Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353230303a3a2f34302d3438203d3e20323034343634.roa
File:                     326131343a373538313a353230303a3a2f34302d3438203d3e20323034343634.roa (raw, json)
Hash identifier:          KqZefPuHCUwjB/QLc+sYpO8tazAlnALq5EIAmKUs1FI=
Subject key identifier:   8C:7D:71:0F:26:41:69:0E:9E:BF:AA:7F:3C:CE:17:AC:78:11:A7:AD
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       288BE892A76BBE59DC30B916E62F3B1F3B21B1A7
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353230303a3a2f34302d3438203d3e20323034343634.roa
Signing time:             Sun 01 Nov 2026 03:45:33 +0000
ROA not before:           Sun 01 Nov 2026 03:40:33 +0000
ROA not after:            Sun 31 Oct 2027 03:45:33 +0000
asID:                     204464
IP address blocks:        2a14:7581:5200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8b:e8:92:a7:6b:be:59:dc:30:b9:16:e6:2f:3b:1f:3b:21:b1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Nov  1 03:40:33 2026 GMT
            Not After : Oct 31 03:45:33 2027 GMT
        Subject: CN=8C7D710F2641690E9EBFAA7F3CCE17AC7811A7AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b0:98:14:1b:fd:b2:a7:44:47:7a:a5:89:47:
                    b4:72:39:fe:53:35:78:ea:ce:26:57:1a:0b:5e:8f:
                    d9:56:8f:f0:3a:93:f8:60:fc:19:27:08:31:c9:d2:
                    76:87:c7:62:fa:53:8d:d5:f3:e3:1b:b7:e6:eb:41:
                    b9:04:41:18:d0:08:33:07:cb:c9:e9:df:8f:9e:66:
                    00:36:87:84:26:b4:20:c3:06:8d:9e:4b:0a:29:c0:
                    69:63:96:9e:4b:18:bf:5c:d1:10:15:85:59:c5:82:
                    90:52:53:05:f8:e8:7c:9c:c7:6f:8b:68:7d:72:0c:
                    dc:17:c4:23:e2:06:48:fa:d9:99:65:b7:12:76:05:
                    e1:27:9f:51:7d:90:b4:35:d3:98:25:85:41:b2:ee:
                    6b:51:81:25:c0:5d:99:df:9b:6a:4f:7f:02:3e:19:
                    96:90:f3:d8:89:23:74:ed:f9:f1:d3:3a:e3:07:5a:
                    46:73:c1:5a:89:d6:4c:9c:9c:a3:0e:2c:a2:3b:d7:
                    88:d8:16:57:8d:b1:71:ed:79:d1:4b:6d:ef:b0:36:
                    fe:c8:5b:bb:87:d3:b4:ec:9c:21:45:d5:1d:8a:09:
                    0a:3b:6c:50:11:3c:cb:75:e3:86:dc:59:34:e6:f8:
                    9e:e0:9b:1a:d9:fb:97:17:7e:e1:63:1f:ae:ec:10:
                    20:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7D:71:0F:26:41:69:0E:9E:BF:AA:7F:3C:CE:17:AC:78:11:A7:AD
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353230303a3a2f34302d3438203d3e20323034343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:17:7a:6d:3b:b9:23:1f:c2:76:f8:e8:f1:b9:e2:96:b0:e9:
         4b:7e:7f:c7:f0:2e:43:7e:a3:d5:73:8d:0e:a6:c2:d6:81:75:
         f0:28:f9:c2:7d:7a:85:07:43:df:d4:34:23:50:88:08:ba:2d:
         11:21:b1:2b:52:91:bf:42:69:32:48:24:2f:da:ad:24:64:04:
         d8:6a:c1:19:e0:8f:50:2d:82:ac:50:88:c8:c7:02:46:0a:f8:
         7b:95:4d:17:a1:58:cf:57:80:d7:fc:b4:ba:19:87:be:03:da:
         da:5b:ae:7c:74:ec:79:b9:0d:d6:9d:74:0a:43:d8:ed:37:86:
         74:73:87:fd:3e:65:99:d6:b7:84:2b:ad:2b:b8:a4:43:25:25:
         56:46:5c:d0:ca:8e:81:81:9b:f5:2b:d5:42:7e:b6:91:58:fa:
         0e:5c:c9:e1:33:80:dc:f6:74:5b:5c:21:9f:bf:1b:b9:d9:62:
         56:a2:af:59:fd:ea:25:05:53:17:0b:ce:75:3a:5a:5b:4a:98:
         7c:fc:f2:4f:9f:1e:42:3f:0e:88:92:0f:3c:9d:18:a9:bd:63:
         84:f7:7e:e9:7f:32:51:3b:79:71:93:bb:61:d6:77:9d:27:dc:
         ac:5a:52:26:d6:fa:3f:d8:3e:50:b7:8c:34:a9:c7:71:82:a8:
         39:fb:a7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:47 2026 by rpki-client