Routinator

Routinator is free, open source RPKI Relying Party software. The application is designed to be secure and easy to use. It is a lightweight implementation that can run effortlessly on almost any operating system using minimal resources.

Route Origin Validation, Simplified

Routinator is a comprehensive solution that runs as a service to perform periodic RPKI validation. It includes an integrated RPKI-to-Router (RTR) server, a command-line and web interface, an API, and monitoring endpoints for metrics. It includes support for modern RPKI standards, such as Autonomous System Provider Authorisations (ASPA).

Routinator runs on most hardware and platforms, with packages for Debian, Ubuntu, RHEL, and compatible systems like Rocky Linux; Docker images are also available.

Note

To learn more about RPKI and route origin validation, NLnet Labs has written extensive RPKI documentation to complement the Routinator user guide.

World-class Resilience

Routinator is integrated into the critical infrastructure of thousands of global networks to safeguard routing systems against route leaks and malicious hijacks. As a result, Routinator is part of multiple security research initiatives, such as Project Glasswing, to ensure continuous vulnerability assessment and resilience testing.

Users with a support agreement receive early access to this information under a non-disclosure agreement.

Flexible RPKI-to-Router (RTR) support

Routinator has a built-in RTR server to let routers fetch verified RPKI data, but you can also run RTR as a separate daemon using our RPKI data proxy RTRTR, letting you centralise validation and securely distribute processed data to various locations.

Control and Insight

The built-in HTTP server offers a user interface and API endpoints for the various file formats, as well as logging, status and Prometheus metrics.

The user interface allows users to validate prefixes against ASNs found in BGP announcements. Next to that it allows users to lookup related prefixes for the prefix they're searching for. These related prefixes can be more- or less-specific prefixes, routed in BGP or prefixes that are allocated by one of the five Regional Internet Registries.

Professional Services

Professional support services are available for Routinator, offering premium support, consultancy hours, early security warnings under non-disclosure, as well as priority feature requests.

Routinator and all supporting libraries are licensed under the BSD 3-Clause License.