RPKI Certificate
Location:                 ./rsync/rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer (download)

Subject key identifier:   A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.mft
CA Repository:            rpki1.terratransit.de/repo/TerraTransit/4/
Notification URL:         https://rpki1.terratransit.de/rrdp/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-07-01T00:00:00Z
    Resources:
    1: AS: 42366
    1: IP: 31.187.64.0 -- 31.187.66.255
    2: IP: 31.187.69.0 -- 31.187.76.255
    3: IP: 31.187.78.0/24
    4: IP: 31.220.0.0 -- 31.220.13.255
    5: IP: 31.220.15.0/24
    6: IP: 31.220.28.0 -- 31.220.47.255
    7: IP: 31.220.64.0/21
    8: IP: 45.157.80.0/22
    9: IP: 77.237.224.0/21
    10: IP: 80.75.16.0/20
    11: IP: 85.92.104.0/22
    12: IP: 85.190.228.0 -- 85.190.255.255
    13: IP: 89.147.128.0/18
    14: IP: 94.140.8.0/22
    15: IP: 109.106.240.0/20
    16: IP: 176.126.66.0/23
    17: IP: 176.126.70.0/24
    18: IP: 176.126.74.0/24
    19: IP: 176.126.77.0 -- 176.126.78.255
    20: IP: 176.126.83.0 -- 176.126.87.255
    21: IP: 176.126.92.0/22
    22: IP: 185.35.108.0/24
    23: IP: 185.47.44.0/22
    24: IP: 185.68.156.0/22
    25: IP: 185.72.68.0/22
    26: IP: 185.111.156.0/22
    27: IP: 185.135.136.0/22
    28: IP: 185.161.202.0/23
    29: IP: 185.164.36.0/22
    30: IP: 185.164.52.0/22
    31: IP: 185.165.60.0/22
    32: IP: 185.166.188.0/24
    33: IP: 185.168.9.0/24
    34: IP: 185.173.224.0/22
    35: IP: 185.175.208.0/24
    36: IP: 185.175.210.0/23
    37: IP: 185.177.116.0/22
    38: IP: 185.181.120.0/22
    39: IP: 185.183.85.0 -- 185.183.87.255
    40: IP: 185.185.80.0/22
    41: IP: 185.187.168.0/22
    42: IP: 185.188.248.0/22
    43: IP: 185.190.52.0/22
    44: IP: 185.191.108.0/22
    45: IP: 185.192.96.0/22
    46: IP: 185.193.80.0/22
    47: IP: 185.194.149.0 -- 185.194.150.255
    48: IP: 185.195.216.0/22
    49: IP: 185.197.248.0/22
    50: IP: 185.200.32.0/22
    51: IP: 185.201.8.0/22
    52: IP: 185.201.224.0/23
    53: IP: 185.203.120.0 -- 185.203.122.255
    54: IP: 185.205.192.0/22
    55: IP: 185.205.244.0/22
    56: IP: 185.206.240.0/22
    57: IP: 185.208.204.0/22
    58: IP: 185.209.228.0/22
    59: IP: 185.210.144.0/22
    60: IP: 185.212.68.0/22
    61: IP: 185.213.140.0/22
    62: IP: 185.214.96.0/22
    63: IP: 185.215.164.0/22
    64: IP: 185.215.180.0/22
    65: IP: 185.216.200.0/22
    66: IP: 185.217.168.0/22
    67: IP: 185.218.132.0/22
    68: IP: 185.219.252.0/22
    69: IP: 185.222.136.0 -- 185.222.138.255
    70: IP: 185.224.136.0/22
    71: IP: 185.225.136.0/22
    72: IP: 185.226.144.0/22
    73: IP: 185.228.16.0/22
    74: IP: 185.229.56.0/22
    75: IP: 185.230.136.0/22
    76: IP: 188.116.12.0/22
    77: IP: 193.17.219.0/24
    78: IP: 193.42.0.0/23
    79: IP: 193.42.136.0/23
    80: IP: 193.43.118.0/23
    81: IP: 193.43.134.0/23
    82: IP: 193.189.106.0/23
    83: IP: 194.126.237.0/24
    84: IP: 194.140.196.0/22
    85: IP: 194.163.0.0/20
    86: IP: 194.163.32.0/19
    87: IP: 194.195.80.0/20
    88: IP: 194.233.96.0/20
    89: IP: 195.28.21.0/24
    90: IP: 195.88.86.0/23
    91: IP: 195.179.192.0/20
    92: IP: 195.179.224.0/20
    93: IP: 195.210.58.0/23
    94: IP: 212.102.102.0/24
    95: IP: 213.199.32.0/19
    96: IP: 217.21.64.0/19
    97: IP: 2a01:6f0::/29

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738770248627 (0xac022363b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 18 15:16:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:24:f7:b7:a9:0e:43:71:54:ac:a4:60:12:26:
                    ef:8a:79:bb:1a:45:a4:a8:76:f7:1c:20:11:54:19:
                    d6:03:98:58:0a:ac:46:9d:c8:37:a7:7b:55:2f:4b:
                    40:93:cf:1d:dc:8b:84:b5:4d:37:33:8b:f9:83:40:
                    99:2d:02:4e:8c:ab:65:bb:64:79:b4:39:bb:52:1e:
                    93:00:50:51:70:32:d3:78:3f:0c:f8:9e:7a:bb:d2:
                    0a:31:c3:d0:80:e8:4f:f6:66:48:f2:0f:d2:7c:e3:
                    a9:d0:60:ec:cb:82:57:dc:31:98:88:24:70:b4:71:
                    50:27:1b:57:88:63:e5:ca:8b:7f:95:35:d8:24:10:
                    e8:82:2f:aa:6c:ca:cc:3a:65:62:0f:5e:f3:61:dd:
                    34:2b:07:73:56:bf:02:d8:e1:0c:08:db:08:47:98:
                    d4:bc:34:fe:ec:85:4e:a8:5c:6e:a6:d0:19:85:40:
                    a5:15:25:23:29:97:1f:c3:9b:44:90:c5:40:2d:b2:
                    6a:30:d2:7a:61:ba:e1:b7:51:b4:80:75:ce:b4:f6:
                    63:cd:a7:c7:89:9a:41:92:c3:5b:8f:18:ec:d5:ec:
                    5a:d8:62:71:13:31:07:3e:1f:34:52:4e:f5:17:52:
                    56:28:79:c2:1d:21:07:53:e1:06:e7:41:ed:3f:cc:
                    8f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.64.0-31.187.66.255
                  31.187.69.0-31.187.76.255
                  31.187.78.0/24
                  31.220.0.0-31.220.13.255
                  31.220.15.0/24
                  31.220.28.0-31.220.47.255
                  31.220.64.0/21
                  45.157.80.0/22
                  77.237.224.0/21
                  80.75.16.0/20
                  85.92.104.0/22
                  85.190.228.0-85.190.255.255
                  89.147.128.0/18
                  94.140.8.0/22
                  109.106.240.0/20
                  176.126.66.0/23
                  176.126.70.0/24
                  176.126.74.0/24
                  176.126.77.0-176.126.78.255
                  176.126.83.0-176.126.87.255
                  176.126.92.0/22
                  185.35.108.0/24
                  185.47.44.0/22
                  185.68.156.0/22
                  185.72.68.0/22
                  185.111.156.0/22
                  185.135.136.0/22
                  185.161.202.0/23
                  185.164.36.0/22
                  185.164.52.0/22
                  185.165.60.0/22
                  185.166.188.0/24
                  185.168.9.0/24
                  185.173.224.0/22
                  185.175.208.0/24
                  185.175.210.0/23
                  185.177.116.0/22
                  185.181.120.0/22
                  185.183.85.0-185.183.87.255
                  185.185.80.0/22
                  185.187.168.0/22
                  185.188.248.0/22
                  185.190.52.0/22
                  185.191.108.0/22
                  185.192.96.0/22
                  185.193.80.0/22
                  185.194.149.0-185.194.150.255
                  185.195.216.0/22
                  185.197.248.0/22
                  185.200.32.0/22
                  185.201.8.0/22
                  185.201.224.0/23
                  185.203.120.0-185.203.122.255
                  185.205.192.0/22
                  185.205.244.0/22
                  185.206.240.0/22
                  185.208.204.0/22
                  185.209.228.0/22
                  185.210.144.0/22
                  185.212.68.0/22
                  185.213.140.0/22
                  185.214.96.0/22
                  185.215.164.0/22
                  185.215.180.0/22
                  185.216.200.0/22
                  185.217.168.0/22
                  185.218.132.0/22
                  185.219.252.0/22
                  185.222.136.0-185.222.138.255
                  185.224.136.0/22
                  185.225.136.0/22
                  185.226.144.0/22
                  185.228.16.0/22
                  185.229.56.0/22
                  185.230.136.0/22
                  188.116.12.0/22
                  193.17.219.0/24
                  193.42.0.0/23
                  193.42.136.0/23
                  193.43.118.0/23
                  193.43.134.0/23
                  193.189.106.0/23
                  194.126.237.0/24
                  194.140.196.0/22
                  194.163.0.0/20
                  194.163.32.0/19
                  194.195.80.0/20
                  194.233.96.0/20
                  195.28.21.0/24
                  195.88.86.0/23
                  195.179.192.0/20
                  195.179.224.0/20
                  195.210.58.0/23
                  212.102.102.0/24
                  213.199.32.0/19
                  217.21.64.0/19
                IPv6:
                  2a01:6f0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42366

    Signature Algorithm: sha256WithRSAEncryption
         5e:05:95:c5:fa:31:fa:82:dd:bb:dd:e0:11:e2:30:98:33:81:
         78:bf:a4:1c:a1:e9:94:73:97:a7:bd:d2:c9:86:b8:8d:8f:cf:
         8b:9a:13:08:ba:d0:73:f2:8e:ca:bc:72:c0:8e:5d:bb:ea:a5:
         70:3f:ea:80:b7:e1:5d:c3:5e:b7:8c:94:28:0a:f9:7a:4a:b6:
         18:02:e0:eb:16:88:6d:32:c3:bf:9f:08:37:33:6a:3c:9c:e9:
         e9:db:90:02:92:b6:8a:65:cf:ef:5a:67:8a:d7:6b:51:0a:e2:
         9c:6f:69:25:a7:31:d5:5d:13:89:ca:69:15:60:bd:4c:31:f6:
         f9:da:71:91:55:ab:86:d2:7d:e6:a8:a0:16:f5:64:7f:87:a3:
         64:52:46:b6:e0:53:0a:fc:b9:70:62:a8:ef:e2:e7:c3:73:3a:
         88:dd:45:5b:ba:61:4c:3d:10:03:99:95:60:86:74:2a:74:28:
         aa:c0:a5:a0:4c:61:ea:aa:79:8f:23:09:c0:07:1a:60:72:cc:
         b9:3d:cf:d8:4c:33:e4:cb:0c:ab:27:2f:b6:19:7d:0e:7e:e6:
         f6:0d:b4:dd:47:b5:9e:32:09:17:90:ee:4c:7d:cc:ff:b7:be:
         da:40:3e:9f:14:ff:46:1b:6b:79:6e:80:fa:04:c6:c3:5b:67:
         67:81:d7:b8
-----BEGIN CERTIFICATE-----
MIIICjCCBvKgAwIBAgIGAKwCI2OzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTE4MTUxNjE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhNmI2NWQ0NzA5
ZjZjZmQ5OTlhMjg3Nzg5MzkyYmFhNmQzYTVkY2VhMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA0iT3t6kOQ3FUrKRgEibvinm7GkWkqHb3HCARVBnWA5hY
CqxGncg3p3tVL0tAk88d3IuEtU03M4v5g0CZLQJOjKtlu2R5tDm7Uh6TAFBRcDLT
eD8M+J56u9IKMcPQgOhP9mZI8g/SfOOp0GDsy4JX3DGYiCRwtHFQJxtXiGPlyot/
lTXYJBDogi+qbMrMOmViD17zYd00KwdzVr8C2OEMCNsIR5jUvDT+7IVOqFxuptAZ
hUClFSUjKZcfw5tEkMVALbJqMNJ6Ybrht1G0gHXOtPZjzafHiZpBksNbjxjs1exa
2GJxEzEHPh80Uk71F1JWKHnCHSEHU+EG50HtP8yP5QIDAQABo4IFIjCCBR4wHQYD
VR0OBBYEFKa2XUcJ9s/ZmaKHeJOSuqbTpdzqMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
gf0GCCsGAQUFBwELBIHwMIHtMD4GCCsGAQUFBzAFhjJyc3luYzovL3Jwa2kxLnRl
cnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80LzBqBggrBgEFBQcwCoZe
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC9BNkI2NUQ0NzA5RjZDRkQ5OTlBMjg3Nzg5MzkyQkFBNkQzQTVEQ0VBLm1mdDA/
BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcnJkcC9u
b3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhW
VjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICxgYIKwYBBQUH
AQcBAf8EggK1MIICsTCCAp4EAgABMIICljAMAwQGH7tAAwQAH7tCMAwDBAAfu0UD
BAAfu0wDBAAfu04wCwMDAh/cAwQBH9wMAwQAH9wPMAwDBAIf3BwDBAQf3CADBAMf
3EADBAItnVADBANN7eADBARQSxADBAJVXGgwCwMEAlW+5AMDAFW+AwQGWZOAAwQC
XowIAwQEbWrwAwQBsH5CAwQAsH5GAwQAsH5KMAwDBACwfk0DBACwfk4wDAMEALB+
UwMEA7B+UAMEArB+XAMEALkjbAMEArkvLAMEArlEnAMEArlIRAMEArlvnAMEArmH
iAMEAbmhygMEArmkJAMEArmkNAMEArmlPAMEALmmvAMEALmoCQMEArmt4AMEALmv
0AMEAbmv0gMEArmxdAMEArm1eDAMAwQAubdVAwQDubdQAwQCublQAwQCubuoAwQC
ubz4AwQCub40AwQCub9sAwQCucBgAwQCucFQMAwDBAC5wpUDBAC5wpYDBAK5w9gD
BAK5xfgDBAK5yCADBAK5yQgDBAG5yeAwDAMEA7nLeAMEALnLegMEArnNwAMEArnN
9AMEArnO8AMEArnQzAMEArnR5AMEArnSkAMEArnURAMEArnVjAMEArnWYAMEArnX
pAMEArnXtAMEArnYyAMEArnZqAMEArnahAMEArnb/DAMAwQDud6IAwQAud6KAwQC
ueCIAwQCueGIAwQCueKQAwQCueQQAwQCueU4AwQCueaIAwQCvHQMAwQAwRHbAwQB
wSoAAwQBwSqIAwQBwSt2AwQBwSuGAwQBwb1qAwQAwn7tAwQCwozEAwQEwqMAAwQF
wqMgAwQEwsNQAwQEwulgAwQAwxwVAwQBw1hWAwQEw7PAAwQEw7PgAwQBw9I6AwQA
1GZmAwQF1ccgAwQF2RVAMA0EAgACMAcDBQMqAQbwMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwClfjANBgkqhkiG9w0BAQsFAAOCAQEAXgWVxfox+oLdu93gEeIwmDOB
eL+kHKHplHOXp73SyYa4jY/Pi5oTCLrQc/KOyrxywI5du+qlcD/qgLfhXcNet4yU
KAr5ekq2GALg6xaIbTLDv58INzNqPJzp6duQApK2imXP71pnitdrUQrinG9pJacx
1V0TicppFWC9TDH2+dpxkVWrhtJ95qigFvVkf4ejZFJGtuBTCvy5cGKo7+Lnw3M6
iN1FW7phTD0QA5mVYIZ0KnQoqsCloExh6qp5jyMJwAcaYHLMuT3P2Ewz5MsMqycv
thl9Dn7m9g203Ue1njIJF5DuTH3M/7e+2kA+nxT/RhtreW6A+gTGw1tnZ4HXuA==
-----END CERTIFICATE-----

Generated at Tue Jan 18 16:38:16 2022 by LibreSSL & rpki-client.