Re: Cloudflare's rpki.json file is missing IPv4 ROAs longer than /24

On Wed, Sep 18, 2024 at 07:33:37AM -0400, Steven Wallace wrote:

Internet2 uses Cloudflare’s https://rpki.cloudflare.com/rpki.json as an alternate source for RPKI-ROA information. We recently discovered that this file omits IPv4 ROAs longer than /24. It would be helpful if it included all ROAs.

Yup, that's a clear bug. Perhaps a suitable alternative for your application is https://console.rpki-client.org/rpki.json.gz (or rpki.json) The above file is produced by rpki-client instances and refreshed every few minutes. The backend servers are operated by me. The file format follows roughly the same JSON format as CF's, but has been extended with per-VRP-specific expiry dates expressed as Unix timestamps. Kind regards, Job