ASPA is now available in the RIPE NCC RPKI Dashboard, adding a way to express and validate your upstream relationships on top of ROA-based origin validation. Building on its introduction at RIPE 91, this article explains what ASPA does, why it matters, and how to start thinking about deployment.

We present a first look at the adoption of BGP-based DDoS scrubbing, developing a methodology that sheds light on use of the global top five scrubbers. By identifying protected ASes and prefixes via four BGP AS-path patterns in RIS/RouteViews, we provide an initial overview of adoption across the Internet.