Implementing Decentralized RPKI with Blockchain Technology

["Brandon Z." <Brandon () huize asia>]

Hi there,

Currently, due to political factors, some countries are not particularly
proactive in deploying RPKI. Imagine if the RIR of a region were forced to
revoke all IP resources of a particular country from RPKI, effectively
isolating that country from the global internet.

To address this, one approach is for autonomous networks within a region to
establish two trusted RPKI CA servers: one from the major RIRs and another
locally managed. The locally managed CA would take precedence, allowing
autonomous networks to submit their IP resources to the RPKI server of
their peers (and potentially backed by a national mandate to trust this
CA). This setup could prevent a scenario where an entire country’s IP
resources are revoked, leading to all IPs being marked as invalid.

Another concept is to use blockchain technology. While cryptocurrencies use
computational power to verify ownership, BGP could use peer count. If an IP
resource is marked as valid by a majority of high-influence networks (with
many peers), it could be trusted by the entire internet.

Could this approach work? Perhaps there’s existing research on similar
methods?
*Brandon Z.*
HUIZE LTD
www.huize.asia  <https://huize.asia/>| www.ixp.su | Twitter

This e-mail and any attachments or any reproduction of this e-mail in
whatever manner are confidential and for the use of the addressee(s) only.
HUIZE LTD can’t take any liability and guarantee of the text of the email
message and virus.