RPKI and BGP: our path to securing Internet Routing

This post details Cloudflare's proactive deployment of RPKI for securing BGP routing decisions, signing its own routes, and offering an RTR server to encourage wider adoption of route origin validation. It explains the technical underpinnings of BGP and RPKI, Cloudflare's implementation strategy, and the development of GoRTR to securely distribute RPKI caches. The post also highlights the importance of certificate transparency and ongoing efforts to combat route leaks and promote RPKI adoption.