블로그로 돌아가기
Why RPKI matters for route security
Route hijacks and leaks are avoidable. Here's how RPKI cryptographically protects your prefixes.
Resource Public Key Infrastructure (RPKI) lets networks cryptographically sign which ASN is allowed to originate a given prefix. Networks that validate RPKI can then reject invalid or hijacked routes automatically.
The problem it solves
Without RPKI, a misconfiguration or malicious announcement elsewhere on the internet can pull your traffic to the wrong network, a route hijack. These incidents are surprisingly common and can take services offline or expose data.
How Beriffa uses it
- We publish RPKI ROAs for the prefixes we originate on AS219271.
- We validate RPKI on our own sessions and drop invalids.
- We help customers set up ROAs for their own space.