This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.cer
File:                     C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.cer (raw, json)
Hash identifier:          NFHiaO59SmgETMzfEugC5Cj223cuoJtF5v6TV+96rmk=
Subject key identifier:   C0:B7:88:66:22:A5:38:FD:5E:3C:3C:91:D6:B6:A0:DF:26:65:C7:8D
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       3685062CC96CE62AA2AD43D77E51AE82F4F57785
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 03:38:37 +0000
Certificate not after:    Wed 27 Jan 2027 03:43:37 +0000
Subordinate resources:    AS: 61511
                          IP: 143.255.156.0/22
                          IP: 2803:2940::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:85:06:2c:c9:6c:e6:2a:a2:ad:43:d7:7e:51:ae:82:f4:f5:77:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 03:38:37 2026 GMT
            Not After : Jan 27 03:43:37 2027 GMT
        Subject: CN=C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:c9:12:75:20:5e:57:e2:c1:39:fb:99:db:
                    4a:9f:f7:b7:c1:cb:0c:b1:d5:fd:58:7c:8a:c4:07:
                    a8:a7:94:90:e9:cf:cf:5f:bb:0a:b4:cb:fc:56:d2:
                    19:9c:56:a2:e2:2c:2c:5c:8b:dc:64:b7:68:45:e6:
                    52:05:a3:60:5e:ed:9e:58:d7:2c:16:2d:4b:4a:8b:
                    89:43:3c:8a:cd:2f:66:d2:c3:11:3e:5a:7b:0a:56:
                    ee:e0:1c:79:04:e8:31:26:55:36:7f:96:15:05:0c:
                    2e:a9:58:35:05:d7:60:a7:0e:62:c6:25:a2:97:92:
                    f1:8b:3a:92:44:09:74:2f:b8:fd:99:83:b4:83:1d:
                    dd:da:1a:b1:2c:c0:4b:93:7a:50:c2:d3:98:94:b0:
                    e9:5d:ee:31:32:7a:7c:10:08:2e:b3:30:9d:4e:ed:
                    07:17:d8:37:3a:2e:7a:03:9a:8f:ed:c1:6a:a8:9d:
                    f4:25:e6:78:e6:92:f0:92:6a:0c:98:18:31:5f:ed:
                    18:cd:e2:e5:11:c9:6b:05:3f:ad:fc:77:4a:b7:90:
                    49:dd:bd:02:cd:9f:5f:a9:97:73:66:1c:64:53:31:
                    ee:f3:86:12:3f:00:57:73:97:e9:96:ff:0c:ae:ac:
                    89:bf:3c:e6:a6:2c:01:f9:88:e6:ac:04:1c:e9:0e:
                    4f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:B7:88:66:22:A5:38:FD:5E:3C:3C:91:D6:B6:A0:DF:26:65:C7:8D
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.156.0/22
                IPv6:
                  2803:2940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61511

    Signature Algorithm: sha256WithRSAEncryption
         30:c0:93:7b:fa:db:30:dd:9a:20:2e:9a:da:6e:ca:6d:7b:4e:
         28:bf:8a:93:b7:93:fc:46:20:0f:d8:9a:ac:82:a8:b7:ca:14:
         5a:ac:4c:55:9f:1c:da:df:32:93:73:f7:5a:9c:64:e6:aa:8b:
         93:3b:9f:5e:e7:79:c6:dc:34:4e:d3:a8:e8:90:3a:dd:63:4c:
         46:d3:05:22:17:83:9d:67:95:69:11:a5:9b:ab:89:cd:03:65:
         6b:3f:45:d9:99:be:e4:f0:24:53:52:ce:33:4b:33:82:62:61:
         e2:71:7a:b2:31:fc:13:52:49:14:91:c5:94:a6:ca:75:74:ed:
         8d:78:79:39:0b:53:9d:9a:e5:72:fa:64:f0:40:78:8f:24:78:
         0f:15:00:eb:f5:08:aa:35:0a:19:a8:ee:e6:52:41:40:8d:81:
         4e:2d:37:f4:ad:1a:9f:7e:e0:f7:20:0e:42:08:4c:68:a1:9d:
         a6:3c:32:5f:f7:d8:ef:b6:1b:ec:89:2b:19:36:d9:e1:a2:cd:
         4b:1e:00:8c:c3:fb:e7:06:e3:5e:a3:ea:a0:16:d0:29:21:1c:
         d0:7b:03:f5:3f:45:9c:cb:ac:b2:8b:d8:d0:3b:9b:be:94:91:
         fa:0e:1d:bc:d6:a8:3d:b5:3c:11:a9:1d:ba:18:c1:83:d7:10:
         6a:1f:6c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----