This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer
File:                     2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer (raw, json)
Hash identifier:          D1U2HsW8RqpEkYtalZ1zW5T6+YT83pySnNS3VoCXu7Q=
Subject key identifier:   2B:A1:0E:6D:7C:03:28:E5:36:4B:F4:04:11:04:D5:26:24:FF:2C:2E
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       2DEEC29C7BE2DEC99FA7EF795DD09B6A8B8228DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 17:59:53 +0000
Certificate not after:    Wed 27 Jan 2027 18:04:53 +0000
Subordinate resources:    AS: 10391
                          AS: 272037
                          IP: 45.68.104.0/24
                          IP: 179.0.200.0/23
                          IP: 2801:17:c000::/44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Feb 2026 03:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ee:c2:9c:7b:e2:de:c9:9f:a7:ef:79:5d:d0:9b:6a:8b:82:28:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 17:59:53 2026 GMT
            Not After : Jan 27 18:04:53 2027 GMT
        Subject: CN=2BA10E6D7C0328E5364BF4041104D52624FF2C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:62:0a:7a:eb:c2:61:48:d3:51:f0:fd:cc:f1:
                    cf:7e:fd:92:71:51:b4:74:66:75:06:c0:e5:97:40:
                    e9:49:ea:9b:5b:8b:57:10:14:7c:d3:24:f3:eb:5b:
                    bb:38:9d:09:ce:1e:6c:8e:87:ba:51:78:ba:81:ec:
                    05:7b:d9:02:3e:96:78:65:0b:7c:ec:65:23:d8:4b:
                    87:c2:9d:9b:cf:41:cb:e7:48:a0:f1:cb:36:72:74:
                    8b:67:69:6e:df:bc:d2:40:1a:51:48:83:71:cf:88:
                    83:d0:56:93:14:6d:3f:43:cf:f2:19:28:b6:50:b0:
                    75:3f:30:76:c7:61:c4:8d:89:a8:96:85:6a:45:3a:
                    e0:54:15:85:25:d9:a0:94:11:31:56:8c:f6:89:fa:
                    0c:7f:40:79:fb:32:26:98:ee:42:c0:45:5c:2f:94:
                    01:2c:45:d3:6d:58:e2:fa:89:d4:9c:dc:bd:02:1a:
                    c6:cb:d9:47:45:7a:64:c7:00:53:a1:59:39:91:a4:
                    49:20:d4:34:58:9e:54:37:15:fd:7d:a1:3c:95:4a:
                    5e:f8:b0:a8:25:aa:cf:4c:ba:1e:05:12:90:cf:16:
                    c2:21:f0:4c:b0:26:90:f1:52:89:d4:fa:17:b6:f8:
                    d9:aa:88:1f:f2:aa:83:50:78:c0:a6:fb:09:d4:4d:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:A1:0E:6D:7C:03:28:E5:36:4B:F4:04:11:04:D5:26:24:FF:2C:2E
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.104.0/24
                  179.0.200.0/23
                IPv6:
                  2801:17:c000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10391
                  272037

    Signature Algorithm: sha256WithRSAEncryption
         1f:d8:3b:44:c2:cf:91:5e:a4:d1:98:6d:65:78:40:48:dd:e6:
         c8:d1:c0:40:93:57:03:25:95:76:04:6f:09:3e:76:e8:ae:66:
         99:a1:87:3f:4b:1e:d6:3f:83:dc:29:2f:2d:d6:92:2c:7c:6b:
         9e:fc:db:03:25:2e:d8:a7:0a:7a:5b:10:1f:b3:23:9c:a1:fe:
         09:35:f7:02:8e:ea:cc:d8:70:bd:26:5c:74:cd:c0:43:bc:48:
         1c:11:ff:98:36:90:5e:15:15:4e:74:30:3f:c1:e0:0c:e5:bf:
         11:99:69:71:9f:5e:fa:63:ec:ee:d8:c3:32:b5:da:e4:fc:0a:
         29:0c:bb:56:67:c9:02:d6:5b:fa:05:18:e7:d5:7e:3f:21:c2:
         32:d2:0e:1e:33:2f:dd:f4:2b:91:da:c1:5a:ac:f5:41:38:44:
         c3:91:75:41:bd:33:62:b6:e7:06:6a:8b:97:38:98:23:13:cd:
         76:0f:ea:32:da:a1:92:5a:5f:cb:ad:fe:fe:91:2f:df:ee:11:
         56:15:fb:a5:63:e7:41:49:c2:f5:d6:73:6c:f6:6e:3a:11:01:
         c4:7c:c8:7b:09:fc:0f:0c:fa:6d:a2:86:90:c5:ba:09:8f:52:
         ac:b5:62:73:06:79:da:64:85:a1:ca:a2:43:b2:14:a3:2f:17:
         0b:61:ed:57
-----BEGIN CERTIFICATE-----
MIIGsTCCBZmgAwIBAgIULe7CnHvi3smfp+95XdCbaouCKNowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAxMjgxNzU5NTNaFw0yNzAxMjcxODA0NTNaMDMxMTAvBgNV
BAMTKDJCQTEwRTZEN0MwMzI4RTUzNjRCRjQwNDExMDRENTI2MjRGRjJDMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOYgp668JhSNNR8P3M8c9+/ZJx
UbR0ZnUGwOWXQOlJ6ptbi1cQFHzTJPPrW7s4nQnOHmyOh7pReLqB7AV72QI+lnhl
C3zsZSPYS4fCnZvPQcvnSKDxyzZydItnaW7fvNJAGlFIg3HPiIPQVpMUbT9Dz/IZ
KLZQsHU/MHbHYcSNiaiWhWpFOuBUFYUl2aCUETFWjPaJ+gx/QHn7MiaY7kLARVwv
lAEsRdNtWOL6idSc3L0CGsbL2UdFemTHAFOhWTmRpEkg1DRYnlQ3Ff19oTyVSl74
sKglqs9Muh4FEpDPFsIh8EywJpDxUonU+he2+NmqiB/yqoNQeMCm+wnUTe+RAgMB
AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQroQ5tfAMo5TZL
9AQRBNUmJP8sLjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEMwQzg0MzNFNzcwQjFCRDIyRkZBNEE3
NjYxNTU2QjRDNzk1NjExNkIwNzIwQTI3NkUwNkQxQzgxRDg5QTU4OC8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80QzBDODQzM0U3NzBCMUJEMjJGRkE0QTc2NjE1NTZCNEM3OTU2MTE2QjA3
MjBBMjc2RTA2RDFDODFEODlBNTg4LzAvMkJBMTBFNkQ3QzAzMjhFNTM2NEJGNDA0
MTEwNEQ1MjYyNEZGMkMyRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALURoAwQBswDI
MA8EAgACMAkDBwQoAQAXwAAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICKJcCAwQm
pTANBgkqhkiG9w0BAQsFAAOCAQEAH9g7RMLPkV6k0ZhtZXhASN3myNHAQJNXAyWV
dgRvCT526K5mmaGHP0se1j+D3CkvLdaSLHxrnvzbAyUu2KcKelsQH7MjnKH+CTX3
Ao7qzNhwvSZcdM3AQ7xIHBH/mDaQXhUVTnQwP8HgDOW/EZlpcZ9e+mPs7tjDMrXa
5PwKKQy7VmfJAtZb+gUY59V+PyHCMtIOHjMv3fQrkdrBWqz1QThEw5F1Qb0zYrbn
BmqLlziYIxPNdg/qMtqhklpfy63+/pEv3+4RVhX7pWPnQUnC9dZzbPZuOhEBxHzI
ewn8Dwz6baKGkMW6CY9SrLVicwZ52mSFocqiQ7IUoy8XC2HtVw==
-----END CERTIFICATE-----