blog.fichtmueller.org
// rpki
rpki peering hyperscalers

RPKI Is 14 Years Old and Still Optional. That's About to End.

The RPKI standard was published in 2012. Origin validation has been technically possible since 2014. The first major transit operators started enforcing in 2018. As of 2026, ROA coverage globally

Rene Fichtmueller / 2026-05-27 / ~3 min read min read
aspa bgp rpki route-leaks

ASPA (RFC 9234): The BGP Verification Nobody Implements Yet

RPKI was supposed to fix BGP. It fixed exactly one BGP problem: somebody else announcing your prefix from an AS that doesn't own it. That's origin

Rene Fichtmueller / 2026-05-26 / ~3 min read min read