- LACNIC launched the NRO RPKI Program to enhance the security and consistency of RPKI services, documenting current Trust Anchor configurations and user experiences.
- The initiative aims to improve the user experience across regions and address barriers in creating Route Origin Authorisations.
What happened: LACNIC enhances RPKI program security
Earlier this year, LACNIC launched the NRO RPKI Program, aiming to enhance the security and resilience of Resource Public Key Infrastructure (RPKI) services. The programme’s primary goal is to raise awareness within the technical community about the need for a consistent and secure RPKI service. A significant outcome of this initiative has been the documentation of current Trust Anchor configurations, accompanied by an exploration of potential solutions. LACNIC also compiled information on the RPKI services offered by each Regional Internet Registry (RIR), highlighting the variability in implementations. User research was conducted with network operators responsible for IP resources, focusing on barriers they face in creating Route Origin Authorisations (ROAs). This led to valuable insights from 80 surveyed operators and detailed feedback from 11 interviewees, shaping future priorities for the programme.
Also read: LACNIC shares strategies to combat traffic abuse at IXPs
Also read: LACNIC collaborates with regional leaders for digital security
Why it is important
The NRO RPKI Program is crucial as it addresses a foundational aspect of internet security. RPKI is designed to prevent routing attacks by allowing network operators to verify the authenticity of the IP addresses they announce. With the rise in cyber threats and increasing complexity of internet infrastructure, the need for robust security measures has never been more pressing. By documenting the variances in RPKI implementations across RIRs, LACNIC is paving the way for a more unified approach that can enhance overall internet stability.
This initiative also highlights the importance of collaboration within the industry. As the internet continues to evolve, the interplay between different RIRs and their RPKI services will significantly impact how effectively network operators can secure their resources. Moreover, the focus on user experience and the feedback collected from operators will help identify and mitigate obstacles, ensuring broader adoption of RPKI. As cybersecurity threats become more sophisticated, the lessons learned from this programme will resonate beyond LACNIC, influencing best practices and policies across the global internet community. Ultimately, the commitment to improving RPKI services reflects a proactive approach to safeguarding the internet’s infrastructure, which benefits all users.
