RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer (download)

Subject key identifier:   6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 20940
    2: AS: 21342
    3: AS: 21357
    4: AS: 21399
    5: AS: 31107 -- 31110
    6: AS: 31377
    7: AS: 33905
    8: AS: 34164
    9: AS: 34850
    10: AS: 35204
    11: AS: 39836
    12: AS: 43639
    13: AS: 48163
    14: AS: 49249
    15: AS: 49846
    16: AS: 200005
    17: AS: 213120
    1: IP: 2.16.0.0/13
    2: IP: 37.26.112.0/20
    3: IP: 80.67.64.0/19
    4: IP: 81.200.64.0/20
    5: IP: 84.53.128.0/18
    6: IP: 88.221.0.0/16
    7: IP: 92.122.0.0/15
    8: IP: 93.191.168.0/21
    9: IP: 94.127.72.0/21
    10: IP: 95.100.0.0/15
    11: IP: 109.69.136.0/21
    12: IP: 185.66.240.0/22
    13: IP: 185.123.168.0/22
    14: IP: 193.108.88.0/21
    15: IP: 193.108.152.0/22
    16: IP: 194.35.36.0/22
    17: IP: 195.95.192.0/22
    18: IP: 195.245.124.0/22
    19: IP: 2a02:2370::/29
    20: IP: 2a02:26f0::/29
    21: IP: 2a0b:35c0::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710845036184 (0xa581aa7698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:02:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c2:78:94:cc:3c:fd:38:63:99:84:68:84:b0:
                    b1:1d:8c:95:60:40:85:28:91:eb:d2:59:ac:5a:17:
                    4c:9e:8a:8a:93:8e:d0:0a:37:19:e2:bf:aa:0b:0a:
                    0c:a5:72:c1:8c:f3:ac:d0:cd:df:40:bc:ac:51:df:
                    1a:7b:b4:8c:f5:50:3b:3c:90:cc:7f:db:a4:68:86:
                    60:6b:6d:f9:85:1e:93:9a:b1:04:d5:79:3f:55:e2:
                    78:4d:7f:36:b8:85:97:ab:ef:ad:ee:23:fb:79:29:
                    56:6f:e1:a2:be:aa:29:b5:8c:34:e4:ee:f6:9e:75:
                    4b:bf:94:79:28:0e:01:4c:ab:80:a9:cd:42:70:ba:
                    e7:7c:4a:69:50:91:45:5d:eb:74:ba:62:ec:fa:7a:
                    8f:69:17:9b:cb:a2:1d:c2:f6:f1:5d:ed:be:ef:b7:
                    aa:b3:80:c3:4e:69:6a:d0:57:b7:64:9d:a0:fa:97:
                    89:b8:16:1c:8c:d8:b4:36:2c:3d:26:51:f3:9b:58:
                    23:ec:ce:65:d6:c2:45:37:65:d3:f7:3e:ce:17:bc:
                    77:8a:8b:ae:34:e8:b6:8f:f1:45:d3:f5:ac:47:dd:
                    58:55:67:1f:b0:86:b1:f5:17:c6:ab:83:2a:c2:f4:
                    9b:dd:ad:85:91:3a:d2:37:3b:f3:0c:ee:fd:56:ba:
                    88:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.16.0.0/13
                  37.26.112.0/20
                  80.67.64.0/19
                  81.200.64.0/20
                  84.53.128.0/18
                  88.221.0.0/16
                  92.122.0.0/15
                  93.191.168.0/21
                  94.127.72.0/21
                  95.100.0.0/15
                  109.69.136.0/21
                  185.66.240.0/22
                  185.123.168.0/22
                  193.108.88.0/21
                  193.108.152.0/22
                  194.35.36.0/22
                  195.95.192.0/22
                  195.245.124.0/22
                IPv6:
                  2a02:2370::/29
                  2a02:26f0::/29
                  2a0b:35c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20940
                  21342
                  21357
                  21399
                  31107-31110
                  31377
                  33905
                  34164
                  34850
                  35204
                  39836
                  43639
                  48163
                  49249
                  49846
                  200005
                  213120

    Signature Algorithm: sha256WithRSAEncryption
         47:c0:1e:27:12:50:cc:45:8e:b2:11:a8:eb:32:bb:ad:20:2d:
         3b:38:32:09:84:e5:5e:d2:c1:14:3f:7b:ec:55:96:ed:dc:9e:
         d9:7a:43:7d:c1:60:fe:1c:50:53:91:87:2e:e3:87:29:85:d8:
         d5:f3:c7:64:30:56:9b:29:ea:01:eb:58:66:8f:7d:31:d9:bd:
         fb:60:36:92:a5:88:e1:e7:7b:f1:75:fc:de:b0:7f:61:11:49:
         ff:b2:e9:ea:61:48:65:4f:de:de:d6:7a:a4:06:f3:94:99:8a:
         52:5b:aa:ec:46:d9:23:16:ed:82:ed:bb:03:7a:ee:96:8b:76:
         c7:5f:73:15:b1:ff:61:b6:2e:7e:e6:c9:6a:2f:9d:07:d8:f4:
         b1:62:65:e5:b9:1d:ae:af:08:45:ad:29:a4:6e:6f:97:ad:90:
         56:0e:7d:b4:eb:b6:e3:c9:f9:20:28:b0:d5:52:2a:0f:4c:16:
         e7:d1:98:11:3c:8a:65:1b:f1:5f:18:f9:de:60:da:6b:c1:c3:
         3a:4c:dd:20:a6:03:12:d1:22:33:c8:b7:e0:de:b6:a4:77:81:
         27:6f:bc:6d:32:15:89:d4:ef:0a:cd:1d:4a:17:5e:15:d7:10:
         38:56:9c:2c:a4:3d:42:a1:9d:63:c8:18:c8:04:1e:a0:f7:76:
         cf:81:e8:50
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIGAKWBqnaYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTEwMjU0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2YjVmY2JiZWE0
ODkzN2E0NDJiYWJkYjMzMDIxMzJjNGJjOWJkNmFhMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAqMJ4lMw8/ThjmYRohLCxHYyVYECFKJHr0lmsWhdMnoqK
k47QCjcZ4r+qCwoMpXLBjPOs0M3fQLysUd8ae7SM9VA7PJDMf9ukaIZga235hR6T
mrEE1Xk/VeJ4TX82uIWXq++t7iP7eSlWb+GivqoptYw05O72nnVLv5R5KA4BTKuA
qc1CcLrnfEppUJFFXet0umLs+nqPaReby6IdwvbxXe2+77eqs4DDTmlq0Fe3ZJ2g
+peJuBYcjNi0Niw9JlHzm1gj7M5l1sJFN2XT9z7OF7x3iouuNOi2j/FF0/WsR91Y
VWcfsIax9RfGq4MqwvSb3a2FkTrSNzvzDO79VrqIhwIDAQABo4IDcjCCA24wHQYD
VR0OBBYEFGtfy76kiTekQrq9szAhMsS8m9aqMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzA0MjE4OC1kZmI2LTRhZDQt
OTFhNC04OGQxY2FjOWU0ZjEvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvMDQyMTg4LWRmYjYtNGFkNC05
MWE0LTg4ZDFjYWM5ZTRmMS8xL2ExX0x2cVNKTjZSQ3VyMnpNQ0V5eEx5YjFxby5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGgBggrBgEFBQcBBwEB/wSBkDCB
jTBuBAIAATBoAwMDAhADBAQlGnADBAVQQ0ADBARRyEADBAZUNYADAwBY3QMDAVx6
AwQDXb+oAwQDXn9IAwMBX2QDBANtRYgDBAK5QvADBAK5e6gDBAPBbFgDBALBbJgD
BALCIyQDBALDX8ADBALD9XwwGwQCAAIwFQMFAyoCI3ADBQMqAibwAwUDKgs1wDBq
BggrBgEFBQcBCAEB/wRbMFmgVzBVAgJRzAICU14CAlNtAgJTlzAIAgJ5gwICeYYC
AnqRAgMAhHECAwCFdAIDAIgiAgMAiYQCAwCbnAIDAKp3AgMAvCMCAwDAYQIDAMK2
AgMDDUUCAwNAgDANBgkqhkiG9w0BAQsFAAOCAQEAR8AeJxJQzEWOshGo6zK7rSAt
OzgyCYTlXtLBFD977FWW7dye2XpDfcFg/hxQU5GHLuOHKYXY1fPHZDBWmynqAetY
Zo99Mdm9+2A2kqWI4ed78XX83rB/YRFJ/7Lp6mFIZU/e3tZ6pAbzlJmKUluq7EbZ
Ixbtgu27A3rulot2x19zFbH/YbYufubJai+dB9j0sWJl5bkdrq8IRa0ppG5vl62Q
Vg59tOu248n5ICiw1VIqD0wW59GYETyKZRvxXxj53mDaa8HDOkzdIKYDEtEiM8i3
4N62pHeBJ2+8bTIVidTvCs0dShdeFdcQOFacLKQ9QqGdY8gYyAQeoPd2z4HoUA==
-----END CERTIFICATE-----

Generated at Sat Jan 1 13:35:16 2022 by LibreSSL & rpki-client.