Resource Public Key Infrastructure (RPKI)

Created

  • 2011-09-08

Last Updated

  • 2026-07-28

Available Formats

RPKI Signed Objects

Registration Procedure(s)

  • Standards Action

Reference

  • RFC 6488: Signed Object Template for the Resource Public Key Infrastructure (RPKI)

Note

Objects of the types listed in this registry, as well as RPKI resource certificates and CRLs, are expected to be validated using the RPKI.

Available Formats

Name OID Reference
Route Origination Authorization 1.2.840.113549.1.9.16.1.24 RFC 9582
Manifest 1.2.840.113549.1.9.16.1.26 RFC 9286
Ghostbusters (DEPRECATED) 1.2.840.113549.1.9.16.1.35 RFC 6493; Moving RFC 6493 to Historic
Autonomous System Provider Authorization (TEMPORARY - registered 2021-11-08, extension registered 2025-09-19, expires 2026-11-08) 1.2.840.113549.1.9.16.1.49 draft-ietf-sidrops-aspa-profile-16
Trust Anchor Key 1.2.840.113549.1.9.16.1.50 RFC 9691, Section 2.1
Signed Checklist 1.2.840.113549.1.9.16.1.48 RFC 9323

RPKI Repository Name Schemes

Registration Procedure(s)

  • IETF Review

Reference

  • RFC 6481: A Profile for Resource Certificate Repository Structure

Available Formats

Filename Extension RPKI Object Reference
.asa Autonomous System Provider Authorization (TEMPORARY - registered 2021-11-08, extension registered 2025-09-19, expires 2026-11-08) draft-ietf-sidrops-aspa-profile-16
.ccr Canonical Cache Representation RFC-ietf-sidrops-rpki-ccr-11
.cdr Community Definition Reference (TEMPORARY - registered 2026-06-23, expires 2027-06-23) draft-ietf-grow-yang-bgp-communities-08
.cer Certificate RFC 6481
.crl Certificate Revocation List RFC 6481
.gbr (DEPRECATED) Ghostbusters Record RFC 6493; Moving RFC 6493 to Historic
.mft Manifest RFC 6481
.roa Route Origination Authorization RFC 9582
.sig Signed Checklist RFC 9323
.tak Trust Anchor Key RFC 9691

rpki-rtr-pdu

Registration Procedure(s)

  • RFC Required (Standards Track or Experimental)

Reference

  • RFC 6810: The Resource Public Key Infrastructure (RPKI) to Router Protocol

Available Formats

Protocol Version PDU Type Description Reference
0-2 0 Serial Notify RFC 6810; RFC 8210; RFC-ietf-sidrops-8210bis-10
0-2 1 Serial Query RFC 6810; RFC 8210; RFC-ietf-sidrops-8210bis-10
0-2 2 Reset Query RFC 6810; RFC 8210; RFC-ietf-sidrops-8210bis-10
0-2 3 Cache Response RFC 6810; RFC 8210; RFC-ietf-sidrops-8210bis-10
0-2 4 IPv4 Prefix RFC 6810; RFC 8210; RFC-ietf-sidrops-8210bis-10
0-2 5 Unassigned
0-2 6 IPv6 Prefix RFC 6810; RFC 8210; RFC-ietf-sidrops-8210bis-10
0-2 7 End of Data RFC 6810; RFC 8210; RFC-ietf-sidrops-8210bis-10
0-2 8 Cache Reset RFC 6810; RFC 8210; RFC-ietf-sidrops-8210bis-10
0 9 Reserved RFC 8210
1-2 9 Router Key RFC 8210; RFC-ietf-sidrops-8210bis-10
0-2 10 Error Report RFC 6810; RFC 8210; RFC-ietf-sidrops-8210bis-10
0-1 11 Reserved RFC 8210; RFC-ietf-sidrops-8210bis-10
2 11 ASPA RFC-ietf-sidrops-8210bis-10
0-2 12-254 Unassigned
0-2 255 Reserved RFC 6810; RFC 8210; RFC-ietf-sidrops-8210bis-10

rpki-rtr-error

Registration Procedure(s)

  • Expert Review

Expert(s)

  • Keyur Patel (Primary), John G. Scudder (Secondary)

Reference

  • RFC 6810: The Resource Public Key Infrastructure (RPKI) to Router Protocol

Available Formats

Error Code Description Reference
0 Corrupt Data RFC 6810
1 Internal Error RFC 6810
2 No Data Available RFC 6810
3 Invalid Request RFC 6810
4 Unsupported Protocol Version RFC 6810
5 Unsupported PDU Type RFC 6810
6 Withdrawal of Unknown Record RFC 6810
7 Duplicate Announcement Received RFC 6810
8 Unexpected Protocol Version RFC 8210
9-254 Unassigned
255 Reserved RFC 6810

BGPsec Capability

Registration Procedure(s)

  • Standards Action

Reference

Available Formats

Bits Field Reference
0-3 Version
Value = 0x0		 RFC 8205
4 Direction
(Both possible values 0 and 1 are fully specified by RFC 8205)		 RFC 8205
5-7 Unassigned
Value = 000 (in binary)		 RFC 8205

BGPsec_Path Flags

Registration Procedure(s)

  • Standards Action

Reference

Available Formats

Flag Description Reference
0 Confed_Segment
Bit value = 1 means Flag set (indicates Confed_Segment)
Bit value = 0 is default		 RFC 8205
1-7 Unassigned
Value: All 7 bits set to zero		 RFC 8205

BGPsec Algorithm Suites

Registration Procedure(s)

  • Standards Action

Reference

  • RFC 8608: BGPsec Algorithms, Key Formats, and Signature Formats

Available Formats

Algorithm Suite Identifier Digest Algorithm Signature Algorithm Reference
0x00 Reserved Reserved RFC 8608
0x01 SHA-256 ECDSA P-256 National Institute of Standards and Technology (NIST), U.S. Department of Commerce, "Digital Signature Standard", FIPS Publication 186-4, July 2013.; National Institute of Standards and Technology (NIST), U.S. Department of Commerce, "Secure Hash Standard", FIPS Publication 180-4, August 2015.; RFC 6090; RFC 8608
0x02-0xF6 Unassigned Unassigned
0xF7-0xFA Experimentation Experimentation RFC 8608
0xFB-0xFE Documentation Documentation RFC 8608
0xFF Reserved Reserved RFC 8608