Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8-ixX35SBIanaumnihdls-egANKhs-bgpsec-00003cca-00000002.cer
File: ZElsSn06I8ONKqy0awbLYXVHsR8-ixX35SBIanaumnihdls-egANKhs-bgpsec-00003cca-00000002.cer (raw, json)
Hash identifier: A7vutvIqL2MBtz5dsD9bOxIsY+UxzFSwZha04Rt+UiA=
Subject key identifier: 8B:15:F7:E5:20:48:6A:76:AE:9A:78:A1:76:5B:3E:7A:00:0D:2A:1B
Authority key identifier: 64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F
Certificate issuer: /CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f
Certificate serial: 01A1886A4B25935D44263360C469A0395D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
BGPsec ECDSA public key: MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEnOWA80ejRefeIXoSOMI6dgM1uxLTIcDgtVAryqrVlVBJa/ETqFS+DwJxiZXqEnTQa6hpFW2iYKKuiFJvzys/yA==
Router key not before: Thu 29 Oct 2026 16:07:09 +0000
Router key not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 15562
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 14:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:6a:4b:25:93:5d:44:26:33:60:c4:69:a0:39:5d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f
Validity
Not Before: Oct 29 16:07:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: serialNumber=00000002, CN=ROUTER-00003cca
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:9c:e5:80:f3:47:a3:45:e7:de:21:7a:12:38:c2:
3a:76:03:35:bb:12:d3:21:c0:e0:b5:50:2b:ca:aa:
d5:95:50:49:6b:f1:13:a8:54:be:0f:02:71:89:95:
ea:12:74:d0:6b:a8:69:15:6d:a2:60:a2:ae:88:52:
6f:cf:2b:3f:c8
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:15:F7:E5:20:48:6A:76:AE:9A:78:A1:76:5B:3E:7A:00:0D:2A:1B
X509v3 Authority Key Identifier:
keyid:64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F
X509v3 Extended Key Usage:
BGPsec Router
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15562
Signature Algorithm: sha256WithRSAEncryption
61:de:31:cc:1c:17:48:9b:f4:0d:84:84:6d:2a:54:9a:b9:04:
2b:f9:b4:95:32:8f:2b:70:f8:57:31:68:20:6b:00:35:ea:22:
1f:39:23:36:8f:fa:9d:c7:c3:66:1e:e8:71:7c:9e:aa:5a:c9:
98:ee:8e:09:7b:c6:35:6f:d0:28:59:c7:79:31:de:83:e4:2d:
18:95:9d:49:1c:53:20:4e:60:4b:fc:fa:9c:b7:f6:5f:c2:29:
bc:f8:8f:1c:d3:34:8e:39:f3:86:d0:87:09:29:74:c0:39:dc:
da:9b:c3:51:74:b2:d0:84:d7:2d:a7:5c:b5:ea:6b:16:8f:43:
85:19:99:87:20:17:12:ce:8d:58:53:2d:da:2e:d5:d7:bb:cf:
80:da:97:05:50:a3:dd:7b:a3:63:1a:e9:34:fd:17:d0:ea:99:
fa:f6:ec:c2:65:88:45:c4:de:e9:78:fb:84:8c:9c:71:25:38:
34:fa:81:64:99:ca:0f:3d:c2:25:22:05:d7:cb:74:70:b7:51:
9c:01:1f:4f:f3:e1:4e:41:ea:92:8e:c5:dd:54:f7:79:23:bb:
92:cb:92:c8:0a:aa:5c:81:a2:e7:04:9f:06:d2:c5:47:6a:b0:
cd:6f:ed:92:b7:6b:81:a6:c3:14:28:d1:b8:16:37:ff:25:68:
2a:4b:82:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:29:18 2026 by rpki-client