RPKI: A Key Tool for Routing Security Celebrates 15 Years in the Region

10/02/2026

RPKI: A Key Tool for Routing Security Celebrates 15 Years in the Region

By Carlos Martínez and Gerardo Rada

Internet routing security has become a critical factor for Internet stability and resilience. In this context, Resource Public Key Infrastructure (RPKI) has established itself as one of the most effective tools for preventing route hijacks and unauthorized BGP announcements, a problem that has historically affected Internet operation worldwide.

In our region, LACNIC has played a central role in RPKI adoption, promoting services, infrastructure, and applications that have enabled operators to protect their resources and enhance the reliability of Internet traffic.

What is RPKI and what is it used for?

RPKI is a cryptographic validation system that allows IP address and Autonomous System Number (ASN) holders to prove they are the legitimate owners of these resources and define which networks are authorized to advertise them on the Internet.

At the heart of the system are Route Origin Authorizations or ROAs, digital objects that link an IP prefix to an authorized ASN. Thanks to these records, routers can validate BGP advertisements and quickly detect configuration errors or route hijacking attempts.

In practical terms, RPKI reduces operational risk, helps prevent incidents with regional or global impact, and makes Internet routing more predictable.

A turning point in 2011

Although at a global level the definition of RPKI began in the mid-2000s (and was quickly standardized by the IETF), 2011 marked a turning point for our region. That year, LACNIC launched our own RPKI infrastructure, supported by code developed by RIPE NCC.

(Free access, no subscription required)

This initial development allowed LACNIC members to begin validating the origin of BGP routes and protecting themselves against hijacking incidents, laying the groundwork for a more proactive approach to routing security.

In countries such as Ecuador, both operators and Internet exchange points began deploying RPKI, integrating it as a best technical practice to strengthen network stability. Many other countries in the region quickly followed suit.

RPKI adoption in the LACNIC region

Recent studies published by LACNIC show sustained growth in RPKI adoption among its members, both in the number of protected prefixes and in the proportion of routes that are effectively validated.

The views expressed by the authors of this blog are their own and do not necessarily reflect the views of LACNIC.

0 Comments
Oldest
Newest Most Voted
Inline Feedbacks
View all comments