Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E-hqQU9YRU78t0_oxvZ8ha0_6qAKY-bgpsec-00033d08-00033d08.cer
File: U7MsWuoesSCyjxNNrLIARIHOD7E-hqQU9YRU78t0_oxvZ8ha0_6qAKY-bgpsec-00033d08-00033d08.cer (raw, json)
Hash identifier: KBZoZgGurQi9ZK92LEy/zu+SjcrGnYpHdRyEj1/5HKo=
Subject key identifier: 86:A4:14:F5:84:54:EF:CB:74:FE:8C:6F:67:C8:5A:D3:FE:AA:00:A6
Authority key identifier: 53:B3:2C:5A:EA:1E:B1:20:B2:8F:13:4D:AC:B2:00:44:81:CE:0F:B1
Certificate issuer: /CN=53b32c5aea1eb120b28f134dacb2004481ce0fb1
Certificate serial: 01A1641170B17A6A035240F1E5089E9B5F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7MsWuoesSCyjxNNrLIARIHOD7E.cer
BGPsec ECDSA public key: MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4lNKNTLQj7ugLd5lnuYr0AMf4tt4VZbvUJMCRGsDCFLg8VdaTGM8xxnf7l/ahi12TvyWw/MO4AVcQsI/GE7Yxg==
Router key not before: Thu 22 Oct 2026 14:43:46 +0000
Router key not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212232
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7MsWuoesSCyjxNNrLIARIHOD7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:11:70:b1:7a:6a:03:52:40:f1:e5:08:9e:9b:5f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b32c5aea1eb120b28f134dacb2004481ce0fb1
Validity
Not Before: Oct 22 14:43:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: serialNumber=00033d08, CN=ROUTER-00033d08
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:e2:53:4a:35:32:d0:8f:bb:a0:2d:de:65:9e:e6:
2b:d0:03:1f:e2:db:78:55:96:ef:50:93:02:44:6b:
03:08:52:e0:f1:57:5a:4c:63:3c:c7:19:df:ee:5f:
da:86:2d:76:4e:fc:96:c3:f3:0e:e0:05:5c:42:c2:
3f:18:4e:d8:c6
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A4:14:F5:84:54:EF:CB:74:FE:8C:6F:67:C8:5A:D3:FE:AA:00:A6
X509v3 Authority Key Identifier:
keyid:53:B3:2C:5A:EA:1E:B1:20:B2:8F:13:4D:AC:B2:00:44:81:CE:0F:B1
X509v3 Extended Key Usage:
BGPsec Router
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7MsWuoesSCyjxNNrLIARIHOD7E.cer
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212232
Signature Algorithm: sha256WithRSAEncryption
76:f2:3f:89:19:57:18:b4:d7:3d:f6:fe:f0:b7:f0:6d:cb:f6:
9c:af:1f:b2:18:a5:84:7c:e8:36:75:e2:a3:01:f2:ab:56:b3:
59:da:e7:06:8a:8e:51:7f:00:74:b9:51:1a:40:0c:97:21:01:
cd:fb:46:0e:c4:cc:8d:5d:d6:fe:4c:54:01:68:18:fe:2e:63:
d2:6c:b1:fe:1d:cd:af:9c:f7:2f:6e:a0:a1:a4:68:d2:fc:b9:
b1:04:c0:de:00:b2:2f:dd:92:92:0f:e3:a5:3b:6f:13:db:4d:
ae:61:76:03:4d:38:f5:c6:f9:23:c5:61:e4:74:39:08:e8:55:
ef:2b:54:be:8c:1c:40:75:ee:4b:46:96:05:1d:2e:d7:4a:e0:
5f:a4:3f:d8:3f:ac:97:1f:87:79:8b:6e:cb:9e:58:fc:26:ce:
9b:41:e7:59:2a:b5:6c:79:dc:58:d7:7b:5c:79:f4:cd:83:a1:
4c:9c:7a:96:1c:93:1a:e5:33:d9:c8:5c:30:f4:65:d2:47:b1:
e9:bb:ca:c9:3c:e0:b6:5f:7c:ea:bd:f6:75:22:bd:f7:01:03:
e9:4c:0b:1a:17:7e:90:ad:4f:35:fa:43:b3:4f:2b:58:0a:57:
c8:2b:d0:de:2b:0d:76:2d:16:91:2e:33:38:e8:5c:24:b4:58:
9f:8b:98:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:08:56 2026 by rpki-client