Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353430303a3a2f34302d3438203d3e20323034343634.roa
File:                     326131343a373538313a353430303a3a2f34302d3438203d3e20323034343634.roa (raw, json)
Hash identifier:          4dJZN7Yzlrj6pEdseLQNbjEN/HGAyAoXSdA/gB0iFMs=
Subject key identifier:   D0:BA:26:A0:CA:A7:E6:57:A4:7F:2D:0C:A2:D2:78:8D:60:D6:1A:A9
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       77B2B683A89C7281FF4F802C253B58FFDE80CC35
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353430303a3a2f34302d3438203d3e20323034343634.roa
Signing time:             Sun 01 Nov 2026 03:45:08 +0000
ROA not before:           Sun 01 Nov 2026 03:40:08 +0000
ROA not after:            Sun 31 Oct 2027 03:45:08 +0000
asID:                     204464
IP address blocks:        2a14:7581:5400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b2:b6:83:a8:9c:72:81:ff:4f:80:2c:25:3b:58:ff:de:80:cc:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Nov  1 03:40:08 2026 GMT
            Not After : Oct 31 03:45:08 2027 GMT
        Subject: CN=D0BA26A0CAA7E657A47F2D0CA2D2788D60D61AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:a9:b7:f5:9b:5b:23:a7:bb:76:02:4d:ba:
                    30:b9:da:66:df:8e:f4:26:85:ae:00:00:74:63:7f:
                    3f:c9:cf:35:3d:78:4d:76:06:62:07:76:c5:53:49:
                    fe:17:c2:79:0c:57:cb:ee:13:bd:34:d1:10:0a:62:
                    51:60:12:af:05:9f:7e:a2:44:07:35:42:a2:3e:2f:
                    7d:98:7c:4f:8e:0a:07:ac:63:b4:3e:71:fb:61:72:
                    5d:70:a0:05:d8:89:0b:d3:80:d1:ef:91:0b:a2:88:
                    8a:44:10:e1:c0:08:6b:24:07:66:e4:23:26:01:75:
                    11:1e:2a:04:9c:30:ec:9a:a8:37:5a:7c:45:ff:cf:
                    e3:9a:e4:84:4f:25:58:a4:94:32:2d:61:d7:ab:7a:
                    88:3f:40:07:f7:36:29:c2:f0:48:62:b6:5b:53:1d:
                    57:5d:d1:73:c9:9a:5b:89:b6:67:ec:bf:5a:5f:65:
                    ee:aa:cf:38:5c:13:34:e8:92:e6:28:e1:b2:63:fd:
                    67:76:f0:03:71:05:4d:57:2b:78:f5:02:73:ef:0d:
                    fc:ed:eb:ae:74:27:2a:4b:8d:9e:ee:3b:e6:90:5e:
                    a7:ca:53:f1:f3:e3:e3:d7:d0:6b:cb:4f:e9:4a:a6:
                    d6:db:42:10:ed:6f:7c:68:07:16:96:c6:f8:f2:07:
                    f3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BA:26:A0:CA:A7:E6:57:A4:7F:2D:0C:A2:D2:78:8D:60:D6:1A:A9
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353430303a3a2f34302d3438203d3e20323034343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5400::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:1f:74:e0:6a:ae:a8:f2:73:ef:b6:f3:9e:d1:50:f5:7d:
         30:45:5d:b3:0d:c4:fe:41:6c:59:99:37:e3:c3:e1:e6:b2:58:
         09:69:24:95:f5:b5:2d:6a:2f:e9:81:d9:bd:ca:5f:c2:75:64:
         55:8c:60:17:58:50:49:4a:3d:98:bf:32:6e:38:59:cf:2d:e8:
         bb:97:44:c3:d3:01:27:49:d6:46:ab:bb:b5:29:61:1f:b9:00:
         ad:ba:87:f3:7a:fa:ee:2e:94:e2:88:1c:a5:86:ec:ba:26:0b:
         34:ac:09:eb:a9:82:f5:c4:12:51:ab:69:13:22:ac:2b:55:61:
         ab:cc:4c:fb:fb:41:24:f6:ec:72:0f:ea:ca:be:e6:f9:36:de:
         c7:13:e5:2e:96:4f:50:66:a9:46:8c:8c:25:b6:f3:f2:20:2f:
         e0:b1:db:64:08:89:a8:4e:12:14:ab:55:4a:00:af:69:41:ac:
         23:4c:f9:1b:43:30:4b:8b:ad:19:1d:22:4b:e0:01:3d:4c:af:
         8c:41:ae:25:80:0e:80:74:3e:f6:42:f5:a6:a2:97:f8:29:ac:
         dd:8a:76:b9:b8:94:66:74:99:66:07:8f:87:b8:49:79:5c:38:
         1b:05:48:bf:44:5c:12:bf:06:20:b3:ac:ff:57:35:4a:2e:12:
         28:44:4c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:55 2026 by rpki-client