Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353133613a3a2f34382d3438203d3e20323134343230.roa
File:                     326131343a373538313a353133613a3a2f34382d3438203d3e20323134343230.roa (raw, json)
Hash identifier:          3UydaDH1AmWkTZA8oc4bH3VbFhrixmVn6j8lcleXIrk=
Subject key identifier:   FA:76:D7:CC:08:14:52:40:8B:2D:4A:B0:27:F7:51:D3:64:E1:07:22
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       7B3D75C92B4E5D0E945BF1320BFA67740DCC4BBE
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353133613a3a2f34382d3438203d3e20323134343230.roa
Signing time:             Thu 29 Oct 2026 22:09:37 +0000
ROA not before:           Thu 29 Oct 2026 22:04:37 +0000
ROA not after:            Thu 28 Oct 2027 22:09:37 +0000
asID:                     214420
IP address blocks:        2a14:7581:513a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 10:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3d:75:c9:2b:4e:5d:0e:94:5b:f1:32:0b:fa:67:74:0d:cc:4b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:37 2026 GMT
            Not After : Oct 28 22:09:37 2027 GMT
        Subject: CN=FA76D7CC081452408B2D4AB027F751D364E10722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:75:96:4d:4a:4f:b2:7a:6e:06:3d:14:21:
                    62:2c:d2:6f:34:47:27:d2:69:41:22:f5:a9:eb:f2:
                    23:61:62:37:78:32:8f:3c:ac:b3:4c:f5:46:17:e7:
                    29:d6:df:4c:cc:49:c8:d4:a5:7a:35:9c:08:2c:dc:
                    df:6a:0e:f1:d6:c7:77:0c:85:f6:3a:eb:24:de:41:
                    f1:91:0e:69:a2:40:ee:79:52:9b:b3:d9:16:12:2a:
                    96:fc:2d:39:9e:27:41:00:c7:ed:5e:1c:13:1a:90:
                    83:19:1b:2a:90:74:bf:07:da:71:62:40:a3:ff:d1:
                    47:c5:4e:14:d8:06:d8:21:64:e7:57:d0:3c:5a:40:
                    5d:a0:c1:9d:3a:64:cf:22:ee:39:17:1a:0d:15:9b:
                    d3:8c:54:fe:dd:13:11:69:ed:1e:a2:4a:d3:fb:2a:
                    7e:6b:f1:4a:a7:3c:d9:26:21:6a:c7:0b:43:3d:39:
                    c3:ce:1d:a5:df:84:d3:c6:ab:8e:57:67:43:c3:45:
                    47:4f:0a:6a:d5:9e:5d:89:9f:0b:4e:64:87:61:c5:
                    79:8d:66:93:49:24:4a:ba:0d:39:7f:84:d4:ec:b7:
                    d1:a4:ea:dd:2d:73:45:96:02:dd:96:a4:23:09:d5:
                    09:4c:f3:9c:56:53:80:1d:20:22:8c:48:37:f6:a7:
                    ee:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:76:D7:CC:08:14:52:40:8B:2D:4A:B0:27:F7:51:D3:64:E1:07:22
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353133613a3a2f34382d3438203d3e20323134343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:513a::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:44:19:0d:e7:ce:d1:f0:a6:d7:9d:37:d7:03:e5:b4:2d:7d:
         1a:9e:8c:65:f3:d6:49:71:6f:96:62:3d:a2:7c:1b:86:84:fc:
         00:59:46:f0:cc:b2:aa:0c:b2:15:3e:a1:67:cc:6d:9c:0d:b6:
         a8:1a:58:84:1d:52:8a:8e:42:53:43:1d:71:6b:5e:a9:50:8b:
         b7:20:dc:16:87:68:87:50:58:88:58:92:2f:5b:31:b3:27:ad:
         93:e1:99:bf:77:c8:a5:a2:f2:81:19:35:11:7b:ce:c4:19:8e:
         34:f7:f2:da:08:86:50:4d:28:c3:f5:0d:c0:de:27:de:92:71:
         9d:41:10:32:23:16:c9:db:b5:e5:4a:aa:69:1f:36:77:42:93:
         05:d6:df:47:8a:70:25:79:cf:af:ac:5d:93:fc:6b:d5:54:a6:
         96:e8:cb:0c:75:56:ae:8b:f4:93:4f:6e:87:36:fe:59:33:64:
         c6:5f:b9:e4:2d:3e:7e:6f:9b:af:52:a0:5a:f1:d7:4f:89:27:
         90:20:b1:ca:e6:77:90:40:cd:cc:1a:1e:50:62:66:97:c4:4a:
         25:41:43:af:00:93:1c:41:7a:7c:ff:b4:f7:1b:59:07:af:9e:
         e4:7f:65:bd:a8:8b:82:5a:55:a8:f3:06:53:7f:17:0d:ff:f8:
         8c:10:fe:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:50 2026 by rpki-client