This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.cer
File:                     5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.cer (raw, json)
Hash identifier:          sYOwne67CpN9u3M4FRi2OeHolTZ/mshOZYm4VYXciX4=
Subject key identifier:   5D:30:85:84:81:6A:CB:0C:C9:C3:5E:D0:9C:51:D8:BB:4A:A6:CE:24
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       24460CB5F3EBAD0CCBFF2A4B223810D798B31A35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 16:36:03 +0000
Certificate not after:    Wed 27 Jan 2027 16:41:03 +0000
Subordinate resources:    AS: 269788
                          IP: 138.59.8.0/22
                          IP: 2803:1f80::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:46:0c:b5:f3:eb:ad:0c:cb:ff:2a:4b:22:38:10:d7:98:b3:1a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 16:36:03 2026 GMT
            Not After : Jan 27 16:41:03 2027 GMT
        Subject: CN=5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5d:43:10:78:52:0f:71:da:52:77:8d:90:dd:
                    21:01:26:b2:97:d5:ad:84:82:a2:02:6f:18:74:45:
                    06:d4:f8:39:9d:0c:2d:e6:4d:65:ac:85:85:9f:9d:
                    04:ac:25:b7:22:a1:95:67:7e:fe:d1:11:36:39:ce:
                    06:e9:1d:12:80:4b:81:99:3d:cf:30:f1:8e:3f:e9:
                    55:b2:a8:04:4c:d1:d9:50:15:a3:a8:49:70:25:9a:
                    bb:c7:67:f3:da:de:4f:e9:0d:80:cf:83:f5:cd:6f:
                    11:a4:ae:3d:f5:6a:cd:e8:08:00:78:36:10:a9:51:
                    46:23:68:33:ee:28:92:7a:e2:49:24:ed:50:cc:ab:
                    c2:96:b1:22:1b:e6:8d:a3:7d:9d:b8:82:fb:86:c9:
                    d7:a4:d4:cf:a0:1a:b5:70:d4:6e:88:b5:be:42:6f:
                    e8:82:39:ff:3b:d4:56:99:1f:e4:6c:54:a9:9f:45:
                    3c:2f:a2:23:e9:c9:77:be:1e:e8:6a:4b:df:ad:28:
                    ba:c2:7a:db:8c:58:54:70:cb:02:f5:e1:2c:25:9c:
                    1a:15:1e:79:68:44:fc:8a:a4:e3:ec:79:20:41:97:
                    a3:17:3c:2a:c2:48:a2:8c:43:d2:63:7d:30:4b:1f:
                    b9:3b:7d:f0:5a:d9:b3:07:a7:39:e9:67:32:81:f2:
                    30:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:30:85:84:81:6A:CB:0C:C9:C3:5E:D0:9C:51:D8:BB:4A:A6:CE:24
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.8.0/22
                IPv6:
                  2803:1f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269788

    Signature Algorithm: sha256WithRSAEncryption
         3c:00:58:57:67:89:81:9b:a0:e0:01:79:4b:5d:30:1e:68:9a:
         1b:45:06:b3:33:ee:40:93:cc:06:cd:97:6c:2d:d0:58:2e:71:
         8b:15:84:76:df:00:8f:ef:79:7c:e0:7f:8b:f0:bf:a2:71:81:
         82:8a:dd:c9:59:44:53:52:79:33:6a:93:ec:5c:ab:00:3e:18:
         9d:ac:b1:27:ac:61:cb:53:b3:f7:d9:f3:f1:4f:36:e4:45:25:
         3a:dd:6d:8c:b7:1e:c3:57:8a:1a:e8:9e:57:fb:10:57:ed:b1:
         ba:07:88:7e:d4:c4:45:04:d3:d3:5f:91:80:c9:ab:74:97:1f:
         cc:f0:88:5a:ea:aa:af:2b:6c:64:80:d5:e4:23:a3:54:ca:63:
         d0:e2:f5:22:0d:cc:c8:8c:79:09:f6:eb:8c:77:bd:30:42:f5:
         a8:50:bc:5f:f8:c8:76:d4:da:cd:23:df:44:87:b9:6c:93:59:
         1d:5f:dd:67:59:b5:2f:1e:81:fa:96:57:23:46:66:65:d8:59:
         ab:45:ab:51:20:46:d7:7a:12:3a:29:90:02:b9:c4:1d:58:c9:
         cf:e0:e7:dd:67:56:73:88:71:95:2b:8d:47:f4:eb:a2:f3:c2:
         c4:57:b7:9c:cd:b5:eb:65:39:c4:5f:5c:72:2f:da:ed:07:48:
         1e:c9:b6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----