Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132363a3a2f34382d3438203d3e20323136333637.roa
File:                     326131343a373538313a353132363a3a2f34382d3438203d3e20323136333637.roa (raw, json)
Hash identifier:          t+Bb61Y8GhpB3hJEP5eqMqGApspEcPxvx6P6alHL6Ps=
Subject key identifier:   07:F1:85:58:8D:DB:F0:76:2F:34:FB:CB:06:82:6B:61:AC:55:F2:4F
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       12D0E16DF6718F847779F21EA263F2DA64B3CFFF
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132363a3a2f34382d3438203d3e20323136333637.roa
Signing time:             Thu 29 Oct 2026 22:09:28 +0000
ROA not before:           Thu 29 Oct 2026 22:04:28 +0000
ROA not after:            Thu 28 Oct 2027 22:09:28 +0000
asID:                     216367
IP address blocks:        2a14:7581:5126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d0:e1:6d:f6:71:8f:84:77:79:f2:1e:a2:63:f2:da:64:b3:cf:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:28 2026 GMT
            Not After : Oct 28 22:09:28 2027 GMT
        Subject: CN=07F185588DDBF0762F34FBCB06826B61AC55F24F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:6f:24:98:b3:79:c0:e1:48:21:9a:b5:dd:
                    40:2a:e0:ca:fc:9b:4a:6a:ae:75:fd:55:c0:84:ba:
                    7e:e3:3d:c5:e5:37:c6:25:f4:de:d9:84:06:26:2a:
                    1c:79:26:1d:eb:07:6c:7f:cc:3b:89:90:67:fc:2c:
                    41:5b:47:2f:ad:36:f3:45:df:f0:08:5f:a1:05:43:
                    83:ba:3d:79:09:c0:3c:53:c3:28:88:4b:7e:5b:bc:
                    eb:ba:88:91:9c:0f:f9:58:34:e7:b3:4c:11:82:da:
                    7f:9e:58:59:8f:8e:d5:84:33:8f:ed:21:93:7f:6d:
                    6a:2d:bc:aa:4a:98:e9:80:05:0d:4b:cc:9f:23:5d:
                    67:67:3e:01:39:5f:38:e3:54:82:0d:04:d7:71:df:
                    ab:d9:c6:88:2b:86:46:82:66:ab:65:57:9f:09:d2:
                    e3:95:f0:ba:92:16:d5:dd:85:fc:13:e8:58:43:86:
                    76:a7:05:d6:94:6a:64:8e:e9:2d:60:95:fc:3c:48:
                    f6:f4:9d:5d:48:04:81:bd:12:96:95:60:94:97:cc:
                    2f:07:0e:97:03:a8:81:27:5d:9f:39:1f:e1:73:f3:
                    e1:86:6f:ba:56:81:db:4c:8e:2c:60:de:52:dd:42:
                    09:ef:f3:e4:9f:b7:00:5a:b3:0d:ec:9c:9b:28:c1:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F1:85:58:8D:DB:F0:76:2F:34:FB:CB:06:82:6B:61:AC:55:F2:4F
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132363a3a2f34382d3438203d3e20323136333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5126::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:96:a6:9b:54:dc:03:a1:f0:ff:0f:3c:9f:55:65:3b:ce:dc:
         87:80:9d:c4:35:58:09:3d:46:d7:cb:9f:31:55:7e:2a:e2:3d:
         f1:a0:87:70:aa:db:a1:0e:04:b1:c3:73:cf:7b:7e:19:1b:43:
         c3:f7:05:ef:ba:d6:db:57:f7:da:44:d3:fd:b0:7a:73:8e:71:
         ff:d0:99:1c:db:42:11:f0:8c:8e:f9:44:77:c2:56:85:7c:a6:
         db:82:20:8a:43:3d:54:26:4a:34:35:67:5a:5e:c6:45:26:48:
         94:48:63:ca:29:37:57:dd:aa:9b:75:ef:77:0d:88:2c:06:68:
         f3:56:7a:0d:32:6d:fe:ef:17:13:24:cd:57:aa:b3:ec:df:10:
         2f:06:6d:05:14:b8:a8:24:76:07:34:cc:be:c5:dd:3c:45:cc:
         b2:66:51:4f:49:e8:69:cd:e9:b1:49:ce:10:9a:ff:44:fd:7c:
         6d:d2:30:d6:b0:b0:67:9e:0e:8b:d8:1c:98:be:25:5b:cb:ff:
         d2:ce:39:d0:8d:8e:8c:0d:93:61:dd:fc:f2:f8:5b:96:13:2d:
         27:a5:e4:17:c8:d3:2b:06:44:7c:30:fd:ff:34:5a:f5:4b:3f:
         8e:87:7b:f6:ed:29:a7:b7:ee:6a:2d:f5:9d:17:1d:20:4c:1e:
         99:87:a2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:41:04 2026 by rpki-client