Internet Assigned Numbers Authority • Domains • Protocols • Numbers • About Resource Public Key Infrastructure (RPKI) Created 2011-09-08 Last Updated 2026-07-28 Available Formats [IMG] XML [IMG] HTML [IMG] TXT Registries Included Below • RPKI Signed Objects • RPKI Repository Name Schemes • rpki-rtr-pdu • rpki-rtr-error • BGPsec Capability • BGPsec_Path Flags • BGPsec Algorithm Suites RPKI Signed Objects Registration Procedure(s) Standards Action Reference [RFC 6488] Note Objects of the types listed in this registry, as well as RPKI resource certificates and CRLs, are expected to be validated using the RPKI. Available Formats [IMG] CSV Name OID Reference Route Origination Authorization 1.2.840.113549.1.9.16.1.24 [RFC 9582] Manifest 1.2.840.113549.1.9.16.1.26 [RFC 9286] Ghostbusters (DEPRECATED) 1.2.840.113549.1.9.16.1.35 [RFC 6493]; [Moving RFC 6493 to Historic] Autonomous System Provider Authorization (TEMPORARY - registered 2021-11-08, 1.2.840.113549.1.9.16.1.49 [draft-ietf-sidrops-aspa-profile-16] extension registered 2025-09-19, expires 2026-11-08) Trust Anchor Key 1.2.840.113549.1.9.16.1.50 [RFC 9691, Section 2.1] Signed Checklist 1.2.840.113549.1.9.16.1.48 [RFC 9323] RPKI Repository Name Schemes Registration Procedure(s) IETF Review Reference [RFC 6481] Available Formats [IMG] CSV Filename Extension RPKI Object Reference .asa Autonomous System Provider Authorization (TEMPORARY - registered 2021-11-08, extension [draft-ietf-sidrops-aspa-profile-16] registered 2025-09-19, expires 2026-11-08) .ccr Canonical Cache Representation [RFC-ietf-sidrops-rpki-ccr-11] .cdr Community Definition Reference (TEMPORARY - registered 2026-06-23, expires 2027-06-23) [draft-ietf-grow-yang-bgp-communities-08] .cer Certificate [RFC 6481] .crl Certificate Revocation List [RFC 6481] .gbr (DEPRECATED) Ghostbusters Record [RFC 6493]; [Moving RFC 6493 to Historic] .mft Manifest [RFC 6481] .roa Route Origination Authorization [RFC 9582] .sig Signed Checklist [RFC 9323] .tak Trust Anchor Key [RFC 9691] rpki-rtr-pdu Registration Procedure(s) RFC Required (Standards Track or Experimental) Reference [RFC 6810] Available Formats [IMG] CSV Protocol Version PDU Type Description Reference 0-2 0 Serial Notify [RFC 6810]; [RFC 8210]; [RFC-ietf-sidrops-8210bis-10] 0-2 1 Serial Query [RFC 6810]; [RFC 8210]; [RFC-ietf-sidrops-8210bis-10] 0-2 2 Reset Query [RFC 6810]; [RFC 8210]; [RFC-ietf-sidrops-8210bis-10] 0-2 3 Cache Response [RFC 6810]; [RFC 8210]; [RFC-ietf-sidrops-8210bis-10] 0-2 4 IPv4 Prefix [RFC 6810]; [RFC 8210]; [RFC-ietf-sidrops-8210bis-10] 0-2 5 Unassigned 0-2 6 IPv6 Prefix [RFC 6810]; [RFC 8210]; [RFC-ietf-sidrops-8210bis-10] 0-2 7 End of Data [RFC 6810]; [RFC 8210]; [RFC-ietf-sidrops-8210bis-10] 0-2 8 Cache Reset [RFC 6810]; [RFC 8210]; [RFC-ietf-sidrops-8210bis-10] 0 9 Reserved [RFC 8210] 1-2 9 Router Key [RFC 8210]; [RFC-ietf-sidrops-8210bis-10] 0-2 10 Error Report [RFC 6810]; [RFC 8210]; [RFC-ietf-sidrops-8210bis-10] 0-1 11 Reserved [RFC 8210]; [RFC-ietf-sidrops-8210bis-10] 2 11 ASPA [RFC-ietf-sidrops-8210bis-10] 0-2 12-254 Unassigned 0-2 255 Reserved [RFC 6810]; [RFC 8210]; [RFC-ietf-sidrops-8210bis-10] rpki-rtr-error Registration Procedure(s) Expert Review Expert(s) Keyur Patel (Primary), John G. Scudder (Secondary) Reference [RFC 6810] Available Formats [IMG] CSV Error Code Description Reference 0 Corrupt Data [RFC 6810] 1 Internal Error [RFC 6810] 2 No Data Available [RFC 6810] 3 Invalid Request [RFC 6810] 4 Unsupported Protocol Version [RFC 6810] 5 Unsupported PDU Type [RFC 6810] 6 Withdrawal of Unknown Record [RFC 6810] 7 Duplicate Announcement Received [RFC 6810] 8 Unexpected Protocol Version [RFC 8210] 9-254 Unassigned 255 Reserved [RFC 6810] BGPsec Capability Registration Procedure(s) Standards Action Reference [RFC 8205] Available Formats [IMG] CSV Bits Field Reference 0-3 Version [RFC 8205] Value = 0x0 4 Direction [RFC 8205] (Both possible values 0 and 1 are fully specified by [RFC 8205]) 5-7 Unassigned [RFC 8205] Value = 000 (in binary) BGPsec_Path Flags Registration Procedure(s) Standards Action Reference [RFC 8205] Available Formats [IMG] CSV Flag Description Reference Confed_Segment 0 Bit value = 1 means Flag set (indicates Confed_Segment) [RFC 8205] Bit value = 0 is default 1-7 Unassigned [RFC 8205] Value: All 7 bits set to zero BGPsec Algorithm Suites Registration Procedure(s) Standards Action Reference [RFC 8608] Available Formats [IMG] CSV Algorithm Suite Identifier Digest Algorithm Signature Algorithm Reference 0x00 Reserved Reserved [RFC 8608] [National Institute of Standards and Technology (NIST), U.S. Department of Commerce, 0x01 SHA-256 ECDSA P-256 "Digital Signature Standard", FIPS Publication 186-4, July 2013.]; [National Institute of Standards and Technology (NIST), U.S. Department of Commerce, "Secure Hash Standard", FIPS Publication 180-4, August 2015.]; [RFC 6090]; [RFC 8608] 0x02-0xF6 Unassigned Unassigned 0xF7-0xFA Experimentation Experimentation [RFC 8608] 0xFB-0xFE Documentation Documentation [RFC 8608] 0xFF Reserved Reserved [RFC 8608] Licensing Terms