fr
Français

RPKI for the Research and Education Community

Resource Public Key Infrastructure (RPKI) is an opt-in service from the American Registry of Internet Numbers (ARIN) that provides security for internet routing by ensuring Internet Protocol (IP) addresses are from a trusted source. Canada’s National Research and Education Network (NREN) is collectively working to assist all member organizations in becoming RPKI-compliant.

RPKI FAQ

Why should Canada’s research and education institutions use RPKI?

Service providers around the world (such as Google) have mandated that all IP addresses be correctly configured and assigned to ensure that all internet traffic is from legitimate IP address holders.

To configure IP addresses for RPKI, the IP addresses themselves must first be properly registered. In Canada, IP addresses are assigned by the American Registry of Internet Numbers (ARIN). However, many legacy IP addresses are unassigned and incorrectly configured. As a result, ARIN is taking steps to encourage holders of internet resources numbers such as IP addresses to update to the latest Registration Services Agreement (RSA) and to use ARIN tools to configure for RPKI.

Watch the RPKI Webinar

Why does it matter?

Failure to adopt RPKI and continuing to operate IP addresses that are unidentified, or identified incorrectly, could result in

  • New route announcements without a valid ROA will not be accepted by the CANARIE network. Existing route announcements are exempt from this requirement but should be updated with valid ROAs as soon as possible.

Additional Resources