Video•Mar 2, 2026
How Does RPKI Help with Routing Security?
The video explains that the Border Gateway Protocol (BGP), the Internet’s routing backbone, was designed without security features, allowing any autonomous system to announce any IP prefix and creating a systemic vulnerability.
It introduces the Resource Public Key Infrastructure (RPKI) as a cryptographic framework that issues digital certificates for IP address blocks and AS numbers. These certificates enable Local Internet Registries (LIRs) to create signed route origin authorizations, which are published in publicly accessible repositories.
The presenter highlights that network operators download and validate these authorizations, performing BGP origin validation to discard illegitimate announcements. Real‑world hijack incidents are cited as examples of attacks that RPKI can prevent.
By filtering bogus routes, RPKI restores inter‑provider trust, reduces the risk of large‑scale hijacks, and is becoming essential for a resilient Internet, prompting carriers to adopt validation policies.
