Authored by:
Sofia Silva Berenguer, RPKI Program Manager, NRO
A few months ago we shared the outcomes that are guiding the work that we are doing as part of the NRO RPKI Program. We mentioned that we would like to know more about the community’s expectations with regard to consistency in RPKI implementation across the Regional Internet Registries (RIRs) with the end goal of defining what a single, global RPKI system would look like.
We want to know more about the experience of managing resources through multiple RIRs to understand whether the differences in the RIRs’ RPKI implementations are hindering RPKI adoption, specifically Route Origin Authorization (ROA) creation, and if so, which differences are the most painful. This will allow us to focus on making those aspects of the RPKI system more consistent.
With this in mind, we will be conducting a survey, inviting network operators responsible for IP space allocated by different RIRs to ask them about what stage of the RPKI adoption journey they are at, and what barriers they may have experienced or are currently experiencing. Survey participants will have the option to volunteer to participate be interviewed, so we can dig deeper into some of their answers.
Are you a network operator responsible for IP space allocated by multiple RIR? Please take the NRO RPKI Program survey before September 12 (Your multi-RIR experience in creating ROAs).
Look out for an update on our learnings from the survey and the interviews in the next couple of months!
What degree of diversity is acceptable or even welcome? What aspects of the RPKI system need to be more consistent? Please share your thoughts on this with us!
While we work with the community to clearly define what a single, global RPKI system would look like, we will start working on improving some other aspects of the RPKI system — namely robustness and security.
We plan to focus on better measuring the robustness of the RPKI system as a whole by agreeing on the aspects of robustness that should be measured, and clearly documenting the current status and any relevant planned development initiatives for each RIR regarding those aspects, so that in the future we can make this information public in a uniform way.
What aspects of the robustness of the RPKI system would you see value in knowing more about? Please let us know!
We also want to enhance the security consistency of the RPKI system across the different RIRs by establishing a baseline, working with the guidance of security experts on setting the minimum security requirements, and identifying the gaps per RIR, so we can then prioritize those gaps and work towards closing them.
Finally, and where a lot of my focus will be as a Program Manager, we will work to keep the technical community informed and engaged throughout the program and to address RPKI-related concerns in a coordinated way. I will soon be working on validating some assumptions. Please let me know if you would like to volunteer to participate in interviews or other forms of user research activities.
What are your main challenges around deploying RPKI? Have you created Route Origin Authorizations (ROAs)? Have you set up Route Origin Validation (ROV) in your routers? What are your main concerns about the RPKI system as it stands today? Please get in touch and share your thoughts with us!
