PING

RPKI Views: The archive of RPKI state


Listen Later

In this episode, Job Snijders discusses RPKIViews, his long term project to collect the "views" of RPKI state every day, and maintain an archive of BGP route validation states. The project is named to reflect route views, the long-standing archive of BGP state maintained by the University of Oregon, which has been discussed on PING.


Job is based in the Netherlands, and has worked in BGP routing for large international ISPs and content distribution networks as well as being a board member of the RIPE NCC. He is known for his work producing the Open-Source rpki-client RPKI Validator, implemented in C and distributed widely through the OpenBSD project.


RPKI is the Resource PKI, Resource meaning the Internet Number Resources, the IPv4, IPv6 and Autonomous System (AS) numbers which are used to implement routing in the global internet. The PKI provides cryptographic proofs of delegation of these resources and allows the delegates to sign over their intentions originating specific prefixes in BGP, and the relationships between the AS which speak BGP to each other.


Why rpkiviews? Job explains that there's a necessary conversation between people involved in the operational deployment of secure BGP, and the standards development and research community: How many of the worlds BGP routes are being protected? How many places are producing Route Origin Attestations (ROA) which are the primary cryptographic object used to perform Route Origin Validation (ROV) and how many objects are made? Whats the error rate in production, the rate of growth, a myriad of introspective "meta" questions need to be asked in deploying this kind of system at scale, and one of the best tools to use, is an archive of state, updated frequently, and as for route views collected from a diverse range of places worldwide, to understand the dynamics of the system.


Job is using the archive to produce his annual "RPKI Year in review" report, which was published this year on the APNIC Blog (it's posted to operations, research and standards development mailing lists and presented at conferences and meetings normally) and products are being used by the BGPAlerter service developed by Massimo Candela


Read about the rpkiviews archive on the APNIC Blog, and on the web:

  • RPKI's 2024 Year in review - (Job Snijders, APNIC Blog January 2025)
  • RPKIViews - (the RPKI views Web archive)
...more
View all episodesView all episodes
Download on the App Store

PINGBy APNIC

  • 5
  • 5
  • 5
  • 5
  • 5

5

4 ratings


More shows like PING

View all
Security Now (Audio) by TWiT

Security Now (Audio)

1,976 Listeners

Radiolab by WNYC Studios

Radiolab

43,946 Listeners

Risky Business by Patrick Gray

Risky Business

365 Listeners

Freakonomics Radio by Freakonomics Radio + Stitcher

Freakonomics Radio

32,260 Listeners

Talk Python To Me by Michael Kennedy

Talk Python To Me

590 Listeners

Python Bytes by Michael Kennedy and Brian Okken

Python Bytes

215 Listeners

Click Here by Recorded Future News

Click Here

412 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

7,879 Listeners

IPv6 Buzz by Packet Pushers

IPv6 Buzz

34 Listeners

The Hedge by Russ White

The Hedge

15 Listeners

Signals and Threads by Jane Street

Signals and Threads

72 Listeners

The RIPE Labs Podcast by RIPE Labs Editor

The RIPE Labs Podcast

1 Listeners

Risky Bulletin by risky.biz

Risky Bulletin

43 Listeners

Oxide and Friends by Oxide Computer Company

Oxide and Friends

47 Listeners

The 404 Media Podcast by 404 Media

The 404 Media Podcast

315 Listeners