This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA0A02ED533F7158CC574F97ADF00A76C058CD8E.cer
File:                     EA0A02ED533F7158CC574F97ADF00A76C058CD8E.cer (raw, json)
Hash identifier:          BbdaY2O+3UbkjbfIFxaJPIF4FWL+xG47s1AmIMllFxI=
Subject key identifier:   EA:0A:02:ED:53:3F:71:58:CC:57:4F:97:AD:F0:0A:76:C0:58:CD:8E
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       11868E09F478D0ECFB1EB79BDFA8804BCC0DB991
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/62805937801BD6939448889EC064A2D6FBC57233B2E595939FC8435B957B36B9/0/EA0A02ED533F7158CC574F97ADF00A76C058CD8E.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/62805937801BD6939448889EC064A2D6FBC57233B2E595939FC8435B957B36B9/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jan 2026 12:54:36 +0000
Certificate not after:    Tue 19 Jan 2027 12:59:36 +0000
Subordinate resources:    AS: 263698
                          IP: 191.102.36.0/22
                          IP: 2803:aa80::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:86:8e:09:f4:78:d0:ec:fb:1e:b7:9b:df:a8:80:4b:cc:0d:b9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Jan 20 12:54:36 2026 GMT
            Not After : Jan 19 12:59:36 2027 GMT
        Subject: CN=EA0A02ED533F7158CC574F97ADF00A76C058CD8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:8b:ce:a6:7b:9f:06:49:d2:93:fe:2b:78:
                    bb:b1:0e:50:72:fe:88:d6:80:53:85:9c:20:34:8a:
                    bb:4c:32:6c:99:13:53:ff:2c:a7:9b:aa:be:44:36:
                    36:7a:52:e8:51:5a:00:0c:2a:36:af:4f:eb:0a:26:
                    0e:ad:82:11:75:07:17:ed:c1:d5:70:43:5d:8d:5c:
                    4a:ce:94:22:50:44:f6:2c:33:af:0e:46:7d:00:78:
                    77:f6:26:88:e8:0b:19:ac:4b:cc:a0:48:0e:b0:3b:
                    3e:12:d2:9f:9b:9c:40:cd:59:9a:2b:2e:82:83:15:
                    8b:d6:c5:c7:17:c0:e4:8f:ae:88:9c:69:a0:fb:6c:
                    78:66:61:bf:ea:2b:07:fd:0c:36:75:99:9b:49:55:
                    5b:5a:87:98:81:1d:7f:04:73:24:ee:bc:c8:ee:c7:
                    28:d2:9d:58:1c:31:a4:15:89:f5:8b:ef:f2:4d:ea:
                    15:cd:e8:ee:85:a7:6f:9d:ff:11:91:c3:48:2e:59:
                    a4:9a:c8:cf:23:f6:74:df:02:fe:65:f4:78:b2:5e:
                    e8:da:72:f1:53:ef:00:fe:ce:4c:c1:7a:66:8e:dd:
                    6c:6f:dd:0c:8a:76:77:64:23:22:71:2d:26:2a:43:
                    4f:30:e5:87:3e:e8:9e:c6:c9:6d:89:16:cd:51:e6:
                    a1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:0A:02:ED:53:3F:71:58:CC:57:4F:97:AD:F0:0A:76:C0:58:CD:8E
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/62805937801BD6939448889EC064A2D6FBC57233B2E595939FC8435B957B36B9/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/62805937801BD6939448889EC064A2D6FBC57233B2E595939FC8435B957B36B9/0/EA0A02ED533F7158CC574F97ADF00A76C058CD8E.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.36.0/22
                IPv6:
                  2803:aa80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263698

    Signature Algorithm: sha256WithRSAEncryption
         3e:2e:c4:c6:e0:6c:72:ca:30:4e:29:ce:31:38:0c:85:ac:70:
         46:9a:90:9f:f1:ca:8e:46:98:51:89:e3:23:21:d0:78:cf:4c:
         1a:94:9a:90:6b:08:be:00:d2:9d:af:69:71:47:34:48:d1:7d:
         c2:ef:41:9c:6f:f9:45:61:a2:a8:22:e6:aa:e0:5d:3a:d6:8d:
         90:fd:68:3a:64:3d:9b:29:a4:b9:d4:e1:04:b2:66:46:c6:81:
         1c:df:89:87:e4:a0:59:e5:34:ea:77:15:60:ad:77:f5:56:f9:
         25:00:52:3f:8c:2d:3d:f6:58:ab:6a:38:d4:d7:58:da:1c:4d:
         31:2c:4d:98:fc:3b:cc:c0:53:dc:5d:e4:0e:36:73:39:4a:2e:
         9f:e4:18:6c:86:ce:66:aa:a5:1f:48:3e:cd:65:01:9b:a8:55:
         43:73:67:22:a0:a9:aa:ba:ba:33:8f:c7:9b:ab:b6:9d:43:e4:
         e6:96:d0:6c:1c:e0:65:72:fe:6c:51:b9:b1:e1:67:35:4f:85:
         51:27:f5:4d:7d:2e:6e:88:71:f5:42:d5:b3:53:fc:fd:2f:41:
         61:6a:7e:b7:f7:35:dc:e9:f6:99:76:21:5a:93:f5:dd:b9:01:
         09:91:9a:48:87:20:58:95:44:93:33:35:c7:75:93:aa:6e:75:
         21:95:9b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:45:06 2026 by rpki-client