
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353133393a3a2f34382d3438203d3e20323134343230.roa
File: 326131343a373538313a353133393a3a2f34382d3438203d3e20323134343230.roa (raw, json)
Hash identifier: S6nidefNHLE4lgABx3uEwMTP8OdTP/1uoOgnByllMBo=
Subject key identifier: 23:0D:E1:06:55:E1:81:04:69:06:27:16:7B:07:34:B8:40:D6:76:D4
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 6852E9982769D420C8200291511B10124AAB6A96
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353133393a3a2f34382d3438203d3e20323134343230.roa
Signing time: Thu 29 Oct 2026 22:09:35 +0000
ROA not before: Thu 29 Oct 2026 22:04:35 +0000
ROA not after: Thu 28 Oct 2027 22:09:35 +0000
asID: 214420
IP address blocks: 2a14:7581:5139::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:52:e9:98:27:69:d4:20:c8:20:02:91:51:1b:10:12:4a:ab:6a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Oct 29 22:04:35 2026 GMT
Not After : Oct 28 22:09:35 2027 GMT
Subject: CN=230DE10655E18104690627167B0734B840D676D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:21:7b:79:f2:36:60:94:f5:10:89:01:a7:
f7:26:50:0d:b6:29:be:0c:df:65:7b:cf:00:79:f7:
bd:39:d6:98:b7:fb:35:1c:1f:bc:05:26:0c:82:b2:
a0:2a:25:eb:29:34:df:a7:a2:5d:1f:58:57:7a:f0:
47:71:8a:03:ec:25:72:8d:18:5a:f3:ca:63:9e:b5:
25:ad:09:a8:5c:ac:d5:b5:44:35:7c:78:30:4c:b7:
cb:84:f7:74:79:31:d6:23:c5:45:e4:37:b2:f4:d7:
4f:64:f0:dc:1a:c1:6c:95:72:6f:3c:0a:be:a3:9e:
a6:22:50:86:80:45:b7:6d:d6:5b:b8:c8:3d:6c:6f:
26:0e:01:2f:65:60:80:58:c1:59:a3:b1:6e:4c:8c:
3f:d2:6d:24:82:39:ab:47:36:3a:46:e9:68:51:5d:
5a:33:de:62:b8:d6:87:22:b2:99:f8:ea:dd:fa:15:
1c:09:e3:56:99:13:47:79:6f:28:fc:9f:28:24:d8:
73:08:1b:58:51:9b:2c:90:e9:40:53:36:13:b3:cd:
d7:36:42:ce:26:54:49:bc:fa:6e:21:d8:49:66:b9:
8e:27:32:38:14:5d:c6:44:95:0f:05:9a:82:8f:08:
66:e0:9a:bd:44:72:6f:7a:31:fe:d4:ad:29:d3:e3:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0D:E1:06:55:E1:81:04:69:06:27:16:7B:07:34:B8:40:D6:76:D4
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353133393a3a2f34382d3438203d3e20323134343230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5139::/48
Signature Algorithm: sha256WithRSAEncryption
65:90:b4:71:99:42:c5:f8:25:b8:f7:42:f4:73:96:46:c3:db:
b1:21:69:b0:2c:fa:b1:cf:60:cf:5a:76:74:6b:32:ff:d3:c0:
c1:56:e8:ce:cc:eb:7b:87:99:95:6f:f8:a1:7d:9f:c2:62:d9:
5f:99:5c:45:f7:71:02:85:0b:c9:bb:1e:cb:c0:53:ef:97:2e:
31:e8:81:7e:c6:32:fa:2f:c2:23:f1:09:b4:94:9d:fb:45:56:
61:8c:be:6d:6c:74:96:6e:74:83:48:cc:1e:0c:cf:71:bd:fa:
41:49:6e:77:44:54:e7:56:60:77:95:cf:5b:7c:43:40:2c:b2:
7a:74:69:16:64:5d:ea:c5:62:cd:1f:f6:e0:91:06:da:5b:2c:
c8:ff:c6:f2:7e:e3:75:9f:23:28:f4:68:17:a2:92:1b:46:af:
05:f8:6d:02:db:e3:d8:7d:38:05:90:9c:f4:ca:43:2f:01:c8:
91:ff:3b:06:f0:f3:73:29:1d:9d:8b:4c:14:de:23:32:42:15:
fa:1d:95:d2:ff:8e:a8:b7:77:46:09:1f:c7:80:cc:b0:dd:74:
a5:9f:d9:69:e8:5c:9a:6b:c3:d4:0e:a2:d4:2c:9b:72:37:23:
6e:c6:5e:fd:3e:56:91:a2:a8:76:92:03:ea:82:a4:e3:81:c6:
7a:bb:22:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:34:48 2026 by rpki-client