This release adds actual RPKI origin validation to Routinator itself.
An address prefix and AS number can now be checked for its RPKI status
on the command line via the new
validate command or via the HTTP server.
The latter is done provided in a way compatible with the
API provided by the RIPE NCC RPKI Validator.
The release also includes some breaking changes to the Prometheus metrics.
Back when we introduced those, we chose names for the metrics that didn’t
start with a prefix allowing to identify them as being from Routinator.
This is now corrected and all metrics start with
While at it, we added new metrics for the rsync commands being run by
Routinator, showing both their exit status codes and how long they took.
In addition, there has been quite a few internal plumbing changes. One more
visible change is that Routinator will now delete the data for rsync modules
that aren’t referenced anymore, keeping the local repository clean and small.
- Prometheus metrics are now prefixed with
routinator_. (#162 by
rsynccall. This seems to be available on
most rsync versions in use. Should that not be the case, you can use
rsync-argsconfig file option to define your own set of rsync
arguments, overriding this behaviour. ([#176])
- The local copy of the repository is now cleaned up after each validation
run, removing directories and files that weren’t referenced during the
run. This can be disabled with the new
--dirtycommand line and
dirtyconfig file options. (#180)
- You can now check pairs of address prefix and AS number for their RPKI
origin validation status either via the HTTP interface or the new
command. The HTTP API is the same as that used by the RIPE NCC RPKI
Validator for easy migration. (#173)
- Output format
summarywhich will print a summary of the content of the
RPKI repository. (#167)
- The ARIN TAL can now be skipped during
- Various commands have received a
--completeoption that causes them to
exit with status code 2 if any of the rsync commands fails. ([#177)]
- Additional metrics showing the status and duration of rsync commands.