Routinator ASPA

Hi everyone,

I recently deployed Routinator on my server and ran into an issue with my router (Huawei NetEngine8000 F1A, version V800R024C00SPC500 with patch V800R024SPH226) related to ASPA support.

When I use only ROAs, the RPKI-RTR session comes up without any problems (both standard and RTRv2 configurations work fine). However, as soon as I enable ASPAs, the session drops and goes from Established to Syn.

My assumption is that this might be related to how this specific Huawei platform or firmware handles/parses ASPA data, but I don’t have enough evidence to confirm that yet.

From what I understand, ASPAs are already working correctly on certain Cisco, Juniper, and Arista platforms. However, I wasn’t able to find clear compatibility details (hardware + software versions) in the repository.

Since I manage a small lab (around 20 devices) and also collaborate with colleagues who run larger environments, it would be extremely helpful if you could share which specific models and firmware versions are confirmed to fully support ASPAs with your implementation.

Thanks in advance for any insights or pointers!

Hi @Aldin981403, this is already answered in Connection drops when enabling Version 2 (ASPA + ROA) on Huawei NetEngine8000 · Issue #1084 · NLnetLabs/routinator · GitHub.