Certificate

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/voibVdC3Nzl9dcSfSFuFj6mK0R8.cer
File:                     voibVdC3Nzl9dcSfSFuFj6mK0R8.cer (raw, json)
Hash identifier:          OTfadI49KyLiaOmBwaW1IfcyhDTe7YRgpTt5JU9f79o=
Subject key identifier:   BE:88:9B:55:D0:B7:37:39:7D:75:C4:9F:48:5B:85:8F:A9:8A:D1:1F
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Certificate issuer:       /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial:       027926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
BGPsec ECDSA public key:  MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4FxJr0n2bux1uX1Evl+QWwZYvIadPjLuFX2mxqKuAGUhKnr7VLLDgrE++l9p5eH2kWTNVAN22FUU3db/RKpE2w==
Router key not before:    Mon 15 Jun 2026 08:09:49 +0000
Router key not after:     Tue 15 Jun 2027 08:09:48 +0000
Subordinate resources:    AS: 15562
Validation:               OK
Signature path:           rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
                          rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 06:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162086 (0x27926)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
        Validity
            Not Before: Jun 15 08:09:49 2026 GMT
            Not After : Jun 15 08:09:48 2027 GMT
        Subject: CN=ROUTER-00003cca, serialNumber=00000001
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:e0:5c:49:af:49:f6:6e:ec:75:b9:7d:44:be:5f:
                    90:5b:06:58:bc:86:9d:3e:32:ee:15:7d:a6:c6:a2:
                    ae:00:65:21:2a:7a:fb:54:b2:c3:82:b1:3e:fa:5f:
                    69:e5:e1:f6:91:64:cd:54:03:76:d8:55:14:dd:d6:
                    ff:44:aa:44:db
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:88:9B:55:D0:B7:37:39:7D:75:C4:9F:48:5B:85:8F:A9:8A:D1:1F
            X509v3 Authority Key Identifier:
                keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer

            X509v3 Key Usage: critical
                Digital Signature
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15562

            X509v3 Extended Key Usage:
                BGPsec Router
    Signature Algorithm: sha256WithRSAEncryption
         71:34:5a:4a:7c:c0:cb:7f:97:ee:fb:02:84:6b:7a:d2:b6:30:
         80:47:66:66:35:fa:26:b2:da:95:64:9f:87:4d:d9:e0:40:ad:
         f5:b3:05:13:03:2b:1b:52:5b:93:61:3c:00:1b:da:ef:73:50:
         72:f0:0c:07:ab:ea:c9:14:bd:55:a5:06:4f:2b:d2:1f:8c:ef:
         dd:10:70:a8:c2:48:de:4b:12:6f:24:5e:5f:e3:cc:64:c9:64:
         ee:d2:78:c0:ec:a4:d9:50:d4:1f:c9:58:8a:c2:11:ec:72:97:
         b3:bd:8b:b6:bf:bf:89:27:02:82:21:07:cd:60:92:10:ab:96:
         dd:a6:78:5b:90:00:40:ec:fe:49:a8:73:bc:0e:97:f8:1d:59:
         ff:24:d8:37:74:8c:9d:88:ec:06:2a:42:16:24:82:ca:a0:60:
         6b:95:a6:9e:25:aa:f9:de:13:79:90:64:c7:4c:a9:40:d6:ea:
         0f:34:65:92:02:57:dd:4d:59:b8:38:b4:28:29:d8:54:3d:44:
         c4:90:6d:0c:e9:9b:40:8f:bf:b1:08:f4:f2:6e:ac:2a:69:03:
         1f:b6:cc:85:25:18:b7:34:fa:d5:2f:ff:44:54:fb:65:32:0f:
         7a:91:03:2e:5e:07:09:6c:0e:5f:8d:95:1f:b3:46:32:80:8e:
         bf:bc:25:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----