
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538333a656632303a3a2f34342d3438203d3e20323034343634.roa
File: 326131343a373538333a656632303a3a2f34342d3438203d3e20323034343634.roa (raw, json)
Hash identifier: vxY/Dt6OZb210j6YDXEqojPNWBfBTg7jJcJO+JKKbXk=
Subject key identifier: 0C:60:85:D8:6B:39:DA:64:43:11:FD:48:84:6D:48:2C:C3:EE:7E:D3
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 486CC09B03A9D807C19715D2B1D146AFAF1269F4
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538333a656632303a3a2f34342d3438203d3e20323034343634.roa
Signing time: Sun 01 Nov 2026 03:44:06 +0000
ROA not before: Sun 01 Nov 2026 03:39:06 +0000
ROA not after: Sun 31 Oct 2027 03:44:06 +0000
asID: 204464
IP address blocks: 2a14:7583:ef20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:6c:c0:9b:03:a9:d8:07:c1:97:15:d2:b1:d1:46:af:af:12:69:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Nov 1 03:39:06 2026 GMT
Not After : Oct 31 03:44:06 2027 GMT
Subject: CN=0C6085D86B39DA644311FD48846D482CC3EE7ED3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e2:7e:fd:64:ab:84:0e:15:b1:5e:ae:58:fd:
98:c2:b0:82:61:ff:e0:7e:49:3a:9c:47:1a:1b:f5:
1f:df:b6:18:c8:c7:55:2a:53:95:fa:59:ca:01:c6:
10:3a:73:8f:fc:fd:8b:04:61:42:6e:bd:df:5f:c9:
0e:05:a9:bd:d2:82:07:05:17:32:db:6b:0a:45:fe:
1b:47:c3:32:71:53:91:3c:53:a8:21:67:ba:ef:80:
fc:c5:0f:11:01:c1:b2:80:6b:1d:c4:df:ad:df:f6:
33:c6:e1:f5:df:ee:c6:f4:92:19:c9:db:e1:16:27:
31:ea:02:f3:28:eb:e6:3d:cd:be:18:70:7a:44:28:
77:38:46:15:c3:5e:05:87:42:8e:36:e6:15:9b:04:
5b:23:a5:73:8f:a7:b0:ed:bd:02:21:96:df:6d:68:
34:a0:26:e1:79:cc:a3:f6:45:fc:5f:99:d8:0e:fa:
f1:34:e4:22:05:06:a5:8a:b8:8f:cb:41:97:1d:4e:
23:dc:1b:da:86:ac:50:67:a1:ec:ff:af:07:02:11:
2d:c1:cb:94:28:49:55:c9:67:23:0e:a9:fe:0f:96:
be:99:85:74:c5:6a:6d:8a:92:8e:ed:0f:26:1c:ef:
be:3b:ac:37:48:c6:a0:b1:3b:cb:cf:cb:d4:e4:1a:
57:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:60:85:D8:6B:39:DA:64:43:11:FD:48:84:6D:48:2C:C3:EE:7E:D3
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538333a656632303a3a2f34342d3438203d3e20323034343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:ef20::/44
Signature Algorithm: sha256WithRSAEncryption
09:4a:d2:11:a0:22:cf:7c:08:e5:35:47:70:1b:09:6a:05:5d:
3c:ef:c2:21:05:a8:8f:5c:ce:bf:95:22:46:5e:a7:28:1c:b9:
f3:4d:e8:b3:b7:0d:78:a6:4e:fa:44:0c:e4:2d:fc:a7:41:9f:
ec:8f:bc:eb:12:76:35:d9:64:e8:e6:93:08:0e:81:62:1c:29:
24:8b:6a:cd:d9:da:c3:e0:51:02:6c:31:f9:c0:65:40:dc:8e:
ff:fa:9e:7f:22:cf:2d:5c:8c:5a:0d:7d:de:aa:2b:50:02:ae:
50:02:0e:2f:ab:e6:d9:9e:26:88:e1:e9:7c:b1:01:5d:77:7f:
40:d4:57:21:90:c6:21:f8:9b:6f:b0:ba:98:4d:1a:6e:79:c2:
cd:d3:1b:04:de:c0:8d:9e:1d:2f:13:4b:7c:30:2d:51:df:ba:
79:31:1b:a9:ca:49:10:b2:d9:53:19:76:48:3a:d6:cd:f0:da:
97:61:77:07:66:b5:e7:7a:1f:0f:29:1e:83:c8:6e:62:d4:9a:
1d:7c:91:0b:9c:33:d3:9c:ca:3e:1d:62:4e:b3:ba:a7:3b:56:
f1:a6:eb:f0:2a:1f:70:b9:28:bc:b8:b9:fe:6f:5b:ca:dc:c0:
26:41:b1:49:ac:ad:f0:96:7a:ee:40:cf:97:27:53:4e:99:68:
36:06:fe:8b
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUSGzAmwOp2AfBlxXSsdFGr68SafQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA3QkI4MjA0NDA4OTZENkZBMDAyM0EwNzkwQ0QxRDc4
RTk3RjdBRjAeFw0yNjExMDEwMzM5MDZaFw0yNzEwMzEwMzQ0MDZaMDMxMTAvBgNV
BAMTKDBDNjA4NUQ4NkIzOURBNjQ0MzExRkQ0ODg0NkQ0ODJDQzNFRTdFRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz4n79ZKuEDhWxXq5Y/ZjCsIJh
/+B+STqcRxob9R/fthjIx1UqU5X6WcoBxhA6c4/8/YsEYUJuvd9fyQ4Fqb3SggcF
FzLbawpF/htHwzJxU5E8U6ghZ7rvgPzFDxEBwbKAax3E363f9jPG4fXf7sb0khnJ
2+EWJzHqAvMo6+Y9zb4YcHpEKHc4RhXDXgWHQo425hWbBFsjpXOPp7DtvQIhlt9t
aDSgJuF5zKP2RfxfmdgO+vE05CIFBqWKuI/LQZcdTiPcG9qGrFBnoez/rwcCES3B
y5QoSVXJZyMOqf4Plr6ZhXTFam2Kko7tDyYc7747rDdIxqCxO8vPy9TkGlfvAgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQUDGCF2Gs52mRDEf1IhG1ILMPuftMwHwYDVR0j
BBgwFoAUkHu4IEQIltb6ACOgeQzR146X968wDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcnBraS5zaHJkc2Vydi5jb20vcmVwby9NWU5P
Qy1ORVhUU0VSVi84LzkwN0JCODIwNDQwODk2RDZGQTAwMjNBMDc5MENEMUQ3OEU5
N0Y3QUYuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvOTA3QkI4MjA0NDA4OTZENkZB
MDAyM0EwNzkwQ0QxRDc4RTk3RjdBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGA
BggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLnNocmRzZXJ2LmNvbS9yZXBvL01ZTk9D
LU5FWFRTRVJWLzgvMzI2MTMxMzQzYTM3MzUzODMzM2E2NTY2MzIzMDNhM2EyZjM0
MzQyZDM0MzgyMDNkM2UyMDMyMzAzNDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoUdYPvIDAN
BgkqhkiG9w0BAQsFAAOCAQEACUrSEaAiz3wI5TVHcBsJagVdPO/CIQWoj1zOv5Ui
Rl6nKBy5803os7cNeKZO+kQM5C38p0Gf7I+86xJ2Ndlk6OaTCA6BYhwpJItqzdna
w+BRAmwx+cBlQNyO//qefyLPLVyMWg193qorUAKuUAIOL6vm2Z4miOHpfLEBXXd/
QNRXIZDGIfibb7C6mE0abnnCzdMbBN7AjZ4dLxNLfDAtUd+6eTEbqcpJELLZUxl2
SDrWzfDal2F3B2a153ofDykeg8huYtSaHXyRC5wz05zKPh1iTrO6pztW8abr8Cof
cLkovLi5/m9bytzAJkGxSayt8JZ67kDPlydTTploNgb+iw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:39:03 2026 by rpki-client