Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132343a3a2f34382d3438203d3e20323134323035.roa
File:                     326131343a373538313a353132343a3a2f34382d3438203d3e20323134323035.roa (raw, json)
Hash identifier:          b70ScJ1cDhA3wVICHfMpjXE20KT0Zj5tP1ATq4aFC34=
Subject key identifier:   91:37:C5:EE:2D:13:7F:7E:AC:22:37:47:93:5F:AD:39:AA:34:67:5C
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       223D2FE1091D1DD11B134456FF8067E9136FB932
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132343a3a2f34382d3438203d3e20323134323035.roa
Signing time:             Thu 29 Oct 2026 22:09:34 +0000
ROA not before:           Thu 29 Oct 2026 22:04:34 +0000
ROA not after:            Thu 28 Oct 2027 22:09:34 +0000
asID:                     214205
IP address blocks:        2a14:7581:5124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3d:2f:e1:09:1d:1d:d1:1b:13:44:56:ff:80:67:e9:13:6f:b9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:34 2026 GMT
            Not After : Oct 28 22:09:34 2027 GMT
        Subject: CN=9137C5EE2D137F7EAC223747935FAD39AA34675C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:46:b3:bd:3c:9e:2a:e0:d7:1a:f4:29:72:da:
                    fd:84:b4:b8:a8:38:30:5c:93:d4:7c:14:cd:3a:cf:
                    86:14:93:d7:eb:37:52:23:3f:30:9b:5e:9d:3d:92:
                    9d:af:cf:8b:b1:d0:7b:6b:2c:33:04:3b:74:57:ed:
                    c9:d2:3d:92:53:1c:c8:4d:a2:ac:d1:e9:70:97:86:
                    6f:77:40:c9:d8:b0:9e:f3:89:3a:0b:35:4c:4d:c7:
                    34:f8:b3:f0:f6:c1:38:44:b9:b9:75:8e:a6:05:78:
                    10:f0:86:22:87:fc:1c:42:5e:1a:8d:11:7c:91:32:
                    5b:5e:6b:b3:66:28:d4:b9:a9:3d:cd:9e:26:39:18:
                    27:a9:e0:13:39:5d:97:2e:66:2e:87:e0:fc:c4:d0:
                    cd:e1:42:dc:52:91:b3:90:1d:f7:6f:6f:37:bc:8f:
                    8e:b5:35:c7:a7:b7:10:6f:7b:97:7d:7c:3b:54:e5:
                    ed:9d:6c:fd:74:78:41:72:dc:f2:88:c8:d5:19:b0:
                    22:43:cb:54:42:8e:39:06:0e:fe:3b:40:3a:08:03:
                    a4:55:63:0c:1c:26:b8:33:62:35:f6:0a:70:8c:cf:
                    9d:d9:87:85:92:c8:78:28:a1:0b:b8:9f:87:c6:3e:
                    30:1e:da:fb:98:01:f5:e8:eb:92:a6:5a:05:bb:12:
                    a6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:37:C5:EE:2D:13:7F:7E:AC:22:37:47:93:5F:AD:39:AA:34:67:5C
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132343a3a2f34382d3438203d3e20323134323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5124::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:b0:ec:6b:cd:5b:38:04:9c:2c:89:46:75:c9:07:a7:05:19:
         57:6f:95:52:4b:14:a0:a2:87:d5:c5:70:b1:e6:ad:14:16:a1:
         ff:84:69:43:fa:2f:48:90:0e:7e:df:11:f8:4f:80:75:02:e2:
         ec:09:ca:0f:ad:7a:34:32:a9:f9:04:0a:1d:46:9a:02:08:5d:
         5f:da:70:20:58:f3:95:2b:cd:c9:c9:2b:b3:52:ba:20:8b:97:
         44:74:ce:7a:9d:f5:cb:80:3b:a8:d9:c0:a7:42:96:70:39:26:
         ef:48:aa:4a:13:da:0e:4f:6e:6b:51:42:b2:fb:00:c9:4d:bc:
         46:1e:80:69:4e:6a:72:db:c5:06:a5:3a:96:66:6f:3b:2b:4b:
         79:46:96:cf:ac:29:01:85:c6:8d:e6:9f:63:c0:01:a6:e6:6d:
         dd:cb:6e:95:6c:c8:af:47:6b:db:58:be:57:bd:61:7d:06:a0:
         af:28:7f:9e:1e:f3:9d:dd:1d:6d:8b:51:5a:b3:10:a2:ee:64:
         85:ac:7b:d5:0a:ad:a4:32:be:56:49:39:aa:f8:0d:e5:eb:22:
         f1:60:ac:eb:39:b9:3c:86:67:17:23:01:95:2b:75:a5:0f:40:
         0d:74:55:40:a8:13:1e:5a:64:dd:6d:91:81:74:77:16:2d:f1:
         6e:32:47:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:06:29 2026 by rpki-client