This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer
File:                     9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer (raw, json)
Hash identifier:          OJjSy8wr6x1j3FVbJyPKQ847UoREzpjdyAnhMODPrcY=
Subject key identifier:   9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       036077F8A0B9B7643AB972FA859BF1CAC8913AC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jan 2026 03:39:10 +0000
Certificate not after:    Wed 20 Jan 2027 03:44:10 +0000
Subordinate resources:    AS: 264685
                          IP: 168.227.96.0/22
                          IP: 2803:340::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Jan 2026 02:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:60:77:f8:a0:b9:b7:64:3a:b9:72:fa:85:9b:f1:ca:c8:91:3a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Jan 21 03:39:10 2026 GMT
            Not After : Jan 20 03:44:10 2027 GMT
        Subject: CN=9E957DE90D33B8FE187AF8743E44EAE92B9B7504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:2c:32:b7:e7:6b:62:f0:0d:82:d6:c7:cd:
                    78:2d:81:76:2d:0d:ff:9e:87:f3:19:5b:30:9c:ee:
                    9c:08:5d:7c:71:f5:5c:26:a0:d3:cb:84:d7:35:63:
                    2f:dc:f1:7c:ce:99:5f:a7:d3:39:f5:8e:61:a5:4d:
                    7b:c9:73:e1:98:e6:6d:63:a8:3b:7d:da:00:a3:58:
                    fd:16:6d:02:da:4b:62:69:a1:e6:5d:6d:f8:47:64:
                    e1:b8:8f:de:16:6d:cd:a6:48:ff:eb:9b:76:43:db:
                    c9:fe:80:27:c9:0a:b8:88:2d:e1:71:9a:92:61:fd:
                    4b:72:40:f4:02:d3:25:6a:4a:d9:d1:a8:8f:c6:0a:
                    9d:4d:e7:6e:a5:fd:7f:db:a5:c5:90:1a:e9:5e:a0:
                    39:1e:d0:68:bb:32:d8:9d:dc:e0:2a:19:ab:fc:66:
                    60:6f:60:92:c6:8c:3d:f1:a6:14:2d:db:97:8a:0d:
                    ee:ef:b2:70:db:27:e5:02:e8:7a:97:7d:ee:13:42:
                    de:e5:22:36:7a:d4:5e:57:f5:9a:e3:d3:d5:01:ef:
                    f2:b8:61:12:cd:6f:49:b8:05:5e:51:3f:86:5a:0b:
                    e9:79:ca:a3:06:e8:af:de:e9:a8:72:71:58:b8:4c:
                    62:65:49:52:87:94:95:fb:be:03:69:3d:18:5c:36:
                    dc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.96.0/22
                IPv6:
                  2803:340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264685

    Signature Algorithm: sha256WithRSAEncryption
         23:db:86:11:bf:fd:a4:51:a7:61:d7:28:67:c6:22:73:9f:1c:
         91:d3:69:ad:c2:8c:0b:44:87:62:21:70:42:8c:e2:ab:42:03:
         33:86:66:4c:06:86:5c:4d:ca:a4:d3:17:52:dd:01:9e:dc:6c:
         e8:53:5d:e0:b8:66:83:32:e0:25:be:be:5e:d7:d4:30:5a:cb:
         45:9d:d4:1b:55:e2:32:e5:4c:e1:37:48:e3:6f:e5:c6:3d:4d:
         61:26:04:b7:9f:58:61:37:ba:d9:47:12:15:73:99:18:43:74:
         31:57:a5:e2:16:a7:22:ea:5a:cd:95:99:11:fa:67:d1:d4:1f:
         57:90:8c:16:2d:ab:d1:07:2b:be:67:bd:a8:ed:79:ba:c2:e0:
         c9:66:ad:64:ee:49:54:85:e2:e6:61:aa:d5:10:76:36:67:a6:
         5d:bc:18:08:ef:d7:0a:30:04:b1:02:b2:ce:09:e5:2b:3d:03:
         a1:c4:45:f4:c5:1e:e9:22:a9:87:1a:9b:82:e5:d3:16:37:0a:
         57:5a:29:66:39:54:01:ff:21:fd:7b:e1:b2:55:45:34:af:60:
         eb:57:bb:54:8f:eb:ee:93:c5:f1:7b:4a:2e:0f:b4:e0:13:b4:
         c2:96:b6:3e:e7:18:9b:86:5f:41:a3:cf:1e:69:fd:b6:93:e5:
         88:7d:27:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----