- routing-wg - mailman.ripe.net

Issue affecting rsync RPKI repository fetching
by Nathalie Trenaman 15 Apr '21

15 Apr '21

Dear colleagues, We have been made aware of an issue that may affect some users who use RPKI relying party (RP) software that uses rsync. Please note that by default, only rpki-client reads from rsync; the rest of the RPs prefer the RPKI Repository Delta Protocol (RRDP). The issue appears to create some inconsistency between the RPKI repository and rsync clients. In more detail, an RRDP client reads a complete state for a specific “serial” from the repository. In contrast, an rsync client syncs the state in multiple steps. First, a list of files is copied, followed by updates for files that have been copied. In an affected scenario, a certificate is added and one of the other files (the manifest) is modified after the file list has been sent. By reading the new manifest, but not copying the new file (it is not on the rsync file list), the repository copied by the rsync client contains an invalid manifest (a file is missing) and the RP software rejects it. We are planning on changing our publication infrastructure and using the same "revisions" RRDP uses for the content of the rsync repository. Rsync is an officially supported distribution protocol for RPKI repository data, and it is one of our highest priorities that the data published is atomic and consistent. We plan to release the new publication infrastructure in Q2/Q3 2021. Part of this work will mitigate these non-repeatable-reads for clients using rsync. We will update you on our progress during RIPE 82, taking place online from 17-21 May 2021. Kind regards, Nathalie Trenaman RIPE NCC

8 14

New on RIPE Labs: Does The Internet Route Around Damage? - Edition 2021
by Alun Davies 14 Apr '21

14 Apr '21

Dear colleagues, In this new article on RIPE Labs, to investigate whether the Internet routes around damage in 2021, Emile Aben carries out an analysis of the impact of the recent LINX London outage. The full article is available now on the new and improved RIPE Labs: https://labs.ripe.net/author/emileaben/does-the-internet-route-around-damag… Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

1 0

RPKI: how to migrate an entire industry from RSYNC to RRDP?
by Job Snijders 13 Apr '21

13 Apr '21

Hi all, Some might be wondering what the deal is with RSYNC and RRDP? Why it is critical to continue to support RSYNC in the mid-term? What's the industry's plan to migrate from RSYNC to RRDP? TL;DR - All RIRs need to support both RSYNC and RRDP until at least 2024. - All RRDP-capable validators need to make sure they are fully backwards compatible with RSYNC, until RIRs no longer observe RSYNC traffic. Some background: ---------------- The development of the RPKI technology stack began more than a decade ago in the IETF. From the start, RSYNC was the preferred synchronisation protocol between RPKI publication servers (such as 'rpki.ripe.net') and Relying Parties (the likes of Telia, NTT, Amazon, me, and you). RSYNC was picked for a number of reasons: it was available & easy. A core concept of the RPKI technology stack is that RPKI objects can be transported via any means: carrier pigeon (RFC 2549 ;-), USB stick, FTP, RSYNC, ... anything! This is possible because RPKI exclusively relies on 'object security', the RPKI objects themselves contain all information that is required to perform X.509-based validation. As time went by, a second approach was developed to synchronize RPs to fresh data generated by CAs. It was recognized that where RSYNC servers need to calculate the 'difference' between the client has and what the server has (right after the RSYNC client connects), such data could also be generated a-priori and stored in static files. Pre-generating such a 'journal' of all changes in a repository is considered to be far efficient than calculating it on the fly. The RRDP protocol has many appealing properties! In 2017 the RRDP protocol was published as IETF RFC as 'nice to have' synchronization protocol for the RPKI. Since then, more and more Publication Servers operators and RP software implementers worked to support the new RRDP protocol alongside the old RSYNC protocol. With two options available, how to migrate? ------------------------------------------- This Gordian Knot has two aspects: all deployed RPKI repository operators have to support RRDP, and all deployed Relying Party have to support RRDP. This means that for a succesful transition, for a moment in time, all stakeholders have to support both RSYNC and RRDP. The industry has not yet reached that point. I expect this to happen somewhere in 2023. At this moment of writing, not all Relying Party software, and not all RPKI Repository Operators support RRDP. Based on various communications in the IETF it is clear everyone is working towards implementing RRDP support. However producing a safe implementation of RRDP is not a trivial task, it takes time. As RSYNC existed first and RRDP came later, everyone should be allowed ample time to make the transition. While everyone waits for everyone to deploy RRDP capable software, the trick is to PREFER synchronizing via RRDP (and if it fails try RSYNC). Relevant Internet-Draft: https://datatracker.ietf.org/doc/draft-ietf-sidrops-prefer-rrdp/ The concept this is somewhat analogous to 'Happy Eyeballs': for a period of time many considered it advantageous for global IPv6 deployment to give IPv6 just a little bit of a head start compared to IPv4. People knew that purposefully degrading IPv4 would not motivate people to embrace IPv6. Also, preferring RRDP (and only using RSYNC in case of RRDP failure), makes life easier for RPKI Repository operators: it should be possible for them to temporarily disable the RRDP webserver and expect clients to use RSYNC instead. Knowing that clients will gracefully fall back to RSYNC lowers the barrier to deploy RRDP. Once all RP implementations have embraced the 'prefer RRDP' strategy, and those implemenations have trickled down into the hands of network operators and deployed in the field, Repository Operators will observe less and less clients connecting to the RSYNC service and more and more syncing via RRDP, to the point where it becomes self-evident publication via RSYNC can maybe even be decommissioned all together. TL;DR - general availability of software which prefers RRDP over RSYNC, combined with patience, should be sufficient of a plan to migrate! :) Current status -------------- Current versions of OpenBSD rpki-client supports RSYNC. The team is actively working to also support RRDP. The hope is to release a stable version later this year. OpenBSD supports releases for one year, thus any deprecation of RSYNC services should be post-poned at least until Spring 2023 to avoid disenfranchising existing deployments in the field. The RIPE NCC Validator RRDP implementation is broken. It is trivial for any RRDP Repository Operator to remotely crash the entire RIPE NCC validator process. Luckily the software is almost End-Of-Life and soon won't be relevant anymore. Current versions of Routinator are unable to fall back to RSYNC. However in November 2020, the team indicated they would fix this in the next release (which has yet to happen). Perhaps somewhat counterintuitive, an inability to fallback to RSYNC, makes migrating towards RRDP harder for the industry. For a peer-reviewed scientific publication on this phenomena see: https://dl.acm.org/doi/10.1145/3419394.3423622 I've not inspected how other validators behave, and we should keep in mind proprietary rsync-only validator implementations might exist this community is not aware of! How to move forward in the short term? -------------------------------------- RIPE NCC must support RSYNC as a first-class service. The RPKI via RSYNC is a LIVE production system. The global Internet routing system relies on the Trust Anchors to publish correctly. The suggestion it might take six months (from report to resolution) is too long of a waiting period for this type of issue. There are known negative interactions between inconsistent RPKI publications & BGP routing in the Default-Free Zone. This affects all Internet users. It is not possible to get hundreds of operators to migrate to RRDP overnight, but it is possible for RIPE NCC to improve RSYNC publication (while the world very slowly moves to RRDP). Kind regards, Job

2 1

RPKI Route Origin Validation on RIPE NCC Network
by Nathalie Trenaman 13 Apr '21

13 Apr '21

Dear colleagues, (My colleagues are drafting a reply on the rsync issue) Following up on my previous email and the discussion we had in this mailing last about enabling Route Origin Validation (ROV) invalid == reject on the RIPE NCC’s network, AS3333, I am happy to inform you that we will be going ahead on Monday, 19 April. I have written a RIPE Labs article with more information, which you can find at: https://labs.ripe.net/author/nathalie_nathalie/rpki-and-as3333-or-how-we-ea… Thank you very much for your contributions, discussion and support. Kind Regards, Nathalie Trenaman Routing Security Programme Manager RIPE NCC

1 0

Weekly Routing Table Report
by cscora＠apnic.net 09 Apr '21

09 Apr '21

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 10 Apr, 2021 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 855145 Prefixes after maximum aggregation (per Origin AS): 324141 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 406808 Total ASes present in the Internet Routing Table: 71034 Prefixes per ASN: 12.04 Origin-only ASes present in the Internet Routing Table: 61106 Origin ASes announcing only one prefix: 25216 Transit ASes present in the Internet Routing Table: 9928 Transit-only ASes present in the Internet Routing Table: 307 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 38 Max AS path prepend of ASN ( 37385) 33 Prefixes from unregistered ASNs in the Routing Table: 1015 Number of instances of unregistered ASNs: 1021 Number of 32-bit ASNs allocated by the RIRs: 35637 Number of 32-bit ASNs visible in the Routing Table: 29671 Prefixes from 32-bit ASNs in the Routing Table: 138154 Number of bogon 32-bit ASNs visible in the Routing Table: 21 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 530 Number of addresses announced to Internet: 2955025792 Equivalent to 176 /8s, 34 /16s and 29 /24s Percentage of available address space announced: 79.8 Percentage of allocated address space announced: 79.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 290123 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 226451 Total APNIC prefixes after maximum aggregation: 65430 APNIC Deaggregation factor: 3.46 Prefixes being announced from the APNIC address blocks: 222562 Unique aggregates announced from the APNIC address blocks: 89330 APNIC Region origin ASes present in the Internet Routing Table: 11459 APNIC Prefixes per ASN: 19.42 APNIC Region origin ASes announcing only one prefix: 3264 APNIC Region transit ASes present in the Internet Routing Table: 1624 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 30 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6613 Number of APNIC addresses announced to Internet: 772040448 Equivalent to 46 /8s, 4 /16s and 103 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 245433 Total ARIN prefixes after maximum aggregation: 112906 ARIN Deaggregation factor: 2.17 Prefixes being announced from the ARIN address blocks: 245868 Unique aggregates announced from the ARIN address blocks: 117633 ARIN Region origin ASes present in the Internet Routing Table: 18781 ARIN Prefixes per ASN: 13.09 ARIN Region origin ASes announcing only one prefix: 6810 ARIN Region transit ASes present in the Internet Routing Table: 1947 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 30 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3816 Number of ARIN addresses announced to Internet: 1189315840 Equivalent to 70 /8s, 227 /16s and 133 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 243686 Total RIPE prefixes after maximum aggregation: 113656 RIPE Deaggregation factor: 2.14 Prefixes being announced from the RIPE address blocks: 239659 Unique aggregates announced from the RIPE address blocks: 141179 RIPE Region origin ASes present in the Internet Routing Table: 27870 RIPE Prefixes per ASN: 8.60 RIPE Region origin ASes announcing only one prefix: 11972 RIPE Region transit ASes present in the Internet Routing Table: 3881 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 38 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10094 Number of RIPE addresses announced to Internet: 710577792 Equivalent to 42 /8s, 90 /16s and 142 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 112832 Total LACNIC prefixes after maximum aggregation: 26497 LACNIC Deaggregation factor: 4.26 Prefixes being announced from the LACNIC address blocks: 113977 Unique aggregates announced from the LACNIC address blocks: 48238 LACNIC Region origin ASes present in the Internet Routing Table: 10748 LACNIC Prefixes per ASN: 10.60 LACNIC Region origin ASes announcing only one prefix: 2673 LACNIC Region transit ASes present in the Internet Routing Table: 2015 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 33 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8356 Number of LACNIC addresses announced to Internet: 174957312 Equivalent to 10 /8s, 109 /16s and 163 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 25727 Total AfriNIC prefixes after maximum aggregation: 4898 AfriNIC Deaggregation factor: 5.25 Prefixes being announced from the AfriNIC address blocks: 32549 Unique aggregates announced from the AfriNIC address blocks: 9949 AfriNIC Region origin ASes present in the Internet Routing Table: 1450 AfriNIC Prefixes per ASN: 22.45 AfriNIC Region origin ASes announcing only one prefix: 497 AfriNIC Region transit ASes present in the Internet Routing Table: 294 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 38 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 792 Number of AfriNIC addresses announced to Internet: 107705088 Equivalent to 6 /8s, 107 /16s and 115 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 6279 8996 55 CMNET-GD Guangdong Mobile Communication 7545 5719 783 675 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4752 4192 74 ERX-CERNET-BKB China Education and Rese 7713 3524 1022 55 TELKOMNET-AS-AP PT Telekomunikasi Indon 7552 3489 1330 21 VIETEL-AS-AP Viettel Group, VN 45899 2912 1896 54 VNPT-AS-VN VNPT Corp, VN 4766 2435 11104 565 KIXS-AS-KR Korea Telecom, KR 9498 2321 482 232 BBIL-AP BHARTI Airtel Ltd., IN 4755 2120 441 190 TATACOMM-AS TATA Communications formerl 45090 2098 1197 72 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 4960 9264 2226 AMAZON-02, US 11492 4753 315 712 CABLEONE, US 7155 4030 264 32 VIASAT-SP-BACKBONE, US 22773 3914 2998 246 ASN-CXA-ALL-CCI-22773-RDC, US 16625 3362 1744 2403 AKAMAI-AS, US 6327 3358 1317 70 SHAW, CA 30036 2533 370 206 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2527 5053 485 CENTURYLINK-US-LEGACY-QWEST, US 5650 2335 2996 1636 FRONTIER-FRTR, US 5972 2222 448 787 DNIC-ASBLK-05800-06055, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 47331 7756 1043 3490 TTNET, TR 12479 6393 1700 139 UNI2-AS, ES 20940 3575 3347 201 AKAMAI-ASN1, NL 8551 3280 379 41 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 39891 3266 187 22 ALJAWWALSTC-AS, SA 12389 2902 2284 899 ROSTELECOM-AS, RU 9009 2378 246 1278 M247, GB 34984 2215 357 587 TELLCOM-AS, TR 13188 1610 100 31 TRIOLAN, UA 58224 1569 881 576 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8484 3472 569 Uninet S.A. de C.V., MX 10620 3409 527 603 Telmex Colombia S.A., CO 11830 2552 369 63 Instituto Costarricense de Electricidad 7303 1862 1725 295 Telecom Argentina S.A., AR 13999 1659 447 428 Mega Cable, S.A. de C.V., MX 6503 1443 311 475 Axtel, S.A.B. de C.V., MX 28573 1366 2271 223 CLARO S.A., BR 3816 1223 638 157 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1128 377 39 Telefonica del Peru S.A.A., PE 11664 1004 212 402 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1542 393 22 LINKdotNET-AS, EG 24835 1443 486 27 RAYA-AS, EG 36992 1195 1537 174 ETISALAT-MISR, EG 36903 1189 530 107 MT-MPLS, MA 29571 711 68 11 ORANGE-COTE-IVOIRE, CI 6713 546 1863 34 IAM-AS, MA 36935 514 522 40 Vodafone-, EG 37342 487 32 1 MOVITEL, MZ 15399 477 47 17 WANANCHI-, KE 23889 439 232 16 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8484 3472 569 Uninet S.A. de C.V., MX 47331 7756 1043 3490 TTNET, TR 12479 6393 1700 139 UNI2-AS, ES 9808 6279 8996 55 CMNET-GD Guangdong Mobile Communication 7545 5719 783 675 TPG-INTERNET-AP TPG Telecom Limited, AU 16509 4960 9264 2226 AMAZON-02, US 11492 4753 315 712 CABLEONE, US 4538 4752 4192 74 ERX-CERNET-BKB China Education and Rese 7155 4030 264 32 VIASAT-SP-BACKBONE, US 22773 3914 2998 246 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6393 6254 UNI2-AS, ES 9808 6279 6224 CMNET-GD Guangdong Mobile Communication Co.Ltd. 7545 5719 5044 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4752 4678 ERX-CERNET-BKB China Education and Research Net 47331 7756 4266 TTNET, TR 11492 4753 4041 CABLEONE, US 7155 4030 3998 VIASAT-SP-BACKBONE, US 22773 3914 3668 ASN-CXA-ALL-CCI-22773-RDC, US 7713 3524 3469 TELKOMNET-AS-AP PT Telekomunikasi Indonesia, ID 7552 3489 3468 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 46505 UNALLOCATED 12.7.131.0/24 7018 ATT-INTERNET4, US 15132 UNALLOCATED 12.9.150.0/24 1239 SPRINTLINK, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 397881 STINGERS, US Transit: 398481 REDMERCURY, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala 27.126.156.0/23 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:13 /9:12 /10:40 /11:102 /12:293 /13:584 /14:1187 /15:1945 /16:13528 /17:8326 /18:13861 /19:25845 /20:42465 /21:51406 /22:106450 /23:90910 /24:496778 /25:1400 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 47331 6933 7756 TTNET, TR 12479 5350 6393 UNI2-AS, ES 11492 3807 4753 CABLEONE, US 6327 3165 3358 SHAW, CA 7155 3118 4030 VIASAT-SP-BACKBONE, US 8151 3057 8484 Uninet S.A. de C.V., MX 22773 2955 3914 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2801 3266 ALJAWWALSTC-AS, SA 8551 2744 3280 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2218 2533 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1879 2:1111 3:105 4:19 5:3556 6:63 7:5 8:1506 9:1 11:36 12:1748 13:360 14:2302 15:73 16:15 17:317 18:93 20:128 22:188 23:4622 24:2400 25:2 27:2497 29:19 31:2309 32:113 34:2 35:40 36:1303 37:3759 38:2062 39:608 40:161 41:3846 42:924 43:2118 44:237 45:14937 46:3699 47:320 49:1609 50:1753 51:92 52:1211 54:218 55:737 56:8 57:57 58:1728 59:1200 60:887 61:2390 62:2194 63:1961 64:5283 65:2383 66:5143 67:2869 68:1152 69:4048 70:1397 71:689 72:3180 74:2580 75:1483 76:682 77:2026 78:3675 79:2445 80:1864 81:1632 82:1342 83:1119 84:1256 85:3343 86:707 87:1775 88:2701 89:3024 90:430 91:7298 92:1741 93:2538 94:3089 95:4409 96:1256 97:345 98:984 99:970 100:90 101:1047 102:1362 103:25811 104:3702 105:436 106:728 107:2239 108:707 109:3994 110:2011 111:2942 112:1973 113:1616 114:1465 115:1874 116:1894 117:2307 118:2339 119:1884 120:1105 121:1083 122:2266 123:2213 124:1574 125:2094 128:1364 129:955 130:834 131:2035 132:761 133:355 134:1604 135:289 136:745 137:921 138:2300 139:1186 140:742 141:1186 142:1118 143:1260 144:1254 145:331 146:1392 147:1296 148:2210 149:1446 150:799 151:1080 152:1553 153:394 154:2315 155:1330 156:1487 157:1171 158:926 159:2018 160:2089 161:1129 162:3272 163:974 164:1498 165:1332 166:593 167:1776 168:3573 169:664 170:4251 171:767 172:2124 173:2935 174:969 175:1087 176:3110 177:4334 178:2894 179:1953 180:2309 181:2553 182:3216 183:1813 184:2412 185:18143 186:4197 187:3170 188:3283 189:2820 190:8861 191:1470 192:10657 193:7986 194:6579 195:4712 196:2901 197:2369 198:6042 199:6028 200:7422 201:5344 202:10598 203:10057 204:4657 205:3331 206:3528 207:3364 208:4008 209:4654 210:4254 211:2192 212:3694 213:3302 214:1220 215:61 216:6180 217:2524 218:1158 219:703 220:2082 221:973 222:978 223:1850 End of report

1 0

RIPE Database requirements progress
by ripedenis＠yahoo.co.uk 08 Apr '21

08 Apr '21

Colleagues For the benefit of those who don't often check the mail archives of the RIPE Database Task Force there have been 4 meetings in February and March and the TF has just published the minutes of their most recent meeting on their mail archive which can be found here:https://www.ripe.net/ripe/mail/archives/ripe-db-requirements-tf/ Their latest draft requirements document can be found here:https://www.ripe.net/participate/ripe/tf/rdb-requirements-tf/the-ripe-… There are quite a number of recommendations made regarding the IRR and routing data in the RIPE Database. It would be helpful if more people would read this document and comment or discuss publicly on this WG mailing list any issues regarding the TF draft document before they publish their final version of the requirements. They also plan to hold a BOF sometime in May where you can make comments. cheersdenisco-chair DB-WG

1 0

Weekly Routing Table Report
by cscora＠apnic.net 02 Apr '21

02 Apr '21

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 03 Apr, 2021 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 854726 Prefixes after maximum aggregation (per Origin AS): 323513 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 406182 Total ASes present in the Internet Routing Table: 70970 Prefixes per ASN: 12.04 Origin-only ASes present in the Internet Routing Table: 61044 Origin ASes announcing only one prefix: 25196 Transit ASes present in the Internet Routing Table: 9926 Transit-only ASes present in the Internet Routing Table: 312 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 38 Max AS path prepend of ASN ( 37385) 33 Prefixes from unregistered ASNs in the Routing Table: 967 Number of instances of unregistered ASNs: 971 Number of 32-bit ASNs allocated by the RIRs: 35604 Number of 32-bit ASNs visible in the Routing Table: 29608 Prefixes from 32-bit ASNs in the Routing Table: 137894 Number of bogon 32-bit ASNs visible in the Routing Table: 15 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 522 Number of addresses announced to Internet: 2918308992 Equivalent to 173 /8s, 241 /16s and 220 /24s Percentage of available address space announced: 78.8 Percentage of allocated address space announced: 78.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 290249 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 226287 Total APNIC prefixes after maximum aggregation: 65318 APNIC Deaggregation factor: 3.46 Prefixes being announced from the APNIC address blocks: 222425 Unique aggregates announced from the APNIC address blocks: 89164 APNIC Region origin ASes present in the Internet Routing Table: 11432 APNIC Prefixes per ASN: 19.46 APNIC Region origin ASes announcing only one prefix: 3255 APNIC Region transit ASes present in the Internet Routing Table: 1621 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 30 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6586 Number of APNIC addresses announced to Internet: 771899392 Equivalent to 46 /8s, 2 /16s and 64 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 245102 Total ARIN prefixes after maximum aggregation: 112563 ARIN Deaggregation factor: 2.18 Prefixes being announced from the ARIN address blocks: 245569 Unique aggregates announced from the ARIN address blocks: 117445 ARIN Region origin ASes present in the Internet Routing Table: 18774 ARIN Prefixes per ASN: 13.08 ARIN Region origin ASes announcing only one prefix: 6815 ARIN Region transit ASes present in the Internet Routing Table: 1936 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 30 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3802 Number of ARIN addresses announced to Internet: 1152747008 Equivalent to 68 /8s, 181 /16s and 134 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 243836 Total RIPE prefixes after maximum aggregation: 113503 RIPE Deaggregation factor: 2.15 Prefixes being announced from the RIPE address blocks: 239762 Unique aggregates announced from the RIPE address blocks: 140974 RIPE Region origin ASes present in the Internet Routing Table: 27846 RIPE Prefixes per ASN: 8.61 RIPE Region origin ASes announcing only one prefix: 11961 RIPE Region transit ASes present in the Internet Routing Table: 3888 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 38 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10077 Number of RIPE addresses announced to Internet: 710602624 Equivalent to 42 /8s, 90 /16s and 239 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 112996 Total LACNIC prefixes after maximum aggregation: 26483 LACNIC Deaggregation factor: 4.27 Prefixes being announced from the LACNIC address blocks: 114121 Unique aggregates announced from the LACNIC address blocks: 48185 LACNIC Region origin ASes present in the Internet Routing Table: 10743 LACNIC Prefixes per ASN: 10.62 LACNIC Region origin ASes announcing only one prefix: 2667 LACNIC Region transit ASes present in the Internet Routing Table: 2020 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 33 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8352 Number of LACNIC addresses announced to Internet: 174952960 Equivalent to 10 /8s, 109 /16s and 146 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 25537 Total AfriNIC prefixes after maximum aggregation: 4909 AfriNIC Deaggregation factor: 5.20 Prefixes being announced from the AfriNIC address blocks: 32327 Unique aggregates announced from the AfriNIC address blocks: 9941 AfriNIC Region origin ASes present in the Internet Routing Table: 1447 AfriNIC Prefixes per ASN: 22.34 AfriNIC Region origin ASes announcing only one prefix: 498 AfriNIC Region transit ASes present in the Internet Routing Table: 294 Average AfriNIC Region AS path length visible: 5.2 Max AfriNIC Region AS path length visible: 38 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 791 Number of AfriNIC addresses announced to Internet: 107682816 Equivalent to 6 /8s, 107 /16s and 28 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 6267 8996 55 CMNET-GD Guangdong Mobile Communication 7545 5736 783 674 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4838 4192 74 ERX-CERNET-BKB China Education and Rese 7713 3528 1022 55 TELKOMNET-AS-AP PT Telekomunikasi Indon 7552 3515 1330 21 VIETEL-AS-AP Viettel Group, VN 45899 2914 1896 54 VNPT-AS-VN VNPT Corp, VN 4766 2435 11104 565 KIXS-AS-KR Korea Telecom, KR 9498 2318 482 232 BBIL-AP BHARTI Airtel Ltd., IN 4755 2125 441 190 TATACOMM-AS TATA Communications formerl 45090 2097 1197 71 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 4920 9258 2210 AMAZON-02, US 11492 4751 315 710 CABLEONE, US 7155 4027 264 32 VIASAT-SP-BACKBONE, US 22773 3918 2998 246 ASN-CXA-ALL-CCI-22773-RDC, US 16625 3377 1750 2399 AKAMAI-AS, US 6327 3359 1317 71 SHAW, CA 30036 2541 372 94 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2525 5038 490 CENTURYLINK-US-LEGACY-QWEST, US 5650 2342 2996 1636 FRONTIER-FRTR, US 5972 2216 448 786 DNIC-ASBLK-05800-06055, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 47331 7753 1043 3473 TTNET, TR 12479 6381 1701 138 UNI2-AS, ES 20940 3577 3347 202 AKAMAI-ASN1, NL 39891 3266 187 22 ALJAWWALSTC-AS, SA 8551 3242 379 41 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2892 2282 892 ROSTELECOM-AS, RU 9009 2377 246 1276 M247, GB 34984 2202 356 582 TELLCOM-AS, TR 13188 1610 100 31 TRIOLAN, UA 58224 1570 881 572 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8481 3472 570 Uninet S.A. de C.V., MX 10620 3413 527 596 Telmex Colombia S.A., CO 11830 2560 369 63 Instituto Costarricense de Electricidad 7303 1872 1732 296 Telecom Argentina S.A., AR 13999 1654 446 427 Mega Cable, S.A. de C.V., MX 6503 1444 311 476 Axtel, S.A.B. de C.V., MX 28573 1386 2269 223 CLARO S.A., BR 3816 1210 623 154 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1128 377 39 Telefonica del Peru S.A.A., PE 11664 995 211 399 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1582 393 22 LINKdotNET-AS, EG 24835 1443 486 27 RAYA-AS, EG 36992 1194 1537 174 ETISALAT-MISR, EG 36903 977 510 104 MT-MPLS, MA 29571 711 68 11 ORANGE-COTE-IVOIRE, CI 6713 540 1863 34 IAM-AS, MA 36935 514 522 40 Vodafone-, EG 37342 487 32 1 MOVITEL, MZ 15399 477 47 17 WANANCHI-, KE 23889 447 232 16 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8481 3472 570 Uninet S.A. de C.V., MX 47331 7753 1043 3473 TTNET, TR 12479 6381 1701 138 UNI2-AS, ES 9808 6267 8996 55 CMNET-GD Guangdong Mobile Communication 7545 5736 783 674 TPG-INTERNET-AP TPG Telecom Limited, AU 16509 4920 9258 2210 AMAZON-02, US 4538 4838 4192 74 ERX-CERNET-BKB China Education and Rese 11492 4751 315 710 CABLEONE, US 7155 4027 264 32 VIASAT-SP-BACKBONE, US 22773 3918 2998 246 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6381 6243 UNI2-AS, ES 9808 6267 6212 CMNET-GD Guangdong Mobile Communication Co.Ltd. 7545 5736 5062 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4838 4764 ERX-CERNET-BKB China Education and Research Net 47331 7753 4280 TTNET, TR 11492 4751 4041 CABLEONE, US 7155 4027 3995 VIASAT-SP-BACKBONE, US 22773 3918 3672 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3515 3494 VIETEL-AS-AP Viettel Group, VN 7713 3528 3473 TELKOMNET-AS-AP PT Telekomunikasi Indonesia, ID Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 46505 UNALLOCATED 12.7.131.0/24 7018 ATT-INTERNET4, US 15132 UNALLOCATED 12.9.150.0/24 1239 SPRINTLINK, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 397881 STINGERS, US Transit: 398481 REDMERCURY, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala 27.126.156.0/23 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:11 /9:12 /10:40 /11:102 /12:292 /13:583 /14:1184 /15:1945 /16:13515 /17:8359 /18:13853 /19:25799 /20:42439 /21:51375 /22:106396 /23:90727 /24:496686 /25:1408 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 47331 6929 7753 TTNET, TR 12479 5337 6381 UNI2-AS, ES 11492 3805 4751 CABLEONE, US 6327 3165 3359 SHAW, CA 7155 3115 4027 VIASAT-SP-BACKBONE, US 8151 3054 8481 Uninet S.A. de C.V., MX 22773 2959 3918 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2801 3266 ALJAWWALSTC-AS, SA 8551 2706 3242 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2237 2541 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1871 2:1114 3:94 4:19 5:3563 6:63 7:5 8:1502 9:1 11:36 12:1748 13:359 14:2318 15:73 16:15 17:317 18:93 20:129 22:188 23:4622 24:2397 25:2 27:2505 31:2286 32:113 34:2 35:40 36:1287 37:4017 38:2059 39:606 40:161 41:3854 42:924 43:2115 44:238 45:14977 46:3673 47:320 49:1608 50:1751 51:92 52:1208 54:217 55:778 56:6 57:57 58:1733 59:1202 60:891 61:2386 62:2199 63:1963 64:5291 65:2379 66:5159 67:2880 68:1154 69:4055 70:1398 71:689 72:3179 74:2581 75:1481 76:682 77:2018 78:3668 79:2420 80:1862 81:1647 82:1346 83:1118 84:1263 85:3353 86:710 87:1782 88:2703 89:3027 90:423 91:7298 92:1749 93:2537 94:3059 95:4402 96:1259 97:343 98:990 99:969 100:89 101:1047 102:1310 103:25706 104:3707 105:426 106:734 107:2246 108:705 109:3976 110:1993 111:2944 112:1970 113:1621 114:1465 115:1877 116:1889 117:2314 118:2340 119:1891 120:1104 121:1085 122:2265 123:2185 124:1563 125:2094 128:1368 129:954 130:834 131:2043 132:759 133:355 134:1595 135:289 136:750 137:916 138:2302 139:1200 140:736 141:1184 142:1117 143:1267 144:1255 145:331 146:1385 147:1294 148:2206 149:1442 150:788 151:1078 152:1554 153:392 154:2265 155:1326 156:1495 157:1172 158:926 159:2014 160:2092 161:1137 162:3254 163:975 164:1495 165:1335 166:594 167:1773 168:3551 169:663 170:4272 171:763 172:2111 173:2940 174:968 175:1095 176:3102 177:4312 178:2903 179:1957 180:2313 181:2562 182:3210 183:1827 184:2412 185:18154 186:4195 187:3198 188:3296 189:2824 190:8849 191:1487 192:10632 193:7975 194:6562 195:4705 196:2892 197:2363 198:6028 199:6035 200:7425 201:5346 202:10599 203:10085 204:4649 205:3318 206:3532 207:3333 208:4008 209:4645 210:4252 211:2187 212:3682 213:3288 214:1215 215:61 216:6176 217:2520 218:1151 219:703 220:2067 221:992 222:973 223:1859 End of report

1 0

RPKI Invalid == Reject policies on the AS 3333 EBGP border
by Paul Hoogsteder 01 Apr '21

01 Apr '21

Dear RIPE Routing WG and RIPE NCC, after having gone through all responses on the mailing list there seems to be unanimous support for RIPE NCC to proceed with the deployment of "RPKI Invalid == Reject" policies on the AS 3333 EBGP border. Kind regards, Job Snijders & Paul Hoogsteder

5 5

Weekly Routing Table Report
by cscora＠apnic.net 26 Mar '21

26 Mar '21

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 27 Mar, 2021 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 853765 Prefixes after maximum aggregation (per Origin AS): 323350 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 405865 Total ASes present in the Internet Routing Table: 70923 Prefixes per ASN: 12.04 Origin-only ASes present in the Internet Routing Table: 61009 Origin ASes announcing only one prefix: 25176 Transit ASes present in the Internet Routing Table: 9914 Transit-only ASes present in the Internet Routing Table: 307 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 38 Max AS path prepend of ASN ( 37385) 33 Prefixes from unregistered ASNs in the Routing Table: 971 Number of instances of unregistered ASNs: 975 Number of 32-bit ASNs allocated by the RIRs: 35515 Number of 32-bit ASNs visible in the Routing Table: 29547 Prefixes from 32-bit ASNs in the Routing Table: 137633 Number of bogon 32-bit ASNs visible in the Routing Table: 15 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 512 Number of addresses announced to Internet: 2909527424 Equivalent to 173 /8s, 107 /16s and 221 /24s Percentage of available address space announced: 78.6 Percentage of allocated address space announced: 78.6 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 289671 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 226292 Total APNIC prefixes after maximum aggregation: 65353 APNIC Deaggregation factor: 3.46 Prefixes being announced from the APNIC address blocks: 222401 Unique aggregates announced from the APNIC address blocks: 89095 APNIC Region origin ASes present in the Internet Routing Table: 11418 APNIC Prefixes per ASN: 19.48 APNIC Region origin ASes announcing only one prefix: 3248 APNIC Region transit ASes present in the Internet Routing Table: 1619 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 31 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6573 Number of APNIC addresses announced to Internet: 772179200 Equivalent to 46 /8s, 6 /16s and 133 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 244801 Total ARIN prefixes after maximum aggregation: 112519 ARIN Deaggregation factor: 2.18 Prefixes being announced from the ARIN address blocks: 245330 Unique aggregates announced from the ARIN address blocks: 117363 ARIN Region origin ASes present in the Internet Routing Table: 18764 ARIN Prefixes per ASN: 13.07 ARIN Region origin ASes announcing only one prefix: 6804 ARIN Region transit ASes present in the Internet Routing Table: 1932 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 30 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3780 Number of ARIN addresses announced to Internet: 1144306688 Equivalent to 68 /8s, 52 /16s and 188 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 243349 Total RIPE prefixes after maximum aggregation: 113363 RIPE Deaggregation factor: 2.15 Prefixes being announced from the RIPE address blocks: 239232 Unique aggregates announced from the RIPE address blocks: 140771 RIPE Region origin ASes present in the Internet Routing Table: 27822 RIPE Prefixes per ASN: 8.60 RIPE Region origin ASes announcing only one prefix: 11942 RIPE Region transit ASes present in the Internet Routing Table: 3892 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10051 Number of RIPE addresses announced to Internet: 710691456 Equivalent to 42 /8s, 92 /16s and 74 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 112916 Total LACNIC prefixes after maximum aggregation: 26496 LACNIC Deaggregation factor: 4.26 Prefixes being announced from the LACNIC address blocks: 114028 Unique aggregates announced from the LACNIC address blocks: 48190 LACNIC Region origin ASes present in the Internet Routing Table: 10742 LACNIC Prefixes per ASN: 10.62 LACNIC Region origin ASes announcing only one prefix: 2674 LACNIC Region transit ASes present in the Internet Routing Table: 2024 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 33 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8346 Number of LACNIC addresses announced to Internet: 174829312 Equivalent to 10 /8s, 107 /16s and 175 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 25435 Total AfriNIC prefixes after maximum aggregation: 4872 AfriNIC Deaggregation factor: 5.22 Prefixes being announced from the AfriNIC address blocks: 32262 Unique aggregates announced from the AfriNIC address blocks: 9978 AfriNIC Region origin ASes present in the Internet Routing Table: 1458 AfriNIC Prefixes per ASN: 22.13 AfriNIC Region origin ASes announcing only one prefix: 508 AfriNIC Region transit ASes present in the Internet Routing Table: 293 Average AfriNIC Region AS path length visible: 5.2 Max AfriNIC Region AS path length visible: 38 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 797 Number of AfriNIC addresses announced to Internet: 107100928 Equivalent to 6 /8s, 98 /16s and 59 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 6259 9045 61 CMNET-GD Guangdong Mobile Communication 7545 5724 783 673 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4813 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3538 1330 21 VIETEL-AS-AP Viettel Group, VN 7713 3524 1014 58 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 2908 1896 55 VNPT-AS-VN VNPT Corp, VN 4766 2436 11104 565 KIXS-AS-KR Korea Telecom, KR 9498 2316 482 231 BBIL-AP BHARTI Airtel Ltd., IN 4755 2147 441 190 TATACOMM-AS TATA Communications formerl 45090 2097 1197 71 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 4904 9258 2208 AMAZON-02, US 11492 4747 315 704 CABLEONE, US 7155 4030 264 32 VIASAT-SP-BACKBONE, US 22773 3910 2998 245 ASN-CXA-ALL-CCI-22773-RDC, US 16625 3393 1760 2409 AKAMAI-AS, US 6327 3360 1317 72 SHAW, CA 30036 2540 372 93 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2527 5054 486 CENTURYLINK-US-LEGACY-QWEST, US 5650 2346 2998 1637 FRONTIER-FRTR, US 5972 2214 448 787 DNIC-ASBLK-05800-06055, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 47331 7740 1041 3484 TTNET, TR 12479 6405 1701 138 UNI2-AS, ES 20940 3557 3347 202 AKAMAI-ASN1, NL 39891 3266 187 22 ALJAWWALSTC-AS, SA 8551 3222 379 41 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2899 2284 898 ROSTELECOM-AS, RU 9009 2375 246 1277 M247, GB 34984 2183 355 582 TELLCOM-AS, TR 13188 1610 100 31 TRIOLAN, UA 58224 1570 881 572 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8480 3472 570 Uninet S.A. de C.V., MX 10620 3411 527 604 Telmex Colombia S.A., CO 11830 2539 369 63 Instituto Costarricense de Electricidad 7303 1872 1732 296 Telecom Argentina S.A., AR 13999 1651 446 427 Mega Cable, S.A. de C.V., MX 6503 1442 311 475 Axtel, S.A.B. de C.V., MX 28573 1392 2269 222 CLARO S.A., BR 3816 1210 623 154 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1127 377 39 Telefonica del Peru S.A.A., PE 11664 1002 212 401 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1581 393 22 LINKdotNET-AS, EG 24835 1443 486 27 RAYA-AS, EG 36992 1194 1537 174 ETISALAT-MISR, EG 36903 977 510 104 MT-MPLS, MA 29571 710 68 11 ORANGE-COTE-IVOIRE, CI 6713 540 1863 34 IAM-AS, MA 36935 514 522 40 Vodafone-, EG 37342 487 32 1 MOVITEL, MZ 15399 452 47 17 WANANCHI-, KE 23889 447 232 16 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8480 3472 570 Uninet S.A. de C.V., MX 47331 7740 1041 3484 TTNET, TR 12479 6405 1701 138 UNI2-AS, ES 9808 6259 9045 61 CMNET-GD Guangdong Mobile Communication 7545 5724 783 673 TPG-INTERNET-AP TPG Telecom Limited, AU 16509 4904 9258 2208 AMAZON-02, US 4538 4813 4192 74 ERX-CERNET-BKB China Education and Rese 11492 4747 315 704 CABLEONE, US 7155 4030 264 32 VIASAT-SP-BACKBONE, US 22773 3910 2998 245 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6405 6267 UNI2-AS, ES 9808 6259 6198 CMNET-GD Guangdong Mobile Communication Co.Ltd. 7545 5724 5051 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4813 4739 ERX-CERNET-BKB China Education and Research Net 47331 7740 4256 TTNET, TR 11492 4747 4043 CABLEONE, US 7155 4030 3998 VIASAT-SP-BACKBONE, US 22773 3910 3665 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3538 3517 VIETEL-AS-AP Viettel Group, VN 7713 3524 3466 TELKOMNET-AS-AP PT Telekomunikasi Indonesia, ID Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 46505 UNALLOCATED 12.7.131.0/24 7018 ATT-INTERNET4, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 397881 STINGERS, US Transit: 398481 REDMERCURY, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala 27.126.156.0/23 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:10 /9:12 /10:40 /11:102 /12:292 /13:576 /14:1183 /15:1946 /16:13515 /17:8328 /18:13797 /19:25791 /20:42402 /21:51347 /22:106418 /23:90554 /24:496041 /25:1411 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 47331 6918 7740 TTNET, TR 12479 5359 6405 UNI2-AS, ES 11492 3801 4747 CABLEONE, US 6327 3165 3360 SHAW, CA 7155 3118 4030 VIASAT-SP-BACKBONE, US 8151 3052 8480 Uninet S.A. de C.V., MX 22773 2952 3910 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2801 3266 ALJAWWALSTC-AS, SA 8551 2686 3222 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2237 2540 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1877 2:1107 3:94 4:20 5:3567 6:64 7:5 8:1503 9:1 11:36 12:1750 13:352 14:2327 15:73 16:15 17:317 18:93 20:129 22:188 23:4596 24:2391 25:2 27:2500 31:2267 32:113 34:3 35:40 36:1282 37:3761 38:2071 39:607 40:153 41:3836 42:924 43:2120 44:239 45:14958 46:3684 47:320 49:1624 50:1754 51:92 52:1203 54:216 55:752 56:7 57:57 58:1736 59:1207 60:890 61:2395 62:2203 63:1973 64:5273 65:2382 66:5122 67:2885 68:1160 69:4047 70:1403 71:686 72:3171 74:2580 75:1482 76:684 77:2006 78:3665 79:2411 80:1841 81:1632 82:1352 83:1110 84:1263 85:3345 86:710 87:1786 88:2706 89:3017 90:423 91:7278 92:1745 93:2555 94:3042 95:4407 96:1257 97:344 98:986 99:970 100:89 101:1049 102:1293 103:25741 104:3696 105:426 106:720 107:2225 108:704 109:3962 110:1993 111:2937 112:1933 113:1622 114:1463 115:1877 116:1891 117:2293 118:2323 119:1894 120:1115 121:1086 122:2295 123:2185 124:1572 125:2101 128:1365 129:948 130:827 131:2026 132:746 133:355 134:1590 135:289 136:743 137:912 138:2301 139:1182 140:738 141:1183 142:1114 143:1274 144:1252 145:333 146:1391 147:1294 148:2203 149:1438 150:793 151:1088 152:1552 153:390 154:2272 155:1337 156:1510 157:1169 158:925 159:2032 160:2078 161:1135 162:3244 163:981 164:1494 165:1336 166:598 167:1778 168:3580 169:662 170:4282 171:763 172:2118 173:2945 174:968 175:1091 176:3067 177:4344 178:2895 179:1961 180:2269 181:2589 182:3208 183:1809 184:2411 185:18100 186:4197 187:3123 188:3304 189:2846 190:8891 191:1490 192:10611 193:7970 194:6539 195:4697 196:2908 197:2331 198:6038 199:6029 200:7408 201:5351 202:10597 203:10128 204:4652 205:3319 206:3527 207:3324 208:3999 209:4650 210:4258 211:2207 212:3675 213:3283 214:1214 215:61 216:6186 217:2521 218:1146 219:703 220:2073 221:974 222:968 223:1860 End of report

1 0

RPKI Route Origin Validation and AS3333
by Nathalie Trenaman 21 Mar '21

21 Mar '21

Dear Colleagues, Working Group, As discussed previously in this mailing list, some community members expressed that they would like to see the RIPE NCC perform Route Origin Validation on AS3333. We decided to ask the community for advice and guidance on how we should proceed. What is Route Origin Validation? Route Origin Validation is a mechanism by which route advertisements can be authenticated as originating from an expected autonomous system (AS). The best current practice is to drop RPKI invalid BGP announcements. These are announcements that conflict with the statement as described in a Route Origin Authorization (ROA). What is AS3333? This is the AS Number for the RIPE NCC’s main service network. It includes most of our *.ripe.net <http://ripe.net/> websites, including the LIR Portal (my.ripe.net <http://my.ripe.net/>) and the RIPE Database. What is the Problem? Currently, some of our upstream providers already perform ROV. This means that some of our members that potentially misconfigured their ROA or members who have lost control of creation and modification of their ROAs cannot reach our services via those peers. On the other hand, some of our upstream providers do not perform ROV, and if a member’s prefix is being announced by a hijacker, they cannot access our services. We already received a report about this.This is also not an ideal situation. From the network operations perspective, there are no obstacles to enable ROV on AS3333, however, we have to consider that members or End Users who announce something different in BGP than their ROA claims, will be dropped and lose access to our services from their network. This includes the RPKI Dashboard where they can make changes to their ROAs. This is specially relevant when members operate certificate generation in hosted mode which is the current operation mode for almost all for our members. From an analysis we made on 10 February, there were 511 of such announcements from our members and End Users. Our current RPKI Terms and Conditions do not mention that a Member or End User ROA should match their routing intentions, or any implications it may have if the ROA does not match their BGP announcement. If the community decides it is important that AS3333 performs ROV, our legal team needs to update the RPKI Terms and Conditions to reflect the potential impact. I welcome a respectful discussion and look forward to your advice and guidance. Kind regards, Nathalie Trenaman Routing Security Programme Manager RIPE NCC

15 21