
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353133613a3a2f34382d3438203d3e20323134343230.roa
File: 326131343a373538313a353133613a3a2f34382d3438203d3e20323134343230.roa (raw, json)
Hash identifier: 3UydaDH1AmWkTZA8oc4bH3VbFhrixmVn6j8lcleXIrk=
Subject key identifier: FA:76:D7:CC:08:14:52:40:8B:2D:4A:B0:27:F7:51:D3:64:E1:07:22
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 7B3D75C92B4E5D0E945BF1320BFA67740DCC4BBE
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353133613a3a2f34382d3438203d3e20323134343230.roa
Signing time: Thu 29 Oct 2026 22:09:37 +0000
ROA not before: Thu 29 Oct 2026 22:04:37 +0000
ROA not after: Thu 28 Oct 2027 22:09:37 +0000
asID: 214420
IP address blocks: 2a14:7581:513a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:3d:75:c9:2b:4e:5d:0e:94:5b:f1:32:0b:fa:67:74:0d:cc:4b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Oct 29 22:04:37 2026 GMT
Not After : Oct 28 22:09:37 2027 GMT
Subject: CN=FA76D7CC081452408B2D4AB027F751D364E10722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:75:96:4d:4a:4f:b2:7a:6e:06:3d:14:21:
62:2c:d2:6f:34:47:27:d2:69:41:22:f5:a9:eb:f2:
23:61:62:37:78:32:8f:3c:ac:b3:4c:f5:46:17:e7:
29:d6:df:4c:cc:49:c8:d4:a5:7a:35:9c:08:2c:dc:
df:6a:0e:f1:d6:c7:77:0c:85:f6:3a:eb:24:de:41:
f1:91:0e:69:a2:40:ee:79:52:9b:b3:d9:16:12:2a:
96:fc:2d:39:9e:27:41:00:c7:ed:5e:1c:13:1a:90:
83:19:1b:2a:90:74:bf:07:da:71:62:40:a3:ff:d1:
47:c5:4e:14:d8:06:d8:21:64:e7:57:d0:3c:5a:40:
5d:a0:c1:9d:3a:64:cf:22:ee:39:17:1a:0d:15:9b:
d3:8c:54:fe:dd:13:11:69:ed:1e:a2:4a:d3:fb:2a:
7e:6b:f1:4a:a7:3c:d9:26:21:6a:c7:0b:43:3d:39:
c3:ce:1d:a5:df:84:d3:c6:ab:8e:57:67:43:c3:45:
47:4f:0a:6a:d5:9e:5d:89:9f:0b:4e:64:87:61:c5:
79:8d:66:93:49:24:4a:ba:0d:39:7f:84:d4:ec:b7:
d1:a4:ea:dd:2d:73:45:96:02:dd:96:a4:23:09:d5:
09:4c:f3:9c:56:53:80:1d:20:22:8c:48:37:f6:a7:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:76:D7:CC:08:14:52:40:8B:2D:4A:B0:27:F7:51:D3:64:E1:07:22
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353133613a3a2f34382d3438203d3e20323134343230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:513a::/48
Signature Algorithm: sha256WithRSAEncryption
04:44:19:0d:e7:ce:d1:f0:a6:d7:9d:37:d7:03:e5:b4:2d:7d:
1a:9e:8c:65:f3:d6:49:71:6f:96:62:3d:a2:7c:1b:86:84:fc:
00:59:46:f0:cc:b2:aa:0c:b2:15:3e:a1:67:cc:6d:9c:0d:b6:
a8:1a:58:84:1d:52:8a:8e:42:53:43:1d:71:6b:5e:a9:50:8b:
b7:20:dc:16:87:68:87:50:58:88:58:92:2f:5b:31:b3:27:ad:
93:e1:99:bf:77:c8:a5:a2:f2:81:19:35:11:7b:ce:c4:19:8e:
34:f7:f2:da:08:86:50:4d:28:c3:f5:0d:c0:de:27:de:92:71:
9d:41:10:32:23:16:c9:db:b5:e5:4a:aa:69:1f:36:77:42:93:
05:d6:df:47:8a:70:25:79:cf:af:ac:5d:93:fc:6b:d5:54:a6:
96:e8:cb:0c:75:56:ae:8b:f4:93:4f:6e:87:36:fe:59:33:64:
c6:5f:b9:e4:2d:3e:7e:6f:9b:af:52:a0:5a:f1:d7:4f:89:27:
90:20:b1:ca:e6:77:90:40:cd:cc:1a:1e:50:62:66:97:c4:4a:
25:41:43:af:00:93:1c:41:7a:7c:ff:b4:f7:1b:59:07:af:9e:
e4:7f:65:bd:a8:8b:82:5a:55:a8:f3:06:53:7f:17:0d:ff:f8:
8c:10:fe:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:50 2026 by rpki-client