This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.cer
File:                     C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.cer (raw, json)
Hash identifier:          enPLMrvhHbqgGzqMfUbPR/IuGI0NXfo1JT90LyHgyEo=
Subject key identifier:   C2:1D:15:8E:62:5A:33:F6:2F:03:97:A5:B8:D7:D6:89:EE:2F:C4:B6
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       734F5FA8F3B1ABDB553C07177F03E82DB34C332F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Manifest:                 rsync://rpki.sunoaki.net/repo/net186/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.mft
caRepository:             rsync://rpki.sunoaki.net/repo/net186/0/
Notify URL:               https://rpki.sunoaki.net/rrdp/notification.xml
Certificate not before:   Tue 30 Dec 2025 08:08:35 +0000
Certificate not after:    Tue 29 Dec 2026 08:13:35 +0000
Subordinate resources:    IP: 2602:2a3::/40
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Jan 2026 01:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4f:5f:a8:f3:b1:ab:db:55:3c:07:17:7f:03:e8:2d:b3:4c:33:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 30 08:08:35 2025 GMT
            Not After : Dec 29 08:13:35 2026 GMT
        Subject: CN=C21D158E625A33F62F0397A5B8D7D689EE2FC4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3a:06:23:74:88:ab:22:d7:b7:3e:98:79:19:
                    a1:cf:3b:6d:30:7c:7e:8b:82:23:10:ef:60:75:a5:
                    3e:8b:92:74:89:ff:3b:a9:bf:29:7b:26:8c:87:75:
                    bb:e0:d5:8c:7d:30:5d:67:1f:81:8a:73:2d:ce:2e:
                    91:10:e3:0d:4c:4d:68:89:a5:3f:e9:00:3b:9a:a7:
                    54:73:12:96:7d:5f:80:85:76:54:2a:ef:90:2c:61:
                    32:11:4e:2a:4b:9c:bd:95:89:75:f0:03:7f:fd:c1:
                    d2:cf:e9:0d:1e:0a:8d:0a:00:9b:8f:55:6d:1e:01:
                    fb:f1:65:58:b5:f6:ef:97:2f:04:4f:66:eb:39:ad:
                    ec:5a:0d:cf:4a:5f:b1:f3:67:e8:0e:39:36:d7:1e:
                    b0:e3:53:e0:a1:72:b7:ee:37:f1:e6:86:cf:78:7f:
                    94:24:70:9f:6b:ea:5d:87:68:2d:5b:0e:42:09:1b:
                    ca:b2:a4:a4:41:93:af:57:5e:e2:1c:dd:72:df:f5:
                    ae:e0:f4:1a:da:87:d9:92:97:1f:90:07:9c:2d:44:
                    a5:0c:d2:08:b7:6e:64:c0:76:65:07:32:8b:31:91:
                    35:cf:7a:84:17:5a:5c:4a:4b:0b:77:03:ec:2b:90:
                    57:f5:49:a5:c6:bb:bb:de:fa:77:a8:df:47:74:4b:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:1D:15:8E:62:5A:33:F6:2F:03:97:A5:B8:D7:D6:89:EE:2F:C4:B6
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sunoaki.net/repo/net186/0/
                RPKI Manifest - URI:rsync://rpki.sunoaki.net/repo/net186/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.mft
                RPKI Notify - URI:https://rpki.sunoaki.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:b8:7e:4a:b4:44:0f:52:02:60:44:0e:3b:0a:cf:6a:80:23:
         fb:5d:9f:30:bb:c4:90:99:70:e0:4e:1d:0f:52:95:a4:e7:b0:
         40:67:6b:00:76:6f:e6:45:bf:ad:ce:4b:98:c7:a3:12:5f:c9:
         b6:d1:30:84:86:97:74:3a:df:d1:48:cf:3c:a2:2d:7f:aa:bc:
         5f:99:a1:7a:4c:6d:89:94:91:20:a9:53:19:d7:f1:cf:ad:77:
         55:38:c4:04:c4:5f:c0:42:bc:3e:cb:83:f5:63:63:70:eb:4d:
         0e:24:0c:af:e3:07:3e:19:86:48:75:4f:7b:b7:d4:85:cb:54:
         4a:8f:12:61:01:98:fb:a7:f0:67:d3:54:8f:ad:8c:50:bc:6f:
         95:6f:bb:16:b9:6b:0c:66:d0:e9:c0:93:56:41:1d:28:f1:04:
         4a:e9:78:81:98:bd:86:38:1e:7b:8e:75:a2:f4:4c:8f:62:9e:
         77:14:ad:b0:7a:09:1c:c7:83:d0:41:0d:5b:7d:7d:12:37:35:
         e6:ca:4b:11:05:80:8b:b8:7a:e4:ac:5f:0f:f3:69:33:6d:38:
         be:0b:8b:d3:88:4e:55:d2:d7:5a:5e:49:ec:1f:63:fd:25:20:
         14:a5:a2:63:62:06:cb:7d:54:f0:2b:51:f6:1e:47:fb:99:03:
         61:8a:25:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 09:07:58 2025 by rpki-client