
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132363a3a2f34382d3438203d3e20323136333637.roa
File: 326131343a373538313a353132363a3a2f34382d3438203d3e20323136333637.roa (raw, json)
Hash identifier: t+Bb61Y8GhpB3hJEP5eqMqGApspEcPxvx6P6alHL6Ps=
Subject key identifier: 07:F1:85:58:8D:DB:F0:76:2F:34:FB:CB:06:82:6B:61:AC:55:F2:4F
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 12D0E16DF6718F847779F21EA263F2DA64B3CFFF
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132363a3a2f34382d3438203d3e20323136333637.roa
Signing time: Thu 29 Oct 2026 22:09:28 +0000
ROA not before: Thu 29 Oct 2026 22:04:28 +0000
ROA not after: Thu 28 Oct 2027 22:09:28 +0000
asID: 216367
IP address blocks: 2a14:7581:5126::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:d0:e1:6d:f6:71:8f:84:77:79:f2:1e:a2:63:f2:da:64:b3:cf:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Oct 29 22:04:28 2026 GMT
Not After : Oct 28 22:09:28 2027 GMT
Subject: CN=07F185588DDBF0762F34FBCB06826B61AC55F24F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:6f:24:98:b3:79:c0:e1:48:21:9a:b5:dd:
40:2a:e0:ca:fc:9b:4a:6a:ae:75:fd:55:c0:84:ba:
7e:e3:3d:c5:e5:37:c6:25:f4:de:d9:84:06:26:2a:
1c:79:26:1d:eb:07:6c:7f:cc:3b:89:90:67:fc:2c:
41:5b:47:2f:ad:36:f3:45:df:f0:08:5f:a1:05:43:
83:ba:3d:79:09:c0:3c:53:c3:28:88:4b:7e:5b:bc:
eb:ba:88:91:9c:0f:f9:58:34:e7:b3:4c:11:82:da:
7f:9e:58:59:8f:8e:d5:84:33:8f:ed:21:93:7f:6d:
6a:2d:bc:aa:4a:98:e9:80:05:0d:4b:cc:9f:23:5d:
67:67:3e:01:39:5f:38:e3:54:82:0d:04:d7:71:df:
ab:d9:c6:88:2b:86:46:82:66:ab:65:57:9f:09:d2:
e3:95:f0:ba:92:16:d5:dd:85:fc:13:e8:58:43:86:
76:a7:05:d6:94:6a:64:8e:e9:2d:60:95:fc:3c:48:
f6:f4:9d:5d:48:04:81:bd:12:96:95:60:94:97:cc:
2f:07:0e:97:03:a8:81:27:5d:9f:39:1f:e1:73:f3:
e1:86:6f:ba:56:81:db:4c:8e:2c:60:de:52:dd:42:
09:ef:f3:e4:9f:b7:00:5a:b3:0d:ec:9c:9b:28:c1:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F1:85:58:8D:DB:F0:76:2F:34:FB:CB:06:82:6B:61:AC:55:F2:4F
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132363a3a2f34382d3438203d3e20323136333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5126::/48
Signature Algorithm: sha256WithRSAEncryption
34:96:a6:9b:54:dc:03:a1:f0:ff:0f:3c:9f:55:65:3b:ce:dc:
87:80:9d:c4:35:58:09:3d:46:d7:cb:9f:31:55:7e:2a:e2:3d:
f1:a0:87:70:aa:db:a1:0e:04:b1:c3:73:cf:7b:7e:19:1b:43:
c3:f7:05:ef:ba:d6:db:57:f7:da:44:d3:fd:b0:7a:73:8e:71:
ff:d0:99:1c:db:42:11:f0:8c:8e:f9:44:77:c2:56:85:7c:a6:
db:82:20:8a:43:3d:54:26:4a:34:35:67:5a:5e:c6:45:26:48:
94:48:63:ca:29:37:57:dd:aa:9b:75:ef:77:0d:88:2c:06:68:
f3:56:7a:0d:32:6d:fe:ef:17:13:24:cd:57:aa:b3:ec:df:10:
2f:06:6d:05:14:b8:a8:24:76:07:34:cc:be:c5:dd:3c:45:cc:
b2:66:51:4f:49:e8:69:cd:e9:b1:49:ce:10:9a:ff:44:fd:7c:
6d:d2:30:d6:b0:b0:67:9e:0e:8b:d8:1c:98:be:25:5b:cb:ff:
d2:ce:39:d0:8d:8e:8c:0d:93:61:dd:fc:f2:f8:5b:96:13:2d:
27:a5:e4:17:c8:d3:2b:06:44:7c:30:fd:ff:34:5a:f5:4b:3f:
8e:87:7b:f6:ed:29:a7:b7:ee:6a:2d:f5:9d:17:1d:20:4c:1e:
99:87:a2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:41:04 2026 by rpki-client