RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer (download)

Subject key identifier:   35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 2118
    2: AS: 21082
    1: IP: 62.76.224.0/20
    2: IP: 185.72.8.0/22
    3: IP: 192.91.186.0/24
    4: IP: 192.124.170.0--192.124.173.255
    5: IP: 192.124.175.0--192.124.191.255
    6: IP: 192.124.209.0/24
    7: IP: 192.124.216.0/24
    8: IP: 193.108.112.0/22
    9: IP: 193.124.0.0/24
    10: IP: 193.124.2.0--193.124.9.255
    11: IP: 193.124.15.0--193.124.19.255
    12: IP: 193.124.22.0--193.124.24.255
    13: IP: 193.124.30.0/24
    14: IP: 193.124.33.0--193.124.36.255
    15: IP: 193.124.40.0--193.124.42.255
    16: IP: 193.124.44.0/22
    17: IP: 193.124.49.0--193.124.50.255
    18: IP: 193.124.55.0--193.124.60.255
    19: IP: 193.124.64.0/22
    20: IP: 193.124.80.0/24
    21: IP: 193.124.88.0/21
    22: IP: 193.124.112.0/22
    23: IP: 193.124.117.0--193.124.119.255
    24: IP: 193.124.121.0/24
    25: IP: 193.124.124.0/23
    26: IP: 193.124.128.0/22
    27: IP: 193.124.133.0/24
    28: IP: 193.124.158.0/23
    29: IP: 193.124.200.0/21
    30: IP: 193.124.224.0/22
    31: IP: 193.124.254.0/24
    32: IP: 194.58.31.0--194.58.34.255
    33: IP: 194.58.36.0--194.58.47.255
    34: IP: 194.58.56.0--194.58.61.255
    35: IP: 194.58.66.0--194.58.71.255
    36: IP: 194.58.82.0/23
    37: IP: 194.58.154.0/23
    38: IP: 194.58.222.0/23
    39: IP: 194.58.241.0/24
    40: IP: 194.58.246.0/24
    41: IP: 194.85.248.0/22
    42: IP: 194.87.0.0/16
    43: IP: 194.135.1.0--194.135.2.255
    44: IP: 194.135.16.0--194.135.18.255
    45: IP: 194.135.20.0/24
    46: IP: 194.135.22.0--194.135.25.255
    47: IP: 194.135.30.0/24
    48: IP: 194.135.32.0/21
    49: IP: 194.135.44.0--194.135.46.255
    50: IP: 194.135.104.0/23
    51: IP: 194.135.119.0/24
    52: IP: 194.135.124.0/24
    53: IP: 195.58.32.0/19
    54: IP: 195.133.0.0--195.133.95.255
    55: IP: 195.133.144.0/22
    56: IP: 195.133.192.0--195.133.201.255
    57: IP: 212.192.0.0/19
    58: IP: 212.192.208.0/20
    59: IP: 212.192.240.0--212.193.31.255
    60: IP: 2a00:1c88::/29
    61: IP: 2a01:57c0::/29
    62: IP: 2a03:3ae0::/29
    63: IP: 2a07:e4c0::/29
    64: IP: 2a0b:7300::/29
    65: IP: 2a0c:ff40::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624461510974 (0x9164ce793e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 17 09:44:58 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:70:94:db:4c:39:f0:0a:9c:24:13:ec:34:fe:
                    ef:35:ba:a6:55:7f:64:06:d4:2a:4c:76:0b:30:0d:
                    db:77:8c:8f:e7:6c:ce:b8:c2:6f:71:18:0f:c0:b3:
                    c6:b5:ae:c7:42:80:f8:d3:8c:5f:e0:ed:e3:69:13:
                    81:41:37:90:1c:e1:24:76:86:80:27:ea:4e:42:7f:
                    cf:6c:de:08:ce:f4:ab:8c:b2:ba:0c:be:87:41:25:
                    0b:3b:1c:0a:93:76:92:0f:13:80:11:db:2d:c2:03:
                    f5:5e:e0:80:2b:05:83:f8:28:2e:04:17:79:cb:ea:
                    6f:34:f6:1e:9f:8a:9a:3f:ad:56:77:58:f3:ea:d1:
                    35:4c:74:00:de:75:86:30:da:83:87:37:36:dc:af:
                    9b:58:60:04:45:19:11:71:56:d2:1d:32:47:96:4d:
                    6b:0b:40:07:87:6e:22:0d:bb:f5:c2:a1:7a:79:d4:
                    be:08:6b:55:52:12:5a:00:5b:d0:c1:f8:8b:18:db:
                    63:5a:b0:8a:13:eb:5f:37:d9:b9:37:46:29:c5:e8:
                    ee:9e:45:06:a5:2c:e5:da:c3:dc:a3:70:10:99:38:
                    a1:fa:03:8e:6d:56:33:47:5b:fc:4f:c7:ab:56:fc:
                    00:39:22:50:a2:43:d4:22:ad:0e:dd:87:89:3f:4c:
                    8a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.224.0/20
                  185.72.8.0/22
                  192.91.186.0/24
                  192.124.170.0-192.124.173.255
                  192.124.175.0-192.124.191.255
                  192.124.209.0/24
                  192.124.216.0/24
                  193.108.112.0/22
                  193.124.0.0/24
                  193.124.2.0-193.124.9.255
                  193.124.15.0-193.124.19.255
                  193.124.22.0-193.124.24.255
                  193.124.30.0/24
                  193.124.33.0-193.124.36.255
                  193.124.40.0-193.124.42.255
                  193.124.44.0/22
                  193.124.49.0-193.124.50.255
                  193.124.55.0-193.124.60.255
                  193.124.64.0/22
                  193.124.80.0/24
                  193.124.88.0/21
                  193.124.112.0/22
                  193.124.117.0-193.124.119.255
                  193.124.121.0/24
                  193.124.124.0/23
                  193.124.128.0/22
                  193.124.133.0/24
                  193.124.158.0/23
                  193.124.200.0/21
                  193.124.224.0/22
                  193.124.254.0/24
                  194.58.31.0-194.58.34.255
                  194.58.36.0-194.58.47.255
                  194.58.56.0-194.58.61.255
                  194.58.66.0-194.58.71.255
                  194.58.82.0/23
                  194.58.154.0/23
                  194.58.222.0/23
                  194.58.241.0/24
                  194.58.246.0/24
                  194.85.248.0/22
                  194.87.0.0/16
                  194.135.1.0-194.135.2.255
                  194.135.16.0-194.135.18.255
                  194.135.20.0/24
                  194.135.22.0-194.135.25.255
                  194.135.30.0/24
                  194.135.32.0/21
                  194.135.44.0-194.135.46.255
                  194.135.104.0/23
                  194.135.119.0/24
                  194.135.124.0/24
                  195.58.32.0/19
                  195.133.0.0-195.133.95.255
                  195.133.144.0/22
                  195.133.192.0-195.133.201.255
                  212.192.0.0/19
                  212.192.208.0/20
                  212.192.240.0-212.193.31.255
                IPv6:
                  2a00:1c88::/29
                  2a01:57c0::/29
                  2a03:3ae0::/29
                  2a07:e4c0::/29
                  2a0b:7300::/29
                  2a0c:ff40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2118
                  21082

    Signature Algorithm: sha256WithRSAEncryption
         7a:73:a6:74:fe:79:8e:56:0d:c1:95:3c:49:b5:1d:be:bd:50:
         b6:1f:77:4f:80:e6:fb:d2:79:97:47:ac:78:31:83:fc:bf:45:
         6b:f2:fe:bf:be:37:3e:1e:4a:80:ad:bb:b3:15:9d:04:90:40:
         5a:f2:6d:64:16:74:fc:06:46:d3:08:22:24:62:f6:1f:b1:1a:
         b6:0b:0b:5d:94:3d:da:6d:9e:18:99:a3:91:9e:c7:9c:aa:9a:
         48:a2:3f:8e:99:b5:f1:e5:c9:ac:dc:cd:ef:88:e2:5f:7b:df:
         72:04:b4:a3:06:13:6c:6c:af:8e:d5:2a:f2:1f:92:3c:c1:71:
         2b:50:1d:52:0d:06:1f:d2:b4:a9:63:69:8c:6b:3a:8a:cc:93:
         aa:b3:3c:83:e9:8a:18:28:f6:9b:8c:04:7a:a3:b1:2a:e4:97:
         94:f8:e3:f9:56:73:95:98:ca:7e:21:27:ba:6d:07:5e:2a:8e:
         bd:bd:1d:10:70:fc:42:3f:92:63:64:20:64:5b:f5:6c:6c:a7:
         46:38:51:cf:fa:8c:e4:c8:03:0c:92:dc:f3:e9:39:e0:0c:72:
         b4:f3:87:8e:4b:b6:ee:2f:17:65:a4:e4:0a:5c:2c:44:11:27:
         8a:ab:0a:3e:ed:2a:a0:ac:f0:a4:5e:62:e1:39:cb:50:06:1b:
         fd:63:f0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:23:48 2021 by LibreSSL & rpki-client.