- routing-wg - mailman.ripe.net

Path validation with RPKI
by Iljitsch van Beijnum 20 Jun '19

20 Jun '19

Dear secure interdomain routing operators, I've been away from the IETF for a while, and I'm new to this mailing list, so I'm not up to date with what's been happening here. I'm not going to let that stop me :-) but apologies if I retread worn out paths. Also, I'm not sure if this work ultimately fits this wg, but I think this is the right place for an initial discussion. I'm also starting this discussion on the RIPE routing-wg list. A few weeks ago there was a significant route leak through Safe Host and China Telecom. This keeps happening. I think we can stop these route leaks with a relatively modest change to RPKI: by combining the ASes the origin trusts and the ASes the operator of an RPKI relying party server trusts, we have a list of all the ASes that may legitimately appear in the AS path as seen from this particular vantage point. I believe deployment will be relatively easy, as it works for the two ASes at both ends even if ASes in the middle don't participate. So this means a change to the ROA format, a change to the RPKI-router protocol, and of course changes to the software involved. Here is the draft: https://datatracker.ietf.org/doc/draft-van-beijnum-sidrops-pathrpki/ <https://datatracker.ietf.org/doc/draft-van-beijnum-sidrops-pathrpki/> There is path filter example code in the appendix to show that this part is easy. :-) In case you want to try this out but don't want to compile it yourself, (mostly) the same code is also running here: http://bgpexpert.com/pathrpki/ <http://bgpexpert.com/pathrpki/> Probably not too much new information for this group, but some background: http://www.muada.com/2019/06-13-lets-fix-those-bgp-route-leaks.html <http://www.muada.com/2019/06-13-lets-fix-those-bgp-route-leaks.html> Note that this is significantly different from the AS-Cones proposal. AS-Cones is a way for transit ASes to filter their peers (and maybe their customers). RPKI path validation is everyone filtering all prefixes they see, regardless of whether these prefixes come in through peering or transit. However, there is no reason the two can't be deployed side by side. I've also read the ASPA draft, and although there are some overlap between ASPA and RPKI path validation, I'm not entirely clear on the details but they seem to be very different. Iljitsch

1 1

Path validation with RPKI
by Iljitsch van Beijnum 20 Jun '19

20 Jun '19

Dear routing-wg'ers, A few weeks ago there was a significant route leak through Safe Host and China Telecom. This keeps happening. I think we can stop these route leaks with a relatively modest change to RPKI: by combining the ASes the origin trusts and the ASes the operator of an RPKI relying party server trusts, we have a list of all the ASes that may legitimately appear in the AS path as seen from this particular vantage point. I believe deployment will be relatively easy, as it works for the two ASes at both ends even if ASes in the middle don't participate. So this means a change to the ROA format, a change to the RPKI-router protocol, and of course changes to the software involved. I'm interested to hear what everyone thinks of this, and especially what the developers of implementations think. Here is the draft with the protocol modifications: https://datatracker.ietf.org/doc/draft-van-beijnum-sidrops-pathrpki/ <https://datatracker.ietf.org/doc/draft-van-beijnum-sidrops-pathrpki/> There is path filter example code in the appendix to show that this part is easy. :-) In case you want to try this out but don't want to compile it yourself, (mostly) the same code is also running here: http://bgpexpert.com/pathrpki/ <http://bgpexpert.com/pathrpki/> And if you need more background: http://www.muada.com/2019/06-13-lets-fix-those-bgp-route-leaks.html <http://www.muada.com/2019/06-13-lets-fix-those-bgp-route-leaks.html> Note that this is significantly different from the AS-Cones proposal. AS-Cones is a way for transit ASes to filter their peers (and maybe their customers). RPKI path validation is everyone filtering all prefixes they see, regardless of whether these prefixes come in through peering or transit. However, there is no reason the two can't be deployed side by side. Iljitsch

1 0

Weekly Routing Table Report
by cscora＠apnic.net 14 Jun '19

14 Jun '19

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 15 Jun, 2019 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 758444 Prefixes after maximum aggregation (per Origin AS): 291554 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 363187 Total ASes present in the Internet Routing Table: 64519 Prefixes per ASN: 11.76 Origin-only ASes present in the Internet Routing Table: 55510 Origin ASes announcing only one prefix: 23876 Transit ASes present in the Internet Routing Table: 9009 Transit-only ASes present in the Internet Routing Table: 275 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 42 Max AS path prepend of ASN ( 27978) 31 Prefixes from unregistered ASNs in the Routing Table: 30 Number of instances of unregistered ASNs: 33 Number of 32-bit ASNs allocated by the RIRs: 27377 Number of 32-bit ASNs visible in the Routing Table: 22361 Prefixes from 32-bit ASNs in the Routing Table: 100529 Number of bogon 32-bit ASNs visible in the Routing Table: 18 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 304 Number of addresses announced to Internet: 2838120576 Equivalent to 169 /8s, 42 /16s and 72 /24s Percentage of available address space announced: 76.7 Percentage of allocated address space announced: 76.7 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.3 Total number of prefixes smaller than registry allocations: 252304 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 205191 Total APNIC prefixes after maximum aggregation: 61042 APNIC Deaggregation factor: 3.36 Prefixes being announced from the APNIC address blocks: 201129 Unique aggregates announced from the APNIC address blocks: 83479 APNIC Region origin ASes present in the Internet Routing Table: 9812 APNIC Prefixes per ASN: 20.50 APNIC Region origin ASes announcing only one prefix: 2730 APNIC Region transit ASes present in the Internet Routing Table: 1468 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4816 Number of APNIC addresses announced to Internet: 770826880 Equivalent to 45 /8s, 241 /16s and 226 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 225787 Total ARIN prefixes after maximum aggregation: 105159 ARIN Deaggregation factor: 2.15 Prefixes being announced from the ARIN address blocks: 224800 Unique aggregates announced from the ARIN address blocks: 106036 ARIN Region origin ASes present in the Internet Routing Table: 18492 ARIN Prefixes per ASN: 12.16 ARIN Region origin ASes announcing only one prefix: 6846 ARIN Region transit ASes present in the Internet Routing Table: 1900 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 42 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2744 Number of ARIN addresses announced to Internet: 1067901568 Equivalent to 63 /8s, 166 /16s and 226 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 208681 Total RIPE prefixes after maximum aggregation: 98856 RIPE Deaggregation factor: 2.11 Prefixes being announced from the RIPE address blocks: 204813 Unique aggregates announced from the RIPE address blocks: 121383 RIPE Region origin ASes present in the Internet Routing Table: 26135 RIPE Prefixes per ASN: 7.84 RIPE Region origin ASes announcing only one prefix: 11587 RIPE Region transit ASes present in the Internet Routing Table: 3719 Average RIPE Region AS path length visible: 4.6 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 8181 Number of RIPE addresses announced to Internet: 719856512 Equivalent to 42 /8s, 232 /16s and 35 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 97416 Total LACNIC prefixes after maximum aggregation: 22149 LACNIC Deaggregation factor: 4.40 Prefixes being announced from the LACNIC address blocks: 98762 Unique aggregates announced from the LACNIC address blocks: 42865 LACNIC Region origin ASes present in the Internet Routing Table: 8500 LACNIC Prefixes per ASN: 11.62 LACNIC Region origin ASes announcing only one prefix: 2265 LACNIC Region transit ASes present in the Internet Routing Table: 1551 Average LACNIC Region AS path length visible: 5.4 Max LACNIC Region AS path length visible: 39 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 6053 Number of LACNIC addresses announced to Internet: 174023168 Equivalent to 10 /8s, 95 /16s and 98 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 21338 Total AfriNIC prefixes after maximum aggregation: 4328 AfriNIC Deaggregation factor: 4.93 Prefixes being announced from the AfriNIC address blocks: 28636 Unique aggregates announced from the AfriNIC address blocks: 9192 AfriNIC Region origin ASes present in the Internet Routing Table: 1288 AfriNIC Prefixes per ASN: 22.23 AfriNIC Region origin ASes announcing only one prefix: 448 AfriNIC Region transit ASes present in the Internet Routing Table: 253 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 23 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 567 Number of AfriNIC addresses announced to Internet: 105251840 Equivalent to 6 /8s, 70 /16s and 4 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 4757 549 543 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 3203 1451 30 VIETEL-AS-AP Viettel Group, VN 45899 3044 1757 114 VNPT-AS-VN VNPT Corp, VN 9808 2800 9043 62 CMNET-GD Guangdong Mobile Communication 9829 2736 1496 552 BSNL-NIB National Internet Backbone, IN 4766 2529 11119 759 KIXS-AS-KR Korea Telecom, KR 4755 2141 428 182 TATACOMM-AS TATA Communications formerl 9394 2088 4882 26 CTTNET China TieTong Telecommunications 9498 2069 427 170 BBIL-AP BHARTI Airtel Ltd., IN 23969 1780 314 16 TOT-NET TOT Public Company Limited, TH Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7155 4064 280 25 VIASAT-SP-BACKBONE - ViaSat,Inc., US 11492 3652 238 607 CABLEONE - CABLE ONE, INC., US 6327 3614 1324 89 SHAW - Shaw Communications Inc., CA 22773 3415 2974 156 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 2871 6294 1257 AMAZON-02 - Amazon.com, Inc., US 16625 2488 1359 1868 AKAMAI-AS - Akamai Technologies, Inc., 30036 2167 348 173 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 20115 2150 2760 525 CHARTER-20115 - Charter Communications, 18566 2094 405 107 MEGAPATH5-US - MegaPath Corporation, US 5650 2085 3074 1461 FRONTIER-FRTR - Frontier Communications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5436 1629 141 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3170 379 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2674 511 1928 AKAMAI-ASN1, US 12389 2247 2225 635 ROSTELECOM-AS, RU 34984 2099 346 548 TELLCOM-AS, TR 9121 1653 1692 18 TTNET, TR 13188 1604 100 47 TRIOLAN, UA 9009 1539 164 843 M247, GB 61317 1488 147 422 ASDETUK http://www.heficed.com, GB Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5999 3395 578 Uninet S.A. de C.V., MX 10620 3415 534 434 Telmex Colombia S.A., CO 11830 2704 370 56 Instituto Costarricense de Electricidad 7303 1482 1024 266 Telecom Argentina S.A., AR 28573 1456 2240 204 CLARO S.A., BR 6503 1252 441 54 Axtel, S.A.B. de C.V., MX 6147 1085 377 31 Telefonica del Peru S.A.A., PE 3816 1035 521 115 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 13999 999 514 235 Mega Cable, S.A. de C.V., MX 11172 937 128 61 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1165 393 21 LINKdotNET-AS, EG 37611 968 107 9 Afrihost, ZA 24835 882 624 21 RAYA-AS, EG 36992 859 1536 70 ETISALAT-MISR, EG 36903 827 416 126 MT-MPLS, MA 8452 671 1731 19 TE-AS TE-AS, EG 29571 516 68 11 ORANGE-COTE-IVOIRE, CI 37492 471 470 57 ORANGE-, TN 37342 414 32 1 MOVITEL, MZ 15399 404 45 11 WANANCHI-, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5999 3395 578 Uninet S.A. de C.V., MX 12479 5436 1629 141 UNI2-AS, ES 7545 4757 549 543 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4064 280 25 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 3778 203 20 ALJAWWALSTC-AS, SA 11492 3652 238 607 CABLEONE - CABLE ONE, INC., US 6327 3614 1324 89 SHAW - Shaw Communications Inc., CA 10620 3415 534 434 Telmex Colombia S.A., CO 22773 3415 2974 156 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 7552 3203 1451 30 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 5436 5295 UNI2-AS, ES 7545 4757 4214 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4064 4039 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3614 3525 SHAW - Shaw Communications Inc., CA 22773 3415 3259 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7552 3203 3173 VIETEL-AS-AP Viettel Group, VN 8551 3170 3124 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 3652 3045 CABLEONE - CABLE ONE, INC., US 10620 3415 2981 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 267804 UNALLOCATED 45.172.108.0/22 52361 ARSAT - Empresa Argentina de S 269037 UNALLOCATED 45.178.112.0/22 268224 UNKNOWN 269037 UNALLOCATED 45.178.112.0/23 268224 UNKNOWN 269037 UNALLOCATED 45.178.112.0/24 268224 UNKNOWN 269037 UNALLOCATED 45.178.113.0/24 268224 UNKNOWN 269037 UNALLOCATED 45.178.114.0/23 268224 UNKNOWN 269037 UNALLOCATED 45.178.114.0/24 268224 UNKNOWN 269037 UNALLOCATED 45.178.115.0/24 268224 UNKNOWN 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 27.126.156.0/22 55827 UNKNOWN 27.126.156.0/23 55827 UNKNOWN 27.126.158.0/23 55827 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 41.220.48.0/20 36900 -Reserved AS-, ZZ 41.242.92.0/24 37643 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:10 /9:11 /10:37 /11:100 /12:294 /13:569 /14:1129 /15:1913 /16:13268 /17:8007 /18:13967 /19:25845 /20:40353 /21:47462 /22:94847 /23:76783 /24:432913 /25:936 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4390 5436 UNI2-AS, ES 6327 3404 3614 SHAW - Shaw Communications Inc., CA 7155 3156 4064 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2859 3652 CABLEONE - CABLE ONE, INC., US 22773 2652 3415 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 2623 3170 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11830 2049 2704 Instituto Costarricense de Electricidad y Telec 18566 1989 2094 MEGAPATH5-US - MegaPath Corporation, US 30036 1918 2167 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1689 2:1033 3:6 4:21 5:3164 6:47 7:1 8:1328 9:1 11:1 12:1795 13:350 14:2047 15:37 16:6 17:255 18:74 20:52 23:2737 24:2561 25:4 27:2444 31:2011 32:98 35:36 36:866 37:3033 38:1757 39:279 40:123 41:3168 42:816 43:2052 44:149 45:8314 46:3316 47:263 49:1356 50:1105 51:331 52:1015 54:283 55:710 56:6 57:47 58:1763 59:1075 60:524 61:2188 62:1964 63:1834 64:4985 65:2197 66:4838 67:2775 68:1164 69:3546 70:1368 71:642 72:2628 74:2727 75:1293 76:557 77:1785 78:1831 79:2307 80:1799 81:1495 82:1132 83:922 84:1132 85:2279 86:555 87:1544 88:1045 89:2531 90:215 91:6588 92:1423 93:2469 94:2462 95:3304 96:950 97:343 98:959 99:774 100:86 101:1173 102:626 103:21432 104:3550 105:265 106:777 107:1758 108:694 109:3682 110:1703 111:2038 112:1532 113:1369 114:1233 115:1738 116:1754 117:1913 118:2140 119:1647 120:1050 121:1049 122:2282 123:1764 124:1497 125:2014 128:1309 129:827 130:536 131:1822 132:824 133:222 134:1098 135:245 136:582 137:776 138:2068 139:888 140:600 141:884 142:804 143:1077 144:900 145:491 146:1286 147:825 148:1689 149:1093 150:792 151:1009 152:1087 153:333 154:3883 155:916 156:1673 157:1022 158:659 159:1954 160:1600 161:939 162:2958 163:831 164:1238 165:1606 166:476 167:1412 168:3292 169:896 170:4188 171:600 172:1654 173:2235 174:1047 175:975 176:2367 177:4095 178:2549 179:1398 180:2158 181:2396 182:2716 183:1087 184:2259 185:15202 186:3642 187:2500 188:2979 189:2006 190:8212 191:1500 192:10061 193:6701 194:5467 195:4147 196:3125 197:1610 198:5931 199:5970 200:7150 201:5127 202:10465 203:10213 204:4541 205:3070 206:3230 207:3237 208:3949 209:4284 210:3931 211:2017 212:3107 213:2938 214:1112 215:55 216:5895 217:2238 218:873 219:605 220:1882 221:975 222:979 223:1376 End of report

1 0

Weekly Routing Table Report
by cscora＠apnic.net 07 Jun '19

07 Jun '19

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 08 Jun, 2019 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 757473 Prefixes after maximum aggregation (per Origin AS): 291275 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 362403 Total ASes present in the Internet Routing Table: 64457 Prefixes per ASN: 11.75 Origin-only ASes present in the Internet Routing Table: 55455 Origin ASes announcing only one prefix: 23832 Transit ASes present in the Internet Routing Table: 9002 Transit-only ASes present in the Internet Routing Table: 275 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 42 Max AS path prepend of ASN ( 27978) 31 Prefixes from unregistered ASNs in the Routing Table: 25 Number of instances of unregistered ASNs: 28 Number of 32-bit ASNs allocated by the RIRs: 27264 Number of 32-bit ASNs visible in the Routing Table: 22288 Prefixes from 32-bit ASNs in the Routing Table: 100069 Number of bogon 32-bit ASNs visible in the Routing Table: 20 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 246 Number of addresses announced to Internet: 2839509120 Equivalent to 169 /8s, 63 /16s and 120 /24s Percentage of available address space announced: 76.7 Percentage of allocated address space announced: 76.7 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.3 Total number of prefixes smaller than registry allocations: 252705 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 204836 Total APNIC prefixes after maximum aggregation: 60878 APNIC Deaggregation factor: 3.36 Prefixes being announced from the APNIC address blocks: 200984 Unique aggregates announced from the APNIC address blocks: 83016 APNIC Region origin ASes present in the Internet Routing Table: 9790 APNIC Prefixes per ASN: 20.53 APNIC Region origin ASes announcing only one prefix: 2717 APNIC Region transit ASes present in the Internet Routing Table: 1468 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4794 Number of APNIC addresses announced to Internet: 772705920 Equivalent to 46 /8s, 14 /16s and 142 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 225582 Total ARIN prefixes after maximum aggregation: 105116 ARIN Deaggregation factor: 2.15 Prefixes being announced from the ARIN address blocks: 224535 Unique aggregates announced from the ARIN address blocks: 105850 ARIN Region origin ASes present in the Internet Routing Table: 18490 ARIN Prefixes per ASN: 12.14 ARIN Region origin ASes announcing only one prefix: 6849 ARIN Region transit ASes present in the Internet Routing Table: 1898 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 42 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2734 Number of ARIN addresses announced to Internet: 1067608192 Equivalent to 63 /8s, 162 /16s and 104 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 208753 Total RIPE prefixes after maximum aggregation: 98717 RIPE Deaggregation factor: 2.11 Prefixes being announced from the RIPE address blocks: 204996 Unique aggregates announced from the RIPE address blocks: 121288 RIPE Region origin ASes present in the Internet Routing Table: 26131 RIPE Prefixes per ASN: 7.84 RIPE Region origin ASes announcing only one prefix: 11576 RIPE Region transit ASes present in the Internet Routing Table: 3724 Average RIPE Region AS path length visible: 4.6 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 8179 Number of RIPE addresses announced to Internet: 719857280 Equivalent to 42 /8s, 232 /16s and 38 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 97031 Total LACNIC prefixes after maximum aggregation: 22219 LACNIC Deaggregation factor: 4.37 Prefixes being announced from the LACNIC address blocks: 98446 Unique aggregates announced from the LACNIC address blocks: 42838 LACNIC Region origin ASes present in the Internet Routing Table: 8469 LACNIC Prefixes per ASN: 11.62 LACNIC Region origin ASes announcing only one prefix: 2249 LACNIC Region transit ASes present in the Internet Routing Table: 1540 Average LACNIC Region AS path length visible: 5.4 Max LACNIC Region AS path length visible: 39 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 6018 Number of LACNIC addresses announced to Internet: 173985792 Equivalent to 10 /8s, 94 /16s and 208 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 21245 Total AfriNIC prefixes after maximum aggregation: 4324 AfriNIC Deaggregation factor: 4.91 Prefixes being announced from the AfriNIC address blocks: 28266 Unique aggregates announced from the AfriNIC address blocks: 9196 AfriNIC Region origin ASes present in the Internet Routing Table: 1284 AfriNIC Prefixes per ASN: 22.01 AfriNIC Region origin ASes announcing only one prefix: 441 AfriNIC Region transit ASes present in the Internet Routing Table: 248 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 23 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 563 Number of AfriNIC addresses announced to Internet: 105102848 Equivalent to 6 /8s, 67 /16s and 190 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 4750 548 537 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 3164 1443 32 VIETEL-AS-AP Viettel Group, VN 45899 3036 1753 114 VNPT-AS-VN VNPT Corp, VN 9808 2833 9043 62 CMNET-GD Guangdong Mobile Communication 9829 2736 1496 552 BSNL-NIB National Internet Backbone, IN 4766 2529 11119 759 KIXS-AS-KR Korea Telecom, KR 4755 2139 428 182 TATACOMM-AS TATA Communications formerl 9394 2094 4882 26 CTTNET China TieTong Telecommunications 9498 2066 427 173 BBIL-AP BHARTI Airtel Ltd., IN 23969 1775 314 16 TOT-NET TOT Public Company Limited, TH Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7155 4064 280 25 VIASAT-SP-BACKBONE - ViaSat,Inc., US 11492 3646 238 611 CABLEONE - CABLE ONE, INC., US 6327 3611 1324 89 SHAW - Shaw Communications Inc., CA 22773 3413 2974 156 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 2856 6276 1247 AMAZON-02 - Amazon.com, Inc., US 16625 2497 1367 1875 AKAMAI-AS - Akamai Technologies, Inc., 30036 2163 347 189 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 20115 2151 2760 526 CHARTER-20115 - Charter Communications, 18566 2099 405 108 MEGAPATH5-US - MegaPath Corporation, US 5650 2085 3074 1461 FRONTIER-FRTR - Frontier Communications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5451 1629 141 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3168 379 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2668 510 1920 AKAMAI-ASN1, US 12389 2244 2225 633 ROSTELECOM-AS, RU 34984 2100 346 548 TELLCOM-AS, TR 9121 1663 1692 18 TTNET, TR 13188 1604 100 47 TRIOLAN, UA 9009 1512 161 827 M247, GB 61317 1379 137 383 ASDETUK http://www.heficed.com, GB Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5822 3373 566 Uninet S.A. de C.V., MX 10620 3418 533 440 Telmex Colombia S.A., CO 11830 2709 384 36 Instituto Costarricense de Electricidad 7303 1485 1024 256 Telecom Argentina S.A., AR 28573 1413 2240 205 CLARO S.A., BR 6503 1236 441 54 Axtel, S.A.B. de C.V., MX 3816 1101 535 145 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1084 377 31 Telefonica del Peru S.A.A., PE 13999 994 514 242 Mega Cable, S.A. de C.V., MX 11172 938 144 62 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1162 393 21 LINKdotNET-AS, EG 37611 967 107 9 Afrihost, ZA 24835 888 624 21 RAYA-AS, EG 36992 859 1536 69 ETISALAT-MISR, EG 36903 827 416 126 MT-MPLS, MA 8452 665 1731 19 TE-AS TE-AS, EG 29571 514 68 11 ORANGE-COTE-IVOIRE, CI 37492 474 470 57 ORANGE-, TN 37342 414 32 1 MOVITEL, MZ 15399 412 45 11 WANANCHI-, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5822 3373 566 Uninet S.A. de C.V., MX 12479 5451 1629 141 UNI2-AS, ES 7545 4750 548 537 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4064 280 25 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 3778 203 20 ALJAWWALSTC-AS, SA 11492 3646 238 611 CABLEONE - CABLE ONE, INC., US 6327 3611 1324 89 SHAW - Shaw Communications Inc., CA 10620 3418 533 440 Telmex Colombia S.A., CO 22773 3413 2974 156 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 8551 3168 379 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 5451 5310 UNI2-AS, ES 7545 4750 4213 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4064 4039 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3611 3522 SHAW - Shaw Communications Inc., CA 22773 3413 3257 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7552 3164 3132 VIETEL-AS-AP Viettel Group, VN 8551 3168 3122 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 3646 3035 CABLEONE - CABLE ONE, INC., US 10620 3418 2978 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 267804 UNALLOCATED 45.172.108.0/22 52361 ARSAT - Empresa Argentina de S 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65550 DOCUMENT 81.8.34.0/24 15924 BORUSANTELEKOM-AS, TR 65550 DOCUMENT 81.8.35.0/24 15924 BORUSANTELEKOM-AS, TR 130974 UNALLOCATED 103.139.78.0/24 139074 TDL-AS-AP TECHNOLOGY DIRECTION 65549 DOCUMENT 117.239.163.0/24 65544 UNKNOWN 64339 UNALLOCATED 143.0.108.0/22 18747 IFX18747 - IFX Corporation, US 64355 UNALLOCATED 156.40.196.0/24 30387 NIH-NET-NCCS - National Instit 64011 UNALLOCATED 166.133.128.0/18 20057 ATT-MOBILITY-LLC-AS20057 - AT& Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 23.136.48.0/24 54009 ASN-01-HOSTINGESSENTIALS-MI1 - Hosting Essentials, 27.100.7.0/24 56096 UNKNOWN 27.126.156.0/22 55827 UNKNOWN 27.126.156.0/23 55827 UNKNOWN 27.126.158.0/23 55827 UNKNOWN 36.255.72.0/22 13768 COGECO-PEER1 - Cogeco Peer 1, CA 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:11 /9:11 /10:37 /11:100 /12:294 /13:570 /14:1127 /15:1913 /16:13269 /17:8004 /18:13982 /19:25870 /20:40322 /21:47421 /22:94564 /23:76907 /24:432149 /25:922 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4407 5451 UNI2-AS, ES 6327 3401 3611 SHAW - Shaw Communications Inc., CA 7155 3156 4064 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2856 3646 CABLEONE - CABLE ONE, INC., US 22773 2650 3413 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 2621 3168 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11830 2053 2709 Instituto Costarricense de Electricidad y Telec 18566 1994 2099 MEGAPATH5-US - MegaPath Corporation, US 30036 1914 2163 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1692 2:1029 3:6 4:21 5:3164 6:47 7:1 8:1324 9:1 12:1803 13:346 14:2029 15:35 16:6 17:264 18:66 20:52 23:2718 24:2526 25:4 27:2444 31:1999 32:100 35:36 36:865 37:3038 38:1754 39:279 40:123 41:3190 42:819 43:2047 44:152 45:8191 46:3322 47:263 49:1365 50:1101 51:331 52:1016 54:281 55:710 56:6 57:47 58:1765 59:1071 60:516 61:2188 62:2124 63:1827 64:4992 65:2204 66:4844 67:2780 68:1164 69:3537 70:1367 71:639 72:2622 74:2733 75:1291 76:558 77:1807 78:1836 79:2311 80:1808 81:1494 82:1132 83:941 84:1146 85:2281 86:563 87:1562 88:1049 89:2656 90:215 91:6590 92:1415 93:2464 94:2456 95:3298 96:948 97:346 98:959 99:768 100:86 101:1162 102:625 103:21366 104:3536 105:262 106:778 107:1749 108:695 109:3696 110:1704 111:2044 112:1531 113:1372 114:1232 115:1738 116:1753 117:1913 118:2141 119:1645 120:1056 121:1045 122:2283 123:1750 124:1482 125:2014 128:1342 129:817 130:534 131:1807 132:829 133:222 134:1098 135:248 136:576 137:772 138:2075 139:884 140:600 141:883 142:811 143:1058 144:896 145:489 146:1282 147:825 148:1685 149:965 150:787 151:1014 152:1084 153:335 154:3493 155:917 156:1687 157:1006 158:661 159:1955 160:1587 161:939 162:2951 163:829 164:1194 165:1604 166:449 167:1409 168:3306 169:891 170:4119 171:595 172:1650 173:2230 174:1049 175:964 176:2348 177:4163 178:2540 179:1429 180:2158 181:2414 182:2709 183:1084 184:2260 185:15183 186:3651 187:2476 188:2949 189:1976 190:8208 191:1527 192:10062 193:6690 194:5460 195:4145 196:3117 197:1601 198:5932 199:5976 200:7098 201:5098 202:10423 203:10212 204:4544 205:3052 206:3242 207:3243 208:3953 209:4277 210:3926 211:2016 212:3097 213:2951 214:1107 215:55 216:5927 217:2241 218:877 219:605 220:1883 221:974 222:979 223:1370 End of report

1 0

2018-06 Discussion Phase (RIPE NCC IRR Database Non-Authoritative Route Object Clean-up)
by Marco Schmidt 05 Jun '19

05 Jun '19

Dear colleagues, A new version of RIPE Policy proposal, 2018-06, "RIPE NCC IRR Database Non-Authoritative Route Object Clean-up", is now available for discussion. The goal of the proposal is to delete an non-authoritative object stored in the RIPE IRR, if it conflicts with an RPKI ROA. The proposal has been updated following the last round of discussion and is now at version v2.0. Some of the differences from version v1.0 include: - Added reference to RFC 6811 - Clarification for Legacy Internet Resource Holders You can find the full proposal at: https://www.ripe.net/participate/policies/proposals/2018-06 As per the RIPE Policy Development Process (PDP), the purpose of this four-week Discussion Phase is to discuss the proposal and provide feedback to the proposers. At the end of the Discussion Phase, the proposers, with the agreement of the Working Group Chairs, decides how to proceed with the proposal. We encourage you to review this proposal and send your comments to <routing-wg(a)ripe.net> before 20 June 2019. Kind regards, Marco Schmidt Policy Officer RIPE NCC

11 10

Weekly Routing Table Report
by cscora＠apnic.net 31 May '19

31 May '19

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 01 Jun, 2019 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 757484 Prefixes after maximum aggregation (per Origin AS): 290744 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 361416 Total ASes present in the Internet Routing Table: 64395 Prefixes per ASN: 11.76 Origin-only ASes present in the Internet Routing Table: 55392 Origin ASes announcing only one prefix: 23824 Transit ASes present in the Internet Routing Table: 9003 Transit-only ASes present in the Internet Routing Table: 277 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 34 Max AS path prepend of ASN (206156) 26 Prefixes from unregistered ASNs in the Routing Table: 26 Number of instances of unregistered ASNs: 29 Number of 32-bit ASNs allocated by the RIRs: 27191 Number of 32-bit ASNs visible in the Routing Table: 22216 Prefixes from 32-bit ASNs in the Routing Table: 99727 Number of bogon 32-bit ASNs visible in the Routing Table: 21 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 256 Number of addresses announced to Internet: 2845014656 Equivalent to 169 /8s, 147 /16s and 122 /24s Percentage of available address space announced: 76.8 Percentage of allocated address space announced: 76.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.3 Total number of prefixes smaller than registry allocations: 253034 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 204745 Total APNIC prefixes after maximum aggregation: 60806 APNIC Deaggregation factor: 3.37 Prefixes being announced from the APNIC address blocks: 200889 Unique aggregates announced from the APNIC address blocks: 82494 APNIC Region origin ASes present in the Internet Routing Table: 9777 APNIC Prefixes per ASN: 20.55 APNIC Region origin ASes announcing only one prefix: 2710 APNIC Region transit ASes present in the Internet Routing Table: 1458 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4784 Number of APNIC addresses announced to Internet: 772744832 Equivalent to 46 /8s, 15 /16s and 38 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 225546 Total ARIN prefixes after maximum aggregation: 105128 ARIN Deaggregation factor: 2.15 Prefixes being announced from the ARIN address blocks: 224578 Unique aggregates announced from the ARIN address blocks: 105785 ARIN Region origin ASes present in the Internet Routing Table: 18488 ARIN Prefixes per ASN: 12.15 ARIN Region origin ASes announcing only one prefix: 6857 ARIN Region transit ASes present in the Internet Routing Table: 1902 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2721 Number of ARIN addresses announced to Internet: 1073736832 Equivalent to 63 /8s, 255 /16s and 236 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 208432 Total RIPE prefixes after maximum aggregation: 98589 RIPE Deaggregation factor: 2.11 Prefixes being announced from the RIPE address blocks: 204635 Unique aggregates announced from the RIPE address blocks: 120973 RIPE Region origin ASes present in the Internet Routing Table: 26115 RIPE Prefixes per ASN: 7.84 RIPE Region origin ASes announcing only one prefix: 11588 RIPE Region transit ASes present in the Internet Routing Table: 3729 Average RIPE Region AS path length visible: 4.6 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 8158 Number of RIPE addresses announced to Internet: 719362176 Equivalent to 42 /8s, 224 /16s and 152 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 97168 Total LACNIC prefixes after maximum aggregation: 21875 LACNIC Deaggregation factor: 4.44 Prefixes being announced from the LACNIC address blocks: 98593 Unique aggregates announced from the LACNIC address blocks: 42737 LACNIC Region origin ASes present in the Internet Routing Table: 8431 LACNIC Prefixes per ASN: 11.69 LACNIC Region origin ASes announcing only one prefix: 2224 LACNIC Region transit ASes present in the Internet Routing Table: 1541 Average LACNIC Region AS path length visible: 5.1 Max LACNIC Region AS path length visible: 27 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 5988 Number of LACNIC addresses announced to Internet: 173838080 Equivalent to 10 /8s, 92 /16s and 143 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 21566 Total AfriNIC prefixes after maximum aggregation: 4324 AfriNIC Deaggregation factor: 4.99 Prefixes being announced from the AfriNIC address blocks: 28533 Unique aggregates announced from the AfriNIC address blocks: 9201 AfriNIC Region origin ASes present in the Internet Routing Table: 1288 AfriNIC Prefixes per ASN: 22.15 AfriNIC Region origin ASes announcing only one prefix: 445 AfriNIC Region transit ASes present in the Internet Routing Table: 247 Average AfriNIC Region AS path length visible: 5.0 Max AfriNIC Region AS path length visible: 23 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 565 Number of AfriNIC addresses announced to Internet: 105079552 Equivalent to 6 /8s, 67 /16s and 99 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 4754 549 543 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 3164 1451 31 VIETEL-AS-AP Viettel Group, VN 45899 3029 1741 112 VNPT-AS-VN VNPT Corp, VN 9808 2830 9043 62 CMNET-GD Guangdong Mobile Communication 9829 2736 1496 552 BSNL-NIB National Internet Backbone, IN 4766 2530 11119 760 KIXS-AS-KR Korea Telecom, KR 4755 2140 428 182 TATACOMM-AS TATA Communications formerl 9394 2100 4882 26 CTTNET China TieTong Telecommunications 9498 2058 427 171 BBIL-AP BHARTI Airtel Ltd., IN 23969 1765 314 16 TOT-NET TOT Public Company Limited, TH Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7155 4064 280 25 VIASAT-SP-BACKBONE - ViaSat,Inc., US 11492 3645 238 610 CABLEONE - CABLE ONE, INC., US 6327 3618 1324 89 SHAW - Shaw Communications Inc., CA 22773 3405 2974 155 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 2811 6141 1224 AMAZON-02 - Amazon.com, Inc., US 16625 2498 1368 1877 AKAMAI-AS - Akamai Technologies, Inc., 30036 2159 347 201 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 20115 2151 2760 526 CHARTER-20115 - Charter Communications, 18566 2100 405 108 MEGAPATH5-US - MegaPath Corporation, US 5650 2086 3074 1462 FRONTIER-FRTR - Frontier Communications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5442 1629 141 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3216 378 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2658 511 1918 AKAMAI-ASN1, US 12389 2243 2225 633 ROSTELECOM-AS, RU 34984 2100 346 548 TELLCOM-AS, TR 9121 1666 1692 18 TTNET, TR 13188 1601 100 47 TRIOLAN, UA 9009 1485 157 804 M247, GB 61317 1300 136 376 ASDETUK http://www.heficed.com, GB Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5798 3369 569 Uninet S.A. de C.V., MX 10620 3438 536 403 Telmex Colombia S.A., CO 11830 2711 384 35 Instituto Costarricense de Electricidad 7303 1483 1024 255 Telecom Argentina S.A., AR 28573 1395 2239 200 CLARO S.A., BR 6503 1253 441 54 Axtel, S.A.B. de C.V., MX 6147 1105 377 30 Telefonica del Peru S.A.A., PE 3816 1097 532 141 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 13999 993 514 242 Mega Cable, S.A. de C.V., MX 11172 933 144 62 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1167 393 21 LINKdotNET-AS, EG 37611 964 107 9 Afrihost, ZA 24835 888 624 21 RAYA-AS, EG 36992 859 1536 69 ETISALAT-MISR, EG 36903 827 416 126 MT-MPLS, MA 8452 669 1731 19 TE-AS TE-AS, EG 29571 512 68 11 ORANGE-COTE-IVOIRE, CI 37492 474 470 57 ORANGE-, TN 15706 421 32 6 Sudatel, SD 37342 414 32 1 MOVITEL, MZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5798 3369 569 Uninet S.A. de C.V., MX 12479 5442 1629 141 UNI2-AS, ES 7545 4754 549 543 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4064 280 25 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 3778 203 20 ALJAWWALSTC-AS, SA 11492 3645 238 610 CABLEONE - CABLE ONE, INC., US 6327 3618 1324 89 SHAW - Shaw Communications Inc., CA 10620 3438 536 403 Telmex Colombia S.A., CO 22773 3405 2974 155 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 8551 3216 378 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 5442 5301 UNI2-AS, ES 7545 4754 4211 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4064 4039 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3618 3529 SHAW - Shaw Communications Inc., CA 22773 3405 3250 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 3216 3171 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7552 3164 3133 VIETEL-AS-AP Viettel Group, VN 11492 3645 3035 CABLEONE - CABLE ONE, INC., US 10620 3438 3035 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 267804 UNALLOCATED 45.172.108.0/22 52361 ARSAT - Empresa Argentina de S 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65550 DOCUMENT 81.8.34.0/24 15924 BORUSANTELEKOM-AS, TR 65550 DOCUMENT 81.8.35.0/24 15924 BORUSANTELEKOM-AS, TR 130974 UNALLOCATED 103.139.78.0/24 139074 TDL-AS-AP TECHNOLOGY DIRECTION 65549 DOCUMENT 117.239.163.0/24 65544 UNKNOWN 64339 UNALLOCATED 143.0.108.0/22 18747 IFX18747 - IFX Corporation, US 65551 DOCUMENT 149.165.246.0/24 19782 INDIANAGIGAPOP - Indiana Unive 64355 UNALLOCATED 156.40.196.0/24 30387 NIH-NET-NCCS - National Instit Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 23.135.144.0/24 14102 GTVR - Transvision Reseau Inc., CA 27.100.7.0/24 56096 UNKNOWN 27.126.156.0/22 55827 UNKNOWN 27.126.156.0/23 55827 UNKNOWN 27.126.158.0/23 55827 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 41.220.48.0/20 36900 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:12 /9:11 /10:37 /11:100 /12:294 /13:570 /14:1132 /15:1915 /16:13325 /17:8031 /18:13987 /19:25882 /20:40372 /21:47382 /22:94374 /23:76779 /24:432362 /25:919 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4398 5442 UNI2-AS, ES 6327 3408 3618 SHAW - Shaw Communications Inc., CA 7155 3156 4064 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2856 3645 CABLEONE - CABLE ONE, INC., US 8551 2670 3216 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2642 3405 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 11830 2055 2711 Instituto Costarricense de Electricidad y Telec 18566 1995 2100 MEGAPATH5-US - MegaPath Corporation, US 30036 1910 2159 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1699 2:1029 3:6 4:21 5:3143 6:47 7:1 8:1318 9:1 12:1801 13:345 14:2024 15:34 16:5 17:265 18:66 20:52 23:2719 24:2524 25:4 27:2452 31:2001 32:100 35:36 36:861 37:3028 38:1753 39:296 40:122 41:3262 42:834 43:2025 44:152 45:8132 46:3297 47:260 49:1366 50:1114 51:330 52:1013 54:281 55:704 56:6 57:45 58:1767 59:1063 60:513 61:2196 62:2156 63:1837 64:4983 65:2204 66:4837 67:2765 68:1163 69:3544 70:1366 71:637 72:2621 74:2740 75:1288 76:560 77:1824 78:1839 79:2419 80:1808 81:1497 82:1132 83:923 84:1136 85:2261 86:543 87:1564 88:1045 89:2653 90:219 91:6579 92:1416 93:2454 94:2463 95:3293 96:948 97:345 98:959 99:761 100:86 101:1165 102:624 103:21271 104:3550 105:259 106:778 107:1766 108:695 109:3636 110:1700 111:2046 112:1511 113:1372 114:1233 115:1715 116:1755 117:1925 118:2164 119:1627 120:1047 121:1043 122:2288 123:1745 124:1479 125:2013 128:1337 129:834 130:532 131:1818 132:809 133:222 134:1098 135:244 136:579 137:755 138:2055 139:882 140:644 141:882 142:810 143:1051 144:899 145:494 146:1272 147:839 148:1687 149:961 150:797 151:1019 152:1073 153:331 154:3398 155:917 156:1679 157:1003 158:662 159:1955 160:1603 161:940 162:2970 163:829 164:1200 165:1606 166:448 167:1412 168:3312 169:878 170:4125 171:574 172:1666 173:2230 174:1046 175:967 176:2346 177:4253 178:2541 179:1420 180:2127 181:2425 182:2699 183:1084 184:2255 185:15159 186:3684 187:2499 188:3000 189:2001 190:8227 191:1534 192:10071 193:6667 194:5437 195:4143 196:3132 197:1808 198:5941 199:5997 200:7100 201:5084 202:10450 203:10215 204:4543 205:3061 206:3243 207:3265 208:3954 209:4273 210:3931 211:2016 212:3079 213:2955 214:1116 215:55 216:5926 217:2231 218:878 219:604 220:1877 221:974 222:979 223:1371 End of report

1 0

2018-06 Can we have additional methods for validation or have the NCC not be so obstinate on doing removals
by Delacruz, Anthony B 29 May '19

29 May '19

I'm very appreciative for the efforts here to clean out the IRR. I am a major resource holder with IP's and ASN's from all the RIR and we also run an IRR. I am often frustrated that when I open a ticket with the NCC and even place an entry in whois on space I own that is clearly listed wrong in RIPE-NONAUTH IRR that it is a multi week struggle to get entries removed and they have me chase the contact that put in the entry which is often not responsive. Since not all of my space right now is easily taken care of using RPKI for this, I would very much like to suggest additional methods be available for the NCC to consider a valid request for removal. Other IRR's I work with we usually send the request from the MNT or POC that is on the account/orgid/lir listed with the RIR and in some cases I go as far as to set whois on the blocks with various messages like "please clear, IRR BAD, Hijacked, Recovered Space" and several other messages to make it understood the range has some reason we don't want an IRR entry to be showing for it. Many of the dozen other IRR are quick and a pleasure to work with but the NCC is not ever easy or prompt on the cases I have put in. This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.

4 4

Fw: [db-wg] Suggestion further validity-checking
by ripedenis＠yahoo.co.uk 28 May '19

28 May '19

Colleagues We have had a suggestion (with some support) on the DB-WG mailing list about deprecating the "holes:" attribute in ROUTE(6) objects. Perhaps the Routing WG could consider if this attribute has any value in the RIPE Database. cheersdenis co-chair DB-WG ----- Forwarded message ----- From: Nick Hilliard via db-wg <db-wg(a)ripe.net>To: Edward Shryane <eshryane(a)ripe.net>Cc: "db-wg(a)ripe.net" <db-wg(a)ripe.net>Sent: Tuesday, 28 May 2019, 13:30:30 CESTSubject: Re: [db-wg] Suggestion further validity-checking Edward Shryane via db-wg wrote on 28/05/2019 12:12: > Unfortunately, no cleanup was done when this rule was implemented, > but in recent times we try to do this. I will also contact the > maintainers of these route objects and ask them to fix the holes > attribute(s). I wonder if this key should be formally deprecated. It's used for 643 out of 302354 route: objects and 40 out of 28803 route6: objects, i.e. ~0.2% and 0.1% respectively. The complexity associated with handling it is substantial and most tools simply ignore it. Nick

2 1

RPKI Route Origin Validation - Africa
by Mark Tinka 21 May '19

21 May '19

Thanks, Job. So we hit the below issue in the first week: https://lists.uknof.org.uk/cgi-bin/mailman/private/uknof/2019-April/006470.… Also in the first week, 2 customers reported an issue accessing some IP addresses in Europe and the U.S. These turned out to be broken ROA's which took a while to fix. Finding the right person in the remote networks (one being a cloud provider) was a bit of a mission. But eventually, it got fixed. Recently, AMS-IX sent out 2 notifications for Invalid ROA's of some of our customers. It was also an incorrect ROA setup, which was fixed in 2 days, each. We are now rolling out ROV to our downstream BGP customers. I don't expect any issues as: - Most of our customers will have a NotFound state. - We will manually check each customer's setup before we turn on ROV for them. We should be done within 3 months or so. Mark. > Dear Ben and Mark, > > You are now almost 5 weeks into the deployment - can you share any > insights on issues (or lack of issues) you've faced in the last 5 weeks? > > Did you have to create exceptions for "important destinations covered by > misconfigured ROAs"? Are you aware of incidents that were prevented > because of the actions you took? Any feedback from customers or > partners? > > Kind regards, > > Job > On Tue, Apr 09, 2019 at 11:51:49AM +0000, Ben Maddison via routing-wg wrote: >/Hello all. />/In November 2018 during the ZAPF (South African Peering Forum) meeting in Cape Town, 3 major African ISP's announced that they would enable RPKI-based ROV (Route Origin Validation), including dropping Invalid routes as part of efforts to improve Internet routing security, on the 1st April, 2019. />/On the 1st of April, Workonline Communications (AS37271) enabled ROV and began dropping Invalid routes. This applies to all eBGP sessions, both IPv4 and IPv6. />/On the 5th of April, SEACOM (AS37100) enabled ROV and began dropping Invalid routes. This applies to eBGP sessions with public peers, private peers and transit providers, both for IPv4 and IPv6. eBGP sessions toward downstream customers will follow in 3 months time. />/Implementation at the third ISP has yet to be completed. We are sure they will communicate with the community when they are ready to do so. />/Please note that for the legal reasons previously discussed in various fora, neither Workonline nor SEACOM are utilising the ARIN TAL. As a result, any routes covered only by a ROA issued under the ARIN TAL will fall back to a status of Not Found. Unfortunately, this means that ARIN members will not see any improved routing security for their prefixes on our networks until this is resolved. />/We will each re-evaluate this decision if and when ARIN's policy changes. We are hopeful that this will happen sooner rather than later. />/If you interconnect with either of us and believe that you are experiencing any routing issues potentially related to this new policy, please feel free to reach out to either: />/- noc at workonline.africa <https://lists.ripe.net/mailman/listinfo/routing-wg> />/- peering at seacom.mu <https://lists.ripe.net/mailman/listinfo/routing-wg> />/Workonline Communications and SEACOM hope that this move encourages the rest of the ISP community around the world to ramp up their deployment of RPKI ROV and begin dropping Invalid routes. We appreciate the work that AT&T and others have carried out in the same vein. />/In the mean time, we are happy to answer any questions you may have about our deployments. />/Thanks, />/Mark Tinka (SEACOM) & Ben Maddison (Workonline Communications)./

1 0

RPKI Route Origin Validation - Africa
by Ben Maddison 21 May '19

21 May '19

Hello all. In November 2018 during the ZAPF (South African Peering Forum) meeting in Cape Town, 3 major African ISP's announced that they would enable RPKI-based ROV (Route Origin Validation), including dropping Invalid routes as part of efforts to improve Internet routing security, on the 1st April, 2019. On the 1st of April, Workonline Communications (AS37271) enabled ROV and began dropping Invalid routes. This applies to all eBGP sessions, both IPv4 and IPv6. On the 5th of April, SEACOM (AS37100) enabled ROV and began dropping Invalid routes. This applies to eBGP sessions with public peers, private peers and transit providers, both for IPv4 and IPv6. eBGP sessions toward downstream customers will follow in 3 months time. Implementation at the third ISP has yet to be completed. We are sure they will communicate with the community when they are ready to do so. Please note that for the legal reasons previously discussed in various fora, neither Workonline nor SEACOM are utilising the ARIN TAL. As a result, any routes covered only by a ROA issued under the ARIN TAL will fall back to a status of Not Found. Unfortunately, this means that ARIN members will not see any improved routing security for their prefixes on our networks until this is resolved. We will each re-evaluate this decision if and when ARIN's policy changes. We are hopeful that this will happen sooner rather than later. If you interconnect with either of us and believe that you are experiencing any routing issues potentially related to this new policy, please feel free to reach out to either: - noc(a)workonline.africa - peering(a)seacom.mu Workonline Communications and SEACOM hope that this move encourages the rest of the ISP community around the world to ramp up their deployment of RPKI ROV and begin dropping Invalid routes. We appreciate the work that AT&T and others have carried out in the same vein. In the mean time, we are happy to answer any questions you may have about our deployments. Thanks, Mark Tinka (SEACOM) & Ben Maddison (Workonline Communications).

2 2