https://wirez.top/tags/notfound/ Recent content in Notfound on Wirez Hugo en Fri, 20 Mar 2026 00:00:00 +0000 https://wirez.top/posts/rpki-route-checks-stop-invalid-bgp-announcements/ Fri, 20 Mar 2026 00:00:00 +0000 https://wirez.top/posts/rpki-route-checks-stop-invalid-bgp-announcements/ <!-- wp:html --> <meta charset="utf-8"> <style> /* Platform CSS v3.0 */ :root { --primary-color: #4285f4; --primary-dark: #0057cc; --success-color: #34a853; --warning-color: #fbbc05; --error-color: #ea4335; --text-primary: #333333; --text-secondary: #666666; --text-light: #888888; --border-color: #e0e0e0; --background-light: #f8f9fa; --background-card: #ffffff; --background-code: #f5f5f5; --spacing-xs: 0.5rem; --spacing-sm: 1rem; --spacing-md: 1.5rem; --spacing-lg: 2rem; --border-radius: 8px; --border-radius-sm: 4px; --box-shadow: 0 2px 8px rgba(0,0,0,0.08); --box-shadow-hover: 0 4px 16px rgba(0,0,0,0.12); } .section-title { color: var(--text-primary); margin: var(--spacing-lg) 0 var(--spacing-sm); font-size: clamp(1.2rem, 3vw, 1.4rem); font-weight: 600; line-height: 1.3; } .subsection-title { color: var(--text-primary); margin: var(--spacing-md) 0 var(--spacing-xs); font-size: clamp(1.1rem, 2.5vw, 1.2rem); font-weight: 600; } .std-text { font-size: 1rem; line-height: 1.6; margin-bottom: var(--spacing-sm); color: var(--text-primary); } .card { border: 1px solid var(--border-color); padding: var(--spacing-sm); background: var(--background-card); border-radius: var(--border-radius); margin-bottom: var(--spacing-md); box-shadow: var(--box-shadow); transition: transform 0.2s ease, box-shadow 0.2s ease; } .card:hover { transform: translateY(-2px); box-shadow: var(--box-shadow-hover); } .emoji-list { font-size: 1rem; line-height: 1.7; margin-bottom: 0.8rem; padding: 0.8rem 0; border-bottom: 1px solid var(--border-color); color: var(--text-primary); } .emoji-list:last-child { border-bottom: none; } .emoji-list strong { color: var(--primary-color); font-weight: 600; } .table-container { width: 100%; overflow-x: auto; margin-bottom: var(--spacing-md); border-radius: var(--border-radius); box-shadow: var(--box-shadow); } .table-container + .table-container { margin-top: 1.5rem; } .data-table { width: 100%; min-width: 600px; border-collapse: collapse; background: white; } .data-table th, .data-table td { padding: var(--spacing-sm); border: 1px solid var(--border-color); font-size: 0.9rem; text-align: left; } .data-table th { background: var(--primary-color); color: white; font-weight: 700; white-space: nowrap; } .data-table td:first-child { font-weight: 700; } .data-table tbody tr:nth-child(even) { background: #f8f9ff; } .data-table tbody tr:nth-child(even) td { background: #f8f9ff !important; } .data-table tbody tr:nth-child(odd) td { background: white !important; } .data-table tr:hover td { background: #e8f0fe !important; } .responsive-img { max-width: 100%; height: auto; border-radius: var(--border-radius); box-shadow: var(--box-shadow); } figure { margin: var(--spacing-lg) auto; text-align: center; width: 100%; max-width: 100%; display: block; } figure img { margin: 0 auto; display: block; max-width: 100%; height: auto; } .img-caption { font-size: 0.9rem; color: var(--text-secondary); text-align: center; margin-top: var(--spacing-xs); font-style: italic; } .responsive-list { padding-left: 1.5rem; margin: var(--spacing-sm) 0; line-height: 1.7; } .responsive-list li { margin-bottom: var(--spacing-xs); padding-left: 0.5rem; } .responsive-list a { color: var(--primary-color); text-decoration: none; font-weight: 600; } .responsive-list a:hover { color: var(--primary-dark); text-decoration: underline; } .callout { display:flex; gap:16px; padding:20px; border-radius:12px; margin:24px 0; border-left:4px solid; } .callout-icon { font-size:24px; flex-shrink:0; } .callout-content { flex:1; } .callout-expert { background:#f0f7ff; border-color:#2563eb; } .callout-info { background:#f0fdf4; border-color:#16a34a; } .callout-warning { background:#fffbeb; border-color:#d97706; } .faq-section { margin: var(--spacing-lg) 0; padding: var(--spacing-lg) 0; border-top: 2px solid var(--border-color); } .faq-section-title { color: var(--text-primary); font-size: clamp(1.2rem, 3vw, 1.4rem); font-weight: 700; margin-bottom: var(--spacing-lg); text-align: center; } .faq-item { background: var(--background-card); border: 1px solid var(--border-color); border-radius: var(--border-radius); margin-bottom: var(--spacing-sm); overflow: hidden; transition: all 0.3s ease; } .faq-item:hover { border-color: var(--primary-color); box-shadow: var(--box-shadow-hover); transform: translateY(-2px); } .faq-question { background: var(--background-light); padding: var(--spacing-sm) var(--spacing-md); cursor: pointer; position: relative; transition: all 0.3s ease; border: none; width: 100%; text-align: left; font-family: inherit; } .faq-question:hover { background: #e8f0fe; } .faq-question-text { color: var(--text-primary); font-size: 1rem; font-weight: 600; line-height: 1.5; margin: 0; padding-right: 2rem; } .faq-answer { max-height: 0; overflow: hidden; transition: max-height 0.4s ease, padding 0.4s ease; padding: 0 var(--spacing-md); } .faq-item.active .faq-answer { max-height: 1000px; padding: 0 var(--spacing-md) var(--spacing-md); } .faq-answer-text { color: var(--text-secondary); font-size: 1rem; line-height: 1.7; margin: var(--spacing-sm) 0 0; } .about-section { background: var(--background-light); border-left: 4px solid var(--primary-color); border-radius: var(--border-radius); padding: var(--spacing-md) var(--spacing-lg); margin: var(--spacing-lg) 0; } .about-section .std-text { color: var(--text-secondary); font-size: 0.95rem; margin-bottom: 0; } .conclusion-section { border-top: 2px solid var(--border-color); padding-top: var(--spacing-lg); margin-top: var(--spacing-lg); } .conclusion-section .std-text { font-size: 1.05rem; line-height: 1.7; } @media (max-width: 768px) { .card { padding: 0.75rem; } .data-table { min-width: 100%; font-size: 0.8rem; } .data-table th, .data-table td { padding: 0.5rem 0.25rem; } .emoji-list { font-size: 0.95rem; } } @media (max-width: 480px) { .section-title { margin: var(--spacing-sm) 0 0.5rem; } .card { padding: 0.5rem; } .data-table th, .data-table td { padding: 0.4rem 0.2rem; font-size: 0.75rem; } } @media (prefers-reduced-motion: reduce) { *, *::before, *::after { animation-duration: 0.01ms !important; transition-duration: 0.01ms !important; } } </style> <!-- wp:html --> <style> /* CSS переменные для единообразного стиля */ :root { --primary-color: #4285f4; --primary-dark: #0057cc; --success-color: #34a853; --warning-color: #fbbc05; --error-color: #ea4335; --text-primary: #333333; --text-secondary: #666666; --text-light: #888888; --border-color: #e0e0e0; --background-light: #f8f9fa; --background-card: #ffffff; --background-code: #f5f5f5; --warning-bg: #fff8f8; --spacing-xs: 0.5rem; --spacing-sm: 1rem; --spacing-md: 1.5rem; --spacing-lg: 2rem; --border-radius: 8px; --border-radius-sm: 4px; --box-shadow: 0 2px 8px rgba(0,0,0,0.08); --box-shadow-hover: 0 4px 16px rgba(0,0,0,0.12); } /* Основные стили */ .article-marker { background: var(--primary-color); color: white; text-align: center; padding: var(--spacing-sm); margin: var(--spacing-lg) 0; font-size: 1rem; font-weight: 700; border-radius: var(--border-radius-sm); border: 2px dashed var(--primary-dark); box-shadow: var(--box-shadow); } .main-title { margin-bottom: var(--spacing-md); font-size: clamp(1.5rem, 4vw, 2rem); font-weight: 700; color: var(--text-primary); line-height: 1.2; } .section-title { color: var(--text-primary); margin: var(--spacing-lg) 0 var(--spacing-sm); font-size: clamp(1.2rem, 3vw, 1.4rem); font-weight: 600; line-height: 1.3; } .subsection-title { color: var(--text-primary); margin: var(--spacing-md) 0 var(--spacing-xs); font-size: clamp(1.1rem, 2.5vw, 1.2rem); font-weight: 600; } .std-text { font-size: 1rem; line-height: 1.6; margin-bottom: var(--spacing-sm); color: var(--text-primary); } /* Улучшенные карточки */ .card { border: 1px solid var(--border-color); padding: var(--spacing-sm); background: var(--background-card); border-radius: var(--border-radius); margin-bottom: var(--spacing-md); box-shadow: var(--box-shadow); transition: transform 0.2s ease, box-shadow 0.2s ease; } .card:hover { transform: translateY(-2px); box-shadow: var(--box-shadow-hover); } .warning-box { border: 1px solid var(--error-color); padding: var(--spacing-sm); background: var(--warning-bg); border-radius: var(--border-radius); margin-bottom: var(--spacing-lg); box-shadow: var(--box-shadow); } .warning-title { color: var(--error-color); margin-bottom: var(--spacing-xs); font-weight: 700; font-size: 1.1rem; } /* Emoji списки с лучшими отступами */ .emoji-list { font-size: 1rem; line-height: 1.7; margin-bottom: 0.8rem; padding: 0.8rem 0; border-bottom: 1px solid var(--border-color); color: var(--text-primary); background: transparent; } .emoji-list:last-child { border-bottom: none; margin-bottom: 0; } .emoji-list strong { color: var(--primary-color); font-weight: 600; } /* Адаптивные таблицы */ .table-container { width: 100%; overflow-x: auto; margin-bottom: var(--spacing-md); border-radius: var(--border-radius); box-shadow: var(--box-shadow); } .data-table { width: 100%; min-width: 600px; border-collapse: collapse; background: white; } .data-table th, .data-table td { padding: var(--spacing-sm); border: 1px solid var(--border-color); font-size: 0.9rem; text-align: left; } .data-table th { background: var(--primary-color); color: white; font-weight: 700; white-space: nowrap; } .data-table td:first-child { font-weight: 700; font-size: 0.9rem; } .data-table tbody tr:nth-child(even) { background: #f8f9ff; } /* Убираем синий фон с первой строки tbody */ .data-table tbody tr:first-child { background: transparent !important; color: inherit !important; } .data-table tbody tr:first-child td { background: transparent !important; color: inherit !important; } /* Правильное чередование строк */ .data-table tbody tr:nth-child(even) td { background: #f8f9ff !important; } .data-table tbody tr:nth-child(odd) td { background: white !important; } .data-table tr:hover td { background: #e8f0fe; } .data-table-caption { font-size: 0.9rem; color: var(--text-secondary); text-align: center; margin-top: var(--spacing-xs); font-style: italic; } /* Улучшенные статус-теги */ .status-tag { display: inline-block; padding: 4px 8px; color: white; border-radius: 16px; font-size: 0.75rem; font-weight: 600; text-transform: uppercase; letter-spacing: 0.5px; box-shadow: 0 2px 4px rgba(0,0,0,0.2); } .status-green { background: linear-gradient(135deg, var(--success-color), #2d8f47); } .status-blue { background: linear-gradient(135deg, var(--primary-color), #3367d6); } .status-yellow { background: linear-gradient(135deg, var(--warning-color), #f9ab00); color: #333; } .status-red { background: linear-gradient(135deg, var(--error-color), #d33b2c); } /* Адаптивные блоки кода */ .code-block { font-family: 'Courier New', Consolas, Monaco, monospace; font-size: 0.85rem; background: var(--background-code); color: var(--text-primary); padding: var(--spacing-sm); border: 1px solid var(--border-color); border-radius: var(--border-radius); margin-bottom: var(--spacing-md); overflow-x: auto; line-height: 1.5; box-shadow: var(--box-shadow); } /* Адаптивные изображения */ .responsive-img { max-width: 100%; height: auto; border-radius: var(--border-radius); box-shadow: var(--box-shadow); } .img-caption { font-size: 0.9rem; color: var(--text-secondary); text-align: center; margin-top: var(--spacing-xs); font-style: italic; } /* Адаптивные списки */ .responsive-list { padding-left: 1.5rem; margin: var(--spacing-sm) 0; line-height: 1.7; } .responsive-list li { margin-bottom: var(--spacing-xs); padding-left: 0.5rem; } .responsive-list a { color: var(--primary-color); text-decoration: none; font-weight: 600; transition: color 0.2s ease; } .responsive-list a:hover { color: var(--primary-dark); text-decoration: underline; } /* Медиа-запросы для мобильных устройств */ @media (max-width: 768px) { .article-marker { font-size: 0.9rem; padding: 0.75rem; margin: var(--spacing-sm) 0; } .card, .warning-box { padding: 0.75rem; margin-bottom: var(--spacing-sm); } .data-table { min-width: 100%; font-size: 0.8rem; } .data-table th, .data-table td { padding: 0.5rem 0.25rem; } .status-tag { font-size: 0.7rem; padding: 3px 6px; } .code-block { font-size: 0.8rem; padding: 0.75rem; } .emoji-list { font-size: 0.95rem; line-height: 1.6; } .responsive-list { padding-left: 1rem; } } @media (max-width: 480px) { .section-title { margin: var(--spacing-sm) 0 0.5rem; } .subsection-title { margin: var(--spacing-sm) 0 0.5rem; } .card, .warning-box { padding: 0.5rem; } .data-table th, .data-table td { padding: 0.4rem 0.2rem; font-size: 0.75rem; } .code-block { font-size: 0.75rem; padding: 0.5rem; } } /* Улучшение доступности */ @media (prefers-reduced-motion: reduce) { .card, .status-tag, .responsive-list a { transition: none; } } </style> <!-- /wp:html --> <style>:root{--text-primary:var(--text,#333333);--background-card:var(--bg-card,#ffffff);--background-light:var(--bg-subtle,#f8f9fa);--background-code:var(--bg-subtle,#f5f5f5);--border-color:var(--border,#e0e0e0)}</style> <!-- /wp:html --> <!-- wp:html --> <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "What causes most RPKI invalid route detections in production networks?", "acceptedAnswer": { "@type": "Answer", "text": "Configuration errors like wrong ASNs cause most invalid flags. Studies show greater than a portion of detected invalid prefixes are false positives from such mistakes, requiring careful ROA review before enforcing strict drop policies on your border routers." } }, { "@type": "Question", "name": "How frequently do routers refresh validation data from the RPKI cache?", "acceptedAnswer": { "@type": "Answer", "text": "Routers typically refresh validation data every 600 seconds via the RTR protocol. This interval balances security responsiveness with network stability, ensuring your Cisco or FRRouting devices receive regular updates without overwhelming the validator server during peak traffic periods." } }, { "@type": "Question", "name": "What is the current global coverage of routed prefix-AS pairs by ROAs?", "acceptedAnswer": { "@type": "Answer", "text": "Current ROA coverage remains near a portion of routed prefix-AS pairs globally. This gap means most routes still appear as NotFound, so operators must accept these unknown routes while gradually encouraging peers to publish ROAs to improve overall internet routing security posture." } }, { "@type": "Question", "name": "Why are there zero valid router certificates despite hundreds of thousands of ROAs?", "acceptedAnswer": { "@type": "Answer", "text": "Zero valid router certificates exist because infrastructure for cryptographic verification remains incomplete. While over 375,000 valid ROAs authorize origin ASes, the lack of router certificates proves that final step enforcement is largely absent from today's deployed BGP security architectures." } }, { "@type": "Question", "name": "What operational risk arises from setting incorrect max-length values in ROAs?", "acceptedAnswer": { "@type": "Answer", "text": "Incorrect max-length settings trigger invalid states that block legitimate traffic. Since greater than a portion of invalid detections stem from configuration errors, operators must precisely define prefix lengths to avoid self-inflicted outages while protecting against unauthorized sub-prefix hijack attempts on their network." } } ] } </script> <!-- /wp:html --> <!-- wp:html --> <style> .faq-section { margin: 24px 0; padding: 24px 0; border-top: 2px solid #e5e7eb; } .faq-section-title { color: #1a1a1a; font-size: clamp(1.2rem, 3vw, 1.4rem); font-weight: 700; margin-bottom: 24px; text-align: center; } .faq-item { background: #fff; border: 1px solid #e5e7eb; border-radius: 8px; margin-bottom: 12px; overflow: hidden; transition: all 0.3s ease; } .faq-item:hover { border-color: #2563eb; box-shadow: 0 4px 6px rgba(0,0,0,0.05); transform: translateY(-2px); } .faq-question { background: #f9fafb; padding: 12px 16px; cursor: pointer; position: relative; transition: all 0.3s ease; border: none; width: 100%; text-align: left; font-family: inherit; display: block; } .faq-question:hover { background: #e8f0fe; } .faq-question-text { color: #1a1a1a; font-size: 1rem; font-weight: 600; line-height: 1.5; margin: 0; padding-right: 2rem; display: inline-block; } .faq-answer { max-height: 0; overflow: hidden; transition: max-height 0.4s ease, padding 0.4s ease; padding: 0 16px; } .faq-item.active .faq-answer { max-height: 1000px; padding: 0 16px 16px; } .faq-answer-text { color: #4b5563; font-size: 1rem; line-height: 1.7; margin: 12px 0 0; } </style> <script> (function() { function initFAQ() { var qs = document.querySelectorAll(".faq-question"); for (var i = 0; i < qs.length; i++) { qs[i].addEventListener("click", function() { var item = this.closest(".faq-item"); var wasActive = item.classList.contains("active"); var allItems = document.querySelectorAll(".faq-item"); for (var j = 0; j < allItems.length; j++) { allItems[j].classList.remove("active"); } if (!wasActive) item.classList.add("active"); this.setAttribute("aria-expanded", String(!wasActive)); }); } } if (document.readyState === "loading") { document.addEventListener("DOMContentLoaded", initFAQ); } else { initFAQ(); } })(); </script> <!-- /wp:html --> <!-- wp:html --> <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "TechArticle", "headline": "The Role of RPKI in Modern BGP Security Architecture", "description": "As of June 2026, zero valid router certificates exist in the RPKI system despite over 375,000 valid Route Origin Authorizations. This disparity proves that w...", "author": { "@type": "Person", "name": "Evgeny Sevastyanov" }, "datePublished": "2026-03-20", "url": "https://oneuptime.com/blog/post/2026-03-20-rpki-route-origin-validation-bgp/view", "inLanguage": "en", "wordCount": 3363, "publisher": { "@type": "Organization", "name": "InterLIR" }, "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ ".article-intro", ".faq-answer" ] }, "about": [ { "@type": "Thing", "name": "RPKI Route Origin Validation" } ] } </script> <!-- /wp:html --> <!-- wp:paragraph {"className":"std-text"} --> <!-- /wp:paragraph --> <!-- wp:paragraph {"className":"std-text"} --> <p class="std-text">As of June 2026, the math doesn&#039;t add up. We have over 375,000 valid Route Origin Authorizations sitting in the global system, yet zero valid router certificates exist to enforce them. This isn&#039;t a gap; it&#039;s a chasm. IP holders are signing <strong>ROA</strong> records, but the infrastructure to cryptographically verify <strong>BGP</strong> announcements at the router level remains critically incomplete. The industry relies on <strong>Regional Internet Registries</strong> like <strong>ARIN</strong> and <strong>RIPE</strong> to publish data, but that data dies in the validator unless we force the final step of enforcement.</p>