Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353133383a3a2f34382d3438203d3e20323134343230.roa
File:                     326131343a373538313a353133383a3a2f34382d3438203d3e20323134343230.roa (raw, json)
Hash identifier:          eXUZfCR0xosp7PRAODEz3tyvUumQLPhPOeg456YOlcg=
Subject key identifier:   3E:2D:56:54:A4:DB:F2:96:96:4F:92:5F:47:CF:F1:FC:EC:BD:D8:62
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       3B1EDE4007B9252F1ED685530006D0A27474C29E
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353133383a3a2f34382d3438203d3e20323134343230.roa
Signing time:             Thu 29 Oct 2026 22:09:35 +0000
ROA not before:           Thu 29 Oct 2026 22:04:35 +0000
ROA not after:            Thu 28 Oct 2027 22:09:35 +0000
asID:                     214420
IP address blocks:        2a14:7581:5138::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1e:de:40:07:b9:25:2f:1e:d6:85:53:00:06:d0:a2:74:74:c2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:35 2026 GMT
            Not After : Oct 28 22:09:35 2027 GMT
        Subject: CN=3E2D5654A4DBF296964F925F47CFF1FCECBDD862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:06:00:3f:4c:26:fd:0d:42:2c:9e:d6:38:
                    e6:35:99:50:c4:85:fa:b5:1b:60:af:70:0f:d1:98:
                    07:35:2e:22:38:17:f4:26:f2:c6:32:83:2f:de:9e:
                    c5:fd:da:8a:5a:36:cb:6d:21:27:1e:31:7e:36:67:
                    04:fb:6a:69:4e:aa:31:11:8d:22:e5:20:5c:3c:13:
                    1b:05:b7:eb:31:ea:f8:b3:a5:01:a1:59:a7:1d:3a:
                    e2:4a:aa:0d:13:ab:8d:30:e8:83:b9:0a:c1:4f:a1:
                    23:23:56:21:20:ce:6b:fe:da:de:c9:f5:ac:c0:d2:
                    86:62:7b:bc:ad:fd:49:f5:1c:aa:23:3e:13:42:c3:
                    68:6d:3f:8e:6b:2b:3d:ed:26:ef:fe:98:8b:cf:00:
                    7c:26:fc:05:2d:b7:e2:a2:e5:b1:fb:cf:b3:c5:cd:
                    84:91:21:3b:50:f2:15:89:22:20:3a:09:67:05:f6:
                    5e:68:ca:db:3c:60:6a:c1:15:ee:5c:21:43:ab:5a:
                    25:81:a4:4e:08:5d:87:6f:ef:6d:18:43:b3:47:62:
                    09:55:a9:04:67:fe:9c:ee:74:d8:14:3c:92:5f:19:
                    9a:48:fe:ca:0c:40:77:b6:df:5d:93:b7:2c:44:b1:
                    c4:1a:d5:c0:c6:34:ab:ea:54:d2:be:48:42:5e:6b:
                    4d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2D:56:54:A4:DB:F2:96:96:4F:92:5F:47:CF:F1:FC:EC:BD:D8:62
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353133383a3a2f34382d3438203d3e20323134343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5138::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:cb:b5:1c:27:35:3b:58:06:a8:a9:da:d2:21:d1:84:13:3b:
         d4:a6:18:81:e4:5d:53:be:6a:3d:54:dd:2e:2e:95:60:61:10:
         20:03:e5:fc:ba:39:ad:0b:22:00:7b:ed:c0:74:13:ed:49:21:
         43:2b:01:85:c9:d8:3f:54:c6:4d:02:9c:9a:a6:1a:b6:7a:55:
         15:70:27:c9:eb:e6:7b:b8:4b:52:47:53:92:83:6a:29:37:b9:
         8e:59:b4:2a:e9:00:79:b8:c7:56:7a:f2:a1:c7:de:25:dd:ba:
         51:4e:ce:77:a5:66:06:66:28:c0:a3:76:dd:d8:60:f0:f9:d6:
         a8:b8:c6:d7:8b:e9:df:9f:45:5b:9b:6e:38:52:2d:f1:85:c5:
         6c:d9:25:c3:26:85:d5:06:8e:96:c1:c2:53:19:cd:47:57:bf:
         92:39:39:24:73:22:d6:34:fa:f6:70:89:cf:4b:95:13:60:df:
         7e:55:3b:d5:0c:7e:bf:91:2f:94:fb:59:14:22:29:1e:b1:81:
         3b:96:15:53:fc:70:0a:87:6b:c8:45:2e:05:0b:18:56:b6:6d:
         7e:4e:b8:dc:98:0e:d1:8f:22:5c:c5:34:83:b8:75:a4:ca:e2:
         8b:9d:44:bd:8a:ea:32:4e:01:97:33:f4:62:d1:fd:50:2d:25:
         92:25:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:34:44 2026 by rpki-client