Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132383a3a2f34382d3438203d3e20323035393431.roa
File:                     326131343a373538313a353132383a3a2f34382d3438203d3e20323035393431.roa (raw, json)
Hash identifier:          8VCzj/b2poCx4hTf9OTwS9pwGfBHa8xQi1HTK9B8iMk=
Subject key identifier:   81:4E:3B:BA:D7:B2:4B:53:FA:8D:8A:05:8D:1F:FE:4A:9B:12:81:8A
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       55FD7965439B939FF975E20D6522571F2B20E81C
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132383a3a2f34382d3438203d3e20323035393431.roa
Signing time:             Thu 29 Oct 2026 22:09:48 +0000
ROA not before:           Thu 29 Oct 2026 22:04:48 +0000
ROA not after:            Thu 28 Oct 2027 22:09:48 +0000
asID:                     205941
IP address blocks:        2a14:7581:5128::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fd:79:65:43:9b:93:9f:f9:75:e2:0d:65:22:57:1f:2b:20:e8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:48 2026 GMT
            Not After : Oct 28 22:09:48 2027 GMT
        Subject: CN=814E3BBAD7B24B53FA8D8A058D1FFE4A9B12818A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:21:41:c7:c5:27:53:11:4a:1b:f3:f4:9d:
                    25:a6:bb:a8:6d:8a:4a:2a:d7:dd:53:69:25:bc:65:
                    9f:ca:9f:b3:16:6e:c7:e8:6f:19:99:6a:34:90:ca:
                    f9:2c:1f:21:4b:6d:0c:b7:7c:30:f0:70:97:57:4d:
                    b3:7d:c0:58:fd:2b:06:23:c3:5b:c5:81:6c:c7:83:
                    d1:5f:bb:31:3b:0e:8c:f3:f1:7c:b2:f5:eb:9f:56:
                    2c:86:54:76:5f:d5:3f:dc:00:4c:d0:2f:9d:65:6d:
                    6f:85:ce:51:24:c1:5d:6a:ea:28:c3:3f:fe:a8:d8:
                    17:55:fb:a3:86:8b:78:b2:f3:33:81:7e:50:b0:5c:
                    d5:fd:b6:48:c9:aa:91:87:26:44:3b:7d:58:1e:4c:
                    fb:18:89:72:e3:11:12:df:b6:02:c9:3b:99:07:89:
                    2d:3b:9f:31:b8:57:23:96:db:73:46:22:c3:38:61:
                    b0:96:86:10:32:01:45:71:3a:58:5f:40:c8:99:25:
                    b4:a7:1e:98:c0:e4:43:ee:5c:ec:30:71:70:d9:4b:
                    e4:e2:c0:d1:ab:f1:d0:fe:18:e9:ab:ba:c6:1a:bd:
                    d5:e6:14:11:b5:fa:ef:78:63:40:cd:72:f3:ba:78:
                    54:98:b8:d1:f9:06:3d:8b:c3:61:b9:d2:57:8a:4f:
                    b2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4E:3B:BA:D7:B2:4B:53:FA:8D:8A:05:8D:1F:FE:4A:9B:12:81:8A
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132383a3a2f34382d3438203d3e20323035393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5128::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:32:4d:b4:94:c6:0d:42:b7:a3:eb:c6:2a:87:28:a0:c4:74:
         15:f1:da:d5:a1:ef:3c:6a:1e:82:54:38:f4:a1:a1:8c:fc:a9:
         53:28:ff:ff:5e:ad:ec:5b:8d:11:6c:08:b2:ea:60:de:10:f6:
         2f:93:44:61:12:14:54:78:fe:8c:e7:dc:ce:99:3c:69:ff:1c:
         22:44:ab:74:28:2a:a8:df:a8:b6:6c:de:90:b3:d4:3a:f1:66:
         42:5b:93:4a:2b:fa:19:f4:ce:cd:89:18:5b:c9:7e:fd:86:3a:
         18:27:8b:6a:3d:72:74:ab:0d:09:54:18:a8:84:62:3b:5f:44:
         ef:5a:60:fc:b1:da:3b:d6:da:cc:b0:ba:01:ed:a5:c7:80:52:
         5d:b0:23:f6:9d:94:b2:fa:37:ba:3e:f0:6c:98:fe:80:27:b3:
         b9:77:e9:a7:08:c0:58:8c:36:c7:52:a1:86:7d:1c:67:75:7a:
         ad:0f:bf:12:d8:89:ee:3d:c7:7d:3e:46:28:f5:08:8c:0d:d5:
         20:60:f9:2f:5a:e2:79:21:6c:c2:8b:a3:24:99:c4:64:86:67:
         a7:dd:9e:de:9e:64:49:be:64:46:30:5f:87:71:8f:e4:b3:53:
         4e:6c:1b:48:64:bc:2b:7f:ad:46:e4:92:df:cd:91:e7:8d:27:
         76:ba:f8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:45 2026 by rpki-client