This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.pudu.be/repo/pudu/1/323030313a3637633a3831633a3a2f34382d3438203d3e203437363839.roa
File:                     323030313a3637633a3831633a3a2f34382d3438203d3e203437363839.roa (raw, json)
Hash identifier:          nCM80PGcTZ8NfHgTx4k0jvV9j2He3nniamGJvbamKBc=
Subject key identifier:   B3:F7:88:54:B3:70:41:91:B1:CA:40:83:8F:D8:D6:7F:90:2A:50:47
Certificate issuer:       /CN=cf7dc5a4f702d3dc9d56ea35b9ee202ec549647e
Certificate serial:       44A7ABF25C93BEBDB1E1AE20E8CC864839A1750D
Authority key identifier: CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/1/323030313a3637633a3831633a3a2f34382d3438203d3e203437363839.roa
Signing time:             Sun 14 Dec 2025 07:24:33 +0000
ROA not before:           Sun 14 Dec 2025 07:19:33 +0000
ROA not after:            Sun 13 Dec 2026 07:24:33 +0000
asID:                     47689
IP address blocks:        2001:67c:81c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl
                          rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a7:ab:f2:5c:93:be:bd:b1:e1:ae:20:e8:cc:86:48:39:a1:75:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf7dc5a4f702d3dc9d56ea35b9ee202ec549647e
        Validity
            Not Before: Dec 14 07:19:33 2025 GMT
            Not After : Dec 13 07:24:33 2026 GMT
        Subject: CN=B3F78854B3704191B1CA40838FD8D67F902A5047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:f1:ae:1f:78:4b:4b:82:b7:13:08:09:51:
                    3f:1c:52:00:23:99:70:87:27:5e:21:81:b7:98:0b:
                    30:07:1b:c3:7f:e8:62:68:23:b0:ba:22:8d:4f:d8:
                    9e:7d:fb:1a:a8:6c:7e:56:c8:bd:7f:20:51:4f:8f:
                    65:fe:3d:c6:d8:87:6b:54:fd:90:36:ef:ca:e8:83:
                    04:39:fe:40:5b:10:3f:f8:dd:d7:14:15:24:92:19:
                    ab:e7:22:0c:5a:f1:44:67:f6:6b:a3:86:ae:20:5a:
                    b2:11:b0:ac:6e:ea:ca:d7:8f:6d:87:60:c9:c9:02:
                    d8:7a:21:63:01:e5:fb:1e:fb:b6:eb:94:12:90:64:
                    9b:bd:0d:3b:a2:9f:b0:e8:ec:b0:e7:66:77:ba:06:
                    93:cb:ed:5a:4e:44:02:c3:85:3c:3f:dc:c7:9c:2e:
                    54:0a:66:1b:3d:55:e1:ee:27:21:a3:fd:40:b8:6c:
                    75:92:41:b5:ee:64:2d:d0:62:b5:02:84:2e:61:98:
                    cb:2e:83:29:38:b4:18:2d:a1:d8:e2:5c:71:94:39:
                    8b:14:2c:3d:9c:52:b3:c6:ed:6b:be:bc:8b:85:9e:
                    5b:0d:80:6b:92:57:cd:d3:28:c0:20:9a:10:fc:06:
                    00:77:b2:83:7f:58:36:1b:2a:2b:2d:ce:98:d7:ea:
                    9d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F7:88:54:B3:70:41:91:B1:CA:40:83:8F:D8:D6:7F:90:2A:50:47
            X509v3 Authority Key Identifier:
                keyid:CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/1/323030313a3637633a3831633a3a2f34382d3438203d3e203437363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:81c::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:a9:28:d2:62:24:d9:8f:6b:98:44:8f:cb:87:21:eb:ec:a4:
         e0:67:cd:e8:64:ec:44:85:a4:59:22:60:85:82:bd:13:c6:1b:
         cc:1c:86:06:fa:58:93:a5:ea:74:cc:17:34:13:a2:5f:16:d7:
         ad:09:3a:44:29:fc:d3:87:d6:d1:38:77:3e:17:81:3f:93:c6:
         91:5e:1a:0c:7f:e8:fe:bf:e9:93:ea:bf:7b:f8:d3:20:3e:8b:
         79:c4:7a:d1:94:00:04:43:d0:93:1b:3c:ef:49:b0:cc:ea:8d:
         35:cb:62:d8:ed:2c:f7:d6:d2:f1:22:1d:1d:11:1f:74:ed:d4:
         69:33:c5:48:50:ad:1a:e4:53:88:ce:5f:f0:a4:13:2e:8c:30:
         c2:ba:9b:58:aa:b5:7f:85:32:b5:6b:1e:29:9e:b2:79:b8:f0:
         4c:e3:be:d3:97:9a:83:72:04:42:cc:12:dd:8c:19:0a:93:c2:
         f6:f3:d1:ab:14:8f:fe:58:4c:2a:96:d9:3b:93:fd:16:9e:09:
         a1:31:3e:df:b3:34:e3:a1:a0:f9:15:52:f2:62:1f:02:62:a3:
         fe:b5:71:45:96:03:8f:cb:39:7e:5f:88:30:31:38:cd:7d:d8:
         c7:8d:ca:1d:2a:e9:65:d7:5f:fe:4c:e5:84:32:f4:2c:4b:91:
         18:7f:5a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:07:42 2025 by rpki-client