Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper analyzes the causal relationship between flaws in RPKI RFCs and vulnerabilities in RPKI implementations and deployments. Through differential fuzzing of RPKI implementations and large-scale Internet crawling, the authors identified 61 inconsistencies in validation behavior, tracing 23 directly to flaws in 50 different RFCs. They further discovered two novel vulnerabilities and propose mitigation strategies, including a new alerting service.
Vague, conflicting, or underspecified requirements in RPKI RFCs are leading to widespread inconsistencies and vulnerabilities in real-world routing security.
The Resource Public Key Infrastructure (RPKI) secures the Internet's routing system by defining a complex trust and validation framework for certificates, Route Origin Authorizations (ROAs), manifests, and Certificate Revocation Lists (CRLs). These mechanisms are specified across dozens of RFCs. This paper presents the first comprehensive analysis of the causal link between flaws in RPKI Requests for Comments (RFCs) and vulnerabilities in implementations and real-world deployments. We reveal how vague, conflicting, or underspecified requirements in 50 RPKI RFCs propagate into inconsistent implementation behavior and operational failures. We conduct the first large-scale, impact-driven evaluation of RPKI specifications. Our methodology combines differential fuzzing of major RPKI implementations with Internet-wide crawling and validation log analysis, enabling us to trace practical vulnerabilities back to flawed RFC requirements. We uncover 61 previously undocumented inconsistencies in validation behavior, trace 23 directly to RFC flaws, and identify two novel vulnerabilities that were assigned CVEs. Our findings reveal that these are not isolated coding errors but rather systemic issues inherent in how RPKI standards are written, interpreted, and implemented. To mitigate these threats, we propose concrete recommendations and introduce a novel alerting service that monitors and reports live inconsistencies in RPKI deployments. Our open-source datasets, code, and tools support reproducibility and further research.