This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.pudu.be/repo/pudu/1/323030313a3637633a6238633a3a2f34382d3438203d3e203536373632.roa
File:                     323030313a3637633a6238633a3a2f34382d3438203d3e203536373632.roa (raw, json)
Hash identifier:          hpNbvieiBxQCZ+RF4CfbUfbEcDLWbpQFtRZ8j1V9k6g=
Subject key identifier:   9E:74:B0:F8:ED:AC:D7:DB:28:1B:6E:03:6F:C2:E5:D4:37:16:F6:05
Certificate issuer:       /CN=cf7dc5a4f702d3dc9d56ea35b9ee202ec549647e
Certificate serial:       752CE56DCD35F7E28504BDF43A7F29701E2BC63E
Authority key identifier: CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/1/323030313a3637633a6238633a3a2f34382d3438203d3e203536373632.roa
Signing time:             Sun 14 Dec 2025 07:24:32 +0000
ROA not before:           Sun 14 Dec 2025 07:19:32 +0000
ROA not after:            Sun 13 Dec 2026 07:24:32 +0000
asID:                     56762
IP address blocks:        2001:67c:b8c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl
                          rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2c:e5:6d:cd:35:f7:e2:85:04:bd:f4:3a:7f:29:70:1e:2b:c6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf7dc5a4f702d3dc9d56ea35b9ee202ec549647e
        Validity
            Not Before: Dec 14 07:19:32 2025 GMT
            Not After : Dec 13 07:24:32 2026 GMT
        Subject: CN=9E74B0F8EDACD7DB281B6E036FC2E5D43716F605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:85:b3:d5:5a:8d:ef:d9:69:26:bf:21:db:
                    34:87:d3:d6:d4:51:48:e3:01:c7:c8:07:95:d8:8a:
                    6b:b0:25:13:6d:f8:ae:67:a5:db:94:58:72:67:d1:
                    7a:5d:36:9e:b0:44:84:b6:74:cb:96:9c:76:97:89:
                    85:78:c4:f2:c3:d5:d9:5d:26:4a:fb:d6:fe:4b:dd:
                    ce:3f:1d:40:ef:1b:95:30:43:cb:0a:87:b5:24:dd:
                    46:89:60:be:f8:03:3f:86:ae:f1:43:3f:39:a4:63:
                    20:cb:74:b7:b3:83:3c:59:ca:31:cb:28:79:3f:3d:
                    f9:74:ab:24:01:05:1d:1f:72:ea:db:4d:e0:d3:2d:
                    b3:37:44:a6:a6:6b:25:1a:65:6f:c9:07:5e:dc:e6:
                    50:cd:58:57:8a:19:14:6e:ce:01:b3:ec:24:4b:a4:
                    6b:9f:4e:3c:dd:a4:1b:82:1b:99:2e:18:2b:37:fb:
                    01:e8:8a:0a:f0:79:62:58:fd:be:4b:02:3d:19:73:
                    bf:b1:c3:03:82:ba:03:7f:d1:c1:6f:82:fa:b6:fc:
                    ea:26:0f:e3:3b:05:e7:89:9d:2b:c8:cd:0d:09:ec:
                    4a:40:a2:87:da:06:74:ec:85:9a:db:86:c2:93:84:
                    dd:d2:f3:48:7a:cb:03:dd:66:ff:19:c2:ee:4c:1c:
                    da:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:74:B0:F8:ED:AC:D7:DB:28:1B:6E:03:6F:C2:E5:D4:37:16:F6:05
            X509v3 Authority Key Identifier:
                keyid:CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/1/323030313a3637633a6238633a3a2f34382d3438203d3e203536373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:b8c::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:fb:14:28:41:96:ef:fd:ee:d0:08:e3:d9:1f:67:fd:34:b0:
         37:e9:18:69:f4:81:d1:61:cf:cb:0f:94:f2:e2:41:f2:ef:f9:
         bf:90:eb:bc:eb:51:bb:1e:d6:eb:72:a9:cd:af:0b:93:2e:87:
         2c:7f:92:18:c3:7c:58:03:7c:4b:d6:6f:c7:c0:2c:fe:a3:62:
         4d:ef:30:51:45:62:a5:a6:8f:28:6e:f6:35:0c:67:52:8d:5c:
         61:86:a7:14:86:f8:ca:b2:96:b9:23:1b:90:d5:32:dd:8e:10:
         03:4c:e5:43:a0:ff:8e:c9:7a:18:89:f8:b0:b2:d9:8f:07:16:
         ad:fb:1d:85:6a:b5:29:86:81:96:47:07:cc:38:14:83:e8:54:
         c3:06:eb:a1:1b:0d:6d:db:dc:4d:67:ee:bf:1f:5a:6c:c0:38:
         13:71:7e:9b:f4:94:5e:ac:fc:24:3f:0f:7d:3d:20:2b:ba:a2:
         8c:28:69:91:7b:6a:11:be:50:d8:cf:8d:4f:43:97:a8:c3:f5:
         79:89:f3:40:ad:a7:37:0f:af:0e:b3:f0:93:c8:0f:cd:81:32:
         cb:9c:a2:8d:82:3e:e5:ed:52:c5:ea:05:64:40:13:4d:04:bf:
         a0:e8:76:33:c3:c5:ee:34:5c:9a:ce:a2:77:00:cf:8f:b7:d1:
         41:4e:a0:d7
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIUdSzlbc019+KFBL30On8pcB4rxj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2Y3ZGM1YTRmNzAyZDNkYzlkNTZlYTM1YjllZTIwMmVj
NTQ5NjQ3ZTAeFw0yNTEyMTQwNzE5MzJaFw0yNjEyMTMwNzI0MzJaMDMxMTAvBgNV
BAMTKDlFNzRCMEY4RURBQ0Q3REIyODFCNkUwMzZGQzJFNUQ0MzcxNkY2MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2oYWz1VqN79lpJr8h2zSH09bU
UUjjAcfIB5XYimuwJRNt+K5npduUWHJn0XpdNp6wRIS2dMuWnHaXiYV4xPLD1dld
Jkr71v5L3c4/HUDvG5UwQ8sKh7Uk3UaJYL74Az+GrvFDPzmkYyDLdLezgzxZyjHL
KHk/Pfl0qyQBBR0fcurbTeDTLbM3RKamayUaZW/JB17c5lDNWFeKGRRuzgGz7CRL
pGufTjzdpBuCG5kuGCs3+wHoigrweWJY/b5LAj0Zc7+xwwOCugN/0cFvgvq2/Oom
D+M7BeeJnSvIzQ0J7EpAoofaBnTshZrbhsKThN3S80h6ywPdZv8Zwu5MHNrPAgMB
AAGjggHVMIIB0TAdBgNVHQ4EFgQUnnSw+O2s19soG24Db8Ll1DcW9gUwHwYDVR0j
BBgwFoAUz33FpPcC09ydVuo1ue4gLsVJZH4wDgYDVR0PAQH/BAQDAgeAMF4GA1Ud
HwRXMFUwU6BRoE+GTXJzeW5jOi8vcnBraS5wdWR1LmJlL3JlcG8vcHVkdS8xL0NG
N0RDNUE0RjcwMkQzREM5RDU2RUEzNUI5RUUyMDJFQzU0OTY0N0UuY3JsMGQGCCsG
AQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC96MzNGcFBjQzA5eWRWdW8xdWU0Z0xzVkpaSDQuY2Vy
MHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9ycGtpLnB1ZHUu
YmUvcmVwby9wdWR1LzEvMzIzMDMwMzEzYTM2Mzc2MzNhNjIzODYzM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzUzNjM3MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwLjDANBgkq
hkiG9w0BAQsFAAOCAQEABPsUKEGW7/3u0Ajj2R9n/TSwN+kYafSB0WHPyw+U8uJB
8u/5v5DrvOtRux7W63Kpza8Lky6HLH+SGMN8WAN8S9Zvx8As/qNiTe8wUUVipaaP
KG72NQxnUo1cYYanFIb4yrKWuSMbkNUy3Y4QA0zlQ6D/jsl6GIn4sLLZjwcWrfsd
hWq1KYaBlkcHzDgUg+hUwwbroRsNbdvcTWfuvx9abMA4E3F+m/SUXqz8JD8PfT0g
K7qijChpkXtqEb5Q2M+NT0OXqMP1eYnzQK2nNw+vDrPwk8gPzYEyy5yijYI+5e1S
xeoFZEATTQS/oOh2M8PF7jRcms6idwDPj7fRQU6g1w==
-----END CERTIFICATE-----
Generated at Sun Dec 21 11:41:02 2025 by rpki-client