[Podcast] Kentik’s view of secure BGP in 2025

By on 10 Jul 2025

Category: Tech matters

Tags: , , , , ,

Blog home

In this episode of PING, Kentik’s Doug Madory discusses the state of play in secure Border Gateway Protocol (BGP) across 2024 and 2025. Drawing on Kentik’s internal measurements of BGP behaviour and Internet flow data, alongside the University of Oregon’s RouteViews Archive, Doug analyses both the public view of BGP routing and the dynamics of routing changes. He also incorporates data from systems such as the global Resource Public Key Infrastructure (RPKI) and Internet Routing Registries (IRRs).

RPKI demands two outcomes. Firstly, for IP address holders to create Route Origin Authorizations (ROAs), which declare which networks are allowed to originate their prefixes and secondly, for BGP routers to perform Route Origin Validation (ROV) based on these ROAs. While creating ROAs is relatively easy, especially when using RIR-hosted tools, implementing ROV is more complex and must be done carefully, often resulting in slower and more cautious adoption.

Doug has been independently tracking ROA creation and ROV deployment, along with notable routing incidents in the default-free zone, to assess their impact on networks using RPKI and the broader Internet.

Read more about RPKI and BGP on the APNIC Blog, the web, and at Doug’s own blogging at Kentik:

Subscribe and share your story

You can stream and subscribe to PING via the following channels:

If you’re interested in sharing your insights or research, please get in touch — we’re always looking for great stories from the community. Please let us know what you think of the podcast and the APNIC Blog so we can keep improving.

Rate this article

The views expressed by the authors of this blog are their own and do not necessarily reflect the views of APNIC. Please note a Code of Conduct applies to this blog.

Leave a Reply

Your email address will not be published. Required fields are marked *

Top