This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.cer
File:                     3B34906CA2BE711E565ADA84356DDADC6B48AA3E.cer (raw, json)
Hash identifier:          0KyPiux++caD8kmkdeceIH70UN9GD3wCAp/mThr4HAU=
Subject key identifier:   3B:34:90:6C:A2:BE:71:1E:56:5A:DA:84:35:6D:DA:DC:6B:48:AA:3E
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       5796447059CB88C91ADACF48F2FDDB1DE1D6D25B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jan 2026 22:07:48 +0000
Certificate not after:    Tue 26 Jan 2027 22:12:48 +0000
Subordinate resources:    AS: 13999
                          AS: 28541
                          AS: 262916
                          IP: 177.224.0.0/13
                          IP: 177.240.0.0/13
                          IP: 181.199.192.0/20
                          IP: 187.179.160.0 -- 187.179.255.255
                          IP: 187.191.128.0/17
                          IP: 187.240.0.0/13
                          IP: 189.192.0.0/13
                          IP: 190.110.0.0/19
                          IP: 200.52.160.0 -- 200.52.223.255
                          IP: 200.56.128.0/18
                          IP: 200.66.0.0/18
                          IP: 200.77.0.0/17
                          IP: 200.92.0.0/16
                          IP: 200.94.224.0/20
                          IP: 201.132.0.0/16
                          IP: 201.159.192.0 -- 201.159.215.255
                          IP: 201.164.0.0/15
                          IP: 201.169.0.0/16
                          IP: 2806:260::/28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:96:44:70:59:cb:88:c9:1a:da:cf:48:f2:fd:db:1d:e1:d6:d2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 27 22:07:48 2026 GMT
            Not After : Jan 26 22:12:48 2027 GMT
        Subject: CN=3B34906CA2BE711E565ADA84356DDADC6B48AA3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:07:8c:06:3b:fa:e2:9f:c7:70:72:27:d3:79:
                    0b:60:e0:58:a6:bb:bc:ca:92:23:c6:1f:ed:cd:13:
                    c8:63:bc:7a:d1:7b:41:f6:f5:d3:83:db:ca:e3:23:
                    ae:be:81:ca:e5:43:2e:5f:d9:d5:8d:57:69:b9:6b:
                    ca:18:20:a1:81:eb:53:aa:38:50:b8:a3:f5:ec:cb:
                    3d:21:39:54:da:11:b2:e4:9f:20:2e:f2:34:b7:be:
                    2c:d2:e5:e4:cd:6a:dd:37:9b:b4:b2:89:7e:1e:bb:
                    8d:d3:4e:2a:12:9a:91:97:26:91:9b:a7:af:5f:a9:
                    2b:af:42:2b:b8:57:70:7d:41:b1:80:d2:22:96:dd:
                    50:a0:51:db:cd:d1:ad:bc:fd:8c:17:f5:e0:9a:5e:
                    15:56:78:44:2e:fb:59:71:80:9b:04:9a:1f:bc:42:
                    03:6f:fd:f3:29:2f:ad:73:ba:67:fa:86:a7:cf:1a:
                    4e:45:45:f4:6c:cb:34:ef:ef:0f:d5:d3:f6:1d:66:
                    36:57:93:48:f2:7c:8c:ff:2f:91:43:e3:6d:61:02:
                    b2:ad:f5:fb:d8:b6:1c:ab:7b:1b:a8:39:15:42:90:
                    29:e0:20:8a:d0:19:fb:2b:c6:d3:44:c8:69:0e:5c:
                    f8:78:b8:81:3d:42:2c:e8:53:5f:15:0e:e1:5f:44:
                    f1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:34:90:6C:A2:BE:71:1E:56:5A:DA:84:35:6D:DA:DC:6B:48:AA:3E
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.224.0.0/13
                  177.240.0.0/13
                  181.199.192.0/20
                  187.179.160.0-187.179.255.255
                  187.191.128.0/17
                  187.240.0.0/13
                  189.192.0.0/13
                  190.110.0.0/19
                  200.52.160.0-200.52.223.255
                  200.56.128.0/18
                  200.66.0.0/18
                  200.77.0.0/17
                  200.92.0.0/16
                  200.94.224.0/20
                  201.132.0.0/16
                  201.159.192.0-201.159.215.255
                  201.164.0.0/15
                  201.169.0.0/16
                IPv6:
                  2806:260::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13999
                  28541
                  262916

    Signature Algorithm: sha256WithRSAEncryption
         54:36:d4:59:af:ed:78:18:b0:49:df:be:f1:99:22:e3:e9:6f:
         ef:2d:58:e7:f5:b0:39:dd:58:48:82:b7:54:a4:5c:60:3b:e9:
         4e:00:a0:a9:ea:ee:b3:98:fa:e6:34:f7:1a:9c:53:2c:13:7e:
         c5:f4:ed:c6:fe:61:a0:ff:1c:ed:f9:69:5b:cf:3f:d2:e5:4f:
         d3:9d:41:20:a0:fe:ce:e5:0a:5c:f2:35:04:6a:4c:9c:7c:c5:
         19:4e:aa:81:d7:d1:67:07:d9:88:73:ac:35:06:2a:cd:23:9a:
         e6:2d:12:03:26:ac:d9:91:1c:67:ea:f5:02:2b:98:16:8a:0b:
         d8:fa:20:85:00:f2:29:3e:87:00:0d:ce:10:49:11:db:ab:39:
         32:f6:f2:3c:8c:62:b0:5c:5e:76:bd:d4:ff:a9:e7:77:0e:5c:
         bd:d9:67:6b:87:ca:75:67:06:7b:e8:b5:0f:b1:bf:66:36:f1:
         5f:8d:d8:a7:73:79:df:0d:6a:e9:1c:32:f4:1f:44:64:cb:fc:
         9e:1c:12:29:86:23:a2:2b:94:45:99:47:fa:6a:58:4f:59:89:
         ae:9e:19:d9:bd:27:01:13:0a:eb:18:97:b5:03:fc:6c:42:4a:
         12:3f:12:21:2a:a7:ca:11:57:90:3e:a0:54:2e:cb:7f:df:e2:
         8e:66:f9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:12:32 2026 by rpki-client