This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer
File:                     E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer (raw, json)
Hash identifier:          Zt+HZSq9Kn7nKoou6WH5DEBCrrvpf1K7kxd7di7/8qk=
Subject key identifier:   E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       28D39BBABA15A0374D0EEC2CEC4168CE8294A60A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 09:06:26 +0000
Certificate not after:    Wed 27 Jan 2027 09:11:26 +0000
Subordinate resources:    AS: 271889
                          IP: 190.9.124.0/23
                          IP: 2803:210::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d3:9b:ba:ba:15:a0:37:4d:0e:ec:2c:ec:41:68:ce:82:94:a6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 09:06:26 2026 GMT
            Not After : Jan 27 09:11:26 2027 GMT
        Subject: CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:e8:54:77:b0:c9:e7:57:c5:16:09:fa:2c:
                    3c:d0:ab:ca:31:4b:4b:0d:da:27:e8:7f:88:4c:69:
                    41:3b:1e:4b:55:2f:8c:ff:75:40:d4:64:13:83:f2:
                    4d:62:5b:f7:14:1b:64:db:d4:b3:40:2c:ef:08:30:
                    50:57:11:3a:dc:5f:d3:50:dd:1b:e1:75:44:c3:bb:
                    88:f0:ac:10:6f:66:87:7e:a0:b8:6d:6b:18:64:40:
                    85:fb:bc:4b:d7:9d:ef:de:ed:6b:38:e4:40:f4:30:
                    b7:f9:cb:11:4c:3f:7a:be:10:63:e8:ea:12:11:eb:
                    2a:ef:34:7c:5b:dc:54:f0:18:61:84:3f:30:c7:80:
                    a0:94:1f:5f:cb:c7:b2:d4:c7:df:6b:36:b2:44:0a:
                    88:5b:72:76:87:67:be:37:f2:73:e4:f5:49:ab:92:
                    92:e3:b8:09:c8:6f:db:18:a5:a9:8a:b5:1b:0d:b9:
                    9e:74:e6:54:87:17:b0:d8:ad:06:e8:64:64:b2:55:
                    97:40:a6:62:43:91:48:dc:a8:c7:8c:0c:0e:d4:8c:
                    b2:5e:d8:69:f9:e1:67:88:ab:1b:32:e0:47:29:e7:
                    14:9c:de:bf:fa:6d:7a:f7:a3:21:7b:78:23:0a:5f:
                    3c:81:04:a6:7f:c5:dd:c7:bf:33:7d:ff:69:84:11:
                    6e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.124.0/23
                IPv6:
                  2803:210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271889

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:9b:6e:08:61:9d:99:a3:4f:d9:1e:d8:b2:82:05:11:bc:
         cf:a8:39:0a:32:97:4b:2d:6b:c1:f3:ab:79:dc:2c:5c:24:2a:
         b9:d7:bb:c9:68:b9:7a:99:ec:a1:c0:72:77:76:1b:c4:b5:4f:
         2b:d6:1c:19:0f:4a:1c:9d:5c:27:4f:ce:cc:8d:62:98:d3:1f:
         7e:b7:a5:f1:2b:d5:57:35:c9:35:11:ca:c9:47:9d:17:f1:30:
         60:5e:61:3f:c4:38:26:9c:69:81:33:6a:5a:e6:a1:b2:ce:81:
         5d:4e:55:9b:25:32:5b:b6:35:05:24:5f:5e:79:b3:eb:7d:67:
         06:bc:93:47:f0:42:26:8d:ad:88:bf:77:56:d9:3d:d0:70:9f:
         08:e0:ad:81:d0:cd:f5:48:a6:e0:c4:f9:e8:5c:5c:21:5c:cb:
         5c:45:2a:b7:1f:4d:78:d5:f0:ab:f8:d4:4c:20:1d:55:e3:7b:
         2f:ec:4d:2a:35:c5:e8:37:c7:96:7f:5a:ed:1e:07:e6:d6:da:
         89:db:28:00:8f:b5:35:37:17:da:f5:52:36:f7:4d:8b:7b:f8:
         f7:09:8a:44:8e:3c:1a:0d:a6:e5:08:5c:b8:d6:3d:42:c3:56:
         b8:a6:c9:98:12:8e:3a:9f:ea:d8:bc:7f:b1:5f:e6:73:9c:46:
         c7:ba:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----