Fabian Holler: RPKI-RTR library

One of the most fragile and vulnerable parts of the Internet is its core routing-infrastructure. The distribution of wrong routing informations could lead to unreachability of a large number of hosts. To improve the robustness of the routing-infrastructure, the secure inter-domain working group of the IETF recently  developed a resource-PKI (RPKI) to certify network prefix as belonging to certain autonomous systems.

This presentation describes shortly recent incidents originated from the spreading of incorrect routing information, introduces the functionality of RPKI and shows which incidents it could prevent. Furthermore the RPKI-RTR protocol which manages the communication between the RPKI and routers will be presented and a first draft of a client-side RPKI-RTR implementation will be shown (Slides).