is done in the RIR repository. Validation Relying party software will fetch, cache, and validate repository data using rsync or the RPKI Repository Delta Protocol (RFC 8182). It is important for a relying party to regularly synchronize with all the publication points to maintain a complete and timely view of repository data. Incomplete or stale data can lead to erroneous routing decisions. Routing decisions After validation of ROAs, the attestations can be compared to BGP routing and aid network operators in their decision making process. This can be done manually, but the validated prefix origin data can also be sent to a supported router using the RPKI to Router Protocol (RFC 6810), Cisco Systems offers native support on many platforms for fetching the RPKI data set and using it in the router configuration. Juniper offers support on all platforms that run version 12.2 or newer. Quagga obtains this functionality through BGP Secure Routing Extensions (BGP-SRx) or a RPKI implementation fully RFC-compliant based on RTRlib. The RTRlib provides an open source C implementation of the RTR protocol and prefix origin verification. The library is useful for developers of routing software but also for network operators. Developers can integrate the RTRlib into the BGP daemon to extend their implementation towards RPKI. Network operators may use the RTRlib to develop monitoring tools (e.g., to check the proper operation of caches or to evaluate their performance). RFC 6494 updates the certificate validation method of the Secure Neighbor Discovery protocol (SEND) security mechanisms for Neighbor Discovery Protocol (ND) to use RPKI for use in IPv6. It defines a SEND certificate profile utilizing a modified RFC 6487 RPKI certificate profile which must include a single RFC 3779 IP address delegation extension. References External links Tool provided by Cloudflare to test if ISP is doing RPKI validation Tool by Cloudflare to explore RPKI Open source RPKI Documentation IETF Journal - Securing BGP and SIDR An open source implementation of the complete set of RPKI protocols and tools RTRlib - Open source RPKI-Router Client C Library NLnet Labs open source RPKI tools developed in Rust Quagga RPKI implementation BGP-SrX - Quagga router implementation of RPKI-based Origin and Path validation. RPKI-Monitor - Global and regional monitoring and analysis of RPKI deployment and use. RPKI Deployment statistics for all RIRs Global ROA deployment heatmap EuroTransit GmbH RPKI Testbed BGPMON - Validating BGP announcement with RPKI An APNIC primer on RPKI