
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131663a3a2f34382d3438203d3e20323133343133.roa
File: 326131343a373538313a353131663a3a2f34382d3438203d3e20323133343133.roa (raw, json)
Hash identifier: w1t1+iZiOClMnAJNgohS/NreSmE5jhEbWOLDDfVzcIo=
Subject key identifier: 32:7A:9A:F2:4B:4F:3D:08:1D:B6:1C:87:85:AC:34:BF:D8:88:52:BB
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 602C64EED050F58B9D666D43B925BF2D4D1E375D
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131663a3a2f34382d3438203d3e20323133343133.roa
Signing time: Thu 29 Oct 2026 22:09:33 +0000
ROA not before: Thu 29 Oct 2026 22:04:33 +0000
ROA not after: Thu 28 Oct 2027 22:09:33 +0000
asID: 213413
IP address blocks: 2a14:7581:511f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:2c:64:ee:d0:50:f5:8b:9d:66:6d:43:b9:25:bf:2d:4d:1e:37:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Oct 29 22:04:33 2026 GMT
Not After : Oct 28 22:09:33 2027 GMT
Subject: CN=327A9AF24B4F3D081DB61C8785AC34BFD88852BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:81:65:e5:98:a6:ab:e1:c0:e2:9b:e4:18:
17:ec:17:aa:c5:b8:f5:04:56:17:47:cb:53:27:49:
04:51:2d:18:07:25:02:bb:14:00:9c:90:0c:fd:fe:
19:e5:20:c0:b2:68:c3:46:aa:d5:e7:77:94:e4:22:
4a:ce:49:78:4e:1f:51:08:6d:b3:b1:a8:78:7e:c3:
c6:30:ea:83:80:9c:17:de:4e:ee:93:a1:3c:51:6e:
e7:c2:7b:c5:a5:39:5c:da:c9:20:68:2b:7b:7b:26:
e1:95:c0:6f:38:12:47:d2:a5:ee:4e:61:04:6b:b5:
26:7e:32:1d:45:55:26:91:00:8c:7c:29:30:db:0f:
bc:9c:9f:e8:57:ff:12:64:f1:92:e3:cc:6e:3e:c6:
da:ae:dd:c6:f0:41:0d:24:2e:c6:27:98:82:88:34:
91:a8:62:31:18:d8:a3:8d:32:70:a5:20:ef:50:f7:
08:3c:69:80:c9:a1:de:50:5c:54:e6:76:fa:a5:bb:
87:87:67:55:f1:96:31:fd:d7:18:03:e5:2d:8a:01:
c4:8e:71:13:34:b9:05:53:6d:3d:53:36:e3:3f:bf:
27:27:15:91:0b:dc:ec:73:1a:0e:53:54:12:10:33:
60:f8:05:7a:db:22:d5:3d:df:f9:b5:c0:0a:09:90:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7A:9A:F2:4B:4F:3D:08:1D:B6:1C:87:85:AC:34:BF:D8:88:52:BB
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131663a3a2f34382d3438203d3e20323133343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:511f::/48
Signature Algorithm: sha256WithRSAEncryption
1a:6b:61:0d:3f:c4:8c:34:ed:36:51:ce:0d:d6:50:bb:35:0e:
3d:f0:51:84:ec:36:c4:b0:c9:07:42:62:01:b0:3d:37:09:3c:
f6:93:af:24:f9:61:c1:0a:83:d1:75:73:d2:ec:c1:85:a4:7e:
af:de:52:65:5e:8e:3f:e8:62:af:8d:df:eb:81:ec:48:d4:2b:
aa:2e:13:e2:36:6d:e0:8a:c8:ca:85:16:39:8a:c5:a9:01:94:
c3:3e:c7:d9:38:a2:3c:11:e5:44:ff:48:82:37:b0:9b:ee:1a:
44:0e:8d:6d:09:25:13:43:e9:c2:f9:37:99:8c:e4:c2:84:0e:
ce:6d:13:7d:43:10:f9:ef:2b:28:34:eb:b8:03:de:0a:c9:a6:
e6:ba:26:49:42:ff:7b:bb:74:65:62:36:9c:2a:ab:2f:24:db:
0d:d6:3f:12:82:ea:9e:e1:8f:b9:b4:9d:bf:e8:1d:66:64:ae:
fc:fe:74:9b:d5:33:d1:ee:bc:0a:21:dd:d3:87:da:19:65:cf:
0c:7b:9f:db:77:c4:88:d6:29:83:b7:6c:b5:1e:0e:bb:8b:22:
c8:7d:c3:0c:fd:51:1a:11:fc:23:e9:6a:d7:76:90:e6:af:0c:
4c:bc:15:df:e0:e4:a8:fb:65:d4:e3:0d:31:16:e4:c0:16:35:
4b:3a:bc:b7
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUYCxk7tBQ9YudZm1DuSW/LU0eN10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA3QkI4MjA0NDA4OTZENkZBMDAyM0EwNzkwQ0QxRDc4
RTk3RjdBRjAeFw0yNjEwMjkyMjA0MzNaFw0yNzEwMjgyMjA5MzNaMDMxMTAvBgNV
BAMTKDMyN0E5QUYyNEI0RjNEMDgxREI2MUM4Nzg1QUMzNEJGRDg4ODUyQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCky4Fl5Zimq+HA4pvkGBfsF6rF
uPUEVhdHy1MnSQRRLRgHJQK7FACckAz9/hnlIMCyaMNGqtXnd5TkIkrOSXhOH1EI
bbOxqHh+w8Yw6oOAnBfeTu6ToTxRbufCe8WlOVzaySBoK3t7JuGVwG84EkfSpe5O
YQRrtSZ+Mh1FVSaRAIx8KTDbD7ycn+hX/xJk8ZLjzG4+xtqu3cbwQQ0kLsYnmIKI
NJGoYjEY2KONMnClIO9Q9wg8aYDJod5QXFTmdvqlu4eHZ1XxljH91xgD5S2KAcSO
cRM0uQVTbT1TNuM/vycnFZEL3OxzGg5TVBIQM2D4BXrbItU93/m1wAoJkLUDAgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQUMnqa8ktPPQgdthyHhaw0v9iIUrswHwYDVR0j
BBgwFoAUkHu4IEQIltb6ACOgeQzR146X968wDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcnBraS5zaHJkc2Vydi5jb20vcmVwby9NWU5P
Qy1ORVhUU0VSVi84LzkwN0JCODIwNDQwODk2RDZGQTAwMjNBMDc5MENEMUQ3OEU5
N0Y3QUYuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvOTA3QkI4MjA0NDA4OTZENkZB
MDAyM0EwNzkwQ0QxRDc4RTk3RjdBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGA
BggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLnNocmRzZXJ2LmNvbS9yZXBvL01ZTk9D
LU5FWFRTRVJWLzgvMzI2MTMxMzQzYTM3MzUzODMxM2EzNTMxMzE2NjNhM2EyZjM0
MzgyZDM0MzgyMDNkM2UyMDMyMzEzMzM0MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYFRHzAN
BgkqhkiG9w0BAQsFAAOCAQEAGmthDT/EjDTtNlHODdZQuzUOPfBRhOw2xLDJB0Ji
AbA9Nwk89pOvJPlhwQqD0XVz0uzBhaR+r95SZV6OP+hir43f64HsSNQrqi4T4jZt
4IrIyoUWOYrFqQGUwz7H2TiiPBHlRP9Igjewm+4aRA6NbQklE0Ppwvk3mYzkwoQO
zm0TfUMQ+e8rKDTruAPeCsmm5romSUL/e7t0ZWI2nCqrLyTbDdY/EoLqnuGPubSd
v+gdZmSu/P50m9Uz0e68CiHd04faGWXPDHuf23fEiNYpg7dstR4Ou4siyH3DDP1R
GhH8I+lq13aQ5q8MTLwV3+DkqPtl1OMNMRbkwBY1Szq8tw==
-----END CERTIFICATE-----
Generated at Sat Nov 7 16:57:01 2026 by rpki-client