This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05130B3831C4AB16DBD29530170C5A37C307AEDA.cer
File:                     05130B3831C4AB16DBD29530170C5A37C307AEDA.cer (raw, json)
Hash identifier:          w+Lj97PQeoDPF6m8E3K/Lrxe3RQY7j0flQlbUtMo2SU=
Subject key identifier:   05:13:0B:38:31:C4:AB:16:DB:D2:95:30:17:0C:5A:37:C3:07:AE:DA
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       7AEBB1A0D6E2EA3BD87609D21189886F9BF1785B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6C2B881A253DC755A96BA954792F617161862E8A0F26D294C877F38E79CCF4CC/0/05130B3831C4AB16DBD29530170C5A37C307AEDA.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6C2B881A253DC755A96BA954792F617161862E8A0F26D294C877F38E79CCF4CC/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 11:25:20 +0000
Certificate not after:    Wed 27 Jan 2027 11:30:20 +0000
Subordinate resources:    AS: 265676
                          IP: 45.5.152.0/22
                          IP: 2803:1c0::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 09:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:eb:b1:a0:d6:e2:ea:3b:d8:76:09:d2:11:89:88:6f:9b:f1:78:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 11:25:20 2026 GMT
            Not After : Jan 27 11:30:20 2027 GMT
        Subject: CN=05130B3831C4AB16DBD29530170C5A37C307AEDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:e2:a0:03:63:c4:28:c2:db:7e:ab:91:4b:
                    98:1c:05:6d:a9:58:03:f3:03:4a:a8:43:ea:df:60:
                    96:ad:3a:25:20:55:bc:6c:80:6f:74:7f:01:da:9c:
                    fb:32:87:2d:87:02:22:1c:bf:e4:95:58:a8:98:64:
                    14:05:fc:fc:ae:22:a1:1b:a6:c5:c6:92:b5:3e:1c:
                    ea:9b:bb:1a:a0:9b:c0:96:85:c9:98:50:fb:04:ab:
                    5e:8d:39:d2:27:bd:af:f3:2b:e3:9f:69:81:f8:95:
                    4f:cb:e8:9f:63:a8:b5:80:3b:5b:ce:31:e4:de:71:
                    8b:75:db:df:c9:de:7f:83:b6:17:e6:cd:3e:43:81:
                    b9:28:39:54:43:0a:a3:9b:49:d4:62:35:f1:57:ff:
                    50:05:64:4e:ae:29:13:60:df:8b:30:d0:d2:1e:33:
                    69:34:00:46:36:a9:fb:e2:26:21:0e:3e:7e:6b:d8:
                    d5:f2:b9:54:7f:42:3d:78:0c:d9:b4:8a:4d:5a:cf:
                    36:e3:38:f6:7d:8c:4a:ba:f0:f9:8b:94:70:75:88:
                    53:1a:2a:56:05:1d:78:79:51:fc:43:cb:e5:ef:c6:
                    29:c2:47:c2:66:01:a8:71:0e:c2:ed:73:2d:53:62:
                    0b:76:b3:55:19:83:7f:5b:fa:04:2a:db:81:be:f4:
                    e0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:13:0B:38:31:C4:AB:16:DB:D2:95:30:17:0C:5A:37:C3:07:AE:DA
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6C2B881A253DC755A96BA954792F617161862E8A0F26D294C877F38E79CCF4CC/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6C2B881A253DC755A96BA954792F617161862E8A0F26D294C877F38E79CCF4CC/0/05130B3831C4AB16DBD29530170C5A37C307AEDA.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.152.0/22
                IPv6:
                  2803:1c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265676

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:d4:20:86:a5:e8:48:05:51:24:cc:52:68:9b:1f:10:88:
         a2:f3:45:b7:a7:e7:df:f3:62:e3:da:3d:a3:af:c0:4b:1e:e7:
         f1:81:df:5e:f3:ad:f1:59:1a:96:ab:45:be:ce:46:f2:5a:b3:
         bb:52:68:40:a7:15:28:5c:b3:9d:62:c0:15:0c:e2:c1:f7:5d:
         56:b9:e5:7f:e7:6c:f5:50:6f:dd:fe:1f:4e:66:3a:17:24:7b:
         76:2b:3d:fb:33:e2:37:00:ad:20:18:64:f3:e0:ae:5a:12:97:
         4a:8e:a2:b6:ad:b4:88:ff:49:b5:5a:fb:6f:25:d0:5e:d5:e9:
         4c:e3:c7:40:68:c8:59:b6:de:b1:b1:a3:01:e2:bf:66:1e:ab:
         31:ed:47:6e:40:a2:dc:17:f5:78:a8:c4:b4:b4:52:2b:45:eb:
         4f:c4:52:22:0e:be:88:c6:49:64:ea:4a:f2:fc:65:42:24:6d:
         c2:06:b7:87:c2:4c:5b:df:ed:2b:2b:70:d7:42:9d:30:d1:1b:
         be:f8:49:2f:ef:80:9c:a7:a3:4e:48:5d:a8:e0:12:d1:96:b1:
         e2:dd:cb:e0:99:cb:70:b3:90:08:05:a6:95:26:d5:7f:4b:e8:
         c0:6a:4a:96:b7:ae:80:6d:85:48:a2:2e:35:90:3d:3a:77:d7:
         40:fd:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----