RPKI and ROA Services for IPv4 Routing
RPKI and ROA services for IPv4 routing help keep your intended BGP origin aligned with published route authorization. Hyper ICT assists with ROA creation, updates and reviews for eligible IPv4 resources and authorized origin ASNs.
Keep your intended BGP origin aligned with your published RPKI configuration.
- ROA creation and updates
- Prefix and origin ASN verification
- Existing ROA review
- Max Length configuration
Authorize and Validate Route Origins
RPKI enables networks to validate whether an Autonomous System is authorized to originate a specific IP prefix. A properly configured ROA publishes that routing authorization and enables networks performing Route Origin Validation to evaluate the origin of a BGP announcement.
Authorize Your ASN
Define which Autonomous System is authorized to originate your IPv4 prefix and keep the published authorization aligned with your intended routing configuration.
Reduce Routing Errors
Correct ROA configuration helps avoid mismatches between your intended BGP announcements and the route origin authorization visible through RPKI.
Support Route Origin Validation
Networks using Route Origin Validation can evaluate whether an announcement's origin ASN and prefix length are consistent with the applicable ROA.
RPKI & ROA Services
Whether you are announcing a new IPv4 prefix or reviewing an existing routing setup, we can help keep your ROA configuration aligned with your intended origin ASN and prefix length. These services are part of our IPv4 Network Services.
ROA Creation
Create Route Origin Authorizations for the required IPv4 prefix, authorized origin ASN and permitted prefix length.
ROA Updates
Update an existing ROA when the authorized origin ASN, prefix or intended routing configuration changes.
ROA Review
Review existing authorizations and identify potential ASN or prefix-length mismatches with intended BGP announcements.
RPKI Assistance
Get help coordinating RPKI configuration with your IPv4 resources, ASN and wider network deployment.
A Simple RPKI Setup Process
We start with your IPv4 prefix, intended origin ASN and announcement requirements, configure the required ROA and then verify that the published authorization matches your deployment.
Tell Us Your Prefix
Provide the IPv4 prefix that requires RPKI or ROA configuration.
Confirm ASN & Prefix Length
We confirm the intended origin ASN and the prefix lengths that need to be authorized.
Configure the ROA
The required Route Origin Authorization is created or updated based on the intended BGP announcements.
Verify the Result
We review the published ROA and confirm that its origin ASN and permitted prefix length reflect the intended routing setup.
More Than Just a ROA
RPKI configuration is often only one part of a network deployment. Hyper ICT can also help with IPv4 resources, ASN requirements and related network resource services.
Need Additional IPv4 Capacity?
Lease IPv4 blocks from /24 and above with flexible monthly arrangements and network resource support.
- IPv4 blocks from /24
- Monthly leasing
- 24-48 hour testing for eligible deployments
Building Your Own Routing Setup?
If your deployment also requires an Autonomous System, Hyper ICT can help you understand the ASN and related network resource requirements.
- ASN-related assistance
- RIR-related support
- BGP deployment coordination
Need Help With the Full Deployment?
Coordinate IPv4, ASN, RPKI and related network resource requirements with one team.
- Resource coordination
- Routing-related assistance
- Human technical support
Services Related to RPKI and ROA
Route origin authorization is often coordinated with ASN, BGP, LOA and other IPv4 resource requirements.
BGP Assistance
Support for IPv4 prefix announcements and BGP deployment requirements.
Letter of Authorization
Authorization documentation for eligible IPv4 and BGP deployments.
RIPE Maintainer
RIPE Database object management and Maintainer configuration for eligible resources where applicable.
RPKI & ROA Frequently Asked Questions
Common questions about Route Origin Authorizations, RPKI validation and managing your routing configuration.
What is RPKI?
Resource Public Key Infrastructure, or RPKI, is a cryptographic framework that allows holders of Internet number resources to publish verifiable statements about authorized route origins. It is commonly used for BGP Route Origin Validation.
What is a ROA?
A Route Origin Authorization specifies which Autonomous System is authorized to originate an IP prefix. A ROA can also specify a Max Length that determines how specific an authorized announcement may be.
Why does my IPv4 prefix need a ROA?
A correctly configured ROA allows networks performing Route Origin Validation to evaluate whether your BGP announcement originates from an authorized ASN and complies with the authorized prefix length.
What do Valid, Invalid and NotFound mean in RPKI?
Valid means the BGP announcement is covered by an applicable ROA and matches its authorized origin ASN and prefix-length conditions. Invalid means an applicable ROA exists but the announcement does not satisfy those conditions. NotFound means no applicable ROA covers the announcement.
Can you update an existing ROA?
Yes. If the authorized origin ASN, announced prefix or routing requirements change, we can help review the existing configuration and coordinate the required ROA update for eligible IPv4 resources.
What does Max Length mean in a ROA?
Max Length defines the most specific prefix length that the authorized ASN may originate under the ROA. An announcement that is more specific than the permitted Max Length will not satisfy that ROA and can be classified as RPKI Invalid.
Does a ROA prevent BGP hijacking?
A ROA does not directly prevent a BGP announcement. It provides cryptographically verifiable route origin authorization that networks using Route Origin Validation can use when applying their routing policies.
Can you configure ROAs for IPv4 addresses leased through Hyper ICT?
Yes, for eligible IPv4 resources. Hyper ICT can coordinate the required ROA configuration with the intended origin ASN and routing requirements of the deployment.
Can you also help with IPv4 and ASN requirements?
Yes. Hyper ICT provides IPv4 leasing and related network resource services, so RPKI and ROA requirements can be coordinated as part of a wider IPv4 and routing deployment.
Need Help With Your ROA Configuration?
Tell us your IPv4 prefix, intended origin ASN and routing requirements. We'll help determine the appropriate ROA configuration for your deployment.