Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131613a3a2f34382d3438203d3e20313937383036.roa
File:                     326131343a373538313a353131613a3a2f34382d3438203d3e20313937383036.roa (raw, json)
Hash identifier:          7eIL1L44n8i2H8cRt95dGP59PoelPcPqs7iELJHz5eQ=
Subject key identifier:   1B:5B:7F:6D:78:6A:A5:06:2A:97:1D:D3:20:D8:2C:6A:6A:86:E3:78
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       58113A5D5E7B32D5A2335823E4231A4E79CEE11A
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131613a3a2f34382d3438203d3e20313937383036.roa
Signing time:             Thu 29 Oct 2026 22:09:42 +0000
ROA not before:           Thu 29 Oct 2026 22:04:42 +0000
ROA not after:            Thu 28 Oct 2027 22:09:42 +0000
asID:                     197806
IP address blocks:        2a14:7581:511a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:11:3a:5d:5e:7b:32:d5:a2:33:58:23:e4:23:1a:4e:79:ce:e1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:42 2026 GMT
            Not After : Oct 28 22:09:42 2027 GMT
        Subject: CN=1B5B7F6D786AA5062A971DD320D82C6A6A86E378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:25:b1:72:bd:cf:88:68:19:50:8f:22:bb:8e:
                    95:da:84:dd:0d:47:42:86:ff:d8:79:23:ac:91:38:
                    43:7e:b4:94:9f:12:6c:7a:76:58:c4:93:16:9f:d4:
                    ca:fd:d7:38:ca:46:bf:74:53:4a:e3:a0:2f:8e:8a:
                    c5:28:f3:08:74:2c:e1:62:c5:25:fe:1c:cd:f4:79:
                    10:73:4f:c3:83:06:bb:23:a6:82:1d:6d:dc:87:51:
                    74:88:71:9e:4a:59:79:dc:f3:a7:88:81:33:b8:fb:
                    76:5e:73:c8:22:43:b2:f7:fe:b1:0e:1e:0c:62:11:
                    13:5e:ad:8c:7a:e2:50:9d:93:ed:18:0c:bd:95:51:
                    38:fc:5c:35:9c:88:24:e0:75:19:d7:c6:7c:f1:bb:
                    0b:83:f2:95:13:04:98:ec:d6:c7:64:da:8a:21:e6:
                    da:c5:3d:76:cf:36:ed:52:8d:01:eb:38:19:a4:36:
                    87:a2:a0:15:98:e1:b4:4f:8c:96:ab:7f:f5:ca:e3:
                    61:82:df:ed:b5:87:e0:bf:9e:97:c7:62:c7:aa:ea:
                    68:f2:1e:a2:22:7a:08:43:fc:37:0a:c9:ca:a9:e6:
                    6c:dd:ad:ae:de:44:46:09:ae:47:07:38:6b:3b:c7:
                    1e:dc:fe:26:66:7d:d9:ef:b8:f0:f3:1d:e1:38:d8:
                    b6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5B:7F:6D:78:6A:A5:06:2A:97:1D:D3:20:D8:2C:6A:6A:86:E3:78
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131613a3a2f34382d3438203d3e20313937383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:511a::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:a3:89:3b:fa:28:ef:99:41:06:73:d8:1e:46:6d:45:11:9a:
         76:e4:07:ea:6c:d9:85:85:d4:91:b4:01:61:4c:9f:5b:5e:b6:
         7d:dc:83:a4:ce:f7:1e:2c:f0:e9:79:6a:4c:36:cf:56:d2:e2:
         d3:c1:84:f1:c7:37:62:0b:ca:45:b1:d7:47:9e:94:7c:39:a7:
         6e:7c:6c:1c:d6:ca:9c:29:49:5c:46:f4:20:56:48:5d:52:75:
         12:d6:7b:36:04:9a:04:54:97:a8:94:1d:16:fb:57:18:b9:7e:
         98:5c:d3:b0:75:a2:e8:e1:59:cb:79:26:fa:4f:1b:68:57:46:
         22:59:0c:44:17:3b:12:1f:11:8f:44:0a:b9:6d:92:59:04:90:
         b5:64:e1:a6:3f:a9:92:06:e4:b5:4e:41:de:bd:04:51:64:e5:
         4a:e0:c5:4d:31:8e:90:3c:2b:5a:42:05:01:6d:10:3b:3a:4b:
         68:9c:77:b2:cd:92:13:7b:81:33:61:92:a7:b6:14:06:d1:0f:
         4d:c3:68:0d:b7:3b:7f:dc:39:6f:d7:ba:d2:4e:32:45:a3:8b:
         f5:42:fb:33:7e:b9:aa:8f:a1:ef:67:83:d4:83:54:b1:cb:17:
         c6:a1:ea:a4:67:1c:3d:4b:1e:d3:78:ba:fc:34:a9:07:36:e7:
         e9:b9:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:59:06 2026 by rpki-client