<div dir="ltr"><br><br><div class="gmail_quote"><div dir="ltr">On Fri, Nov 23, 2018 at 6:12 PM Jeff McAdams <<a href="mailto:jeffm@iglou.com">jeffm@iglou.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
<br>
On November 23, 2018 4:48:14 PM EST, Christopher Morrow <<a href="mailto:morrowc.lists@gmail.com" target="_blank">morrowc.lists@gmail.com</a>> wrote:<br>
<br>
>I think there are 3 options:<br>
>  ripe validator v2 (potentially v3?) -<br>
><a href="https://github.com/RIPE-NCC/rpki-validator" rel="noreferrer" target="_blank">https://github.com/RIPE-NCC/rpki-validator</a><br>
><br>
><a href="https://github.com/RIPE-NCC/rpki-validator-3" rel="noreferrer" target="_blank">https://github.com/RIPE-NCC/rpki-validator-3</a><br>
>  <a href="http://rpki.net" rel="noreferrer" target="_blank">rpki.net</a> validator - <a href="https://github.com/dragonresearch/rpki.net" rel="noreferrer" target="_blank">https://github.com/dragonresearch/rpki.net</a><br>
>  bbn rpstir - <a href="https://github.com/bgpsecurity/rpstir" rel="noreferrer" target="_blank">https://github.com/bgpsecurity/rpstir</a><br>
<br>
Like I said, validation and caching, "relying party", has several options...several of which are relatively easy to run and manage.  It's the CA and publishing for which no really good options (that I've found, at least) are available currently.<br></blockquote><div><br></div><div>the ca bits do exist in <a href="http://rpki.net">rpki.net</a>'s software set...</div><div>they are a tad fiddly to setup/run though, yes. </div></div></div>