
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538333a653830303a3a2f34302d3438203d3e20323034343634.roa
File: 326131343a373538333a653830303a3a2f34302d3438203d3e20323034343634.roa (raw, json)
Hash identifier: B8uAk7MAMmRYKyjlCVxSybbP2IsftB50eX+MHB4wUtw=
Subject key identifier: 03:56:DC:1C:78:06:99:53:15:E2:0E:0C:F9:40:68:60:E5:5F:84:12
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 29194CE994AA61BBB940C3E859854C57B589A4D3
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538333a653830303a3a2f34302d3438203d3e20323034343634.roa
Signing time: Sun 01 Nov 2026 03:44:18 +0000
ROA not before: Sun 01 Nov 2026 03:39:18 +0000
ROA not after: Sun 31 Oct 2027 03:44:18 +0000
asID: 204464
IP address blocks: 2a14:7583:e800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:19:4c:e9:94:aa:61:bb:b9:40:c3:e8:59:85:4c:57:b5:89:a4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Nov 1 03:39:18 2026 GMT
Not After : Oct 31 03:44:18 2027 GMT
Subject: CN=0356DC1C7806995315E20E0CF9406860E55F8412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:62:38:41:39:f7:fc:3a:85:8c:f6:65:65:
c6:63:16:99:b5:07:47:ff:2f:ab:9c:83:3a:96:48:
97:b2:eb:1b:c3:83:ae:51:59:eb:6a:82:68:b8:08:
d5:e6:d5:d1:05:a1:18:8a:ec:c5:92:53:15:0f:66:
61:3f:4f:53:dc:42:9e:4a:b0:cf:26:1c:fd:bb:fa:
93:84:b5:1b:32:e9:54:9a:30:76:29:dd:8a:02:99:
fb:4d:f9:29:4a:8c:4c:0f:5a:89:e1:d6:86:bf:17:
02:83:86:b2:d4:88:80:53:03:f6:10:04:fe:52:b2:
1e:79:0b:f6:91:c9:1a:00:72:4c:9e:5e:eb:80:f5:
ed:5f:61:0f:d6:2c:fd:5c:c3:d3:c7:75:43:10:75:
8d:96:f0:c8:41:ef:30:e7:fe:0b:58:0c:03:f9:3a:
f6:50:73:bd:28:84:84:c1:70:df:ec:dc:f8:86:ae:
64:55:ae:6e:3e:c8:10:35:ad:9f:ae:7f:40:98:f2:
dc:0e:73:8c:50:4b:97:ec:82:a4:10:0f:2f:61:8b:
4e:62:a6:a4:5d:14:30:85:a5:7e:b5:8c:e3:ff:87:
63:7a:42:d6:d1:ff:f8:2e:60:c4:63:50:4a:78:74:
65:75:f8:fb:6b:74:e2:09:be:94:c9:71:5f:6e:13:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:56:DC:1C:78:06:99:53:15:E2:0E:0C:F9:40:68:60:E5:5F:84:12
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538333a653830303a3a2f34302d3438203d3e20323034343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:e800::/40
Signature Algorithm: sha256WithRSAEncryption
47:79:18:a4:ab:e5:12:90:10:17:df:ae:cc:70:3a:9c:7e:87:
ed:56:f2:a9:bb:bf:9f:8d:40:0f:61:e3:13:9b:f2:0e:ac:7f:
32:a5:69:6c:51:26:c6:4a:4a:5e:bf:e9:7b:d0:8a:72:4f:32:
3e:2f:a6:05:ea:0b:a2:6d:c9:61:a8:5b:f0:cc:09:c1:0e:a9:
42:f5:cf:7d:17:ef:1e:c2:48:fe:a2:30:12:71:ba:c6:70:e0:
03:40:bc:0c:33:0d:ee:5e:66:ab:03:5e:a3:a3:4d:be:90:73:
dc:db:a8:43:bb:c8:f4:64:d8:4f:16:8b:08:01:53:c8:9b:3f:
de:aa:18:a7:0e:e3:9d:ac:2f:7d:46:83:ba:8f:f0:f6:0b:0e:
15:11:87:3f:65:a2:f3:fd:18:14:6d:e9:86:f8:e5:9e:69:8f:
1c:d3:fc:8d:ab:53:f3:93:c1:86:a0:af:47:bd:1e:94:94:99:
cc:bb:a9:ba:90:33:51:27:67:96:4c:11:d5:17:c5:27:69:61:
cf:ab:99:58:1f:a2:8c:f7:4f:d8:f5:a6:a9:d0:46:96:e4:c5:
05:33:d8:90:4d:05:da:63:43:b4:43:b5:50:57:a3:d7:a6:20:
8b:dc:57:db:90:02:82:db:31:6d:f4:ab:8a:3a:7e:1b:be:5b:
a6:8b:e5:43
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUKRlM6ZSqYbu5QMPoWYVMV7WJpNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA3QkI4MjA0NDA4OTZENkZBMDAyM0EwNzkwQ0QxRDc4
RTk3RjdBRjAeFw0yNjExMDEwMzM5MThaFw0yNzEwMzEwMzQ0MThaMDMxMTAvBgNV
BAMTKDAzNTZEQzFDNzgwNjk5NTMxNUUyMEUwQ0Y5NDA2ODYwRTU1Rjg0MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4GI4QTn3/DqFjPZlZcZjFpm1
B0f/L6ucgzqWSJey6xvDg65RWetqgmi4CNXm1dEFoRiK7MWSUxUPZmE/T1PcQp5K
sM8mHP27+pOEtRsy6VSaMHYp3YoCmftN+SlKjEwPWonh1oa/FwKDhrLUiIBTA/YQ
BP5Ssh55C/aRyRoAckyeXuuA9e1fYQ/WLP1cw9PHdUMQdY2W8MhB7zDn/gtYDAP5
OvZQc70ohITBcN/s3PiGrmRVrm4+yBA1rZ+uf0CY8twOc4xQS5fsgqQQDy9hi05i
pqRdFDCFpX61jOP/h2N6QtbR//guYMRjUEp4dGV1+PtrdOIJvpTJcV9uE6CPAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUA1bcHHgGmVMV4g4M+UBoYOVfhBIwHwYDVR0j
BBgwFoAUkHu4IEQIltb6ACOgeQzR146X968wDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcnBraS5zaHJkc2Vydi5jb20vcmVwby9NWU5P
Qy1ORVhUU0VSVi84LzkwN0JCODIwNDQwODk2RDZGQTAwMjNBMDc5MENEMUQ3OEU5
N0Y3QUYuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvOTA3QkI4MjA0NDA4OTZENkZB
MDAyM0EwNzkwQ0QxRDc4RTk3RjdBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGA
BggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLnNocmRzZXJ2LmNvbS9yZXBvL01ZTk9D
LU5FWFRTRVJWLzgvMzI2MTMxMzQzYTM3MzUzODMzM2E2NTM4MzAzMDNhM2EyZjM0
MzAyZDM0MzgyMDNkM2UyMDMyMzAzNDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoUdYPoMA0G
CSqGSIb3DQEBCwUAA4IBAQBHeRikq+USkBAX367McDqcfoftVvKpu7+fjUAPYeMT
m/IOrH8ypWlsUSbGSkpev+l70IpyTzI+L6YF6guibclhqFvwzAnBDqlC9c99F+8e
wkj+ojAScbrGcOADQLwMMw3uXmarA16jo02+kHPc26hDu8j0ZNhPFosIAVPImz/e
qhinDuOdrC99RoO6j/D2Cw4VEYc/ZaLz/RgUbemG+OWeaY8c0/yNq1Pzk8GGoK9H
vR6UlJnMu6m6kDNRJ2eWTBHVF8UnaWHPq5lYH6KM90/Y9aap0EaW5MUFM9iQTQXa
Y0O0Q7VQV6PXpiCL3FfbkAKC2zFt9KuKOn4bvlumi+VD
-----END CERTIFICATE-----
Generated at Sun Nov 15 19:26:45 2026 by rpki-client