Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131633a3a2f34382d3438203d3e20323038383234.roa
File:                     326131343a373538313a353131633a3a2f34382d3438203d3e20323038383234.roa (raw, json)
Hash identifier:          e7t/573r/qMwmzw3WvWX9+BOAtQmKybIhLRQK0QGX+M=
Subject key identifier:   D2:AF:65:93:56:AE:CA:8A:2D:88:ED:EB:92:37:2D:90:46:1D:16:80
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       3B3CC4C73249A8975C307A2A3BF1BD51E82B9D07
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131633a3a2f34382d3438203d3e20323038383234.roa
Signing time:             Thu 29 Oct 2026 22:09:31 +0000
ROA not before:           Thu 29 Oct 2026 22:04:31 +0000
ROA not after:            Thu 28 Oct 2027 22:09:31 +0000
asID:                     208824
IP address blocks:        2a14:7581:511c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3c:c4:c7:32:49:a8:97:5c:30:7a:2a:3b:f1:bd:51:e8:2b:9d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:31 2026 GMT
            Not After : Oct 28 22:09:31 2027 GMT
        Subject: CN=D2AF659356AECA8A2D88EDEB92372D90461D1680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:4e:2a:f1:ed:c1:0c:aa:2a:b4:26:a1:39:
                    2d:2c:08:d4:47:33:6d:be:ab:db:10:66:f2:5a:e4:
                    fe:45:d7:21:2d:b7:9e:73:b3:d8:25:a0:48:42:80:
                    bd:5b:2c:ae:d3:a6:68:5f:f2:9c:ce:94:7e:3d:9b:
                    c7:38:df:ef:34:4b:3d:d8:2d:10:2c:c6:0b:3e:d6:
                    d0:d7:a8:5f:cd:f3:d0:ba:ee:12:2b:c1:af:da:cb:
                    29:7a:e1:f4:63:86:5e:a1:75:49:fa:ea:85:b9:5b:
                    73:29:a4:5d:1c:52:8d:47:12:e7:27:3d:06:fd:32:
                    e9:5b:eb:d3:9e:5c:4b:1c:5d:37:d1:d6:a9:8d:cd:
                    df:1c:d7:75:7e:ca:1d:75:f2:c2:27:96:e5:7a:01:
                    61:ee:a3:83:dd:49:de:cb:74:d6:35:0c:63:cb:26:
                    89:7a:76:9a:83:1e:fb:a9:71:b2:77:0c:a4:00:fd:
                    ed:71:37:07:24:6b:83:94:b6:5c:9c:61:d6:f8:5e:
                    2b:46:be:bc:57:f0:5f:f5:8e:4b:e7:30:9d:2e:77:
                    e6:bf:42:b7:ea:55:7e:1f:3c:6b:b6:54:b2:9a:15:
                    1d:43:e2:1b:2e:25:21:97:bb:6b:28:5e:1e:1b:20:
                    0c:55:af:9d:69:4b:4b:ed:99:be:62:db:3e:2f:30:
                    74:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AF:65:93:56:AE:CA:8A:2D:88:ED:EB:92:37:2D:90:46:1D:16:80
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131633a3a2f34382d3438203d3e20323038383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:511c::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:6e:43:02:7e:b2:9b:be:47:50:ca:0e:b3:b1:5b:a5:3f:62:
         7d:0f:f9:7f:a8:cb:a3:cc:fd:a0:82:3a:5b:fb:f1:90:d1:75:
         b1:e7:bb:16:35:52:27:ea:c0:7d:ad:4e:5e:9d:20:bc:c1:e1:
         06:d4:86:8c:25:27:4b:e5:7b:26:13:3e:38:f3:98:83:43:c2:
         ed:fc:06:6e:fe:4c:3a:ef:78:de:97:8e:5d:ac:de:62:ca:4a:
         ed:d1:7e:b3:2f:91:bc:5a:32:3d:fa:02:7e:05:e1:8e:08:d6:
         32:e3:52:03:86:98:13:27:6e:e9:3a:fa:a9:ee:ce:03:fe:b8:
         5a:ab:ad:74:15:67:e9:d1:78:26:1d:7d:c0:88:69:11:8b:11:
         3f:47:b3:5c:9b:7e:48:e7:5b:70:08:69:92:61:1d:67:ae:2a:
         12:88:fd:6a:98:c9:aa:b1:a9:ab:df:56:04:7f:60:12:1a:42:
         b8:7f:68:dd:d4:ed:5d:17:e0:1c:cd:4a:5f:af:da:76:5e:ad:
         87:24:52:fb:8d:18:9a:1c:c3:ed:9c:fa:b3:90:73:9b:46:c6:
         e9:b3:96:5e:d0:f4:b4:e5:51:6f:8f:29:ac:93:87:df:9d:b7:
         d4:27:16:8d:bd:85:19:f8:2c:62:b2:bf:cf:f8:76:7a:13:c5:
         00:2b:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:37:03 2026 by rpki-client