--- title: Who’s running all those tiny RPKI servers? | daily.dev description: Small RPKI publication servers — run by ISPs, hobbyists, cloud providers, and RPKIaaS companies — form a quiet but important part of Internet routing security.... canonical: https://daily.dev/posts/who-s-running-all-those-tiny-rpki-servers--ota2fdoxt twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Who’s running all those tiny RPKI servers? | daily.dev og:description: Small RPKI publication servers — run by ISPs, hobbyists, cloud providers, and RPKIaaS companies — form a quiet but important part of Internet routing security.... og:url: https://daily.dev/posts/who-s-running-all-those-tiny-rpki-servers--ota2fdoxt og:image: https://api.daily.dev/og/posts/Ota2FdOxT.png og:image:alt: Who’s running all those tiny RPKI servers? og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Who’s running all those tiny RPKI servers? **[Hacker News](https://daily.dev/sources/hn)** · 14 min read · 0 upvotes · 0 comments ## Summary Small RPKI publication servers — run by ISPs, hobbyists, cloud providers, and RPKIaaS companies — form a quiet but important part of Internet routing security. A research study analyzed 2,467 ROA objects across these servers, finding 91% valid. Key concerns include widespread use of the maxLength parameter (54% of ROAs), with 19.6% of those lacking BGP coverage for authorized sub-prefixes, creating potential sub-prefix hijack exposure. Operators run their own servers for cross-RIR simplicity, research, operational control, or simply to learn. One server (repo.rpki.space) showed signs of spam infrastructure abuse. BGPsec remains essentially undeployed. The covered IP space is tiny in aggregate but includes critical services like government domains. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [ASPA: making Internet routing more secure](https://daily.dev/posts/aspa-making-internet-routing-more-secure-r19ceuyg1) · Cloudflare · 0 upvotes · 0 comments - [Cloudflare Introduces Support for ASPA, an Emerging Internet Routing Security Standard](https://daily.dev/posts/cloudflare-introduces-support-for-aspa-an-emerging-internet-routing-security-standard-9fcps0m7k) · InfoQ · 0 upvotes · 0 comments - [How far can you go with IX Route Servers only?](https://daily.dev/posts/how-far-can-you-go-with-ix-route-servers-only--pzqn4hqop) · Benjojo's Blog · 0 upvotes · 0 comments - [RaccoonLine Publishes Analysis of VPN Data Disclosure Risks and the Shift Toward Decentralized Routing](https://daily.dev/posts/raccoonline-publishes-analysis-of-vpn-data-disclosure-risks-and-the-shift-toward-decentralized-routi-4bgov5vik) · Latest Hacking News · 0 upvotes · 0 comments - [Telecom Attack Surface: SS7, BGP & Nation-State Intrusions](https://daily.dev/posts/telecom-attack-surface-ss7-bgp-nation-state-intrusions-v1wejqstm) · Cyble · 0 upvotes · 0 comments --- Tags: [#bgp](https://daily.dev/tags/bgp) [View this post on daily.dev](https://daily.dev/posts/who-s-running-all-those-tiny-rpki-servers--ota2fdoxt) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Who’s running all those tiny RPKI servers?","url":"https://daily.dev/posts/who-s-running-all-those-tiny-rpki-servers--ota2fdoxt","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/who-s-running-all-those-tiny-rpki-servers--ota2fdoxt"},"datePublished":"2026-07-15T14:24:10.295Z","dateModified":"2026-07-15T14:41:32.434Z","description":"Small RPKI publication servers — run by ISPs, hobbyists, cloud providers, and RPKIaaS companies — form a quiet but important part of Internet routing security....","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3ab63c367708caf5e4116223f4801751?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3ab63c367708caf5e4116223f4801751?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/who-s-running-all-those-tiny-rpki-servers--ota2fdoxt","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"bgp","timeRequired":"PT14M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"Who’s running all those tiny RPKI servers?"}]} ```