Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8-YqenvL4mDiSsMGfyJn6OnjLOd5o-bgpsec-00003cca-00000001.cer
File: ZElsSn06I8ONKqy0awbLYXVHsR8-YqenvL4mDiSsMGfyJn6OnjLOd5o-bgpsec-00003cca-00000001.cer (raw, json)
Hash identifier: D2SqvGZIVa9aUVIb7sxySEQ252/VQRp9iK/vQ0CTpPQ=
Subject key identifier: 62:A7:A7:BC:BE:26:0E:24:AC:30:67:F2:26:7E:8E:9E:32:CE:77:9A
Authority key identifier: 64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F
Certificate issuer: /CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f
Certificate serial: 01A1886A4B64ED25A9BF4FBDCC84318A2488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
BGPsec ECDSA public key: MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE2s7wMJW2zZ5W5RIzYerxRVuwp/eNKGW+Hz+6dRiXh25WdL3ejcjPI4giaAHOXgEICCA8JrhovvEng6lo1i1N+Q==
Router key not before: Thu 29 Oct 2026 16:07:09 +0000
Router key not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 15562
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:6a:4b:64:ed:25:a9:bf:4f:bd:cc:84:31:8a:24:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f
Validity
Not Before: Oct 29 16:07:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: serialNumber=00000001, CN=ROUTER-00003cca
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:da:ce:f0:30:95:b6:cd:9e:56:e5:12:33:61:ea:
f1:45:5b:b0:a7:f7:8d:28:65:be:1f:3f:ba:75:18:
97:87:6e:56:74:bd:de:8d:c8:cf:23:88:22:68:01:
ce:5e:01:08:08:20:3c:26:b8:68:be:f1:27:83:a9:
68:d6:2d:4d:f9
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A7:A7:BC:BE:26:0E:24:AC:30:67:F2:26:7E:8E:9E:32:CE:77:9A
X509v3 Authority Key Identifier:
keyid:64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F
X509v3 Extended Key Usage:
BGPsec Router
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15562
Signature Algorithm: sha256WithRSAEncryption
7d:0d:7f:3e:1c:3a:dc:2a:ea:73:d5:ee:6c:58:8d:88:0b:88:
69:08:5f:f4:57:ec:60:bc:2c:95:26:74:e4:d0:2a:9d:b5:91:
ce:de:cd:5f:62:e7:94:28:f5:35:61:63:b6:af:f1:93:2e:0a:
c5:4b:88:a0:24:96:86:c2:c7:dd:c2:95:d4:33:b3:00:76:bd:
02:6a:f5:17:07:d9:6f:63:d0:66:ca:09:7a:71:c8:83:06:d6:
6e:d6:22:23:43:64:0e:0c:f6:9c:76:bc:79:c4:70:db:5a:99:
a3:48:92:03:84:16:87:0d:02:79:4e:32:86:05:b2:41:d8:90:
4e:99:8e:d7:43:7c:db:a5:3e:bd:8c:6a:be:05:4f:f0:47:18:
5d:5a:e4:c8:27:a0:59:a5:11:83:23:e3:90:bf:62:81:9a:3e:
51:e3:7b:6f:09:32:a5:99:e7:8a:fb:0b:7e:85:e9:93:ad:f6:
42:48:a5:84:53:e0:69:38:52:d8:11:85:07:6b:1d:ad:d5:e2:
8a:e8:ea:75:51:c1:53:f8:31:c8:47:29:9c:43:19:e1:a9:dc:
34:76:6b:1a:e6:b2:47:a1:45:24:3a:01:f5:58:9b:8f:d8:04:
1e:0e:08:6e:65:7d:25:67:f7:d0:03:f1:21:8c:45:7d:37:db:
a9:13:f8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:04:34 2026 by rpki-client