RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer (download)

Subject key identifier:   8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
CA Repository:            rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/
Notification URL:         https://rrdp.ripe.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 210694
    1: IP: 45.8.24.0/22
    2: IP: 45.11.52.0/22
    3: IP: 45.11.176.0/22
    4: IP: 45.13.108.0/22
    5: IP: 45.14.216.0/22
    6: IP: 45.15.196.0/22
    7: IP: 45.81.72.0/22
    8: IP: 45.82.4.0/22
    9: IP: 45.83.240.0/22
    10: IP: 45.85.188.0/22
    11: IP: 45.88.84.0/22
    12: IP: 45.88.184.0/22
    13: IP: 45.91.116.0 -- 45.91.123.255
    14: IP: 45.93.148.0/22
    15: IP: 45.132.120.0/22
    16: IP: 45.133.140.0/22
    17: IP: 45.146.60.0/22
    18: IP: 45.146.192.0/22
    19: IP: 45.152.4.0/22
    20: IP: 45.153.200.0/22
    21: IP: 91.212.20.0/24
    22: IP: 91.212.27.0/24
    23: IP: 91.212.38.0/24
    24: IP: 91.212.45.0/24
    25: IP: 193.39.215.0/24
    26: IP: 193.39.246.0/24
    27: IP: 193.39.250.0/24
    28: IP: 193.41.32.0/24
    29: IP: 195.80.230.0/23
    30: IP: 195.82.132.0/23
    31: IP: 2a06:7780::/29
    32: IP: 2a0c:cc40::/29
    33: IP: 2a0d:d000::/29
    34: IP: 2a0e:4200::/29
    35: IP: 2a0e:6300::/29
    36: IP: 2a10:2380::/29
    37: IP: 2a10:38c0::/29
    38: IP: 2a10:3940::/29
    39: IP: 2a10:39c0::/29
    40: IP: 2a10:3a40::/29
    41: IP: 2a10:3ac0::/29
    42: IP: 2a10:3b40::/29
    43: IP: 2a10:3bc0::/29
    44: IP: 2a10:3c40::/29
    45: IP: 2a10:3cc0::/29
    46: IP: 2a10:3d40::/29
    47: IP: 2a10:3dc0::/29
    48: IP: 2a10:3e40::/29
    49: IP: 2a10:5e80::/29
    50: IP: 2a10:5f80::/29
    51: IP: 2a10:6080::/29
    52: IP: 2a10:6180::/29
    53: IP: 2a10:6280::/29
    54: IP: 2a10:6380::/29
    55: IP: 2a10:6480::/29
    56: IP: 2a10:6580::/29
    57: IP: 2a10:6680::/29
    58: IP: 2a10:6780::/29
    59: IP: 2a10:6880::/29
    60: IP: 2a10:6980::/29
    61: IP: 2a10:7280::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736879775329 (0xab91750e61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  5 08:32:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:57:4b:50:1f:4f:7b:cb:fc:57:20:80:1c:1f:
                    3e:42:07:f8:50:23:c4:89:62:2d:44:d4:b2:d7:af:
                    55:7f:9d:e1:0f:a3:8f:cd:ff:d5:31:2f:85:4d:5b:
                    b3:f4:1c:73:50:25:4f:12:7a:d8:a3:bf:d5:2f:b0:
                    9c:70:ee:5b:b8:fa:7a:04:31:d4:9c:2a:65:b9:3d:
                    05:3a:57:9a:b0:9b:16:b7:70:cc:91:81:aa:b1:10:
                    21:f5:a7:20:23:38:43:0b:38:e1:3b:f1:09:71:d4:
                    86:1a:b3:c8:d7:65:ef:e1:8d:11:0a:b3:1c:0a:6e:
                    a5:94:23:b4:dc:c6:23:48:01:f2:be:27:8f:0b:c3:
                    10:1f:c8:3a:b8:3a:da:4a:a0:01:93:7b:66:eb:02:
                    f2:b6:00:0a:97:7f:b7:96:c9:e9:c7:2b:3b:47:c3:
                    0c:e9:35:b7:e8:6b:51:d2:8e:01:27:60:e3:59:c4:
                    50:0f:8f:08:cf:7f:78:e7:90:25:61:35:ae:17:74:
                    38:30:bc:7d:73:9a:7f:50:70:da:cf:fb:93:74:fd:
                    2c:d5:bf:2c:8a:7d:e5:0b:db:ee:f8:ad:5d:10:20:
                    6f:2a:d1:d4:35:57:a6:5a:04:8b:f3:2b:12:ad:51:
                    cc:bc:10:f6:a7:2c:9f:6f:54:13:cb:e3:6d:08:d2:
                    14:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.24.0/22
                  45.11.52.0/22
                  45.11.176.0/22
                  45.13.108.0/22
                  45.14.216.0/22
                  45.15.196.0/22
                  45.81.72.0/22
                  45.82.4.0/22
                  45.83.240.0/22
                  45.85.188.0/22
                  45.88.84.0/22
                  45.88.184.0/22
                  45.91.116.0-45.91.123.255
                  45.93.148.0/22
                  45.132.120.0/22
                  45.133.140.0/22
                  45.146.60.0/22
                  45.146.192.0/22
                  45.152.4.0/22
                  45.153.200.0/22
                  91.212.20.0/24
                  91.212.27.0/24
                  91.212.38.0/24
                  91.212.45.0/24
                  193.39.215.0/24
                  193.39.246.0/24
                  193.39.250.0/24
                  193.41.32.0/24
                  195.80.230.0/23
                  195.82.132.0/23
                IPv6:
                  2a06:7780::/29
                  2a0c:cc40::/29
                  2a0d:d000::/29
                  2a0e:4200::/29
                  2a0e:6300::/29
                  2a10:2380::/29
                  2a10:38c0::/29
                  2a10:3940::/29
                  2a10:39c0::/29
                  2a10:3a40::/29
                  2a10:3ac0::/29
                  2a10:3b40::/29
                  2a10:3bc0::/29
                  2a10:3c40::/29
                  2a10:3cc0::/29
                  2a10:3d40::/29
                  2a10:3dc0::/29
                  2a10:3e40::/29
                  2a10:5e80::/29
                  2a10:5f80::/29
                  2a10:6080::/29
                  2a10:6180::/29
                  2a10:6280::/29
                  2a10:6380::/29
                  2a10:6480::/29
                  2a10:6580::/29
                  2a10:6680::/29
                  2a10:6780::/29
                  2a10:6880::/29
                  2a10:6980::/29
                  2a10:7280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210694

    Signature Algorithm: sha256WithRSAEncryption
         45:94:47:82:c6:fa:50:da:81:b5:8a:93:66:14:a1:86:fa:61:
         bb:19:02:9f:7c:b2:f4:e3:af:2e:c6:1e:e7:29:1d:db:77:66:
         e8:e7:ce:20:cd:d4:1e:d0:43:0e:1f:53:4a:cb:db:58:24:d1:
         10:9f:f1:0e:4d:bc:9d:e9:b9:7c:73:ed:7f:06:1e:82:65:1b:
         fb:a9:72:c6:67:29:cd:b7:47:17:10:6d:23:af:53:30:73:3f:
         3e:01:0c:bd:25:77:bf:75:ad:7f:90:1d:b0:5c:80:45:64:9f:
         cc:75:8f:43:b4:dc:12:b7:e8:58:8c:33:92:78:16:ad:82:b2:
         c4:4c:81:b5:46:35:86:24:c0:40:2c:34:58:4c:85:ff:a3:58:
         82:b2:86:80:70:a8:ba:7d:38:78:1e:06:57:bd:a4:47:d9:ae:
         10:b6:8a:8e:1d:68:ec:57:56:be:70:da:c8:59:6a:22:7c:52:
         52:2e:c9:2f:8f:c1:dd:62:9a:55:30:39:6c:e2:f4:6e:55:e6:
         42:f2:33:10:a2:47:b7:b3:8d:de:e4:d5:3d:9f:10:72:1b:4c:
         3b:6a:71:cb:f5:83:80:43:d2:b1:3b:ce:4e:ef:dc:f4:df:4f:
         36:d7:e3:27:5a:e4:7b:d9:c4:3a:cb:76:e2:16:14:2a:c5:e1:
         36:e3:41:e8
-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgIGAKuRdQ5hMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTA1MDgzMjA4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4ZTFjMTE2NThk
MjA0MWVhZjI1MDJmZTU0MDhlZDQ5M2JiZDRmMzE4MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEApFdLUB9Pe8v8VyCAHB8+Qgf4UCPEiWItRNSy169Vf53h
D6OPzf/VMS+FTVuz9BxzUCVPEnrYo7/VL7CccO5buPp6BDHUnCpluT0FOleasJsW
t3DMkYGqsRAh9acgIzhDCzjhO/EJcdSGGrPI12Xv4Y0RCrMcCm6llCO03MYjSAHy
viePC8MQH8g6uDraSqABk3tm6wLytgAKl3+3lsnpxys7R8MM6TW36GtR0o4BJ2Dj
WcRQD48Iz39455AlYTWuF3Q4MLx9c5p/UHDaz/uTdP0s1b8sin3lC9vu+K1dECBv
KtHUNVemWgSL8ysSrVHMvBD2pyyfb1QTy+NtCNIUZQIDAQABo4IEQTCCBD0wHQYD
VR0OBBYEFI4cEWWNIEHq8lAv5UCO1JO71PMYMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzcwYmY4Yi1kOGM0LTQwYzMt
OTAyMi02MzM0OGNkYmYwMjQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvNzBiZjhiLWQ4YzQtNDBjMy05
MDIyLTYzMzQ4Y2RiZjAyNC8xL2pod1JaWTBnUWVyeVVDX2xRSTdVazd2VTh4Zy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBvgYIKwYBBQUHAQcBAf8EggGt
MIIBqTCBwwQCAAEwgbwDBAItCBgDBAItCzQDBAItC7ADBAItDWwDBAItDtgDBAIt
D8QDBAItUUgDBAItUgQDBAItU/ADBAItVbwDBAItWFQDBAItWLgwDAMEAi1bdAME
Ai1beAMEAi1dlAMEAi2EeAMEAi2FjAMEAi2SPAMEAi2SwAMEAi2YBAMEAi2ZyAME
AFvUFAMEAFvUGwMEAFvUJgMEAFvULQMEAMEn1wMEAMEn9gMEAMEn+gMEAMEpIAME
AcNQ5gMEAcNShDCB4AQCAAIwgdkDBQMqBneAAwUDKgzMQAMFAyoN0AADBQMqDkIA
AwUDKg5jAAMFAyoQI4ADBQMqEDjAAwUDKhA5QAMFAyoQOcADBQMqEDpAAwUDKhA6
wAMFAyoQO0ADBQMqEDvAAwUDKhA8QAMFAyoQPMADBQMqED1AAwUDKhA9wAMFAyoQ
PkADBQMqEF6AAwUDKhBfgAMFAyoQYIADBQMqEGGAAwUDKhBigAMFAyoQY4ADBQMq
EGSAAwUDKhBlgAMFAyoQZoADBQMqEGeAAwUDKhBogAMFAyoQaYADBQMqEHKAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM3BjANBgkqhkiG9w0BAQsFAAOCAQEARZRH
gsb6UNqBtYqTZhShhvphuxkCn3yy9OOvLsYe5ykd23dm6OfOIM3UHtBDDh9TSsvb
WCTREJ/xDk28nem5fHPtfwYegmUb+6lyxmcpzbdHFxBtI69TMHM/PgEMvSV3v3Wt
f5AdsFyARWSfzHWPQ7TcErfoWIwzkngWrYKyxEyBtUY1hiTAQCw0WEyF/6NYgrKG
gHCoun04eB4GV72kR9muELaKjh1o7FdWvnDayFlqInxSUi7JL4/B3WKaVTA5bOL0
blXmQvIzEKJHt7ON3uTVPZ8QchtMO2pxy/WDgEPSsTvOTu/c9N9PNtfjJ1rke9nE
Ost24hYUKsXhNuNB6A==
-----END CERTIFICATE-----

Generated at Wed Jan 5 09:42:20 2022 by LibreSSL & rpki-client.