Trends

NRO advances RPKI for stronger routing security in 2025

NRO drives RPKI progress in 2025, boosting routing security with stronger trust anchors and unified services.

Authorjessie.chen

Reading Time2 min

PublishedAugust 26, 2025

Primary DomainN/A

Content TypeN/A

TopicN/A

EntityN/A

RegionN/A

Time HorizonN/A

ImpactN/A

ConfidenceN/A

Headline

NRO drives RPKI progress in 2025, boosting routing security with stronger trust anchors and unified services.

Context

• In 2025, the RPKI Steering Group will publish both a draft technical specification to standardise Trust Anchor constraints and a roadmap for core RPKI services across RIRs. • Additional “nice-to-have” innovations—such as hybrid services, testing environments, and BGPsec expansion—are being groomed for future deployment to enrich routing security.

Evidence

Pending intelligence enrichment.

Analysis

On 25 August 2025, the APNIC blog announced that the NRO RPKI Programme has sharpened its focus for the year ahead, consolidating efforts into two principal objectives. First, reinforcing the transparency, robustness and security of the RPKI system. To that end, the RPKI Steering Group will publish a consultation draft later this year proposing a technical specification to communicate Internet Number Resource (INR) constraints for each Trust Anchor (TA). Second, enhancing the consistency of user experience across RIRs . This includes harmonising documentation, terminology and best practice guidance, and agreeing upon a unified roster of core RPKI features—such as hosted and delegated services, ROA-management APIs, ASPA via portal and API, and short-lived TA certificates. A consolidated roadmap for rolling out these services across all RIRs is due in the second half of 2025. Beyond those essentials, the Steering Group is also cultivating a suite of “nice-to-have” features for future phases—ranging from hybrid services and signed Trust Anchor locators to RPKI checklists, BGPsec support and testing environments. Additionally, the group has completed a gap analysis of RPKI user interfaces across RIRs and launched an RPKI content repository, with an upcoming guide detailing how to create a Route Origin Authorization (ROA) via each RIR expected soon.