Abstract
Policy 2025-02 requires that the RIPE NCC revokes persistently non-functional delegated RPKI CAs.
This seemingly simple request gets quite interesting when one zooms in on the details: how do we actually determine that a CA is non-functional? And how can we help operators of delegated CAs to identity and fix their issues?
In this talk we will explain:
* the various moving parts of delegated CAs, publication servers, and RPKI validation interconnect
* how we monitor delegated CAs, and
* what troubleshooting tools we can provide delegated CAs operators with
Recording
Speakers
Tim Bruijnzeels
Bart Bakker
Specialist Software Engineer working on Internet Routing Security at RIPE NCC.
Rate this talk
Rating is closed.