Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538333a656632303a3a2f34342d3438203d3e20323034343634.roa
File:                     326131343a373538333a656632303a3a2f34342d3438203d3e20323034343634.roa (raw, json)
Hash identifier:          vxY/Dt6OZb210j6YDXEqojPNWBfBTg7jJcJO+JKKbXk=
Subject key identifier:   0C:60:85:D8:6B:39:DA:64:43:11:FD:48:84:6D:48:2C:C3:EE:7E:D3
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       486CC09B03A9D807C19715D2B1D146AFAF1269F4
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538333a656632303a3a2f34342d3438203d3e20323034343634.roa
Signing time:             Sun 01 Nov 2026 03:44:06 +0000
ROA not before:           Sun 01 Nov 2026 03:39:06 +0000
ROA not after:            Sun 31 Oct 2027 03:44:06 +0000
asID:                     204464
IP address blocks:        2a14:7583:ef20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6c:c0:9b:03:a9:d8:07:c1:97:15:d2:b1:d1:46:af:af:12:69:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Nov  1 03:39:06 2026 GMT
            Not After : Oct 31 03:44:06 2027 GMT
        Subject: CN=0C6085D86B39DA644311FD48846D482CC3EE7ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e2:7e:fd:64:ab:84:0e:15:b1:5e:ae:58:fd:
                    98:c2:b0:82:61:ff:e0:7e:49:3a:9c:47:1a:1b:f5:
                    1f:df:b6:18:c8:c7:55:2a:53:95:fa:59:ca:01:c6:
                    10:3a:73:8f:fc:fd:8b:04:61:42:6e:bd:df:5f:c9:
                    0e:05:a9:bd:d2:82:07:05:17:32:db:6b:0a:45:fe:
                    1b:47:c3:32:71:53:91:3c:53:a8:21:67:ba:ef:80:
                    fc:c5:0f:11:01:c1:b2:80:6b:1d:c4:df:ad:df:f6:
                    33:c6:e1:f5:df:ee:c6:f4:92:19:c9:db:e1:16:27:
                    31:ea:02:f3:28:eb:e6:3d:cd:be:18:70:7a:44:28:
                    77:38:46:15:c3:5e:05:87:42:8e:36:e6:15:9b:04:
                    5b:23:a5:73:8f:a7:b0:ed:bd:02:21:96:df:6d:68:
                    34:a0:26:e1:79:cc:a3:f6:45:fc:5f:99:d8:0e:fa:
                    f1:34:e4:22:05:06:a5:8a:b8:8f:cb:41:97:1d:4e:
                    23:dc:1b:da:86:ac:50:67:a1:ec:ff:af:07:02:11:
                    2d:c1:cb:94:28:49:55:c9:67:23:0e:a9:fe:0f:96:
                    be:99:85:74:c5:6a:6d:8a:92:8e:ed:0f:26:1c:ef:
                    be:3b:ac:37:48:c6:a0:b1:3b:cb:cf:cb:d4:e4:1a:
                    57:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:60:85:D8:6B:39:DA:64:43:11:FD:48:84:6D:48:2C:C3:EE:7E:D3
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538333a656632303a3a2f34342d3438203d3e20323034343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:ef20::/44

    Signature Algorithm: sha256WithRSAEncryption
         09:4a:d2:11:a0:22:cf:7c:08:e5:35:47:70:1b:09:6a:05:5d:
         3c:ef:c2:21:05:a8:8f:5c:ce:bf:95:22:46:5e:a7:28:1c:b9:
         f3:4d:e8:b3:b7:0d:78:a6:4e:fa:44:0c:e4:2d:fc:a7:41:9f:
         ec:8f:bc:eb:12:76:35:d9:64:e8:e6:93:08:0e:81:62:1c:29:
         24:8b:6a:cd:d9:da:c3:e0:51:02:6c:31:f9:c0:65:40:dc:8e:
         ff:fa:9e:7f:22:cf:2d:5c:8c:5a:0d:7d:de:aa:2b:50:02:ae:
         50:02:0e:2f:ab:e6:d9:9e:26:88:e1:e9:7c:b1:01:5d:77:7f:
         40:d4:57:21:90:c6:21:f8:9b:6f:b0:ba:98:4d:1a:6e:79:c2:
         cd:d3:1b:04:de:c0:8d:9e:1d:2f:13:4b:7c:30:2d:51:df:ba:
         79:31:1b:a9:ca:49:10:b2:d9:53:19:76:48:3a:d6:cd:f0:da:
         97:61:77:07:66:b5:e7:7a:1f:0f:29:1e:83:c8:6e:62:d4:9a:
         1d:7c:91:0b:9c:33:d3:9c:ca:3e:1d:62:4e:b3:ba:a7:3b:56:
         f1:a6:eb:f0:2a:1f:70:b9:28:bc:b8:b9:fe:6f:5b:ca:dc:c0:
         26:41:b1:49:ac:ad:f0:96:7a:ee:40:cf:97:27:53:4e:99:68:
         36:06:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:39:03 2026 by rpki-client