This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.pudu.be/repo/pudu/0/326130363a613334303a3a2f32392d3438203d3e203437363839.roa
File:                     326130363a613334303a3a2f32392d3438203d3e203437363839.roa (raw, json)
Hash identifier:          8A3UKBYF+P1SH/sgqCQQJ3qmwMU8rgcWUyMbw+hRMAs=
Subject key identifier:   0C:28:76:28:F6:C0:6C:7F:3F:52:00:86:C0:B6:95:AF:B3:2C:5D:64
Certificate issuer:       /CN=73a83c810157e3e8511eebe39cfcad16fa329700
Certificate serial:       35FCECAB5ABB6DC1084EE41F0C084CDD54B64D84
Authority key identifier: 73:A8:3C:81:01:57:E3:E8:51:1E:EB:E3:9C:FC:AD:16:FA:32:97:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6g8gQFX4-hRHuvjnPytFvoylwA.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/0/326130363a613334303a3a2f32392d3438203d3e203437363839.roa
Signing time:             Thu 18 Dec 2025 20:24:34 +0000
ROA not before:           Thu 18 Dec 2025 20:19:34 +0000
ROA not after:            Thu 17 Dec 2026 20:24:34 +0000
asID:                     47689
IP address blocks:        2a06:a340::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/0/73A83C810157E3E8511EEBE39CFCAD16FA329700.crl
                          rsync://rpki.pudu.be/repo/pudu/0/73A83C810157E3E8511EEBE39CFCAD16FA329700.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6g8gQFX4-hRHuvjnPytFvoylwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 14:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fc:ec:ab:5a:bb:6d:c1:08:4e:e4:1f:0c:08:4c:dd:54:b6:4d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73a83c810157e3e8511eebe39cfcad16fa329700
        Validity
            Not Before: Dec 18 20:19:34 2025 GMT
            Not After : Dec 17 20:24:34 2026 GMT
        Subject: CN=0C287628F6C06C7F3F520086C0B695AFB32C5D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:f2:41:a2:65:e5:c0:f1:7c:7e:be:70:bf:
                    c8:1c:5e:13:26:7b:82:a7:df:7b:a9:da:1f:a8:bf:
                    7e:fd:58:40:a4:3b:71:4a:2a:75:01:19:f6:4e:8a:
                    42:98:f6:64:35:7d:99:32:9c:dd:d8:a3:c9:0b:a2:
                    cd:6d:74:8c:7c:e3:d1:4b:78:fa:e3:10:11:d2:32:
                    dd:e9:3b:3b:2c:73:bd:80:b0:c0:2a:33:d9:f8:c3:
                    50:84:82:25:24:1b:65:c8:f6:87:ad:72:71:1d:45:
                    1d:a0:1b:27:ba:4b:2c:d4:a4:51:dc:cb:d2:74:0b:
                    c8:9a:dc:c8:06:9c:7d:f6:5a:66:28:e8:6c:33:f7:
                    6f:49:db:e2:b0:fc:c8:f4:df:96:75:c4:00:ee:2c:
                    6e:68:0f:0c:18:75:41:c0:b9:46:a9:e4:0c:9e:e2:
                    7c:c1:c2:17:f9:cf:47:df:a9:56:0d:be:f1:9d:67:
                    76:99:43:0a:9c:87:d9:3e:4f:17:81:b8:85:98:9a:
                    0c:90:74:8e:0a:7a:88:f7:0c:e5:80:83:5e:8e:a9:
                    1d:97:f0:3b:25:3f:79:cd:c2:3a:d2:f8:90:db:fa:
                    cc:66:55:e4:ec:61:94:f9:a4:8b:e6:91:5b:11:c3:
                    a3:52:c4:f7:68:de:33:f4:73:ed:c1:2c:72:a6:6a:
                    32:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:28:76:28:F6:C0:6C:7F:3F:52:00:86:C0:B6:95:AF:B3:2C:5D:64
            X509v3 Authority Key Identifier:
                keyid:73:A8:3C:81:01:57:E3:E8:51:1E:EB:E3:9C:FC:AD:16:FA:32:97:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/0/73A83C810157E3E8511EEBE39CFCAD16FA329700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6g8gQFX4-hRHuvjnPytFvoylwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/0/326130363a613334303a3a2f32392d3438203d3e203437363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a340::/29

    Signature Algorithm: sha256WithRSAEncryption
         9e:30:83:37:0c:1f:03:d9:06:9b:84:b8:d7:9b:2b:36:fd:d5:
         70:6a:1a:a4:1d:2b:ed:81:65:51:eb:bd:70:b4:05:38:c7:c5:
         9f:4c:56:ba:27:c1:8a:f6:e4:a4:ed:85:92:cc:92:96:a3:94:
         e1:65:a2:cd:b4:1c:da:40:e2:6e:cb:69:64:e6:8e:fc:2a:0b:
         94:c5:96:02:07:56:7a:23:de:10:66:fa:93:63:ab:bf:d6:86:
         5a:2c:b5:97:c0:02:b5:c5:dd:65:62:66:b4:a3:78:5a:fd:b6:
         f0:e0:85:ba:2c:36:96:3d:a1:d0:e4:e3:a4:8d:41:77:58:bd:
         bd:02:a4:e7:50:d1:50:17:d2:89:d4:b7:fe:88:ff:3f:99:df:
         30:d8:6b:9f:d3:0c:9f:e3:af:5d:d6:2c:bd:0f:0e:14:36:fa:
         a7:9c:cd:f9:8f:7f:f1:e9:ec:fc:98:cd:c4:a6:f9:e6:12:40:
         74:6e:93:2e:c4:a2:02:bc:84:36:09:00:e3:5c:bd:d4:3b:49:
         61:bc:e7:9a:00:17:d9:a5:71:2c:d4:da:26:25:c3:87:98:f9:
         fe:98:02:f5:e4:82:4e:dc:0e:8b:ef:37:3b:cc:84:cb:16:2c:
         01:e8:38:a0:98:da:ad:fa:79:cd:8a:e0:53:a8:34:41:6b:77:
         57:12:ee:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:10:15 2025 by rpki-client