[routing-wg] Guide to using RIPE NCC's RPKI Publication Service

The RIPE NCC RPKI Publication Service for delegated Certification Authorities (CAs) is currently in an open beta phase:

https://www.ripe.net/manage-ips-and-asns/resource-management/rpki/paas-onboarding-with-krill

Running Delegated RPKI has several advantages. Most notably, you can seamlessly manage multiple organisational entities in a single instance, even spanning several RIR service regions, and you can delegate resources to other business units or customers who in turn run their own CA to manage ROAs.

In just a few weeks, RIPE NCC’s RPKI Publication Service is already hosting over 2000 Validated ROA Payloads, already cementing it as a popular member service. To help others get started, I published a step-by-step guide to do this with free, open-source RPKI CA software Krill by NLnet Labs:

https://blog.nlnetlabs.nl/running-krill-under-ripe-ncc/

All the best for 2023,

Alex

P.S. ARIN and APNIC offer RPKI publication services as well, and there are similar guides for these RIRs:

https://blog.nlnetlabs.nl/running-krill-under-arin/
https://blog.nlnetlabs.nl/running-krill-under-apnic/