This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.cer
File: 0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.cer (raw, json)
Hash identifier: 1hDijSRfaHn+tlePS69xmf2JqBCV73HPgjWmBqeMIpk=
Subject key identifier: 0C:A7:02:4A:CC:22:C6:6C:E1:D4:3A:34:A1:5D:3D:2B:70:F1:8C:6A
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 6F4F1AA9A3F0B38C18824AE9F012BE823084B670
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/1C3CEC65CE13F99BF75C413D6E5A90177AB0B155B824614544271D5164A0223B/0/0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/1C3CEC65CE13F99BF75C413D6E5A90177AB0B155B824614544271D5164A0223B/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Mon 12 Jan 2026 11:42:52 +0000
Certificate not after: Mon 11 Jan 2027 11:47:52 +0000
Subordinate resources: AS: 262266
IP: 2801:1e:4000::/45
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Jan 2026 13:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:4f:1a:a9:a3:f0:b3:8c:18:82:4a:e9:f0:12:be:82:30:84:b6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 12 11:42:52 2026 GMT
Not After : Jan 11 11:47:52 2027 GMT
Subject: CN=0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:3e:58:e4:5b:63:6c:37:ba:c7:1a:3d:79:aa:
1e:4b:54:0e:e3:32:c2:38:a5:84:c9:a5:1e:c3:d0:
3a:f0:90:84:d0:91:d2:b0:72:ea:07:6f:09:54:12:
c0:c7:5a:51:a0:8b:0f:7f:6a:43:05:39:f1:8f:4e:
51:2f:0c:84:38:09:f5:42:70:53:d1:59:83:00:ba:
7e:36:87:3f:fd:70:0f:69:59:4d:a0:05:33:e0:fe:
04:e9:df:85:45:cb:22:8e:f0:ea:79:b8:a5:ca:14:
5b:bd:44:b5:ce:2d:77:6f:1d:56:7a:d6:f0:c5:0b:
6a:5d:a0:94:7d:18:56:e3:43:f0:e2:46:89:5c:31:
10:ba:4c:a0:62:80:79:e0:2c:fa:45:79:12:be:45:
8e:fc:03:b9:f4:4d:9b:3b:cf:6b:62:cf:33:2b:38:
50:86:2e:b4:86:15:7a:92:e6:fe:48:ad:23:7b:3d:
6d:55:35:f4:b4:73:9e:d0:87:02:69:0f:dd:88:f1:
19:f3:4c:9e:9d:1d:ef:83:17:86:a1:ee:45:35:bb:
38:0f:20:a8:c8:6b:28:b2:d7:59:56:40:90:da:3d:
c4:0b:78:13:a4:b4:9a:a0:9f:de:90:8d:af:92:4a:
9e:9d:f6:60:6f:cf:95:ae:b0:6c:5d:76:00:c7:58:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0C:A7:02:4A:CC:22:C6:6C:E1:D4:3A:34:A1:5D:3D:2B:70:F1:8C:6A
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1C3CEC65CE13F99BF75C413D6E5A90177AB0B155B824614544271D5164A0223B/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1C3CEC65CE13F99BF75C413D6E5A90177AB0B155B824614544271D5164A0223B/0/0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:4000::/45
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262266
Signature Algorithm: sha256WithRSAEncryption
b5:14:f0:58:32:02:41:b0:db:75:e2:33:5d:51:bd:05:a0:f6:
9c:be:b8:7f:a8:51:43:3b:d2:31:be:4b:af:22:c7:f9:7f:91:
17:01:74:ff:16:80:43:86:c1:dd:e1:0d:4c:b4:04:ca:4e:c1:
cb:a5:54:fe:38:49:92:71:0d:7b:a6:04:2b:e0:26:6a:e5:fb:
a4:c2:df:61:ac:99:b9:43:a1:a2:b9:6f:06:57:25:99:00:47:
8c:d3:8d:79:5a:bb:a0:57:42:a1:fc:9a:a0:52:42:b5:d4:4f:
6c:e9:b1:05:66:2c:a8:e7:8c:70:c5:e5:95:89:d3:52:e9:bd:
83:a0:df:69:c6:1c:e7:33:25:22:72:cd:45:bc:f9:ca:86:7b:
78:22:09:16:94:6d:c5:18:89:ca:31:c3:b5:84:95:3d:37:ea:
28:ca:7d:02:b5:7e:b5:ed:cd:7e:b3:ce:f5:78:f1:8f:3c:fa:
2b:ac:17:05:e4:37:db:a0:59:9b:d4:98:67:00:00:71:74:ef:
df:c2:57:d1:e7:41:4b:79:e4:8b:7a:6b:35:8e:99:39:52:69:
18:18:5e:ea:ff:26:bd:86:de:34:3b:ba:d2:6a:34:0e:35:c5:
39:60:ab:8b:6b:22:cc:b9:79:fe:86:46:f6:0d:88:ec:1d:a3:
4f:e9:5e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:47:19 2026 by rpki-client