Definition
RPKI (Resource Public Key Infrastructure) lets network operators publish cryptographically signed Route Origin Authorizations (ROAs) that specify which Autonomous Systems may announce their IP prefixes. Route Origin Validation (ROV) compares BGP announcements against ROAs to detect hijacks and misconfigurations.
Key Points
- 2026-09-28 snapshot (IPinfo): 70.3% of globally observed routed prefixes were RPKI-valid, up from 54.0% YoY; 71.4% when requiring visibility from ≥2 BGP collectors (2026-10-16-rpki-protects-70-percent-internet-routes)
- China’s IPv4 RPKI-valid share jumped from ~3.7% to ~83.0%, driving much of the global gain per IPinfo
- Invalid routes propagate far less than valid ones when major transit providers enforce ROV; gaps remain on loose ROA
maxLengthand early ASPA adoption
Prefix-level adoption metrics differ from traffic-weighted coverage and from ROV deployment rates (~27% of ASes per ATHENE/NDSS 2026 slides cited in industry summaries). APNIC reported ~60% valid IPv4 routes in early 2026 — methodology matters.