Hi, I looked into where RPKI unreachable IP address space is located [1] - with the motivation to reduce the size of it - and wanted to share the RIPE related numbers with you. Globally there are about 8700 /24 blocks that are RPKI unreachable. RIPE's share of the RPKI unreachable IP space is: - for IPv4: ~25% - for IPv6: ~61% What is "RPKI unreachable IP space"? IP space that is not reachable in an environment that rejects RPKI INVALID routes (performs ROV). Most such INVALIDs are likely results of ROA misconfigurations - but not all of them are. The goal is to shrink the size of unreachable IP space to ease the deployment and operations of ROV. If you are a network operator you can search the list [3] for your ASN to see if your reachability suffers from RPKI misconfigurations (data as of 2018-09-24) or you can use the RPKI validator BGP Preview functionality for up-to-date information: https://rpki-validator.ripe.net/bgp-preview Affected networks might soon (by the end of the year) loose the ability to talk to Cloudflare networks since they plan to deploy ROV. That list [3] might also be useful for operators that deployed ROV in their networks already to get an idea of what networks might cause reachability issues for them. If you are on the list but the INVALID state is expected (i.e. due to RPKI research blocks) please drop me an email. It would be nice if RIPE's RPKI world map [2] would include a graph for - unreachable IPv4 address space (in /24 blocks) - unreachable IPv6 address space (in /48 blocks) and maybe even: fraction of unreachable IP space compared to total IP space per country. kind regards, nusenu [1] https://medium.com/@nusenu/where-are-rpki-unreachable-networks-located-65c7a... [2] https://lirportal.ripe.net/certification/content/static/statistics/world-roa... [3] https://gist.githubusercontent.com/nusenu/5e63f14815f2e9d19fa31ce2b0b549e7/r... -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu