RPKI & routing security

Routing security keeps your traffic going where it should. Beriffa signs and validates routes with RPKI and registers IRR objects for the space we originate.

ROAs (Route Origin Authorizations)

A ROA states which ASN may originate a given prefix, and at what maximum length. Networks that validate RPKI will drop announcements that don't match a valid ROA.

# A ROA in words:
# "AS219271 may originate 2a0e:xxxx::/44, maxLength /48"

Validating a prefix

Use the RPKI checker under Tools, or query RIPEstat directly, to confirm a prefix+origin pair is Valid, Invalid, or Unknown.

IRR objects

We keep route/route6 and as-set objects current so peers building prefix filters from IRR data accept your announcements.