Post #4042974
2026-07-23 18:14 UTC
An RPKI ROV laggard no more, China's ROA coverage jumped from 4% to 81% since April, a major advance in the country's BGP security.
@job@bsd.network and I break down the numbers behind China's unprecedented ROA rollout, now covering nearly the entire country.
https://www.kentik.com/blog/china-rolls-out-the-roas/
Replies (1)
-
@dougmadory@infosec.exchange 2026-07-23 18:25
It was inevitable that a massive deployment of ROAs like this would create RPKI-invalid due to mismatches on maxlen, causing routes to be withdrawn. Here's one example out of over 600 that I found: https://bgp.tools/rpki-history?cidr=103.151.148.0%2f23&asn=4808