- routing-wg - mailman.ripe.net

Open House
by Kim, Yong 13 Jan '21

13 Jan '21

The RIPE NCC is hosting an Open House on Routing Security and RPKI next week to discuss developments, uptake, and future plans of RPKI.

1 0

Invitation: RPKI Open House
by Nathalie Trenaman 13 Jan '21

13 Jan '21

Dear all, The RIPE NCC is hosting an Open House on Routing Security and RPKI next week to discuss developments, uptake, and future plans of RPKI. The RIPE NCC Open House will take place on Wednesday, 20 January at 11:00 UTC and it's a free, ninety-minute remote session for RIPE NCC staff, community members and industry experts to initiate discussions, and share insights and feedback on: ·RPKI trends and statistics ·RIPE NCC's plans for the future of RPKI ·Deprecating the RIPE NCC Validator ·Discussion on the future of Routing Security To register and find more information about the event, check this page: https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-th… <https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-th…> See you there. Cheers, Nathalie Trenaman RIPE NCC

1 0

Weekly Routing Table Report
by cscora＠apnic.net 08 Jan '21

08 Jan '21

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 09 Jan, 2021 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 835914 Prefixes after maximum aggregation (per Origin AS): 320620 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 400305 Total ASes present in the Internet Routing Table: 70275 Prefixes per ASN: 11.89 Origin-only ASes present in the Internet Routing Table: 60448 Origin ASes announcing only one prefix: 25023 Transit ASes present in the Internet Routing Table: 9827 Transit-only ASes present in the Internet Routing Table: 296 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 203 Max AS path prepend of ASN (396896) 200 Prefixes from unregistered ASNs in the Routing Table: 1015 Number of instances of unregistered ASNs: 1018 Number of 32-bit ASNs allocated by the RIRs: 34613 Number of 32-bit ASNs visible in the Routing Table: 28766 Prefixes from 32-bit ASNs in the Routing Table: 132847 Number of bogon 32-bit ASNs visible in the Routing Table: 15 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 501 Number of addresses announced to Internet: 2864181632 Equivalent to 170 /8s, 183 /16s and 241 /24s Percentage of available address space announced: 77.4 Percentage of allocated address space announced: 77.4 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 284376 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 218915 Total APNIC prefixes after maximum aggregation: 64842 APNIC Deaggregation factor: 3.38 Prefixes being announced from the APNIC address blocks: 214864 Unique aggregates announced from the APNIC address blocks: 87855 APNIC Region origin ASes present in the Internet Routing Table: 11192 APNIC Prefixes per ASN: 19.20 APNIC Region origin ASes announcing only one prefix: 3195 APNIC Region transit ASes present in the Internet Routing Table: 1604 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 31 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6324 Number of APNIC addresses announced to Internet: 778374912 Equivalent to 46 /8s, 101 /16s and 15 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 241300 Total ARIN prefixes after maximum aggregation: 111690 ARIN Deaggregation factor: 2.16 Prefixes being announced from the ARIN address blocks: 241836 Unique aggregates announced from the ARIN address blocks: 115697 ARIN Region origin ASes present in the Internet Routing Table: 18696 ARIN Prefixes per ASN: 12.94 ARIN Region origin ASes announcing only one prefix: 6814 ARIN Region transit ASes present in the Internet Routing Table: 1921 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 203 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3649 Number of ARIN addresses announced to Internet: 1093157376 Equivalent to 65 /8s, 40 /16s and 66 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 238117 Total RIPE prefixes after maximum aggregation: 112203 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 234004 Unique aggregates announced from the RIPE address blocks: 137985 RIPE Region origin ASes present in the Internet Routing Table: 27618 RIPE Prefixes per ASN: 8.47 RIPE Region origin ASes announcing only one prefix: 11875 RIPE Region transit ASes present in the Internet Routing Table: 3878 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9804 Number of RIPE addresses announced to Internet: 709883008 Equivalent to 42 /8s, 79 /16s and 244 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 111846 Total LACNIC prefixes after maximum aggregation: 26287 LACNIC Deaggregation factor: 4.25 Prefixes being announced from the LACNIC address blocks: 112942 Unique aggregates announced from the LACNIC address blocks: 48012 LACNIC Region origin ASes present in the Internet Routing Table: 10633 LACNIC Prefixes per ASN: 10.62 LACNIC Region origin ASes announcing only one prefix: 2652 LACNIC Region transit ASes present in the Internet Routing Table: 1983 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 33 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8234 Number of LACNIC addresses announced to Internet: 174092288 Equivalent to 10 /8s, 96 /16s and 112 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 24719 Total AfriNIC prefixes after maximum aggregation: 4838 AfriNIC Deaggregation factor: 5.11 Prefixes being announced from the AfriNIC address blocks: 31767 Unique aggregates announced from the AfriNIC address blocks: 10337 AfriNIC Region origin ASes present in the Internet Routing Table: 1427 AfriNIC Prefixes per ASN: 22.26 AfriNIC Region origin ASes announcing only one prefix: 486 AfriNIC Region transit ASes present in the Internet Routing Table: 289 Average AfriNIC Region AS path length visible: 5.2 Max AfriNIC Region AS path length visible: 28 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 755 Number of AfriNIC addresses announced to Internet: 108230400 Equivalent to 6 /8s, 115 /16s and 119 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5687 777 661 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4743 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3536 1330 21 VIETEL-AS-AP Viettel Group, VN 7713 3234 952 519 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 2864 1896 55 VNPT-AS-VN VNPT Corp, VN 9808 2778 9044 57 CMNET-GD Guangdong Mobile Communication 4766 2462 11104 567 KIXS-AS-KR Korea Telecom, KR 9498 2305 482 233 BBIL-AP BHARTI Airtel Ltd., IN 4755 2131 441 189 TATACOMM-AS TATA Communications formerl 45090 2069 1045 64 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4735 314 723 CABLEONE, US 16509 4618 9077 2134 AMAZON-02, US 7155 4037 264 32 VIASAT-SP-BACKBONE, US 22773 3819 3020 228 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3348 1319 83 SHAW, CA 16625 3188 1669 2286 AKAMAI-AS, US 209 2521 5058 507 CENTURYLINK-US-LEGACY-QWEST, US 30036 2499 370 85 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 2350 3000 1640 FRONTIER-FRTR, US 20115 2165 2902 510 CHARTER-20115, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 47331 6312 859 3615 TTNET, TR 12479 6215 1667 141 UNI2-AS, ES 39891 3459 195 22 ALJAWWALSTC-AS, SA 20940 3372 3359 186 AKAMAI-ASN1, NL 8551 3116 379 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2874 2280 886 ROSTELECOM-AS, RU 9009 2307 231 1246 M247, GB 34984 2175 354 578 TELLCOM-AS, TR 13188 1611 100 23 TRIOLAN, UA 58224 1491 860 546 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8101 3400 588 Uninet S.A. de C.V., MX 10620 3385 526 606 Telmex Colombia S.A., CO 11830 2564 369 63 Instituto Costarricense de Electricidad 13999 1608 432 412 Mega Cable, S.A. de C.V., MX 6503 1438 311 475 Axtel, S.A.B. de C.V., MX 7303 1435 910 262 Telecom Argentina S.A., AR 28573 1380 2260 221 CLARO S.A., BR 6147 1146 379 39 Telefonica del Peru S.A.A., PE 3816 1118 540 149 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11664 1008 213 417 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1570 393 21 LINKdotNET-AS, EG 24835 1253 466 28 RAYA-AS, EG 36992 1158 1521 163 ETISALAT-MISR, EG 36903 979 511 102 MT-MPLS, MA 29571 703 68 12 ORANGE-COTE-IVOIRE, CI 6713 533 1863 34 IAM-AS, MA 37342 479 32 1 MOVITEL, MZ 23889 454 232 16 MauritiusTelecom, MU 36935 443 522 39 Vodafone-, EG 15399 440 46 16 WANANCHI-, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8101 3400 588 Uninet S.A. de C.V., MX 47331 6312 859 3615 TTNET, TR 12479 6215 1667 141 UNI2-AS, ES 7545 5687 777 661 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4743 4192 74 ERX-CERNET-BKB China Education and Rese 11492 4735 314 723 CABLEONE, US 16509 4618 9077 2134 AMAZON-02, US 7155 4037 264 32 VIASAT-SP-BACKBONE, US 22773 3819 3020 228 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3536 1330 21 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6215 6074 UNI2-AS, ES 7545 5687 5026 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4743 4669 ERX-CERNET-BKB China Education and Research Net 11492 4735 4012 CABLEONE, US 7155 4037 4005 VIASAT-SP-BACKBONE, US 22773 3819 3591 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3536 3515 VIETEL-AS-AP Viettel Group, VN 39891 3459 3437 ALJAWWALSTC-AS, SA 6327 3348 3265 SHAW, CA 20940 3372 3186 AKAMAI-ASN1, NL Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 16589 UNALLOCATED 8.20.247.0/24 23393 NUCDN, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 16589 UNALLOCATED 8.26.56.0/24 23393 NUCDN, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 393579 UNALLOCATED 8.38.98.0/24 3356 LEVEL3, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.133.192.0/24 Origin: 16734 UNASSIGNED Transit: 266201 RNV CORP EIRELI, BR 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 397881 STINGERS, US Transit: 398481 REDMERCURY, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:8 /9:13 /10:40 /11:101 /12:292 /13:579 /14:1176 /15:1924 /16:13459 /17:8247 /18:13689 /19:25636 /20:41507 /21:50600 /22:103774 /23:88216 /24:485346 /25:1307 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 47331 5594 6312 TTNET, TR 12479 5194 6215 UNI2-AS, ES 11492 3809 4735 CABLEONE, US 6327 3143 3348 SHAW, CA 7155 3125 4037 VIASAT-SP-BACKBONE, US 22773 2895 3819 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2801 3459 ALJAWWALSTC-AS, SA 8151 2721 8101 Uninet S.A. de C.V., MX 8551 2577 3116 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2229 2499 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1883 2:1185 3:70 4:18 5:3581 6:53 8:1500 9:1 11:1 12:1753 13:350 14:2423 15:75 16:14 17:309 18:93 20:113 23:4192 24:2369 25:3 27:2334 31:2181 32:114 34:1 35:36 36:1140 37:3555 38:2011 39:471 40:150 41:3848 42:880 43:2099 44:233 45:14644 46:3581 47:317 49:1603 50:1680 51:89 52:1108 54:217 55:771 56:6 57:57 58:1691 59:1150 60:818 61:2326 62:2211 63:1992 64:5227 65:2391 66:5128 67:2949 68:1165 69:4094 70:1402 71:685 72:3104 74:2567 75:1468 76:690 77:1989 78:3249 79:2511 80:1915 81:1627 82:1314 83:1100 84:1258 85:3096 86:617 87:1799 88:2418 89:2881 90:397 91:7203 92:1583 93:2558 94:2918 95:4159 96:1230 97:344 98:964 99:979 100:90 101:1051 102:1250 103:25156 104:3630 105:400 106:716 107:2179 108:693 109:3651 110:1995 111:2349 112:1696 113:1585 114:1419 115:1853 116:1867 117:2130 118:2299 119:1869 120:952 121:1052 122:2300 123:2164 124:1610 125:2144 128:1324 129:1269 130:775 131:2009 132:757 133:312 134:1384 135:328 136:686 137:902 138:2297 139:1172 140:733 141:1167 142:1049 143:1221 144:1208 145:340 146:1385 147:1216 148:2164 149:1256 150:760 151:1199 152:1548 153:446 154:2147 155:1252 156:1357 157:1150 158:901 159:2051 160:2034 161:1080 162:3244 163:942 164:1433 165:1308 166:600 167:1750 168:3598 169:638 170:4354 171:751 172:2042 173:2919 174:960 175:1062 176:2944 177:4377 178:2800 179:1855 180:2273 181:2589 182:3180 183:1565 184:2446 185:17634 186:4049 187:2964 188:3262 189:2702 190:9077 191:1349 192:10610 193:7864 194:6449 195:4586 196:3104 197:2269 198:6019 199:5950 200:7312 201:5291 202:10490 203:10084 204:4662 205:3102 206:3371 207:3324 208:3993 209:4624 210:4225 211:2139 212:3616 213:3211 214:1186 215:60 216:6144 217:2473 218:916 219:642 220:2095 221:928 222:974 223:1708 End of report

1 0

2021.01.07 RPKI certificate issue?
by Job Snijders 08 Jan '21

08 Jan '21

Hi, I saw https://www.ripe.net/support/service-announcements/rpki-planned-downtime-3 Are more details available? Kind regards, Job

2 1

RPKI Outage Post-Mortem
by Nathalie Trenaman 07 Jan '21

07 Jan '21

Summary: Yesterday, on 7 January 2021, an issue with our RPKI software caused an inconsistent certificate to be published from 15:29-16:20 (UTC+1). This may have resulted in outages. We strongly recommend network operators update their Relying Party software to the latest version. Details: At 15:06 (UTC+1) yesterday, we processed an outgoing transfer of IP resources to another RIR service region. This caused our system to update the corresponding RPKI certificates in our Certificate Authority (CA). Unfortunately, our RPKI software published the updated parent certificate (production CA) ahead of its child certificate (member CA). As a result, in the period immediately after the updated parent was published, the child certificate (updated later) contained resources that were no longer on the updated parent, and the child certificate over-claimed. This was resolved once the child certificate was updated. Currently we have three separate processes: * One that updates the resources in the registry in RPKI (every 15min) * One that updates the resources of the RIPE production CA (parent of all member CA) from the registry (1h, takes ~5 min) * One that updates the resources for member CAs from the registry (1h, takes ~40 min) If there is an outgoing transfer and the member CA update runs before the production CA update, the situation with over-claiming occurs. The update of the member CA needs to happen at the same time (i.e. same RRDP delta), or before the production CA resources are reduced. This does not happen the other way around (and so is not an issue with incoming resources). Some older Relying Parties had applied a strict manifest handling interpretation in their validator software. This meant that they were configured to reject all certificates in the manifest if a single entry was invalid. As a consequence, all RPKI certificates covering RIPE resources were rejected by these validators during this period. Based on our access logs, we estimate that 327 instances of Relying Party software were impacted. On Monday 11 January, we will implement a fix so that every time a RIPE NCC certificate changes, we will look at all members to see if their certificates are over-claiming and force an immediate re-issue if so. This approach does not give us a 100% bullet-proof fix to the problem, but it reduces the period of over-claiming from an hour to a couple of minutes. We will work on reducing this time to less than a minute, to further reduce the potential for inconsistency. In the longer term, we will work on implementing atomic publishing of data for this type of situation. In the meantime, we strongly recommend that network operators update their RPKI Relying Party software to the latest version: * Routinator 0.8.2 * rpki-client 6.8p1 * FORT 1.4.2 * octorpki 1.2.2 * RIPE NCC 3.2-2020.12.10.13.57 Best regards, Nathalie Trenaman Routing Security Programme Manager RIPE NCC

2 1

Second Notice: Squatting / Fraud / Identity theft by AS13259 - Delta Telesystems Ltd. (RU)
by Ronald F. Guilmette 03 Jan '21

03 Jan '21

Greetings all and Happy New Year. It is my sad duty to report to you all that since my posting of 2020-12-21 noting the several squats onto various IPv4 address blocks and multiple ASNs, little if anything has changed. Here is a link to that prior posting: https://www.ripe.net/ripe/mail/archives/routing-wg/2020-December/004212.html (Note that there was one minor typo in that posting -- I wrote "AS1065" in one place where I should have written "AS10650".) As noted in that prior posting, all of this illicit activity quite clearly traces back to AS13259 - Delta Telesystems Ltd. (RU). Several abandoned AS numbers were and are being used in an attempt to disguise that fact, but the evidence is clear that 100% of these squats are tracable back to AS13259. The only thing that appears to have changed since my original report of 2020-12-21 is that now, instead of using fradulent RADB route objects to try to frame up an apparently innocent party (Leaseweb Deutschland GmbH) the perpetrator of these squats has removed those prior fradulent RADB route objects and has simpley replaced them with a new set of fradulent RADB route objects which now attempt to shift blame instead onto a different German company, specifically the owners of AS8208, Teamware GmbH. It is easy to see past this new deception however, since all of the same old squatted blocks are still being squatted. A full listing of the affected squatted blocks is given below, along with annotations that show, for each block, the identity of the legitimate registrant organization and also the identity of the organization that is routing each squatted block. As noted in my prior report, many of these ASNs are themselves being squatted on, specifically: AS39325 - Viptelecom LLC AS41762 - PE Logvinov Vladimir Vladimirovich AS56968 - TemirLan Net Ltd AS34498 - Jilcomservice AS10650 - Extreme Internet The non-squatted ASNs that are still active & willing participants in these ongoing frauds are as follows: AS13259 - Delta Telesystems Ltd. (RU) AS9009 - M247 Ltd (UK) AS397373 - H4Y Technologies LLC (US) Given that this entire mess quite evidently originates from within the RIPE region, it would be Nice if more could be done, by RIPE and/or the RIPE community to put a stop to these ongoing squats. Regards, rfg P.S. Most of you will no doubt have heard by now about the large and ongoing SolarWinds[tm] hack/scandal, and probably also the belief, expressed by some, that this gigantic hack originated in Russia. Nobody has had the courtesy to show me the hard evidence which supports that attribution, so I personally remain entirely ambivalent about it. That hack, wherever it originated, does however provide me with the opportunity to remind all of you here of the age-old differention between abuse "on the Internet" versus abuse "of the Internet". Regardless of origin, the SolarWinds[tm] hack did not and does not in any way threaten the stability of the Internet. It thus must be properly categorized as being a kind of abuse "on the Internet"... and shame on all those whose security missteps, on the receiving end, allowed it to happen. In contrast, what I have described with respect to these squats is, I think, quite clearly abuse "of the Internet", and as such I hope that this sort of skulduggery will earn truly international and non-partisan condemnation, and suitably immediate attention from all quarters. It is not in the interests of any faction or any nation to see the Internet descend into lawless routing chaos. #------------------------------------------------------------------------ # ORG: (KZ) ORG-TNL11-RIPE "TemirLan Net Ltd" #------------------------------------------------------------------------ 91.229.148.0/22 - routed by AS56968 - TemirLan Net Ltd (KZ) #------------------------------------------------------------------------ # ORG: (RU) ORG-CC3-RIPE "Gorodskaya elektronnaya svyaz Ltd" #------------------------------------------------------------------------ 85.28.48.0/20 - routed by AS13259 - Delta Telesystems Ltd. (RU) #------------------------------------------------------------------------ # ORG: (RU) ORG-OA780-RIPE "OOO \"IT-Region\"" #------------------------------------------------------------------------ 79.173.104.0/21 - routed by AS13259 - Delta Telesystems Ltd. (RU) #------------------------------------------------------------------------ # ORG: (RU) ORG-PL249-RIPE "Prime-Service LLC" #------------------------------------------------------------------------ 128.0.80.0/20 - routed by AS34498 - Jilcomservice (RU) #------------------------------------------------------------------------ # ORG: (RU) ORG-TCUL3-RIPE "Telecommunications center UMOS, LLC" #------------------------------------------------------------------------ 85.89.104.0/21 - routed by AS13259 - Delta Telesystems Ltd. (RU) #------------------------------------------------------------------------ # ORG: (UA) ORG-FA278-RIPE "Filite Ltd" #------------------------------------------------------------------------ 62.182.160.0/21 - routed by AS39325 - Viptelecom LLC (RU) #------------------------------------------------------------------------ # ORG: (UA) ORG-TNOO1-RIPE "The national operator of wireless communication \"WiMAX-Ukraine\"" #------------------------------------------------------------------------ 89.187.8.0/21 - routed by AS41762 - PE Logvinov Vladimir Vladimirovich (UA) #------------------------------------------------------------------------ # ORG: (US) CIS-341 "CoreComm Internet Services Inc" #------------------------------------------------------------------------ 216.93.0.0/19 - unrouted #------------------------------------------------------------------------ # ORG: (US) CSXINT "CSX Intermodal" #------------------------------------------------------------------------ 205.134.96.0/19 - routed by AS10650 - Extreme Internet (US) #------------------------------------------------------------------------ # ORG: (US) HONEY-13 "Honeywell International Inc." #------------------------------------------------------------------------ 199.61.32.0/19 - 50% routed by AS9009 - M247 Ltd (UK) / 50% unrouted #------------------------------------------------------------------------ # ORG: (US) MSGM "Mortgage Sytems Group (MSG)" #------------------------------------------------------------------------ 205.148.96.0/19 - routed by AS397373 - H4Y Technologies LLC (US)

1 0

Weekly Routing Table Report
by cscora＠apnic.net 01 Jan '21

01 Jan '21

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 02 Jan, 2021 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 833633 Prefixes after maximum aggregation (per Origin AS): 320053 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 399759 Total ASes present in the Internet Routing Table: 70222 Prefixes per ASN: 11.87 Origin-only ASes present in the Internet Routing Table: 60418 Origin ASes announcing only one prefix: 25000 Transit ASes present in the Internet Routing Table: 9804 Transit-only ASes present in the Internet Routing Table: 298 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 203 Max AS path prepend of ASN (396896) 200 Prefixes from unregistered ASNs in the Routing Table: 1027 Number of instances of unregistered ASNs: 1031 Number of 32-bit ASNs allocated by the RIRs: 34573 Number of 32-bit ASNs visible in the Routing Table: 28719 Prefixes from 32-bit ASNs in the Routing Table: 132424 Number of bogon 32-bit ASNs visible in the Routing Table: 24 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 503 Number of addresses announced to Internet: 2863108480 Equivalent to 170 /8s, 167 /16s and 145 /24s Percentage of available address space announced: 77.3 Percentage of allocated address space announced: 77.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 284210 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 217099 Total APNIC prefixes after maximum aggregation: 64442 APNIC Deaggregation factor: 3.37 Prefixes being announced from the APNIC address blocks: 213119 Unique aggregates announced from the APNIC address blocks: 87656 APNIC Region origin ASes present in the Internet Routing Table: 11153 APNIC Prefixes per ASN: 19.11 APNIC Region origin ASes announcing only one prefix: 3187 APNIC Region transit ASes present in the Internet Routing Table: 1592 Average APNIC Region AS path length visible: 4.3 Max APNIC Region AS path length visible: 31 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6300 Number of APNIC addresses announced to Internet: 777987072 Equivalent to 46 /8s, 95 /16s and 36 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 241006 Total ARIN prefixes after maximum aggregation: 111573 ARIN Deaggregation factor: 2.16 Prefixes being announced from the ARIN address blocks: 241489 Unique aggregates announced from the ARIN address blocks: 115552 ARIN Region origin ASes present in the Internet Routing Table: 18699 ARIN Prefixes per ASN: 12.91 ARIN Region origin ASes announcing only one prefix: 6821 ARIN Region transit ASes present in the Internet Routing Table: 1920 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 203 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3639 Number of ARIN addresses announced to Internet: 1092739584 Equivalent to 65 /8s, 33 /16s and 226 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 237695 Total RIPE prefixes after maximum aggregation: 112156 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 233575 Unique aggregates announced from the RIPE address blocks: 137802 RIPE Region origin ASes present in the Internet Routing Table: 27612 RIPE Prefixes per ASN: 8.46 RIPE Region origin ASes announcing only one prefix: 11862 RIPE Region transit ASes present in the Internet Routing Table: 3866 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 29 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9797 Number of RIPE addresses announced to Internet: 709632896 Equivalent to 42 /8s, 76 /16s and 35 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 112044 Total LACNIC prefixes after maximum aggregation: 26303 LACNIC Deaggregation factor: 4.26 Prefixes being announced from the LACNIC address blocks: 113159 Unique aggregates announced from the LACNIC address blocks: 48017 LACNIC Region origin ASes present in the Internet Routing Table: 10634 LACNIC Prefixes per ASN: 10.64 LACNIC Region origin ASes announcing only one prefix: 2645 LACNIC Region transit ASes present in the Internet Routing Table: 1977 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 38 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8232 Number of LACNIC addresses announced to Internet: 174067968 Equivalent to 10 /8s, 96 /16s and 17 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 24760 Total AfriNIC prefixes after maximum aggregation: 4834 AfriNIC Deaggregation factor: 5.12 Prefixes being announced from the AfriNIC address blocks: 31788 Unique aggregates announced from the AfriNIC address blocks: 10313 AfriNIC Region origin ASes present in the Internet Routing Table: 1423 AfriNIC Prefixes per ASN: 22.34 AfriNIC Region origin ASes announcing only one prefix: 484 AfriNIC Region transit ASes present in the Internet Routing Table: 287 Average AfriNIC Region AS path length visible: 5.0 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 751 Number of AfriNIC addresses announced to Internet: 108255488 Equivalent to 6 /8s, 115 /16s and 217 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5681 777 659 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4914 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3562 1330 21 VIETEL-AS-AP Viettel Group, VN 7713 3234 952 519 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 2863 1896 55 VNPT-AS-VN VNPT Corp, VN 9808 2779 9044 57 CMNET-GD Guangdong Mobile Communication 4766 2477 11107 572 KIXS-AS-KR Korea Telecom, KR 9498 2296 466 233 BBIL-AP BHARTI Airtel Ltd., IN 4755 2130 441 189 TATACOMM-AS TATA Communications formerl 45090 2067 1045 63 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4761 316 708 CABLEONE, US 16509 4600 9074 2122 AMAZON-02, US 7155 4022 264 32 VIASAT-SP-BACKBONE, US 22773 3776 3016 212 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3357 1319 83 SHAW, CA 16625 3178 1665 2281 AKAMAI-AS, US 209 2525 5058 508 CENTURYLINK-US-LEGACY-QWEST, US 30036 2488 369 131 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 2336 2984 1643 FRONTIER-FRTR, US 20115 2163 2898 509 CHARTER-20115, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 47331 6274 855 3608 TTNET, TR 12479 6202 1667 141 UNI2-AS, ES 39891 3459 195 22 ALJAWWALSTC-AS, SA 20940 3351 3359 186 AKAMAI-ASN1, NL 8551 3203 379 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2874 2280 886 ROSTELECOM-AS, RU 9009 2279 227 1233 M247, GB 34984 2175 354 579 TELLCOM-AS, TR 13188 1611 100 23 TRIOLAN, UA 58224 1475 857 550 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8075 3398 584 Uninet S.A. de C.V., MX 10620 3390 526 605 Telmex Colombia S.A., CO 11830 2564 369 63 Instituto Costarricense de Electricidad 13999 1606 432 410 Mega Cable, S.A. de C.V., MX 6503 1438 311 475 Axtel, S.A.B. de C.V., MX 7303 1437 912 263 Telecom Argentina S.A., AR 28573 1379 2260 220 CLARO S.A., BR 6147 1147 379 39 Telefonica del Peru S.A.A., PE 3816 1115 537 152 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11664 1008 213 417 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1566 393 22 LINKdotNET-AS, EG 24835 1287 478 26 RAYA-AS, EG 36992 1148 1521 165 ETISALAT-MISR, EG 36903 979 511 102 MT-MPLS, MA 29571 700 68 12 ORANGE-COTE-IVOIRE, CI 6713 532 1863 34 IAM-AS, MA 37342 478 32 1 MOVITEL, MZ 36935 466 522 40 Vodafone-, EG 23889 454 232 16 MauritiusTelecom, MU 15399 440 46 16 WANANCHI-, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8075 3398 584 Uninet S.A. de C.V., MX 47331 6274 855 3608 TTNET, TR 12479 6202 1667 141 UNI2-AS, ES 7545 5681 777 659 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4914 4192 74 ERX-CERNET-BKB China Education and Rese 11492 4761 316 708 CABLEONE, US 16509 4600 9074 2122 AMAZON-02, US 7155 4022 264 32 VIASAT-SP-BACKBONE, US 22773 3776 3016 212 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3562 1330 21 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6202 6061 UNI2-AS, ES 7545 5681 5022 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4914 4840 ERX-CERNET-BKB China Education and Research Net 11492 4761 4053 CABLEONE, US 7155 4022 3990 VIASAT-SP-BACKBONE, US 22773 3776 3564 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3562 3541 VIETEL-AS-AP Viettel Group, VN 39891 3459 3437 ALJAWWALSTC-AS, SA 6327 3357 3274 SHAW, CA 20940 3351 3165 AKAMAI-ASN1, NL Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 16589 UNALLOCATED 8.20.247.0/24 23393 NUCDN, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 16589 UNALLOCATED 8.26.56.0/24 23393 NUCDN, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.133.192.0/24 Origin: 16734 UNASSIGNED Transit: 266201 RNV CORP EIRELI, BR 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 3803 RCN-AS1, US Transit: 397881 STINGERS, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:8 /9:13 /10:40 /11:101 /12:292 /13:579 /14:1175 /15:1930 /16:13472 /17:8260 /18:13699 /19:25583 /20:41046 /21:50526 /22:103584 /23:88035 /24:483983 /25:1307 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 47331 5557 6274 TTNET, TR 12479 5181 6202 UNI2-AS, ES 11492 3813 4761 CABLEONE, US 6327 3152 3357 SHAW, CA 7155 3111 4022 VIASAT-SP-BACKBONE, US 22773 2882 3776 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2801 3459 ALJAWWALSTC-AS, SA 8151 2699 8075 Uninet S.A. de C.V., MX 8551 2664 3203 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2220 2488 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1643 2:1175 3:68 4:18 5:3573 6:54 8:1495 9:1 11:1 12:1740 13:349 14:2404 15:75 16:13 17:308 18:93 20:113 23:4165 24:2366 25:3 27:2332 31:2176 32:113 34:1 35:37 36:1129 37:3565 38:2011 39:466 40:150 41:3853 42:594 43:2088 44:232 45:14656 46:3577 47:318 49:1598 50:1699 51:89 52:1133 54:219 55:765 56:6 57:57 58:1614 59:1145 60:817 61:2297 62:2196 63:2011 64:5218 65:2387 66:5123 67:2949 68:1182 69:4092 70:1398 71:685 72:3091 74:2533 75:1463 76:693 77:1977 78:3199 79:2472 80:1919 81:1629 82:1299 83:1092 84:1254 85:3087 86:621 87:1797 88:2417 89:2848 90:395 91:7204 92:1582 93:2545 94:2891 95:4158 96:1229 97:341 98:962 99:976 100:90 101:1049 102:1238 103:25088 104:3626 105:393 106:770 107:2182 108:691 109:3750 110:1989 111:2346 112:1693 113:1541 114:1405 115:1841 116:1841 117:2120 118:2216 119:1842 120:936 121:1044 122:2293 123:2153 124:1619 125:2140 128:1320 129:1267 130:776 131:2004 132:748 133:312 134:1377 135:328 136:689 137:895 138:2297 139:1169 140:735 141:1164 142:1047 143:1225 144:1212 145:342 146:1388 147:1211 148:2154 149:1254 150:758 151:1204 152:1546 153:445 154:2107 155:1247 156:1357 157:1147 158:907 159:2043 160:2060 161:1082 162:3228 163:941 164:1432 165:1313 166:601 167:1734 168:3615 169:632 170:4359 171:754 172:2029 173:2896 174:972 175:1051 176:2919 177:4445 178:2805 179:1868 180:2280 181:2585 182:3163 183:1538 184:2428 185:17632 186:4024 187:3047 188:3228 189:2656 190:9113 191:1434 192:10608 193:7850 194:6429 195:4582 196:3103 197:2257 198:6032 199:5965 200:7319 201:5272 202:10452 203:10170 204:4598 205:3088 206:3309 207:3327 208:3995 209:4615 210:4201 211:2127 212:3612 213:3206 214:1187 215:61 216:6137 217:2478 218:914 219:647 220:2093 221:933 222:980 223:1692 End of report

1 0

Weekly Routing Table Report
by cscora＠apnic.net 25 Dec '20

25 Dec '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 26 Dec, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 834627 Prefixes after maximum aggregation (per Origin AS): 319962 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 399619 Total ASes present in the Internet Routing Table: 70194 Prefixes per ASN: 11.89 Origin-only ASes present in the Internet Routing Table: 60341 Origin ASes announcing only one prefix: 24973 Transit ASes present in the Internet Routing Table: 9853 Transit-only ASes present in the Internet Routing Table: 301 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 203 Max AS path prepend of ASN (396896) 200 Prefixes from unregistered ASNs in the Routing Table: 1050 Number of instances of unregistered ASNs: 1053 Number of 32-bit ASNs allocated by the RIRs: 34527 Number of 32-bit ASNs visible in the Routing Table: 28671 Prefixes from 32-bit ASNs in the Routing Table: 132240 Number of bogon 32-bit ASNs visible in the Routing Table: 23 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 522 Number of addresses announced to Internet: 2863188352 Equivalent to 170 /8s, 168 /16s and 201 /24s Percentage of available address space announced: 77.3 Percentage of allocated address space announced: 77.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 284081 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 218461 Total APNIC prefixes after maximum aggregation: 64434 APNIC Deaggregation factor: 3.39 Prefixes being announced from the APNIC address blocks: 214540 Unique aggregates announced from the APNIC address blocks: 87588 APNIC Region origin ASes present in the Internet Routing Table: 11144 APNIC Prefixes per ASN: 19.25 APNIC Region origin ASes announcing only one prefix: 3167 APNIC Region transit ASes present in the Internet Routing Table: 1610 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 31 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6283 Number of APNIC addresses announced to Internet: 777992448 Equivalent to 46 /8s, 95 /16s and 57 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 240552 Total ARIN prefixes after maximum aggregation: 111516 ARIN Deaggregation factor: 2.16 Prefixes being announced from the ARIN address blocks: 240984 Unique aggregates announced from the ARIN address blocks: 115437 ARIN Region origin ASes present in the Internet Routing Table: 18692 ARIN Prefixes per ASN: 12.89 ARIN Region origin ASes announcing only one prefix: 6825 ARIN Region transit ASes present in the Internet Routing Table: 1918 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 203 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3631 Number of ARIN addresses announced to Internet: 1092682240 Equivalent to 65 /8s, 33 /16s and 2 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 237678 Total RIPE prefixes after maximum aggregation: 112162 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 233540 Unique aggregates announced from the RIPE address blocks: 137882 RIPE Region origin ASes present in the Internet Routing Table: 27597 RIPE Prefixes per ASN: 8.46 RIPE Region origin ASes announcing only one prefix: 11858 RIPE Region transit ASes present in the Internet Routing Table: 3885 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 38 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9778 Number of RIPE addresses announced to Internet: 709773952 Equivalent to 42 /8s, 78 /16s and 74 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 112175 Total LACNIC prefixes after maximum aggregation: 26265 LACNIC Deaggregation factor: 4.27 Prefixes being announced from the LACNIC address blocks: 113301 Unique aggregates announced from the LACNIC address blocks: 47952 LACNIC Region origin ASes present in the Internet Routing Table: 10631 LACNIC Prefixes per ASN: 10.66 LACNIC Region origin ASes announcing only one prefix: 2637 LACNIC Region transit ASes present in the Internet Routing Table: 1989 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 33 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8227 Number of LACNIC addresses announced to Internet: 173972736 Equivalent to 10 /8s, 94 /16s and 157 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 24709 Total AfriNIC prefixes after maximum aggregation: 4830 AfriNIC Deaggregation factor: 5.12 Prefixes being announced from the AfriNIC address blocks: 31740 Unique aggregates announced from the AfriNIC address blocks: 10335 AfriNIC Region origin ASes present in the Internet Routing Table: 1424 AfriNIC Prefixes per ASN: 22.29 AfriNIC Region origin ASes announcing only one prefix: 485 AfriNIC Region transit ASes present in the Internet Routing Table: 285 Average AfriNIC Region AS path length visible: 5.2 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 752 Number of AfriNIC addresses announced to Internet: 108327936 Equivalent to 6 /8s, 116 /16s and 244 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5680 777 659 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4744 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3542 1330 21 VIETEL-AS-AP Viettel Group, VN 7713 3234 952 519 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 2860 1896 55 VNPT-AS-VN VNPT Corp, VN 9808 2589 9044 57 CMNET-GD Guangdong Mobile Communication 4766 2405 11105 563 KIXS-AS-KR Korea Telecom, KR 9498 2296 466 233 BBIL-AP BHARTI Airtel Ltd., IN 4755 2133 441 189 TATACOMM-AS TATA Communications formerl 45090 2067 1045 63 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4767 316 692 CABLEONE, US 16509 4547 9071 2107 AMAZON-02, US 7155 4022 264 32 VIASAT-SP-BACKBONE, US 22773 3774 3008 211 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3357 1319 83 SHAW, CA 16625 3160 1656 2273 AKAMAI-AS, US 209 2522 5058 508 CENTURYLINK-US-LEGACY-QWEST, US 30036 2489 369 123 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 2336 2984 1643 FRONTIER-FRTR, US 20115 2163 2898 509 CHARTER-20115, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 47331 6258 852 3605 TTNET, TR 12479 6214 1667 141 UNI2-AS, ES 39891 3460 195 23 ALJAWWALSTC-AS, SA 20940 3318 3345 198 AKAMAI-ASN1, NL 8551 3209 379 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2875 2280 887 ROSTELECOM-AS, RU 9009 2238 230 1227 M247, GB 34984 2174 354 578 TELLCOM-AS, TR 13188 1611 100 23 TRIOLAN, UA 58224 1467 857 550 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8140 3400 588 Uninet S.A. de C.V., MX 10620 3389 526 598 Telmex Colombia S.A., CO 11830 2564 369 63 Instituto Costarricense de Electricidad 13999 1605 432 408 Mega Cable, S.A. de C.V., MX 6503 1438 311 475 Axtel, S.A.B. de C.V., MX 7303 1437 911 263 Telecom Argentina S.A., AR 28573 1374 2260 220 CLARO S.A., BR 6147 1147 379 39 Telefonica del Peru S.A.A., PE 3816 1115 537 152 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11664 1008 213 417 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1566 393 22 LINKdotNET-AS, EG 24835 1287 478 26 RAYA-AS, EG 36992 1162 1526 155 ETISALAT-MISR, EG 36903 970 506 106 MT-MPLS, MA 29571 707 68 12 ORANGE-COTE-IVOIRE, CI 6713 533 1863 34 IAM-AS, MA 36935 466 522 40 Vodafone-, EG 23889 454 232 16 MauritiusTelecom, MU 15399 440 46 16 WANANCHI-, KE 37342 420 32 1 MOVITEL, MZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8140 3400 588 Uninet S.A. de C.V., MX 47331 6258 852 3605 TTNET, TR 12479 6214 1667 141 UNI2-AS, ES 7545 5680 777 659 TPG-INTERNET-AP TPG Telecom Limited, AU 11492 4767 316 692 CABLEONE, US 4538 4744 4192 73 ERX-CERNET-BKB China Education and Rese 16509 4547 9071 2107 AMAZON-02, US 7155 4022 264 32 VIASAT-SP-BACKBONE, US 22773 3774 3008 211 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3542 1330 21 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6214 6073 UNI2-AS, ES 7545 5680 5021 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4744 4671 ERX-CERNET-BKB China Education and Research Net 11492 4767 4075 CABLEONE, US 7155 4022 3990 VIASAT-SP-BACKBONE, US 22773 3774 3563 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3542 3521 VIETEL-AS-AP Viettel Group, VN 39891 3460 3437 ALJAWWALSTC-AS, SA 6327 3357 3274 SHAW, CA 8551 3209 3164 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 393489 UNALLOCATED 12.7.109.0/24 7018 ATT-INTERNET4, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.133.192.0/24 Origin: 16734 UNASSIGNED Transit: 266201 RNV CORP EIRELI, BR 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 3803 RCN-AS1, US Transit: 398481 REDMERCURY, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:8 /9:13 /10:40 /11:101 /12:292 /13:579 /14:1175 /15:1931 /16:13458 /17:8257 /18:13689 /19:25574 /20:41488 /21:50540 /22:103454 /23:88035 /24:484705 /25:1288 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 47331 5541 6258 TTNET, TR 12479 5184 6214 UNI2-AS, ES 11492 3817 4767 CABLEONE, US 6327 3152 3357 SHAW, CA 7155 3111 4022 VIASAT-SP-BACKBONE, US 22773 2884 3774 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2802 3460 ALJAWWALSTC-AS, SA 8151 2765 8140 Uninet S.A. de C.V., MX 8551 2670 3209 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2221 2489 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1881 2:1167 3:38 4:18 5:3587 6:54 8:1493 9:1 11:1 12:1741 13:350 14:2405 15:75 16:13 17:308 18:93 20:113 23:4147 24:2365 25:3 27:2339 31:2174 32:112 34:1 35:35 36:1141 37:3539 38:2010 39:462 40:150 41:3849 42:880 43:2095 44:235 45:14675 46:3580 47:321 49:1605 50:1688 51:89 52:1126 54:216 55:690 56:6 57:57 58:1683 59:1146 60:817 61:2322 62:2197 63:2005 64:5220 65:2377 66:5109 67:2951 68:1172 69:4097 70:1397 71:685 72:3094 74:2537 75:1457 76:692 77:1982 78:3188 79:2472 80:1918 81:1637 82:1297 83:1094 84:1255 85:3092 86:621 87:1793 88:2418 89:2884 90:396 91:7184 92:1593 93:2555 94:2918 95:4152 96:1228 97:342 98:966 99:976 100:90 101:1054 102:1222 103:25096 104:3620 105:393 106:771 107:2184 108:690 109:3762 110:1998 111:2349 112:1664 113:1560 114:1426 115:1856 116:1864 117:2118 118:2293 119:1872 120:952 121:1052 122:2297 123:2157 124:1631 125:2138 128:1310 129:1266 130:774 131:1989 132:726 133:312 134:1391 135:326 136:687 137:884 138:2293 139:1171 140:736 141:1163 142:1049 143:1231 144:1211 145:340 146:1387 147:1209 148:2162 149:1246 150:757 151:1202 152:1608 153:445 154:2111 155:1263 156:1341 157:1150 158:903 159:2036 160:2053 161:1078 162:3220 163:934 164:1435 165:1318 166:602 167:1731 168:3621 169:632 170:4371 171:757 172:2029 173:2910 174:975 175:1061 176:2918 177:4449 178:2802 179:1878 180:2277 181:2582 182:3163 183:1518 184:2409 185:17616 186:4023 187:3051 188:3224 189:2690 190:9080 191:1423 192:10587 193:7874 194:6424 195:4570 196:3114 197:2207 198:6018 199:5948 200:7313 201:5279 202:10540 203:10180 204:4649 205:3094 206:3286 207:3320 208:3984 209:4621 210:4205 211:2105 212:3608 213:3198 214:1185 215:61 216:6132 217:2481 218:900 219:643 220:2088 221:934 222:987 223:1705 End of report

1 0

New on RIPE Labs: Moving RPKI Beyond Routing Security
by Antony Gollan 23 Dec '20

23 Dec '20

Dear colleagues, Resource Tagged Attestations, or RTAs, are a new type of RPKI object that is being proposed by authors from APNIC and NLnet Labs in the IETF. They allow any arbitrary file to be signed ‘with resources’ by one or more parties. As a part of the RTA development effort, NLnet Labs has now introduced proof-of-concept support for this in Routinator and Krill, which is interoperable with the RTA signing function in development at APNIC. Read more on RIPE Labs: https://labs.ripe.net/Members/tim_bruijnzeels/moving-rpki-beyond-routing-se… Kind regards, Antony Gollan Senior Communications Officer RIPE NCC

1 0

AS28753 - Leaseweb Deutschland GmbH -- Facilitating legacy squatting?
by Ronald F. Guilmette 21 Dec '20

21 Dec '20

In the period from 2020-12-04 until 2020-12-10 someone representing AS28753 - Leaseweb Deutschland GmbH, or someone purporting to represent that ASN/company created a set of thirteen (13) new route: entries in the security-free RADB data base: https://pastebin.com/raw/qs9yywFe It appears somewhat more than coincidental that many of these new RADB route entries refer to either(a) legacy IPv4 address blocks in the ARIN region or else (b) unassigned (bogon) IPv4 address space in the ARIN region. A listing of the relevant IPv4 cidrs along with the top-level allocation holders for each CIDR is given in the following table: https://pastebin.com/raw/rnqMXHW0 Although there is some ambiguity regarding the status of the non-US/non-ARIN blocks listed in the above table, my inspection of the relevant WHOIS records for the US/ARIN blocks indicates to me that these are all either (a) abandoned IPv4 legacy blocks or else (b) unassigned ARIN bogons. This strongly suggests that all of the IPv4 address blocks named in all of the relevant RADB rote entries may be, and likely are being squatted on at the present time. Please note however that AS28753 - Leaseweb Deutschland GmbH - is not itself doing any of the squatting. Rather, the squatting is being undertaken by the various ASNs mention in the following active routing summary: 62.182.160.0/21 AS39325 RU Viptelecom LLC 79.173.104.0/21 AS13259 RU Delta Telesystems Ltd. 85.28.48.0/20 AS13259 RU Delta Telesystems Ltd. 85.89.104.0/21 AS13259 RU Delta Telesystems Ltd. 89.187.8.0/21 AS41762 UA PE Logvinov Vladimir Vladimirovich 91.229.148.0/22 AS56968 KZ TemirLan Net Ltd 128.0.80.0/20 AS34498 RU Jilcomservice 199.61.32.0/19 AS9009 GB M247 Ltd 204.229.64.0/19 AS10650 US Extreme Internet 205.134.96.0/19 AS10650 US Extreme Internet 205.148.96.0/19 AS397373 US H4Y Technologies LLC 209.151.96.0/19 AS9009 GB M247 Ltd 216.93.0.0/19 AS9009 GB M247 Ltd Note that AS10650 (Extreme Internet) is itself a legacy abandoned ARIN ASN. It is likely also squatted. It's one and only current upstream, according to bgp.he.net, is AS13259 - Delta Telesystems Ltd. (Russia). In fact, all of the following ASNs from the above table also have AS13259, Delta Telesystems Ltd. (Russia) as their one and only upstream at the present time: AS39325 - Viptelecom LLC AS41762 - PE Logvinov Vladimir Vladimirovich AS56968 - TemirLan Net Ltd AS34498 - Jilcomservice AS1065 - Extreme Internet On this basis it would appear that the root of the problem in this case lies at AS13259, Delta Telesystems Ltd. (Russia). As a mitigation for these squats, I recommend dropping/blocking all of the IPv4 CIDRs listed above. Additionally, since AS13259 appears to be highly untrustworth at the present time. I would advise blocking all traffic to/from these blocks also: https://bgp.he.net/AS13259#_prefixes 79.173.104.0/21 82.147.68.0/24 82.147.70.0/24 82.147.71.0/24 82.147.75.0/24 85.28.48.0/20 85.89.104.0/21 91.206.16.0/23 193.107.92.0/22 2001:678:68c::/48 Regards, rfg

1 0