[DBWG] Discussion: Draft on RPKI Trust Anchor Constraints in SIDROPS

[Sofia Silva Berenguer]

(Apologies for duplication)

Hello all,

The NRO RPKI Program [1] has published a blog post explaining the proposed solution to concerns with the current RPKI Trust Anchor configuration, now documented in the Internet-Draft https://www.ietf.org/archive/id/draft-nro-sidrops-ta-constraints-00.txt

The draft defines a mechanism that allows RPKI Trust Anchors (TAs) to declare which TA is authoritative for which Internet Number Resources, helping prevent RPKI validation conflicts.

You can read the blog post here: https://blog.apnic.net/2025/10/30/a-solution-to-the-concerns-about-the-current-rpki-trust-anchor-configuration/

We welcome feedback and discussion on the sidrops mailing list [2] and during the upcoming SIDROPS WG session at IETF 124 (Montreal, Nov 3) [3].

Warm regards,

Sofía

—

[1]  https://www.nro.net/technical-coordination/nro-rpki-program/

[2] https://mailman3.ietf.org/mailman3/lists/sidrops@ietf.org/

[3] https://datatracker.ietf.org/meeting/124/session/sidrops


--

I am sending this email at a time that suits me and the time zone I work in. Please feel free to read, and act on or respond, at a time that suits you.



____________________________________________________________________

Sofía Silva Berenguer

NRO RPKI Program Manager

e: sofia at apnic.net<mailto:sofia at apnic.net>

____________________________________________________________________


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.afrinic.net/pipermail/dbwg/attachments/20251030/c637cecf/attachment.html>