February 2011 - ncc-services-wg

New RIPE NCC Procedural Document Available
by Andrea Cima 28 Feb '11

28 Feb '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [Apologies for duplicate emails] Dear Colleagues, The RIPE NCC has published a new RIPE NCC procedural document: ripe-475, "Independent Internet Number Resources – Contractual Relationship Changes between sponsoring LIR and End User" This document describes the steps to be taken when there are changes in the contractual relationship between the End User of independent Internet number resources and the sponsoring Local Internet Registry (LIR). It also describes the scenarios in which the RIPE NCC may de-register independent Internet number resources and what happens to those resources once they are de-registered. The new document is available at: http://www.ripe.net/ripe/docs/ripe-475.html Kind regards, Andrea Cima RIPE NCC -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.11 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkpfPukACgkQXOgsmPkFrjNlEwCcDtE364DhQCU0USBoK3kJhord yBgAoMbRsLFCStkXfvEaV6Mtm5b2sfxW =fKC3 -----END PGP SIGNATURE-----

8 11

Re: [routing-wg] [address-policy-wg] REMINDER; WAS Re: 2008-08 New Version and Draft Document Published (Initial Certification Policy for Provider Aggregatable Address Space Holders)
by Ruediger Volk, Deutsche Telekom T-Com - TE141-P1 25 Feb '11

25 Feb '11

Dear colleagues, I apologize for my bad habits and tradition for sending comments at the very last minute. > Dear Colleagues, > > The new version of RIPE Policy Proposal 2008-08, "Initial Certification > Policy for Provider Aggregatable Address Space Holders", was published > on 9 February 2011. The time period for community review ends on 23 > February 2011. > > Some feedback was sent to the Address Policy Working Group mailing list. > However, to maintain the discussion, we strongly recommend that you > share your ideas and comments and clearly let the community know if you: > > - Support the implementation of the proposal I support the implementation of the proposal; please find additional comments below that point out some problems and some ideas regarding required work. > - Support the general principle of the proposal but would prefer another > wording > - Support the general principle with some details changed but agree to > postpone this discussion until another stage of the policy proposal > review. (This is an initial proposal that covers only PA resources. If > the community supports extending certification to all resources, then > another version of the proposal will be necessary.) > - Do not support the proposal (please explain your motivations) > > > You can find the full proposal at: > > http://www.ripe.net/ripe/policies/proposals/2008-08 > > and the draft document at: > > http://www.ripe.net/ripe/policies/proposals/2008-08/draft > > Please send an email with your comments to address-policy-wg(a)ripe.net by > 23 February 2011. > > Best regards, > Emilio Madaio My "vote" on the proposal is: I agree to the policy proposal (consisting of "Summary", "Policy Text", and "Rationale") and want to see it fully executed as a minimum first step of implementing full RPKI support by RIPE NCC fitting into the global RPKI infrastructure. This MUST NOT be delayed any further (considering the long time this has been worked AND having missed a committed delivery date [Jan 1 2011] already. I have more comments (which may seem to dilute the primary statement, but hopefully help to fix problems and make more progress) This policy is simpler and more limited than would seem adequate and desirable in today's situation; it was more appropriate when initial versions were proposed. Even while some open ends are recognized the initial policy should be put in place to clearly indicate that the RIPE community is in control of setting policy for the operation of the NCC RPKI service; however we also need to recognize there is a challenge to deal here with more complexity and deeper technical detail compared with [most] other RIPE policies; this includes even the question of just how to identify/separate community and user relevant policy from implementation details. I see need for discussion of the NCC's impact analysis and other related documents (potentially including the process for document control). I have one clear and simple problem (=objection) to the NCC's impact analysis: I do not understand how the NCC can conclude that "this proposal only applies to IPv4 ..."; I do not see such restriction in the language of the proposal - and I'm sure that contributors to the proposal certainly would have expressed this unambiguously if that had been the intention. So I would like to emphasize that the intended policy OF COURSE covers both address families - and the definition of RPKI anyway! Inclusion of IPv6 is a MUST! If RIPE NCC has not yet implemented support of IPv6 they need to tell us the expected delivery date! As related documents I see (a) CPS (b) "... Deregistration of Internet number resources" (c) Certification Service Terms and Conditions (d) Certification Repository Terms and Conditions The need for (a) and (b) has been pointed out for more than 2 years; progress has been slow and late. Having a CPS is a standard requirement for serious [R]PKI CAs. I don't remember that there has been any mentioning of something like (c) and (d) in previous discussion and so they show up as somewhat of a surprise. The documents and their relation need some discussion, in particular with regard to how functions are distributed and to identify (and place) the relevant policy pieces. Somewhat as an example I'd like to mention: The elaborate standard structure that is defined for the CPS clearly includes parts that are defining user relevant policy details (some of which came up in the discussion of this policy proposal) as well as documentation of lots of implementation details that clearly should be left completely in the NCC's responsibility. (c) duplicates parts of the CPS and claims priority over the CPS and classifies the CPS as "explanatory document" - this looks questionable to me. Is it really acceptable that no notifications about replacements for revoked certificates are provided? (maybe OK for hosted service; hard to believe with full RPKI distributed CAs) For meeting the challenges and more satisfactory and satisfying results we need to establish a more detailed activity plan and focussed work. Regards, Ruediger Ruediger Volk Deutsche Telekom AG -- Internet Backbone Engineering E-Mail: rv(a)NIC.DTAG.DE

2 1

Implementation status of RIPE-452
by Florian Weimer 23 Feb '11

23 Feb '11

Hi, what's the implementation status of RIPE-452? Is there a way to query the status of specific resources? Thanks, Florian -- Florian Weimer <fweimer(a)bfk.de> BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel: +49-721-96201-1 D-76133 Karlsruhe fax: +49-721-96201-99

2 6

Announcement: RIPE NCC Training Courses
by Training Mailbox 22 Feb '11

22 Feb '11

[Apologies for duplicate e-mails] Dear Colleagues, The RIPE NCC invites you to register for one of our upcoming training courses: - The LIR Training Course This course teaches LIRs how to request Internet number resources and interact with the RIPE NCC. A course outline is available at: http://www.ripe.net/lir-services/training/courses/lir/outline/ - The Routing Registry Training Course This course teaches LIRs how to use the RIPE Database for routing. A course outline is available at: http://www.ripe.net/lir-services/training/courses/rr/ - The IPv6 Training Course This course teaches LIRs about the need for IPv6 and includes basic information on how to plan your deployment. A course outline is available at: http://www.ripe.net/training/ipv6/outline.html To see the location of upcoming courses and to register, please use the LIR Portal or complete the registration form on our website at: RIPE NCC Upcoming Courses List & Registration https://lirportal.ripe.net/lirportal/training/course-list.html If you have any questions, please do not hesitate to contact us at <training(a)ripe.net>. Kind regards, Rumy Kanis Training Services Manager RIPE NCC

1 0

Implementation of "pingable:" attribute in the RIPE Database
by Denis Walker 21 Feb '11

21 Feb '11

[Apologies for duplicate emails] Dear Colleagues, The RIPE NCC has implemented the "pingable:" and "ping-hdl:" attributes according to the specification in RFC 5943. They can now be used in ROUTE and ROUTE6 objects in the RIPE Database. RFC 5943 describes the syntax and explains how to use them: http://tools.ietf.org/html/rfc5943 The "pingable:" addresses are already active for beacons, anchors and debogon routes announced by the RIPE NCC Routing Information Service (RIS). For an example of how these are announced, see the ROUTE object for 84.205.81.0/24. For more information about RIS beacons and anchors, please see: http://www.ripe.net/data-tools/stats/ris/ris-routing-beacons Regards, Denis Walker Business Analyst RIPE NCC Database Group

1 0

RIPE NCC Membership Statistics published on RIPE Labs
by Mirjam Kuehne 17 Feb '11

17 Feb '11

[apologies for duplicates] Dear colleagues, With the year 2009 behind us, we looked at RIPE NCC membership growth and demographics over time. You can find some interesting statistics on RIPE Labs: http://labs.ripe.net/content/ripe-ncc-membership-growth Next we will look at the distribution of number resources among the membership. Stay tuned! Kind Regards, Mirjam Kuehne

1 1

Registering IPv6 Assignments in the RIPE Database
by Denis Walker 15 Feb '11

15 Feb '11

[Apologies for duplicate emails] Dear Colleagues The RIPE community recently approved RIPE Policy Proposal 2010-06, "Registration Requirements for IPv6 End User Assignments". The proposal is available at: [http://www.ripe.net/ripe/policies/proposals/2010-06] This has now been implemented in the RIPE Database and other RIPE NCC processes, where necessary. Details of how to use the new aggregation feature of the RIPE Database can be found at: http://www.ripe.net/data-tools/support/documentation/documenting-ipv6-assig… For those who have already made some IPv6 assignments, you will need to document them in the RIPE Database according to the policy if you have not already done so. All new IPv6 assignments must be registered in the RIPE Database in accordance with this policy. Regards, Denis Walker Business Analyst RIPE NCC Database Group

1 0

Create, Update and Delete via the RESTful Web Services
by Mirjam Kuehne 15 Feb '11

15 Feb '11

[apologies for duplicates] Dear colleagues, After the "Read" service has been available for some time, you can now also Create, Update and Delete objects in the RIPE Database via the RESTful Web Services. Please see a detailed description including many examples on RIPE Labs: http://labs.ripe.net/Members/Paul_P_/create-update-and-delete-via-the-restf… As always, we are very interested in your feedback. We would also like to know if you are running a project in which you used the RIPE Database API. Kind Regards, Mirjam Kuehne RIPE NCC

1 0

REMINDER; WAS Re: 2008-08 New Version and Draft Document Published (Initial Certification Policy for Provider Aggregatable Address Space Holders)
by Emilio Madaio 15 Feb '11

15 Feb '11

[Apologies for duplicates. Courtesy copy sent to Routing Working Group and RIPE NCC Services Working Group. Please direct feedback to the Address Policy Working Group mailing list.] Dear Colleagues, The new version of RIPE Policy Proposal 2008-08, "Initial Certification Policy for Provider Aggregatable Address Space Holders", was published on 9 February 2011. The time period for community review ends on 23 February 2011. Some feedback was sent to the Address Policy Working Group mailing list. However, to maintain the discussion, we strongly recommend that you share your ideas and comments and clearly let the community know if you: - Support the implementation of the proposal - Support the general principle of the proposal but would prefer another wording - Support the general principle with some details changed but agree to postpone this discussion until another stage of the policy proposal review. (This is an initial proposal that covers only PA resources. If the community supports extending certification to all resources, then another version of the proposal will be necessary.) - Do not support the proposal (please explain your motivations) You can find the full proposal at: http://www.ripe.net/ripe/policies/proposals/2008-08 and the draft document at: http://www.ripe.net/ripe/policies/proposals/2008-08/draft Please send an email with your comments to address-policy-wg(a)ripe.net by 23 February 2011. Best regards, Emilio Madaio Policy Development Officer RIPE NCC

1 0

Re: [ncc-servies-wg] Launch of RIPE NCC LIR Locator
by Mirjam Kuehne 14 Feb '11

14 Feb '11

Dear colleagues, As announced last week, you can now find technical details about the LIR Locator and a description of our future plans on RIPE Labs: http://labs.ripe.net/Members/kranjbar/ripe-ncc-lir-locator Please do not hesitate to send us any comments you might have. We want to make this a useful tool for you and welcome your feedback and suggestions. Kind Regards, Mirjam Kuehne RIPE NCC -------- Original Message -------- Subject: [ncc-services-wg] Launch of RIPE NCC LIR Locator Date: Thu, 10 Feb 2011 11:57:50 +0100 From: Kaveh Ranjbar <kranjbar(a)ripe.net> To: ncc-services(a)ripe.net Dear Colleagues, We have introduced a new service, the LIR Locator: https://lirportal.ripe.net/maps/locator/ This new service is an extension of the existing list of RIPE NCC members: https://www.ripe.net/membership/indices/ and the RIPE NCC's service region map: https://www.ripe.net/lir-services/member-support/info/list-of-members In addition to clearly indicating those RIPE NCC members with an IPv6 RIPEness score of four, this new service marks the geographical location of members on a Google map. This service is accessible to the public and enables users to see the concentration of RIPE NCC members in cities and countries. RIPE NCC members can log in to to their LIR Portal account and either confirm the geo-location that we have determined for your registry's address from your public records or change it to any location within your registered country. More details about this service and future plans for it will be published on RIPE Labs shortly. Regards, Kaveh Ranjbar - Business Applications Product Owner Senior Software Engineer RIPE NCC

1 0

Display issues with applications that use encrypted connections (https)
by RIPE NCC Web Services 10 Feb '11

10 Feb '11

[Apologies for duplicates] Dear members, It has come to our attention that some users experienced graphical and functional problems when attempting to use services like the LIR Portal that are now available through SSL encryption (https). We tracked these issues and found that some combinations of operating systems and browsers (for example Safari in MacOS X versions previous to 10.6.6 and Microsoft Internet Explorer 8 or below) did not recognize our certificate as valid. Our engineers worked to correct the problem and it is now fixed. We apologise for any inconvenience this has caused and please let us know if you encounter other issues. Sincerely, -- Mihnea-Costin Grigore RIPE NCC Web Developer - http://www.ripe.net/

1 0

[members-discuss] [ncc-announce] Launch of RIPE NCC LIR Locator
by Kaveh Ranjbar 10 Feb '11

10 Feb '11

Dear Colleagues, We have introduced a new service, the LIR Locator: https://lirportal.ripe.net/maps/locator/ This new service is an extension of the existing list of RIPE NCC members: https://www.ripe.net/membership/indices/ and the RIPE NCC's service region map: https://www.ripe.net/lir-services/member-support/info/list-of-members In addition to clearly indicating those RIPE NCC members with an IPv6 RIPEness score of four, this new service marks the geographical location of members on a Google map. This service is accessible to the public and enables users to see the concentration of RIPE NCC members in cities and countries. RIPE NCC members can log in to to their LIR Portal account and either confirm the geo-location that we have determined for your registry's address from your public records or change it to any location within your registered country. More details about this service and future plans for it will be published on RIPE Labs shortly. Regards, Kaveh Ranjbar - Business Applications Product Owner Senior Software Engineer RIPE NCC ---- If you don't want to receive mails from the RIPE NCC Members Discuss list, please log in to your LIR Portal account at: http://lirportal.ripe.net/ First click on General and then click on Edit. At the bottom of the Page you can add or remove addresses.

3 2

New version of www.ripe.net
by Paul Rendek 09 Feb '11

09 Feb '11

[Apologies for duplicates] Dear Colleagues, Today, the RIPE NCC launched an updated version of the www.ripe.net website. The new site has been redesigned to provide a clearer structure, improved navigation and more efficient ways to interact with the multimedia resources and tools provided by the RIPE NCC. The driving force behind this redesign has been the needs of our members and colleagues in the Internet community. We appreciate any feedback you may have on the new version of the website. If you have any comments or suggestions, please contact the RIPE NCC at: <feedback(a)ripe.net>. You can find more information at: http://www.ripe.net/internet-coordination/news/announcements/new-website Regards, Paul Rendek Head of External Relations and Communications RIPE NCC

1 0

IPv4 Exhaustion: RIPE NCC Update
by Axel Pawlik 04 Feb '11

04 Feb '11

Dear colleagues, The IANA IPv4 free pool was exhausted today, 3 February 2011. Each of the Regional Internet Registries (RIRs) has now received one of the final five /8s. The RIPE NCC has been allocated 185/8. The RIPE NCC is holding reserves totaling approximately four /8s (around 75 million individual IPv4 addresses), not including 185/8. We will continue to distribute IPv4 addresses from our reserves according to the current policy, ripe-509, "IPv4 Address Allocation and Assignment Policies for the RIPE NCC Service Region": http://www.ripe.net/ripe/docs/ripe-509.html When our reserves are exhausted, we will begin to distribute IPv4 addresses from 185/8 according to section 5.6 of ripe-509: http://ripe.net/ripe/docs/ipv4-policies.html#----use-of-last----for-pa-allo… This policy states that each Local Internet Registry (LIR) will receive one /22 (1024 IPv4 addresses) from 185/8 upon application for IPv4 resources. In order to obtain this /22 allocation, the LIR must already have requested an IPv6 allocation. For more information about how to deploy IPv6, please see: http://www.ipv6actnow.org As we unable to anticipate consumption rates, we cannot fully predict how long our reserves will last. However, we would like to reassure you that our supplies will not be exhausted within the coming months. Our Registration Services Department has seen an increase in the number of IPv4 requests in the last few days and is working hard to evaluate all requests. We ask for your patience during this busy period. Regards, Axel Pawlik Managing Director RIPE NCC

2 1

RIPE NCC Resource Certification service update
by Alex Band 03 Feb '11

03 Feb '11

Dear colleagues, It's been one month since I sent the announcement about the RIPE NCC Resource Certification service. I would like to give you an overview of the current status. The facts by numbers: ------------------------------ LIRs who have enabled the service: 219 Number of Route Origin Authorisations they created: 170 Number of prefixes covered by these ROAs: 469 Total IPv4 space covered by ROAs in the RIPE region: 40159 /24s Total IPv6 space covered by ROAs in the RIPE region: 7340035 /48s Unique visitors to ripe.net/certification: 1564 Downloads of the RIPE NCC Validator: 117 So while 219 LIRs have enabled the service, and very diligently created a large number of ROAs to specify their routing policy, unfortunately nobody gave any feedback on any of the mailing lists. It is very important that you let your voice be heard and provide input on policy proposal 2008-08: http://ripe.net/ripe/policies/proposals/2008-08.html Please note that version 3.0 of this proposal will be published very soon. As soon as it is available, I urge you to read it and provide feedback, because the fact that the current service not backed by a policy is not a sustainable state of affairs. Kind regards, Alex Band Product Manager, RIPE NCC http://ripe.net/certification P.S. Here are some links courtesy of LACNIC in case you would like to track the progress: http://www.labs.lacnic.net/~rpki/rpki-monitor/rpki-ta-status.xml http://www.labs.lacnic.net/~rpki/rpki-evolution-report_EN.txt http://www.labs.lacnic.net/~rpki/rpki-heatmaps/latest/ripe-roa-heatmap.png

2 1

IPv4 Exhaustion Announcement and Press Conference: Watch Live
by Axel Pawlik 03 Feb '11

03 Feb '11

[Apologies for duplicate emails] Dear colleagues, On Thursday, 3 February 2011, at 14:30 (UTC), the Number Resource Organization (NRO), along with the Internet Corporation for Assigned Names and Numbers (ICANN), the Internet Society (ISOC) and the Internet Architecture Board (IAB) will be holding a ceremony and press conference to make a significant announcement and to discuss the global transition to the next generation of Internet addresses. Much has been written in the international media over the last few weeks about the dwindling pool of IPv4 Internet addresses, and this topic will be addressed at the event. We invite everyone to view the webcast of this event at: http://www.nro.net/news/icann-nro-live-stream The event will take place at the Intercontinental Hotel in Miami on Thursday. There will be limited public seating available to attend (with press receiving seating priority) in Room “Concourse II” at 09:30 EST for the ceremony and 10:00 EST for the press conference which follows. Regards, Axel Pawlik Managing Director RIPE NCC

2 2

IANA Allocates Two /8s of IPv4 Space to APNIC
by Axel Pawlik 01 Feb '11

01 Feb '11

[Apologies for duplicate emails] Dear colleagues, On 1 February 2011, the IANA allocated two /8s of IPv4 address space to APNIC, the Regional Internet Registry (RIR) for the Asia Pacific region. This means that only five /8s of IPv4 address space are left in the IANA free pool and the "Global Policy for the Allocation of the Remaining IPv4 Address Space" will be triggered. This policy can be found online at: http://www.icann.org/en/general/allocation-remaining-ipv4-space.htm When this policy comes into effect, the five RIRs will each receive one of the five remaining /8s and the global IPv4 pool will be exhausted. We expect IANA to allocate these final /8s within the next few days. For further information please see: http://www.ripe.net/v4exhaustion/ Regards, Axel Pawlik Managing Director RIPE NCC

2 1