3 ms·
Before RPKI, any network on the internet could announce any prefix (e.g. 2001:630::/32) to any neighbour, whether they had the right to or not. With RPKI, the o
by chaz6 3y ago
Before RPKI, any network on the internet could announce any prefix (e.g. 2001:630::/32) to any neighbour, whether they had the right to or not. With RPKI, the owner of the prefix has to authorize a network to announce the route, so this helps to prevent networks from hijacking prefixes. One caveat is that it depends upon networks checking the RPKI database when receiving prefixes from neighbours, but pretty much all the major networks do this now.
For more information, there is a good article here:
https://phoenixnap.com/kb/rpki https://phoenixnap.com/kb/rpki
- icedchai 3y agoMore than 50% of prefixes still don't use RPKI. See https://rpki-monitor.antd.nist.gov/ https://rpki-monitor.antd.nist.gov/ Many will likely never use it. ARIN, for example, does not allow "legacy" networks to use RPKI unless they sign a registration agreement (and start paying for the privilege.)