nanog mailing list archives

Re: RPKI publication


From: Christopher Morrow <morrowc.lists () gmail com>
Date: Fri, 23 Nov 2018 18:20:14 -0500

On Fri, Nov 23, 2018 at 6:12 PM Jeff McAdams <jeffm () iglou com> wrote:



On November 23, 2018 4:48:14 PM EST, Christopher Morrow <
morrowc.lists () gmail com> wrote:

I think there are 3 options:
 ripe validator v2 (potentially v3?) -
https://github.com/RIPE-NCC/rpki-validator

https://github.com/RIPE-NCC/rpki-validator-3
 rpki.net validator - https://github.com/dragonresearch/rpki.net
 bbn rpstir - https://github.com/bgpsecurity/rpstir

Like I said, validation and caching, "relying party", has several
options...several of which are relatively easy to run and manage.  It's the
CA and publishing for which no really good options (that I've found, at
least) are available currently.


the ca bits do exist in rpki.net's software set...
they are a tad fiddly to setup/run though, yes.

Current thread: