- routing-wg - mailman.ripe.net

RPKI vulnerable?
by Hank Nussbacher 18 Feb '22

18 Feb '22

https://www.linkedin.com/posts/shulman_inter-domain-routing-connects-the-di… "We found that the current RPKI deployments are vulnerable - cyber criminals can disable RPKI in any network in the Internet. We evaluated such RPKI disabling attacks in the global Internet and found all the RPKI protected networks to be vulnerable. Often such attacks are extremely stealthy and do not trigger alerts. These attacks can be launched not only by governments, but also by cybercriminals and hackers. We are working with large network providers and registrars on mitigating the vulnerabilities in RPKI deployments. Nevertheless, until the RPKI in the global Internet is patched, we caution that the operators should use additional measures to ensure that they do not fall prey to prefix hijacks." Hmmmm. -Hank

9 12

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 18 Feb '22

18 Feb '22

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 19 Feb, 2022 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 888099 Prefixes after maximum aggregation (per Origin AS): 335036 Deaggregation factor: 2.65 Unique aggregates announced (without unneeded subnets): 427841 Total ASes present in the Internet Routing Table: 72856 Prefixes per ASN: 12.19 Origin-only ASes present in the Internet Routing Table: 62489 Origin ASes announcing only one prefix: 25791 Transit ASes present in the Internet Routing Table: 10367 Transit-only ASes present in the Internet Routing Table: 378 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 53 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 945 Number of instances of unregistered ASNs: 949 Number of 32-bit ASNs allocated by the RIRs: 38594 Number of 32-bit ASNs visible in the Routing Table: 32152 Prefixes from 32-bit ASNs in the Routing Table: 150010 Number of bogon 32-bit ASNs visible in the Routing Table: 24 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 523 Number of addresses announced to Internet: 3068725632 Equivalent to 182 /8s, 233 /16s and 9 /24s Percentage of available address space announced: 82.9 Percentage of allocated address space announced: 82.9 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 300697 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 232657 Total APNIC prefixes after maximum aggregation: 65852 APNIC Deaggregation factor: 3.53 Prefixes being announced from the APNIC address blocks: 227464 Unique aggregates announced from the APNIC address blocks: 94149 APNIC Region origin ASes present in the Internet Routing Table: 12389 APNIC Prefixes per ASN: 18.36 APNIC Region origin ASes announcing only one prefix: 3556 APNIC Region transit ASes present in the Internet Routing Table: 1715 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 7585 Number of APNIC addresses announced to Internet: 773730816 Equivalent to 46 /8s, 30 /16s and 50 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 258735 Total ARIN prefixes after maximum aggregation: 119151 ARIN Deaggregation factor: 2.17 Prefixes being announced from the ARIN address blocks: 258933 Unique aggregates announced from the ARIN address blocks: 123539 ARIN Region origin ASes present in the Internet Routing Table: 18984 ARIN Prefixes per ASN: 13.64 ARIN Region origin ASes announcing only one prefix: 6895 ARIN Region transit ASes present in the Internet Routing Table: 1960 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 32 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4356 Number of ARIN addresses announced to Internet: 1295998464 Equivalent to 77 /8s, 63 /16s and 94 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 254187 Total RIPE prefixes after maximum aggregation: 116585 RIPE Deaggregation factor: 2.18 Prefixes being announced from the RIPE address blocks: 250651 Unique aggregates announced from the RIPE address blocks: 149300 RIPE Region origin ASes present in the Internet Routing Table: 28187 RIPE Prefixes per ASN: 8.89 RIPE Region origin ASes announcing only one prefix: 12128 RIPE Region transit ASes present in the Internet Routing Table: 3981 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 32 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10661 Number of RIPE addresses announced to Internet: 713880704 Equivalent to 42 /8s, 140 /16s and 244 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 114057 Total LACNIC prefixes after maximum aggregation: 27367 LACNIC Deaggregation factor: 4.17 Prefixes being announced from the LACNIC address blocks: 114744 Unique aggregates announced from the LACNIC address blocks: 48538 LACNIC Region origin ASes present in the Internet Routing Table: 10938 LACNIC Prefixes per ASN: 10.49 LACNIC Region origin ASes announcing only one prefix: 2661 LACNIC Region transit ASes present in the Internet Routing Table: 2221 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 53 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8621 Number of LACNIC addresses announced to Internet: 176610816 Equivalent to 10 /8s, 134 /16s and 222 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 27518 Total AfriNIC prefixes after maximum aggregation: 5371 AfriNIC Deaggregation factor: 5.12 Prefixes being announced from the AfriNIC address blocks: 35784 Unique aggregates announced from the AfriNIC address blocks: 11855 AfriNIC Region origin ASes present in the Internet Routing Table: 1595 AfriNIC Prefixes per ASN: 22.44 AfriNIC Region origin ASes announcing only one prefix: 551 AfriNIC Region transit ASes present in the Internet Routing Table: 314 Average AfriNIC Region AS path length visible: 5.2 Max AfriNIC Region AS path length visible: 34 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 929 Number of AfriNIC addresses announced to Internet: 108180224 Equivalent to 6 /8s, 114 /16s and 179 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9066 8886 46 CHINAMOBILE-CN China Mobile Communicati 7545 5874 788 691 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4681 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3603 1330 19 VIETEL-AS-AP Viettel Group, VN 7713 3488 1038 51 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3434 1880 57 VNPT-AS-VN VNPT Corp, VN 4766 2557 11123 631 KIXS-AS-KR Korea Telecom, KR 9498 2379 475 238 BBIL-AP BHARTI Airtel Ltd., IN 45090 2170 1438 79 TENCENT-NET-AP Shenzhen Tencent Compute 4755 2113 429 198 TATACOMM-AS TATA Communications formerl Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 6277 10186 2660 AMAZON-02, US 11492 4437 294 747 CABLEONE, US 22773 3957 3028 367 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3899 264 31 VIASAT-SP-BACKBONE, US 16625 3650 1883 2566 AKAMAI-AS, US 6327 3382 1318 62 SHAW, CA 749 2887 50780 2143 DNIC-AS-00749, US 30036 2617 375 123 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2520 4962 428 CENTURYLINK-US-LEGACY-QWEST, US 20115 2255 3037 502 CHARTER-20115, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6805 1731 150 UNI2-AS, ES 9121 6754 1692 17 TTNET, TR 8551 4014 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 3891 3347 207 AKAMAI-ASN1, NL 39891 3274 188 25 ALJAWWALSTC-AS, SA 12389 2962 2290 910 ROSTELECOM-AS, RU 9009 2464 249 1282 M247, GB 34984 2240 359 605 TELLCOM-AS, TR 47331 1957 313 1494 TTNET, TR 58224 1791 929 579 TCI, IR Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10310 3415 566 Uninet S.A. de C.V., MX 10620 3467 519 705 Telmex Colombia S.A., CO 11830 2457 369 62 Instituto Costarricense de Electricidad 13999 1668 285 474 Mega Cable, S.A. de C.V., MX 6503 1442 354 524 Axtel, S.A.B. de C.V., MX 28573 1397 2330 246 CLARO S.A., BR 3816 1251 660 146 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 26615 1152 2351 140 TIM SA, BR 6147 1091 369 21 Telefonica del Peru S.A.A., PE 11664 999 191 448 Techtel LMDS Comunicaciones Interactiva Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1589 393 21 LINKdotNET-AS, EG 24835 1546 523 32 RAYA-AS, EG 36992 1299 1518 262 ETISALAT-MISR, EG 36903 1199 545 114 MT-MPLS, MA 29571 896 63 58 ORANGE-COTE-IVOIRE, CI 36935 734 521 39 Vodafone-, EG 6713 612 1863 34 IAM-AS, MA 15399 519 50 33 WANANCHI-, KE 37342 468 32 1 MOVITEL, MZ 23889 422 232 16 MauritiusTelecom, MU Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10310 3415 566 Uninet S.A. de C.V., MX 9808 9066 8886 46 CHINAMOBILE-CN China Mobile Communicati 12479 6805 1731 150 UNI2-AS, ES 9121 6754 1692 17 TTNET, TR 16509 6277 10186 2660 AMAZON-02, US 7545 5874 788 691 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4681 4192 74 ERX-CERNET-BKB China Education and Rese 11492 4437 294 747 CABLEONE, US 8551 4014 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 22773 3957 3028 367 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9066 9020 CHINAMOBILE-CN China Mobile Communications Grou 9121 6754 6737 TTNET, TR 12479 6805 6655 UNI2-AS, ES 7545 5874 5183 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4681 4607 ERX-CERNET-BKB China Education and Research Net 8551 4014 3975 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7155 3899 3868 VIASAT-SP-BACKBONE, US 11492 4437 3690 CABLEONE, US 20940 3891 3684 AKAMAI-ASN1, NL 16509 6277 3617 AMAZON-02, US Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 46990 UNALLOCATED 8.5.242.0/23 3356 LEVEL3, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 395056 UNALLOCATED 8.45.133.0/24 3356 LEVEL3, US 32306 UNALLOCATED 8.46.80.0/24 33652 CMCS, US 17033 UNALLOCATED 8.48.225.0/24 3356 LEVEL3, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.252.160.0/24 Origin: 398968 GROUP-IID-01, US 23.252.160.0/24 Transit: 174 COGENT-174, US 23.252.161.0/24 Origin: 398968 GROUP-IID-01, US 23.252.161.0/24 Transit: 174 COGENT-174, US 23.252.163.0/24 Origin: 398968 GROUP-IID-01, US 23.252.163.0/24 Transit: 174 COGENT-174, US 23.252.164.0/24 Origin: 398968 GROUP-IID-01, US 23.252.164.0/24 Transit: 174 COGENT-174, US Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:40 /11:102 /12:305 /13:591 /14:1205 /15:2030 /16:13580 /17:8357 /18:13898 /19:25191 /20:43092 /21:52309 /22:108398 /23:95274 /24:522901 /25:797 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 9121 5913 6754 TTNET, TR 12479 5774 6805 UNI2-AS, ES 8151 3976 10310 Uninet S.A. de C.V., MX 8551 3479 4014 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 3357 4437 CABLEONE, US 6327 3194 3382 SHAW, CA 7155 2989 3899 VIASAT-SP-BACKBONE, US 22773 2950 3957 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2810 3274 ALJAWWALSTC-AS, SA 30036 2272 2617 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1667 2:992 3:153 4:7 5:3793 6:103 7:5 8:1559 9:1 11:172 12:1718 13:415 14:2378 15:166 16:43 17:373 18:140 20:167 21:4 22:188 23:5492 24:2302 25:6 27:2608 29:19 31:2432 32:96 34:1 35:60 36:1728 37:3945 38:2567 39:687 40:149 41:3914 42:765 43:2094 44:292 45:16001 46:3896 47:336 49:1643 50:1916 51:107 52:1367 53:1 54:294 55:768 56:8 57:55 58:1765 59:1181 60:958 61:2274 62:2450 63:1941 64:5506 65:2307 66:4862 67:2939 68:1181 69:4170 70:1343 71:668 72:3064 74:2619 75:1516 76:717 77:2125 78:3854 79:3106 80:1969 81:1667 82:1459 83:1202 84:1340 85:3627 86:717 87:1945 88:2649 89:3233 90:510 91:7545 92:1890 93:2612 94:3264 95:4485 96:1308 97:346 98:994 99:859 100:75 101:1030 102:1965 103:28305 104:4162 105:464 106:862 107:2460 108:772 109:4197 110:2056 111:3241 112:1978 113:1499 114:1502 115:1950 116:1910 117:2511 118:2232 119:1830 120:1666 121:1038 122:2552 123:2112 124:1611 125:2111 128:1289 129:1181 130:923 131:2084 132:755 133:370 134:1925 135:283 136:857 137:863 138:2449 139:1222 140:888 141:1366 142:1256 143:1451 144:1229 145:342 146:1775 147:1471 148:2192 149:1699 150:860 151:1076 152:1827 153:448 154:3520 155:1356 156:1878 157:1229 158:1015 159:2047 160:2396 161:1302 162:3451 163:1226 164:1660 165:1569 166:638 167:1694 168:3718 169:682 170:4365 171:826 172:3018 173:3068 174:1021 175:1115 176:3541 177:4545 178:3039 179:1970 180:2278 181:2912 182:3235 183:1897 184:2387 185:19339 186:4302 187:3556 188:3849 189:3015 190:8828 191:1309 192:11052 193:8526 194:6923 195:4991 196:2922 197:2340 198:6008 199:5993 200:7512 201:5656 202:10429 203:9977 204:4558 205:3373 206:3793 207:3401 208:4011 209:4621 210:4241 211:2454 212:3950 213:3384 214:1156 215:64 216:6385 217:2641 218:1247 219:599 220:1950 221:987 222:859 223:2170 End of report

1 0

RFO for RIPE NCC RPKI outage 16 February 2022
by Ties de Kock 17 Feb '22

17 Feb '22

Dear colleagues, This afternoon, between 13:00 UTC and 14:10 UTC rrdp.ripe.net was unavailable. During this period, a significant fraction of relying party instances attempting to fall back to rsync://rpki.ripe.net could not retrieve objects due to capacity constraints. At approximately 13:00 UTC, the RPKI team attempted to move the DNS records for rrdp.ripe.net from out of the ripe.net zone file into a separate include file. We did this change to prepare for implementing an automated failover between the CDNs. This resulted in an outage in the RRDP service, which was caused by an issue in the ripe.net zone file in the DNS zone. The file contains several $ORIGIN directives, but they are not reset properly when a block ends. The consequence is that later relative names in the zone file accidentally get the incorrect origin applied to them, and it is easy to miss this if the $ORIGIN directive appears much earlier in the file. To prevent such DNS issues in the future, all the blocks will be moved out of the main zone file into separate include files, because $ORIGIN directives in them do not persist beyond the end of the file. Also, earlier today, we hit an issue that our monitoring was broken due to a change in the prometheus configuration file. This reduced our visibility into the outage and meant no alerts were sent until this recovered. A third contributing factor was that a secondary monitoring system monitoring the RPKI prometheus infrastructure did not alert due to the web interface returning an HTTP 200 despite the broken configuration. A final factor was that the capacity of rsync://rpki.ripe.net is limited. Only part of the relying party instances that attempted to fall back could update from rsync. This prevented relying party instances from retrieving new objects. Full timeline: * 07:04 UTC: broken alert configuration committed * 08:46 UTC: broken alert configuration applied, breaking monitoring. * 13:02 UTC: DNS change (effectively removing rrdp.ripe.net from zone) applied * 13:44 UTC: alert configuration reverted * 14:10 UTC: DNS configuration recovered * 14:25 UTC: rsync connection rate back at baseline level During the period where rrdp.ripe.net was not available, many relying party instances started falling back to rsync. On partial data available, we observed a median rsync connection duration of 300 seconds, and 99th percentile of 1660 seconds, with ~55% of rsync connections disconnecting with an error code. Based on this preliminary data we conclude that this is indicative of underlying IO limitation in our NFS setup. We will further investigate this. During the period of outage, our rsync servers returned 5043 “max connection reached” errors to 2307 unique IP addresses. We have applied one mitigation (linting of alert configuration). We are also working on improving our external monitoring without a dependency on on-premise infrastructure. Kind regards, Ties

5 4

Re: [routing-wg] RFO for RIPE NCC RPKI outage 16 February 2022
by Job Snijders 16 Feb '22

16 Feb '22

On Wed, 16 Feb 2022 at 19:49, Rob Austein <sra(a)hactrn.net> wrote: > On Wed, 16 Feb 2022 13:10:27 -0500, Job Snijders wrote: > > On Wed, 16 Feb 2022 at 19:07, Randy Bush <randy(a)psg.com> wrote: > > > > sra commented to me that, an rp doing protocol fall-over from rrdp to > > rsync, or vice versa, has to do the full download as the data structure > > is so different. i.e. load spike > > > > Perhaps it doesn’t need to be a full load: “rsync ―compare-dest” > > (against a previously downloaded and validated set of signed > > objects) offers a path towards optimising the protocol fall-over. > > Even assuming the RRDP client stores and believes the rsync URIs in > the RRDP data stream, and further assuming that the client is clever > enough to write out its RRDP-derived database into a directory tree > which exactly matches an rsync filesystem layout before failing over, The OpenBSD RPKI validator does the above, while maintaining robust cryptographic integrity (in version 7.6 and higher). I hope other validators take inspiration from this, similar to how we (OpenBSD) took inspiration from the Dragon Labs implementation. Your work lives on and on, hat tip to you Rob! :-) RRDP doesn't convey things like file modification dates that rsync > needs to perform an efficient incremental transfer, so the first rsync > pass is still going to be expensive. > > Not obvious to me that there's any good way to optimize this. YMMV. > Ties once pointed me at the GPL rsync “-c” (checksum) option, which makes transfers more focussed on content rather than filesystem attributes. From my (openrsync) this is still work to be done. I see a path :-) Kind regards, Job

1 0

rsync://rpki.ripe.net rsyncd limits set too low?
by Job Snijders 16 Feb '22

16 Feb '22

Hi all, I noticed the RIPE NCC RRDP service (https://rrdp.ripe.net/) became unreachable at 2022-02-16 13:34:10 UTC+0 (and still is down). This RRDP outage event should not pose an issue for most RPKI validators, because most RPKI cache implementations (which follow best practises) will attempt to try to synchronize via RSYNC, in case RRDP is unavailable. However, it seems RIPE NCC adjusted the default rsyncd settings and lowered the concurrent connection count from 200 (which already is too low for RPKI Repository Servers) to 150? $ rsync --no-motd -rt rsync://rpki.ripe.net/repository/ @ERROR: max connections (150) reached -- try again later rsync error: error starting client-server protocol (code 5) at main.c(1666) [Receiver=3.1.2] I'm not familiar with the RIPE RPKI RSYNC service architecture, so the above error could be misleading: perhaps there is a loadbalancer distributing TCP sessions across multiple backends, each backend configured to serve up to 150 clients? Or perhaps there is a single rsyncd instance (in which case 150 definitely is too low). Is the RIPE NCC RPKI RSYNC service underprovisioned? If yes, why? Kind regards, Job

2 3

Open-sourcing of the RIPE NCC’s RPKI core software
by Bart Bakker 16 Feb '22

16 Feb '22

Dear colleagues, We are pleased to announce that we have published the source code used by the RIPE NCC for the RPKI back-end (the RPKI core) under the 3-Clause BSD licence on Github: https://github.com/RIPE-NCC/rpki-core <https://github.com/RIPE-NCC/rpki-core> The RPKI core is the RIPE NCC's software for creating and maintaining RPKI objects based on the registry's current status and publishing these in the repositories. The RIPE NCC hosts the authoritative repository internally. We use the repository on Github to publish the source code externally. The first commit is identical to the source code in the RIPE NCC's internal repository at the time of that commit. The changes between releases are squashed and published to this repository on deployment, and the `main` branch reflects the code used by the production CA. We encountered several challenges while preparing this project for an open-source release. The main challenges were that the system uses proprietary elements that were part of the revision history and cannot be made public. Furthermore, it was not possible to review all historic commits. We plan to present our challenges while open-sourcing this project at RIPE 84. If you have any questions about this change, please contact the RIPE NCC's RPKI team at rpki(a)ripe.net <mailto:rpki@ripe.net>. Kind Regards, Bart Bakker Senior Software Engineer RIPE NCC

6 6

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 11 Feb '22

11 Feb '22

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 12 Feb, 2022 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 888216 Prefixes after maximum aggregation (per Origin AS): 334710 Deaggregation factor: 2.65 Unique aggregates announced (without unneeded subnets): 427455 Total ASes present in the Internet Routing Table: 72833 Prefixes per ASN: 12.20 Origin-only ASes present in the Internet Routing Table: 62489 Origin ASes announcing only one prefix: 25802 Transit ASes present in the Internet Routing Table: 10344 Transit-only ASes present in the Internet Routing Table: 368 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 53 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 962 Number of instances of unregistered ASNs: 965 Number of 32-bit ASNs allocated by the RIRs: 38545 Number of 32-bit ASNs visible in the Routing Table: 32109 Prefixes from 32-bit ASNs in the Routing Table: 149645 Number of bogon 32-bit ASNs visible in the Routing Table: 22 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 562 Number of addresses announced to Internet: 3068928512 Equivalent to 182 /8s, 236 /16s and 34 /24s Percentage of available address space announced: 82.9 Percentage of allocated address space announced: 82.9 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 300423 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 233450 Total APNIC prefixes after maximum aggregation: 65864 APNIC Deaggregation factor: 3.54 Prefixes being announced from the APNIC address blocks: 228289 Unique aggregates announced from the APNIC address blocks: 94179 APNIC Region origin ASes present in the Internet Routing Table: 12370 APNIC Prefixes per ASN: 18.46 APNIC Region origin ASes announcing only one prefix: 3541 APNIC Region transit ASes present in the Internet Routing Table: 1714 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 7566 Number of APNIC addresses announced to Internet: 774475904 Equivalent to 46 /8s, 41 /16s and 144 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 258538 Total ARIN prefixes after maximum aggregation: 119014 ARIN Deaggregation factor: 2.17 Prefixes being announced from the ARIN address blocks: 258644 Unique aggregates announced from the ARIN address blocks: 123403 ARIN Region origin ASes present in the Internet Routing Table: 18983 ARIN Prefixes per ASN: 13.63 ARIN Region origin ASes announcing only one prefix: 6899 ARIN Region transit ASes present in the Internet Routing Table: 1960 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 35 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4342 Number of ARIN addresses announced to Internet: 1295964160 Equivalent to 77 /8s, 62 /16s and 216 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 253719 Total RIPE prefixes after maximum aggregation: 116382 RIPE Deaggregation factor: 2.18 Prefixes being announced from the RIPE address blocks: 250101 Unique aggregates announced from the RIPE address blocks: 148984 RIPE Region origin ASes present in the Internet Routing Table: 28185 RIPE Prefixes per ASN: 8.87 RIPE Region origin ASes announcing only one prefix: 12134 RIPE Region transit ASes present in the Internet Routing Table: 3977 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 32 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10644 Number of RIPE addresses announced to Internet: 713448576 Equivalent to 42 /8s, 134 /16s and 92 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 113955 Total LACNIC prefixes after maximum aggregation: 27367 LACNIC Deaggregation factor: 4.16 Prefixes being announced from the LACNIC address blocks: 114689 Unique aggregates announced from the LACNIC address blocks: 48536 LACNIC Region origin ASes present in the Internet Routing Table: 10944 LACNIC Prefixes per ASN: 10.48 LACNIC Region origin ASes announcing only one prefix: 2676 LACNIC Region transit ASes present in the Internet Routing Table: 2210 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 53 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8630 Number of LACNIC addresses announced to Internet: 176510208 Equivalent to 10 /8s, 133 /16s and 85 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 27592 Total AfriNIC prefixes after maximum aggregation: 5367 AfriNIC Deaggregation factor: 5.14 Prefixes being announced from the AfriNIC address blocks: 35931 Unique aggregates announced from the AfriNIC address blocks: 11875 AfriNIC Region origin ASes present in the Internet Routing Table: 1593 AfriNIC Prefixes per ASN: 22.56 AfriNIC Region origin ASes announcing only one prefix: 552 AfriNIC Region transit ASes present in the Internet Routing Table: 312 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 34 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 927 Number of AfriNIC addresses announced to Internet: 108164608 Equivalent to 6 /8s, 114 /16s and 118 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9059 8886 46 CHINAMOBILE-CN China Mobile Communicati 7545 5867 788 691 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4681 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3596 1330 20 VIETEL-AS-AP Viettel Group, VN 7713 3484 1038 51 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3435 1880 57 VNPT-AS-VN VNPT Corp, VN 4766 2557 11123 631 KIXS-AS-KR Korea Telecom, KR 9498 2317 475 235 BBIL-AP BHARTI Airtel Ltd., IN 45090 2170 1438 79 TENCENT-NET-AP Shenzhen Tencent Compute 4755 2114 429 198 TATACOMM-AS TATA Communications formerl Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 6241 10151 2680 AMAZON-02, US 11492 4514 299 785 CABLEONE, US 22773 3963 3028 367 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3902 264 30 VIASAT-SP-BACKBONE, US 16625 3650 1883 2564 AKAMAI-AS, US 6327 3376 1318 63 SHAW, CA 749 2887 50780 2143 DNIC-AS-00749, US 30036 2608 374 150 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2519 4962 428 CENTURYLINK-US-LEGACY-QWEST, US 20115 2253 3036 500 CHARTER-20115, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6801 1715 152 UNI2-AS, ES 9121 6745 1692 17 TTNET, TR 8551 4004 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 3887 3347 207 AKAMAI-ASN1, NL 39891 3274 188 25 ALJAWWALSTC-AS, SA 12389 2961 2274 910 ROSTELECOM-AS, RU 9009 2469 250 1285 M247, GB 34984 2225 358 604 TELLCOM-AS, TR 47331 1953 312 1490 TTNET, TR 58224 1792 929 580 TCI, IR Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10268 3415 566 Uninet S.A. de C.V., MX 10620 3458 519 719 Telmex Colombia S.A., CO 11830 2456 369 62 Instituto Costarricense de Electricidad 13999 1666 284 474 Mega Cable, S.A. de C.V., MX 6503 1441 354 524 Axtel, S.A.B. de C.V., MX 28573 1400 2330 246 CLARO S.A., BR 3816 1246 651 148 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 26615 1149 2351 140 TIM SA, BR 6147 1096 369 21 Telefonica del Peru S.A.A., PE 11664 1001 191 447 Techtel LMDS Comunicaciones Interactiva Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1607 393 21 LINKdotNET-AS, EG 24835 1546 515 32 RAYA-AS, EG 36992 1299 1518 262 ETISALAT-MISR, EG 36903 1195 543 114 MT-MPLS, MA 29571 895 63 57 ORANGE-COTE-IVOIRE, CI 36935 735 521 39 Vodafone-, EG 6713 612 1863 34 IAM-AS, MA 15399 519 50 33 WANANCHI-, KE 37342 468 32 1 MOVITEL, MZ 23889 422 232 16 MauritiusTelecom, MU Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10268 3415 566 Uninet S.A. de C.V., MX 9808 9059 8886 46 CHINAMOBILE-CN China Mobile Communicati 12479 6801 1715 152 UNI2-AS, ES 9121 6745 1692 17 TTNET, TR 16509 6241 10151 2680 AMAZON-02, US 7545 5867 788 691 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4681 4192 74 ERX-CERNET-BKB China Education and Rese 11492 4514 299 785 CABLEONE, US 8551 4004 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 22773 3963 3028 367 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9059 9013 CHINAMOBILE-CN China Mobile Communications Grou 9121 6745 6728 TTNET, TR 12479 6801 6649 UNI2-AS, ES 7545 5867 5176 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4681 4607 ERX-CERNET-BKB China Education and Research Net 8551 4004 3965 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7155 3902 3872 VIASAT-SP-BACKBONE, US 11492 4514 3729 CABLEONE, US 20940 3887 3680 AKAMAI-ASN1, NL 22773 3963 3596 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 46990 UNALLOCATED 8.5.242.0/23 3356 LEVEL3, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 395056 UNALLOCATED 8.45.133.0/24 3356 LEVEL3, US 32306 UNALLOCATED 8.46.80.0/24 33652 CMCS, US 17033 UNALLOCATED 8.48.225.0/24 3356 LEVEL3, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.252.160.0/24 Origin: 398968 GROUP-IID-01, US 23.252.160.0/24 Transit: 174 COGENT-174, US 23.252.161.0/24 Origin: 398968 GROUP-IID-01, US 23.252.161.0/24 Transit: 174 COGENT-174, US 23.252.163.0/24 Origin: 398968 GROUP-IID-01, US 23.252.163.0/24 Transit: 174 COGENT-174, US 23.252.164.0/24 Origin: 398968 GROUP-IID-01, US 23.252.164.0/24 Transit: 174 COGENT-174, US Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:40 /11:102 /12:305 /13:590 /14:1204 /15:2034 /16:13577 /17:8355 /18:13897 /19:25165 /20:43382 /21:52167 /22:108288 /23:95228 /24:523062 /25:791 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 9121 5908 6745 TTNET, TR 12479 5765 6801 UNI2-AS, ES 8151 3943 10268 Uninet S.A. de C.V., MX 8551 3469 4004 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 3436 4514 CABLEONE, US 6327 3187 3376 SHAW, CA 7155 2992 3902 VIASAT-SP-BACKBONE, US 22773 2956 3963 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2810 3274 ALJAWWALSTC-AS, SA 30036 2263 2608 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1924 2:996 3:153 4:7 5:3744 6:103 7:5 8:1559 9:1 11:172 12:1720 13:415 14:2386 15:160 16:39 17:368 18:137 20:167 21:4 22:188 23:5486 24:2337 25:6 27:2585 29:19 31:2414 32:98 34:1 35:58 36:1734 37:3947 38:2518 39:681 40:149 41:3924 42:1058 43:2091 44:288 45:15960 46:3885 47:303 49:1639 50:1913 51:107 52:1361 53:1 54:293 55:755 56:8 57:55 58:1764 59:1165 60:959 61:2266 62:2442 63:1938 64:5499 65:2307 66:4901 67:2932 68:1177 69:4165 70:1347 71:672 72:3056 74:2630 75:1515 76:717 77:2120 78:3810 79:3099 80:1951 81:1663 82:1457 83:1194 84:1336 85:3625 86:714 87:1952 88:2621 89:3190 90:506 91:7533 92:1886 93:2595 94:3262 95:4488 96:1309 97:345 98:988 99:862 100:75 101:1032 102:1960 103:28252 104:4137 105:463 106:812 107:2459 108:768 109:4182 110:2058 111:3258 112:1965 113:1531 114:1535 115:1955 116:1896 117:2496 118:2328 119:1827 120:1667 121:1031 122:2543 123:2110 124:1611 125:2090 128:1348 129:1201 130:926 131:2084 132:760 133:370 134:1925 135:287 136:860 137:861 138:2436 139:1221 140:883 141:1354 142:1255 143:1443 144:1230 145:344 146:1770 147:1471 148:2218 149:1686 150:857 151:1078 152:1825 153:448 154:3591 155:1340 156:1878 157:1221 158:1012 159:2044 160:2402 161:1301 162:3447 163:1217 164:1662 165:1573 166:633 167:1692 168:3703 169:682 170:4335 171:824 172:3002 173:3061 174:1024 175:1128 176:3519 177:4603 178:3031 179:1994 180:2286 181:2928 182:3243 183:1920 184:2391 185:19285 186:4293 187:3573 188:3809 189:3020 190:8841 191:1316 192:11033 193:8516 194:6917 195:4983 196:2923 197:2359 198:5997 199:6008 200:7507 201:5660 202:10402 203:9993 204:4541 205:3357 206:3852 207:3403 208:4009 209:4631 210:4235 211:2454 212:3942 213:3378 214:1158 215:64 216:6382 217:2652 218:1247 219:600 220:1955 221:988 222:857 223:2173 End of report

1 0

Re: [routing-wg] Open-sourcing of the RIPE NCC’s RPKI core software
by Cynthia Revström 09 Feb '22

09 Feb '22

> Am I right in assuming that - going forward - commits won't be squashed > (more than needed)? I imagine it'll be educational for the community to > be able to follow the train of thought and storyline of future > developments. I think this would be good, unless you really need to for some reason, try to avoid squashing future commits. P.S. I just subscribed to the list so I can't easily reply normally, but imagine this is a reply to: "Open-sourcing of the RIPE NCC’s RPKI core software" https://www.ripe.net/ripe/mail/archives/routing-wg/2022-February/004510.html -Cynthia

1 0

Decommissioning public experimental rsync environment (rpki2.ripe.net)
by Ties de Kock 07 Feb '22

07 Feb '22

Dear colleagues, Over the last months, we ran a public experimental rsync environment on rsync://rpki2.ripe.net [0]. This environment uses an internal RRDP publication server as a source of truth and writes snapshots of that state to disk. Rsync then served files from the local filesystem instead of NFS. We observed improved performance and scalability compared to our NFS based rsync setup and will consider this setup when revisiting our rsync infrastructure. We have concluded this experiment and will decommission this environment. Kind regards, Ties de Kock [0]: https://www.ripe.net/ripe/mail/archives/routing-wg/2021-May/004345.html

1 0

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 04 Feb '22

04 Feb '22

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 05 Feb, 2022 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 887718 Prefixes after maximum aggregation (per Origin AS): 334257 Deaggregation factor: 2.66 Unique aggregates announced (without unneeded subnets): 427201 Total ASes present in the Internet Routing Table: 72732 Prefixes per ASN: 12.21 Origin-only ASes present in the Internet Routing Table: 62417 Origin ASes announcing only one prefix: 25709 Transit ASes present in the Internet Routing Table: 10315 Transit-only ASes present in the Internet Routing Table: 368 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 53 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 901 Number of instances of unregistered ASNs: 904 Number of 32-bit ASNs allocated by the RIRs: 38493 Number of 32-bit ASNs visible in the Routing Table: 32029 Prefixes from 32-bit ASNs in the Routing Table: 149194 Number of bogon 32-bit ASNs visible in the Routing Table: 23 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 521 Number of addresses announced to Internet: 3069178880 Equivalent to 182 /8s, 239 /16s and 244 /24s Percentage of available address space announced: 82.9 Percentage of allocated address space announced: 82.9 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 300352 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 233493 Total APNIC prefixes after maximum aggregation: 65801 APNIC Deaggregation factor: 3.55 Prefixes being announced from the APNIC address blocks: 228328 Unique aggregates announced from the APNIC address blocks: 94107 APNIC Region origin ASes present in the Internet Routing Table: 12342 APNIC Prefixes per ASN: 18.50 APNIC Region origin ASes announcing only one prefix: 3527 APNIC Region transit ASes present in the Internet Routing Table: 1722 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 7528 Number of APNIC addresses announced to Internet: 774726272 Equivalent to 46 /8s, 45 /16s and 98 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 258125 Total ARIN prefixes after maximum aggregation: 118895 ARIN Deaggregation factor: 2.17 Prefixes being announced from the ARIN address blocks: 258153 Unique aggregates announced from the ARIN address blocks: 123285 ARIN Region origin ASes present in the Internet Routing Table: 18943 ARIN Prefixes per ASN: 13.63 ARIN Region origin ASes announcing only one prefix: 6852 ARIN Region transit ASes present in the Internet Routing Table: 1954 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 35 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4327 Number of ARIN addresses announced to Internet: 1295979520 Equivalent to 77 /8s, 63 /16s and 20 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 253216 Total RIPE prefixes after maximum aggregation: 116221 RIPE Deaggregation factor: 2.18 Prefixes being announced from the RIPE address blocks: 249643 Unique aggregates announced from the RIPE address blocks: 148914 RIPE Region origin ASes present in the Internet Routing Table: 28172 RIPE Prefixes per ASN: 8.86 RIPE Region origin ASes announcing only one prefix: 12129 RIPE Region transit ASes present in the Internet Routing Table: 3967 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 32 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10630 Number of RIPE addresses announced to Internet: 713358208 Equivalent to 42 /8s, 132 /16s and 251 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 114401 Total LACNIC prefixes after maximum aggregation: 27310 LACNIC Deaggregation factor: 4.19 Prefixes being announced from the LACNIC address blocks: 115123 Unique aggregates announced from the LACNIC address blocks: 48569 LACNIC Region origin ASes present in the Internet Routing Table: 10937 LACNIC Prefixes per ASN: 10.53 LACNIC Region origin ASes announcing only one prefix: 2652 LACNIC Region transit ASes present in the Internet Routing Table: 2191 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 53 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8622 Number of LACNIC addresses announced to Internet: 176621056 Equivalent to 10 /8s, 135 /16s and 6 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 27582 Total AfriNIC prefixes after maximum aggregation: 5352 AfriNIC Deaggregation factor: 5.15 Prefixes being announced from the AfriNIC address blocks: 35950 Unique aggregates announced from the AfriNIC address blocks: 11864 AfriNIC Region origin ASes present in the Internet Routing Table: 1588 AfriNIC Prefixes per ASN: 22.64 AfriNIC Region origin ASes announcing only one prefix: 549 AfriNIC Region transit ASes present in the Internet Routing Table: 312 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 34 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 922 Number of AfriNIC addresses announced to Internet: 108166912 Equivalent to 6 /8s, 114 /16s and 127 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9057 8886 46 CHINAMOBILE-CN China Mobile Communicati 7545 5865 788 693 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4682 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3606 1330 20 VIETEL-AS-AP Viettel Group, VN 7713 3483 1038 51 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3434 1880 57 VNPT-AS-VN VNPT Corp, VN 4766 2541 11122 618 KIXS-AS-KR Korea Telecom, KR 9498 2315 475 235 BBIL-AP BHARTI Airtel Ltd., IN 45090 2170 1438 79 TENCENT-NET-AP Shenzhen Tencent Compute 4755 2117 429 199 TATACOMM-AS TATA Communications formerl Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 6222 10151 2650 AMAZON-02, US 11492 4464 296 845 CABLEONE, US 22773 3968 3028 368 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3903 264 30 VIASAT-SP-BACKBONE, US 16625 3657 1887 2563 AKAMAI-AS, US 6327 3366 1318 63 SHAW, CA 749 2887 50780 2143 DNIC-AS-00749, US 30036 2608 374 142 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2521 4962 427 CENTURYLINK-US-LEGACY-QWEST, US 20115 2249 3035 508 CHARTER-20115, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6809 1720 154 UNI2-AS, ES 9121 6692 1692 17 TTNET, TR 8551 4004 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 3882 3347 210 AKAMAI-ASN1, NL 39891 3274 188 25 ALJAWWALSTC-AS, SA 12389 2955 2274 906 ROSTELECOM-AS, RU 9009 2474 250 1285 M247, GB 34984 2218 357 602 TELLCOM-AS, TR 47331 1953 312 1490 TTNET, TR 58224 1789 928 582 TCI, IR Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10617 3434 566 Uninet S.A. de C.V., MX 10620 3454 518 721 Telmex Colombia S.A., CO 11830 2460 369 62 Instituto Costarricense de Electricidad 13999 1662 284 469 Mega Cable, S.A. de C.V., MX 6503 1441 354 524 Axtel, S.A.B. de C.V., MX 28573 1404 2331 247 CLARO S.A., BR 3816 1248 659 145 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 26615 1136 2350 139 TIM SA, BR 6147 1095 369 21 Telefonica del Peru S.A.A., PE 11664 1001 191 448 Techtel LMDS Comunicaciones Interactiva Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1605 393 21 LINKdotNET-AS, EG 24835 1546 515 32 RAYA-AS, EG 36992 1299 1518 262 ETISALAT-MISR, EG 36903 1195 543 114 MT-MPLS, MA 29571 895 63 57 ORANGE-COTE-IVOIRE, CI 36935 735 521 39 Vodafone-, EG 6713 612 1863 34 IAM-AS, MA 15399 518 50 33 WANANCHI-, KE 37342 468 32 1 MOVITEL, MZ 23889 422 232 16 MauritiusTelecom, MU Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10617 3434 566 Uninet S.A. de C.V., MX 9808 9057 8886 46 CHINAMOBILE-CN China Mobile Communicati 12479 6809 1720 154 UNI2-AS, ES 9121 6692 1692 17 TTNET, TR 16509 6222 10151 2650 AMAZON-02, US 7545 5865 788 693 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4682 4192 74 ERX-CERNET-BKB China Education and Rese 11492 4464 296 845 CABLEONE, US 8551 4004 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 22773 3968 3028 368 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9057 9011 CHINAMOBILE-CN China Mobile Communications Grou 9121 6692 6675 TTNET, TR 12479 6809 6655 UNI2-AS, ES 7545 5865 5172 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4682 4608 ERX-CERNET-BKB China Education and Research Net 8551 4004 3965 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7155 3903 3873 VIASAT-SP-BACKBONE, US 20940 3882 3672 AKAMAI-ASN1, NL 11492 4464 3619 CABLEONE, US 22773 3968 3600 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 46990 UNALLOCATED 8.5.242.0/23 3356 LEVEL3, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 395056 UNALLOCATED 8.45.133.0/24 3356 LEVEL3, US 32306 UNALLOCATED 8.46.80.0/24 33652 CMCS, US 17033 UNALLOCATED 8.48.225.0/24 3356 LEVEL3, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.252.160.0/24 Origin: 398968 GROUP-IID-01, US 23.252.160.0/24 Transit: 174 COGENT-174, US 23.252.161.0/24 Origin: 398968 GROUP-IID-01, US 23.252.161.0/24 Transit: 174 COGENT-174, US 23.252.163.0/24 Origin: 398968 GROUP-IID-01, US 23.252.163.0/24 Transit: 174 COGENT-174, US 23.252.164.0/24 Origin: 398968 GROUP-IID-01, US 23.252.164.0/24 Transit: 174 COGENT-174, US Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:40 /11:102 /12:305 /13:591 /14:1206 /15:2033 /16:13582 /17:8351 /18:13887 /19:25149 /20:43356 /21:52014 /22:108148 /23:95427 /24:522707 /25:791 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 9121 5863 6692 TTNET, TR 12479 5767 6809 UNI2-AS, ES 8151 4344 10617 Uninet S.A. de C.V., MX 8551 3469 4004 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 3414 4464 CABLEONE, US 6327 3177 3366 SHAW, CA 7155 2993 3903 VIASAT-SP-BACKBONE, US 22773 2958 3968 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2810 3274 ALJAWWALSTC-AS, SA 30036 2264 2608 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1918 2:1004 3:153 4:7 5:3739 6:103 7:5 8:1556 9:1 11:172 12:1709 13:415 14:2379 15:156 16:39 17:372 18:139 20:166 21:4 22:188 23:5454 24:2318 25:6 27:2592 29:19 31:2404 32:98 34:1 35:55 36:1733 37:3939 38:2511 39:675 40:149 41:3881 42:1057 43:2090 44:292 45:15990 46:3866 47:303 49:1634 50:1903 51:106 52:1353 53:1 54:293 55:747 56:8 57:55 58:1767 59:1151 60:958 61:2264 62:2435 63:1942 64:5484 65:2304 66:4894 67:2929 68:1177 69:4161 70:1345 71:672 72:3056 74:2627 75:1516 76:716 77:2125 78:3802 79:3096 80:1942 81:1662 82:1455 83:1198 84:1318 85:3615 86:711 87:1952 88:2611 89:3146 90:505 91:7534 92:1880 93:2596 94:3253 95:4485 96:1308 97:345 98:991 99:864 100:75 101:1049 102:1939 103:28154 104:4107 105:462 106:831 107:2461 108:769 109:4178 110:2070 111:3258 112:1967 113:1531 114:1536 115:1951 116:1907 117:2503 118:2330 119:1827 120:1668 121:1028 122:2542 123:2112 124:1609 125:2086 128:1350 129:1195 130:919 131:2094 132:757 133:367 134:1931 135:289 136:857 137:858 138:2466 139:1217 140:880 141:1340 142:1251 143:1434 144:1230 145:342 146:1753 147:1470 148:2218 149:1670 150:849 151:1077 152:1818 153:448 154:3642 155:1333 156:1867 157:1218 158:1010 159:2030 160:2396 161:1296 162:3425 163:1211 164:1670 165:1566 166:620 167:1688 168:3684 169:689 170:4317 171:824 172:3008 173:3050 174:1015 175:1126 176:3512 177:4572 178:3019 179:2010 180:2283 181:2900 182:3235 183:1919 184:2390 185:19263 186:4290 187:3609 188:3828 189:3188 190:8876 191:1322 192:11018 193:8532 194:6942 195:4972 196:2916 197:2367 198:5998 199:5996 200:7545 201:5701 202:10455 203:10010 204:4521 205:3386 206:3857 207:3378 208:3999 209:4616 210:4236 211:2454 212:3938 213:3373 214:1144 215:64 216:6361 217:2636 218:1238 219:602 220:1952 221:988 222:858 223:2173 End of report

1 0