RPKI & routing security
Publishing ROAs, validating routes, and keeping your prefixes safe.
Routing security keeps your traffic going where it should. Beriffa signs and validates routes with RPKI and registers IRR objects for the space we originate.
ROAs (Route Origin Authorizations)
A ROA states which ASN may originate a given prefix, and at what maximum length. Networks that validate RPKI will drop announcements that don't match a valid ROA.
# A ROA in words:
# "AS219271 may originate 2a0e:xxxx::/44, maxLength /48"Validating a prefix
Use the RPKI checker under Tools, or query RIPEstat directly, to confirm a prefix+origin pair is Valid, Invalid, or Unknown.
IRR objects
We keep route/route6 and as-set objects current so peers building prefix filters from IRR data accept your announcements.