Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353330303a3a2f34302d3438203d3e20323034343634.roa
File:                     326131343a373538313a353330303a3a2f34302d3438203d3e20323034343634.roa (raw, json)
Hash identifier:          JGpGoFyEfvInXZcfgwQ3DG+6LwxhEWXaM6u1/HN47vc=
Subject key identifier:   22:56:9A:DA:D9:66:13:2E:2C:E7:01:76:FA:74:E7:A6:D3:0B:29:B0
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       0CDECB4C62E3DC1BD8F39A0300BA19FB5589BEBD
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353330303a3a2f34302d3438203d3e20323034343634.roa
Signing time:             Sun 01 Nov 2026 03:45:19 +0000
ROA not before:           Sun 01 Nov 2026 03:40:19 +0000
ROA not after:            Sun 31 Oct 2027 03:45:19 +0000
asID:                     204464
IP address blocks:        2a14:7581:5300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:de:cb:4c:62:e3:dc:1b:d8:f3:9a:03:00:ba:19:fb:55:89:be:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Nov  1 03:40:19 2026 GMT
            Not After : Oct 31 03:45:19 2027 GMT
        Subject: CN=22569ADAD966132E2CE70176FA74E7A6D30B29B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:31:69:01:a1:4b:94:b6:14:bc:87:5e:40:
                    96:a2:19:4c:07:0e:45:26:1c:e5:e4:53:f6:10:f2:
                    16:56:ba:29:87:c1:8b:59:eb:f1:59:db:42:0b:86:
                    20:b5:60:fa:d1:90:a1:f9:64:68:4d:08:0e:05:9a:
                    9d:17:4a:8a:45:03:6a:fc:72:fa:d6:ca:df:6c:13:
                    14:13:bc:43:8c:bc:04:18:4b:9c:63:7c:a5:2c:26:
                    c6:cf:ad:dc:f1:ae:52:9e:77:22:fd:a3:79:ca:92:
                    75:7b:68:b0:78:c2:ff:d0:5c:b5:b0:4f:66:80:18:
                    5e:90:69:bc:9c:10:56:88:e2:8a:d7:fd:e1:6c:50:
                    93:6a:41:32:8f:86:94:80:05:2a:54:e6:01:5b:c7:
                    3a:63:22:6f:ab:f3:93:53:e2:2d:ea:27:71:e7:06:
                    76:3a:b4:0c:06:01:d7:58:ca:97:7d:92:67:70:47:
                    5e:96:22:b0:6d:0c:75:5e:b0:8a:45:b9:bd:7d:17:
                    b1:3a:31:df:0f:ca:c0:98:71:fd:57:39:42:05:e7:
                    1b:7c:52:36:74:13:77:14:20:e0:4c:d7:b2:e4:b6:
                    bf:80:98:42:6a:e1:8b:96:fd:39:f1:04:1c:ce:2d:
                    4e:82:96:1c:72:76:02:25:1e:0d:a0:04:1f:58:a6:
                    06:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:56:9A:DA:D9:66:13:2E:2C:E7:01:76:FA:74:E7:A6:D3:0B:29:B0
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353330303a3a2f34302d3438203d3e20323034343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         15:59:22:09:1c:7d:54:99:00:ae:e7:a5:58:b9:82:e8:0a:9c:
         47:a4:75:69:22:d4:fe:70:73:b6:0f:58:cb:43:eb:98:f8:56:
         87:b6:81:8c:83:67:5c:5b:98:76:4e:ac:7d:bc:8e:16:e7:01:
         6f:a0:68:b9:26:17:36:56:2b:8b:2a:74:4c:01:24:82:c5:f7:
         46:70:68:3b:3e:3f:b4:d2:fd:9d:f9:57:f5:93:c8:92:25:6c:
         fb:47:ae:9d:76:29:d1:cb:00:2a:c6:ac:57:57:6f:65:8e:8b:
         14:ed:8e:9b:05:5c:e3:f6:18:af:6c:ed:bb:4f:e2:ed:b5:22:
         88:d0:fd:c0:9b:08:f5:10:db:b4:80:97:11:fd:8c:cc:ac:da:
         b4:7a:3e:54:56:7a:bf:f5:f9:a6:e9:84:17:ae:31:2a:5d:04:
         af:cd:4b:78:aa:a6:12:c0:54:c0:bb:5d:59:e7:b7:07:49:bc:
         4f:61:f5:33:bc:8f:f1:b4:f1:82:85:4e:67:cc:20:a3:05:56:
         28:c0:12:dc:2d:7b:db:b4:12:9d:40:4a:6d:72:9c:67:5a:12:
         30:18:89:8d:75:4f:3c:ad:fb:fa:b9:6a:c9:51:0f:24:d3:8c:
         75:75:17:e9:e1:16:6a:89:2e:39:8b:33:04:9e:dc:9a:df:e4:
         1f:42:35:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:15 2026 by rpki-client