Who's running all those tiny RPKI servers?
Summary
APNIC's investigation of small RPKI publication servers highlights their limited but important role in Internet routing security. It notes that 92.4% of ROAs are valid with 91% of those matching a BGP announcement, but 53.98% use maxLength and 19.6% of those have no covering sub-prefix announcements, risking sub-prefix hijacks. It also covers operators' motivations for running independent RRDP/ROA infrastructure and the lack of BGPsec deployment.