Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131643a3a2f34382d3438203d3e20323038383234.roa
File:                     326131343a373538313a353131643a3a2f34382d3438203d3e20323038383234.roa (raw, json)
Hash identifier:          exIxFgaS9lZw4zwQVWdyzbBRWTiOXS1wtFslsXTN4sQ=
Subject key identifier:   80:A7:20:D9:3B:0D:8B:71:83:BE:B4:E8:84:D8:78:9C:33:7E:5E:CB
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       3F43FCE2C9E8DBC3A87E89C683FFE2C45AD115B3
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131643a3a2f34382d3438203d3e20323038383234.roa
Signing time:             Thu 29 Oct 2026 22:09:49 +0000
ROA not before:           Thu 29 Oct 2026 22:04:49 +0000
ROA not after:            Thu 28 Oct 2027 22:09:49 +0000
asID:                     208824
IP address blocks:        2a14:7581:511d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:43:fc:e2:c9:e8:db:c3:a8:7e:89:c6:83:ff:e2:c4:5a:d1:15:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:49 2026 GMT
            Not After : Oct 28 22:09:49 2027 GMT
        Subject: CN=80A720D93B0D8B7183BEB4E884D8789C337E5ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:75:e6:4a:32:45:ad:1c:aa:de:0b:90:bc:
                    24:44:5f:57:91:09:28:6a:c3:4c:21:c8:5d:a3:c0:
                    3b:31:18:8c:b8:90:37:2d:82:3a:60:e4:bf:fc:f5:
                    a9:98:e2:2f:55:a1:fb:11:f8:0a:a9:1d:1f:64:3c:
                    54:a4:ec:d7:d5:c1:30:17:ae:74:09:13:5b:33:f1:
                    15:45:70:a2:d6:e2:75:a7:38:e4:c1:34:5e:66:27:
                    aa:a8:b4:cd:e7:60:ec:a5:c7:9e:60:a8:02:5d:e8:
                    09:67:9f:02:1f:24:04:61:e1:43:00:b2:e2:2d:89:
                    01:d3:61:15:76:fc:73:11:78:c2:10:c3:a6:31:0a:
                    7c:56:b7:9a:1b:97:2e:bc:6a:12:83:ea:b2:ba:2c:
                    78:65:83:7e:35:cd:1b:bd:66:50:da:4b:2d:a6:eb:
                    af:59:94:64:e8:42:f6:f6:08:be:ff:5d:fd:38:95:
                    35:12:c7:64:26:4e:34:e3:d7:12:c7:d6:f0:0a:49:
                    4b:b7:98:66:6d:3d:b9:b5:97:09:ca:62:ba:22:3c:
                    72:45:9a:8d:b8:7c:b7:de:4c:c7:c2:b7:bc:b6:46:
                    d7:8b:04:a6:fd:41:d7:2d:4c:3e:3a:8b:c1:f9:b4:
                    1c:2e:c1:ed:4f:56:1c:c8:e9:00:58:1c:6f:54:bb:
                    2a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A7:20:D9:3B:0D:8B:71:83:BE:B4:E8:84:D8:78:9C:33:7E:5E:CB
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131643a3a2f34382d3438203d3e20323038383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:511d::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:a8:a2:81:b7:ec:d8:01:ac:87:7e:8a:e9:bb:fe:b2:b4:47:
         36:4d:21:47:66:4a:6c:a8:17:4d:4b:d6:4a:6a:f7:8d:b7:d8:
         71:b3:c4:8e:9e:66:de:ed:b8:be:51:8e:a9:a8:76:00:2b:01:
         dd:66:8d:e6:15:7d:94:b0:13:7f:31:05:37:e8:e3:98:9a:1c:
         65:1c:5f:ef:2b:26:64:91:7b:d7:04:2d:19:68:57:34:36:b6:
         a4:df:7c:1c:12:3d:75:f1:e9:43:0d:cb:dd:8b:95:c8:c1:28:
         84:f6:ed:43:4c:19:39:f6:ea:82:fb:a1:fa:f7:46:f6:dc:05:
         0e:2b:cc:28:a0:b1:b9:10:80:30:e2:87:2d:cc:ac:26:ea:50:
         20:68:a8:67:27:a6:b2:1b:91:d4:71:ca:9c:a0:d1:89:81:39:
         04:11:18:75:78:e9:6c:90:db:d7:75:c1:82:53:c0:47:eb:4a:
         47:14:2f:ce:1b:be:10:08:76:e4:d2:cc:82:27:43:ce:9d:1f:
         c6:0b:38:95:7c:e3:cf:53:74:cf:6b:8e:13:37:66:24:d7:8f:
         69:dd:4c:9f:1e:d0:00:9a:2a:fd:2f:b5:27:9e:6a:71:30:d1:
         d0:bf:c9:eb:e6:8c:c1:5c:12:16:67:03:c3:e3:af:7a:8d:d4:
         ef:fe:72:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:23:15 2026 by rpki-client