[RPKI] Krill 0.13.0-rc4 Released

Tim Bruijnzeels tim at nlnetlabs.nl
Mon May 8 14:39:26 UTC 2023

Dear list,

We have been testing a number of release candidates for the coming Krill 0.13.0 release.

We released 0.13.0-rc4 last Friday (5 May), and we have updated our own production environment as well as our testbed environment to this new release candidate. If no issues are found then we plan to release 0.13.0 on Monday 22 May (two weeks from today).

= New User Interface

This release replaces the old 'Lagosta' User Interface code with a new lean React based implementation. The UI functionality is unchanged for the most part, except that it is now possible to include a comment for each configured ROA. If you use Krill's OpenID Connect integration, we kindly ask you to check that this new UI implementation works as expected. It works in our own test setup using Keycloak, but we have not been able to test other provider implementations.

= ASPA Support

Starting with this release ASPA support is no longer treated as experimental, and is now enabled by default. There is no UI support yet, but we hope to add this in the not-so-distant future. For now, you can use the command line interface to manage ASPA objects. You can read more about ASPA support here:

= Interoperability

Two issues were fixed that affect Krill as a child CA under newly tested parent CAs:
- Ensure that the CSR uses a trailing slash for id-ad-caRepository (#1030)
- Accept id-cert with path len constraints (#966)

= Trust Anchor

Furthermore, a lot of changes were done to allow the use of Krill as an RPKI Trust Anchor (TA). Although most users will not need this, it may be beneficial to run your own TA for testing. Documentation can be found here:

But, note that for simple test setups it may be easier to use Krill in its Test setup:

Documentation for this release candidate can be found here:

Full release notes can be found here:

Please let us know if you have any questions or comments.

On behalf of the NLnet Labs RPKI Team,


More information about the RPKI mailing list