April 2021 - routing-wg - mailman.ripe.net

RPKI: how to migrate an entire industry from RSYNC to RRDP?
by Job Snijders 13 Apr '21

13 Apr '21

Hi all, Some might be wondering what the deal is with RSYNC and RRDP? Why it is critical to continue to support RSYNC in the mid-term? What's the industry's plan to migrate from RSYNC to RRDP? TL;DR - All RIRs need to support both RSYNC and RRDP until at least 2024. - All RRDP-capable validators need to make sure they are fully backwards compatible with RSYNC, until RIRs no longer observe RSYNC traffic. Some background: ---------------- The development of the RPKI technology stack began more than a decade ago in the IETF. From the start, RSYNC was the preferred synchronisation protocol between RPKI publication servers (such as 'rpki.ripe.net') and Relying Parties (the likes of Telia, NTT, Amazon, me, and you). RSYNC was picked for a number of reasons: it was available & easy. A core concept of the RPKI technology stack is that RPKI objects can be transported via any means: carrier pigeon (RFC 2549 ;-), USB stick, FTP, RSYNC, ... anything! This is possible because RPKI exclusively relies on 'object security', the RPKI objects themselves contain all information that is required to perform X.509-based validation. As time went by, a second approach was developed to synchronize RPs to fresh data generated by CAs. It was recognized that where RSYNC servers need to calculate the 'difference' between the client has and what the server has (right after the RSYNC client connects), such data could also be generated a-priori and stored in static files. Pre-generating such a 'journal' of all changes in a repository is considered to be far efficient than calculating it on the fly. The RRDP protocol has many appealing properties! In 2017 the RRDP protocol was published as IETF RFC as 'nice to have' synchronization protocol for the RPKI. Since then, more and more Publication Servers operators and RP software implementers worked to support the new RRDP protocol alongside the old RSYNC protocol. With two options available, how to migrate? ------------------------------------------- This Gordian Knot has two aspects: all deployed RPKI repository operators have to support RRDP, and all deployed Relying Party have to support RRDP. This means that for a succesful transition, for a moment in time, all stakeholders have to support both RSYNC and RRDP. The industry has not yet reached that point. I expect this to happen somewhere in 2023. At this moment of writing, not all Relying Party software, and not all RPKI Repository Operators support RRDP. Based on various communications in the IETF it is clear everyone is working towards implementing RRDP support. However producing a safe implementation of RRDP is not a trivial task, it takes time. As RSYNC existed first and RRDP came later, everyone should be allowed ample time to make the transition. While everyone waits for everyone to deploy RRDP capable software, the trick is to PREFER synchronizing via RRDP (and if it fails try RSYNC). Relevant Internet-Draft: https://datatracker.ietf.org/doc/draft-ietf-sidrops-prefer-rrdp/ The concept this is somewhat analogous to 'Happy Eyeballs': for a period of time many considered it advantageous for global IPv6 deployment to give IPv6 just a little bit of a head start compared to IPv4. People knew that purposefully degrading IPv4 would not motivate people to embrace IPv6. Also, preferring RRDP (and only using RSYNC in case of RRDP failure), makes life easier for RPKI Repository operators: it should be possible for them to temporarily disable the RRDP webserver and expect clients to use RSYNC instead. Knowing that clients will gracefully fall back to RSYNC lowers the barrier to deploy RRDP. Once all RP implementations have embraced the 'prefer RRDP' strategy, and those implemenations have trickled down into the hands of network operators and deployed in the field, Repository Operators will observe less and less clients connecting to the RSYNC service and more and more syncing via RRDP, to the point where it becomes self-evident publication via RSYNC can maybe even be decommissioned all together. TL;DR - general availability of software which prefers RRDP over RSYNC, combined with patience, should be sufficient of a plan to migrate! :) Current status -------------- Current versions of OpenBSD rpki-client supports RSYNC. The team is actively working to also support RRDP. The hope is to release a stable version later this year. OpenBSD supports releases for one year, thus any deprecation of RSYNC services should be post-poned at least until Spring 2023 to avoid disenfranchising existing deployments in the field. The RIPE NCC Validator RRDP implementation is broken. It is trivial for any RRDP Repository Operator to remotely crash the entire RIPE NCC validator process. Luckily the software is almost End-Of-Life and soon won't be relevant anymore. Current versions of Routinator are unable to fall back to RSYNC. However in November 2020, the team indicated they would fix this in the next release (which has yet to happen). Perhaps somewhat counterintuitive, an inability to fallback to RSYNC, makes migrating towards RRDP harder for the industry. For a peer-reviewed scientific publication on this phenomena see: https://dl.acm.org/doi/10.1145/3419394.3423622 I've not inspected how other validators behave, and we should keep in mind proprietary rsync-only validator implementations might exist this community is not aware of! How to move forward in the short term? -------------------------------------- RIPE NCC must support RSYNC as a first-class service. The RPKI via RSYNC is a LIVE production system. The global Internet routing system relies on the Trust Anchors to publish correctly. The suggestion it might take six months (from report to resolution) is too long of a waiting period for this type of issue. There are known negative interactions between inconsistent RPKI publications & BGP routing in the Default-Free Zone. This affects all Internet users. It is not possible to get hundreds of operators to migrate to RRDP overnight, but it is possible for RIPE NCC to improve RSYNC publication (while the world very slowly moves to RRDP). Kind regards, Job

2 1

RPKI Route Origin Validation on RIPE NCC Network
by Nathalie Trenaman 13 Apr '21

13 Apr '21

Dear colleagues, (My colleagues are drafting a reply on the rsync issue) Following up on my previous email and the discussion we had in this mailing last about enabling Route Origin Validation (ROV) invalid == reject on the RIPE NCC’s network, AS3333, I am happy to inform you that we will be going ahead on Monday, 19 April. I have written a RIPE Labs article with more information, which you can find at: https://labs.ripe.net/author/nathalie_nathalie/rpki-and-as3333-or-how-we-ea… Thank you very much for your contributions, discussion and support. Kind Regards, Nathalie Trenaman Routing Security Programme Manager RIPE NCC

1 0

Weekly Routing Table Report
by cscora＠apnic.net 09 Apr '21

09 Apr '21

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 10 Apr, 2021 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 855145 Prefixes after maximum aggregation (per Origin AS): 324141 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 406808 Total ASes present in the Internet Routing Table: 71034 Prefixes per ASN: 12.04 Origin-only ASes present in the Internet Routing Table: 61106 Origin ASes announcing only one prefix: 25216 Transit ASes present in the Internet Routing Table: 9928 Transit-only ASes present in the Internet Routing Table: 307 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 38 Max AS path prepend of ASN ( 37385) 33 Prefixes from unregistered ASNs in the Routing Table: 1015 Number of instances of unregistered ASNs: 1021 Number of 32-bit ASNs allocated by the RIRs: 35637 Number of 32-bit ASNs visible in the Routing Table: 29671 Prefixes from 32-bit ASNs in the Routing Table: 138154 Number of bogon 32-bit ASNs visible in the Routing Table: 21 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 530 Number of addresses announced to Internet: 2955025792 Equivalent to 176 /8s, 34 /16s and 29 /24s Percentage of available address space announced: 79.8 Percentage of allocated address space announced: 79.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 290123 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 226451 Total APNIC prefixes after maximum aggregation: 65430 APNIC Deaggregation factor: 3.46 Prefixes being announced from the APNIC address blocks: 222562 Unique aggregates announced from the APNIC address blocks: 89330 APNIC Region origin ASes present in the Internet Routing Table: 11459 APNIC Prefixes per ASN: 19.42 APNIC Region origin ASes announcing only one prefix: 3264 APNIC Region transit ASes present in the Internet Routing Table: 1624 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 30 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6613 Number of APNIC addresses announced to Internet: 772040448 Equivalent to 46 /8s, 4 /16s and 103 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 245433 Total ARIN prefixes after maximum aggregation: 112906 ARIN Deaggregation factor: 2.17 Prefixes being announced from the ARIN address blocks: 245868 Unique aggregates announced from the ARIN address blocks: 117633 ARIN Region origin ASes present in the Internet Routing Table: 18781 ARIN Prefixes per ASN: 13.09 ARIN Region origin ASes announcing only one prefix: 6810 ARIN Region transit ASes present in the Internet Routing Table: 1947 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 30 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3816 Number of ARIN addresses announced to Internet: 1189315840 Equivalent to 70 /8s, 227 /16s and 133 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 243686 Total RIPE prefixes after maximum aggregation: 113656 RIPE Deaggregation factor: 2.14 Prefixes being announced from the RIPE address blocks: 239659 Unique aggregates announced from the RIPE address blocks: 141179 RIPE Region origin ASes present in the Internet Routing Table: 27870 RIPE Prefixes per ASN: 8.60 RIPE Region origin ASes announcing only one prefix: 11972 RIPE Region transit ASes present in the Internet Routing Table: 3881 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 38 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10094 Number of RIPE addresses announced to Internet: 710577792 Equivalent to 42 /8s, 90 /16s and 142 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 112832 Total LACNIC prefixes after maximum aggregation: 26497 LACNIC Deaggregation factor: 4.26 Prefixes being announced from the LACNIC address blocks: 113977 Unique aggregates announced from the LACNIC address blocks: 48238 LACNIC Region origin ASes present in the Internet Routing Table: 10748 LACNIC Prefixes per ASN: 10.60 LACNIC Region origin ASes announcing only one prefix: 2673 LACNIC Region transit ASes present in the Internet Routing Table: 2015 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 33 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8356 Number of LACNIC addresses announced to Internet: 174957312 Equivalent to 10 /8s, 109 /16s and 163 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 25727 Total AfriNIC prefixes after maximum aggregation: 4898 AfriNIC Deaggregation factor: 5.25 Prefixes being announced from the AfriNIC address blocks: 32549 Unique aggregates announced from the AfriNIC address blocks: 9949 AfriNIC Region origin ASes present in the Internet Routing Table: 1450 AfriNIC Prefixes per ASN: 22.45 AfriNIC Region origin ASes announcing only one prefix: 497 AfriNIC Region transit ASes present in the Internet Routing Table: 294 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 38 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 792 Number of AfriNIC addresses announced to Internet: 107705088 Equivalent to 6 /8s, 107 /16s and 115 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 6279 8996 55 CMNET-GD Guangdong Mobile Communication 7545 5719 783 675 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4752 4192 74 ERX-CERNET-BKB China Education and Rese 7713 3524 1022 55 TELKOMNET-AS-AP PT Telekomunikasi Indon 7552 3489 1330 21 VIETEL-AS-AP Viettel Group, VN 45899 2912 1896 54 VNPT-AS-VN VNPT Corp, VN 4766 2435 11104 565 KIXS-AS-KR Korea Telecom, KR 9498 2321 482 232 BBIL-AP BHARTI Airtel Ltd., IN 4755 2120 441 190 TATACOMM-AS TATA Communications formerl 45090 2098 1197 72 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 4960 9264 2226 AMAZON-02, US 11492 4753 315 712 CABLEONE, US 7155 4030 264 32 VIASAT-SP-BACKBONE, US 22773 3914 2998 246 ASN-CXA-ALL-CCI-22773-RDC, US 16625 3362 1744 2403 AKAMAI-AS, US 6327 3358 1317 70 SHAW, CA 30036 2533 370 206 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2527 5053 485 CENTURYLINK-US-LEGACY-QWEST, US 5650 2335 2996 1636 FRONTIER-FRTR, US 5972 2222 448 787 DNIC-ASBLK-05800-06055, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 47331 7756 1043 3490 TTNET, TR 12479 6393 1700 139 UNI2-AS, ES 20940 3575 3347 201 AKAMAI-ASN1, NL 8551 3280 379 41 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 39891 3266 187 22 ALJAWWALSTC-AS, SA 12389 2902 2284 899 ROSTELECOM-AS, RU 9009 2378 246 1278 M247, GB 34984 2215 357 587 TELLCOM-AS, TR 13188 1610 100 31 TRIOLAN, UA 58224 1569 881 576 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8484 3472 569 Uninet S.A. de C.V., MX 10620 3409 527 603 Telmex Colombia S.A., CO 11830 2552 369 63 Instituto Costarricense de Electricidad 7303 1862 1725 295 Telecom Argentina S.A., AR 13999 1659 447 428 Mega Cable, S.A. de C.V., MX 6503 1443 311 475 Axtel, S.A.B. de C.V., MX 28573 1366 2271 223 CLARO S.A., BR 3816 1223 638 157 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1128 377 39 Telefonica del Peru S.A.A., PE 11664 1004 212 402 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1542 393 22 LINKdotNET-AS, EG 24835 1443 486 27 RAYA-AS, EG 36992 1195 1537 174 ETISALAT-MISR, EG 36903 1189 530 107 MT-MPLS, MA 29571 711 68 11 ORANGE-COTE-IVOIRE, CI 6713 546 1863 34 IAM-AS, MA 36935 514 522 40 Vodafone-, EG 37342 487 32 1 MOVITEL, MZ 15399 477 47 17 WANANCHI-, KE 23889 439 232 16 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8484 3472 569 Uninet S.A. de C.V., MX 47331 7756 1043 3490 TTNET, TR 12479 6393 1700 139 UNI2-AS, ES 9808 6279 8996 55 CMNET-GD Guangdong Mobile Communication 7545 5719 783 675 TPG-INTERNET-AP TPG Telecom Limited, AU 16509 4960 9264 2226 AMAZON-02, US 11492 4753 315 712 CABLEONE, US 4538 4752 4192 74 ERX-CERNET-BKB China Education and Rese 7155 4030 264 32 VIASAT-SP-BACKBONE, US 22773 3914 2998 246 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6393 6254 UNI2-AS, ES 9808 6279 6224 CMNET-GD Guangdong Mobile Communication Co.Ltd. 7545 5719 5044 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4752 4678 ERX-CERNET-BKB China Education and Research Net 47331 7756 4266 TTNET, TR 11492 4753 4041 CABLEONE, US 7155 4030 3998 VIASAT-SP-BACKBONE, US 22773 3914 3668 ASN-CXA-ALL-CCI-22773-RDC, US 7713 3524 3469 TELKOMNET-AS-AP PT Telekomunikasi Indonesia, ID 7552 3489 3468 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 46505 UNALLOCATED 12.7.131.0/24 7018 ATT-INTERNET4, US 15132 UNALLOCATED 12.9.150.0/24 1239 SPRINTLINK, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 397881 STINGERS, US Transit: 398481 REDMERCURY, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala 27.126.156.0/23 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:13 /9:12 /10:40 /11:102 /12:293 /13:584 /14:1187 /15:1945 /16:13528 /17:8326 /18:13861 /19:25845 /20:42465 /21:51406 /22:106450 /23:90910 /24:496778 /25:1400 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 47331 6933 7756 TTNET, TR 12479 5350 6393 UNI2-AS, ES 11492 3807 4753 CABLEONE, US 6327 3165 3358 SHAW, CA 7155 3118 4030 VIASAT-SP-BACKBONE, US 8151 3057 8484 Uninet S.A. de C.V., MX 22773 2955 3914 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2801 3266 ALJAWWALSTC-AS, SA 8551 2744 3280 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2218 2533 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1879 2:1111 3:105 4:19 5:3556 6:63 7:5 8:1506 9:1 11:36 12:1748 13:360 14:2302 15:73 16:15 17:317 18:93 20:128 22:188 23:4622 24:2400 25:2 27:2497 29:19 31:2309 32:113 34:2 35:40 36:1303 37:3759 38:2062 39:608 40:161 41:3846 42:924 43:2118 44:237 45:14937 46:3699 47:320 49:1609 50:1753 51:92 52:1211 54:218 55:737 56:8 57:57 58:1728 59:1200 60:887 61:2390 62:2194 63:1961 64:5283 65:2383 66:5143 67:2869 68:1152 69:4048 70:1397 71:689 72:3180 74:2580 75:1483 76:682 77:2026 78:3675 79:2445 80:1864 81:1632 82:1342 83:1119 84:1256 85:3343 86:707 87:1775 88:2701 89:3024 90:430 91:7298 92:1741 93:2538 94:3089 95:4409 96:1256 97:345 98:984 99:970 100:90 101:1047 102:1362 103:25811 104:3702 105:436 106:728 107:2239 108:707 109:3994 110:2011 111:2942 112:1973 113:1616 114:1465 115:1874 116:1894 117:2307 118:2339 119:1884 120:1105 121:1083 122:2266 123:2213 124:1574 125:2094 128:1364 129:955 130:834 131:2035 132:761 133:355 134:1604 135:289 136:745 137:921 138:2300 139:1186 140:742 141:1186 142:1118 143:1260 144:1254 145:331 146:1392 147:1296 148:2210 149:1446 150:799 151:1080 152:1553 153:394 154:2315 155:1330 156:1487 157:1171 158:926 159:2018 160:2089 161:1129 162:3272 163:974 164:1498 165:1332 166:593 167:1776 168:3573 169:664 170:4251 171:767 172:2124 173:2935 174:969 175:1087 176:3110 177:4334 178:2894 179:1953 180:2309 181:2553 182:3216 183:1813 184:2412 185:18143 186:4197 187:3170 188:3283 189:2820 190:8861 191:1470 192:10657 193:7986 194:6579 195:4712 196:2901 197:2369 198:6042 199:6028 200:7422 201:5344 202:10598 203:10057 204:4657 205:3331 206:3528 207:3364 208:4008 209:4654 210:4254 211:2192 212:3694 213:3302 214:1220 215:61 216:6180 217:2524 218:1158 219:703 220:2082 221:973 222:978 223:1850 End of report

1 0

RIPE Database requirements progress
by ripedenis＠yahoo.co.uk 08 Apr '21

08 Apr '21

Colleagues For the benefit of those who don't often check the mail archives of the RIPE Database Task Force there have been 4 meetings in February and March and the TF has just published the minutes of their most recent meeting on their mail archive which can be found here:https://www.ripe.net/ripe/mail/archives/ripe-db-requirements-tf/ Their latest draft requirements document can be found here:https://www.ripe.net/participate/ripe/tf/rdb-requirements-tf/the-ripe-… There are quite a number of recommendations made regarding the IRR and routing data in the RIPE Database. It would be helpful if more people would read this document and comment or discuss publicly on this WG mailing list any issues regarding the TF draft document before they publish their final version of the requirements. They also plan to hold a BOF sometime in May where you can make comments. cheersdenisco-chair DB-WG

1 0

Weekly Routing Table Report
by cscora＠apnic.net 02 Apr '21

02 Apr '21

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 03 Apr, 2021 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 854726 Prefixes after maximum aggregation (per Origin AS): 323513 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 406182 Total ASes present in the Internet Routing Table: 70970 Prefixes per ASN: 12.04 Origin-only ASes present in the Internet Routing Table: 61044 Origin ASes announcing only one prefix: 25196 Transit ASes present in the Internet Routing Table: 9926 Transit-only ASes present in the Internet Routing Table: 312 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 38 Max AS path prepend of ASN ( 37385) 33 Prefixes from unregistered ASNs in the Routing Table: 967 Number of instances of unregistered ASNs: 971 Number of 32-bit ASNs allocated by the RIRs: 35604 Number of 32-bit ASNs visible in the Routing Table: 29608 Prefixes from 32-bit ASNs in the Routing Table: 137894 Number of bogon 32-bit ASNs visible in the Routing Table: 15 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 522 Number of addresses announced to Internet: 2918308992 Equivalent to 173 /8s, 241 /16s and 220 /24s Percentage of available address space announced: 78.8 Percentage of allocated address space announced: 78.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 290249 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 226287 Total APNIC prefixes after maximum aggregation: 65318 APNIC Deaggregation factor: 3.46 Prefixes being announced from the APNIC address blocks: 222425 Unique aggregates announced from the APNIC address blocks: 89164 APNIC Region origin ASes present in the Internet Routing Table: 11432 APNIC Prefixes per ASN: 19.46 APNIC Region origin ASes announcing only one prefix: 3255 APNIC Region transit ASes present in the Internet Routing Table: 1621 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 30 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6586 Number of APNIC addresses announced to Internet: 771899392 Equivalent to 46 /8s, 2 /16s and 64 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 245102 Total ARIN prefixes after maximum aggregation: 112563 ARIN Deaggregation factor: 2.18 Prefixes being announced from the ARIN address blocks: 245569 Unique aggregates announced from the ARIN address blocks: 117445 ARIN Region origin ASes present in the Internet Routing Table: 18774 ARIN Prefixes per ASN: 13.08 ARIN Region origin ASes announcing only one prefix: 6815 ARIN Region transit ASes present in the Internet Routing Table: 1936 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 30 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3802 Number of ARIN addresses announced to Internet: 1152747008 Equivalent to 68 /8s, 181 /16s and 134 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 243836 Total RIPE prefixes after maximum aggregation: 113503 RIPE Deaggregation factor: 2.15 Prefixes being announced from the RIPE address blocks: 239762 Unique aggregates announced from the RIPE address blocks: 140974 RIPE Region origin ASes present in the Internet Routing Table: 27846 RIPE Prefixes per ASN: 8.61 RIPE Region origin ASes announcing only one prefix: 11961 RIPE Region transit ASes present in the Internet Routing Table: 3888 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 38 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10077 Number of RIPE addresses announced to Internet: 710602624 Equivalent to 42 /8s, 90 /16s and 239 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 112996 Total LACNIC prefixes after maximum aggregation: 26483 LACNIC Deaggregation factor: 4.27 Prefixes being announced from the LACNIC address blocks: 114121 Unique aggregates announced from the LACNIC address blocks: 48185 LACNIC Region origin ASes present in the Internet Routing Table: 10743 LACNIC Prefixes per ASN: 10.62 LACNIC Region origin ASes announcing only one prefix: 2667 LACNIC Region transit ASes present in the Internet Routing Table: 2020 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 33 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8352 Number of LACNIC addresses announced to Internet: 174952960 Equivalent to 10 /8s, 109 /16s and 146 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 25537 Total AfriNIC prefixes after maximum aggregation: 4909 AfriNIC Deaggregation factor: 5.20 Prefixes being announced from the AfriNIC address blocks: 32327 Unique aggregates announced from the AfriNIC address blocks: 9941 AfriNIC Region origin ASes present in the Internet Routing Table: 1447 AfriNIC Prefixes per ASN: 22.34 AfriNIC Region origin ASes announcing only one prefix: 498 AfriNIC Region transit ASes present in the Internet Routing Table: 294 Average AfriNIC Region AS path length visible: 5.2 Max AfriNIC Region AS path length visible: 38 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 791 Number of AfriNIC addresses announced to Internet: 107682816 Equivalent to 6 /8s, 107 /16s and 28 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 6267 8996 55 CMNET-GD Guangdong Mobile Communication 7545 5736 783 674 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4838 4192 74 ERX-CERNET-BKB China Education and Rese 7713 3528 1022 55 TELKOMNET-AS-AP PT Telekomunikasi Indon 7552 3515 1330 21 VIETEL-AS-AP Viettel Group, VN 45899 2914 1896 54 VNPT-AS-VN VNPT Corp, VN 4766 2435 11104 565 KIXS-AS-KR Korea Telecom, KR 9498 2318 482 232 BBIL-AP BHARTI Airtel Ltd., IN 4755 2125 441 190 TATACOMM-AS TATA Communications formerl 45090 2097 1197 71 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 4920 9258 2210 AMAZON-02, US 11492 4751 315 710 CABLEONE, US 7155 4027 264 32 VIASAT-SP-BACKBONE, US 22773 3918 2998 246 ASN-CXA-ALL-CCI-22773-RDC, US 16625 3377 1750 2399 AKAMAI-AS, US 6327 3359 1317 71 SHAW, CA 30036 2541 372 94 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2525 5038 490 CENTURYLINK-US-LEGACY-QWEST, US 5650 2342 2996 1636 FRONTIER-FRTR, US 5972 2216 448 786 DNIC-ASBLK-05800-06055, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 47331 7753 1043 3473 TTNET, TR 12479 6381 1701 138 UNI2-AS, ES 20940 3577 3347 202 AKAMAI-ASN1, NL 39891 3266 187 22 ALJAWWALSTC-AS, SA 8551 3242 379 41 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2892 2282 892 ROSTELECOM-AS, RU 9009 2377 246 1276 M247, GB 34984 2202 356 582 TELLCOM-AS, TR 13188 1610 100 31 TRIOLAN, UA 58224 1570 881 572 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8481 3472 570 Uninet S.A. de C.V., MX 10620 3413 527 596 Telmex Colombia S.A., CO 11830 2560 369 63 Instituto Costarricense de Electricidad 7303 1872 1732 296 Telecom Argentina S.A., AR 13999 1654 446 427 Mega Cable, S.A. de C.V., MX 6503 1444 311 476 Axtel, S.A.B. de C.V., MX 28573 1386 2269 223 CLARO S.A., BR 3816 1210 623 154 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1128 377 39 Telefonica del Peru S.A.A., PE 11664 995 211 399 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1582 393 22 LINKdotNET-AS, EG 24835 1443 486 27 RAYA-AS, EG 36992 1194 1537 174 ETISALAT-MISR, EG 36903 977 510 104 MT-MPLS, MA 29571 711 68 11 ORANGE-COTE-IVOIRE, CI 6713 540 1863 34 IAM-AS, MA 36935 514 522 40 Vodafone-, EG 37342 487 32 1 MOVITEL, MZ 15399 477 47 17 WANANCHI-, KE 23889 447 232 16 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8481 3472 570 Uninet S.A. de C.V., MX 47331 7753 1043 3473 TTNET, TR 12479 6381 1701 138 UNI2-AS, ES 9808 6267 8996 55 CMNET-GD Guangdong Mobile Communication 7545 5736 783 674 TPG-INTERNET-AP TPG Telecom Limited, AU 16509 4920 9258 2210 AMAZON-02, US 4538 4838 4192 74 ERX-CERNET-BKB China Education and Rese 11492 4751 315 710 CABLEONE, US 7155 4027 264 32 VIASAT-SP-BACKBONE, US 22773 3918 2998 246 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6381 6243 UNI2-AS, ES 9808 6267 6212 CMNET-GD Guangdong Mobile Communication Co.Ltd. 7545 5736 5062 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4838 4764 ERX-CERNET-BKB China Education and Research Net 47331 7753 4280 TTNET, TR 11492 4751 4041 CABLEONE, US 7155 4027 3995 VIASAT-SP-BACKBONE, US 22773 3918 3672 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3515 3494 VIETEL-AS-AP Viettel Group, VN 7713 3528 3473 TELKOMNET-AS-AP PT Telekomunikasi Indonesia, ID Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 46505 UNALLOCATED 12.7.131.0/24 7018 ATT-INTERNET4, US 15132 UNALLOCATED 12.9.150.0/24 1239 SPRINTLINK, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 397881 STINGERS, US Transit: 398481 REDMERCURY, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala 27.126.156.0/23 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:11 /9:12 /10:40 /11:102 /12:292 /13:583 /14:1184 /15:1945 /16:13515 /17:8359 /18:13853 /19:25799 /20:42439 /21:51375 /22:106396 /23:90727 /24:496686 /25:1408 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 47331 6929 7753 TTNET, TR 12479 5337 6381 UNI2-AS, ES 11492 3805 4751 CABLEONE, US 6327 3165 3359 SHAW, CA 7155 3115 4027 VIASAT-SP-BACKBONE, US 8151 3054 8481 Uninet S.A. de C.V., MX 22773 2959 3918 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2801 3266 ALJAWWALSTC-AS, SA 8551 2706 3242 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2237 2541 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1871 2:1114 3:94 4:19 5:3563 6:63 7:5 8:1502 9:1 11:36 12:1748 13:359 14:2318 15:73 16:15 17:317 18:93 20:129 22:188 23:4622 24:2397 25:2 27:2505 31:2286 32:113 34:2 35:40 36:1287 37:4017 38:2059 39:606 40:161 41:3854 42:924 43:2115 44:238 45:14977 46:3673 47:320 49:1608 50:1751 51:92 52:1208 54:217 55:778 56:6 57:57 58:1733 59:1202 60:891 61:2386 62:2199 63:1963 64:5291 65:2379 66:5159 67:2880 68:1154 69:4055 70:1398 71:689 72:3179 74:2581 75:1481 76:682 77:2018 78:3668 79:2420 80:1862 81:1647 82:1346 83:1118 84:1263 85:3353 86:710 87:1782 88:2703 89:3027 90:423 91:7298 92:1749 93:2537 94:3059 95:4402 96:1259 97:343 98:990 99:969 100:89 101:1047 102:1310 103:25706 104:3707 105:426 106:734 107:2246 108:705 109:3976 110:1993 111:2944 112:1970 113:1621 114:1465 115:1877 116:1889 117:2314 118:2340 119:1891 120:1104 121:1085 122:2265 123:2185 124:1563 125:2094 128:1368 129:954 130:834 131:2043 132:759 133:355 134:1595 135:289 136:750 137:916 138:2302 139:1200 140:736 141:1184 142:1117 143:1267 144:1255 145:331 146:1385 147:1294 148:2206 149:1442 150:788 151:1078 152:1554 153:392 154:2265 155:1326 156:1495 157:1172 158:926 159:2014 160:2092 161:1137 162:3254 163:975 164:1495 165:1335 166:594 167:1773 168:3551 169:663 170:4272 171:763 172:2111 173:2940 174:968 175:1095 176:3102 177:4312 178:2903 179:1957 180:2313 181:2562 182:3210 183:1827 184:2412 185:18154 186:4195 187:3198 188:3296 189:2824 190:8849 191:1487 192:10632 193:7975 194:6562 195:4705 196:2892 197:2363 198:6028 199:6035 200:7425 201:5346 202:10599 203:10085 204:4649 205:3318 206:3532 207:3333 208:4008 209:4645 210:4252 211:2187 212:3682 213:3288 214:1215 215:61 216:6176 217:2520 218:1151 219:703 220:2067 221:992 222:973 223:1859 End of report

1 0

RPKI Invalid == Reject policies on the AS 3333 EBGP border
by Paul Hoogsteder 01 Apr '21

01 Apr '21

Dear RIPE Routing WG and RIPE NCC, after having gone through all responses on the mailing list there seems to be unanimous support for RIPE NCC to proceed with the deployment of "RPKI Invalid == Reject" policies on the AS 3333 EBGP border. Kind regards, Job Snijders & Paul Hoogsteder

5 5