Hi Gert, If it’s just origin you’re after then this may help: http://localcert.ripe.net:8088/bgp-preview This ‘BGP Preview’ page lists the announcements seen by RIS Route Collectors, does the RPKI analysis, and let’s you filter by IP or ASN as you wish. It does not do any AS path inspection. Note that this is not really a production service by the RIPE NCC at the moment, we use this server to test new releases of our 2.x RPKI Validator. But of course you could run the RPKI validator locally. Also, you may know that we are getting very close now to releasing the RPKI Validator 3.0. We are currently dealing with some minor last issue (related to rpki-rtr and BGPSec keys) but we will have an official pre-production release ready before RIPE 76 and I plan to present it during the Opensource WG. The 3.0 version has a similar BGP Preview page. If you already want to give it a spin you can find a link to the beta releases on GitHub, and please let us know if you find any issues :) https://github.com/RIPE-NCC/rpki-validator-3/wiki/RIPE-NCC-RPKI-Validator-3-... Kind regards Tim Bruijnzeels
On 1 May 2018, at 20:44, Gert Doering <gert@space.net> wrote:
Hi,
is there an online looking glass to see RPKI status for ``everything a given AS announces / transits''?
Say, I want to check my AS (AS5539) plus all downstream customers (... visible at the vantage point of said tool, of course).
I have found whois.bgpmon.net, which I can use by feeding prefix after prefix into whois and then parsing the reply, but that's a bit cumbersome for "give me all there is to know". Basically
show ip bgp reg _5539_
and then for each prefix returned, check RPKI status, flag green/red/yellow.
The RIPE LIRportal RPKI dashboard sort of does the job for all ASes that I have created ROAs for (so, if I maintain my customer ROAs, I would see them) but I cannot query an arbitrary AS, or "the whole customer cone".
(I expected RIPE Stats to have something like this in the BGP widget, but to my surprise, no...)
Gert Doering -- NetMaster -- have you enabled IPv6 on something today...?
SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279