March 2019 - routing-wg - mailman.ripe.net

Route object creation authorization
by Havard Eidnes 16 Apr '19

16 Apr '19

Hi, it looks like "things happened while I wasn't watching"... I've just had a run-in with the route object authorization rules as presently implemented in the RIPE database. I found the following flow chart documenting the authorization procedure: https://www.ripe.net/support/training/material/Routing-Security-Training-Co… which is referenced from https://www.ripe.net/manage-ips-and-asns/db/support/managing-route-objects-… The question I have is this: What is the policy reason for having a pre-existing route object play any role in authenticating the creation of a new route object, so that it in effect overrides any mnt-routes: fields of the corresponding inetnum object for the address space holder? When a customer who has his own address space and controls his own inetnum object, but lets his current ISP originate the route with the ISP's ASN as origin, but wants to move to another ISP, given the current rules, the current ISP is able to hold the customer hostage by refusing to create a new route object with a different ASN as origin. I would not have thought it was RIPE's role to raise and enforce such a barrier? I also can't quite comprehend why a route object would need the "mnt-routes" or "mnt-lower" attributes -- in an inetnum object I can understand the semantics of those, but in a route? Best regards, - Håvard

2 4

Analysis tool for RIPE Proposal 2018-06
by Job Snijders 01 Apr '19

01 Apr '19

Dear all, I wrote a small tool to help understand the effects if RIPE Policy Proposal 2018-06 is accepted by the community. This is the "Let's use RPKI ROAs to clean up the non-authoritative RIPE-NONAUTH IRR source!"-proposal (source: https://www.ripe.net/participate/policies/proposals/2018-06). The tool can also be used by RIPE NCC staff to validate their implementation or help their impact analysis. Quick reminder: this proposal does *not* impact any RIPE Managed space, this does *not* impact IP space for which no RPKI ROAs have or can be created, and it does *not* impact route objects where the route object and the RPKI ROA are match each other. Currently there are 793 IRR "route:" objects and 17 "route6:" objects that conflict with published RPKI ROAs. Out of those ~ 800, roughly 33 prefixes are visible in the BGP DFZ as exact matches between what is registered in RIPE-NONAUTH and in BGP (note: this means these 33 announcements are "RPKI Invalid", and the likes of Cloudflare / AT&T probably aren't accepting those announcements anyway)... You can install the tool through 'pip3 install ripe-proposal-2018-06', or download the source from https://github.com/job/ripe-proposal-2018-06 Usage example: $ ripe-proposal-2018-06 -a 7018 Downloading https://rpki.gin.ntt.net/api/export.json Downloading https://ftp.ripe.net/ripe/dbase/split/ripe-nonauth.db.route.gz INVALID! The 99.122.224.0/21AS1273 RIPE-NONAUTH route object has conflicts: route: 99.122.224.0/21 descr: route for customer Akamai International origin: AS1273 created: 2008-09-08T14:40:49Z last-modified: 2018-09-04T15:54:45Z source: RIPE-NONAUTH mnt-by: CW-EUROPE-GSOC Above non-authoritative IRR object is in conflict with this ROA: ROA: 99.112.0.0/12, MaxLength: 12, Origin AS7018 (ARIN) Note that AT&T has no method of getting this erroneous "route:" object removed, other than to beg & plead with maintainer 'CW-EUROPE-GSOC'. We're working on an updated version of RIPE Policy Proposal 2018-06 to incorporate feedback from the community, such as an attempt to send notifications and a grace period before the object is actually removed. All in all it appears that if this policy proposal is deployed *now*, the operational impact is virtually non-existent; and after deploying this the global community has an industry-standard way to get rid of stale proxy route registrations. With every published ROA the "RIPE-NONAUTH" source becomes cleaner! Kind regards, Job

4 4

Weekly Routing Table Report
by cscora＠apnic.net 29 Mar '19

29 Mar '19

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 30 Mar, 2019 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 742948 Prefixes after maximum aggregation (per Origin AS): 285249 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 358190 Total ASes present in the Internet Routing Table: 63769 Prefixes per ASN: 11.65 Origin-only ASes present in the Internet Routing Table: 54888 Origin ASes announcing only one prefix: 23710 Transit ASes present in the Internet Routing Table: 8881 Transit-only ASes present in the Internet Routing Table: 269 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 34 Max AS path prepend of ASN ( 25081) 32 Prefixes from unregistered ASNs in the Routing Table: 29 Number of instances of unregistered ASNs: 32 Number of 32-bit ASNs allocated by the RIRs: 26387 Number of 32-bit ASNs visible in the Routing Table: 21522 Prefixes from 32-bit ASNs in the Routing Table: 94294 Number of bogon 32-bit ASNs visible in the Routing Table: 28 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 267 Number of addresses announced to Internet: 2845039488 Equivalent to 169 /8s, 147 /16s and 219 /24s Percentage of available address space announced: 76.8 Percentage of allocated address space announced: 76.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.2 Total number of prefixes smaller than registry allocations: 248634 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 200727 Total APNIC prefixes after maximum aggregation: 57903 APNIC Deaggregation factor: 3.47 Prefixes being announced from the APNIC address blocks: 197663 Unique aggregates announced from the APNIC address blocks: 82276 APNIC Region origin ASes present in the Internet Routing Table: 9640 APNIC Prefixes per ASN: 20.50 APNIC Region origin ASes announcing only one prefix: 2717 APNIC Region transit ASes present in the Internet Routing Table: 1422 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 30 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4617 Number of APNIC addresses announced to Internet: 769678720 Equivalent to 45 /8s, 224 /16s and 93 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 219503 Total ARIN prefixes after maximum aggregation: 103821 ARIN Deaggregation factor: 2.11 Prefixes being announced from the ARIN address blocks: 218452 Unique aggregates announced from the ARIN address blocks: 104995 ARIN Region origin ASes present in the Internet Routing Table: 18421 ARIN Prefixes per ASN: 11.86 ARIN Region origin ASes announcing only one prefix: 6869 ARIN Region transit ASes present in the Internet Routing Table: 1884 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2638 Number of ARIN addresses announced to Internet: 1079403648 Equivalent to 64 /8s, 86 /16s and 100 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 205008 Total RIPE prefixes after maximum aggregation: 97638 RIPE Deaggregation factor: 2.10 Prefixes being announced from the RIPE address blocks: 201350 Unique aggregates announced from the RIPE address blocks: 119435 RIPE Region origin ASes present in the Internet Routing Table: 25936 RIPE Prefixes per ASN: 7.76 RIPE Region origin ASes announcing only one prefix: 11511 RIPE Region transit ASes present in the Internet Routing Table: 3677 Average RIPE Region AS path length visible: 4.6 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7962 Number of RIPE addresses announced to Internet: 718072960 Equivalent to 42 /8s, 204 /16s and 236 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 96714 Total LACNIC prefixes after maximum aggregation: 21583 LACNIC Deaggregation factor: 4.48 Prefixes being announced from the LACNIC address blocks: 98073 Unique aggregates announced from the LACNIC address blocks: 42028 LACNIC Region origin ASes present in the Internet Routing Table: 8223 LACNIC Prefixes per ASN: 11.93 LACNIC Region origin ASes announcing only one prefix: 2179 LACNIC Region transit ASes present in the Internet Routing Table: 1533 Average LACNIC Region AS path length visible: 5.1 Max LACNIC Region AS path length visible: 27 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 5768 Number of LACNIC addresses announced to Internet: 173549824 Equivalent to 10 /8s, 88 /16s and 41 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 20966 Total AfriNIC prefixes after maximum aggregation: 4282 AfriNIC Deaggregation factor: 4.90 Prefixes being announced from the AfriNIC address blocks: 27143 Unique aggregates announced from the AfriNIC address blocks: 9218 AfriNIC Region origin ASes present in the Internet Routing Table: 1262 AfriNIC Prefixes per ASN: 21.51 AfriNIC Region origin ASes announcing only one prefix: 434 AfriNIC Region transit ASes present in the Internet Routing Table: 246 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 21 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 537 Number of AfriNIC addresses announced to Internet: 104060672 Equivalent to 6 /8s, 51 /16s and 215 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 4720 545 547 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4660 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3125 1297 53 VIETEL-AS-AP Viettel Group, VN 45899 3034 1733 110 VNPT-AS-VN VNPT Corp, VN 9829 2708 1490 563 BSNL-NIB National Internet Backbone, IN 4766 2612 11120 761 KIXS-AS-KR Korea Telecom, KR 9808 2435 8699 27 CMNET-GD Guangdong Mobile Communication 9394 2183 4906 31 CTTNET China TieTong Telecommunications 4755 2148 429 186 TATACOMM-AS TATA Communications formerl 9498 2030 426 167 BBIL-AP BHARTI Airtel Ltd., IN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 3605 234 580 CABLEONE - CABLE ONE, INC., US 6327 3600 1325 94 SHAW - Shaw Communications Inc., CA 22773 3382 2976 162 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 2612 5902 1080 AMAZON-02 - Amazon.com, Inc., US 16625 2345 1293 1788 AKAMAI-AS - Akamai Technologies, Inc., 20115 2151 2747 535 CHARTER-20115 - Charter Communications, 30036 2143 353 142 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 18566 2111 405 108 MEGAPATH5-US - MegaPath Corporation, US 5650 2086 3074 1462 FRONTIER-FRTR - Frontier Communications 209 2065 5103 576 CENTURYLINK-US-LEGACY-QWEST - CenturyLi Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5432 1628 139 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3265 378 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2643 537 1914 AKAMAI-ASN1, US 12389 2225 2221 636 ROSTELECOM-AS, RU 34984 2073 342 536 TELLCOM-AS, TR 9121 1683 1693 19 TTNET, TR 13188 1605 100 47 TRIOLAN, UA 9009 1410 146 767 M247, GB 8402 1249 545 15 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5654 3337 588 Uninet S.A. de C.V., MX 10620 3484 537 369 Telmex Colombia S.A., CO 11830 2705 384 34 Instituto Costarricense de Electricidad 7303 1449 987 252 Telecom Argentina S.A., AR 6503 1369 433 53 Axtel, S.A.B. de C.V., MX 28573 1328 2248 179 CLARO S.A., BR 6147 1254 377 29 Telefonica del Peru S.A.A., PE 3816 1023 506 114 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 13999 956 522 248 Mega Cable, S.A. de C.V., MX 11172 953 144 66 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1176 393 21 LINKdotNET-AS, EG 37611 892 107 9 Afrihost, ZA 36903 827 416 126 MT-MPLS, MA 36992 825 1531 71 ETISALAT-MISR, EG 24835 824 620 22 RAYA-AS, EG 8452 683 1731 19 TE-AS TE-AS, EG 29571 484 70 12 ORANGE-COTE-IVOIRE, CI 37492 470 470 57 ORANGE-, TN 15706 421 32 6 Sudatel, SD 37342 420 32 1 MOVITEL, MZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5654 3337 588 Uninet S.A. de C.V., MX 12479 5432 1628 139 UNI2-AS, ES 7545 4720 545 547 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4660 4192 74 ERX-CERNET-BKB China Education and Rese 39891 3778 203 20 ALJAWWALSTC-AS, SA 11492 3605 234 580 CABLEONE - CABLE ONE, INC., US 6327 3600 1325 94 SHAW - Shaw Communications Inc., CA 10620 3484 537 369 Telmex Colombia S.A., CO 22773 3382 2976 162 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 8551 3265 378 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 5432 5293 UNI2-AS, ES 4538 4660 4586 ERX-CERNET-BKB China Education and Research Net 7545 4720 4173 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3600 3506 SHAW - Shaw Communications Inc., CA 22773 3382 3220 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 3265 3220 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 10620 3484 3115 Telmex Colombia S.A., CO 7552 3125 3072 VIETEL-AS-AP Viettel Group, VN 11492 3605 3025 CABLEONE - CABLE ONE, INC., US Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65550 DOCUMENT 81.8.34.0/24 15924 BORUSANTELEKOM-AS, TR 65550 DOCUMENT 81.8.35.0/24 15924 BORUSANTELEKOM-AS, TR 1358592 UNALLOCATED 103.134.14.0/23 63956 COLO-AS-AP Colocation Australi 1358592 UNALLOCATED 103.134.14.0/24 63956 COLO-AS-AP Colocation Australi 1358592 UNALLOCATED 103.134.15.0/24 63956 COLO-AS-AP Colocation Australi 65550 DOCUMENT 104.232.236.0/24 138005 LENOVO-AS1-AP LENOVO (HONG KON 65549 DOCUMENT 117.239.163.0/24 65544 UNKNOWN 64339 UNALLOCATED 143.0.108.0/22 18747 IFX18747 - IFX Corporation, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 5.180.104.0/24 209737 MERICHOSTING, TR 5.180.105.0/24 209737 MERICHOSTING, TR 5.180.106.0/24 209737 MERICHOSTING, TR 5.180.107.0/24 209737 MERICHOSTING, TR 27.100.7.0/24 56096 UNKNOWN 27.126.156.0/22 55827 UNKNOWN 27.126.156.0/23 55827 UNKNOWN 27.126.158.0/23 55827 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:12 /9:10 /10:36 /11:100 /12:291 /13:567 /14:1136 /15:1909 /16:13349 /17:7956 /18:13904 /19:25672 /20:39960 /21:46165 /22:92979 /23:75705 /24:422219 /25:978 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4345 5432 UNI2-AS, ES 6327 3374 3600 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2819 3605 CABLEONE - CABLE ONE, INC., US 8551 2718 3265 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2620 3382 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 11830 2050 2705 Instituto Costarricense de Electricidad y Telec 18566 2006 2111 MEGAPATH5-US - MegaPath Corporation, US 30036 1890 2143 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 5650 1754 2086 FRONTIER-FRTR - Frontier Communications of Amer Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1610 2:927 4:22 5:2954 6:45 7:1 8:1284 9:1 11:3 12:1845 13:322 14:1969 15:36 16:4 17:241 18:58 20:49 23:2652 24:2528 25:2 27:2503 31:2095 32:97 35:36 36:851 37:3027 38:1707 39:294 40:120 41:3250 42:757 43:2018 44:148 45:7062 46:3245 47:254 49:1361 50:1101 51:322 52:1031 54:289 55:2 56:9 57:42 58:1788 59:1072 60:505 61:2126 62:2114 63:1814 64:4949 65:2211 66:4840 67:2701 68:1170 69:3526 70:1327 71:603 72:2447 74:2753 75:514 76:550 77:1718 78:1766 79:2323 80:1813 81:1510 82:1134 83:902 84:1114 85:2295 86:554 87:1569 88:1050 89:2572 90:219 91:6581 92:1377 93:2447 94:2553 95:3206 96:923 97:345 98:949 99:210 100:87 101:1153 102:489 103:20775 104:3520 105:248 106:846 107:1781 108:691 109:3742 110:1642 111:1901 112:1485 113:1392 114:1140 115:1731 116:1721 117:1900 118:2180 119:1645 120:1025 121:1037 122:2351 123:1660 124:1472 125:1981 128:1264 129:815 130:532 131:1676 132:733 133:219 134:1052 135:242 136:563 137:715 138:2042 139:844 140:577 141:855 142:797 143:1057 144:841 145:509 146:1265 147:834 148:1716 149:818 150:784 151:1010 152:1042 153:322 154:2819 155:902 156:1679 157:941 158:640 159:1919 160:1514 161:921 162:2699 163:800 164:1161 165:1562 166:439 167:1393 168:3291 169:868 170:4152 171:568 172:1127 173:2201 174:1035 175:917 176:2354 177:4196 178:2542 179:1465 180:2176 181:2398 182:2662 183:1074 184:1199 185:14899 186:3656 187:2475 188:2877 189:1981 190:8303 191:1528 192:10027 193:6662 194:5401 195:4077 196:3024 197:1747 198:5867 199:5987 200:7239 201:5106 202:10386 203:10112 204:4547 205:3008 206:3225 207:3258 208:3967 209:4239 210:3927 211:2008 212:3131 213:2928 214:1091 215:55 216:5939 217:2234 218:880 219:580 220:1875 221:968 222:988 223:1370 End of report

1 0

New on RIPE Labs: RPKI Deployathon Results & The Uptake of BGP Large Communities
by Mirjam Kuehne 25 Mar '19

25 Mar '19

Dear colleagues, We published two more routing related articles on RIPE Labs that might be interesting for you: 1. Results of the first RPKI Deployathon https://labs.ripe.net/Members/antony_stergiopoulos/results-of-the-first-rpk… 2. An update of the use of BGP Large Communities as seen in the RIPE Routing Information Service RIS: https://labs.ripe.net/Members/emileaben/bgp-large-communities-uptake-an-upd… Kind regards, Mirjam Kühne RIPE NCC

1 0

Weekly Routing Table Report
by cscora＠apnic.net 22 Mar '19

22 Mar '19

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 23 Mar, 2019 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 741807 Prefixes after maximum aggregation (per Origin AS): 284756 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 357759 Total ASes present in the Internet Routing Table: 63716 Prefixes per ASN: 11.64 Origin-only ASes present in the Internet Routing Table: 54839 Origin ASes announcing only one prefix: 23689 Transit ASes present in the Internet Routing Table: 8877 Transit-only ASes present in the Internet Routing Table: 268 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 34 Max AS path prepend of ASN (206156) 26 Prefixes from unregistered ASNs in the Routing Table: 29 Number of instances of unregistered ASNs: 32 Number of 32-bit ASNs allocated by the RIRs: 26276 Number of 32-bit ASNs visible in the Routing Table: 21442 Prefixes from 32-bit ASNs in the Routing Table: 93820 Number of bogon 32-bit ASNs visible in the Routing Table: 27 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 256 Number of addresses announced to Internet: 2844501632 Equivalent to 169 /8s, 139 /16s and 166 /24s Percentage of available address space announced: 76.8 Percentage of allocated address space announced: 76.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.2 Total number of prefixes smaller than registry allocations: 247814 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 200650 Total APNIC prefixes after maximum aggregation: 57867 APNIC Deaggregation factor: 3.47 Prefixes being announced from the APNIC address blocks: 197536 Unique aggregates announced from the APNIC address blocks: 82366 APNIC Region origin ASes present in the Internet Routing Table: 9623 APNIC Prefixes per ASN: 20.53 APNIC Region origin ASes announcing only one prefix: 2705 APNIC Region transit ASes present in the Internet Routing Table: 1420 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4588 Number of APNIC addresses announced to Internet: 769694080 Equivalent to 45 /8s, 224 /16s and 153 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 219300 Total ARIN prefixes after maximum aggregation: 103653 ARIN Deaggregation factor: 2.12 Prefixes being announced from the ARIN address blocks: 218381 Unique aggregates announced from the ARIN address blocks: 104721 ARIN Region origin ASes present in the Internet Routing Table: 18428 ARIN Prefixes per ASN: 11.85 ARIN Region origin ASes announcing only one prefix: 6874 ARIN Region transit ASes present in the Internet Routing Table: 1889 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2634 Number of ARIN addresses announced to Internet: 1079597952 Equivalent to 64 /8s, 89 /16s and 91 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 204638 Total RIPE prefixes after maximum aggregation: 97408 RIPE Deaggregation factor: 2.10 Prefixes being announced from the RIPE address blocks: 200883 Unique aggregates announced from the RIPE address blocks: 119278 RIPE Region origin ASes present in the Internet Routing Table: 25909 RIPE Prefixes per ASN: 7.75 RIPE Region origin ASes announcing only one prefix: 11494 RIPE Region transit ASes present in the Internet Routing Table: 3682 Average RIPE Region AS path length visible: 4.6 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7936 Number of RIPE addresses announced to Internet: 717817472 Equivalent to 42 /8s, 201 /16s and 6 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 96555 Total LACNIC prefixes after maximum aggregation: 21520 LACNIC Deaggregation factor: 4.49 Prefixes being announced from the LACNIC address blocks: 97920 Unique aggregates announced from the LACNIC address blocks: 41890 LACNIC Region origin ASes present in the Internet Routing Table: 8208 LACNIC Prefixes per ASN: 11.93 LACNIC Region origin ASes announcing only one prefix: 2184 LACNIC Region transit ASes present in the Internet Routing Table: 1531 Average LACNIC Region AS path length visible: 5.1 Max LACNIC Region AS path length visible: 28 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 5749 Number of LACNIC addresses announced to Internet: 173485056 Equivalent to 10 /8s, 87 /16s and 44 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 20634 Total AfriNIC prefixes after maximum aggregation: 4286 AfriNIC Deaggregation factor: 4.81 Prefixes being announced from the AfriNIC address blocks: 26831 Unique aggregates announced from the AfriNIC address blocks: 9269 AfriNIC Region origin ASes present in the Internet Routing Table: 1261 AfriNIC Prefixes per ASN: 21.28 AfriNIC Region origin ASes announcing only one prefix: 432 AfriNIC Region transit ASes present in the Internet Routing Table: 246 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 21 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 535 Number of AfriNIC addresses announced to Internet: 103641856 Equivalent to 6 /8s, 45 /16s and 115 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 4680 542 543 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4658 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3096 1265 52 VIETEL-AS-AP Viettel Group, VN 45899 3037 1737 111 VNPT-AS-VN VNPT Corp, VN 9829 2738 1494 553 BSNL-NIB National Internet Backbone, IN 4766 2615 11120 762 KIXS-AS-KR Korea Telecom, KR 9808 2434 8699 27 CMNET-GD Guangdong Mobile Communication 9394 2209 4906 31 CTTNET China TieTong Telecommunications 4755 2137 422 176 TATACOMM-AS TATA Communications formerl 9498 2026 426 167 BBIL-AP BHARTI Airtel Ltd., IN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3601 1325 94 SHAW - Shaw Communications Inc., CA 11492 3552 230 615 CABLEONE - CABLE ONE, INC., US 22773 3382 2976 163 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 2600 5900 1070 AMAZON-02 - Amazon.com, Inc., US 16625 2262 1288 1770 AKAMAI-AS - Akamai Technologies, Inc., 20115 2152 2747 535 CHARTER-20115 - Charter Communications, 30036 2131 352 138 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 18566 2112 405 108 MEGAPATH5-US - MegaPath Corporation, US 5650 2094 3074 1462 FRONTIER-FRTR - Frontier Communications 209 2080 5104 583 CENTURYLINK-US-LEGACY-QWEST - CenturyLi Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5427 1628 139 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3269 378 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2643 540 1916 AKAMAI-ASN1, US 12389 2228 2221 638 ROSTELECOM-AS, RU 34984 2057 340 538 TELLCOM-AS, TR 9121 1679 1693 19 TTNET, TR 13188 1605 100 47 TRIOLAN, UA 9009 1399 145 761 M247, GB 8402 1256 545 15 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5638 3335 590 Uninet S.A. de C.V., MX 10620 3507 537 365 Telmex Colombia S.A., CO 11830 2704 384 34 Instituto Costarricense de Electricidad 7303 1447 985 245 Telecom Argentina S.A., AR 6503 1418 433 54 Axtel, S.A.B. de C.V., MX 28573 1327 2247 178 CLARO S.A., BR 6147 1258 377 29 Telefonica del Peru S.A.A., PE 3816 1022 505 113 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 951 144 66 Alestra, S. de R.L. de C.V., MX 13999 951 521 246 Mega Cable, S.A. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1200 393 21 LINKdotNET-AS, EG 37611 895 107 9 Afrihost, ZA 24835 843 636 22 RAYA-AS, EG 36903 827 416 126 MT-MPLS, MA 36992 826 1531 71 ETISALAT-MISR, EG 8452 668 1731 19 TE-AS TE-AS, EG 29571 485 70 12 ORANGE-COTE-IVOIRE, CI 37492 470 470 57 ORANGE-, TN 37342 420 32 1 MOVITEL, MZ 23889 395 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5638 3335 590 Uninet S.A. de C.V., MX 12479 5427 1628 139 UNI2-AS, ES 7545 4680 542 543 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4658 4192 74 ERX-CERNET-BKB China Education and Rese 39891 3778 203 20 ALJAWWALSTC-AS, SA 6327 3601 1325 94 SHAW - Shaw Communications Inc., CA 11492 3552 230 615 CABLEONE - CABLE ONE, INC., US 10620 3507 537 365 Telmex Colombia S.A., CO 22773 3382 2976 163 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 8551 3269 378 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 5427 5288 UNI2-AS, ES 4538 4658 4584 ERX-CERNET-BKB China Education and Research Net 7545 4680 4137 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3601 3507 SHAW - Shaw Communications Inc., CA 8551 3269 3224 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 3382 3219 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 10620 3507 3142 Telmex Colombia S.A., CO 7552 3096 3044 VIETEL-AS-AP Viettel Group, VN 11492 3552 2937 CABLEONE - CABLE ONE, INC., US Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65550 DOCUMENT 81.8.34.0/24 15924 BORUSANTELEKOM-AS, TR 65550 DOCUMENT 81.8.35.0/24 15924 BORUSANTELEKOM-AS, TR 1358592 UNALLOCATED 103.134.14.0/23 63956 COLO-AS-AP Colocation Australi 1358592 UNALLOCATED 103.134.14.0/24 63956 COLO-AS-AP Colocation Australi 1358592 UNALLOCATED 103.134.15.0/24 63956 COLO-AS-AP Colocation Australi 65549 DOCUMENT 117.239.163.0/24 65544 UNKNOWN 224413 UNALLOCATED 131.221.136.0/24 264413 Conecta Telecom Ltda, BR 64339 UNALLOCATED 143.0.108.0/22 18747 IFX18747 - IFX Corporation, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 2.58.224.0/24 201843 IBERSONTEL, ES 2.58.225.0/24 201843 IBERSONTEL, ES 2.58.226.0/24 201843 IBERSONTEL, ES 2.58.227.0/24 201843 IBERSONTEL, ES 27.100.7.0/24 56096 UNKNOWN 27.126.156.0/22 55827 UNKNOWN 27.126.156.0/23 55827 UNKNOWN 27.126.158.0/23 55827 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:12 /9:10 /10:36 /11:100 /12:291 /13:566 /14:1136 /15:1910 /16:13364 /17:7963 /18:13927 /19:25677 /20:39958 /21:46164 /22:92856 /23:75692 /24:421180 /25:965 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4339 5427 UNI2-AS, ES 6327 3376 3601 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2779 3552 CABLEONE - CABLE ONE, INC., US 8551 2723 3269 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2620 3382 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 11830 2049 2704 Instituto Costarricense de Electricidad y Telec 18566 2007 2112 MEGAPATH5-US - MegaPath Corporation, US 30036 1878 2131 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 5650 1761 2094 FRONTIER-FRTR - Frontier Communications of Amer Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1606 2:865 4:22 5:2944 6:45 7:1 8:1255 9:1 11:3 12:1849 13:322 14:1952 15:36 16:4 17:240 18:59 20:49 23:2621 24:2544 25:2 27:2547 31:2076 32:97 35:36 36:845 37:3044 38:1700 39:296 40:120 41:3133 42:752 43:2022 44:147 45:7017 46:3251 47:252 49:1361 50:1100 51:322 52:1027 54:289 55:2 56:9 57:43 58:1694 59:1076 60:502 61:2073 62:2007 63:1812 64:4999 65:2216 66:4838 67:2706 68:1169 69:3531 70:1331 71:602 72:2452 74:2761 75:513 76:550 77:1723 78:1761 79:2323 80:1805 81:1505 82:1129 83:888 84:1104 85:2286 86:534 87:1563 88:1035 89:2485 90:222 91:6590 92:1351 93:2444 94:2590 95:3207 96:921 97:344 98:949 99:206 100:89 101:1158 102:480 103:20679 104:3560 105:247 106:847 107:1771 108:688 109:3729 110:1635 111:1885 112:1478 113:1390 114:1135 115:1762 116:1715 117:1892 118:2185 119:1644 120:1020 121:1034 122:2329 123:1652 124:1470 125:1971 128:1258 129:831 130:534 131:1653 132:722 133:219 134:1051 135:242 136:574 137:714 138:2047 139:844 140:578 141:859 142:854 143:1060 144:846 145:509 146:1268 147:805 148:1704 149:820 150:781 151:1011 152:1034 153:322 154:2814 155:899 156:1678 157:939 158:643 159:1915 160:1531 161:932 162:2691 163:799 164:1136 165:1567 166:452 167:1398 168:3286 169:868 170:4068 171:568 172:1166 173:2196 174:1014 175:909 176:2333 177:4209 178:2538 179:1456 180:2160 181:2397 182:2690 183:1075 184:1191 185:14883 186:3666 187:2442 188:2893 189:1984 190:8321 191:1512 192:10027 193:6647 194:5421 195:4072 196:3009 197:1613 198:5861 199:5986 200:7226 201:5119 202:10379 203:10229 204:4548 205:2994 206:3216 207:3260 208:3964 209:4247 210:3930 211:2000 212:3057 213:2904 214:1082 215:54 216:5918 217:2225 218:876 219:579 220:1876 221:967 222:984 223:1401 End of report

1 0

RPKI validator 3: initial sync regression?
by nusenu 22 Mar '19

22 Mar '19

Hi, lately with validator 3 version > 370 it felt like rpki-validator 3 is less reliable and taking longer to download RPKI repository data (especially RIPE's) when starting for the first time when compared to older version (313) where it probably took less than 5 minutes after starting it to have the data for all regions. I reproduced this consistently. Can you think of anything that caused this? Does anyone else see this as well? Unfortunately I didn't find any changelogs and it is not obvious what version relates to what git commit since there are no git tags in the github repo. It would be great to have changelogs or git tags. thank you, nusenu -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

5 4

New on RIPE Labs: Results of the First RPKI Deployathon
by Mirjam Kuehne 22 Mar '19

22 Mar '19

Dear colleagues, The RIPE NCC and Juniper Networks co-hosted the first Deployathon on RPKI – a two-day event that brought together network professionals from 7 countries to work on practical aspects of routing security. Please find the results on RIPE Labs: https://labs.ripe.net/Members/antony_stergiopoulos/results-of-the-first-rpk… Kind regards, Mirjam Kühne RIPE NCC

2 1

Now on RIPE Labs: BGP Communities - A Weapon for the Internet
by Mirjam Kuehne 21 Mar '19

21 Mar '19

Dear colleagues, In these two articles on RIPE Labs Franziska Lichtblau and Florian Streibelt present a new attack vector on the Internet routing infrastructure using BGP communities: https://labs.ripe.net/Members/florian_streibelt/bgp-communities-a-weapon-fo… https://labs.ripe.net/Members/florian_streibelt/bgp-communities-a-weapon-fo… In the meantime this study won the Applied Networking Research Prizes and will be presented at the Internet Research Task Force meeting next week in Prague. Kind regards, Mirjam Kühne RIPE NCC

1 0

2019-03 New Policy Proposal (BGP Hijacking is a RIPE Policy Violation) to be discussed on Anti-Abuse Working Group Mailing List
by Marco Schmidt 19 Mar '19

19 Mar '19

Dear colleagues, A new RIPE Policy proposal, 2019-03, "BGP Hijacking is a RIPE Policy Violation", is now available for discussion. This proposed policy is of interest to both the Anti-Abuse and Routing working groups. The chairs of both these working groups have agreed to keep the discussion on one single mailing list to avoid duplication, and for formal consideration of the proposal within the RIPE Policy Development Process. You are therefore requested to share your feedback on this proposal with the Anti-Abuse mailing list. The goal of this proposal is to define that BGP hijacking is not accepted as normal practice within the RIPE NCC service region. You can find the full proposal at: https://www.ripe.net/participate/policies/proposals/2019-03 We encourage you to review this proposal and send your comments to <anti-abuse-wg(a)ripe.net> before 17 April 2019. Kind regards, Marco Schmidt Policy Officer RIPE NCC

1 0

RIS dumps, 0.0.0.0/0 routes and RPKI validator 3
by nusenu 18 Mar '19

18 Mar '19

Hello, I've got some really strange results when talking to rpki-validator 3's API and after some up and downgrading I concluded that it has to be in the RIS dumps (that was the only static data regardless of the validator version) and then I found the likely cause: AS15576 announcing 0.0.0.0/0 As of writing this email the first entry on this page: https://rpki-validator.ripe.net/bgp-preview but when we look at: https://stat.ripe.net/widget/as-routing-consistency#w.resource=AS15576 it is not there. I assumed RIPEstat uses the same data source (RIS) just with some less delay. Are 0.0.0.0/0 routes filtered by RIPEstat but included in RIS dumps? Should rpki-validator filter them out? thanks, nusenu -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

5 7