
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353230303a3a2f34302d3438203d3e20323034343634.roa
File: 326131343a373538313a353230303a3a2f34302d3438203d3e20323034343634.roa (raw, json)
Hash identifier: KqZefPuHCUwjB/QLc+sYpO8tazAlnALq5EIAmKUs1FI=
Subject key identifier: 8C:7D:71:0F:26:41:69:0E:9E:BF:AA:7F:3C:CE:17:AC:78:11:A7:AD
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 288BE892A76BBE59DC30B916E62F3B1F3B21B1A7
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353230303a3a2f34302d3438203d3e20323034343634.roa
Signing time: Sun 01 Nov 2026 03:45:33 +0000
ROA not before: Sun 01 Nov 2026 03:40:33 +0000
ROA not after: Sun 31 Oct 2027 03:45:33 +0000
asID: 204464
IP address blocks: 2a14:7581:5200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:8b:e8:92:a7:6b:be:59:dc:30:b9:16:e6:2f:3b:1f:3b:21:b1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Nov 1 03:40:33 2026 GMT
Not After : Oct 31 03:45:33 2027 GMT
Subject: CN=8C7D710F2641690E9EBFAA7F3CCE17AC7811A7AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b0:98:14:1b:fd:b2:a7:44:47:7a:a5:89:47:
b4:72:39:fe:53:35:78:ea:ce:26:57:1a:0b:5e:8f:
d9:56:8f:f0:3a:93:f8:60:fc:19:27:08:31:c9:d2:
76:87:c7:62:fa:53:8d:d5:f3:e3:1b:b7:e6:eb:41:
b9:04:41:18:d0:08:33:07:cb:c9:e9:df:8f:9e:66:
00:36:87:84:26:b4:20:c3:06:8d:9e:4b:0a:29:c0:
69:63:96:9e:4b:18:bf:5c:d1:10:15:85:59:c5:82:
90:52:53:05:f8:e8:7c:9c:c7:6f:8b:68:7d:72:0c:
dc:17:c4:23:e2:06:48:fa:d9:99:65:b7:12:76:05:
e1:27:9f:51:7d:90:b4:35:d3:98:25:85:41:b2:ee:
6b:51:81:25:c0:5d:99:df:9b:6a:4f:7f:02:3e:19:
96:90:f3:d8:89:23:74:ed:f9:f1:d3:3a:e3:07:5a:
46:73:c1:5a:89:d6:4c:9c:9c:a3:0e:2c:a2:3b:d7:
88:d8:16:57:8d:b1:71:ed:79:d1:4b:6d:ef:b0:36:
fe:c8:5b:bb:87:d3:b4:ec:9c:21:45:d5:1d:8a:09:
0a:3b:6c:50:11:3c:cb:75:e3:86:dc:59:34:e6:f8:
9e:e0:9b:1a:d9:fb:97:17:7e:e1:63:1f:ae:ec:10:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7D:71:0F:26:41:69:0E:9E:BF:AA:7F:3C:CE:17:AC:78:11:A7:AD
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353230303a3a2f34302d3438203d3e20323034343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5200::/40
Signature Algorithm: sha256WithRSAEncryption
0a:17:7a:6d:3b:b9:23:1f:c2:76:f8:e8:f1:b9:e2:96:b0:e9:
4b:7e:7f:c7:f0:2e:43:7e:a3:d5:73:8d:0e:a6:c2:d6:81:75:
f0:28:f9:c2:7d:7a:85:07:43:df:d4:34:23:50:88:08:ba:2d:
11:21:b1:2b:52:91:bf:42:69:32:48:24:2f:da:ad:24:64:04:
d8:6a:c1:19:e0:8f:50:2d:82:ac:50:88:c8:c7:02:46:0a:f8:
7b:95:4d:17:a1:58:cf:57:80:d7:fc:b4:ba:19:87:be:03:da:
da:5b:ae:7c:74:ec:79:b9:0d:d6:9d:74:0a:43:d8:ed:37:86:
74:73:87:fd:3e:65:99:d6:b7:84:2b:ad:2b:b8:a4:43:25:25:
56:46:5c:d0:ca:8e:81:81:9b:f5:2b:d5:42:7e:b6:91:58:fa:
0e:5c:c9:e1:33:80:dc:f6:74:5b:5c:21:9f:bf:1b:b9:d9:62:
56:a2:af:59:fd:ea:25:05:53:17:0b:ce:75:3a:5a:5b:4a:98:
7c:fc:f2:4f:9f:1e:42:3f:0e:88:92:0f:3c:9d:18:a9:bd:63:
84:f7:7e:e9:7f:32:51:3b:79:71:93:bb:61:d6:77:9d:27:dc:
ac:5a:52:26:d6:fa:3f:d8:3e:50:b7:8c:34:a9:c7:71:82:a8:
39:fb:a7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:47 2026 by rpki-client