NRO RPKI Program – 2024 in review
16/12/2024
Earlier this year we launched the NRO RPKI Program and we shared information about the program’s purpose and the outcomes that were guiding our efforts. One of our main goals is to raise awareness among the technical community that we are committed to providing a more consistent and uniformly secure, resilient, and reliable RPKI service.
An important outcome from this year’s work is the documentation of a problem statement for the current Trust Anchor configuration and the exploration of potential solutions. We hope to share a proposal for discussion with the technical community soon.
We also documented the RPKI services and features offered by each RIR, along with different aspects of robustness of the RPKI system, which brings together a breadth of knowledge about the current state of these elements for each implementation. Having consistent documentation in a single place allows us to see the variability among these implementations that currently exist.
Additionally, we wanted to learn more about the experience of managing resources across multiple regions to understand whether differences in RIR RPKI implementations are hindering Route Origin Authorization (ROA) creation. We conducted user research activities and invited network operators, who are responsible for IP space allocated by different RIRs, to share about any barriers they may have experienced when creating ROAs.
We are grateful to ward the 80 network operators that completed the survey, and a special thank you to the 11 of those who volunteered to participate in interviews for a deeper dive into their responses.
The key learnings from the user research activities show we should focus on increasing the consistency of the RPKI user experience across regions, which will be one of our priorities for 2025. Additionally, we agreed on two other priorities: to work on a solution to the current Trust Anchor configuration to address the concerns of the technical community, and to offer more transparency on the robustness and security aspects of the RPKI system.
We look forward to keep working toward providing a more consistent and uniformly secure, resilient, and reliable RPKI service for the global Internet community, and continuing to receive valuable input from users.