This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.cer
File:                     EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.cer (raw, json)
Hash identifier:          H9NhC2KGl9RcK06irX6TsO0Yc2QV2p8gzJ0c44HCjaE=
Subject key identifier:   EB:0B:D3:8A:BA:B8:0D:F9:29:0F:B7:41:AF:AC:C6:31:74:0F:A7:E9
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       0CA8C4421E348463D86477DB57A6AB143FCC15F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 16:15:55 +0000
Certificate not after:    Wed 27 Jan 2027 16:20:55 +0000
Subordinate resources:    AS: 28431
                          IP: 2806:32d::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a8:c4:42:1e:34:84:63:d8:64:77:db:57:a6:ab:14:3f:cc:15:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 16:15:55 2026 GMT
            Not After : Jan 27 16:20:55 2027 GMT
        Subject: CN=EB0BD38ABAB80DF9290FB741AFACC631740FA7E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:c5:85:ab:04:cb:7f:11:c3:30:c0:40:2d:
                    f7:05:33:b4:5c:40:b9:bb:e1:fb:c6:6a:de:39:01:
                    22:38:4e:85:b9:bb:7f:59:22:9f:2e:76:c3:22:de:
                    ad:88:7e:e1:f2:6d:84:2f:0b:4c:81:8e:a6:95:74:
                    ab:6f:19:ca:f0:07:bf:3f:3c:05:5e:fd:5e:86:a4:
                    70:9e:97:e4:36:84:5d:49:50:e1:eb:70:f9:ea:c6:
                    b7:f6:ce:92:48:95:ac:d8:39:dc:28:13:67:d2:8e:
                    7f:fe:b8:af:a4:2e:74:c3:0a:00:b9:43:49:aa:87:
                    ac:14:90:0e:c8:9a:63:61:e1:75:ab:30:11:44:1d:
                    9e:0c:84:f5:0a:77:a0:02:6c:72:c9:0f:7e:b1:3c:
                    c9:58:7b:53:d2:08:fd:4c:07:cc:90:b3:07:d2:6f:
                    ee:a4:0c:0b:f4:cb:87:e1:c8:d3:69:f5:60:a9:bc:
                    ba:87:ee:df:4a:c4:57:95:45:97:36:0d:d2:2b:f1:
                    7e:27:96:09:5e:ab:7c:f7:a0:52:b8:81:b5:04:11:
                    45:6c:8b:a0:a5:34:ae:8e:a9:c8:68:08:b2:01:7a:
                    57:85:99:17:70:54:56:f5:c7:55:eb:b6:94:17:3f:
                    86:2f:05:2a:b4:ef:0e:aa:60:40:29:29:aa:d8:81:
                    40:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:0B:D3:8A:BA:B8:0D:F9:29:0F:B7:41:AF:AC:C6:31:74:0F:A7:E9
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32d::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28431

    Signature Algorithm: sha256WithRSAEncryption
         17:49:6c:fa:ec:09:29:49:10:c2:f1:11:72:db:fb:0b:ab:ac:
         fc:0e:3c:21:ce:8b:6e:56:40:2e:19:d8:2f:5b:3a:c4:b6:79:
         da:31:09:37:57:31:94:b7:d3:ee:92:25:7c:ee:d5:e8:bc:81:
         ee:95:c8:2a:0a:4b:98:41:a3:87:62:bb:ce:d2:a4:da:75:01:
         ee:8f:5c:cd:99:e5:c0:dc:1b:45:46:4c:6e:12:42:0f:f4:32:
         92:9a:40:e6:09:d8:d0:ea:df:6d:f2:aa:11:5a:f6:bd:85:a3:
         59:c1:d8:b5:59:b2:6c:6f:f1:b1:34:d2:36:0e:0b:7d:ff:b1:
         03:46:51:9a:10:0b:1d:43:96:a9:0d:9a:90:97:06:40:8c:7d:
         3a:f4:47:99:84:8d:f6:cd:a4:1d:51:e4:48:1d:6e:ce:43:91:
         2c:99:d2:12:1a:73:9d:de:40:fb:b8:93:c1:42:2d:0e:8f:86:
         13:6a:b0:cb:d5:34:c7:b9:9b:f7:e0:9f:8a:ba:0b:22:f8:dc:
         21:a3:bc:2d:04:17:30:df:1f:ef:71:a3:85:ab:68:aa:2b:6a:
         8a:8e:de:10:7e:0f:ee:e6:e9:fd:2c:97:4d:23:0e:98:be:d1:
         c2:75:bd:fc:c1:97:cd:1d:32:0e:a5:96:b9:19:d1:70:11:5c:
         73:3c:01:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----