This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
File:                     70B51DCC347573651055FC72DB19C170524018CC.cer (raw, json)
Hash identifier:          4IJEJkU9IGiQSBJrmHO6eL7EvcfGD9sHlP8xoqy49HQ=
Subject key identifier:   70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       1345A032CE823A6BBB1248C41495721CB581A818
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jan 2026 21:32:19 +0000
Certificate not after:    Tue 26 Jan 2027 21:37:19 +0000
Subordinate resources:    AS: 27896
                          IP: 190.8.32.0/20
                          IP: 2803:a640::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Feb 2026 05:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:45:a0:32:ce:82:3a:6b:bb:12:48:c4:14:95:72:1c:b5:81:a8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 27 21:32:19 2026 GMT
            Not After : Jan 26 21:37:19 2027 GMT
        Subject: CN=70B51DCC347573651055FC72DB19C170524018CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ce:d9:f9:a8:2c:22:2e:4d:35:0e:60:4d:08:
                    18:d3:08:dd:0f:4e:db:77:c4:5c:b8:7c:8e:d6:cc:
                    0d:52:67:53:35:9a:9b:78:de:aa:0c:19:f7:16:a1:
                    ac:3b:e5:f5:c1:ba:38:26:41:72:6b:7f:36:7b:56:
                    51:48:8d:ab:ad:1e:96:46:0d:7e:36:0c:f3:f0:2c:
                    8d:79:12:25:1a:a0:48:57:32:08:8a:57:db:f1:73:
                    2c:f5:b5:0d:4c:6b:6f:74:2e:f3:50:25:3f:51:64:
                    89:7b:d7:73:9e:c5:2d:b5:36:b8:d7:92:02:7f:b3:
                    2b:ce:8a:1d:45:0c:1b:60:2f:c0:fc:87:8c:09:aa:
                    f9:35:2d:20:3f:26:6b:50:9b:ac:91:a2:dd:95:0b:
                    ef:4b:5e:2e:d6:3a:4b:c3:28:31:ef:31:d5:46:46:
                    50:28:44:0e:22:89:84:d2:57:da:3d:8e:07:07:85:
                    b0:15:cb:fa:09:65:cf:c6:f2:52:7b:85:47:e9:af:
                    a8:43:77:ab:f7:65:88:c9:23:f8:9b:2b:df:5a:08:
                    06:dd:ab:80:0f:e0:3d:b7:69:3b:4f:22:51:f7:0b:
                    e2:ce:9a:f6:65:5a:40:48:f5:a5:eb:f7:05:8e:ff:
                    31:fb:04:f6:5d:b2:db:0d:96:9a:86:a9:a6:66:a0:
                    04:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.32.0/20
                IPv6:
                  2803:a640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27896

    Signature Algorithm: sha256WithRSAEncryption
         5c:15:53:57:1c:54:e4:3a:2e:e0:ab:7e:3d:2c:4f:50:b6:fa:
         32:50:c7:cb:8b:ce:f9:99:fb:87:93:9f:ef:73:8a:0e:f9:58:
         fb:ed:de:ec:85:29:47:e8:0d:f8:74:f3:65:10:e2:7f:91:75:
         a7:e0:3b:1f:8f:07:db:06:e0:77:00:a5:f1:ef:91:c9:a3:ec:
         25:79:4f:f6:60:1d:1a:ac:ea:13:45:a2:c7:a3:16:2d:35:de:
         e2:ba:1e:86:44:ae:a4:c3:b8:90:1c:3b:31:14:d9:a8:c3:4f:
         0a:dc:3f:ab:c7:fe:9a:69:39:5d:aa:64:66:7a:da:d0:6d:94:
         ce:74:22:10:39:cb:01:a2:ea:c3:7c:89:0c:6f:2d:75:33:e6:
         ce:e6:ad:82:30:56:6c:47:c1:21:0a:20:4d:f3:da:99:ed:04:
         1e:81:e9:eb:d2:1c:a0:6d:1b:d8:aa:eb:14:6f:90:ee:34:9b:
         f9:42:7b:e3:43:ca:88:ba:fc:42:6e:b2:a0:4d:18:27:67:77:
         db:86:64:71:ac:99:d8:57:9f:20:fc:6b:90:af:1d:a1:56:1f:
         d2:88:47:a1:0a:39:e1:76:57:8a:7c:2b:98:3a:af:bf:23:37:
         0e:42:aa:0f:4e:55:12:ac:5c:29:52:c0:c3:47:12:5c:7d:e2:
         d9:ad:20:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----