
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132383a3a2f34382d3438203d3e20323035393431.roa
File: 326131343a373538313a353132383a3a2f34382d3438203d3e20323035393431.roa (raw, json)
Hash identifier: 8VCzj/b2poCx4hTf9OTwS9pwGfBHa8xQi1HTK9B8iMk=
Subject key identifier: 81:4E:3B:BA:D7:B2:4B:53:FA:8D:8A:05:8D:1F:FE:4A:9B:12:81:8A
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 55FD7965439B939FF975E20D6522571F2B20E81C
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132383a3a2f34382d3438203d3e20323035393431.roa
Signing time: Thu 29 Oct 2026 22:09:48 +0000
ROA not before: Thu 29 Oct 2026 22:04:48 +0000
ROA not after: Thu 28 Oct 2027 22:09:48 +0000
asID: 205941
IP address blocks: 2a14:7581:5128::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:fd:79:65:43:9b:93:9f:f9:75:e2:0d:65:22:57:1f:2b:20:e8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Oct 29 22:04:48 2026 GMT
Not After : Oct 28 22:09:48 2027 GMT
Subject: CN=814E3BBAD7B24B53FA8D8A058D1FFE4A9B12818A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:21:41:c7:c5:27:53:11:4a:1b:f3:f4:9d:
25:a6:bb:a8:6d:8a:4a:2a:d7:dd:53:69:25:bc:65:
9f:ca:9f:b3:16:6e:c7:e8:6f:19:99:6a:34:90:ca:
f9:2c:1f:21:4b:6d:0c:b7:7c:30:f0:70:97:57:4d:
b3:7d:c0:58:fd:2b:06:23:c3:5b:c5:81:6c:c7:83:
d1:5f:bb:31:3b:0e:8c:f3:f1:7c:b2:f5:eb:9f:56:
2c:86:54:76:5f:d5:3f:dc:00:4c:d0:2f:9d:65:6d:
6f:85:ce:51:24:c1:5d:6a:ea:28:c3:3f:fe:a8:d8:
17:55:fb:a3:86:8b:78:b2:f3:33:81:7e:50:b0:5c:
d5:fd:b6:48:c9:aa:91:87:26:44:3b:7d:58:1e:4c:
fb:18:89:72:e3:11:12:df:b6:02:c9:3b:99:07:89:
2d:3b:9f:31:b8:57:23:96:db:73:46:22:c3:38:61:
b0:96:86:10:32:01:45:71:3a:58:5f:40:c8:99:25:
b4:a7:1e:98:c0:e4:43:ee:5c:ec:30:71:70:d9:4b:
e4:e2:c0:d1:ab:f1:d0:fe:18:e9:ab:ba:c6:1a:bd:
d5:e6:14:11:b5:fa:ef:78:63:40:cd:72:f3:ba:78:
54:98:b8:d1:f9:06:3d:8b:c3:61:b9:d2:57:8a:4f:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4E:3B:BA:D7:B2:4B:53:FA:8D:8A:05:8D:1F:FE:4A:9B:12:81:8A
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132383a3a2f34382d3438203d3e20323035393431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5128::/48
Signature Algorithm: sha256WithRSAEncryption
8e:32:4d:b4:94:c6:0d:42:b7:a3:eb:c6:2a:87:28:a0:c4:74:
15:f1:da:d5:a1:ef:3c:6a:1e:82:54:38:f4:a1:a1:8c:fc:a9:
53:28:ff:ff:5e:ad:ec:5b:8d:11:6c:08:b2:ea:60:de:10:f6:
2f:93:44:61:12:14:54:78:fe:8c:e7:dc:ce:99:3c:69:ff:1c:
22:44:ab:74:28:2a:a8:df:a8:b6:6c:de:90:b3:d4:3a:f1:66:
42:5b:93:4a:2b:fa:19:f4:ce:cd:89:18:5b:c9:7e:fd:86:3a:
18:27:8b:6a:3d:72:74:ab:0d:09:54:18:a8:84:62:3b:5f:44:
ef:5a:60:fc:b1:da:3b:d6:da:cc:b0:ba:01:ed:a5:c7:80:52:
5d:b0:23:f6:9d:94:b2:fa:37:ba:3e:f0:6c:98:fe:80:27:b3:
b9:77:e9:a7:08:c0:58:8c:36:c7:52:a1:86:7d:1c:67:75:7a:
ad:0f:bf:12:d8:89:ee:3d:c7:7d:3e:46:28:f5:08:8c:0d:d5:
20:60:f9:2f:5a:e2:79:21:6c:c2:8b:a3:24:99:c4:64:86:67:
a7:dd:9e:de:9e:64:49:be:64:46:30:5f:87:71:8f:e4:b3:53:
4e:6c:1b:48:64:bc:2b:7f:ad:46:e4:92:df:cd:91:e7:8d:27:
76:ba:f8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:45 2026 by rpki-client