- routing-wg - mailman.ripe.net

Re: [routing-wg] Notification/authorisation of references to aut-num from other RPSL objects
by George Michaelson 27 Nov '14

27 Nov '14

I am trying to understand how this change could {help,hinder} the APNIC problem of route objects which reference differently maintained AS and Inetnum objects, and the added complication of AS being vested from RIPE and Inetnum from APNIC. I think stripping/changing the notify-on-ref mail might hinder this. It would be materially useful to preserve it, should exported IRR state be used at another site aggregating data, to contact the prime information manager. I suspect RPSS/RPSAUTH issues are out of scope. Within one IRR/RPSL data set, I think the notify-on-ref thing would help the APNIC problem: it would make it easier for non-related maintainer to understand changes were being made in routing by address holders who want their AS to be in a route object, and participate. -George On Wed, Jun 11, 2014 at 5:13 AM, Sander Steffann <sander(a)steffann.nl> wrote: > Hi Job, > > > I think some notification feature would be nice to have, but we need to > > figure out what and when we expect notifications. > > > > I propose we dub the attribute for nice alignment with existing > > attributes: > > > > notify-on-ref: <email-address> optional, multi-valued > > > > Questions: > > > > - do you want a notification each time an object is updated and has > > a reference to your object? > > Strong no > > > - or do you only want notifications when a reference inititally is > > added to an object? (spares you a daily mailbomb for daily updated > > objects) > > Yes > > > - do you want a notification when the reference is removed from an > > object? > > Yes > > > - In what classes do you want to set a notify-on-ref attribute? (I > > think initially aut-num, as-set, rd-set) > > Ack > > > - do we want the notify-on-ref email addresses to be set to > > unread(a)ripe.net upon NRTM/ftp export? > > No strong opinion on this one. I would say yes, unless someone comes up > with a reason not to. > > > Regarding authorisation, for me requiring authorisation to reference a > > given object is a bridge too far at this point in time. Quite some > > operators automatically generate an autnum, route-sets & as-sets on a > > daily basis to reject their policy, and I don't see an easy way to make > > this a painless adventure. Let's first do notifications and based on > > those experiences look further. ok? > > Yes, that sounds reasonable. Needing authorisation to be allowed to put > information in the policy sounds like a good way to discourage people from > updating/using them altogether. Let's not make things more difficult unless > we really need to. > > Cheers! > Sander > > >

7 11

Who uses the RIPE IRR and for what?
by Ronald F. Guilmette 22 Nov '14

22 Nov '14

I did a little experiment yesterday. I fetched the entire ripe.db.route file from the ripe.net FTP server and for each route specified in that file (a total of 245,890 routes) I extracted the base IPv4 address of the route and then looked that address up within the asn.routeviews.org DNS zone, which is kindly provided by the Routeviews Project at the Advanced Network Technology Center at the University of Oregon. That DNS zone allows users to quickly find the _actual_ route and ASN that is currently associated with any given IPv4 address. The results of my little experiment are simple to summarize. 10,829 of the base addresses listed in the ripe.db.route file are not actually being routed at the present time (at least they weren't, yesterday, at the time I ran this analysis). Of the remaining 235,061 route base IP addresses, fully 28,988 of those (12.3%) are being announced by some AS other than the one specified in the ripe.db.route file. My results file is available here: ftp://ftp.tristatelogic.com/pub/ripe.db.route.routecheck In that file, any line containing only one field -is- being routed and -is- being routed by the AS specified in the ripe.db.route file. Lines in the results file with contain exactly two whitspace separated fields are not currently being routed. Lines in the results file that contain exactly three whitspace separated fields are being routed by some AS other than the one called for within the ripe.db.route file. In these cases, field #1 is the route from the ripe.db.route file, field #2 is the AS number from the ripe.db.route file, and field #3 is the ASN that is _actually_ routing the base IP address at the present time (as of yesterday). Given the considerable number of routing anomalies revealed by my simple experiment, I am inclined to wonder who is actually using all of that route information in the RIPE DB, and what on earth they could be using it for. If anyone could enlighten me on this point, I would appreciate it.

7 10

BGP Update Report
by cidr-report＠potaroo.net 21 Nov '14

21 Nov '14

BGP Update Report Interval: 13-Nov-14 -to- 20-Nov-14 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS12897 1723660 29.3% 246237.1 -- HEAGMEDIANET HSE Medianet GmbH,DE 2 - AS23752 278395 4.7% 2899.9 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 3 - AS9829 193219 3.3% 153.8 -- BSNL-NIB National Internet Backbone,IN 4 - AS7029 79518 1.4% 36.4 -- WINDSTREAM - Windstream Communications Inc,US 5 - AS53249 73466 1.2% 36733.0 -- LAWA-AS - Los Angeles World Airport,US 6 - AS9587 56535 1.0% 1949.5 -- DTACNETWORK-TH-AP 26th Floor 333/3 Moo 14 Chai Building,TH 7 - AS48159 38843 0.7% 125.3 -- TIC-AS Telecommunication Infrastructure Company,IR 8 - AS28885 36232 0.6% 218.3 -- OMANTEL-NAP-AS OmanTel NAP,OM 9 - AS8402 36115 0.6% 22.9 -- CORBINA-AS OJSC "Vimpelcom",RU 10 - AS38197 35819 0.6% 35.0 -- SUNHK-DATA-AS-AP Sun Network (Hong Kong) Limited,HK 11 - AS37693 30493 0.5% 272.3 -- TUNISIANA,TN 12 - AS42337 28878 0.5% 178.3 -- RESPINA-AS Respina Networks & Beyond PJSC,IR 13 - AS14420 28436 0.5% 118.5 -- CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP,EC 14 - AS3816 26128 0.4% 51.8 -- COLOMBIA TELECOMUNICACIONES S.A. ESP,CO 15 - AS3 23691 0.4% 1306.0 -- MIT-GATEWAYS - Massachusetts Institute of Technology,US 16 - AS23342 21980 0.4% 21980.0 -- UNITEDLAYER - Unitedlayer, Inc.,US 17 - AS10620 21295 0.4% 10.7 -- Telmex Colombia S.A.,CO 18 - AS60725 20028 0.3% 4005.6 -- O3B-AS O3b Limited,JE 19 - AS25003 20025 0.3% 667.5 -- INTERNET_BINAT Internet Binat Ltd,IL 20 - AS45899 19807 0.3% 45.6 -- VNPT-AS-VN VNPT Corp,VN TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS12897 1723660 29.3% 246237.1 -- HEAGMEDIANET HSE Medianet GmbH,DE 2 - AS53249 73466 1.2% 36733.0 -- LAWA-AS - Los Angeles World Airport,US 3 - AS23342 21980 0.4% 21980.0 -- UNITEDLAYER - Unitedlayer, Inc.,US 4 - AS3 23691 0.4% 1306.0 -- MIT-GATEWAYS - Massachusetts Institute of Technology,US 5 - AS18135 10850 0.2% 10850.0 -- BTV BTV Cable television,JP 6 - AS62174 4107 0.1% 4107.0 -- INTERPAN-AS INTERPAN LTD.,BG 7 - AS60725 20028 0.3% 4005.6 -- O3B-AS O3b Limited,JE 8 - AS23752 278395 4.7% 2899.9 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 9 - AS10674 2629 0.0% 2629.0 -- GRUCOM - Gainesville Regional Utilities,US 10 - AS56636 2230 0.0% 2230.0 -- ASVEDARU VEDA Ltd.,RU 11 - AS4 2067 0.0% 1465.0 -- ISI-AS - University of Southern California,US 12 - AS12521 3930 0.1% 1965.0 -- NOVA_INTERNET_AS12521 Nova Internet Network,ES 13 - AS9587 56535 1.0% 1949.5 -- DTACNETWORK-TH-AP 26th Floor 333/3 Moo 14 Chai Building,TH 14 - AS35093 3604 0.1% 1802.0 -- RO-HTPASSPORT High Tech Passport Ltd SUA California San Jose SUCURSALA BUCURESTI ROMANIA,RO 15 - AS38808 1721 0.0% 1721.0 -- IMZAK-TRANSIT-AS-AP DSL Service Provider Servers,PK 16 - AS30944 1657 0.0% 1657.0 -- DKD-AS Bendra Lietuvos, JAV ir Rusijos imone uzdaroji akcine bendrove "DKD",LT 17 - AS3328 15997 0.3% 1599.7 -- -Reserved AS-,ZZ 18 - AS11728 1424 0.0% 1424.0 -- INTERNETXT - Internet Exchange Technology, Inc.,US 19 - AS56133 8072 0.1% 1345.3 -- TASMANET-AS-AP Tasmanet Pty Ltd,AU 20 - AS61708 1257 0.0% 1257.0 -- INFOCAT INFORMÁTICA LTDA,BR TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 94.16.64.0/21 247495 4.0% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 2 - 94.16.80.0/20 247386 4.0% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 3 - 94.16.72.0/21 247305 4.0% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 4 - 185.9.28.0/22 246034 4.0% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 5 - 194.127.204.0/23 245774 4.0% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 6 - 194.99.108.0/23 245433 4.0% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 7 - 194.45.104.0/23 244233 4.0% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 8 - 202.70.64.0/21 142246 2.3% AS23752 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 9 - 202.70.88.0/21 135152 2.2% AS23752 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 10 - 198.140.114.0/24 36755 0.6% AS53249 -- LAWA-AS - Los Angeles World Airport,US 11 - 198.140.115.0/24 36711 0.6% AS53249 -- LAWA-AS - Los Angeles World Airport,US 12 - 130.0.192.0/21 23689 0.4% AS3 -- MIT-GATEWAYS - Massachusetts Institute of Technology,US 13 - 64.29.130.0/24 21980 0.4% AS23342 -- UNITEDLAYER - Unitedlayer, Inc.,US 14 - 192.115.44.0/22 19956 0.3% AS25003 -- INTERNET_BINAT Internet Binat Ltd,IL 15 - 111.84.20.0/24 14443 0.2% AS10089 -- DTNCORP-TH-AP Total Access Communication PLC.,TH AS9587 -- DTACNETWORK-TH-AP 26th Floor 333/3 Moo 14 Chai Building,TH 16 - 111.84.22.0/24 14140 0.2% AS10089 -- DTNCORP-TH-AP Total Access Communication PLC.,TH AS9587 -- DTACNETWORK-TH-AP 26th Floor 333/3 Moo 14 Chai Building,TH 17 - 111.84.24.0/24 14065 0.2% AS10089 -- DTNCORP-TH-AP Total Access Communication PLC.,TH AS9587 -- DTACNETWORK-TH-AP 26th Floor 333/3 Moo 14 Chai Building,TH 18 - 162.249.183.0/24 11018 0.2% AS60725 -- O3B-AS O3b Limited,JE 19 - 42.83.48.0/20 10850 0.2% AS18135 -- BTV BTV Cable television,JP 20 - 192.58.232.0/24 10619 0.2% AS6629 -- NOAA-AS - NOAA,US Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 21 Nov '14

21 Nov '14

This report has been generated at Fri Nov 21 21:14:20 2014 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/2.0 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 14-11-14 529142 292269 15-11-14 529099 292324 16-11-14 528626 292487 17-11-14 529189 292529 18-11-14 525180 291108 19-11-14 524073 291010 20-11-14 523781 290774 21-11-14 524001 290386 AS Summary 48906 Number of ASes in routing system 19638 Number of ASes announcing only one prefix 3041 Largest number of prefixes announced by an AS AS10620: Telmex Colombia S.A.,CO 120110336 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street,CN Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 21Nov14 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 523120 290391 232729 44.5% All ASes AS6389 2894 126 2768 95.6% BELLSOUTH-NET-BLK - BellSouth.net Inc.,US AS17974 2846 83 2763 97.1% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia,ID AS22773 2853 176 2677 93.8% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc.,US AS28573 2372 284 2088 88.0% NET Serviços de Comunicação S.A.,BR AS4766 2960 1341 1619 54.7% KIXS-AS-KR Korea Telecom,KR AS7303 1770 290 1480 83.6% Telecom Argentina S.A.,AR AS10620 3041 1574 1467 48.2% Telmex Colombia S.A.,CO AS9808 1485 55 1430 96.3% CMNET-GD Guangdong Mobile Communication Co.Ltd.,CN AS8402 1365 29 1336 97.9% CORBINA-AS OJSC "Vimpelcom",RU AS4755 1928 646 1282 66.5% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP,IN AS20115 1823 560 1263 69.3% CHARTER-NET-HKY-NC - Charter Communications,US AS4323 1650 414 1236 74.9% TWTC - tw telecom holdings, inc.,US AS7545 2472 1246 1226 49.6% TPG-INTERNET-AP TPG Telecom Limited,AU AS9498 1316 112 1204 91.5% BBIL-AP BHARTI Airtel Ltd.,IN AS6147 1300 102 1198 92.2% Telefonica del Peru S.A.A.,PE AS18566 2043 868 1175 57.5% MEGAPATH5-US - MegaPath Corporation,US AS6983 1625 484 1141 70.2% ITCDELTA - Earthlink, Inc.,US AS34984 1896 860 1036 54.6% TELLCOM-AS TELLCOM ILETISIM HIZMETLERI A.S.,TR AS7552 1080 53 1027 95.1% VIETEL-AS-AP Viettel Corporation,VN AS22561 1311 334 977 74.5% AS22561 - CenturyTel Internet Holdings, Inc.,US AS7738 999 83 916 91.7% Telemar Norte Leste S.A.,BR AS38285 975 130 845 86.7% M2TELECOMMUNICATIONS-AU M2 Telecommunications Group Ltd,AU AS24560 1180 347 833 70.6% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services,IN AS31148 1045 234 811 77.6% FREENET-AS Freenet Ltd.,UA AS8151 1481 697 784 52.9% Uninet S.A. de C.V.,MX AS26615 914 133 781 85.4% Tim Celular S.A.,BR AS4780 1047 281 766 73.2% SEEDNET Digital United Inc.,TW AS18101 955 194 761 79.7% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI,IN AS855 799 57 742 92.9% CANET-ASN-4 - Bell Aliant Regional Communications, Inc.,CA AS17908 834 97 737 88.4% TCISL Tata Communications,IN Total 50259 11890 38369 76.3% Top 30 total Possible Bogus Routes 5.100.241.0/24 AS19957 -Reserved AS-,ZZ 23.252.224.0/20 AS62502 -Reserved AS-,ZZ 23.252.224.0/21 AS62502 -Reserved AS-,ZZ 23.252.232.0/21 AS62502 -Reserved AS-,ZZ 24.231.96.0/24 AS21548 MTO - MTO Telecom Inc.,CA 27.100.7.0/24 AS56096 31.217.248.0/21 AS44902 COV-ASN COVAGE NETWORKS SASU,FR 37.16.88.0/23 AS57652 -Reserved AS-,ZZ 41.73.1.0/24 AS37004 -Reserved AS-,ZZ 41.73.2.0/24 AS37004 -Reserved AS-,ZZ 41.73.10.0/24 AS37004 -Reserved AS-,ZZ 41.73.11.0/24 AS37004 -Reserved AS-,ZZ 41.73.12.0/24 AS37004 -Reserved AS-,ZZ 41.73.13.0/24 AS37004 -Reserved AS-,ZZ 41.73.14.0/24 AS37004 -Reserved AS-,ZZ 41.73.15.0/24 AS37004 -Reserved AS-,ZZ 41.73.16.0/24 AS37004 -Reserved AS-,ZZ 41.73.18.0/24 AS37004 -Reserved AS-,ZZ 41.73.20.0/24 AS37004 -Reserved AS-,ZZ 41.73.21.0/24 AS37004 -Reserved AS-,ZZ 41.76.48.0/21 AS36969 MTL-AS,MW 41.78.180.0/23 AS37265 -Reserved AS-,ZZ 41.189.96.0/20 AS37000 -Reserved AS-,ZZ 41.189.127.0/24 AS37000 -Reserved AS-,ZZ 41.189.128.0/24 AS37000 -Reserved AS-,ZZ 41.191.108.0/22 AS37004 -Reserved AS-,ZZ 41.191.108.0/24 AS37004 -Reserved AS-,ZZ 41.191.109.0/24 AS37004 -Reserved AS-,ZZ 41.191.110.0/24 AS37004 -Reserved AS-,ZZ 41.191.111.0/24 AS37004 -Reserved AS-,ZZ 41.223.208.0/22 AS37000 -Reserved AS-,ZZ 41.242.152.0/22 AS37558 LITC,LY 41.242.156.0/22 AS37558 LITC,LY 45.224.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.228.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.232.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.236.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 64.25.16.0/23 AS19535 -Reserved AS-,ZZ 64.25.20.0/24 AS19535 -Reserved AS-,ZZ 64.25.21.0/24 AS19535 -Reserved AS-,ZZ 64.25.22.0/24 AS19535 -Reserved AS-,ZZ 64.25.24.0/23 AS19535 -Reserved AS-,ZZ 64.25.27.0/24 AS7046 RFC2270-UUNET-CUSTOMER - MCI Communications Services, Inc. d/b/a Verizon Business,US 64.25.28.0/23 AS19535 -Reserved AS-,ZZ 65.75.216.0/23 AS10494 AAI - Accurate Automation, Inc.,US 65.75.217.0/24 AS10494 AAI - Accurate Automation, Inc.,US 65.111.1.0/24 AS32258 SDNGLOBAL - SDN Global,US 66.180.64.0/21 AS32558 ZEUTER - Zeuter Development Corporation,CA 66.187.240.0/20 AS14552 ACS-SOUTHEASTDATACENTER - Affiliated Computer Services, Inc.,US 66.205.224.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc.,US 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 67.210.0.0/20 AS62502 -Reserved AS-,ZZ 67.210.0.0/21 AS62502 -Reserved AS-,ZZ 67.210.8.0/21 AS62502 -Reserved AS-,ZZ 72.19.0.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc.,US 74.113.200.0/23 AS46939 -Reserved AS-,ZZ 74.114.52.0/22 AS40818 -Reserved AS-,ZZ 74.114.52.0/23 AS40818 -Reserved AS-,ZZ 74.114.52.0/24 AS40818 -Reserved AS-,ZZ 74.114.53.0/24 AS40818 -Reserved AS-,ZZ 74.114.54.0/23 AS40818 -Reserved AS-,ZZ 74.114.54.0/24 AS40818 -Reserved AS-,ZZ 74.114.55.0/24 AS40818 -Reserved AS-,ZZ 74.114.184.0/22 AS19888 -Reserved AS-,ZZ 74.118.132.0/22 AS5117 -Reserved AS-,ZZ 74.120.212.0/23 AS32326 MORPHOTRUST-USA - MorphoTrust USA, Inc.,US 74.120.214.0/23 AS32326 MORPHOTRUST-USA - MorphoTrust USA, Inc.,US 74.121.24.0/22 AS36263 FORONA - Forona Technologies, Inc.,US 74.123.136.0/21 AS53358 -Reserved AS-,ZZ 77.243.91.0/24 AS42597 -Reserved AS-,ZZ 80.78.133.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.78.134.0/23 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.78.134.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.78.135.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.250.32.0/22 AS37106 ODUA-AS,NG 85.202.160.0/20 AS44404 -Reserved AS-,ZZ 89.31.24.0/23 AS41455 -Reserved AS-,ZZ 89.31.26.0/23 AS41455 -Reserved AS-,ZZ 89.31.28.0/22 AS41455 -Reserved AS-,ZZ 91.103.8.0/24 AS42551 -Reserved AS-,ZZ 91.103.9.0/24 AS42551 -Reserved AS-,ZZ 91.103.10.0/24 AS42551 -Reserved AS-,ZZ 91.103.11.0/24 AS42551 -Reserved AS-,ZZ 91.193.60.0/22 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 91.195.66.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 91.197.36.0/22 AS43359 -Reserved AS-,ZZ 91.220.84.0/24 AS5577 ROOT root SA,LU 98.143.160.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.161.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.162.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.163.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.164.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.165.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.166.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.167.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.168.0/22 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.172.0/22 AS26566 -Reserved AS-,ZZ 98.143.172.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.173.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.174.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.175.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 102.2.88.0/22 AS38456 PACTEL-AS-AP Pacific Teleports. ,AU 103.6.108.0/22 AS55526 NOIDASOFTWARETECHNOLOGYPARK-IN NOIDA Software Technology Park Ltd,IN 103.10.222.0/24 AS13189 103.14.231.0/24 AS58680 103.15.92.0/22 AS23818 JETINTERNET JETINTERNET Corporation,JP 103.18.248.0/22 AS18097 DCN D.C.N. Corporation,JP 103.19.0.0/22 AS18097 DCN D.C.N. Corporation,JP 103.21.4.0/22 AS12182 INTERNAP-2BLK - Internap Network Services Corporation,US 103.26.116.0/22 AS17676 GIGAINFRA Softbank BB Corp.,JP 103.228.132.0/22 AS4826 VOCUS-BACKBONE-AS Vocus Connect International Backbone,AU 103.248.88.0/22 AS23818 JETINTERNET JETINTERNET Corporation,JP 103.248.220.0/22 AS17676 GIGAINFRA Softbank BB Corp.,JP 103.250.0.0/22 AS17676 GIGAINFRA Softbank BB Corp.,JP 103.251.244.0/22 AS55536 PSWITCH-HK Pacswitch Colocation & Datacentre,HK 116.206.72.0/24 AS6461 ABOVENET - Abovenet Communications, Inc,US 116.206.85.0/24 AS6461 ABOVENET - Abovenet Communications, Inc,US 116.206.103.0/24 AS6461 ABOVENET - Abovenet Communications, Inc,US 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP,IN 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street,CN 124.158.28.0/22 AS45857 142.147.62.0/24 AS3958 AIRCANADA - Air Canada,CA 154.118.0.0/23 AS37340 Spectranet,NG 154.118.2.0/23 AS37340 Spectranet,NG 154.118.4.0/23 AS37340 Spectranet,NG 154.118.6.0/23 AS37340 Spectranet,NG 154.118.122.0/23 AS37340 Spectranet,NG 154.118.124.0/23 AS37340 Spectranet,NG 154.118.126.0/23 AS37340 Spectranet,NG 160.176.0.0/21 AS36903 MT-MPLS,MA 160.176.8.0/21 AS36903 MT-MPLS,MA 160.176.16.0/21 AS36903 MT-MPLS,MA 160.176.24.0/21 AS36903 MT-MPLS,MA 160.176.32.0/21 AS36903 MT-MPLS,MA 160.176.40.0/21 AS36903 MT-MPLS,MA 160.176.48.0/21 AS36903 MT-MPLS,MA 160.176.56.0/21 AS36903 MT-MPLS,MA 160.176.64.0/21 AS36903 MT-MPLS,MA 160.176.72.0/21 AS36903 MT-MPLS,MA 160.176.80.0/21 AS36903 MT-MPLS,MA 160.176.88.0/21 AS36903 MT-MPLS,MA 160.176.96.0/21 AS36903 MT-MPLS,MA 160.176.104.0/21 AS36903 MT-MPLS,MA 160.176.112.0/21 AS36903 MT-MPLS,MA 160.176.120.0/21 AS36903 MT-MPLS,MA 160.176.128.0/21 AS36903 MT-MPLS,MA 160.176.136.0/21 AS36903 MT-MPLS,MA 160.176.144.0/21 AS36903 MT-MPLS,MA 162.217.156.0/22 AS62502 -Reserved AS-,ZZ 162.217.156.0/23 AS62502 -Reserved AS-,ZZ 162.217.158.0/23 AS62502 -Reserved AS-,ZZ 162.221.48.0/21 AS62502 -Reserved AS-,ZZ 162.221.48.0/22 AS62502 -Reserved AS-,ZZ 162.221.52.0/22 AS62502 -Reserved AS-,ZZ 162.223.64.0/21 AS62502 -Reserved AS-,ZZ 162.223.64.0/22 AS62502 -Reserved AS-,ZZ 162.223.68.0/22 AS62502 -Reserved AS-,ZZ 166.93.0.0/16 AS23537 CRITIGEN - Micro Source, Inc.,US 169.255.4.0/24 AS32782 169.255.5.0/24 AS15964 CAMNET-AS,CM 169.255.6.0/24 AS15964 CAMNET-AS,CM 169.255.7.0/24 AS32782 172.85.0.0/24 AS29571 CITelecom-AS,CI 172.85.1.0/24 AS29571 CITelecom-AS,CI 172.85.2.0/24 AS29571 CITelecom-AS,CI 172.85.3.0/24 AS29571 CITelecom-AS,CI 172.86.0.0/24 AS29571 CITelecom-AS,CI 172.86.1.0/24 AS29571 CITelecom-AS,CI 172.86.2.0/24 AS29571 CITelecom-AS,CI 172.87.0.0/24 AS29571 CITelecom-AS,CI 172.88.0.0/24 AS29571 CITelecom-AS,CI 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group),CN 176.111.168.0/22 AS50586 MACROSOLUTIONS MacroSolution SRL,RO 182.237.25.0/24 AS10201 DWL-AS-IN Dishnet Wireless Limited. Broadband Wireless,IN 185.28.180.0/22 AS18097 DCN D.C.N. Corporation,JP 185.78.60.0/22 AS19893 CSB-ASN C&S Breitband GmbH,DE 185.78.76.0/22 AS48172 OVERSUN Oversun Ltd,RU 185.78.84.0/24 AS43260 ROUTERGATE DGN TEKNOLOJI BILISIM YAYINCILIK SANAYI VE LIMITED SIRKETI,TR 185.78.85.0/24 AS43260 ROUTERGATE DGN TEKNOLOJI BILISIM YAYINCILIK SANAYI VE LIMITED SIRKETI,TR 185.78.86.0/24 AS43260 ROUTERGATE DGN TEKNOLOJI BILISIM YAYINCILIK SANAYI VE LIMITED SIRKETI,TR 185.78.87.0/24 AS43260 ROUTERGATE DGN TEKNOLOJI BILISIM YAYINCILIK SANAYI VE LIMITED SIRKETI,TR 190.124.252.0/22 AS7303 Telecom Argentina S.A.,AR 192.9.0.0/16 AS11479 BRM-SUN-AS - Sun Microsystems, Inc,US 192.25.10.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.25.11.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.25.13.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.25.14.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.34.152.0/21 AS10835 VISIONARY - Visionary Communications, Inc.,US 192.75.23.0/24 AS2579 AS2579 - Alcatel-Lucent,FR 192.75.239.0/24 AS23498 CDSI - COGECODATA,CA 192.84.24.0/24 AS4323 TWTC - tw telecom holdings, inc.,US 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.101.72.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.124.252.0/22 AS680 DFN Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.,DE 192.131.233.0/24 AS7018 ATT-INTERNET4 - AT&T Services, Inc.,US 192.149.81.0/24 AS14454 PERIMETER-ESECURITY - Perimeter eSecurity,US 192.154.32.0/19 AS81 NCREN - MCNC,US 192.154.64.0/19 AS81 NCREN - MCNC,US 192.155.48.0/22 AS209 ASN-QWEST - Qwest Communications Company, LLC,US 192.155.57.0/24 AS6128 CABLE-NET-1 - Cablevision Systems Corp.,US 192.155.58.0/23 AS6128 CABLE-NET-1 - Cablevision Systems Corp.,US 192.155.61.0/24 AS6128 CABLE-NET-1 - Cablevision Systems Corp.,US 192.155.65.0/24 AS6128 CABLE-NET-1 - Cablevision Systems Corp.,US 192.155.66.0/24 AS174 COGENT-174 - Cogent Communications,US 192.155.67.0/24 AS174 COGENT-174 - Cogent Communications,US 192.155.68.0/24 AS174 COGENT-174 - Cogent Communications,US 192.166.32.0/20 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.188.208.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 192.245.195.0/24 AS7381 SUNGARDRS - SunGard Availability Services LP,US 193.9.59.0/24 AS1257 TELE2,SE 193.16.106.0/24 AS31539 -Reserved AS-,ZZ 193.16.145.0/24 AS31392 -Reserved AS-,ZZ 193.22.86.0/24 AS24751 MULTIFI-AS Jakobstadsnejdens Telefon Ab,FI 193.22.224.0/20 AS3322 -Reserved AS-,ZZ 193.22.238.0/23 AS62383 LDS-AS Lambrechts Data Services VOF,BE 193.26.213.0/24 AS31641 BYTEL-AS Bytel Ltd,GB 193.28.14.0/24 AS34309 LINK11 Link11 GmbH,DE 193.33.6.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.33.252.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.46.200.0/24 AS34243 WEBAGE Web Age Ltd,GB 193.111.229.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.149.2.0/23 AS15919 INTERHOST Servicios de Hosting en Internet S.A.,ES 193.164.152.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.178.196.0/22 AS15657 SPEEDBONE-AS Speedbone Internet & Connectivity GmbH,DE 193.188.252.0/24 AS8697 JTC-AS8697 Jordan Telecommunications Company,JO 193.200.244.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.201.244.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 193.201.245.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 193.201.246.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 193.202.8.0/21 AS6824 HERMES-NETWORK Hermes Telecom International Ltd,GB 193.202.9.0/24 AS6824 HERMES-NETWORK Hermes Telecom International Ltd,GB 193.223.103.0/24 AS8437 UTA-AS Tele2 Telecommunication GmbH,AT 193.227.109.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.227.236.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.6.252.0/24 AS21202 DCSNET-AS Bredband2 AB,SE 194.9.8.0/23 AS2863 SPRITELINK Centor AB,SE 194.9.8.0/24 AS2863 SPRITELINK Centor AB,SE 194.33.11.0/24 AS8943 JUMP Jump Networks Ltd.,GB 194.38.0.0/18 AS62228 DMAR-AS Decision Marketing LTD,BG 194.39.78.0/23 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 194.49.17.0/24 AS13135 CREW-AS Wieske's Crew GmbH,DE 194.50.8.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.60.88.0/21 AS5089 NTL Virgin Media Limited,GB 194.63.152.0/22 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.76.224.0/24 AS34701 WITZENMANN-AS Witzenmann GmbH, Pforzheim,DE 194.76.225.0/24 AS34701 WITZENMANN-AS Witzenmann GmbH, Pforzheim,DE 194.79.36.0/22 AS3257 TINET-BACKBONE Tinet SpA,DE 194.88.6.0/24 AS35093 RO-HTPASSPORT High Tech Passport Ltd SUA California San Jose SUCURSALA BUCURESTI ROMANIA,RO 194.88.226.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.99.67.0/24 AS9083 CARPENET carpeNet Information Technologies GmbH,DE 194.126.152.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.126.219.0/24 AS34545 -Reserved AS-,ZZ 194.126.233.0/24 AS31235 SKIWEBCENTER-AS SKIWEBCENTER SARL,FR 194.150.214.0/23 AS30880 SPACEDUMP-AS SpaceDump IT AB,SE 194.156.179.0/24 AS3209 VODANET Vodafone GmbH,DE 194.180.25.0/24 AS21358 ATOS-ORIGIN-DE-AS Atos Information Technology GmbH,DE 194.187.24.0/22 AS8856 UKRNET UkrNet Ltd,UA 195.8.48.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.8.48.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.8.119.0/24 AS34304 TEENTELECOM Teen Telecom SRL,RO 195.42.232.0/22 AS15657 SPEEDBONE-AS Speedbone Internet & Connectivity GmbH,DE 195.85.194.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.85.201.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.110.0.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.128.240.0/23 AS21202 DCSNET-AS Bredband2 AB,SE 195.149.119.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.189.174.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.216.234.0/24 AS31309 NMV-AS New Media Ventures BVBA,BE 195.234.156.0/24 AS25028 -Reserved AS-,ZZ 195.242.182.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.244.18.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 196.3.181.0/24 AS37004 -Reserved AS-,ZZ 196.3.182.0/24 AS37004 -Reserved AS-,ZZ 196.3.183.0/24 AS37004 -Reserved AS-,ZZ 196.6.0.0/24 AS32768 routability-tests,MU 196.22.8.0/24 AS27822 Emerging Markets Communications de Argentina S.R.L,AR 196.22.11.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 196.192.124.0/23 AS37301 AFRINIC-ZA-CPT-AS,MU 196.216.254.0/24 AS32768 routability-tests,MU 196.223.144.0/21 AS37095 AF-21,ZZ 198.22.195.0/24 AS54583 -Reserved AS-,ZZ 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc.,US 198.71.17.0/24 AS11268 -Reserved AS-,ZZ 198.71.18.0/23 AS11268 -Reserved AS-,ZZ 198.71.20.0/23 AS11268 -Reserved AS-,ZZ 198.71.22.0/24 AS11268 -Reserved AS-,ZZ 198.71.26.0/24 AS11268 -Reserved AS-,ZZ 198.71.27.0/24 AS11268 -Reserved AS-,ZZ 198.74.11.0/24 AS14573 KEYSPANENERGY-NE1 - Keyspan Energy,US 198.74.13.0/24 AS14573 KEYSPANENERGY-NE1 - Keyspan Energy,US 198.74.38.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services,US 198.74.39.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services,US 198.74.40.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services,US 198.97.72.0/21 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.97.96.0/19 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.97.192.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.97.240.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.163.214.0/24 AS21804 ACCESS-SK - Access Communications Co-operative Limited,CA 198.163.215.0/24 AS6327 SHAW - Shaw Communications Inc.,CA 198.163.216.0/24 AS6327 SHAW - Shaw Communications Inc.,CA 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 198.252.165.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.166.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.167.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.168.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.169.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 199.85.9.0/24 AS852 ASN852 - TELUS Communications Inc.,CA 199.88.52.0/22 AS17018 QTS-SACRAMENTO-1 - Quality Investment Properties Sacramento, LLC,US 199.116.200.0/21 AS22830 -Reserved AS-,ZZ 199.121.0.0/16 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 199.123.16.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 200.1.112.0/24 AS29754 GO2TEL - GO2TEL.COM INC.,US 200.58.248.0/21 AS27849 200.81.48.0/24 AS11664 Techtel LMDS Comunicaciones Interactivas S.A.,AR 200.81.49.0/24 AS11664 Techtel LMDS Comunicaciones Interactivas S.A.,AR 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd.,KR 202.53.138.0/24 AS4058 CITICTEL-CPC-AS4058 CITIC Telecom International CPC Limited,HK 202.58.113.0/24 AS19161 -Reserved AS-,ZZ 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network,CN 202.158.251.0/24 AS9255 CONNECTPLUS-AS Singapore Telecom,SG 202.165.120.0/24 AS19161 -Reserved AS-,ZZ 202.165.124.0/24 AS23749 GLOBAL-TRANSIT-AS-HKCOLO-AP HKCOLO ltd. Internet Service Provider,HK 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd.,IN 203.28.240.0/20 AS10148 UNIMELB-AS-AP The University of Melbourne, Melbourne, Victoria,AU 203.142.219.0/24 AS45149 203.160.48.0/21 AS38008 203.189.116.0/22 AS45606 203.189.116.0/24 AS45606 203.189.117.0/24 AS45606 203.189.118.0/24 AS45606 203.189.119.0/24 AS45606 204.10.88.0/21 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 204.15.208.0/22 AS13706 COMPLETEWEBNET - CompleteWeb.Net LLC,US 204.16.96.0/24 AS19972 -Reserved AS-,ZZ 204.16.97.0/24 AS19972 -Reserved AS-,ZZ 204.16.98.0/24 AS19972 -Reserved AS-,ZZ 204.16.99.0/24 AS19972 -Reserved AS-,ZZ 204.69.144.0/24 AS27283 RJF-INTERNET - Raymond James Financial, Inc.,US 204.87.251.0/24 AS22217 -Reserved AS-,ZZ 204.106.16.0/24 AS4323 TWTC - tw telecom holdings, inc.,US 204.187.11.0/24 AS51113 ELEKTA-AS Elekta,GB 205.137.240.0/20 AS11686 ENA - Education Networks of America,US 205.159.44.0/24 AS40157 ADESA-CORP-AS - ADESA Corp,US 205.166.231.0/24 AS7029 WINDSTREAM - Windstream Communications Inc,US 205.211.160.0/24 AS30045 UHN-ASN - University Health Network,CA 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company,US 206.223.224.0/24 AS21548 MTO - MTO Telecom Inc.,CA 207.2.120.0/21 AS6221 USCYBERSITES - US Cybersites, Inc,US 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc,US 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc,US 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc,US 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc,US 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc,US 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc.,US 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc.,US 207.254.128.0/21 AS30689 FLOW-NET - FLOW,JM 207.254.128.0/24 AS30689 FLOW-NET - FLOW,JM 207.254.136.0/21 AS30689 FLOW-NET - FLOW,JM 208.66.64.0/24 AS16936 -Reserved AS-,ZZ 208.66.65.0/24 AS16936 -Reserved AS-,ZZ 208.66.66.0/24 AS16936 -Reserved AS-,ZZ 208.66.67.0/24 AS16936 -Reserved AS-,ZZ 208.67.132.0/22 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 208.69.192.0/23 AS6461 ABOVENET - Abovenet Communications, Inc,US 208.69.195.0/24 AS6461 ABOVENET - Abovenet Communications, Inc,US 208.75.152.0/21 AS32146 -Reserved AS-,ZZ 208.76.20.0/24 AS31812 -Reserved AS-,ZZ 208.76.21.0/24 AS31812 -Reserved AS-,ZZ 208.77.164.0/24 AS22659 -Reserved AS-,ZZ 208.77.166.0/24 AS4323 TWTC - tw telecom holdings, inc.,US 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC,US 208.84.232.0/24 AS33131 -Reserved AS-,ZZ 208.84.233.0/24 AS33131 -Reserved AS-,ZZ 208.84.234.0/24 AS33131 -Reserved AS-,ZZ 208.84.237.0/24 AS33131 -Reserved AS-,ZZ 208.84.238.0/24 AS33131 -Reserved AS-,ZZ 208.94.216.0/23 AS13629 -Reserved AS-,ZZ 208.94.219.0/24 AS13629 -Reserved AS-,ZZ 208.94.221.0/24 AS13629 -Reserved AS-,ZZ 208.94.223.0/24 AS13629 -Reserved AS-,ZZ 209.135.171.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 209.135.175.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 209.177.64.0/20 AS6461 ABOVENET - Abovenet Communications, Inc,US 209.193.112.0/20 AS209 ASN-QWEST - Qwest Communications Company, LLC,US 209.209.51.0/24 AS18687 MPOWER-2 - MPOWER COMMUNICATIONS CORP.,US 209.212.63.0/24 AS16467 ASN-NEXTWEB-R1 - Nextweb, Inc,US 209.234.112.0/23 AS32252 -Reserved AS-,ZZ 209.234.114.0/23 AS32252 -Reserved AS-,ZZ 209.234.116.0/24 AS32252 -Reserved AS-,ZZ 209.234.117.0/24 AS32252 -Reserved AS-,ZZ 209.234.118.0/24 AS32252 -Reserved AS-,ZZ 209.234.119.0/24 AS32252 -Reserved AS-,ZZ 209.234.120.0/24 AS32252 -Reserved AS-,ZZ 209.234.121.0/24 AS32252 -Reserved AS-,ZZ 209.234.122.0/24 AS32252 -Reserved AS-,ZZ 210.79.128.0/18 AS62228 DMAR-AS Decision Marketing LTD,BG 210.87.64.0/18 AS62228 DMAR-AS Decision Marketing LTD,BG 213.255.128.0/20 AS24863 LINKdotNET-AS,EG 213.255.144.0/20 AS24863 LINKdotNET-AS,EG 216.146.0.0/19 AS11915 US-TELEPACIFIC - TelePacific Communications,US 216.152.24.0/22 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc.,US 216.170.96.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.170.101.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.170.104.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.170.105.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.234.132.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC.,US 216.238.192.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 216.238.193.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 216.238.194.0/24 AS26566 -Reserved AS-,ZZ 216.238.196.0/22 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 216.251.50.0/24 AS38191 INFOSYS-AS Infosys Technologies Ltd,IN 216.251.53.0/24 AS38191 INFOSYS-AS Infosys Technologies Ltd,IN 216.251.62.0/24 AS38191 INFOSYS-AS Infosys Technologies Ltd,IN Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 21 Nov '14

21 Nov '14

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 22 Nov, 2014 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 517859 Prefixes after maximum aggregation: 200304 Deaggregation factor: 2.59 Unique aggregates announced to Internet: 254592 Total ASes present in the Internet Routing Table: 48629 Prefixes per ASN: 10.65 Origin-only ASes present in the Internet Routing Table: 36296 Origin ASes announcing only one prefix: 16305 Transit ASes present in the Internet Routing Table: 6210 Transit-only ASes present in the Internet Routing Table: 176 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 78 Max AS path prepend of ASN ( 55644) 71 Prefixes from unregistered ASNs in the Routing Table: 1631 Unregistered ASNs in the Routing Table: 439 Number of 32-bit ASNs allocated by the RIRs: 7978 Number of 32-bit ASNs visible in the Routing Table: 6123 Prefixes from 32-bit ASNs in the Routing Table: 21952 Number of bogon 32-bit ASNs visible in the Routing Table: 6 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 391 Number of addresses announced to Internet: 2712292420 Equivalent to 161 /8s, 170 /16s and 76 /24s Percentage of available address space announced: 73.3 Percentage of allocated address space announced: 73.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 96.9 Total number of prefixes smaller than registry allocations: 176514 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 127765 Total APNIC prefixes after maximum aggregation: 37043 APNIC Deaggregation factor: 3.45 Prefixes being announced from the APNIC address blocks: 132174 Unique aggregates announced from the APNIC address blocks: 53894 APNIC Region origin ASes present in the Internet Routing Table: 4990 APNIC Prefixes per ASN: 26.49 APNIC Region origin ASes announcing only one prefix: 1200 APNIC Region transit ASes present in the Internet Routing Table: 869 Average APNIC Region AS path length visible: 4.7 Max APNIC Region AS path length visible: 78 Number of APNIC region 32-bit ASNs visible in the Routing Table: 1178 Number of APNIC addresses announced to Internet: 737083776 Equivalent to 43 /8s, 239 /16s and 1 /24s Percentage of available APNIC address space announced: 86.1 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 131072-135580 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 171222 Total ARIN prefixes after maximum aggregation: 85507 ARIN Deaggregation factor: 2.00 Prefixes being announced from the ARIN address blocks: 173175 Unique aggregates announced from the ARIN address blocks: 81727 ARIN Region origin ASes present in the Internet Routing Table: 16386 ARIN Prefixes per ASN: 10.57 ARIN Region origin ASes announcing only one prefix: 6073 ARIN Region transit ASes present in the Internet Routing Table: 1702 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 20 Number of ARIN region 32-bit ASNs visible in the Routing Table: 264 Number of ARIN addresses announced to Internet: 1053889472 Equivalent to 62 /8s, 209 /16s and 19 /24s Percentage of available ARIN address space announced: 55.8 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 126263 Total RIPE prefixes after maximum aggregation: 63842 RIPE Deaggregation factor: 1.98 Prefixes being announced from the RIPE address blocks: 132022 Unique aggregates announced from the RIPE address blocks: 83090 RIPE Region origin ASes present in the Internet Routing Table: 17812 RIPE Prefixes per ASN: 7.41 RIPE Region origin ASes announcing only one prefix: 8177 RIPE Region transit ASes present in the Internet Routing Table: 2936 Average RIPE Region AS path length visible: 5.0 Max RIPE Region AS path length visible: 32 Number of RIPE region 32-bit ASNs visible in the Routing Table: 3221 Number of RIPE addresses announced to Internet: 691982468 Equivalent to 41 /8s, 62 /16s and 208 /24s Percentage of available RIPE address space announced: 100.6 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 196608-202239 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 58181 Total LACNIC prefixes after maximum aggregation: 10865 LACNIC Deaggregation factor: 5.35 Prefixes being announced from the LACNIC address blocks: 66917 Unique aggregates announced from the LACNIC address blocks: 30719 LACNIC Region origin ASes present in the Internet Routing Table: 2378 LACNIC Prefixes per ASN: 28.14 LACNIC Region origin ASes announcing only one prefix: 648 LACNIC Region transit ASes present in the Internet Routing Table: 474 Average LACNIC Region AS path length visible: 4.8 Max LACNIC Region AS path length visible: 30 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 1391 Number of LACNIC addresses announced to Internet: 167915392 Equivalent to 10 /8s, 2 /16s and 47 /24s Percentage of available LACNIC address space announced: 100.1 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-265628 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 12364 Total AfriNIC prefixes after maximum aggregation: 3002 AfriNIC Deaggregation factor: 4.12 Prefixes being announced from the AfriNIC address blocks: 13180 Unique aggregates announced from the AfriNIC address blocks: 4810 AfriNIC Region origin ASes present in the Internet Routing Table: 733 AfriNIC Prefixes per ASN: 17.98 AfriNIC Region origin ASes announcing only one prefix: 207 AfriNIC Region transit ASes present in the Internet Routing Table: 148 Average AfriNIC Region AS path length visible: 4.6 Max AfriNIC Region AS path length visible: 24 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 69 Number of AfriNIC addresses announced to Internet: 60038400 Equivalent to 3 /8s, 148 /16s and 29 /24s Percentage of available AfriNIC address space announced: 59.6 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2959 11585 932 Korea Telecom 17974 2846 904 77 PT Telekomunikasi Indonesia 7545 2460 336 127 TPG Telecom Limited 4755 1929 416 191 TATA Communications formerly 9829 1670 1322 37 National Internet Backbone 4538 1550 4190 71 China Education and Research 9808 1485 6655 16 Guangdong Mobile Communicatio 4808 1425 2213 427 CNCGROUP IP network China169 9583 1363 112 562 Sify Limited 9498 1316 334 94 BHARTI Airtel Ltd. Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 2894 3688 51 BellSouth.net Inc. 22773 2850 2956 144 Cox Communications Inc. 18566 2044 379 183 MegaPath Corporation 20115 1822 1797 479 Charter Communications 4323 1642 1053 413 tw telecom holdings, inc. 6983 1625 867 251 EarthLink, Inc. 30036 1496 311 605 Mediacom Communications Corp 701 1427 11265 707 MCI Communications Services, 22561 1311 411 244 CenturyTel Internet Holdings, 11492 1214 212 534 CABLE ONE, INC. Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 34984 1896 298 356 TELLCOM ILETISIM HIZMETLERI A 20940 1504 585 1111 Akamai International B.V. 8402 1380 544 15 OJSC "Vimpelcom" 31148 1045 45 21 Freenet Ltd. 13188 1025 100 35 TOV "Bank-Inform" 8551 899 373 44 Bezeq International-Ltd 6849 834 356 26 JSC "Ukrtelecom" 9198 807 346 32 JSC Kazakhtelecom 6830 804 2339 439 Liberty Global Operations B.V 12479 776 788 97 France Telecom Espana SA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3035 492 242 Telmex Colombia S.A. 28573 2377 2260 110 NET Serviços de Comunicação S 7303 1766 1171 241 Telecom Argentina S.A. 8151 1474 3019 429 Uninet S.A. de C.V. 6147 1299 374 30 Telefonica del Peru S.A.A. 6503 1228 433 58 Axtel, S.A.B. de C.V. 7738 999 1882 41 Telemar Norte Leste S.A. 26615 914 2325 35 Tim Celular S.A. 3816 906 394 146 COLOMBIA TELECOMUNICACIONES S 27947 887 130 51 Telconet S.A Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1407 958 13 TE-AS 24863 957 280 26 Link Egypt (Link.NET) 36903 388 196 125 Office National des Postes et 36992 359 824 29 ETISALAT MISR 24835 308 144 9 Vodafone Data 37492 289 125 60 Orange Tunisie 3741 249 920 212 Internet Solutions 29571 245 22 17 Cote d'Ivoire Telecom 37054 238 19 6 Data Telecom Service 6713 195 709 34 Office National des Postes et Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3035 492 242 Telmex Colombia S.A. 4766 2959 11585 932 Korea Telecom 6389 2894 3688 51 BellSouth.net Inc. 22773 2850 2956 144 Cox Communications Inc. 17974 2846 904 77 PT Telekomunikasi Indonesia 7545 2460 336 127 TPG Telecom Limited 28573 2377 2260 110 NET Serviços de Comunicação S 18566 2044 379 183 MegaPath Corporation 4755 1929 416 191 TATA Communications formerly 34984 1896 298 356 TELLCOM ILETISIM HIZMETLERI A Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 6389 2894 2843 BellSouth.net Inc. 17974 2846 2769 PT Telekomunikasi Indonesia 22773 2850 2706 Cox Communications Inc. 7545 2460 2333 TPG Telecom Limited 28573 2377 2267 NET Serviços de Comunicação S 4766 2959 2027 Korea Telecom 18566 2044 1861 MegaPath Corporation 4755 1929 1738 TATA Communications formerly 9829 1670 1633 National Internet Backbone 34984 1896 1540 TELLCOM ILETISIM HIZMETLERI A Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 30662 UNALLOCATED 8.2.129.0/24 3356 Level 3 Communicatio 53506 UNALLOCATED 8.17.102.0/23 3356 Level 3 Communicatio 46467 UNALLOCATED 8.19.192.0/24 46887 Lightower Fiber Netw 20260 UNALLOCATED 8.25.160.0/24 3356 Level 3 Communicatio 20260 UNALLOCATED 8.25.161.0/24 3356 Level 3 Communicatio 46473 UNALLOCATED 8.27.122.0/24 12180 Internap Network Ser 46473 UNALLOCATED 8.27.124.0/24 12180 Internap Network Ser 27205 UNALLOCATED 8.38.16.0/21 6461 Abovenet Communicati 15347 UNALLOCATED 8.224.147.0/24 12064 Cox Communications I 33628 UNALLOCATED 12.0.239.0/24 1239 Sprint Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 5.100.241.0/24 23456 32bit Transition AS 23.252.224.0/20 62502 Xnet Media LLC 23.252.224.0/21 62502 Xnet Media LLC 23.252.232.0/21 62502 Xnet Media LLC 24.231.96.0/24 21548 MTO Telecom Inc. 27.100.7.0/24 56096 >>UNKNOWN<< 31.217.248.0/21 44902 COVAGE NETWORKS SASU 37.16.88.0/23 57652 >>UNKNOWN<< 41.73.1.0/24 37004 >>UNKNOWN<< 41.73.2.0/24 37004 >>UNKNOWN<< Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:12 /10:31 /11:90 /12:262 /13:500 /14:996 /15:1720 /16:13030 /17:7135 /18:11916 /19:24761 /20:35350 /21:37488 /22:55560 /23:48330 /24:277707 /25:1106 /26:1087 /27:705 /28:15 /29:19 /30:11 /31:0 /32:12 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 22773 2063 2850 Cox Communications Inc. 18566 1999 2044 MegaPath Corporation 6389 1674 2894 BellSouth.net Inc. 30036 1342 1496 Mediacom Communications Corp 6983 1307 1625 EarthLink, Inc. 34984 1203 1896 TELLCOM ILETISIM HIZMETLERI A 11492 1162 1214 CABLE ONE, INC. 10620 1074 3035 Telmex Colombia S.A. 8402 1045 1380 OJSC "Vimpelcom" 22561 1003 1311 CenturyTel Internet Holdings, Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1358 2:679 3:3 4:16 5:1207 6:22 8:769 12:1848 13:4 14:1195 15:17 16:2 17:42 18:21 20:51 23:970 24:1669 27:1805 31:1386 32:45 33:2 34:5 36:155 37:1838 38:975 39:16 40:225 41:2997 42:274 43:664 44:18 45:80 46:2116 47:30 49:758 50:794 52:12 54:60 55:6 56:6 57:31 58:1155 59:661 60:445 61:1703 62:1311 63:1846 64:4406 65:2280 66:4110 67:2006 68:1049 69:3257 70:885 71:433 72:1983 74:2608 75:323 76:407 77:1622 78:958 79:780 80:1324 81:1277 82:820 83:670 84:670 85:1365 86:425 87:1184 88:500 89:1813 90:140 91:5884 92:804 93:1669 94:1948 95:1311 96:422 97:341 98:1034 99:48 100:66 101:746 103:6117 104:595 105:163 106:189 107:761 108:609 109:1991 110:1057 111:1443 112:736 113:915 114:795 115:1218 116:1233 117:1004 118:1599 119:1367 120:440 121:987 122:2211 123:1701 124:1461 125:1545 128:656 129:390 130:381 131:965 132:429 133:164 134:325 135:82 136:327 137:297 138:388 139:162 140:225 141:422 142:603 143:444 144:511 145:111 146:696 147:563 148:1057 149:397 150:518 151:643 152:482 153:244 154:411 155:631 156:379 157:331 158:279 159:926 160:335 161:621 162:1791 163:373 164:640 165:672 166:299 167:699 168:1132 169:130 170:1425 171:215 172:60 173:1583 174:711 175:582 176:1561 177:3704 178:2112 179:774 180:1818 181:1559 182:1661 183:568 184:706 185:2381 186:2912 187:1672 188:2000 189:1529 190:7667 191:802 192:7802 193:5567 194:4058 195:3612 196:1630 197:833 198:5328 199:5472 200:6496 201:2872 202:9401 203:8996 204:4679 205:2677 206:2994 207:2950 208:3922 209:3801 210:3468 211:1847 212:2467 213:2187 214:855 215:87 216:5632 217:1723 218:649 219:398 220:1301 221:773 222:438 223:662 End of report

1 0

Re: [routing-wg] [anti-abuse-wg] AS43890
by Edward Shryane 18 Nov '14

18 Nov '14

Hello, Correct, here is a nice RIPE Labs article explaining those exceptions: https://labs.ripe.net/Members/denis/reclaim-functionality-for-resource-hold… Also, in case of transfer of holder-ship, as long as a user has access to maintainer password, or can recover it using the standard password recovery -meaning they are the rightful holder of the resource- they should be able to follow above mentioned procedure. Regards, Ed Shryane RIPE NCC > > Gert Doering wrote: > >> Hi, > [...] >>> Can any arbitrary RIPE member remove route objects that were created >>> by any other RIPE member? >> >> >> Generally speaking, no. > > Generally speaking, in order to delete an objecct, you need the same (set of) > credentials you would need to create or modify the object. > > As you correctly point out, there are a couple of exceptions to prevent dead- > lock situations when one party fails to cooperate. Removing a route object is > one of those, iirc; deleting a revDNS delegation entry is another. > >> Gert Doering >> -- NetMaster > > Wilfried > >

1 0

AS43890
by Ronald F. Guilmette 18 Nov '14

18 Nov '14

Based upon the information I am currently looking at (see below) I now believe that it was perhaps a mistake for myself, and possibly others, to have become focused on the issue of insuring the correctness and/or validity of route objects within the RIPE data base only in those cases where the IP blocks in question are under the dominion of other (non-RIPE) RiRs. It now seems certain to me that the absence of anything even remotely approximating proper validation of RIPE route objects is not, in fact, a problem which is limited to just inter-RiR situations. Apparently, RIPE member LIRs can just as easily hijack the IP blocks of other RIPE members as they can in the case of IP blocks belonging to parties in other regions. Also, RIPE-resident hijackers can just as easily place validating route objects for these hijacked RIPE-issued IP blocks into the RIPE DB as they can for any other hijacked blocks taken from any other region(s). Readily available public data indicates that approximately three weeks ago, on or about October 25th, AS197207, an Iranian ISP, began announcing the following routes to the following chunks of its own properly registered IP space: 31.2.128.0/17 46.51.0.0/17 95.64.0.0/17 164.138.128.0/18 188.229.0.0/17 Prior to AS197207's decision to begin announcing the above routes (which they did, starting on Oct. 25th), it appears that the proprietors of AS43890, a Romanian ISP and RIPE LIR in good standing, apparently elected to announce their own set of routes to some or all of the above Iranian IP blocks, using lots and lots of little deaggregated /24 announcements to do so. Evidence in my possession indicates that some of the /24 blocks in question were in fact used by so-called ``snowshoe spammers'' during the time when AS43890 (aka "Netserv Consult SRL") was routing these blocks. This fact leads me to believe that the proprietor(s) of AS43890 most probably did not in fact have anything like real authorization from AS197207 to announce routes to any of the Iranian AS197207's legitimately registered IP space. Further and additionally, as in the recent case involving (Bulgarian) AS201640, it appears that (Romanian) AS43890 also and likewise created multiple route objects within the RIPE data base as a way of legitimizing what appears to me to have been several substantial IP space hijackings. Lastly, many, most, or all of the fradulent route objects created by AS43890 are still present within the RIPE data base, as of today. I am including a list of all 61 of these below. As was the case with the fradulent route objects created within the RIPE DB by AS201640, these 61 apparently fradulent route objects which were created by the proprietor(s) of AS43890 have likewise also been imported into the MERIT RADb, from the RIPE DB, thus spreading the bogus ``authorization'' to route these blocks even further, in a manner not unlike a viral contaminant. Regards, rfg ======================================================================= route: 188.229.1.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.2.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.3.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.9.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.11.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.16.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.17.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.18.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.19.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.20.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.21.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.22.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.23.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.33.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.35.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.36.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.38.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.39.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.49.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.50.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.51.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.52.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.53.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.54.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.55.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.66.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.89.0/24 descr: Enternet Land SRL origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.90.0/24 descr: Enternet Land SRL origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.91.0/24 descr: Enternet Land SRL origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.92.0/24 descr: Enternet Land SRL origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.93.0/24 descr: Enternet Land SRL origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.94.0/24 descr: Enternet Land SRL origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.95.0/24 descr: Enternet Land SRL origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.96.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.97.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.98.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.99.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.100.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.101.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.102.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.103.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.104.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.105.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.106.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.107.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.108.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.109.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.110.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.111.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.113.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.114.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.117.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.118.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.119.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.120.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.121.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.122.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.123.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.124.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.125.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.126.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered

7 10

Re: [routing-wg] Routing Reg. mess [was: Re: [anti-abuse-wg] Fwd: Hijack...]
by George Michaelson 16 Nov '14

16 Nov '14

I think that it is wrong to exclude use of the RPKI signed assertion of authority over a resource to drive admission of foreign records. I do not speak to RPSL per se or ROA, but the fact is that maintainer status is not visible in routing and is irrelevant. Databases need ACL and admission control but we all know the RIPE code has (and always has had) a privileged channel which can effect change in the contents of the schema without first class use of the authorization primitives: heck you can type SQL commands directly and make objects So I like much of what Wilfred said in terms of its intent and outcome. I do not agree that ab initio we should reject use of RPKI signed objects to permit import and export of external information. If I sign an authorization to somebody to include my resources in their IRR, and my resources are in the certificate which signed that authorization what can be stronger? -G On 14 November 2014 06:59, Elvis Daniel Velea <elvis(a)velea.eu> wrote: > Hi Wilfried, > > finally someone responding to the problem presented. I was about to > think that nobody cares anymore. > > On 14/11/14 16:18, Wilfried Woeber wrote: > > Michael Horn wrote: (to anti-abuse-wg(a)ripe.net) > > > > [...] > > > >> will result in significant workload. Holy dingus, is this database a > mess... > > And not just "this" one. The whole "Routing Registry" stuff is an > incredible > > mess, and since years, actually. Not really a Numbers Registry failure > or a > > negligence, but rather a multi-faceted mesh of FUD, History and Trade > Secrets > > claimed. > > > > Let me try to collect some facts, at least according to my memory. > > Please correct me where I'm wrong... > > > > - not all 5 RIRs actually do support an IRR functionality. > > > > - the RPSL doc.set, back in the good old days, had some ideas and > provisions > > for integrating the 5 (or then, rather 3, iirc) pieces of Numbers > Registries > > into a single, global, consistent structure. > > As Gert put it: it didn't fly. > > Since then, we were putting band-aid over patch over whatever to deal > with > > that. The result is what we have before us, right now. > > > > - the whole system of creating objects, at least in the RIPE Region, has > become > > totally inconsistent. For an address block, where the RIPE DB is > authoritative, > > and an AS number, you need the credentials from both parties to > register a route: > > or route6: object. > > > > for out-of-region authoritative entries, the dreaded maintainer was > created, in > > order to provide the (useless) 2nd auth: token. > > > > For the RPKI stuff, again, there isn't a requirment for a second > authentication > > token, iirc not even a *notification* to the AS ref.d, when an RoA is > created. > > Anyone of you still thinks RPKI is going to be helpful here? > > Bah, it's just going to give another false impression of credibility > + new vectors > > for errors and attacks. > > > >> -mh > > The only way(s) forward I can see are: > > > > - require manual approval of route: objects for the case of > out-of-region registrations > sounds like an other patch, one that I would welcome as a temporary > solution. > > > > - get the RPSL flaws fixed, the RFCs updated and then implemented > this will probably take years.. > > > > - integrate the 5 Number Registries into a homogenous, distributed DB > with consistent > > authentication mechanisms > > > > - come up with a viable proposal for 1 (one!!) global routing registry > that is > > authoritative, up-todate and complete, used by all operators (yes, I > know, it is > > the wrong type of year /w a XMAS) > I've been asking myself for years why the RIRs can not, under the NRO, > ASO, IANA, (?) umbrellas to come up with a unique registry (resource + > routing).. It's not like the communities do not want/need it... Do we > need to pass a global policy to ask the RIRs to work together? :-) > > A single source of information is, at this moment, a dream. > > - try to do any or all of the above and do so without RPKI requirements. > Please! > > > > Wilfried. > > > regards, > elvis > >

3 3

Routing Reg. mess [was: Re: [anti-abuse-wg] Fwd: Hijack...]
by Wilfried Woeber 16 Nov '14

16 Nov '14

Michael Horn wrote: (to anti-abuse-wg(a)ripe.net) [...] > will result in significant workload. Holy dingus, is this database a mess... And not just "this" one. The whole "Routing Registry" stuff is an incredible mess, and since years, actually. Not really a Numbers Registry failure or a negligence, but rather a multi-faceted mesh of FUD, History and Trade Secrets claimed. Let me try to collect some facts, at least according to my memory. Please correct me where I'm wrong... - not all 5 RIRs actually do support an IRR functionality. - the RPSL doc.set, back in the good old days, had some ideas and provisions for integrating the 5 (or then, rather 3, iirc) pieces of Numbers Registries into a single, global, consistent structure. As Gert put it: it didn't fly. Since then, we were putting band-aid over patch over whatever to deal with that. The result is what we have before us, right now. - the whole system of creating objects, at least in the RIPE Region, has become totally inconsistent. For an address block, where the RIPE DB is authoritative, and an AS number, you need the credentials from both parties to register a route: or route6: object. for out-of-region authoritative entries, the dreaded maintainer was created, in order to provide the (useless) 2nd auth: token. For the RPKI stuff, again, there isn't a requirment for a second authentication token, iirc not even a *notification* to the AS ref.d, when an RoA is created. Anyone of you still thinks RPKI is going to be helpful here? Bah, it's just going to give another false impression of credibility + new vectors for errors and attacks. > -mh The only way(s) forward I can see are: - require manual approval of route: objects for the case of out-of-region registrations - get the RPSL flaws fixed, the RFCs updated and then implemented - integrate the 5 Number Registries into a homogenous, distributed DB with consistent authentication mechanisms - come up with a viable proposal for 1 (one!!) global routing registry that is authoritative, up-todate and complete, used by all operators (yes, I know, it is the wrong type of year /w a XMAS) - try to do any or all of the above and do so without RPKI requirements. Please! Wilfried.

4 3

"Proposal for signaling consent from whacked RPKI objects"
by David Freedman 16 Nov '14

16 Nov '14

This presentation given in the SIDR-wg at IETF91 may be of interest to the routing-wg: http://www.cs.bu.edu/~goldbe/papers/goldberg_sidr_ietf91.pdf This is part of a collection "Hardening the RPKI Against Faulty or Misbehaving Authorities² , http://www.cs.bu.edu/~goldbe/papers/RPKImanip.html (referenced papers can be found here) Dave.

1 0