This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
File:                     274D68F06BB1F2ED094F03B52FED7565F7825D99.cer (raw, json)
Hash identifier:          xkW9XnGw9z3dRdK5qJBUf07CoyiqhKuljTKSLnBaV04=
Subject key identifier:   27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       672617BC619D85496DFDD533F044C6E102637663
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 06:58:37 +0000
Certificate not after:    Wed 27 Jan 2027 07:03:37 +0000
Subordinate resources:    AS: 7303
                          AS: 7934
                          AS: 10318
                          AS: 10481
                          AS: 10895
                          AS: 10983
                          AS: 11356
                          AS: 12264
                          AS: 21590
                          AS: 26608
                          AS: 27871
                          IP: 24.232.0.0/16
                          IP: 66.60.0.0/18
                          IP: 152.168.0.0/14
                          IP: 170.150.196.0/22
                          IP: 170.231.136.0/22
                          IP: 181.0.0.0 -- 181.1.151.255
                          IP: 181.1.156.0 -- 181.15.255.255
                          IP: 181.28.0.0/14
                          IP: 181.80.0.0 -- 181.85.207.255
                          IP: 181.85.216.0 -- 181.91.83.255
                          IP: 181.91.88.0 -- 181.94.196.255
                          IP: 181.94.198.0 -- 181.94.207.255
                          IP: 181.94.211.0/24
                          IP: 181.94.239.0 -- 181.94.240.255
                          IP: 181.94.251.0 -- 181.102.255.255
                          IP: 181.103.16.0 -- 181.103.63.255
                          IP: 181.103.96.0 -- 181.111.255.255
                          IP: 181.164.0.0 -- 181.171.255.255
                          IP: 181.228.0.0/14
                          IP: 186.108.0.0/14
                          IP: 186.124.0.0/14
                          IP: 186.136.0.0/14
                          IP: 186.152.0.0/15
                          IP: 190.16.0.0/14
                          IP: 190.30.0.0/15
                          IP: 190.136.0.0/14
                          IP: 190.188.0.0 -- 190.195.255.255
                          IP: 190.224.0.0/13
                          IP: 190.244.0.0/14
                          IP: 191.97.128.0/17
                          IP: 196.32.64.0/19
                          IP: 200.3.32.0 -- 200.3.95.255
                          IP: 200.32.0.0/19
                          IP: 200.42.0.0 -- 200.42.159.255
                          IP: 200.43.0.0/16
                          IP: 200.45.0.0/16
                          IP: 200.49.96.0/20
                          IP: 200.49.128.0/19
                          IP: 200.55.64.0/18
                          IP: 200.61.192.0/19
                          IP: 200.63.0.0/19
                          IP: 200.71.224.0/20
                          IP: 200.73.128.0/18
                          IP: 200.80.64.0/20
                          IP: 200.82.0.0/17
                          IP: 200.89.128.0/18
                          IP: 200.105.0.0 -- 200.105.95.255
                          IP: 200.110.224.0/21
                          IP: 200.114.128.0/17
                          IP: 200.117.0.0/16
                          IP: 200.122.0.0/17
                          IP: 200.126.128.0 -- 200.127.255.255
                          IP: 201.212.0.0/15
                          IP: 201.231.0.0/16
                          IP: 201.235.0.0/16
                          IP: 201.252.0.0/15
                          IP: 2001:13d0::/29
                          IP: 2800:2000::/20
                          IP: 2800:b000::/32
                          IP: 2803:da80::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:26:17:bc:61:9d:85:49:6d:fd:d5:33:f0:44:c6:e1:02:63:76:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 06:58:37 2026 GMT
            Not After : Jan 27 07:03:37 2027 GMT
        Subject: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:7e:94:d9:a9:de:09:12:3d:4e:b3:20:1b:
                    68:f5:43:c3:c0:4a:17:1e:02:c0:0a:14:c9:75:9b:
                    63:d0:ae:68:ac:e8:ae:44:f1:62:44:6a:51:0a:2e:
                    00:1b:d9:e5:3f:5e:8c:fa:9f:4c:15:68:6f:97:39:
                    df:2b:12:db:ec:5a:2e:58:88:8f:5c:45:e9:9e:02:
                    62:00:41:72:d6:ae:50:2c:48:ff:d8:ef:3d:87:93:
                    11:8b:a2:7c:2a:19:d9:e3:65:5d:40:e8:b1:03:0c:
                    0a:f9:ed:96:e9:bb:74:86:5b:ec:30:db:c5:d9:e7:
                    da:6e:20:5b:e0:ba:a6:ca:72:ca:08:a7:72:8d:95:
                    11:3f:a7:53:be:d2:dc:99:b1:86:cd:3a:f0:e8:b0:
                    fa:24:5d:08:11:66:d0:bc:01:e3:0e:69:1c:74:cf:
                    0f:11:d8:a1:fe:3e:82:03:ac:a5:88:31:3a:5c:5a:
                    8f:7e:ef:04:28:65:e5:66:35:4e:1b:06:dd:e8:87:
                    9d:d9:20:c8:00:17:18:a7:16:3d:bf:a7:f8:3b:a9:
                    e5:ec:2c:45:be:b8:6e:b3:17:37:54:6d:06:ef:d8:
                    d2:01:b7:87:ea:44:da:12:20:1b:f5:28:a6:c4:85:
                    99:ad:4d:d7:b7:1f:a9:bd:96:cd:bd:06:c6:9a:0e:
                    ee:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.232.0.0/16
                  66.60.0.0/18
                  152.168.0.0/14
                  170.150.196.0/22
                  170.231.136.0/22
                  181.0.0.0-181.1.151.255
                  181.1.156.0-181.15.255.255
                  181.28.0.0/14
                  181.80.0.0-181.85.207.255
                  181.85.216.0-181.91.83.255
                  181.91.88.0-181.94.196.255
                  181.94.198.0-181.94.207.255
                  181.94.211.0/24
                  181.94.239.0-181.94.240.255
                  181.94.251.0-181.102.255.255
                  181.103.16.0-181.103.63.255
                  181.103.96.0-181.111.255.255
                  181.164.0.0-181.171.255.255
                  181.228.0.0/14
                  186.108.0.0/14
                  186.124.0.0/14
                  186.136.0.0/14
                  186.152.0.0/15
                  190.16.0.0/14
                  190.30.0.0/15
                  190.136.0.0/14
                  190.188.0.0-190.195.255.255
                  190.224.0.0/13
                  190.244.0.0/14
                  191.97.128.0/17
                  196.32.64.0/19
                  200.3.32.0-200.3.95.255
                  200.32.0.0/19
                  200.42.0.0-200.42.159.255
                  200.43.0.0/16
                  200.45.0.0/16
                  200.49.96.0/20
                  200.49.128.0/19
                  200.55.64.0/18
                  200.61.192.0/19
                  200.63.0.0/19
                  200.71.224.0/20
                  200.73.128.0/18
                  200.80.64.0/20
                  200.82.0.0/17
                  200.89.128.0/18
                  200.105.0.0-200.105.95.255
                  200.110.224.0/21
                  200.114.128.0/17
                  200.117.0.0/16
                  200.122.0.0/17
                  200.126.128.0-200.127.255.255
                  201.212.0.0/15
                  201.231.0.0/16
                  201.235.0.0/16
                  201.252.0.0/15
                IPv6:
                  2001:13d0::/29
                  2800:2000::/20
                  2800:b000::/32
                  2803:da80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7303
                  7934
                  10318
                  10481
                  10895
                  10983
                  11356
                  12264
                  21590
                  26608
                  27871

    Signature Algorithm: sha256WithRSAEncryption
         1b:91:8f:c0:81:db:ab:b6:eb:7c:a3:61:e1:dd:c7:0b:f6:c2:
         0e:93:3a:07:2a:ea:e2:90:30:80:c6:51:05:e3:4c:1b:57:b0:
         9c:05:be:98:ff:87:d4:0c:ba:b7:fd:72:78:ff:c3:34:38:c4:
         40:d3:c7:5e:9b:63:a0:dd:7f:90:49:5d:f0:bf:15:19:7a:db:
         b2:67:83:1d:1d:d6:5a:9f:24:8a:7d:92:78:24:b0:93:d8:39:
         45:a4:49:2c:e2:d4:b1:02:08:ae:b2:8b:65:f4:d2:da:b1:61:
         40:a5:d9:b8:b3:1d:94:42:cb:c1:17:2a:95:0e:f5:b4:cb:ad:
         2a:8e:dd:45:24:3d:f1:f7:51:a1:6a:69:73:80:4e:04:f0:18:
         7c:fe:af:44:86:33:2b:8e:a5:ed:20:34:81:70:a1:0e:40:e3:
         fd:b4:2d:b0:63:66:6b:08:3b:2d:22:dd:6d:49:fc:aa:45:e8:
         a3:a5:eb:04:65:40:4d:ef:43:83:78:e5:a2:85:48:e4:35:e4:
         ec:7a:4c:7e:d8:11:f2:6d:6a:6c:d9:5c:fd:03:da:5e:06:46:
         4b:08:32:b8:e0:cb:eb:49:41:fb:e0:09:ad:ac:a7:af:fc:b8:
         c6:2f:4b:1d:e8:bd:2d:55:f4:8c:03:62:3e:b7:43:f0:9c:f4:
         f1:49:e2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:09:06 2026 by rpki-client