RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer (download)

Subject key identifier:   F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 13194
    2: AS: 199527
    3: AS: 210906
    4: AS: 211614
    1: IP: 82.140.128.0 -- 82.140.130.255
    2: IP: 82.140.132.0 -- 82.140.177.255
    3: IP: 82.140.179.0 -- 82.140.181.255
    4: IP: 82.140.184.0 -- 82.140.188.255
    5: IP: 82.140.190.0/23
    6: IP: 84.15.0.0/16
    7: IP: 84.46.128.0 -- 84.46.169.255
    8: IP: 84.46.172.0 -- 84.46.199.255
    9: IP: 84.46.201.0 -- 84.46.233.255
    10: IP: 86.38.0.0 -- 86.38.2.255
    11: IP: 86.38.6.0/24
    12: IP: 86.38.16.0/21
    13: IP: 86.38.25.0 -- 86.38.31.255
    14: IP: 86.38.33.0 -- 86.38.36.255
    15: IP: 86.38.38.0 -- 86.38.150.255
    16: IP: 86.38.152.0/22
    17: IP: 86.38.157.0 -- 86.38.174.255
    18: IP: 86.38.176.0/24
    19: IP: 86.38.188.0/24
    20: IP: 86.38.191.0 -- 86.38.199.255
    21: IP: 86.38.201.0/24
    22: IP: 86.38.206.0 -- 86.38.213.255
    23: IP: 86.38.215.0/24
    24: IP: 86.38.222.0 -- 86.38.224.255
    25: IP: 86.38.227.0 -- 86.38.231.255
    26: IP: 86.38.233.0 -- 86.38.234.255
    27: IP: 86.38.236.0/23
    28: IP: 86.38.239.0 -- 86.38.240.255
    29: IP: 86.38.244.0/23
    30: IP: 89.116.0.0/24
    31: IP: 89.116.14.0/24
    32: IP: 89.116.18.0/24
    33: IP: 89.116.40.0/24
    34: IP: 89.116.55.0/24
    35: IP: 89.116.57.0/24
    36: IP: 89.116.71.0/24
    37: IP: 89.116.77.0 -- 89.116.79.255
    38: IP: 89.116.90.0/24
    39: IP: 89.116.93.0 -- 89.116.95.255
    40: IP: 89.116.97.0 -- 89.116.98.255
    41: IP: 89.116.101.0/24
    42: IP: 89.116.104.0/23
    43: IP: 89.116.109.0 -- 89.116.111.255
    44: IP: 89.116.114.0/24
    45: IP: 89.116.120.0 -- 89.116.122.255
    46: IP: 89.116.124.0/24
    47: IP: 89.116.129.0/24
    48: IP: 89.116.133.0 -- 89.116.134.255
    49: IP: 89.116.136.0/24
    50: IP: 89.116.138.0/23
    51: IP: 89.116.142.0/23
    52: IP: 89.116.145.0/24
    53: IP: 89.116.151.0 -- 89.116.152.255
    54: IP: 89.116.155.0/24
    55: IP: 89.116.157.0/24
    56: IP: 89.116.159.0 -- 89.116.160.255
    57: IP: 89.116.162.0/24
    58: IP: 89.116.167.0/24
    59: IP: 89.116.170.0/24
    60: IP: 89.116.174.0/24
    61: IP: 89.116.176.0/24
    62: IP: 89.116.178.0/24
    63: IP: 89.116.187.0 -- 89.116.188.255
    64: IP: 89.116.191.0 -- 89.116.192.255
    65: IP: 89.116.194.0 -- 89.116.197.255
    66: IP: 89.116.199.0/24
    67: IP: 89.116.201.0/24
    68: IP: 89.116.204.0/22
    69: IP: 89.116.216.0/23
    70: IP: 89.116.219.0/24
    71: IP: 89.116.222.0/24
    72: IP: 89.116.232.0/24
    73: IP: 89.116.235.0/24
    74: IP: 89.116.238.0/24
    75: IP: 89.116.240.0/24
    76: IP: 89.116.245.0/24
    77: IP: 89.116.249.0/24
    78: IP: 89.116.251.0/24
    79: IP: 89.116.254.0/24
    80: IP: 89.117.4.0/24
    81: IP: 89.117.10.0/24
    82: IP: 89.117.14.0/24
    83: IP: 89.117.26.0/24
    84: IP: 89.117.34.0/24
    85: IP: 89.117.39.0/24
    86: IP: 89.117.69.0/24
    87: IP: 89.117.86.0/24
    88: IP: 89.117.92.0/23
    89: IP: 89.117.100.0/24
    90: IP: 89.117.108.0/24
    91: IP: 89.117.110.0/24
    92: IP: 89.117.119.0/24
    93: IP: 89.117.125.0/24
    94: IP: 89.117.127.0 -- 89.117.128.255
    95: IP: 89.117.131.0/24
    96: IP: 89.117.137.0 -- 89.117.138.255
    97: IP: 89.117.140.0/23
    98: IP: 89.117.156.0/24
    99: IP: 89.117.165.0 -- 89.117.166.255
    100: IP: 89.117.170.0/24
    101: IP: 89.117.176.0 -- 89.117.187.255
    102: IP: 89.117.189.0/24
    103: IP: 89.117.191.0 -- 89.117.214.255
    104: IP: 89.117.219.0 -- 89.117.221.255
    105: IP: 89.117.223.0 -- 89.117.225.255
    106: IP: 89.117.230.0 -- 89.117.244.255
    107: IP: 89.117.246.0 -- 89.117.249.255
    108: IP: 89.117.251.0 -- 89.117.253.255
    109: IP: 89.117.255.0/24
    110: IP: 185.189.152.0/22
    111: IP: 213.226.128.0/18
    112: IP: 213.252.192.0/18
    113: IP: 217.9.240.0/24
    114: IP: 217.9.243.0 -- 217.9.253.255
    115: IP: 2a00:f500::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 712096920472 (0xa5cc48b398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:54:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:42:77:0e:61:27:a4:cc:00:b6:cc:3d:1d:
                    d2:28:e6:99:a7:88:01:bb:69:e0:df:84:08:59:c6:
                    24:54:c5:06:5d:81:29:9e:2f:1c:13:d6:ba:b1:45:
                    74:93:af:5d:ee:b0:12:17:ef:49:ce:b3:35:0e:82:
                    bf:a3:43:d9:5c:97:ca:fc:56:bc:88:31:17:77:25:
                    8c:25:7d:c1:7f:90:e8:d5:72:37:d1:e1:18:47:e7:
                    f3:97:5f:79:d1:f8:6c:ea:3f:9f:90:4b:4f:3b:97:
                    96:20:6b:bd:49:0b:b7:d0:11:b1:fe:74:75:2d:14:
                    6a:98:ee:d6:db:fe:05:d4:e3:b9:15:87:2a:35:b4:
                    f2:d9:b5:b6:cf:4c:ce:e0:1c:d5:23:ad:bb:fe:49:
                    10:6b:7b:7f:05:e7:17:7b:c7:20:e3:f0:c8:4f:d5:
                    84:8e:60:61:21:3f:13:de:df:c1:81:ca:36:cc:d3:
                    fa:f9:55:2a:2e:37:f2:2b:f6:32:7b:85:22:19:42:
                    49:01:94:2a:37:a6:d0:ea:28:63:0b:b3:e9:9f:e2:
                    ab:17:21:76:a0:c4:83:05:f7:1e:a1:73:f9:cc:b2:
                    2a:a0:45:6e:5e:a3:13:cb:6a:9a:6c:82:5e:aa:de:
                    57:5a:be:c9:6f:31:db:f2:e8:e5:77:90:03:72:a7:
                    c8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.128.0-82.140.130.255
                  82.140.132.0-82.140.177.255
                  82.140.179.0-82.140.181.255
                  82.140.184.0-82.140.188.255
                  82.140.190.0/23
                  84.15.0.0/16
                  84.46.128.0-84.46.169.255
                  84.46.172.0-84.46.199.255
                  84.46.201.0-84.46.233.255
                  86.38.0.0-86.38.2.255
                  86.38.6.0/24
                  86.38.16.0/21
                  86.38.25.0-86.38.31.255
                  86.38.33.0-86.38.36.255
                  86.38.38.0-86.38.150.255
                  86.38.152.0/22
                  86.38.157.0-86.38.174.255
                  86.38.176.0/24
                  86.38.188.0/24
                  86.38.191.0-86.38.199.255
                  86.38.201.0/24
                  86.38.206.0-86.38.213.255
                  86.38.215.0/24
                  86.38.222.0-86.38.224.255
                  86.38.227.0-86.38.231.255
                  86.38.233.0-86.38.234.255
                  86.38.236.0/23
                  86.38.239.0-86.38.240.255
                  86.38.244.0/23
                  89.116.0.0/24
                  89.116.14.0/24
                  89.116.18.0/24
                  89.116.40.0/24
                  89.116.55.0/24
                  89.116.57.0/24
                  89.116.71.0/24
                  89.116.77.0-89.116.79.255
                  89.116.90.0/24
                  89.116.93.0-89.116.95.255
                  89.116.97.0-89.116.98.255
                  89.116.101.0/24
                  89.116.104.0/23
                  89.116.109.0-89.116.111.255
                  89.116.114.0/24
                  89.116.120.0-89.116.122.255
                  89.116.124.0/24
                  89.116.129.0/24
                  89.116.133.0-89.116.134.255
                  89.116.136.0/24
                  89.116.138.0/23
                  89.116.142.0/23
                  89.116.145.0/24
                  89.116.151.0-89.116.152.255
                  89.116.155.0/24
                  89.116.157.0/24
                  89.116.159.0-89.116.160.255
                  89.116.162.0/24
                  89.116.167.0/24
                  89.116.170.0/24
                  89.116.174.0/24
                  89.116.176.0/24
                  89.116.178.0/24
                  89.116.187.0-89.116.188.255
                  89.116.191.0-89.116.192.255
                  89.116.194.0-89.116.197.255
                  89.116.199.0/24
                  89.116.201.0/24
                  89.116.204.0/22
                  89.116.216.0/23
                  89.116.219.0/24
                  89.116.222.0/24
                  89.116.232.0/24
                  89.116.235.0/24
                  89.116.238.0/24
                  89.116.240.0/24
                  89.116.245.0/24
                  89.116.249.0/24
                  89.116.251.0/24
                  89.116.254.0/24
                  89.117.4.0/24
                  89.117.10.0/24
                  89.117.14.0/24
                  89.117.26.0/24
                  89.117.34.0/24
                  89.117.39.0/24
                  89.117.69.0/24
                  89.117.86.0/24
                  89.117.92.0/23
                  89.117.100.0/24
                  89.117.108.0/24
                  89.117.110.0/24
                  89.117.119.0/24
                  89.117.125.0/24
                  89.117.127.0-89.117.128.255
                  89.117.131.0/24
                  89.117.137.0-89.117.138.255
                  89.117.140.0/23
                  89.117.156.0/24
                  89.117.165.0-89.117.166.255
                  89.117.170.0/24
                  89.117.176.0-89.117.187.255
                  89.117.189.0/24
                  89.117.191.0-89.117.214.255
                  89.117.219.0-89.117.221.255
                  89.117.223.0-89.117.225.255
                  89.117.230.0-89.117.244.255
                  89.117.246.0-89.117.249.255
                  89.117.251.0-89.117.253.255
                  89.117.255.0/24
                  185.189.152.0/22
                  213.226.128.0/18
                  213.252.192.0/18
                  217.9.240.0/24
                  217.9.243.0-217.9.253.255
                IPv6:
                  2a00:f500::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13194
                  199527
                  210906
                  211614

    Signature Algorithm: sha256WithRSAEncryption
         18:fd:6f:a0:4e:95:33:27:77:72:be:fb:54:57:74:2c:ec:b2:
         43:3f:00:be:34:05:c9:3c:f9:ec:f1:df:64:07:6c:45:53:1b:
         b5:d0:c5:41:b7:a2:41:a9:65:f1:8c:a4:60:ca:5e:f7:6c:0b:
         02:1f:1c:2a:d8:40:46:06:18:36:00:17:85:05:1a:c0:78:82:
         9a:c1:13:72:71:94:52:5d:03:08:ca:4a:aa:30:75:a1:8b:43:
         a4:78:47:d1:63:eb:90:e7:c8:4a:79:eb:9a:1a:63:3c:ff:91:
         1e:43:3c:bb:a1:9f:a3:cc:35:9d:6d:88:d4:c5:98:d7:b2:d2:
         74:58:17:5e:f5:34:c6:11:0c:d0:2e:f4:eb:dd:91:12:ea:dc:
         fc:11:3f:00:51:45:c8:7b:be:8b:86:6b:68:4d:65:56:19:5d:
         14:93:b2:73:2b:da:ec:3f:8b:0f:4c:53:df:89:99:79:c3:da:
         4e:e3:da:a4:4d:a9:ea:a8:b9:95:95:63:92:6c:e0:7c:71:d6:
         9b:dc:a6:5b:84:cd:39:fa:f3:c3:28:e5:75:87:4e:00:90:ac:
         c4:c3:36:70:91:eb:16:69:a3:e0:73:88:61:70:7c:67:ef:6d:
         51:b1:4d:fa:12:41:6b:89:38:13:e1:2b:83:f5:8f:4c:07:c5:
         9a:90:11:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 13:34:28 2022 by LibreSSL & rpki-client.