--- title: Rapid Progress in BGP Route Origin Validation «... description: BGP Route Origin Validation (ROV) has seen remarkable progress among Tier-1 internet service providers, with nearly all measurable Tier-1 providers now... canonical: https://daily.dev/posts/rapid-progress-in-bgp-route-origin-validation-ipspace-net-blog-yx6ymapde twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Rapid Progress in BGP Route Origin Validation « ipSpace.net blog | daily.dev og:description: BGP Route Origin Validation (ROV) has seen remarkable progress among Tier-1 internet service providers, with nearly all measurable Tier-1 providers now... og:url: https://daily.dev/posts/rapid-progress-in-bgp-route-origin-validation-ipspace-net-blog-yx6ymapde og:image: https://api.daily.dev/og/posts/yx6YMaPdE.png og:image:alt: Rapid Progress in BGP Route Origin Validation « ipSpace.net blog og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Rapid Progress in BGP Route Origin Validation « ipSpace.net blog **[ipSpace.net Blog](https://daily.dev/sources/ipspace)** · 3 min read · 0 upvotes · 0 comments ## Summary BGP Route Origin Validation (ROV) has seen remarkable progress among Tier-1 internet service providers, with nearly all measurable Tier-1 providers now achieving perfect ROV scores according to academic research. MANRS has also improved its measurement methodology, tracking how thoroughly ISPs sign prefixes via RPKI and register them in IRR. While Tier-1 ROV adoption shields downstream networks from distant routing attacks, regional ISPs — illustrated by dismal results among Italian ISPs — still lag significantly. Geoff Huston's team, using Cloudflare RPKI beacons and browser-based measurements, provides a global view of end-user ROV protection, revealing uneven adoption worldwide. Significant work remains before Internet routing is broadly secure and resilient. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How well are Tier-1 internet providers doing with RPKI Route Origin Validation? Almost all Tier-1 service providers measured by academic researchers received a perfect ROV score for blocking invalid prefixes. This was verified using the RoVista measurement tool, which independently assessed how well individual autonomous systems use Route Origin Validation rather than relying on self-reported MANRS declarations. ROV at the Tier-1 level also shields downstream networks from distant routing attacks. _Network engineers tracking BGP security posture across providers follow developments like these on daily.dev._ ### What is the limitation of Tier-1 ROV adoption for regional ISP customers? Tier-1 ROV adoption protects networks from routing attacks originating in distant regions, but it cannot protect customers of a regional ISP from bogus route announcements created within the same region. Regional ISPs must independently implement ROV for local protection, and many — as illustrated by Italian ISP data from RoVista — still show poor adoption rates. _Engineers responsible for regional network security can track ROV adoption trends and advisories on daily.dev._ ## Similar posts on daily.dev - [Who’s running all those tiny RPKI servers?](https://daily.dev/posts/who-s-running-all-those-tiny-rpki-servers--ota2fdoxt) · Hacker News · 0 upvotes · 0 comments - [ASPA: making Internet routing more secure](https://daily.dev/posts/aspa-making-internet-routing-more-secure-r19ceuyg1) · Cloudflare · 0 upvotes · 0 comments - [A framework for measuring Internet resilience](https://daily.dev/posts/a-framework-for-measuring-internet-resilience-ej9eg4ku0) · Cloudflare · 0 upvotes · 0 comments - [Cloudflare Introduces Support for ASPA, an Emerging Internet Routing Security Standard](https://daily.dev/posts/cloudflare-introduces-support-for-aspa-an-emerging-internet-routing-security-standard-9fcps0m7k) · InfoQ · 0 upvotes · 0 comments - [How far can you go with IX Route Servers only?](https://daily.dev/posts/how-far-can-you-go-with-ix-route-servers-only--pzqn4hqop) · Benjojo's Blog · 0 upvotes · 0 comments --- Tags: [#bgp](https://daily.dev/tags/bgp) [View this post on daily.dev](https://daily.dev/posts/rapid-progress-in-bgp-route-origin-validation-ipspace-net-blog-yx6ymapde) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Rapid Progress in BGP Route Origin Validation « ipSpace.net blog","url":"https://daily.dev/posts/rapid-progress-in-bgp-route-origin-validation-ipspace-net-blog-yx6ymapde","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/rapid-progress-in-bgp-route-origin-validation-ipspace-net-blog-yx6ymapde"},"datePublished":"2026-08-11T08:55:57.114Z","dateModified":"2026-08-11T09:28:42.326Z","description":"BGP Route Origin Validation (ROV) has seen remarkable progress among Tier-1 internet service providers, with nearly all measurable Tier-1 providers now...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0c7b2348d453cd81b274daa38d3f6612?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0c7b2348d453cd81b274daa38d3f6612?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"ipSpace.net Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"ipSpace.net Blog","logo":"https://media.daily.dev/image/upload/s--xS7E82MT--/f_auto,q_auto/v1786438303/logos/ipspace?_a=BAMAMicg0","url":"https://daily.dev/sources/ipspace"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/rapid-progress-in-bgp-route-origin-validation-ipspace-net-blog-yx6ymapde","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"bgp","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"ipSpace.net Blog","item":"https://daily.dev/sources/ipspace"},{"@type":"ListItem","position":3,"name":"Rapid Progress in BGP Route Origin Validation « ipSpace.net blog"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/rapid-progress-in-bgp-route-origin-validation-ipspace-net-blog-yx6ymapde#faq","mainEntity":[{"@type":"Question","name":"How well are Tier-1 internet providers doing with RPKI Route Origin Validation?","acceptedAnswer":{"@type":"Answer","text":"Almost all Tier-1 service providers measured by academic researchers received a perfect ROV score for blocking invalid prefixes. This was verified using the RoVista measurement tool, which independently assessed how well individual autonomous systems use Route Origin Validation rather than relying on self-reported MANRS declarations. ROV at the Tier-1 level also shields downstream networks from distant routing attacks. Network engineers tracking BGP security posture across providers follow developments like these on daily.dev."}},{"@type":"Question","name":"What is the limitation of Tier-1 ROV adoption for regional ISP customers?","acceptedAnswer":{"@type":"Answer","text":"Tier-1 ROV adoption protects networks from routing attacks originating in distant regions, but it cannot protect customers of a regional ISP from bogus route announcements created within the same region. Regional ISPs must independently implement ROV for local protection, and many — as illustrated by Italian ISP data from RoVista — still show poor adoption rates. Engineers responsible for regional network security can track ROV adoption trends and advisories on daily.dev."}}]} ```