Measuring Propagation Time of RPKI Validity Changes on the Dataplane

In this presentation, we investigate how fast the data plane converges when
RPKI security attestations change. Our method covers all RIPE IP prefixes
that are part of the RPKI hosted model and allows us to study the full
propagation timeline. Our results reveal that RPKI propagation is at least
one order of magnitude slower than plain BGP. Invalid-to-valid transitions
require 9–12 minutes, valid-to- invalid transitions need 30–42 minutes to
be effective at 50% of our vantage points.
Furthermore, we present a public measurement platform that allows network
operators to observe how RIPE Atlas probes connected through their AS
experience reachability during ROA changes.
This platform can help the operators and the community understand how the
current RPKI and ROV deployments behave at Internet-wide scale.