Routinator on Ubuntu 24.04

Azure Networking

Routinator, RPKI route origin validation that feeds validated prefixes to your routers over the RTR protocol.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

Routinator is open source RPKI Relying Party software from NLnet Labs. It fetches Resource Public Key Infrastructure data from the five Regional Internet Registry trust anchors, cryptographically validates the Route Origin Authorisations, and serves the resulting Validated ROA Payloads to your routers over the RTR protocol so they can drop or de prefer BGP routes with an invalid origin. A single self contained Rust binary with no external database also exposes a built in status web interface, Prometheus metrics, and a JSON and CSV data API.

Why the cloudimg image

The cloudimg image is hardened and fully patched with Routinator preconfigured and running as a dedicated non root service. The read only status interface is bound to loopback and fronted by a per VM password gate, the RTR endpoint is ready for your routers on a dedicated port, and every instance validates fresh from the RIRs on first boot rather than shipping a stale cache. Each instance is backed by a paired deploy guide and 24/7 cloudimg support.

Common uses

  • RPKI route origin validation for your BGP routers
  • An RTR server feeding validated prefixes to network devices
  • RPKI monitoring with a status interface and Prometheus metrics

See it running

Real screenshots taken while testing this image against its deployment guide.

Routinator on Ubuntu 24.04 screenshot 1 Routinator on Ubuntu 24.04 screenshot 2 Routinator on Ubuntu 24.04 screenshot 3 Routinator on Ubuntu 24.04 screenshot 4