RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer (download)

Subject key identifier:   E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 15755
    2: AS: 31486
    3: AS: 42338
    4: AS: 47894
    1: IP: 87.251.0.0/19
    2: IP: 94.103.32.0/20
    3: IP: 185.35.20.0/22
    4: IP: 185.96.168.0/22
    5: IP: 185.203.32.0/22
    6: IP: 2a00:7300::/32
    7: IP: 2a06:9140::/29
    8: IP: 2a0a:e0c0::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522002955074 (0x7989ccfb42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:55:09 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:db:ae:1f:fa:be:8d:08:c6:d7:73:4f:de:
                    2f:b9:8d:85:d7:9d:0d:f8:18:ec:56:9c:bb:78:08:
                    6c:16:e9:c1:3b:e0:a5:6d:93:9e:d5:2e:37:80:4d:
                    37:ab:47:d5:dc:81:77:0b:72:b9:7f:ce:63:34:cb:
                    89:8a:2d:46:07:8c:ed:33:96:e1:ed:e4:61:19:f3:
                    7d:3b:25:74:d4:36:c9:07:2e:05:69:e2:48:a4:38:
                    e2:b1:f1:89:4a:80:39:ed:e6:5f:ab:96:76:34:b7:
                    1d:09:7f:98:74:0d:d1:c4:c2:77:4d:1a:67:ee:25:
                    e1:bd:0a:42:21:e7:e3:f6:6c:6f:82:ca:e8:2f:21:
                    f1:3c:3d:10:60:bd:2a:a6:c4:be:d9:44:db:c3:33:
                    5c:66:5e:e7:19:0f:8c:70:7a:94:cd:5c:b9:c0:b3:
                    56:e3:fb:0c:a7:31:e4:1d:8a:e9:bb:35:fd:5a:ce:
                    c8:f8:6a:e6:9e:e1:d6:3a:7d:ef:dc:06:9d:32:e0:
                    d9:f5:29:08:42:76:1d:bb:3a:32:7d:d5:ba:bc:f9:
                    a5:56:33:82:4b:e6:10:ad:84:de:89:59:b4:ec:2f:
                    2f:08:8c:ad:8d:e5:f7:8d:97:06:8c:d0:5b:41:3f:
                    55:a2:fd:ac:c9:dd:3c:65:03:e9:5b:83:9a:4a:af:
                    74:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.251.0.0/19
                  94.103.32.0/20
                  185.35.20.0/22
                  185.96.168.0/22
                  185.203.32.0/22
                IPv6:
                  2a00:7300::/32
                  2a06:9140::/29
                  2a0a:e0c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15755
                  31486
                  42338
                  47894

    Signature Algorithm: sha256WithRSAEncryption
         61:19:19:55:0b:6b:1d:ac:15:25:3a:0e:32:ad:af:64:19:eb:
         da:01:55:4c:1e:3f:88:cc:3c:34:fc:50:0f:18:b0:b5:58:c4:
         e4:4e:32:a1:7b:e6:36:e9:9c:12:36:47:2f:f5:16:ce:05:e5:
         d0:4f:a0:c5:b4:30:e3:22:ad:92:10:e6:32:69:e9:7d:b1:7f:
         1b:65:82:10:4c:92:8c:43:c7:94:46:3a:82:5c:8c:11:0a:c6:
         8f:25:c4:36:6c:89:b0:64:f4:8e:e2:76:2a:1c:9b:11:cf:6f:
         a7:f0:97:1b:df:06:ab:77:31:de:e9:b7:be:64:a4:62:f8:db:
         32:a1:f4:2f:52:29:bd:a7:04:b4:e4:f0:13:50:8b:2a:47:b7:
         19:d3:3a:80:9e:06:f7:83:31:63:a1:5c:53:97:56:b7:cc:b3:
         c4:a6:a1:24:a7:49:0b:70:01:2f:13:c0:7d:d8:56:34:ad:81:
         72:e5:98:e3:20:67:fe:4d:c2:8b:62:7d:25:be:8a:f2:e1:a1:
         ec:fb:20:4a:22:ae:37:5e:fe:87:3f:8e:b5:01:96:a1:70:f2:
         75:49:02:b6:d6:e0:7d:2e:61:42:08:7f:03:17:51:b2:b6:ea:
         fe:2b:73:6f:2c:58:bc:0b:9e:fa:c0:84:00:11:2c:2b:fd:e1:
         ff:6e:8f:bb
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIFeYnM+0IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMTU1MDlaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5
OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJlODgyZWEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9sduuH/q+jQjG13NP3i+5jYXXnQ34GOxWnLt4CGwW6cE7
4KVtk57VLjeATTerR9XcgXcLcrl/zmM0y4mKLUYHjO0zluHt5GEZ8307JXTUNskH
LgVp4kikOOKx8YlKgDnt5l+rlnY0tx0Jf5h0DdHEwndNGmfuJeG9CkIh5+P2bG+C
yugvIfE8PRBgvSqmxL7ZRNvDM1xmXucZD4xwepTNXLnAs1bj+wynMeQdium7Nf1a
zsj4auae4dY6fe/cBp0y4Nn1KQhCdh27OjJ91bq8+aVWM4JL5hCthN6JWbTsLy8I
jK2N5feNlwaM0FtBP1Wi/azJ3TxlA+lbg5pKr3T5AgMBAAGjggLiMIIC3jAdBgNV
HQ4EFgQU5QGBXG+Y86K2GEr+vxjqNBvoguowHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvNWIwMjIyLWVkNjQtNGY1NS1i
NDViLTAwNTlmNzM3ZWYwNS8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0
NWItMDA1OWY3MzdlZjA1LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVAYIKwYBBQUHAQcBAf8ERTBDMCQE
AgABMB4DBAVX+wADBAReZyADBAK5IxQDBAK5YKgDBAK5yyAwGwQCAAIwFQMFACoA
cwADBQMqBpFAAwUDKgrgwDAnBggrBgEFBQcBCAEB/wQYMBagFDASAgI9iwICev4C
AwClYgIDALsWMA0GCSqGSIb3DQEBCwUAA4IBAQBhGRlVC2sdrBUlOg4yra9kGeva
AVVMHj+IzDw0/FAPGLC1WMTkTjKhe+Y26ZwSNkcv9RbOBeXQT6DFtDDjIq2SEOYy
ael9sX8bZYIQTJKMQ8eURjqCXIwRCsaPJcQ2bImwZPSO4nYqHJsRz2+n8Jcb3war
dzHe6be+ZKRi+NsyofQvUim9pwS05PATUIsqR7cZ0zqAngb3gzFjoVxTl1a3zLPE
pqEkp0kLcAEvE8B92FY0rYFy5ZjjIGf+TcKLYn0lvory4aHs+yBKIq43Xv6HP461
AZahcPJ1SQK21uB9LmFCCH8DF1Gytur+K3NvLFi8C576wIQAESwr/eH/bo+7
-----END CERTIFICATE-----

Generated at Sun Sep 19 09:33:52 2021 by LibreSSL & rpki-client.