There is currently a lot of activity around Hybrid RPKI, the deployment model where organisations run their own Certificate Authority (CA) software and publish their ROAs in a repository offered by their RIR or NIR.
APNIC has been offering a Publication Service for quite a while already, ARIN launched theirs in March 2022 and the RIPE NCC is currently beta-testing this functionality. The Hybrid RPKI model has proven to be hugely successful in Brazil, where the National Internet Registry NIC.br offers this as the only option. Just 2,5 years after launch, more than 1400 organisations currently run a Delegated CA with Krill and publish almost 8000 ROAs in their parent’s publication point. To help with Hybrid RPKI deployment under the services of APNIC and ARIN, we wrote two articles explaining the benefits and guide you through the setup process step by step: https://blog.nlnetlabs.nl/running-krill-under-apnic/ https://blog.nlnetlabs.nl/running-krill-under-arin/ As soon as the RIPE NCC offers the same service, we’ll write a similar guide. Cheers, Alex -- RPKI mailing list [email protected] https://lists.nlnetlabs.nl/mailman/listinfo/rpki
