RPKI

networkingsecurity

Stands for: Resource Public Key Infrastructure

A system of signed records that lets routers check whether a network is allowed to announce a given address block.

Resource Public Key Infrastructure (RFC 6480) attaches cryptographic proof of who may originate which prefixes, so a router can reject bogus BGP announcements. It is the main defence against route hijacks, accidental or malicious.

Also known as: rpki, route origin validation, roa

← All glossary entries