- ncc-services-wg - mailman.ripe.net

New Resource Certification (RPKI) Management Interface
by Alex Band 19 Sep '12

19 Sep '12

Dear colleagues, The RIPE NCC is continuing to improve and enhance the Resource Certification (RPKI) service that was launched in 2011 in order to make our registry more robust and BGP routing more secure. As announced at RIPE 64, the main focus of our activities has been on security, resilience and operator autonomy. Most of this work has been at the back end, so users will not have noticed any visible changes in the system for quite some time. Today, I am proud to announce a major improvement to the service that can be experienced by all members: the new Resource Certification Management Interface. The standard for usability was set by the RIPE NCC RPKI Validator toolset, and the bar has been raised by this new LIR Portal interface to manage Route Origin Authorisations (ROAs). It sets a new standard in the services we offer to our members and the community, with an extreme focus on quality and user friendliness. The main driver for this has been the community wish for a high quality RPKI dataset, so operators can base reliable routing decisions on it. In order to achieve this, we have added some remarkable features: - There is a product tour to guide new users through the basic concepts of RPKI and BGP Origin Validation - The system can suggest ROAs to users, helping them to authorise legitimate BGP announcements - We offer a fine-grained, highly configurable alerting system, notifying users of BGP hijacks and configuration errors If you are a RIPE NCC member, please try out the new Resource Certification (RPKI) system and authorise all legitimate BGP announcements with your address space by creating ROAs for them. It is available at: https://certification.ripe.net (requires LIR Portal login) To use BGP Origin Validation in your routing workflow, please use the RIPE NCC RPKI Validator toolset. It is compatible with all Cisco and Juniper platforms that offer support for BGP Origin Validation. Learn more at: https://ripe.net/certification/validation Kind regards, Alex Band Product Manager RIPE NCC

1 0

Re: [ncc-services-wg] 2012-07 New Policy Proposal (RIPE NCC Services to Legacy Internet Resource Holders)
by Nick Hilliard 17 Sep '12

17 Sep '12

On 11/09/2012 13:20, Emilio Madaio wrote: > A new RIPE Policy Proposal has been made and is now available for > discussion. > > > You can find the full proposal at: > > https://www.ripe.net/ripe/policies/proposals/2012-07 Unless I'm mistaken, this is an almost verbatim copy of what Niall posted to this list on Aug 22 18:28:48. Some way down that discussion, Niall noted: > Background work on a new version of the policy proposal > has begun. It is premature for me to say more at this stage. So, given that it appears that the proposers of this policy are interested in a new version, is it appropriate for people to comment on this version? Perhaps a rep of one of the policy proposers could clarify this? thanks, Nick

8 16

RIPE NCC Begins to Allocate IPv4 Address Space From the Last /8
by Axel Pawlik 14 Sep '12

14 Sep '12

Dear colleagues, On Friday, 14 September 2012, the RIPE NCC, the Regional Internet Registry (RIR) for Europe, the Middle East and parts of Central Asia, distributed the last blocks of IPv4 address space from the available pool. This means that we are now distributing IPv4 address space to Local Internet Registries (LIRs) from the last /8 according to section 5.6 of "IPv4 Address Allocation and Assignment Policies for the RIPE NCC Service Region". This section states that an LIR may receive one /22 allocation (1,024 IPv4 addresses), even if they can justify a larger allocation. This /22 allocation will only be made to LIRs if they have already received an IPv6 allocation from an upstream LIR or the RIPE NCC. No new IPv4 Provider Independent (PI) space will be assigned. This policy can be found online at: https://www.ripe.net/ripe/docs/ripe-553 Those members with open requests for IPv4 address space will shortly receive an email regarding the status of their requests. It is now imperative that all stakeholders deploy IPv6 on their networks to ensure the continuity of their online operations and the future growth of the Internet. Regards, Axel Pawlik Managing Director RIPE NCC More Information ----------------- For more information on IPv6 and its deployment, advice from experts and where to get training, please see: http://www.ipv6actnow.org/ For more information on reaching the last /8, please see: https://www.ripe.net/internet-coordination/ipv4-exhaustion

1 0

New on RIPE Labs: Registration History for Members - A Demo
by Mirjam Kuehne 13 Sep '12

13 Sep '12

[apologies for duplicates] Dear colleagues, Please see a new article on RIPE Labs describing a way to look at registration history in RIPEstat. This is a first demo and is only available to members: https://labs.ripe.net/Members/dfk/registration-history-for-members-a-demo Please note the request for feedback at the end of the article. Kind regards, Mirjam Kuehne RIPE NCC

2 1

automated response
by Natalia Perez Salamanca 12 Sep '12

12 Sep '12

Estaré fuera de la oficina hasta el próximo día 25 de septiembre de 2012. Si tienen alguna consulta urgente pónganse en contacto con nosotros en el teléfono 917895800. Gracias Un saludo, Natalia Pérez Salamanca

1 0

List of Statistics now Available on RIPE Labs
by Mirjam Kuehne 12 Sep '12

12 Sep '12

[apologies for duplicates] Dear colleagues, You can now find various statistics provided by the RIPE NCC in one place on RIPE Labs: https://labs.ripe.net/statistics/ We'll be further improving this page and adding to it over time. If you have any comments or suggestions, please let us know. Kind regards, Mirjam Kuehne RIPE NCC

1 0

LIR association with number resources
by Nick Hilliard 11 Sep '12

11 Sep '12

Hi, The RIPE NCC maintains a list of what allocations are associated with what LIR in the following file: ftp.ripe.net:/ripe/stats/membership/alloclist.txt However, this file is limited to v4/v6 allocations only. There are no direct assignments (PI addresses), no ASNs or other number resources (e.g. ERX under contract, and so forth). Would it be possible for the NCC to examine whether they could publish what LIR is associated with what number resource, for all the number resources they handle, not just allocations? Nick

7 16

2012-07 New Policy Proposal (RIPE NCC Services to Legacy Internet Resource Holders)
by Emilio Madaio 11 Sep '12

11 Sep '12

Dear Colleagues, A new RIPE Policy Proposal has been made and is now available for discussion. You can find the full proposal at: https://www.ripe.net/ripe/policies/proposals/2012-07 We encourage you to review this proposal and send your comments to <ncc-services-wg(a)ripe.net> before 9 October 2012. Regards Emilio Madaio Policy Development Officer RIPE NCC

1 0

New on RIPE Labs: Root Server Instances in Member Networks
by Mirjam Kuehne 06 Sep '12

06 Sep '12

[apologies for duplicates] Dear colleagues, Please find a proposal on RIPE Labs how to create member instances of K-root and how to implement this during a pilot phase: https://labs.ripe.net/Members/dfk/root-servers-in-member-networks Kind regards, Mirjam Kuehne RIPE NCC

1 0

ERX transfer agreement with Internet
by Nick Hilliard 04 Sep '12

04 Sep '12

could someone point me in the direction of the InterNIC->RIPE NCC ERX transfer agreement, if this exists? Nick

3 2