
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132393a3a2f34382d3438203d3e20323035393431.roa
File: 326131343a373538313a353132393a3a2f34382d3438203d3e20323035393431.roa (raw, json)
Hash identifier: 7DuSZqa8xQdLEXAO2Y/JeT5Sm5WKl/ZTsKMQ174/UD4=
Subject key identifier: E4:DF:23:D5:E4:97:F2:55:43:E7:7B:C6:44:04:AB:42:54:AB:AA:79
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 691336CDF6017E0F4654160A7368FB272BFA9A9D
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132393a3a2f34382d3438203d3e20323035393431.roa
Signing time: Thu 29 Oct 2026 22:09:47 +0000
ROA not before: Thu 29 Oct 2026 22:04:47 +0000
ROA not after: Thu 28 Oct 2027 22:09:47 +0000
asID: 205941
IP address blocks: 2a14:7581:5129::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:13:36:cd:f6:01:7e:0f:46:54:16:0a:73:68:fb:27:2b:fa:9a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Oct 29 22:04:47 2026 GMT
Not After : Oct 28 22:09:47 2027 GMT
Subject: CN=E4DF23D5E497F25543E77BC64404AB4254ABAA79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:c7:fb:ac:b9:10:da:d4:7a:9c:55:7e:e1:
4f:46:b2:62:52:44:ab:1e:fd:03:f3:d5:b8:59:8c:
4e:ea:d4:55:92:db:c0:78:08:00:d5:86:4c:8b:cc:
78:8f:b5:de:a5:92:1c:51:ad:b8:f6:9e:f8:55:ae:
17:79:c1:69:60:ba:31:fd:30:c0:be:0d:1a:6e:f3:
21:6b:e2:22:e1:d8:73:aa:b8:18:a9:e8:15:f5:2d:
d1:e1:92:de:11:d6:96:91:af:c0:6b:a8:68:ba:b8:
5c:19:af:bd:de:ea:4a:2f:20:3f:07:a0:2b:b7:35:
20:2f:7a:f8:2b:b7:9d:b1:d8:27:aa:7d:92:11:d6:
dd:46:3c:2c:d2:8e:4f:0d:95:e0:b7:ec:4b:e6:8e:
53:44:f8:fa:9a:96:81:51:77:18:be:9d:34:27:dd:
45:72:b7:02:41:92:a0:b9:3a:81:bb:04:86:8b:b1:
72:80:36:0e:90:77:a8:e8:df:cd:2f:95:e6:80:e4:
f3:36:a7:a9:2a:50:17:e3:a9:33:8a:7e:01:3a:9a:
21:12:25:cd:98:32:0a:f8:20:e6:8a:f8:80:65:d0:
d9:97:b4:9a:c2:f7:8f:7c:3e:a6:ee:27:b3:59:0f:
a3:58:29:67:ab:91:ae:5e:05:72:e7:ed:94:fa:f3:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DF:23:D5:E4:97:F2:55:43:E7:7B:C6:44:04:AB:42:54:AB:AA:79
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353132393a3a2f34382d3438203d3e20323035393431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5129::/48
Signature Algorithm: sha256WithRSAEncryption
8b:74:48:f2:32:97:ed:e6:ca:3b:eb:ae:88:d5:73:52:9b:b9:
9e:bc:22:7c:79:ef:0f:45:46:3e:96:96:44:4a:81:e8:df:6b:
7a:e5:db:5e:ce:96:db:25:b4:d3:84:a4:af:01:c8:bf:30:e6:
0e:76:11:d7:3c:76:22:a7:13:8a:fa:6f:5a:9b:86:e2:8a:65:
ce:95:ed:19:83:a2:f1:4c:47:2d:9c:96:34:aa:14:aa:26:66:
e0:05:4f:67:83:e7:b4:9a:a8:72:b6:9c:9a:01:9a:54:ac:39:
b1:38:24:a8:e7:14:3b:61:95:ac:44:44:34:9b:93:23:2c:0c:
ed:00:e6:d5:66:0c:98:20:84:9e:72:b9:62:06:2f:1a:2b:74:
ab:43:8c:fe:ee:78:fe:e7:b0:9c:86:b6:eb:78:d2:68:f8:55:
18:1b:64:20:cb:5e:8a:0d:da:4f:a9:2f:d0:15:f8:b1:d5:aa:
de:ea:e2:31:0e:92:4f:04:d6:bb:47:78:9d:cf:13:42:ce:a8:
95:3d:5e:55:f1:a3:23:a1:66:a1:65:36:91:ea:67:b5:0f:64:
03:20:e6:56:57:89:47:32:5f:7e:13:66:3b:da:d6:54:c9:06:
ad:d5:59:d2:d1:f4:56:a0:d8:ee:fb:69:94:4a:b6:8d:27:98:
12:f2:2b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:48 2026 by rpki-client