Who's running all those tiny RPKI servers?
blog.apnic.net
July 15, 2026
15 min read
47/100
Summary
Border Gateway Protocol (BGP) is vulnerable to prefix hijacks due to a lack of built-in trust. Resource Public Key Infrastructure (RPKI) allows address space holders to cryptographically authorize which Autonomous Systems (AS) can originate their prefixes through Route Origin Authorizations (ROAs), establishing a chain of trust with five Regional Internet Registries (RIRs).
Key Takeaways
- Resource Public Key Infrastructure (RPKI) allows address space holders to cryptographically authorize which Autonomous Systems (AS) may originate their prefixes, enhancing trust in BGP routing.
- Most Route Origin Authorizations (ROAs) are published by the five Regional Internet Registries (RIRs), but a significant number are also published by smaller, independently operated servers.
- A server is classified as 'small' if it announces fewer than 1,300 ROA objects, distinguishing them from larger providers like the RIRs and AWS.
- Smaller RPKI servers are operated for various legitimate reasons, despite the availability of publication services from RIRs.
Coverage & discussions
Hacker News · blog.apnic.net
Community discussions
Historical count: 2 · 2 saved in sample · Historical sample
Awaiting analysis
Related Articles
RPKI now protects 70% of internet routes
Oct 16, 2026
A hacker broke into John Deere and SharkNinja with an army of AI agents
Oct 19, 2026
Plex vulnerabilities being exploited in the wild to drop a cryptominer
Oct 19, 2026
Matthew Prince on why Cloudflare offers a free version and always will (2016)
Oct 18, 2026
Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
Oct 16, 2026