RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer (download)

Subject key identifier:   D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 8624
    2: AS: 16023
    3: AS: 25033
    4: AS: 29154
    5: AS: 47732
    1: IP: 79.99.152.0/21
    2: IP: 81.17.200.0/21
    3: IP: 81.90.64.0/20
    4: IP: 82.133.128.0/17
    5: IP: 87.108.0.0/16
    6: IP: 91.215.132.0/22
    7: IP: 109.75.232.0/21
    8: IP: 185.1.86.0/24
    9: IP: 194.187.212.0/22
    10: IP: 217.64.176.0/20
    11: IP: 2001:7f8:af::/48
    12: IP: 2001:a68::/32
    13: IP: 2a00:16a0::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538905539017 (0x7d7945f1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:27:56 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:32:17:ac:e5:f9:e0:b0:bc:4c:61:68:c0:0d:
                    9b:e0:99:41:8e:f8:5a:62:f2:9e:e0:c3:76:df:0b:
                    d5:c9:41:25:f8:48:19:5e:1c:5a:ea:3b:66:7b:8a:
                    47:b1:8a:2c:4c:8a:1e:e0:66:9c:eb:12:87:ad:3e:
                    74:77:71:88:25:b6:68:99:28:8c:eb:ce:a7:c9:eb:
                    b8:2d:c8:37:56:c5:8e:fe:33:25:94:fc:b5:67:3d:
                    5d:b4:58:a1:41:e4:b5:cf:37:0e:74:b0:01:42:b2:
                    d1:df:9a:3f:3f:dc:c3:d0:6d:69:9f:bd:4d:df:ba:
                    f5:82:39:74:54:0b:ea:d8:fe:76:54:d5:da:45:e0:
                    72:07:cd:62:41:7b:86:ca:ec:4d:a6:06:6a:69:27:
                    e1:66:8d:e3:c2:84:ee:f0:85:af:a7:7a:01:31:60:
                    fb:cb:a1:d7:97:9b:71:29:45:8f:a4:d0:51:4e:08:
                    13:ba:37:97:b9:dd:06:32:25:65:3b:d7:a2:82:8a:
                    94:e2:d5:10:7c:a0:15:3c:b4:d6:88:e5:4a:78:20:
                    f2:6b:ad:bc:5b:9a:85:44:2d:e4:91:fc:dc:d0:ed:
                    ba:4c:1e:d3:4c:9a:3b:ab:e0:28:0a:bb:35:e8:c2:
                    89:4f:f7:d4:b6:fd:4d:2c:31:6c:fa:bb:ab:a1:68:
                    a9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.99.152.0/21
                  81.17.200.0/21
                  81.90.64.0/20
                  82.133.128.0/17
                  87.108.0.0/16
                  91.215.132.0/22
                  109.75.232.0/21
                  185.1.86.0/24
                  194.187.212.0/22
                  217.64.176.0/20
                IPv6:
                  2001:7f8:af::/48
                  2001:a68::/32
                  2a00:16a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8624
                  16023
                  25033
                  29154
                  47732

    Signature Algorithm: sha256WithRSAEncryption
         50:48:d8:22:0f:55:cd:2e:61:9e:73:7c:69:63:be:77:45:59:
         38:14:7e:5f:34:58:97:fe:14:af:72:12:27:6a:c6:b7:4b:cc:
         3b:5f:e6:ec:f7:f3:e9:2e:76:e7:8b:5e:6a:7d:dd:2e:fa:b4:
         a3:1a:c0:9b:d2:5e:0b:b3:18:c5:bd:00:82:87:72:fb:a0:28:
         6d:2f:25:86:22:dc:aa:6d:5b:91:4a:61:05:11:01:ef:75:94:
         80:9f:a0:58:b4:d0:b1:ab:1b:68:cd:de:66:35:a0:a5:bb:40:
         28:b1:ab:08:d8:14:65:bb:26:95:03:e3:ae:6e:a9:ed:d5:f7:
         61:75:b9:8c:aa:ac:b5:0b:3f:5d:54:16:d1:ff:52:7c:31:7d:
         33:f9:b6:a6:54:bc:6b:10:73:1f:db:d4:15:e5:dd:4e:99:14:
         7b:c3:07:3e:40:11:82:bc:1f:a2:34:7c:0d:81:df:40:31:e1:
         a5:80:a7:30:0b:6b:27:50:e0:f1:ea:e9:9b:c6:82:1b:99:a5:
         e9:f3:11:84:a5:9f:3f:74:b7:84:9d:c8:4e:31:c9:58:10:e8:
         05:78:af:9f:32:db:21:ff:8f:6f:34:dd:b7:82:5b:87:dc:9f:
         39:be:27:79:54:e4:8b:f4:32:3a:43:73:b3:4a:ff:3e:1f:e2:
         d4:15:15:75
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgIFfXlF8ckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMzI3NTZaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGQxMGQ1YjMwYjQ2
YzdiOTdiMmRiYzQ1ODljZWEzNjIyYWQ3NTYxNTYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbMhes5fngsLxMYWjADZvgmUGO+Fpi8p7gw3bfC9XJQSX4
SBleHFrqO2Z7ikexiixMih7gZpzrEoetPnR3cYgltmiZKIzrzqfJ67gtyDdWxY7+
MyWU/LVnPV20WKFB5LXPNw50sAFCstHfmj8/3MPQbWmfvU3fuvWCOXRUC+rY/nZU
1dpF4HIHzWJBe4bK7E2mBmppJ+FmjePChO7wha+negExYPvLodeXm3EpRY+k0FFO
CBO6N5e53QYyJWU716KCipTi1RB8oBU8tNaI5Up4IPJrrbxbmoVELeSR/NzQ7bpM
HtNMmjur4CgKuzXowolP99S2/U0sMWz6u6uhaKnFAgMBAAGjggMEMIIDADAdBgNV
HQ4EFgQU0Q1bMLRse5ey28RYnOo2Iq11YVYwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvNzI1NmVjLWMzNDYtNGIyOS1i
N2Y1LTNlNDBkMDE3NDBiMi8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83MjU2ZWMtYzM0Ni00YjI5LWI3
ZjUtM2U0MGQwMTc0MGIyLzEvMFExYk1MUnNlNWV5MjhSWW5PbzJJcTExWVZZLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwcwYIKwYBBQUHAQcBAf8EZDBiMEEE
AgABMDsDBANPY5gDBANREcgDBARRWkADBAdShYADAwBXbAMEAlvXhAMEA21L6AME
ALkBVgMEAsK71AMEBNlAsDAdBAIAAjAXAwcAIAEH+ACvAwUAIAEKaAMFACoAFqAw
KgYIKwYBBQUHAQgBAf8EGzAZoBcwFQICIbACAj6XAgJhyQICceICAwC6dDANBgkq
hkiG9w0BAQsFAAOCAQEAUEjYIg9VzS5hnnN8aWO+d0VZOBR+XzRYl/4Ur3ISJ2rG
t0vMO1/m7Pfz6S5254tean3dLvq0oxrAm9JeC7MYxb0Agody+6AobS8lhiLcqm1b
kUphBREB73WUgJ+gWLTQsasbaM3eZjWgpbtAKLGrCNgUZbsmlQPjrm6p7dX3YXW5
jKqstQs/XVQW0f9SfDF9M/m2plS8axBzH9vUFeXdTpkUe8MHPkARgrwfojR8DYHf
QDHhpYCnMAtrJ1Dg8erpm8aCG5ml6fMRhKWfP3S3hJ3ITjHJWBDoBXivnzLbIf+P
bzTdt4Jbh9yfOb4neVTki/QyOkNzs0r/Ph/i1BUVdQ==
-----END CERTIFICATE-----

Generated at Sun Sep 19 06:27:44 2021 by LibreSSL & rpki-client.