This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0862BB5C4F073480DDD03F1C74576C631356E254.cer
File:                     0862BB5C4F073480DDD03F1C74576C631356E254.cer (raw, json)
Hash identifier:          6e6L6REaEtYZxfQHk4gLTVcEdINwHYZtJPh5GGcR+TY=
Subject key identifier:   08:62:BB:5C:4F:07:34:80:DD:D0:3F:1C:74:57:6C:63:13:56:E2:54
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       4F787B55D4C2E579034FB341A6607D4411081529
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/A8A46606001554EA6612B8A067F48A11441DCEB65C6B1849BFD159326CEFB17D/0/0862BB5C4F073480DDD03F1C74576C631356E254.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/A8A46606001554EA6612B8A067F48A11441DCEB65C6B1849BFD159326CEFB17D/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jan 2026 18:45:34 +0000
Certificate not after:    Tue 26 Jan 2027 18:50:34 +0000
Subordinate resources:    AS: 267737
                          IP: 45.168.172.0/23
                          IP: 2801:14c::/44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:78:7b:55:d4:c2:e5:79:03:4f:b3:41:a6:60:7d:44:11:08:15:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 27 18:45:34 2026 GMT
            Not After : Jan 26 18:50:34 2027 GMT
        Subject: CN=0862BB5C4F073480DDD03F1C74576C631356E254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d5:ee:3f:a1:c4:90:75:31:aa:bb:e3:c9:dd:
                    b6:87:8c:b8:75:8b:0a:89:83:e1:10:ec:f8:ee:5e:
                    3a:66:d1:c6:c7:1b:d1:9a:33:23:48:5c:43:bb:3e:
                    ae:c9:57:3a:7e:e9:f1:24:3b:25:52:d1:0d:fd:fc:
                    40:30:02:92:13:9e:1f:32:18:32:07:e7:4a:df:ab:
                    96:11:4b:93:3d:fe:a9:ea:ac:ee:af:f8:63:bd:b7:
                    e8:94:74:58:a4:9f:5c:94:03:d2:da:b0:7b:a1:58:
                    94:be:c5:15:71:cb:51:4e:24:53:a7:3a:9e:0c:5c:
                    75:7a:66:59:27:be:4e:e5:ea:17:13:06:3c:57:4c:
                    39:fc:4b:57:4b:76:1f:85:dd:a0:30:78:96:7f:f9:
                    70:c9:f7:c6:36:11:9d:bf:f7:db:49:d2:13:d1:b7:
                    94:4b:35:99:9e:ec:9d:38:6f:18:f2:74:b6:52:a8:
                    30:3f:88:50:dc:1a:5f:b6:48:fa:2c:49:c9:5f:3a:
                    79:8b:95:a6:d2:e3:95:49:4b:21:20:ba:ab:bf:f9:
                    40:7b:fa:e8:0d:81:f4:4c:24:92:25:fe:4b:37:b6:
                    78:d3:d9:66:04:84:59:b5:c1:ab:84:f6:47:ff:5d:
                    2f:06:9d:25:e3:4d:62:27:24:c7:e3:24:a9:ac:2f:
                    5d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:62:BB:5C:4F:07:34:80:DD:D0:3F:1C:74:57:6C:63:13:56:E2:54
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A8A46606001554EA6612B8A067F48A11441DCEB65C6B1849BFD159326CEFB17D/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A8A46606001554EA6612B8A067F48A11441DCEB65C6B1849BFD159326CEFB17D/0/0862BB5C4F073480DDD03F1C74576C631356E254.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.172.0/23
                IPv6:
                  2801:14c::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267737

    Signature Algorithm: sha256WithRSAEncryption
         2e:34:4f:3f:b6:8e:3d:61:54:ab:cc:bc:b1:a8:9b:4f:38:19:
         44:ae:0a:3b:62:6e:9e:92:1b:ce:87:c6:b2:e9:55:fa:1d:43:
         14:ba:b7:d1:e3:0f:e1:c1:5d:72:c6:76:eb:5f:0a:6c:85:84:
         43:7f:06:7b:3d:af:c9:0e:6b:9d:f8:95:70:9d:1f:bc:b2:f2:
         76:e2:4f:76:49:e8:10:38:47:8a:cf:fb:58:fa:54:18:fa:72:
         10:c6:ef:f3:84:58:1e:6c:55:89:29:b6:06:62:64:62:e3:34:
         5d:08:93:99:68:93:16:65:96:81:70:fa:e9:ef:5e:1a:40:0a:
         20:4a:ea:44:9e:6d:71:b1:b2:a5:08:bf:33:f7:39:76:57:af:
         51:db:31:20:08:a2:25:3c:3b:19:9a:45:51:11:39:d7:1a:52:
         d0:81:20:80:3a:b4:6e:e1:69:7d:e3:94:90:63:1e:50:75:65:
         d9:db:97:28:25:47:52:a9:8d:21:35:55:98:d3:43:10:72:43:
         c3:e0:e5:b1:6b:1b:f9:22:ba:dd:45:15:98:6e:f2:b4:86:00:
         47:27:a5:91:2d:e3:d9:49:9c:59:69:17:f8:35:3b:f0:1c:3a:
         dd:be:5d:5a:0b:87:53:af:d8:88:ca:83:e1:5d:cd:d1:ef:43:
         5f:6b:b0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----