Certificate

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/voibVdC3Nzl9dcSfSFuFj6mK0R8.cer
File:                     voibVdC3Nzl9dcSfSFuFj6mK0R8.cer (raw, json)
Hash identifier:          WwOEnrqRnDl0WwBdK6nhQGVkfYQQotE+5n1JMM/b8Bw=
Subject key identifier:   BE:88:9B:55:D0:B7:37:39:7D:75:C4:9F:48:5B:85:8F:A9:8A:D1:1F
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Certificate issuer:       /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial:       0216E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
BGPsec ECDSA public key:  MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4FxJr0n2bux1uX1Evl+QWwZYvIadPjLuFX2mxqKuAGUhKnr7VLLDgrE++l9p5eH2kWTNVAN22FUU3db/RKpE2w==
Router key not before:    Wed 11 Jun 2025 21:16:33 +0000
Router key not after:     Thu 11 Jun 2026 21:16:32 +0000
Subordinate resources:    AS: 15562
Validation:               OK
Signature path:           rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
                          rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Jun 2025 01:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136929 (0x216e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
        Validity
            Not Before: Jun 11 21:16:33 2025 GMT
            Not After : Jun 11 21:16:32 2026 GMT
        Subject: CN=ROUTER-00003cca, serialNumber=00000001
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:e0:5c:49:af:49:f6:6e:ec:75:b9:7d:44:be:5f:
                    90:5b:06:58:bc:86:9d:3e:32:ee:15:7d:a6:c6:a2:
                    ae:00:65:21:2a:7a:fb:54:b2:c3:82:b1:3e:fa:5f:
                    69:e5:e1:f6:91:64:cd:54:03:76:d8:55:14:dd:d6:
                    ff:44:aa:44:db
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:88:9B:55:D0:B7:37:39:7D:75:C4:9F:48:5B:85:8F:A9:8A:D1:1F
            X509v3 Authority Key Identifier:
                keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer

            X509v3 Key Usage: critical
                Digital Signature
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15562

            X509v3 Extended Key Usage:
                BGPsec Router
    Signature Algorithm: sha256WithRSAEncryption
         72:3c:00:02:a7:60:1c:41:e7:53:24:be:d4:25:c4:78:8f:0e:
         a5:09:49:ce:b9:61:26:cb:ef:7e:41:05:78:36:03:71:b8:c1:
         67:4a:05:3e:ae:e4:cd:69:38:40:db:71:ca:4b:cc:0b:30:fa:
         7f:cd:c2:bb:14:a8:95:f2:a9:3f:29:b0:5f:5c:92:d7:30:80:
         be:0b:e2:42:da:5c:5e:ef:db:f4:ba:85:51:84:a5:cd:21:40:
         99:30:5e:a7:27:94:7f:00:03:69:ac:a7:28:c7:0c:7f:0a:8c:
         1e:aa:a2:80:dd:3d:e5:f1:69:d4:e5:a4:31:3a:af:52:d6:e6:
         5d:38:5c:fc:12:97:fa:bb:e2:5e:8b:13:ef:15:f0:1f:dc:9f:
         17:25:d0:8c:a6:24:c7:19:76:9e:41:d8:f6:93:01:85:f6:74:
         18:76:5b:a7:13:a4:f7:6e:9f:5d:28:18:c2:d2:64:48:c8:29:
         03:92:60:5c:30:77:15:9e:45:d9:f1:cb:97:49:7c:c5:34:90:
         0c:c3:e7:97:5f:53:0a:71:1d:c4:48:16:e2:73:e6:37:93:19:
         e9:4a:ab:9c:3a:26:41:68:95:c4:b0:c7:84:23:8d:bf:43:e3:
         e0:85:0a:90:f8:2e:1c:6b:95:9c:8b:3b:fb:57:b3:7b:16:ec:
         08:ae:cb:f5
-----BEGIN CERTIFICATE-----
MIIDfjCCAmagAwIBAgIDAhbhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh
YTgwNWRiYWMzNjQ3NDliOWIxMTU1OTBhYjZlZjBmOTcwY2RiZDgwHhcNMjUwNjEx
MjExNjMzWhcNMjYwNjExMjExNjMyWjAtMRgwFgYDVQQDEw9ST1VURVItMDAwMDNj
Y2ExETAPBgNVBAUTCDAwMDAwMDAxMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE
4FxJr0n2bux1uX1Evl+QWwZYvIadPjLuFX2mxqKuAGUhKnr7VLLDgrE++l9p5eH2
kWTNVAN22FUU3db/RKpE26OCAWowggFmMB0GA1UdDgQWBBS+iJtV0Lc3OX11xJ9I
W4WPqYrRHzAfBgNVHSMEGDAWgBTKqAXbrDZHSbmxFVkKtu8Plwzb2DAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBXoFWGU3JzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxqb2JzbmlqZGVycy95cWdGMjZ3
MlIwbTVzUlZaQ3JidkQ1Y00yOWcuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC95
cWdGMjZ3MlIwbTVzUlZaQ3JidkQ1Y00yOWcuY2VyMA4GA1UdDwEB/wQEAwIHgDAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgI8yjATBgNVHSUEDDAKBggrBgEFBQcDHjAN
BgkqhkiG9w0BAQsFAAOCAQEAcjwAAqdgHEHnUyS+1CXEeI8OpQlJzrlhJsvvfkEF
eDYDcbjBZ0oFPq7kzWk4QNtxykvMCzD6f83CuxSolfKpPymwX1yS1zCAvgviQtpc
Xu/b9LqFUYSlzSFAmTBepyeUfwADaaynKMcMfwqMHqqigN095fFp1OWkMTqvUtbm
XThc/BKX+rviXosT7xXwH9yfFyXQjKYkxxl2nkHY9pMBhfZ0GHZbpxOk926fXSgY
wtJkSMgpA5JgXDB3FZ5F2fHLl0l8xTSQDMPnl19TCnEdxEgW4nPmN5MZ6UqrnDom
QWiVxLDHhCONv0Pj4IUKkPguHGuVnIs7+1ezexbsCK7L9Q==
-----END CERTIFICATE-----