
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131643a3a2f34382d3438203d3e20323038383234.roa
File: 326131343a373538313a353131643a3a2f34382d3438203d3e20323038383234.roa (raw, json)
Hash identifier: exIxFgaS9lZw4zwQVWdyzbBRWTiOXS1wtFslsXTN4sQ=
Subject key identifier: 80:A7:20:D9:3B:0D:8B:71:83:BE:B4:E8:84:D8:78:9C:33:7E:5E:CB
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 3F43FCE2C9E8DBC3A87E89C683FFE2C45AD115B3
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131643a3a2f34382d3438203d3e20323038383234.roa
Signing time: Thu 29 Oct 2026 22:09:49 +0000
ROA not before: Thu 29 Oct 2026 22:04:49 +0000
ROA not after: Thu 28 Oct 2027 22:09:49 +0000
asID: 208824
IP address blocks: 2a14:7581:511d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:43:fc:e2:c9:e8:db:c3:a8:7e:89:c6:83:ff:e2:c4:5a:d1:15:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Oct 29 22:04:49 2026 GMT
Not After : Oct 28 22:09:49 2027 GMT
Subject: CN=80A720D93B0D8B7183BEB4E884D8789C337E5ECB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:75:e6:4a:32:45:ad:1c:aa:de:0b:90:bc:
24:44:5f:57:91:09:28:6a:c3:4c:21:c8:5d:a3:c0:
3b:31:18:8c:b8:90:37:2d:82:3a:60:e4:bf:fc:f5:
a9:98:e2:2f:55:a1:fb:11:f8:0a:a9:1d:1f:64:3c:
54:a4:ec:d7:d5:c1:30:17:ae:74:09:13:5b:33:f1:
15:45:70:a2:d6:e2:75:a7:38:e4:c1:34:5e:66:27:
aa:a8:b4:cd:e7:60:ec:a5:c7:9e:60:a8:02:5d:e8:
09:67:9f:02:1f:24:04:61:e1:43:00:b2:e2:2d:89:
01:d3:61:15:76:fc:73:11:78:c2:10:c3:a6:31:0a:
7c:56:b7:9a:1b:97:2e:bc:6a:12:83:ea:b2:ba:2c:
78:65:83:7e:35:cd:1b:bd:66:50:da:4b:2d:a6:eb:
af:59:94:64:e8:42:f6:f6:08:be:ff:5d:fd:38:95:
35:12:c7:64:26:4e:34:e3:d7:12:c7:d6:f0:0a:49:
4b:b7:98:66:6d:3d:b9:b5:97:09:ca:62:ba:22:3c:
72:45:9a:8d:b8:7c:b7:de:4c:c7:c2:b7:bc:b6:46:
d7:8b:04:a6:fd:41:d7:2d:4c:3e:3a:8b:c1:f9:b4:
1c:2e:c1:ed:4f:56:1c:c8:e9:00:58:1c:6f:54:bb:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A7:20:D9:3B:0D:8B:71:83:BE:B4:E8:84:D8:78:9C:33:7E:5E:CB
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131643a3a2f34382d3438203d3e20323038383234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:511d::/48
Signature Algorithm: sha256WithRSAEncryption
7a:a8:a2:81:b7:ec:d8:01:ac:87:7e:8a:e9:bb:fe:b2:b4:47:
36:4d:21:47:66:4a:6c:a8:17:4d:4b:d6:4a:6a:f7:8d:b7:d8:
71:b3:c4:8e:9e:66:de:ed:b8:be:51:8e:a9:a8:76:00:2b:01:
dd:66:8d:e6:15:7d:94:b0:13:7f:31:05:37:e8:e3:98:9a:1c:
65:1c:5f:ef:2b:26:64:91:7b:d7:04:2d:19:68:57:34:36:b6:
a4:df:7c:1c:12:3d:75:f1:e9:43:0d:cb:dd:8b:95:c8:c1:28:
84:f6:ed:43:4c:19:39:f6:ea:82:fb:a1:fa:f7:46:f6:dc:05:
0e:2b:cc:28:a0:b1:b9:10:80:30:e2:87:2d:cc:ac:26:ea:50:
20:68:a8:67:27:a6:b2:1b:91:d4:71:ca:9c:a0:d1:89:81:39:
04:11:18:75:78:e9:6c:90:db:d7:75:c1:82:53:c0:47:eb:4a:
47:14:2f:ce:1b:be:10:08:76:e4:d2:cc:82:27:43:ce:9d:1f:
c6:0b:38:95:7c:e3:cf:53:74:cf:6b:8e:13:37:66:24:d7:8f:
69:dd:4c:9f:1e:d0:00:9a:2a:fd:2f:b5:27:9e:6a:71:30:d1:
d0:bf:c9:eb:e6:8c:c1:5c:12:16:67:03:c3:e3:af:7a:8d:d4:
ef:fe:72:56
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUP0P84sno28OofonGg//ixFrRFbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA3QkI4MjA0NDA4OTZENkZBMDAyM0EwNzkwQ0QxRDc4
RTk3RjdBRjAeFw0yNjEwMjkyMjA0NDlaFw0yNzEwMjgyMjA5NDlaMDMxMTAvBgNV
BAMTKDgwQTcyMEQ5M0IwRDhCNzE4M0JFQjRFODg0RDg3ODlDMzM3RTVFQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdXXmSjJFrRyq3guQvCREX1eR
CShqw0whyF2jwDsxGIy4kDctgjpg5L/89amY4i9VofsR+AqpHR9kPFSk7NfVwTAX
rnQJE1sz8RVFcKLW4nWnOOTBNF5mJ6qotM3nYOylx55gqAJd6AlnnwIfJARh4UMA
suItiQHTYRV2/HMReMIQw6YxCnxWt5obly68ahKD6rK6LHhlg341zRu9ZlDaSy2m
669ZlGToQvb2CL7/Xf04lTUSx2QmTjTj1xLH1vAKSUu3mGZtPbm1lwnKYroiPHJF
mo24fLfeTMfCt7y2RteLBKb9QdctTD46i8H5tBwuwe1PVhzI6QBYHG9UuyqTAgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQUgKcg2TsNi3GDvrTohNh4nDN+XsswHwYDVR0j
BBgwFoAUkHu4IEQIltb6ACOgeQzR146X968wDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcnBraS5zaHJkc2Vydi5jb20vcmVwby9NWU5P
Qy1ORVhUU0VSVi84LzkwN0JCODIwNDQwODk2RDZGQTAwMjNBMDc5MENEMUQ3OEU5
N0Y3QUYuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvOTA3QkI4MjA0NDA4OTZENkZB
MDAyM0EwNzkwQ0QxRDc4RTk3RjdBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGA
BggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLnNocmRzZXJ2LmNvbS9yZXBvL01ZTk9D
LU5FWFRTRVJWLzgvMzI2MTMxMzQzYTM3MzUzODMxM2EzNTMxMzE2NDNhM2EyZjM0
MzgyZDM0MzgyMDNkM2UyMDMyMzAzODM4MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYFRHTAN
BgkqhkiG9w0BAQsFAAOCAQEAeqiigbfs2AGsh36K6bv+srRHNk0hR2ZKbKgXTUvW
Smr3jbfYcbPEjp5m3u24vlGOqah2ACsB3WaN5hV9lLATfzEFN+jjmJocZRxf7ysm
ZJF71wQtGWhXNDa2pN98HBI9dfHpQw3L3YuVyMEohPbtQ0wZOfbqgvuh+vdG9twF
DivMKKCxuRCAMOKHLcysJupQIGioZyemshuR1HHKnKDRiYE5BBEYdXjpbJDb13XB
glPAR+tKRxQvzhu+EAh25NLMgidDzp0fxgs4lXzjz1N0z2uOEzdmJNePad1Mnx7Q
AJoq/S+1J55qcTDR0L/J6+aMwVwSFmcDw+Oveo3U7/5yVg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:23:15 2026 by rpki-client