---
title: "Host where routes are signed · Agent Wranglers"
url: https://agentwranglers.se/playbook/website/hosting-and-network/rpki
updated: 2026-10-20
licence: "All rights reserved"
---

# Host where routes are signed

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

- Level: Recommended
- Chapter: [Hosting and network](https://agentwranglers.se/playbook/website/hosting-and-network)
- Rule: Host the site and its DNS with providers that sign their internet routes with RPKI. They should also drop invalid routes.
- How: Choose hosting and DNS providers that sign their routes (ROAs) and drop invalid ones.
- Check: Test your IP addresses at an RPKI validity checker or internet.nl.

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers website playbook: https://agentwranglers.se/playbook/website/hosting-and-network/rpki`.

- Previous: [Sign your DNS](https://agentwranglers.se/playbook/website/hosting-and-network/dnssec)
- Next: [Use TLSA records only where checked](https://agentwranglers.se/playbook/website/hosting-and-network/dane)
- [Hosting and network](https://agentwranglers.se/playbook/website/hosting-and-network)