On Fri, Nov 23, 2018 at 6:12 PM Jeff McAdams <jeffm@iglou.com> wrote:


On November 23, 2018 4:48:14 PM EST, Christopher Morrow <morrowc.lists@gmail.com> wrote:

>I think there are 3 options:
>  ripe validator v2 (potentially v3?) -
>https://github.com/RIPE-NCC/rpki-validator
>
>https://github.com/RIPE-NCC/rpki-validator-3
rpki.net validator - https://github.com/dragonresearch/rpki.net
>  bbn rpstir - https://github.com/bgpsecurity/rpstir

Like I said, validation and caching, "relying party", has several options...several of which are relatively easy to run and manage.  It's the CA and publishing for which no really good options (that I've found, at least) are available currently.

the ca bits do exist in rpki.net's software set...
they are a tad fiddly to setup/run though, yes.