
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132323a3a2f34382d3438203d3e20323134323035.roa
File: 326131343a373538313a353132323a3a2f34382d3438203d3e20323134323035.roa (raw, json)
Hash identifier: EEyJiTwZiaAjJhmmLE9hgRZmpKlXdXW9Jo+EiD60gMI=
Subject key identifier: 2E:82:E6:A8:91:EB:7D:3C:D4:09:32:A6:E9:B8:AC:62:7D:EF:48:E0
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 1CE057BE6E9BE9A17DB5A3D350B21DCD6DE8CD88
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132323a3a2f34382d3438203d3e20323134323035.roa
Signing time: Thu 29 Oct 2026 22:09:28 +0000
ROA not before: Thu 29 Oct 2026 22:04:28 +0000
ROA not after: Thu 28 Oct 2027 22:09:28 +0000
asID: 214205
IP address blocks: 2a14:7581:5122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e0:57:be:6e:9b:e9:a1:7d:b5:a3:d3:50:b2:1d:cd:6d:e8:cd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Oct 29 22:04:28 2026 GMT
Not After : Oct 28 22:09:28 2027 GMT
Subject: CN=2E82E6A891EB7D3CD40932A6E9B8AC627DEF48E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:90:79:c0:4f:96:d2:c4:f1:83:84:68:47:
17:69:2e:2a:93:2c:6c:29:91:cd:27:cd:e1:e6:16:
2f:a5:6e:0a:26:38:45:ae:63:f5:fd:85:f9:3c:8e:
d2:9f:d6:bc:90:91:7f:3b:75:7a:b1:23:12:a6:80:
3d:a3:a6:03:06:30:3c:cb:58:51:78:cc:9d:c0:c5:
91:1d:45:c3:b5:51:9f:a4:f8:9b:54:67:49:d5:10:
bd:ad:fc:8f:c7:92:4d:08:e6:96:a5:8f:ef:1c:e4:
fa:7b:b6:98:82:f3:cb:5f:d0:79:df:68:db:32:83:
5a:a5:16:b8:b1:7e:8b:62:6e:0b:1a:64:25:2d:b1:
ae:05:bd:ab:b9:b9:a2:07:f1:fe:24:ca:98:19:7e:
65:3f:fc:c4:f8:ea:36:08:e8:2c:f3:04:b1:29:b9:
4e:f2:c3:57:c4:00:08:c7:ba:95:93:27:26:df:be:
39:73:88:fa:8d:f2:95:92:33:1c:ec:4e:a7:9d:58:
66:62:03:27:eb:fb:bf:c0:c4:7a:94:d1:77:4d:9b:
3c:c9:c8:d0:69:0d:0a:54:58:69:b5:5d:97:41:f2:
35:84:dd:bc:f4:58:da:08:be:46:80:68:62:6d:d7:
9e:71:9c:11:7f:dc:8c:9d:24:0c:8c:48:8f:99:04:
87:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:82:E6:A8:91:EB:7D:3C:D4:09:32:A6:E9:B8:AC:62:7D:EF:48:E0
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132323a3a2f34382d3438203d3e20323134323035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5122::/48
Signature Algorithm: sha256WithRSAEncryption
67:f4:5c:e4:64:b6:0b:ad:70:9f:f3:78:bf:57:f4:57:78:72:
22:5d:eb:c8:aa:9b:95:c9:16:89:d1:45:f1:0f:b1:47:10:17:
55:60:84:9f:87:a2:75:66:0a:ca:1c:e0:f1:75:a1:97:89:ed:
dd:1a:5a:be:fb:2b:2a:a8:6a:bf:95:fc:c7:13:85:04:5a:79:
d3:4a:ee:ac:53:0d:77:c5:b8:3b:5d:8c:5a:dc:bf:30:a6:81:
1d:14:4f:ba:f7:51:5f:8d:42:49:f4:1b:fc:4d:f1:00:29:cd:
ce:2f:2c:28:10:f8:4e:92:49:8c:5f:e8:58:cd:63:46:6c:f4:
c2:6f:b6:33:2b:a5:73:3a:d8:7a:ee:9d:f1:33:f1:1c:a6:42:
3c:51:ba:50:57:ab:50:b0:21:2d:c0:76:0d:0a:46:fb:4e:c3:
5c:be:84:e2:a3:37:5e:32:20:9d:d8:7f:a5:cd:db:e9:61:47:
64:75:37:b6:b4:ea:a6:63:5f:d0:a8:63:57:a2:5a:8e:84:a1:
58:e2:cb:7d:a4:7f:cc:7a:64:dd:ff:0b:ce:bb:e0:d5:78:7e:
ac:e4:5a:40:c9:92:2c:47:0b:12:2f:cf:fb:35:66:b2:f1:25:
4d:95:d8:3e:dc:d7:62:29:3a:95:25:32:b7:84:d0:d3:42:a2:
aa:73:fe:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:32 2026 by rpki-client