Why RPKI matters for route security

Resource Public Key Infrastructure (RPKI) lets networks cryptographically sign which ASN is allowed to originate a given prefix. Networks that validate RPKI can then reject invalid or hijacked routes automatically.

The problem it solves

Without RPKI, a misconfiguration or malicious announcement elsewhere on the internet can pull your traffic to the wrong network — a route hijack. These incidents are surprisingly common and can take services offline or expose data.

How Beriffa uses it

• We publish RPKI ROAs for the prefixes we originate on AS219271.
• We validate RPKI on our own sessions and drop invalids.
• We help customers set up ROAs for their own space.