Routinator, RPKI route origin validation that feeds validated prefixes to your routers over the RTR protocol.
Routinator is open source RPKI Relying Party software from NLnet Labs. It fetches Resource Public Key Infrastructure data from the five Regional Internet Registry trust anchors, cryptographically validates the Route Origin Authorisations, and serves the resulting Validated ROA Payloads to your routers over the RTR protocol so they can drop or de prefer BGP routes with an invalid origin. A single self contained Rust binary with no external database also exposes a built in status web interface, Prometheus metrics, and a JSON and CSV data API.
The cloudimg image is hardened and fully patched with Routinator preconfigured and running as a dedicated non root service. The read only status interface is bound to loopback and fronted by a per VM password gate, the RTR endpoint is ready for your routers on a dedicated port, and every instance validates fresh from the RIRs on first boot rather than shipping a stale cache. Each instance is backed by a paired deploy guide and 24/7 cloudimg support.
Real screenshots taken while testing this image against its deployment guide.