This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.cer
File:                     C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.cer (raw, json)
Hash identifier:          NDaU+opjZLkw6JnEqJjUb4G0ac5cOrWVuFa87+mhx3g=
Subject key identifier:   C2:1D:15:8E:62:5A:33:F6:2F:03:97:A5:B8:D7:D6:89:EE:2F:C4:B6
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       3C8C490F02A1517B8E8C482F1956E3D17C5FDA55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Manifest:                 rsync://rpki.sunoaki.net/repo/net186/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.mft
caRepository:             rsync://rpki.sunoaki.net/repo/net186/0/
Notify URL:               https://rpki.sunoaki.net/rrdp/notification.xml
Certificate not before:   Wed 03 Dec 2025 11:19:24 +0000
Certificate not after:    Wed 02 Dec 2026 11:24:24 +0000
Subordinate resources:    IP: 2602:2a3::/40
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 12:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8c:49:0f:02:a1:51:7b:8e:8c:48:2f:19:56:e3:d1:7c:5f:da:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec  3 11:19:24 2025 GMT
            Not After : Dec  2 11:24:24 2026 GMT
        Subject: CN=C21D158E625A33F62F0397A5B8D7D689EE2FC4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3a:06:23:74:88:ab:22:d7:b7:3e:98:79:19:
                    a1:cf:3b:6d:30:7c:7e:8b:82:23:10:ef:60:75:a5:
                    3e:8b:92:74:89:ff:3b:a9:bf:29:7b:26:8c:87:75:
                    bb:e0:d5:8c:7d:30:5d:67:1f:81:8a:73:2d:ce:2e:
                    91:10:e3:0d:4c:4d:68:89:a5:3f:e9:00:3b:9a:a7:
                    54:73:12:96:7d:5f:80:85:76:54:2a:ef:90:2c:61:
                    32:11:4e:2a:4b:9c:bd:95:89:75:f0:03:7f:fd:c1:
                    d2:cf:e9:0d:1e:0a:8d:0a:00:9b:8f:55:6d:1e:01:
                    fb:f1:65:58:b5:f6:ef:97:2f:04:4f:66:eb:39:ad:
                    ec:5a:0d:cf:4a:5f:b1:f3:67:e8:0e:39:36:d7:1e:
                    b0:e3:53:e0:a1:72:b7:ee:37:f1:e6:86:cf:78:7f:
                    94:24:70:9f:6b:ea:5d:87:68:2d:5b:0e:42:09:1b:
                    ca:b2:a4:a4:41:93:af:57:5e:e2:1c:dd:72:df:f5:
                    ae:e0:f4:1a:da:87:d9:92:97:1f:90:07:9c:2d:44:
                    a5:0c:d2:08:b7:6e:64:c0:76:65:07:32:8b:31:91:
                    35:cf:7a:84:17:5a:5c:4a:4b:0b:77:03:ec:2b:90:
                    57:f5:49:a5:c6:bb:bb:de:fa:77:a8:df:47:74:4b:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:1D:15:8E:62:5A:33:F6:2F:03:97:A5:B8:D7:D6:89:EE:2F:C4:B6
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sunoaki.net/repo/net186/0/
                RPKI Manifest - URI:rsync://rpki.sunoaki.net/repo/net186/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.mft
                RPKI Notify - URI:https://rpki.sunoaki.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:ed:eb:f8:6c:ec:91:de:61:c3:b1:fd:5b:30:99:89:71:7d:
         15:55:be:10:15:af:b8:28:ce:64:a0:7b:6a:a0:94:1d:04:14:
         c2:77:74:5e:d0:4c:81:14:36:3a:58:7b:f0:bc:7f:7b:d4:08:
         ee:3d:d7:60:07:b1:7f:d0:5e:be:88:2f:e0:48:6b:91:a7:60:
         ad:bd:68:e6:93:ce:e9:7a:c8:40:7b:c7:50:55:35:68:17:b3:
         3f:27:26:03:5c:c3:0c:af:ff:a5:f1:65:52:90:9e:c0:da:ad:
         6e:c0:36:cc:fa:96:0d:e4:1a:59:c6:f2:32:db:fe:c3:a5:9d:
         f0:13:ad:99:a3:00:f5:f8:6f:ee:1b:9a:d0:3f:82:d9:35:74:
         c6:23:01:8b:2b:fb:c4:01:9f:25:e4:07:c2:cb:de:1c:11:00:
         e1:de:e1:a1:47:80:0a:81:6f:ad:7d:e8:0b:1e:6f:8e:bc:37:
         07:07:0f:61:8e:cc:02:38:07:01:b1:d8:01:9c:31:b0:ee:c3:
         49:f1:90:50:23:1f:cb:21:3a:07:99:9c:ad:83:bd:5f:0a:be:
         6a:93:85:a8:fa:22:4e:67:d1:72:c3:88:d7:1b:e6:da:6b:4e:
         2f:19:7e:28:4b:f2:09:7d:0b:fc:b5:e2:d4:d5:b4:25:5e:73:
         ac:ec:b7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 20:20:29 2025 by rpki-client