When a Bad ROA Looks Like a Nation-State Attack
A mistyped ROA can blackhole a brand worldwide on networks that enforce RPKI. Tell a routing-origin outage from a hijack using validator, lookup, and looking glass.
THE BGPLOOKUP JOURNAL
A mistyped ROA can blackhole a brand worldwide on networks that enforce RPKI. Tell a routing-origin outage from a hijack using validator, lookup, and looking glass.
Recognize BGP origin hijacks, more-specific leaks, and route leaks using live IP lookup, looking glass AS paths, RPKI ROA checks, and traceroute.
How RPKI and Route Origin Authorization work, what valid/invalid/unknown mean, and how to check a prefix and ASN with a free RPKI validator.
RPKI tells you if an origin is authorized. IRR tells you if a human wrote it down. I will not drop either because a conference talk said one of them is dead.
RPKI is not a certificate on a website. It is a signed note that says who is allowed to announce a prefix — and the internet is still uneven about believing it.
Ask about routing, DNS, RPKI, or subnet math.