互联网路由安全技术RPKI的全球覆盖率在过去一年取得显著进展1。截至2026年9月，有效路由的RPKI保护比例已达70.3%，相比2025年9月的54.0%增长了16.4个百分点1。这一技术通过对路由公告进行签名认证，有效防止了错误或恶意的路由声明传播1。
中国在这一增长中扮演了关键角色1。该国IPv4地址在有效路由中的比例从3.7%激增至83.0%，单独贡献了全球增长的近60%1。这种防护效果的提升也体现在路由观测数据中：被认为无效的路由仅被2个观测点检测到，而有效路由则被596个观测点观测到1。
与此同时，用于验证路由路径的新兴技术ASPA也在快速部署1。发布ASPA记录的网络数量从2025年9月的131个增至2026年9月的3272个，增长超过25倍1。不过该技术的验证覆盖率仍相对较低，2026年9月仅9.7%的观测路由通过了ASPA检查，其中只有3.5%为真正经过验证的路由1。
尽管保护范围不断扩大，当前RPKI保护仍存在不均衡现象1。美国拥有全球未受RPKI保护地址空间的近60%，其中约四分之一属于美国国防部1。同时，在已有RPKI覆盖的IPv4路由中，16.2%存在权限过大的ROA记录，IPv6上这一比例更高至20.9%1。
The adoption of RPKI (Resource Public Key Infrastructure) technology has accelerated significantly, with valid route coverage expanding from 54.0% in September 2025 to 70.3% in September 2026—a gain of 16.4 percentage points 1. This cryptographic authentication system prevents erroneous or malicious routing announcements from spreading across the internet, making invalid routes increasingly difficult to propagate 1. Invalid routes are now observed by only 2 observation points globally, compared to 596 observation points monitoring valid routes 1.
China's contribution has been substantial to this growth 1. The proportion of valid routes originating from Chinese IPv4 addresses surged from 3.7% to 83.0% during the same period, accounting for nearly 60% of total global RPKI coverage gains 1. Meanwhile, the emerging ASPA (Autonomous System Provider Authorization) technology, which validates routing paths, has grown rapidly with network deployments publishing ASPA records increasing 25-fold from 131 networks in September 2025 to 3,272 networks in September 2026 1. However, ASPA adoption remains limited; only 9.7% of observed routes passed ASPA validation in September 2026, with just 3.5% representing fully verified paths 1.
Despite progress, vulnerabilities persist 1. Among IPv4 routes protected by RPKI, 16.2% contain overly permissive ROA (Route Origin Authorization) records, compared to 20.9% for IPv6 1. The United States holds approximately 60% of the world's RPKI-unprotected address space, roughly one-quarter of which belongs to the U.S. Department of Defense 1. The historical impact of routing attacks underscores the importance of these protections: the 2008 Pakistan Telecom incident lasted approximately 2 hours and redirected global YouTube traffic 1.
评论
还没有评论，欢迎留下第一条。