This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AE320A4DE21615CC1ABBF64113CDEFC2D255CA.cer
File:                     15AE320A4DE21615CC1ABBF64113CDEFC2D255CA.cer (raw, json)
Hash identifier:          ya/B2tc4g8zE/q634qdji27fc5Vh4jeQOVKZvpkN8DE=
Subject key identifier:   15:AE:32:0A:4D:E2:16:15:CC:1A:BB:F6:41:13:CD:EF:C2:D2:55:CA
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       3ADC0AE1F2072D18A3726665F7CD3B090B1DEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/15AE320A4DE21615CC1ABBF64113CDEFC2D255CA.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 12 Jan 2026 11:37:03 +0000
Certificate not after:    Mon 11 Jan 2027 11:42:03 +0000
Subordinate resources:    AS: 271898
                          IP: 200.39.60.0/22
                          IP: 2803:4210::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:dc:0a:e1:f2:07:2d:18:a3:72:66:65:f7:cd:3b:09:0b:1d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Jan 12 11:37:03 2026 GMT
            Not After : Jan 11 11:42:03 2027 GMT
        Subject: CN=15AE320A4DE21615CC1ABBF64113CDEFC2D255CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:19:32:47:58:ab:a2:83:09:52:80:bf:12:
                    dd:86:1a:05:59:f2:47:3b:bc:25:bd:f6:68:03:1e:
                    2b:b5:4f:bf:25:ac:52:43:d6:b0:3d:66:30:0b:54:
                    ba:4b:31:d4:44:7e:86:45:90:f1:97:2d:f0:ef:f3:
                    96:a9:91:f3:62:f2:bd:fb:e2:12:5f:d9:cb:52:0b:
                    e5:1e:5d:cc:05:ef:a0:78:e2:0a:dd:8a:be:b0:c3:
                    d6:6c:06:cb:ad:12:99:48:c8:d4:91:2a:54:cd:f9:
                    26:70:cd:3a:fb:82:9f:72:bd:d1:4c:78:80:4b:dd:
                    e7:c3:9e:7e:9f:86:77:f6:c0:b8:37:6e:11:7b:6e:
                    bf:6d:0d:2f:ac:ef:07:ae:ec:36:bc:72:b3:17:41:
                    9c:d5:e6:e2:74:16:75:c6:45:26:f5:b0:e9:b4:ff:
                    e8:c7:13:aa:87:8e:13:5a:cc:b8:b9:ed:07:43:65:
                    07:ec:21:fa:ed:51:02:e1:a9:b6:09:25:6b:c2:d4:
                    62:07:f2:41:65:83:d4:1e:83:2f:6d:bc:12:21:7c:
                    f4:89:e7:a2:b4:74:0b:32:d9:4d:b1:0f:92:3e:d4:
                    56:15:ca:7f:25:8a:54:1d:55:92:f1:e3:43:fa:9f:
                    3c:f9:2f:6a:86:c5:4a:31:fc:39:b8:60:cf:c6:8f:
                    ab:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:AE:32:0A:4D:E2:16:15:CC:1A:BB:F6:41:13:CD:EF:C2:D2:55:CA
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/15AE320A4DE21615CC1ABBF64113CDEFC2D255CA.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.60.0/22
                IPv6:
                  2803:4210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271898

    Signature Algorithm: sha256WithRSAEncryption
         68:5f:c2:94:ee:c0:df:89:de:ba:b0:9b:d9:fa:76:c5:ea:52:
         e4:1e:ab:1a:71:7f:68:4c:f3:7d:7f:5a:85:6f:26:a1:02:a9:
         d7:73:13:a5:8b:a1:76:2d:19:d1:4a:78:e8:74:47:67:4e:ab:
         6c:ef:94:83:53:03:0c:f0:f4:a7:bd:ad:06:1d:fa:19:d8:00:
         84:d2:be:b3:db:24:b1:bd:9a:32:f1:b5:d0:18:37:22:0c:e6:
         bd:3b:b2:4f:42:5e:b7:f6:fa:fe:b2:50:f0:d1:61:70:c7:13:
         f6:52:f0:26:72:4c:e4:fa:72:84:a5:b5:c6:5b:86:64:24:67:
         00:80:93:49:23:1d:b2:6e:62:87:1a:2a:30:e6:6e:ed:ac:af:
         22:67:dc:e5:72:90:f5:fe:d8:90:73:d0:2b:6b:f4:0c:f8:5a:
         52:7e:8b:51:c9:99:01:96:d7:9b:35:f8:12:f9:fc:b1:f2:f0:
         14:66:2c:9a:ab:2e:07:4a:3d:ad:27:a0:fc:03:f0:6b:eb:fc:
         18:ac:b6:49:24:9c:67:9c:8c:8b:ee:fe:b7:ee:44:3c:a9:7e:
         aa:84:af:ed:1f:3f:c6:e0:bb:b7:e3:50:17:89:2e:9e:31:60:
         b5:95:04:b4:d7:90:b4:de:66:8e:95:71:31:8e:df:9b:b9:39:
         89:d2:9a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:04:12 2026 by rpki-client