This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
File:                     CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer (raw, json)
Hash identifier:          1pz/CMR+JxNppJrSfnPaWUucUV5UZcAm4sH1VRnzmoA=
Subject key identifier:   CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       302EBCFE8FAB1E8B374BB718DDD8954F4F2508B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jan 2026 01:41:12 +0000
Certificate not after:    Tue 19 Jan 2027 01:46:12 +0000
Subordinate resources:    AS: 6535
                          AS: 27978
                          IP: 181.72.0.0/14
                          IP: 186.34.0.0 -- 186.36.255.255
                          IP: 190.54.0.0/16
                          IP: 190.208.0.0/15
                          IP: 200.9.151.0/24
                          IP: 200.29.128.0/18
                          IP: 200.31.32.0/19
                          IP: 200.32.160.0/19
                          IP: 2800:3b0::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Jan 2026 02:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2e:bc:fe:8f:ab:1e:8b:37:4b:b7:18:dd:d8:95:4f:4f:25:08:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Jan 20 01:41:12 2026 GMT
            Not After : Jan 19 01:46:12 2027 GMT
        Subject: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:14:90:68:ac:bc:01:97:84:a6:35:49:9a:70:
                    79:88:77:0d:64:bb:86:5c:81:89:3b:9b:d1:7b:1e:
                    1b:af:12:0f:56:14:ff:dd:95:d2:d2:0a:01:0c:43:
                    f8:45:b4:57:df:2b:28:dc:b9:7c:b1:8a:70:b6:e3:
                    13:a4:e0:f5:6f:9f:f1:82:c4:5e:2c:b1:2c:37:a5:
                    9c:4a:03:60:5a:8f:cd:b1:ce:ab:79:25:0b:b0:0b:
                    0d:36:ec:3e:82:16:51:e2:f0:2c:e0:7a:2a:0b:f1:
                    06:7f:7b:86:e6:af:51:af:eb:80:70:ed:dc:44:e7:
                    35:4a:82:7a:e7:53:8c:ea:72:60:a8:86:fb:22:bc:
                    7c:c1:7c:3b:a2:6c:fa:c8:4c:af:c1:71:60:8c:6d:
                    6e:0b:a6:79:12:b4:74:04:7b:fa:25:88:16:bc:72:
                    76:a0:bc:e2:cb:90:15:2b:18:93:5b:0e:67:87:b3:
                    fd:b8:5b:63:51:82:c7:82:05:ab:dc:34:b4:2b:6f:
                    09:81:05:9d:c1:1f:4e:02:2d:03:c5:fb:fd:be:79:
                    40:a9:3d:28:87:ff:57:64:50:94:65:82:2b:4c:fc:
                    77:63:74:7e:62:48:f6:9f:7a:76:e8:9c:d6:54:10:
                    61:a8:d5:f5:a1:64:88:d3:00:c5:a7:49:00:7a:d9:
                    18:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.72.0.0/14
                  186.34.0.0-186.36.255.255
                  190.54.0.0/16
                  190.208.0.0/15
                  200.9.151.0/24
                  200.29.128.0/18
                  200.31.32.0/19
                  200.32.160.0/19
                IPv6:
                  2800:3b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6535
                  27978

    Signature Algorithm: sha256WithRSAEncryption
         95:c7:7f:54:a6:c5:10:e1:fd:87:e5:f6:49:5d:8e:e7:d4:a1:
         7d:c8:9b:53:eb:16:13:50:9c:40:e1:3b:3f:cb:33:ec:46:a4:
         fc:f9:ab:75:d0:81:4d:8d:32:8b:50:e5:66:c2:06:52:47:62:
         e3:ac:19:0c:74:36:b4:70:ab:9a:55:d1:2a:75:29:57:50:65:
         34:8c:fa:38:2b:ea:e9:a2:24:11:c9:07:54:38:14:65:70:5c:
         70:4c:de:f1:4b:6a:66:c2:f9:a8:86:00:79:22:9d:fc:bc:f3:
         4e:14:07:55:be:03:a7:69:6c:4e:f8:13:13:f9:c2:5a:b0:df:
         07:12:58:63:b0:2c:7e:66:3e:6e:5c:35:af:7c:a6:48:02:c3:
         ee:90:ab:d4:b7:41:f3:48:c1:5e:c0:40:bc:df:c4:ba:57:cc:
         ff:6f:ea:c0:0f:76:3f:a3:96:c2:1c:b7:78:93:46:91:0b:4f:
         dd:54:89:c6:be:f8:ad:7f:b3:00:d4:4f:bd:df:ea:bb:01:84:
         fe:55:81:ab:f4:b9:d5:87:cd:a1:f4:4c:d9:b3:5f:a7:4f:10:
         03:2f:d0:06:6a:d9:86:14:7c:f2:ec:7a:1c:63:d9:cc:54:62:
         5e:06:93:ce:da:d4:1f:08:f0:3e:57:75:a5:65:8b:46:24:4f:
         88:1d:28:ed
-----BEGIN CERTIFICATE-----
MIIG1TCCBb2gAwIBAgIUMC68/o+rHos3S7cY3diVT08lCLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNjAxMjAwMTQxMTJaFw0yNzAxMTkwMTQ2MTJaMDMxMTAvBgNV
BAMTKENBQ0FENzBDRjU4QjE3MkU2RDMxOUE4M0Q5N0VFMzdEQjVCNDNFOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfFJBorLwBl4SmNUmacHmIdw1k
u4ZcgYk7m9F7HhuvEg9WFP/dldLSCgEMQ/hFtFffKyjcuXyxinC24xOk4PVvn/GC
xF4ssSw3pZxKA2Baj82xzqt5JQuwCw027D6CFlHi8CzgeioL8QZ/e4bmr1Gv64Bw
7dxE5zVKgnrnU4zqcmCohvsivHzBfDuibPrITK/BcWCMbW4LpnkStHQEe/oliBa8
cnagvOLLkBUrGJNbDmeHs/24W2NRgseCBavcNLQrbwmBBZ3BH04CLQPF+/2+eUCp
PSiH/1dkUJRlgitM/HdjdH5iSPafenbonNZUEGGo1fWhZIjTAMWnSQB62RiBAgMB
AAGjggPfMIID2zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKytcM9YsXLm0x
moPZfuN9tbQ+izAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTcwNzg0MERDRjU5QTgzM0Y1Rjk3MzVB
QkI3REFCOUEzMUJDM0EzNkEzODg3MTlCMjM4RTc5Q0JEMjg1ODY5Qi8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFCQjdEQUI5QTMxQkMzQTM2QTM4
ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgz
RDk3RUUzN0RCNUI0M0U4Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjA5BAIAATAzAwMCtUgwCgMDAboi
AwMAuiQDAwC+NgMDAb7QAwQAyAmXAwQGyB2AAwQFyB8gAwQFyCCgMA0EAgACMAcD
BQAoAAOwMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAhmHAgJtSjANBgkqhkiG9w0B
AQsFAAOCAQEAlcd/VKbFEOH9h+X2SV2O59ShfcibU+sWE1CcQOE7P8sz7Eak/Pmr
ddCBTY0yi1DlZsIGUkdi46wZDHQ2tHCrmlXRKnUpV1BlNIz6OCvq6aIkEckHVDgU
ZXBccEze8UtqZsL5qIYAeSKd/LzzThQHVb4Dp2lsTvgTE/nCWrDfBxJYY7AsfmY+
blw1r3ymSALD7pCr1LdB80jBXsBAvN/EulfM/2/qwA92P6OWwhy3eJNGkQtP3VSJ
xr74rX+zANRPvd/quwGE/lWBq/S51YfNofRM2bNfp08QAy/QBmrZhhR88ux6HGPZ
zFRiXgaTztrUHwjwPld1pWWLRiRPiB0o7Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:22 2026 by rpki-client