RPKI and ROA for Secure IP Routing
RPKI (Resource Public Key Infrastructure) is a global security framework that protects Internet routing by verifying that only authorized networks can announce specific IP prefixes. It helps prevent route hijacking, leaks, and unauthorized BGP announcements.
When you lease IPv4 or IPv6 addresses from Hyper ICT Oy, each block is protected with an associated ROA (Route Origin Authorization), digitally signed in the RIR (RIPE NCC, APNIC, ARIN, LACNIC, NRO, AFRINIC) database. This ensures that your ASN is the legitimate origin for those prefixes, and all routers supporting RPKI validation can verify it globally.
Each ROA issued includes:
With RPKI/ROA in place, your leased IP addresses are protected against hijacks and unauthorized route advertisements, ensuring a secure and trusted presence across global Internet infrastructure.
At Hyper ICT Oy, RPKI and ROA validation are automatically included with every lease, giving your network full protection from day one.
-
The authorized ASN allowed to announce the prefix
-
The specific IP range (e.g., 217.60.128.0/19)
-
The maximum prefix length
-
Validity period matching your lease agreement
- rDNS
- Geofeed / Geolocation
- ASN
- Country
- Letter of Authorization / LoA
- Maintainer (MNT)
- Organization (ORG)
