This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.cer
File:                     08FB62A084CE347FB5CEE83696FE4D3837F1E456.cer (raw, json)
Hash identifier:          piizvBsb3es2y7R7YbIgoLh2I2/PspJIplYaF5jJYHo=
Subject key identifier:   08:FB:62:A0:84:CE:34:7F:B5:CE:E8:36:96:FE:4D:38:37:F1:E4:56
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       382A38904F04AAFCEBD3E305BA78EDD1106C82B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 08 Jan 2026 00:52:00 +0000
Certificate not after:    Thu 07 Jan 2027 00:57:00 +0000
Subordinate resources:    AS: 264629
                          IP: 143.202.32.0/22
                          IP: 2803:6140::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2a:38:90:4f:04:aa:fc:eb:d3:e3:05:ba:78:ed:d1:10:6c:82:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Jan  8 00:52:00 2026 GMT
            Not After : Jan  7 00:57:00 2027 GMT
        Subject: CN=08FB62A084CE347FB5CEE83696FE4D3837F1E456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:f1:c8:be:a7:91:60:d2:3e:f2:39:6e:36:
                    d5:80:02:b3:85:18:ce:6e:23:72:54:1a:f7:f9:63:
                    95:8e:8f:b5:35:dc:9f:b4:4a:a0:83:a3:f0:03:a0:
                    38:de:16:67:f9:31:89:7a:3c:8e:cc:95:08:41:02:
                    8e:e3:47:97:2c:e1:5b:fd:bc:42:95:aa:82:54:13:
                    2c:40:ff:6f:2c:6e:5b:b9:a8:fd:81:99:65:d8:2a:
                    f6:ef:f8:65:cd:fb:2d:4b:b7:10:ab:9c:f1:19:55:
                    b3:5a:e0:36:52:b5:7c:19:45:be:01:14:f3:3d:08:
                    db:a0:f1:cc:6f:9a:9e:c7:6b:cb:bf:a2:7d:83:66:
                    52:9d:c0:58:53:a1:96:26:d1:33:d1:3e:e8:6d:de:
                    bd:43:00:21:81:ef:0b:e5:c8:a0:16:96:47:4e:6d:
                    55:9f:1d:96:f7:83:b0:a9:2a:43:ca:62:62:ae:ae:
                    4a:fe:b7:f1:a3:87:50:81:a0:7e:26:b5:d1:61:01:
                    c0:75:4e:80:f0:fd:9e:21:65:97:c5:32:e9:78:08:
                    71:b9:cd:a2:1c:b6:85:8e:2e:8b:0a:b3:a1:11:4f:
                    24:a2:61:d2:a7:b9:50:72:0a:17:73:cf:aa:85:94:
                    5f:aa:25:62:6a:0f:1f:c2:ea:59:79:31:09:9e:74:
                    af:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:FB:62:A0:84:CE:34:7F:B5:CE:E8:36:96:FE:4D:38:37:F1:E4:56
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.32.0/22
                IPv6:
                  2803:6140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264629

    Signature Algorithm: sha256WithRSAEncryption
         12:af:70:5a:77:a6:24:54:87:08:ae:c7:f9:7e:59:fd:06:c8:
         06:6d:6d:86:a2:57:25:0e:75:12:da:7e:fd:4d:da:ea:df:80:
         a6:df:e4:1c:b0:39:9e:f8:04:54:9e:93:44:00:b2:67:ce:69:
         43:b4:aa:0d:a4:e9:35:93:6f:9a:0a:f9:f2:38:34:89:a2:a8:
         41:e6:58:c6:23:f4:28:88:fd:cd:3b:c3:f8:ea:ad:5c:05:d8:
         45:03:20:92:39:92:47:1f:98:3e:4e:58:cf:6c:ba:35:87:b4:
         b1:4b:99:52:52:7f:1a:d1:64:69:73:a4:64:ba:6d:b8:db:61:
         86:17:7d:05:78:aa:da:0c:1e:d4:e9:b8:88:44:d2:af:4b:ca:
         36:77:9d:fa:ce:09:11:29:5f:80:20:db:dd:21:ac:03:a2:9a:
         53:28:58:32:6d:26:5e:36:77:bf:cf:36:68:fa:76:d3:a0:58:
         46:89:01:b9:18:cf:72:13:5b:57:21:5d:ac:f6:c3:d4:cb:a1:
         9f:b6:68:9a:d9:2f:9b:47:9b:59:b0:37:13:56:d5:ea:6b:29:
         95:1a:86:ed:17:d3:c3:ae:ba:d6:16:5d:78:99:d9:7b:3d:13:
         de:9a:93:a3:54:55:74:67:a7:1d:bc:2b:67:bb:3b:81:55:d4:
         ef:2a:cb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 04:52:58 2026 by rpki-client