:a2:
                    8e:35:5e:59:1d:7a:f2:91:33:14:ed:99:01:b4:49:
                    8a:8b:1e:8e:8b:57:34:cf:32:ce:f5:3f:57:a5:ae:
                    cd:24:86:3d:dc:90:65:4c:de:86:18:39:d9:bd:4f:
                    29:f5:52:33:0c:a5:d2:c2:75:e1:95:3a:58:bb:a8:
                    b7:e2:7f:ef:ef:44:a3:67:fc:a2:e2:4c:eb:76:65:
                    8c:ab:0d:aa:7c:a6:5c:d1:07:ec:c5:ca:c1:bf:43:
                    08:16:4c:13:4d:ba:b5:01:cd:ae:75:05:5c:c1:ed:
                    72:35:7d:37:47:12:db:1a:37:4d:fa:ca:cb:ea:99:
                    9f:3d:5a:b7:d3:0a:3a:e4:06:73:3c:c1:ba:be:73:
                    09:d3:09:53:fc:bf:fe:80:db:aa:c0:45:b8:48:fd:
                    4e:f5:c4:6b:a6:86:d3:cb:b0:89:a5:d0:86:58:a8:
                    e6:48:0c:f2:57:a9:dd:1d:6e:ec:f7:ac:9d:5e:78:
                    05:0a:c5:f4:f1:dc:f9:37:ef:c6:eb:3b:4f:ee:a4:
                    ab:57:be:02:07:38:29:bf:86:c8:71:e4:5b:05:7c:
                    33:7f:76:bc:f7:b4:7d:1f:59:1a:80:c4:b6:81:a5:
                    6f:0b:d1:24:0b:65:ad:ee:c4:d7:42:e8:d8:48:7a:
                    83:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2D:A2:19:CC:EE:6B:3B:6F:7D:DF:A0:77:03:EA:70:E7:5E:27:D6
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131393a3a2f34382d3438203d3e20313937383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5119::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:75:86:26:d2:60:59:ca:93:63:f4:ff:0b:6c:d1:b5:a5:cf:
         01:a6:8c:18:61:2b:c8:23:8b:29:b1:0e:fc:ee:ae:42:9e:9c:
         05:4a:85:7c:fc:5b:63:12:5c:9a:6b:76:75:0f:28:db:d4:eb:
         4c:ed:f2:78:e1:ab:4b:5b:37:93:c9:14:f4:c9:ae:c9:ef:25:
         49:c3:9f:12:ed:e8:45:df:e4:18:77:f7:36:a4:da:d4:c0:02:
         68:a5:a8:6c:0a:f9:28:db:f5:87:c1:39:94:ed:11:b6:3a:6a:
         b0:39:78:3a:68:40:42:39:07:53:14:a3:cb:10:65:fd:f7:a3:
         71:11:f4:a3:b5:20:28:ca:a1:87:4a:1d:57:58:8e:ad:e4:c7:
         a5:29:cb:9c:cf:80:28:4a:d7:26:19:b8:ec:fe:a9:97:57:61:
         32:fc:69:78:0c:c0:02:4a:ce:6f:cc:a1:57:9f:d8:24:5f:da:
         5e:4d:6c:a0:50:97:9f:0b:30:94:4d:33:6a:16:ec:3f:e6:08:
         ae:30:dc:9f:74:ba:ee:a6:b1:a0:fa:7f:5e:f9:dc:c7:22:88:
         de:59:28:06:68:71:2d:4a:9f:90:ec:b4:1c:8a:30:60:88:a0:
         10:95:e6:71:5e:bb:9e:a9:c9:7c:36:13:27:73:09:11:b6:0c:
         90:b7:04:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:35:56 2026 by rpki-client