Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132333a3a2f34382d3438203d3e20323134323035.roa
File:                     326131343a373538313a353132333a3a2f34382d3438203d3e20323134323035.roa (raw, json)
Hash identifier:          1GSpooEH9Hyg92OO8FbrjmWcA1873D6aQlsssphmf6w=
Subject key identifier:   73:78:FF:2A:39:40:CF:9E:9B:4A:15:D6:5C:82:33:AD:95:1B:AA:1A
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       3B37EEE8A551222018D39D76F0E98C9DFA4D37DD
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132333a3a2f34382d3438203d3e20323134323035.roa
Signing time:             Thu 29 Oct 2026 22:09:32 +0000
ROA not before:           Thu 29 Oct 2026 22:04:32 +0000
ROA not after:            Thu 28 Oct 2027 22:09:32 +0000
asID:                     214205
IP address blocks:        2a14:7581:5123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:37:ee:e8:a5:51:22:20:18:d3:9d:76:f0:e9:8c:9d:fa:4d:37:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:32 2026 GMT
            Not After : Oct 28 22:09:32 2027 GMT
        Subject: CN=7378FF2A3940CF9E9B4A15D65C8233AD951BAA1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:97:13:c1:f9:39:63:ed:f7:f6:e3:25:29:
                    4f:e3:27:8e:b8:b2:ef:89:06:67:69:81:ab:0c:7f:
                    ea:5e:3b:e7:ba:ac:59:62:d3:f5:e2:00:f2:65:c6:
                    31:a4:86:31:e2:c1:d4:cf:c5:9f:69:eb:f5:03:03:
                    8c:2c:7c:56:fc:0d:3e:73:f9:7d:03:bf:90:b9:39:
                    35:64:cf:95:70:dd:3c:66:16:25:6e:48:9c:f8:3a:
                    97:25:fd:e0:96:c1:b6:79:38:33:ce:82:73:a9:02:
                    17:3e:7b:49:0b:23:3c:46:17:da:1f:48:3c:bf:4b:
                    b7:f8:20:db:3b:49:bd:14:b7:6b:bc:88:b9:ac:05:
                    d2:bf:63:7e:44:5b:4c:94:fc:67:40:f1:fa:ba:0d:
                    58:23:7a:14:2a:9f:5f:35:8e:ec:7f:5b:3e:8d:f6:
                    cf:24:68:82:76:5a:69:a0:3e:d6:4b:58:02:15:ab:
                    e1:9c:fc:58:84:23:7d:d1:21:c0:e8:1e:f7:d4:6c:
                    35:37:75:38:14:36:79:5e:a5:92:97:ff:be:6d:4b:
                    64:d7:65:de:fe:7a:db:4b:b2:90:24:ec:9a:4a:cb:
                    50:2f:1d:55:dc:57:8c:aa:51:63:fa:e5:44:64:f2:
                    41:dc:73:e0:9a:52:43:65:e7:5f:ad:72:09:43:c3:
                    06:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:78:FF:2A:39:40:CF:9E:9B:4A:15:D6:5C:82:33:AD:95:1B:AA:1A
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132333a3a2f34382d3438203d3e20323134323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5123::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:c0:05:d6:48:19:e4:39:43:88:8c:27:c0:6f:0f:67:3e:f4:
         1e:93:4d:fd:97:64:80:da:5d:f9:9b:8d:08:ba:1a:d3:64:8f:
         70:f0:79:e4:fa:b6:8a:51:9e:66:24:32:1b:ff:8d:f3:e4:c4:
         7e:0e:31:11:0d:3c:00:a6:09:84:48:a5:7e:25:3b:91:92:6c:
         6e:41:8f:02:5d:f2:ea:15:b7:f1:87:29:42:2a:a0:b1:18:9b:
         01:ae:5a:91:43:2e:a9:3c:94:46:75:7b:79:5e:25:58:58:74:
         dd:7a:9a:b2:4d:68:80:dd:4e:02:8d:b4:f6:02:d3:07:8d:af:
         9c:4d:e7:9a:e6:02:e8:2a:28:8d:8d:b7:b2:54:2c:d8:4c:3e:
         14:ce:3b:4d:09:b2:1d:46:20:aa:e8:fa:2d:2b:f8:63:01:63:
         ce:39:16:1b:bc:66:4a:15:3c:db:d9:a6:33:b5:79:3c:1a:7c:
         e4:e6:da:17:92:22:76:0e:4c:6c:d8:03:f6:93:36:2d:40:a2:
         33:99:68:0e:8b:e3:6c:e3:49:cf:0d:c5:a4:a3:1a:66:fa:f1:
         d5:dc:4e:b4:ba:b9:75:e4:5f:ec:86:ea:d0:27:a6:dd:f9:67:
         8d:f3:2b:85:20:e3:02:40:d7:aa:50:99:c2:63:87:b6:ae:f8:
         ae:75:48:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:22:14 2026 by rpki-client