RPKI Certificate
Location:                 rsync/rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer (download)

Subject key identifier:   82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subordinate resources:
    1: AS: 5060
    2: AS: 6152
    3: AS: 9504
    4: AS: 16087
    5: AS: 52132
    6: AS: 52138
    7: AS: 58089
    8: AS: 61161
    1: IP: 92.50.0.0/18
    2: IP: 107.150.170.0/24
    3: IP: 147.136.64.0/19
    4: IP: 168.199.0.0/16
    5: IP: 170.246.64.0/22
    6: IP: 185.17.72.0/22
    7: IP: 185.100.56.0/22
    8: IP: 185.101.244.0/22
    9: IP: 185.101.252.0/22
    10: IP: 185.102.4.0/22
    11: IP: 185.170.68.0/22
    12: IP: 185.171.252.0/22
    13: IP: 185.226.204.0/22
    14: IP: 192.95.80.0/20
    15: IP: 2001:678:8b4::/48
    16: IP: 2001:678:8b8::/48
    17: IP: 2001:678:8bc::/48
    18: IP: 2001:678:8c0::/48
    19: IP: 2001:678:8c4::/48
    20: IP: 2001:678:8c8::/48
    21: IP: 2001:67c:12d8::/48
    22: IP: 2a04:600::/29
    23: IP: 2a0d:3200::/29

--
$ openssl x509 -text -inform DER -in rsync/rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602929827082 (0x8c616b0d0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 14 15:23:37 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=826605b4d27f13968e8794e6ef091223748817d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:1e:90:c7:2c:01:13:a4:cd:27:42:b2:40:
                    fe:94:e0:84:66:21:de:c6:3a:90:e3:2d:3f:a5:54:
                    e3:4c:db:d3:0d:0e:91:7b:8e:48:78:45:b0:60:07:
                    41:3c:2a:14:8b:18:16:ab:9c:92:07:8c:ae:46:f0:
                    da:82:12:fb:c6:87:a9:8a:61:7c:48:90:92:24:fc:
                    f2:c5:5c:72:5c:7c:54:5a:3f:62:7e:2f:45:e5:38:
                    78:0d:44:2b:c3:8d:de:63:43:9e:0c:b4:ef:b0:bf:
                    03:e4:3e:3e:14:31:37:30:b3:70:a9:7f:b5:fd:33:
                    13:d9:53:8d:f3:91:12:e4:00:f0:0c:62:c6:fa:83:
                    ec:f6:6c:ed:f0:61:3b:75:c5:b6:27:ec:f8:dd:ad:
                    43:d0:15:74:54:94:ee:d3:db:48:be:26:68:6a:fa:
                    5e:e6:a4:69:49:74:a3:0c:37:38:50:4f:6c:24:b1:
                    a9:a7:41:bf:5f:5a:e7:7a:9e:f0:9e:4e:3c:6a:3b:
                    35:2e:6f:ad:75:a3:cd:f8:58:56:9a:fe:a5:23:5d:
                    b4:db:fb:a9:cd:5a:90:75:52:dc:a1:8d:f3:f1:5b:
                    67:70:c1:ef:7f:97:17:8f:ea:31:60:40:e6:6e:02:
                    10:c3:23:bf:50:b1:25:55:b6:92:c6:a4:5a:7b:4a:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0..0Y....0S...\2....k.......@..........@.....H....d8....e.....e.....f......D................_P0S....0M... ..x..... ..x..... ..x..... ..x..... ..x..... ..x..... ..|.....*......*
2.
            sbgp-autonomousSysNum: critical
                0(.&0$..........% ..>.....................
    Signature Algorithm: sha256WithRSAEncryption
         a8:3e:c1:87:79:04:82:11:79:91:80:c3:d4:a4:cc:14:d5:51:
         4d:64:89:70:7d:33:85:62:76:1f:e0:90:da:d3:e5:f2:1b:0d:
         18:a6:14:a6:8c:52:78:36:e7:28:47:b7:7b:f3:61:e0:30:db:
         a0:a9:f4:3c:24:ef:f6:43:25:ef:da:bf:67:40:5a:10:2c:41:
         f5:ac:a6:fb:c0:12:f9:26:78:25:70:24:5a:ec:6e:11:7e:e1:
         0c:60:a4:57:03:88:96:b3:74:02:9e:1a:c4:e5:90:27:83:83:
         07:b1:92:5b:4f:bc:a6:f4:aa:8f:ea:4e:a5:a2:0a:3c:c7:e2:
         42:24:ca:04:ca:87:e0:69:e0:92:88:14:c2:ad:60:74:6e:b8:
         2d:b6:60:32:ae:89:78:61:b5:a1:5e:60:84:20:c0:97:c6:a9:
         eb:67:02:3e:53:dd:04:9a:e7:55:74:11:3f:3b:f6:55:7e:a5:
         ef:77:86:64:bc:f5:47:85:ad:04:7b:84:21:08:c9:13:11:5c:
         a3:94:5f:35:8c:e4:c8:f4:37:ee:a9:bd:3e:c2:6f:86:76:96:
         d4:ff:57:ab:93:ef:8e:8d:b3:a3:b2:7d:bd:38:29:c0:c2:6d:
         eb:7b:44:08:c5:3e:87:06:b8:88:94:28:b4:ed:86:e9:23:19:
         be:d7:92:6c
-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgIGAIxhaw0KMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
NjE0MTUyMzM3WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4MjY2MDViNGQy
N2YxMzk2OGU4Nzk0ZTZlZjA5MTIyMzc0ODgxN2Q4MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAtDoekMcsAROkzSdCskD+lOCEZiHexjqQ4y0/pVTjTNvT
DQ6Re45IeEWwYAdBPCoUixgWq5ySB4yuRvDaghL7xoepimF8SJCSJPzyxVxyXHxU
Wj9ifi9F5Th4DUQrw43eY0OeDLTvsL8D5D4+FDE3MLNwqX+1/TMT2VON85ES5ADw
DGLG+oPs9mzt8GE7dcW2J+z43a1D0BV0VJTu09tIviZoavpe5qRpSXSjDDc4UE9s
JLGpp0G/X1rnep7wnk48ajs1Lm+tdaPN+FhWmv6lI1202/upzVqQdVLcoY3z8Vtn
cMHvf5cXj+oxYEDmbgIQwyO/ULElVbaSxqRae0rI4QIDAQABo4IDZDCCA2AwHQYD
VR0OBBYEFIJmBbTSfxOWjoeU5u8JEiN0iBfYMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3L2ZiY2MzMi0zM2M4LTQxZmYt
ODlmYS0yZDE5MThiYTFjMGUvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvZmJjYzMyLTMzYzgtNDFmZi04
OWZhLTJkMTkxOGJhMWMwZS8xL2dtWUZ0TkpfRTVhT2g1VG03d2tTSTNTSUY5Zy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCB
sDBZBAIAATBTAwQGXDIAAwQAa5aqAwQFk4hAAwMAqMcDBAKq9kADBAK5EUgDBAK5
ZDgDBAK5ZfQDBAK5ZfwDBAK5ZgQDBAK5qkQDBAK5q/wDBAK54swDBATAX1AwUwQC
AAIwTQMHACABBngItAMHACABBngIuAMHACABBngIvAMHACABBngIwAMHACABBngI
xAMHACABBngIyAMHACABBnwS2AMFAyoEBgADBQMqDTIAMDkGCCsGAQUFBwEIAQH/
BCowKKAmMCQCAhPEAgIYCAICJSACAj7XAgMAy6QCAwDLqgIDAOLpAgMA7ukwDQYJ
KoZIhvcNAQELBQADggEBAKg+wYd5BIIReZGAw9SkzBTVUU1kiXB9M4Vidh/gkNrT
5fIbDRimFKaMUng25yhHt3vzYeAw26Cp9Dwk7/ZDJe/av2dAWhAsQfWspvvAEvkm
eCVwJFrsbhF+4QxgpFcDiJazdAKeGsTlkCeDgwexkltPvKb0qo/qTqWiCjzH4kIk
ygTKh+Bp4JKIFMKtYHRuuC22YDKuiXhhtaFeYIQgwJfGqetnAj5T3QSa51V0ET87
9lV+pe93hmS89UeFrQR7hCEIyRMRXKOUXzWM5Mj0N+6pvT7Cb4Z2ltT/V6uT746N
s6Oyfb04KcDCbet7RAjFPocGuIiUKLTthukjGb7Xkmw=
-----END CERTIFICATE-----

Generated at Tue Jul 27 11:49:50 2021 by LibreSSL & rpki-client.