- routing-wg - mailman.ripe.net

Re: [routing-wg] AS201640
by George Michaelson 12 Nov '14

12 Nov '14

the easy to use solution is to require external data to be signed by RPKI certificates from another RIR's system. 1) its time limited: all signed objects have a lifetime 2) its secure (as secure as PKI) 3) it doesn't require massive effort to implement: a well formed object can be specified by anyone, and then signed by the prime resource holder using a certificate covering the resources. The receiving side can validate it directly. Thats pretty much what I said to the microphone of the routing wg meeting. On 9 November 2014 08:42, Sander Steffann <sander(a)steffann.nl> wrote: > Hi Ronald, > > >> Having IP addresses is not a requirement for getting an ASN. There are > >> many legitimate cases where an ASN may be used to announce address space > >> belonging to someone else. For example an ISP announcing address space > >> belonging to its customer. Or a transit provider. > > > > OK, that's a good point. But I'm not sure that it fully negates the > > possible value of my question. > > > > Everybody is _supposed_ to have working e-mail address contacts in their > > IP allocation records within the WHOIS data bases of the various RiRs, > > yes? So suppose that there had been a protocol in place that required > > an affirmative e-mail response from at least one legitimate IP address > > block registrant (in some/any region) before the allocation of an AS > > number would proceed. Such a protocol would have forestalled the > > situation that we now see with AS201640, would it not? > > It is a possible implementation but one that only has a one-time check. It > wouldn't keep track of changes to resources in other regions. The working > group asked the RIPE NCC to look into the possibilities and report back to > the working group. Let's see if there is a easy to use solution that makes > sure we don't import data into our database that then end up being invalid > or outdated. > > Cheers, > Sander > > >

6 6

AS201640 and AS200002
by Ronald F. Guilmette 10 Nov '14

10 Nov '14

Looking at these two pages, using the "Table View" option: https://stat.ripe.net/widget/routing-history#w.resource=AS201640 https://stat.ripe.net/widget/routing-history#w.resource=AS200002 I am seeing a couple of pairs of announcements that seem to me to be worth seeking an explanation for, specifically, these ones: 210.57.0.0/19 AS201640 2014-08-26 00:00:00 UTC 210.57.0.0/19 AS200002 2014-10-01 00:00:00 UTC 212.124.75.0/24 AS200002 2014-07-09 00:00:00 UTC 212.124.64.0/20 AS201640 2014-08-26 00:00:00 UTC Regards, rfg

2 1

[training] RIPE NCC Training Courses January-March 2015
by Training Services 10 Nov '14

10 Nov '14

Dear colleagues, Our training team travels the RIPE NCC service region to deliver training courses to our members without any additional cost. Over the next few months, we'll be in Milan, Madrid, Munich, Podgorica, Prague, Moscow, Riga, Ramallah, Edinburgh, Copenhagen, Amsterdam. Visit the following page to register and to check which training courses we are giving in your area: https://lirportal.ripe.net/training/courses The RIPE NCC delivers the following training courses: - LIR Training Course - RIPE Database Training Course - Basic IPv6 Training Course - Advanced IPv6 Training Course - Routing Security Training Course - DNSSEC Training Course The RIPE NCC delivers the following tailor-made workshops: - Measurements Tools Workshop - Introduction to BGP For more information visit: http://www.ripe.net/lir-services/training/courses With kind regards, Rumy Spratley-Kanis Training Services Manager

1 0

Re: [routing-wg] AS201640
by George Michaelson 09 Nov '14

09 Nov '14

I think there are two qualities to the problem 1) what kind of authentication takes place to admit out-of-region data into a system which demands self-referential integrity and can't be made to do cross-system references 2) what time limits do we place on the data to require re-validation, so that it doesn't last forever and go stale. Designing this demands both sender and receiver agree. The prior art, RPSS and RPS-Auth did not achieve agreement both sides: we didn't all agree to run a single cohesive framework. RPKI (noting Sanders concerns it scares some people) has the huge benefit: all the RIR are doing it, and all the RIR respect each others root/signing trust chains. And, as I said before, it has time limits built in: signed objects have a lifetime by definition. Do nothing, and data ages out at some point. Thats why I like it: its commonly implemented, and it behaves the ways we need, for this function. -G On 9 November 2014 11:59, Gert Doering <gert(a)space.net> wrote: > Hi, > > On Sun, Nov 09, 2014 at 11:48:36AM -0800, Ronald F. Guilmette wrote: > > P.S. I'm still a bit befuddled by what happened in this case. Would it > > be a fair characterization to say that what AS201640 has done in this > > case is to exploit a kind of loophole which is uniquely present only > > when the hijacker/squatter AS is registered in one RiR and the IP blocks > > that are being hijacked/squatted are registered in a different RiR? > > Yes. > > > Also, could this scenario have been replicated if the origin AS had > > been registered in/by ARIN, APNIC, LACNIC, or AFRINIC, rather than > > RIPE? > > I'm not sure how the access control in other regions' IRR DBs work - but > at least ARIN's database is based on RIPE code, so "it might be". > > > If so, then a proper sort of fix will necessarily involve all > > five RiRs, no? > > Correct. George Michaelson is from APNIC, so "they are aware", and I'm > fairly sure the other RIRs are being informed. > > Gert Doering > -- NetMaster > -- > have you enabled IPv6 on something today...? > > SpaceNet AG Vorstand: Sebastian v. Bomhard > Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann > D-80807 Muenchen HRB: 136055 (AG Muenchen) > Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279 >

1 0

AS201640
by Ronald F. Guilmette 09 Nov '14

09 Nov '14

Hello, I understand that there may have been some discussion of the rogue AS201640 at the WG meeting in London. For the benefit of those of us who were not able to attend that, could someone (anyone) please post a brief summary of the WG's discussion of AS201640? (The transcripts do not seem to be available just yet.) Separately and additionally, I have been seeking answers to several questions relating to AS201640, mostly on the anti-abuse WG mailing list, but I have so far been rather spectacularly unsuccessful at obtaining any answers whatsoever to any of these questions. Given that, I hope that no one will mind very much if I put these questions here. (Note: I am sure that some of these questions only occur to me because of my abundant ignorance. I am admittedly not very familiar with RIPE or RIPE NCC operating procedures. I hope that the members of this WG will show me the courtesy of forgiving my ignorance and also attempt to remedy it.) +_+_+_+_+_+_+_+_+_ 1) How was it possible for various IPv4 block WHOIS records to be stored in the RIPE WHOIS DB, even though it is quite apparently the case that, according to IANA WHOIS records, the IP blocks in question do not even belong to the RIPE region? Is there really no pre-checking performed on such records before they are stored in the RIPE data base, e.g. to see if the blocks in question belong either to RIPE or to some other RiR? 2) How was it possible for a particular Bulgarian commercial organization to be granted its own AS number, when all available evidence seems to indicate that it actually had, and has, -zero- IP addresses which are actually and properly registered to it? Is there really no pre-checking performed on AS number allocations, e.g. to see if the organization requesting the AS has at least some IP addresses? 3) Why are some of the clearly bogus WHOIS records (for IPv4 blocks) relating to this incident still present within the RIPE WHOIS DB, even as we speak, in particular, these ones? 41.198.224.0/20 119.227.224.0/19 105.154.248.0/21 210.57.0.0/19 202.39.112.0/20 Is anyone anywhere still harboring *any* lingering doubt about the fact that these are all quite plainly bogus? If not, then why have these records not already been removed from the WHOIS data base? 4) Why is AS201640 still registered, as we speak? 5) Without reference to any specific incident, AS, legal entity, or any other specifics, I have the following very general question: With respect to the contracts that RIPE enters into with those parties for whom RIPE provides registration services of *AS numbers*, specifically, are the terms and conditions of those contracts adequate and sufficient to strongly deter any and all AS registrants from deliberately and willfully announcing routes to IP space to which neither they nor any of their direct or indirect customers have any legitimate claim? +_+_+_+_+_+_ I look forward to the WG's responses to the above questions.

3 6

BGP Update Report
by cidr-report＠potaroo.net 07 Nov '14

07 Nov '14

BGP Update Report Interval: 30-Oct-14 -to- 06-Nov-14 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS14287 399233 9.1% 66538.8 -- TRIAD-TELECOM - Triad Telecom, Inc.,US 2 - AS23752 198523 4.5% 1965.6 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 3 - AS7545 172069 3.9% 80.5 -- TPG-INTERNET-AP TPG Telecom Limited,AU 4 - AS9829 161433 3.7% 145.4 -- BSNL-NIB National Internet Backbone,IN 5 - AS12897 143079 3.2% 4471.2 -- HEAGMEDIANET HSE Medianet GmbH,DE 6 - AS3816 49561 1.1% 96.6 -- COLOMBIA TELECOMUNICACIONES S.A. ESP,CO 7 - AS27738 32552 0.7% 41.7 -- Ecuadortelecom S.A.,EC 8 - AS3313 32485 0.7% 10828.3 -- INET-AS BT Italia S.p.A.,IT 9 - AS9808 30902 0.7% 26.5 -- CMNET-GD Guangdong Mobile Communication Co.Ltd.,CN 10 - AS8402 28525 0.7% 53.6 -- CORBINA-AS OJSC "Vimpelcom",RU 11 - AS6713 27862 0.6% 44.4 -- IAM-AS,MA 12 - AS48159 27319 0.6% 98.6 -- TIC-AS Telecommunication Infrastructure Company,IR 13 - AS28573 25645 0.6% 17.6 -- NET Serviços de Comunicação S.A.,BR 14 - AS45899 25081 0.6% 57.0 -- VNPT-AS-VN VNPT Corp,VN 15 - AS23342 22220 0.5% 22220.0 -- UNITEDLAYER - Unitedlayer, Inc.,US 16 - AS10620 20754 0.5% 8.4 -- Telmex Colombia S.A.,CO 17 - AS25003 19893 0.5% 1989.3 -- INTERNET_BINAT Internet Binat Ltd,IL 18 - AS4134 19833 0.5% 126.3 -- CHINANET-BACKBONE No.31,Jin-rong Street,CN 19 - AS13489 19479 0.4% 46.9 -- EPM Telecomunicaciones S.A. E.S.P.,CO 20 - AS22773 19470 0.4% 4.5 -- ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc.,US TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS14287 399233 9.1% 66538.8 -- TRIAD-TELECOM - Triad Telecom, Inc.,US 2 - AS23342 22220 0.5% 22220.0 -- UNITEDLAYER - Unitedlayer, Inc.,US 3 - AS61039 16767 0.4% 16767.0 -- ZMZ OAO ZMZ,RU 4 - AS18135 12424 0.3% 12424.0 -- BTV BTV Cable television,JP 5 - AS3313 32485 0.7% 10828.3 -- INET-AS BT Italia S.p.A.,IT 6 - AS47680 6477 0.1% 6477.0 -- NHCS EOBO Limited,IE 7 - AS3 18160 0.4% 1306.0 -- MIT-GATEWAYS - Massachusetts Institute of Technology,US 8 - AS62174 6033 0.1% 6033.0 -- INTERPAN-AS INTERPAN LTD.,BG 9 - AS24768 4849 0.1% 4849.0 -- ALMOUROLTEC ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA,PT 10 - AS12897 143079 3.2% 4471.2 -- HEAGMEDIANET HSE Medianet GmbH,DE 11 - AS51314 4321 0.1% 4321.0 -- TEVIANT-AS LLC Joint Small Enterprise "Teviant",UA 12 - AS53823 3066 0.1% 3066.0 -- SMTA - Scio Mutual Telephone Association,US 13 - AS56636 2928 0.1% 2928.0 -- ASVEDARU VEDA Ltd.,RU 14 - AS60725 16553 0.4% 2758.8 -- O3B-AS O3b Limited,JE 15 - AS35093 4473 0.1% 2236.5 -- RO-HTPASSPORT High Tech Passport Ltd SUA California San Jose SUCURSALA BUCURESTI ROMANIA,RO 16 - AS25003 19893 0.5% 1989.3 -- INTERNET_BINAT Internet Binat Ltd,IL 17 - AS23752 198523 4.5% 1965.6 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 18 - AS61051 1834 0.0% 1834.0 -- DEKARD Dekard LLC,RU 19 - AS3 1716 0.0% 5517.0 -- MIT-GATEWAYS - Massachusetts Institute of Technology,US 20 - AS47805 3355 0.1% 1677.5 -- MCIT Ministry of Communications and Information,SA TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 202.70.88.0/21 99367 2.2% AS23752 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 2 - 202.70.64.0/21 98016 2.1% AS23752 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 3 - 208.70.20.0/22 79857 1.7% AS14287 -- TRIAD-TELECOM - Triad Telecom, Inc.,US 4 - 208.78.116.0/22 79845 1.7% AS14287 -- TRIAD-TELECOM - Triad Telecom, Inc.,US 5 - 208.73.244.0/22 79843 1.7% AS14287 -- TRIAD-TELECOM - Triad Telecom, Inc.,US 6 - 208.88.232.0/22 79841 1.7% AS14287 -- TRIAD-TELECOM - Triad Telecom, Inc.,US 7 - 216.162.0.0/20 79841 1.7% AS14287 -- TRIAD-TELECOM - Triad Telecom, Inc.,US 8 - 64.29.130.0/24 22220 0.5% AS23342 -- UNITEDLAYER - Unitedlayer, Inc.,US 9 - 94.16.80.0/20 20461 0.4% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 10 - 185.9.28.0/22 20434 0.4% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 11 - 94.16.72.0/21 20433 0.4% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 12 - 94.16.64.0/21 20417 0.4% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 13 - 194.127.204.0/23 20402 0.4% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 14 - 194.99.108.0/23 20400 0.4% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 15 - 194.45.104.0/23 20368 0.4% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 16 - 192.115.44.0/22 19883 0.4% AS25003 -- INTERNET_BINAT Internet Binat Ltd,IL 17 - 130.0.192.0/21 18136 0.4% AS3 -- MIT-GATEWAYS - Massachusetts Institute of Technology,US 18 - 91.235.169.0/24 16767 0.4% AS61039 -- ZMZ OAO ZMZ,RU 19 - 71.19.134.0/23 16604 0.4% AS3313 -- INET-AS BT Italia S.p.A.,IT 20 - 194.153.99.0/24 15878 0.3% AS3313 -- INET-AS BT Italia S.p.A.,IT Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 07 Nov '14

07 Nov '14

This report has been generated at Fri Nov 7 21:14:21 2014 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/2.0 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 31-10-14 525536 289154 01-11-14 527072 289170 02-11-14 526955 289137 03-11-14 526861 289197 04-11-14 526595 290028 05-11-14 526922 292340 06-11-14 536547 292355 07-11-14 528597 291942 AS Summary 48763 Number of ASes in routing system 19597 Number of ASes announcing only one prefix 5565 Largest number of prefixes announced by an AS AS4538 : ERX-CERNET-BKB China Education and Research Network Center,CN 120193024 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street,CN Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 07Nov14 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 529293 291876 237417 44.9% All ASes AS4538 5565 2047 3518 63.2% ERX-CERNET-BKB China Education and Research Network Center,CN AS6389 2894 116 2778 96.0% BELLSOUTH-NET-BLK - BellSouth.net Inc.,US AS17974 2825 83 2742 97.1% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia,ID AS22773 2854 164 2690 94.3% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc.,US AS28573 2490 285 2205 88.6% NET Serviços de Comunicação S.A.,BR AS4766 2953 1333 1620 54.9% KIXS-AS-KR Korea Telecom,KR AS6147 1713 107 1606 93.8% Telefonica del Peru S.A.A.,PE AS10620 3032 1526 1506 49.7% Telmex Colombia S.A.,CO AS7303 1770 290 1480 83.6% Telecom Argentina S.A.,AR AS9808 1478 53 1425 96.4% CMNET-GD Guangdong Mobile Communication Co.Ltd.,CN AS8402 1310 27 1283 97.9% CORBINA-AS OJSC "Vimpelcom",RU AS4755 1913 640 1273 66.5% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP,IN AS20115 1821 557 1264 69.4% CHARTER-NET-HKY-NC - Charter Communications,US AS4323 1644 411 1233 75.0% TWTC - tw telecom holdings, inc.,US AS7545 2454 1245 1209 49.3% TPG-INTERNET-AP TPG Telecom Limited,AU AS9498 1314 110 1204 91.6% BBIL-AP BHARTI Airtel Ltd.,IN AS18566 2044 869 1175 57.5% MEGAPATH5-US - MegaPath Corporation,US AS6983 1581 423 1158 73.2% ITCDELTA - Earthlink, Inc.,US AS7552 1208 53 1155 95.6% VIETEL-AS-AP Viettel Corporation,VN AS7029 2161 1132 1029 47.6% WINDSTREAM - Windstream Communications Inc,US AS34984 1843 824 1019 55.3% TELLCOM-AS TELLCOM ILETISIM HIZMETLERI A.S.,TR AS4812 1523 507 1016 66.7% CHINANET-SH-AP China Telecom (Group),CN AS22561 1313 362 951 72.4% AS22561 - CenturyTel Internet Holdings, Inc.,US AS7738 999 83 916 91.7% Telemar Norte Leste S.A.,BR AS38285 978 131 847 86.6% M2TELECOMMUNICATIONS-AU M2 Telecommunications Group Ltd,AU AS4788 1092 250 842 77.1% TMNET-AS-AP TM Net, Internet Service Provider,MY AS24560 1182 350 832 70.4% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services,IN AS31148 1045 261 784 75.0% FREENET-AS Freenet Ltd.,UA AS8151 1486 703 783 52.7% Uninet S.A. de C.V.,MX AS26615 914 133 781 85.4% Tim Celular S.A.,BR Total 57399 15075 42324 73.7% Top 30 total Possible Bogus Routes 5.100.241.0/24 AS19957 -Reserved AS-,ZZ 23.252.224.0/20 AS62502 -Reserved AS-,ZZ 23.252.224.0/21 AS62502 -Reserved AS-,ZZ 23.252.232.0/21 AS62502 -Reserved AS-,ZZ 24.231.96.0/24 AS21548 MTO - MTO Telecom Inc.,CA 27.100.7.0/24 AS56096 31.217.248.0/21 AS44902 COV-ASN COVAGE NETWORKS SASU,FR 37.16.88.0/23 AS57652 -Reserved AS-,ZZ 41.73.1.0/24 AS37004 -Reserved AS-,ZZ 41.73.2.0/24 AS37004 -Reserved AS-,ZZ 41.73.10.0/24 AS37004 -Reserved AS-,ZZ 41.73.11.0/24 AS37004 -Reserved AS-,ZZ 41.73.12.0/24 AS37004 -Reserved AS-,ZZ 41.73.13.0/24 AS37004 -Reserved AS-,ZZ 41.73.14.0/24 AS37004 -Reserved AS-,ZZ 41.73.15.0/24 AS37004 -Reserved AS-,ZZ 41.73.16.0/24 AS37004 -Reserved AS-,ZZ 41.73.18.0/24 AS37004 -Reserved AS-,ZZ 41.73.20.0/24 AS37004 -Reserved AS-,ZZ 41.73.21.0/24 AS37004 -Reserved AS-,ZZ 41.76.48.0/21 AS36969 MTL-AS,MW 41.78.180.0/23 AS37265 -Reserved AS-,ZZ 41.189.96.0/20 AS37000 -Reserved AS-,ZZ 41.189.127.0/24 AS37000 -Reserved AS-,ZZ 41.189.128.0/24 AS37000 -Reserved AS-,ZZ 41.191.108.0/22 AS37004 -Reserved AS-,ZZ 41.191.108.0/24 AS37004 -Reserved AS-,ZZ 41.191.109.0/24 AS37004 -Reserved AS-,ZZ 41.191.110.0/24 AS37004 -Reserved AS-,ZZ 41.191.111.0/24 AS37004 -Reserved AS-,ZZ 41.223.208.0/22 AS37000 -Reserved AS-,ZZ 41.242.152.0/22 AS37558 LITC,LY 41.242.156.0/22 AS37558 LITC,LY 45.160.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.164.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.168.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.172.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.176.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.180.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.184.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.188.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.224.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.228.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.232.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.236.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 64.25.16.0/23 AS19535 -Reserved AS-,ZZ 64.25.20.0/24 AS19535 -Reserved AS-,ZZ 64.25.21.0/24 AS19535 -Reserved AS-,ZZ 64.25.22.0/24 AS19535 -Reserved AS-,ZZ 64.25.24.0/23 AS19535 -Reserved AS-,ZZ 64.25.27.0/24 AS7046 RFC2270-UUNET-CUSTOMER - MCI Communications Services, Inc. d/b/a Verizon Business,US 65.75.216.0/23 AS10494 AAI - Accurate Automation, Inc.,US 65.75.217.0/24 AS10494 AAI - Accurate Automation, Inc.,US 65.111.1.0/24 AS32258 SDNGLOBAL - SDN Global,US 66.23.192.0/19 AS6939 HURRICANE - Hurricane Electric, Inc.,US 66.180.64.0/21 AS32558 ZEUTER - Zeuter Development Corporation,CA 66.187.240.0/20 AS14552 ACS-SOUTHEASTDATACENTER - Affiliated Computer Services, Inc.,US 66.205.224.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc.,US 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 67.210.0.0/20 AS62502 -Reserved AS-,ZZ 67.210.0.0/21 AS62502 -Reserved AS-,ZZ 67.210.8.0/21 AS62502 -Reserved AS-,ZZ 68.170.160.0/20 AS6939 HURRICANE - Hurricane Electric, Inc.,US 70.34.48.0/20 AS6939 HURRICANE - Hurricane Electric, Inc.,US 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A.,IT 72.19.0.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc.,US 74.113.200.0/23 AS46939 -Reserved AS-,ZZ 74.114.52.0/22 AS40818 -Reserved AS-,ZZ 74.114.52.0/23 AS40818 -Reserved AS-,ZZ 74.114.52.0/24 AS40818 -Reserved AS-,ZZ 74.114.53.0/24 AS40818 -Reserved AS-,ZZ 74.114.54.0/23 AS40818 -Reserved AS-,ZZ 74.114.54.0/24 AS40818 -Reserved AS-,ZZ 74.114.55.0/24 AS40818 -Reserved AS-,ZZ 74.114.184.0/22 AS19888 -Reserved AS-,ZZ 74.118.132.0/22 AS5117 -Reserved AS-,ZZ 74.120.212.0/23 AS32326 MORPHOTRUST-USA - MorphoTrust USA, Inc.,US 74.120.214.0/23 AS32326 MORPHOTRUST-USA - MorphoTrust USA, Inc.,US 74.121.24.0/22 AS36263 FORONA - Forona Technologies, Inc.,US 74.123.136.0/21 AS53358 -Reserved AS-,ZZ 77.243.91.0/24 AS42597 -Reserved AS-,ZZ 80.78.133.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.78.134.0/23 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.78.134.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.78.135.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.250.32.0/22 AS37106 ODUA-AS,NG 85.202.160.0/20 AS44404 -Reserved AS-,ZZ 89.31.24.0/23 AS41455 -Reserved AS-,ZZ 89.31.26.0/23 AS41455 -Reserved AS-,ZZ 89.31.28.0/22 AS41455 -Reserved AS-,ZZ 91.103.8.0/24 AS42551 -Reserved AS-,ZZ 91.103.9.0/24 AS42551 -Reserved AS-,ZZ 91.103.10.0/24 AS42551 -Reserved AS-,ZZ 91.103.11.0/24 AS42551 -Reserved AS-,ZZ 91.193.60.0/22 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 91.195.66.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 91.197.36.0/22 AS43359 -Reserved AS-,ZZ 91.220.84.0/24 AS5577 ROOT root SA,LU 93.190.10.0/24 AS47254 -Reserved AS-,ZZ 98.143.160.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.161.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.162.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.163.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.164.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.165.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.166.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.167.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.168.0/22 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.172.0/22 AS26566 -Reserved AS-,ZZ 98.143.172.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.173.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.174.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.175.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 102.2.88.0/22 AS38456 PACTEL-AS-AP Pacific Teleports. ,AU 103.6.108.0/22 AS55526 NOIDASOFTWARETECHNOLOGYPARK-IN NOIDA Software Technology Park Ltd,IN 103.10.222.0/24 AS13189 103.14.231.0/24 AS58680 103.15.92.0/22 AS23818 JETINTERNET JETINTERNET Corporation,JP 103.18.76.0/22 AS18097 DCN D.C.N. Corporation,JP 103.18.248.0/22 AS18097 DCN D.C.N. Corporation,JP 103.19.0.0/22 AS18097 DCN D.C.N. Corporation,JP 103.20.56.0/24 AS13239 103.20.100.0/24 AS45334 AIRCEL-AS-AP Dishnet Wireless Limited,IN 103.20.101.0/24 AS45334 AIRCEL-AS-AP Dishnet Wireless Limited,IN 103.21.4.0/22 AS12182 INTERNAP-2BLK - Internap Network Services Corporation,US 103.26.116.0/22 AS17676 GIGAINFRA Softbank BB Corp.,JP 103.228.132.0/22 AS4826 VOCUS-BACKBONE-AS Vocus Connect International Backbone,AU 103.248.88.0/22 AS23818 JETINTERNET JETINTERNET Corporation,JP 103.248.220.0/22 AS17676 GIGAINFRA Softbank BB Corp.,JP 103.250.0.0/22 AS17676 GIGAINFRA Softbank BB Corp.,JP 103.251.244.0/22 AS55536 PSWITCH-HK Pacswitch Colocation & Datacentre,HK 104.232.192.0/19 AS62874 WEB2OBJECTS-LLC - Web2Objects LLC,US 104.237.48.0/20 AS18450 WEBNX - WebNX, Inc.,US 104.244.56.0/21 AS40193 AS-TRIT - Trit Networks, LLC,US 116.206.72.0/24 AS6461 ABOVENET - Abovenet Communications, Inc,US 116.206.85.0/24 AS6461 ABOVENET - Abovenet Communications, Inc,US 116.206.103.0/24 AS6461 ABOVENET - Abovenet Communications, Inc,US 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP,IN 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street,CN 124.158.28.0/22 AS45857 142.147.62.0/24 AS3958 AIRCANADA - Air Canada,CA 162.217.156.0/22 AS62502 -Reserved AS-,ZZ 162.217.156.0/23 AS62502 -Reserved AS-,ZZ 162.217.158.0/23 AS62502 -Reserved AS-,ZZ 162.221.48.0/21 AS62502 -Reserved AS-,ZZ 162.221.48.0/22 AS62502 -Reserved AS-,ZZ 162.221.52.0/22 AS62502 -Reserved AS-,ZZ 162.223.64.0/21 AS62502 -Reserved AS-,ZZ 162.223.64.0/22 AS62502 -Reserved AS-,ZZ 162.223.68.0/22 AS62502 -Reserved AS-,ZZ 166.93.0.0/16 AS23537 CRITIGEN - Micro Source, Inc.,US 172.85.0.0/24 AS29571 CITelecom-AS,CI 172.85.1.0/24 AS29571 CITelecom-AS,CI 172.85.2.0/24 AS29571 CITelecom-AS,CI 172.85.3.0/24 AS29571 CITelecom-AS,CI 172.86.0.0/24 AS29571 CITelecom-AS,CI 172.86.1.0/24 AS29571 CITelecom-AS,CI 172.86.2.0/24 AS29571 CITelecom-AS,CI 172.87.0.0/24 AS29571 CITelecom-AS,CI 172.88.0.0/24 AS29571 CITelecom-AS,CI 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group),CN 173.240.160.0/20 AS6939 HURRICANE - Hurricane Electric, Inc.,US 176.111.168.0/22 AS50586 MACROSOLUTIONS MacroSolution SRL,RO 182.237.25.0/24 AS10201 DWL-AS-IN Dishnet Wireless Limited. Broadband Wireless,IN 185.28.180.0/22 AS18097 DCN D.C.N. Corporation,JP 190.124.252.0/22 AS7303 Telecom Argentina S.A.,AR 192.9.0.0/16 AS11479 BRM-SUN-AS - Sun Microsystems, Inc,US 192.25.10.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.25.11.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.25.13.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.25.14.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.34.152.0/21 AS10835 VISIONARY - Visionary Communications, Inc.,US 192.75.23.0/24 AS2579 AS2579 - Alcatel-Lucent,FR 192.75.239.0/24 AS23498 CDSI - COGECODATA,CA 192.84.24.0/24 AS4323 TWTC - tw telecom holdings, inc.,US 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.101.72.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.124.252.0/22 AS680 DFN Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.,DE 192.131.233.0/24 AS7018 ATT-INTERNET4 - AT&T Services, Inc.,US 192.149.81.0/24 AS14454 PERIMETER-ESECURITY - Perimeter eSecurity,US 192.154.32.0/19 AS81 NCREN - MCNC,US 192.154.64.0/19 AS81 NCREN - MCNC,US 192.166.32.0/20 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.188.208.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 192.245.195.0/24 AS7381 SUNGARDRS - SunGard Availability Services LP,US 193.9.59.0/24 AS1257 TELE2,SE 193.16.106.0/24 AS31539 -Reserved AS-,ZZ 193.16.145.0/24 AS31392 -Reserved AS-,ZZ 193.22.86.0/24 AS24751 MULTIFI-AS Jakobstadsnejdens Telefon Ab,FI 193.22.224.0/20 AS3322 -Reserved AS-,ZZ 193.22.238.0/23 AS62383 LDS-AS Lambrechts Data Services VOF,BE 193.26.213.0/24 AS31641 BYTEL-AS Bytel Ltd,GB 193.28.14.0/24 AS34309 LINK11 Link11 GmbH,DE 193.33.6.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.33.252.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.46.200.0/24 AS34243 WEBAGE Web Age Ltd,GB 193.93.6.0/23 AS35559 SOMEADDRESS Someaddress Networks Ltd,GB 193.111.229.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.149.2.0/23 AS15919 INTERHOST Servicios de Hosting en Internet S.A.,ES 193.164.152.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.178.196.0/22 AS15657 SPEEDBONE-AS Speedbone Internet & Connectivity GmbH,DE 193.188.252.0/24 AS8697 JTC-AS8697 Jordan Telecommunications Company,JO 193.200.244.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.201.244.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 193.201.245.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 193.201.246.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 193.202.8.0/21 AS6824 HERMES-NETWORK Hermes Telecom International Ltd,GB 193.202.9.0/24 AS6824 HERMES-NETWORK Hermes Telecom International Ltd,GB 193.223.103.0/24 AS8437 UTA-AS Tele2 Telecommunication GmbH,AT 193.227.109.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.227.236.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.6.252.0/24 AS21202 DCSNET-AS Bredband2 AB,SE 194.9.8.0/23 AS2863 SPRITELINK Centor AB,SE 194.9.8.0/24 AS2863 SPRITELINK Centor AB,SE 194.33.11.0/24 AS8943 JUMP Jump Networks Ltd.,GB 194.39.78.0/23 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 194.49.17.0/24 AS13135 CREW-AS Wieske's Crew GmbH,DE 194.50.8.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.60.88.0/21 AS5089 NTL Virgin Media Limited,GB 194.63.152.0/22 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.76.224.0/24 AS34701 WITZENMANN-AS Witzenmann GmbH, Pforzheim,DE 194.76.225.0/24 AS34701 WITZENMANN-AS Witzenmann GmbH, Pforzheim,DE 194.79.36.0/22 AS3257 TINET-BACKBONE Tinet SpA,DE 194.88.6.0/24 AS35093 RO-HTPASSPORT High Tech Passport Ltd SUA California San Jose SUCURSALA BUCURESTI ROMANIA,RO 194.88.226.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.99.67.0/24 AS9083 CARPENET carpeNet Information Technologies GmbH,DE 194.126.152.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.126.219.0/24 AS34545 -Reserved AS-,ZZ 194.126.233.0/24 AS31235 SKIWEBCENTER-AS SKIWEBCENTER SARL,FR 194.150.214.0/23 AS30880 SPACEDUMP-AS SpaceDump IT AB,SE 194.153.99.0/24 AS3313 INET-AS BT Italia S.p.A.,IT 194.156.179.0/24 AS3209 VODANET Vodafone GmbH,DE 194.180.25.0/24 AS21358 ATOS-ORIGIN-DE-AS Atos Information Technology GmbH,DE 194.187.24.0/22 AS8856 UKRNET UkrNet Ltd,UA 195.8.48.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.8.48.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.8.119.0/24 AS34304 TEENTELECOM Teen Telecom SRL,RO 195.42.232.0/22 AS15657 SPEEDBONE-AS Speedbone Internet & Connectivity GmbH,DE 195.85.194.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.85.201.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.110.0.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.128.240.0/23 AS21202 DCSNET-AS Bredband2 AB,SE 195.149.119.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.189.174.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.216.234.0/24 AS31309 NMV-AS New Media Ventures BVBA,BE 195.234.156.0/24 AS25028 -Reserved AS-,ZZ 195.242.182.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.244.18.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.245.98.0/23 AS48918 GLOBALWAYS GLOBALWAYS AG,DE 196.3.181.0/24 AS37004 -Reserved AS-,ZZ 196.3.182.0/24 AS37004 -Reserved AS-,ZZ 196.3.183.0/24 AS37004 -Reserved AS-,ZZ 196.6.0.0/24 AS32768 routability-tests,MU 196.22.8.0/24 AS27822 Emerging Markets Communications de Argentina S.R.L,AR 196.22.11.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 196.192.124.0/23 AS37301 AFRINIC-ZA-CPT-AS,MU 196.216.254.0/24 AS32768 routability-tests,MU 198.22.195.0/24 AS54583 -Reserved AS-,ZZ 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc.,US 198.74.11.0/24 AS14573 KEYSPANENERGY-NE1 - Keyspan Energy,US 198.74.13.0/24 AS14573 KEYSPANENERGY-NE1 - Keyspan Energy,US 198.74.38.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services,US 198.74.39.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services,US 198.74.40.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services,US 198.97.72.0/21 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.97.96.0/19 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.97.192.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.97.240.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.163.214.0/24 AS21804 ACCESS-SK - Access Communications Co-operative Limited,CA 198.163.215.0/24 AS6327 SHAW - Shaw Communications Inc.,CA 198.163.216.0/24 AS6327 SHAW - Shaw Communications Inc.,CA 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 198.252.165.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.166.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.167.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.168.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.169.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 199.7.160.0/21 AS13703 BROADRIVER-13703 - BroadRiver Communication Corp.,US 199.7.162.0/24 AS22626 -Reserved AS-,ZZ 199.7.167.0/24 AS22626 -Reserved AS-,ZZ 199.85.9.0/24 AS852 ASN852 - TELUS Communications Inc.,CA 199.88.52.0/22 AS17018 QTS-SACRAMENTO-1 - Quality Investment Properties Sacramento, LLC,US 199.116.200.0/21 AS22830 -Reserved AS-,ZZ 199.116.212.0/22 AS53704 -Reserved AS-,ZZ 199.121.0.0/16 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 199.123.16.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 199.241.34.0/23 AS10970 LIGHTEDGE - LightEdge Solutions,US 200.1.112.0/24 AS29754 GO2TEL - GO2TEL.COM INC.,US 200.58.248.0/21 AS27849 200.81.48.0/24 AS11664 Techtel LMDS Comunicaciones Interactivas S.A.,AR 200.81.49.0/24 AS11664 Techtel LMDS Comunicaciones Interactivas S.A.,AR 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd.,KR 202.53.138.0/24 AS4058 CITICTEL-CPC-AS4058 CITIC Telecom International CPC Limited,HK 202.58.113.0/24 AS19161 -Reserved AS-,ZZ 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network,CN 202.158.251.0/24 AS9255 CONNECTPLUS-AS Singapore Telecom,SG 202.165.120.0/24 AS19161 -Reserved AS-,ZZ 202.165.124.0/24 AS23749 GLOBAL-TRANSIT-AS-HKCOLO-AP HKCOLO ltd. Internet Service Provider,HK 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd.,IN 203.28.240.0/20 AS10148 UNIMELB-AS-AP The University of Melbourne, Melbourne, Victoria,AU 203.142.219.0/24 AS45149 203.160.48.0/21 AS38008 203.161.184.0/24 AS9328 GLOBALCENTER-AU Datacom Victoria,AU 203.189.116.0/22 AS45606 203.189.116.0/24 AS45606 203.189.117.0/24 AS45606 203.189.118.0/24 AS45606 203.189.119.0/24 AS45606 204.10.88.0/21 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 204.15.208.0/22 AS13706 COMPLETEWEBNET - CompleteWeb.Net LLC,US 204.16.96.0/24 AS19972 -Reserved AS-,ZZ 204.16.97.0/24 AS19972 -Reserved AS-,ZZ 204.16.98.0/24 AS19972 -Reserved AS-,ZZ 204.16.99.0/24 AS19972 -Reserved AS-,ZZ 204.69.144.0/24 AS27283 RJF-INTERNET - Raymond James Financial, Inc.,US 204.87.251.0/24 AS22217 -Reserved AS-,ZZ 204.106.16.0/24 AS4323 TWTC - tw telecom holdings, inc.,US 204.187.11.0/24 AS51113 ELEKTA-AS Elekta,GB 205.137.240.0/20 AS11686 ENA - Education Networks of America,US 205.159.44.0/24 AS40157 ADESA-CORP-AS - ADESA Corp,US 205.166.231.0/24 AS7029 WINDSTREAM - Windstream Communications Inc,US 205.211.160.0/24 AS30045 UHN-ASN - University Health Network,CA 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company,US 206.223.224.0/24 AS21548 MTO - MTO Telecom Inc.,CA 207.2.120.0/21 AS6221 USCYBERSITES - US Cybersites, Inc,US 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc,US 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc,US 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc,US 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc,US 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc,US 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc.,US 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc.,US 207.254.128.0/21 AS30689 FLOW-NET - FLOW,JM 207.254.128.0/24 AS30689 FLOW-NET - FLOW,JM 207.254.136.0/21 AS30689 FLOW-NET - FLOW,JM 208.66.64.0/24 AS16936 -Reserved AS-,ZZ 208.66.65.0/24 AS16936 -Reserved AS-,ZZ 208.66.66.0/24 AS16936 -Reserved AS-,ZZ 208.66.67.0/24 AS16936 -Reserved AS-,ZZ 208.67.132.0/22 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 208.69.192.0/23 AS6461 ABOVENET - Abovenet Communications, Inc,US 208.69.195.0/24 AS6461 ABOVENET - Abovenet Communications, Inc,US 208.75.152.0/21 AS32146 -Reserved AS-,ZZ 208.76.20.0/24 AS31812 -Reserved AS-,ZZ 208.76.21.0/24 AS31812 -Reserved AS-,ZZ 208.77.164.0/24 AS22659 -Reserved AS-,ZZ 208.77.166.0/24 AS4323 TWTC - tw telecom holdings, inc.,US 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC,US 208.84.232.0/24 AS33131 -Reserved AS-,ZZ 208.84.233.0/24 AS33131 -Reserved AS-,ZZ 208.84.234.0/24 AS33131 -Reserved AS-,ZZ 208.84.237.0/24 AS33131 -Reserved AS-,ZZ 208.84.238.0/24 AS33131 -Reserved AS-,ZZ 208.91.104.0/21 AS6939 HURRICANE - Hurricane Electric, Inc.,US 208.92.152.0/21 AS6939 HURRICANE - Hurricane Electric, Inc.,US 208.94.216.0/23 AS13629 -Reserved AS-,ZZ 208.94.219.0/24 AS13629 -Reserved AS-,ZZ 208.94.221.0/24 AS13629 -Reserved AS-,ZZ 208.94.223.0/24 AS13629 -Reserved AS-,ZZ 209.135.171.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 209.135.175.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 209.177.64.0/20 AS6461 ABOVENET - Abovenet Communications, Inc,US 209.193.112.0/20 AS209 ASN-QWEST - Qwest Communications Company, LLC,US 209.209.51.0/24 AS18687 MPOWER-2 - MPOWER COMMUNICATIONS CORP.,US 209.212.63.0/24 AS16467 ASN-NEXTWEB-R1 - Nextweb, Inc,US 209.234.112.0/23 AS32252 -Reserved AS-,ZZ 209.234.114.0/23 AS32252 -Reserved AS-,ZZ 209.234.116.0/24 AS32252 -Reserved AS-,ZZ 209.234.117.0/24 AS32252 -Reserved AS-,ZZ 209.234.118.0/24 AS32252 -Reserved AS-,ZZ 209.234.119.0/24 AS32252 -Reserved AS-,ZZ 209.234.120.0/24 AS32252 -Reserved AS-,ZZ 209.234.121.0/24 AS32252 -Reserved AS-,ZZ 209.234.122.0/24 AS32252 -Reserved AS-,ZZ 209.239.224.0/19 AS5033 AS5033 - Key Information Systems, Inc.,US 213.255.128.0/20 AS24863 LINKdotNET-AS,EG 213.255.144.0/20 AS24863 LINKdotNET-AS,EG 216.21.24.0/21 AS6939 HURRICANE - Hurricane Electric, Inc.,US 216.146.0.0/19 AS11915 US-TELEPACIFIC - TelePacific Communications,US 216.152.24.0/22 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc.,US 216.170.96.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.170.101.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.170.104.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.170.105.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.234.132.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC.,US 216.238.192.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 216.238.193.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 216.238.194.0/24 AS26566 -Reserved AS-,ZZ 216.238.196.0/22 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 216.251.50.0/24 AS38191 INFOSYS-AS Infosys Technologies Ltd,IN 216.251.53.0/24 AS38191 INFOSYS-AS Infosys Technologies Ltd,IN 216.251.62.0/24 AS38191 INFOSYS-AS Infosys Technologies Ltd,IN Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 07 Nov '14

07 Nov '14

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 08 Nov, 2014 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 523431 Prefixes after maximum aggregation: 199835 Deaggregation factor: 2.62 Unique aggregates announced to Internet: 253728 Total ASes present in the Internet Routing Table: 48493 Prefixes per ASN: 10.79 Origin-only ASes present in the Internet Routing Table: 36280 Origin ASes announcing only one prefix: 16320 Transit ASes present in the Internet Routing Table: 6192 Transit-only ASes present in the Internet Routing Table: 169 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 68 Max AS path prepend of ASN ( 55644) 61 Prefixes from unregistered ASNs in the Routing Table: 1788 Unregistered ASNs in the Routing Table: 434 Number of 32-bit ASNs allocated by the RIRs: 7832 Number of 32-bit ASNs visible in the Routing Table: 6021 Prefixes from 32-bit ASNs in the Routing Table: 21417 Number of bogon 32-bit ASNs visible in the Routing Table: 5 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 371 Number of addresses announced to Internet: 2713875332 Equivalent to 161 /8s, 194 /16s and 115 /24s Percentage of available address space announced: 73.3 Percentage of allocated address space announced: 73.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 96.9 Total number of prefixes smaller than registry allocations: 177009 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 133276 Total APNIC prefixes after maximum aggregation: 36928 APNIC Deaggregation factor: 3.61 Prefixes being announced from the APNIC address blocks: 137306 Unique aggregates announced from the APNIC address blocks: 53553 APNIC Region origin ASes present in the Internet Routing Table: 4985 APNIC Prefixes per ASN: 27.54 APNIC Region origin ASes announcing only one prefix: 1198 APNIC Region transit ASes present in the Internet Routing Table: 866 Average APNIC Region AS path length visible: 4.7 Max APNIC Region AS path length visible: 68 Number of APNIC region 32-bit ASNs visible in the Routing Table: 1160 Number of APNIC addresses announced to Internet: 737099840 Equivalent to 43 /8s, 239 /16s and 64 /24s Percentage of available APNIC address space announced: 86.1 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 131072-135580 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 172029 Total ARIN prefixes after maximum aggregation: 85452 ARIN Deaggregation factor: 2.01 Prefixes being announced from the ARIN address blocks: 173896 Unique aggregates announced from the ARIN address blocks: 81551 ARIN Region origin ASes present in the Internet Routing Table: 16391 ARIN Prefixes per ASN: 10.61 ARIN Region origin ASes announcing only one prefix: 6081 ARIN Region transit ASes present in the Internet Routing Table: 1705 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 22 Number of ARIN region 32-bit ASNs visible in the Routing Table: 251 Number of ARIN addresses announced to Internet: 1053335744 Equivalent to 62 /8s, 200 /16s and 160 /24s Percentage of available ARIN address space announced: 55.7 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 125663 Total RIPE prefixes after maximum aggregation: 63695 RIPE Deaggregation factor: 1.97 Prefixes being announced from the RIPE address blocks: 131171 Unique aggregates announced from the RIPE address blocks: 82803 RIPE Region origin ASes present in the Internet Routing Table: 17789 RIPE Prefixes per ASN: 7.37 RIPE Region origin ASes announcing only one prefix: 8177 RIPE Region transit ASes present in the Internet Routing Table: 2914 Average RIPE Region AS path length visible: 4.9 Max RIPE Region AS path length visible: 32 Number of RIPE region 32-bit ASNs visible in the Routing Table: 3177 Number of RIPE addresses announced to Internet: 691660420 Equivalent to 41 /8s, 57 /16s and 230 /24s Percentage of available RIPE address space announced: 100.6 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 196608-202239 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 58707 Total LACNIC prefixes after maximum aggregation: 10832 LACNIC Deaggregation factor: 5.42 Prefixes being announced from the LACNIC address blocks: 67577 Unique aggregates announced from the LACNIC address blocks: 30704 LACNIC Region origin ASes present in the Internet Routing Table: 2376 LACNIC Prefixes per ASN: 28.44 LACNIC Region origin ASes announcing only one prefix: 656 LACNIC Region transit ASes present in the Internet Routing Table: 470 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 26 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 1370 Number of LACNIC addresses announced to Internet: 168403968 Equivalent to 10 /8s, 9 /16s and 164 /24s Percentage of available LACNIC address space announced: 100.4 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-265628 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 12244 Total AfriNIC prefixes after maximum aggregation: 2884 AfriNIC Deaggregation factor: 4.25 Prefixes being announced from the AfriNIC address blocks: 13110 Unique aggregates announced from the AfriNIC address blocks: 4787 AfriNIC Region origin ASes present in the Internet Routing Table: 732 AfriNIC Prefixes per ASN: 17.91 AfriNIC Region origin ASes announcing only one prefix: 208 AfriNIC Region transit ASes present in the Internet Routing Table: 151 Average AfriNIC Region AS path length visible: 4.6 Max AfriNIC Region AS path length visible: 24 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 63 Number of AfriNIC addresses announced to Internet: 59895296 Equivalent to 3 /8s, 145 /16s and 238 /24s Percentage of available AfriNIC address space announced: 59.5 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5547 4190 71 China Education and Research 4766 2952 11584 925 Korea Telecom 17974 2825 903 77 PT Telekomunikasi Indonesia 7545 2441 336 126 TPG Telecom Limited 4755 1915 411 187 TATA Communications formerly 9829 1671 1322 37 National Internet Backbone 4812 1520 2098 109 China Telecom (Group) 9808 1478 6639 15 Guangdong Mobile Communicatio 4808 1423 2213 429 CNCGROUP IP network China169 9583 1362 112 561 Sify Limited Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 2894 3688 51 BellSouth.net Inc. 22773 2851 2956 144 Cox Communications Inc. 18566 2045 379 184 MegaPath Corporation 7029 2000 1960 317 Windstream Communications Inc 20115 1819 1797 476 Charter Communications 4323 1636 1052 409 tw telecom holdings, inc. 6983 1581 867 250 ITC^Deltacom 30036 1488 309 611 Mediacom Communications Corp 701 1428 11265 708 MCI Communications Services, 22561 1313 409 242 CenturyTel Internet Holdings, Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 34984 1842 298 356 TELLCOM ILETISIM HIZMETLERI A 20940 1496 579 1104 Akamai International B.V. 8402 1328 544 15 OJSC "Vimpelcom" 31148 1045 45 21 Freenet Ltd. 13188 1028 100 36 TOV "Bank-Inform" 8551 952 373 43 Bezeq International-Ltd 6849 829 356 26 JSC "Ukrtelecom" 9198 798 346 32 JSC Kazakhtelecom 6830 790 2339 437 Liberty Global Operations B.V 12479 765 786 96 France Telecom Espana SA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3032 493 237 Telmex Colombia S.A. 28573 2500 2317 107 NET Serviços de Comunicação S 7303 1766 1171 241 Telecom Argentina S.A. 6147 1713 374 30 Telefonica del Peru S.A.A. 8151 1480 3021 426 Uninet S.A. de C.V. 6503 1203 433 58 Axtel, S.A.B. de C.V. 7738 999 1882 41 Telemar Norte Leste S.A. 26615 914 2325 35 Tim Celular S.A. 27947 909 130 52 Telconet S.A 3816 891 383 149 COLOMBIA TELECOMUNICACIONES S Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1395 958 13 TE-AS 24863 958 280 26 Link Egypt (Link.NET) 6713 680 763 35 Office National des Postes et 36992 359 824 29 ETISALAT MISR 24835 308 144 9 Vodafone Data 3741 249 920 212 Internet Solutions 29571 245 22 17 Cote d'Ivoire Telecom 37054 233 19 6 Data Telecom Service 37457 187 161 7 Telkom SA Ltd. 36947 179 807 13 Telecom Algeria Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5547 4190 71 China Education and Research 10620 3032 493 237 Telmex Colombia S.A. 4766 2952 11584 925 Korea Telecom 6389 2894 3688 51 BellSouth.net Inc. 22773 2851 2956 144 Cox Communications Inc. 17974 2825 903 77 PT Telekomunikasi Indonesia 28573 2500 2317 107 NET Serviços de Comunicação S 7545 2441 336 126 TPG Telecom Limited 18566 2045 379 184 MegaPath Corporation 7029 2000 1960 317 Windstream Communications Inc Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 6389 2894 2843 BellSouth.net Inc. 10620 3032 2795 Telmex Colombia S.A. 17974 2825 2748 PT Telekomunikasi Indonesia 22773 2851 2707 Cox Communications Inc. 28573 2500 2393 NET Serviços de Comunicação S 7545 2441 2315 TPG Telecom Limited 4766 2952 2027 Korea Telecom 18566 2045 1861 MegaPath Corporation 4755 1915 1728 TATA Communications formerly 7029 2000 1683 Windstream Communications Inc Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 30662 UNALLOCATED 8.2.129.0/24 3356 Level 3 Communicatio 53506 UNALLOCATED 8.17.102.0/23 3356 Level 3 Communicatio 46467 UNALLOCATED 8.19.192.0/24 46887 Lightower Fiber Netw 20260 UNALLOCATED 8.25.160.0/24 3356 Level 3 Communicatio 20260 UNALLOCATED 8.25.161.0/24 3356 Level 3 Communicatio 46473 UNALLOCATED 8.27.122.0/24 12180 Internap Network Ser 46473 UNALLOCATED 8.27.124.0/24 12180 Internap Network Ser 27205 UNALLOCATED 8.38.16.0/21 6461 Abovenet Communicati 15347 UNALLOCATED 8.224.147.0/24 12064 Cox Communications I 33628 UNALLOCATED 12.0.239.0/24 1239 Sprint Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 5.100.241.0/24 23456 32bit Transition AS 23.252.224.0/20 62502 Xnet Media LLC 23.252.224.0/21 62502 Xnet Media LLC 23.252.232.0/21 62502 Xnet Media LLC 24.231.96.0/24 21548 MTO Telecom Inc. 27.100.7.0/24 56096 >>UNKNOWN<< 31.217.248.0/21 44902 COVAGE NETWORKS SASU 37.16.88.0/23 57652 >>UNKNOWN<< 41.73.1.0/24 37004 >>UNKNOWN<< 41.73.2.0/24 37004 >>UNKNOWN<< Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:12 /10:31 /11:90 /12:262 /13:500 /14:1012 /15:1718 /16:13041 /17:7249 /18:12076 /19:25510 /20:36567 /21:38018 /22:55828 /23:49160 /24:279415 /25:1101 /26:1059 /27:705 /28:17 /29:19 /30:11 /31:1 /32:13 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 22773 2065 2851 Cox Communications Inc. 18566 2000 2045 MegaPath Corporation 6389 1674 2894 BellSouth.net Inc. 30036 1335 1488 Mediacom Communications Corp 6147 1333 1713 Telefonica del Peru S.A.A. 6983 1266 1581 ITC^Deltacom 7029 1219 2000 Windstream Communications Inc 34984 1162 1842 TELLCOM ILETISIM HIZMETLERI A 11492 1144 1195 CABLE ONE, INC. 10620 1067 3032 Telmex Colombia S.A. Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1348 2:677 3:3 4:16 5:1193 6:21 8:772 12:1838 13:4 14:1183 15:17 16:2 17:42 18:21 20:51 23:957 24:1754 27:1817 31:1342 32:40 33:2 34:5 36:157 37:1817 38:1012 39:15 40:238 41:2955 42:348 43:603 44:20 45:80 46:2062 47:28 49:749 50:799 52:12 54:59 55:4 56:8 57:32 58:1197 59:717 60:438 61:1737 62:1242 63:1837 64:4415 65:2284 66:4182 67:2045 68:1092 69:3234 70:876 71:486 72:1986 74:2601 75:374 76:398 77:1603 78:901 79:773 80:1323 81:1287 82:807 83:663 84:713 85:1362 86:429 87:1172 88:500 89:1809 90:138 91:5812 92:804 93:1656 94:1929 95:1303 96:426 97:340 98:1091 99:48 100:67 101:783 103:6058 104:527 105:163 106:187 107:710 108:599 109:1984 110:1069 111:1443 112:733 113:900 114:800 115:1246 116:1213 117:1010 118:1587 119:1373 120:449 121:1021 122:2216 123:1699 124:1477 125:1601 128:644 129:387 130:377 131:933 132:422 133:164 134:322 135:82 136:325 137:317 138:385 139:202 140:229 141:419 142:598 143:445 144:512 145:110 146:676 147:555 148:1053 149:413 150:515 151:642 152:477 153:241 154:396 155:623 156:381 157:331 158:279 159:928 160:332 161:608 162:1856 163:371 164:648 165:669 166:363 167:690 168:1128 169:120 170:1428 171:215 172:60 173:1649 174:699 175:609 176:1518 177:3727 178:2087 179:812 180:1808 181:1809 182:1695 183:565 184:711 185:2321 186:2981 187:1659 188:2019 189:1538 190:7942 191:795 192:7748 193:5562 194:4048 195:3628 196:1662 197:795 198:5321 199:5482 200:6472 201:2910 202:9604 203:9016 204:4681 205:2665 206:3025 207:2962 208:3922 209:3799 210:3657 211:2035 212:2424 213:2197 214:861 215:84 216:5648 217:1710 218:718 219:549 220:1295 221:770 222:685 223:617 End of report

1 0

Draft minutes RIPE 68
by João Damas 07 Nov '14

07 Nov '14

As mentioned during the meeting at RIPE 69 this week, we managed to drop the ball on sending out the minutes from the previous working group meting, at RIPE 68. We are posting those now, below, and open a 2-week period for comments. Regards Joao Damas & Rob Evans Chairs, RIPE Routing WG === RIPE 68 - Routing Working Group 15 May 2014 14:00-16:00 Scribe: Anand Buddhev A. Administrivia João Damas, Working Group Chair, opened the meeting, thanking the stenographer, scribes and chat monitors. The minutes of RIPE 67 were declared approved and Joao asked the RIPE NCC to publish them. B. RDL: A Programmatic Approach to Generating Router Configurations- Benno Overeinder, NLnet Labs The presentation is available at: https://ripe68.ripe.net/presentations/366-ripe68-rdl-20140515.pdf Rudiger Volk, Deutsche Telekom, said that there was a big gap in the presentation about how policies can be applied, particularly in a modular way when a peer has an external relationship. He asked how well this model would work in the real world. Benno replied that this need more work, and he would be happy to involve Rudiger in it. Joao Damas said he understood how RDL helps with documenting, but didn't see the distinction between RDL programming the Autonomous System (AS) and configuring routers. Benno replied that these tools help shape our thoughts. RDL tries to express policy, and not to program routers. YANG and netconf can be used to actually configure routers, and RDL could be transformed into YANG; RDL is part of a toolset to configure routers. Geoff Houston, APNIC, said inter-domain routing is about negotiation. Peers express preferences. An AS cannot express absolute preferences. In routing, peers offer and accept. Geoff said that in RDL, things look more absolute, and can't quite understand what it might be useful for. Rudiger Volk said this engine has two views: one view shows inter-domain relations, which is public. The other view is for intra-domain policy, and probably internal and private. He asked whether RDL provides the ability to publish parts of the configuration as public and private. Andreas Polyrakis, GRNET, said that he was involved in the initial requirements gathering process, and was surprised by the presentation. He said that at the requirements level, many of Geoff's and Rudiger's concerns were listed. He said that RDL is a language to express policy, and a good language needs the ability to express different views of the policy, such as public policy that can be exported to the RIPE Database, and internal policy for use with neighbours. He said that the mailing list archives show that these requirements were indeed listed, but he wasn't sure how much of it was implemented in RDL. However he said Benno and Per were going in the right direction. C. Creating an Automated Prefix Filtering How-To - Job Snijders Job said that there was no good documentation about how to do prefix filtering. He wants the community to put together a how-to or document on how to do filtering, that can beginners can be directed to. He asked whether it was a good idea, and asked for volunteers. Some people raised their hands. Rudiger Volk said it was a good idea to write such a document, but that its biggest challenge would be to get figure out what reliable sources of data to use. Job agreed and said that he starts with the most accurate source and moves on to less and less reliable ones, and hopes for the best. At least documenting this process would be a big help to the community. Geoff Houston said this was not the first time such work had been attempted, and won't be the last time either. Job said he couldn't find references to any previous work. Geoff said it's difficult because one has to differentiate between customer and transit routes, and needs to know one's peer's policy. This isn't easy to do automatically. This is a long-standing problem, and is difficult to solve. He said that RPKI was invented to try and solve this problem, and the technology exists now, but nobody seems to be using it, and he doesn't know why. Job said that a small group of volunteers had stepped up to write this document, so he will set up a mailing list and get the work started. He also said that, if there is a need, they may write some helpful tools because the IRR toolset has been abandoned. Gert Doering, Spacenet, asked the room generally, on how we could get more people to filter. Many networks just accept junk. He referred to ISPs that accept all routes from customers without filtering. João Damas said that with such discussions, the problem is usually one of scope. Talking to external peers for filtering is dodgy. An audience speaker said it wasn't really about inter-domain routing, but more about transit carriers filtering routes from their customers. Rudiger said that a document on how to do filtering would help those who are not filtering. He said it is a valuable idea, but wasn't sure how successful will it be. Elvis Velea, V4Escrow, said that in Romania 99% of ISPs filter based on route objects. They mainly use proprietary scripts against the RIPE Database to generate filters. Gert was very happy to hear this. Elvis said he was surprised that, when he signed contracts with transit providers, they would allow him to announce any prefix without questions. An audience speaker said that, in Romania, most of the prefixes are filtered and must have a route object in the RIPE Database in order to be accepted. Mateo, Jaguar Networks, via remote participation, said that the main problem was getting people to update RIPE Database objects. The problem is worse when the customer is outside the RIPE region. An anonymous audience speaker said that in developing and emerging markets, customer networks change rapidly and is difficult to filter automatically. However, he thought that if there were a document, and perhaps tools to help, it would be appreciated. Elvis Velea said that even if a prefix is from outside the RIPE region, it can be added to the RIPE Database. D. Routing Resilience Manifesto- Andrei Robachevsky, Internet Society The presentation is available at: https://ripe68.ripe.net/presentations/365-20140515-Routing_Resilience.pdf Rudiger Volk said that he would be very reluctant to make statements about a minimum deployable state. A manifesto with minimum requirements has the danger that people who sign it will do no more than that. Setting a minimum target has the danger of not achieving much. This manifesto is a trade-off between a too low and too high mark. Andrei said this work has to start somewhere. Later, we can always introduce a second version of the manifesto with stricter requirements. Gert Doering disagreed with Rudiger. He said that it was important to reach many people. He said we should solve this problem ourselves before regulators come along and solve it for us, and it's a good way forward. He said that, if we reach this target and still need more, we can aim for a second version of the manifest. He supports this effort, and would be happy to have his company sign the manifesto. Daniel Karrenberg, unaffiliated, thanked Andrei for initiating this effort. He said that perhaps the principles should be formulated more generally rather than being too technical. A way forward, to avoid endless discussion, would be to describe the goals rather than a technical implementation. He then added that one should be be careful about perception of the third goal in the manifesto. He said that in this region we have solved it quite well, and having it in the manifesto may create the perception that there is a big issue to solve. Andrei Robachevsky asked Daniel whether some of the text was okay or not. Daniel said that some of the text was perhaps too short but added that Andrei should proceed with it. Andrei said he would take Daniel's feedback into account. Geoff Houston said that, in the IPv6 area, despite lots of documentation about how to implement it, people were not doing it. He said that a similar situation existed in routing. He argued that making such a statement would make it obvious that there exists a problem that is not being solved, and will invite regulatory intervention. Geoff pointed out the example of the route leak from an Indonesian operator, and said that it was not deliberate. He said that we need to understand the causes of incorrect routing, and solve that problem instead of stating the obvious with such a manifesto. Andrei said that the concept of the Tragedy of the Commons cannot be avoided in large communities. He said that our collective collaborative nature can help. He said that by having a manifesto, we make the statement more tangible and visible. Geoff said that this was not a tragedy of the commons type of situation. In a tragedy of commons, one's self-interest is stronger than the common interest. However, this is not the case here. Geoff said that routing problems are not necessarily about self-interest. He summarised by saying that the problem here is more difficult to identify, and that the concept of the Tragedy of Commons does not apply here. Andrei said he would talk to Geoff some more about this later. Sandy Murphy, PARSONS, said that network operators will use prefix-based filters, a common practice to solve the issue of identifying the legitimate origin of a prefix. This solution already appears in many documents about routing security and routing best practices. She asked what it will mean when an operator signs this document. Andrei said that signing this document will mean that an operator is not just agreeing to the principles, but applying them. It will create some sort of peer pressure, and thus carry more weight. He then said that more work was needed in the document to ensure that prefix filtering was not the only recommendation, but more of an example. E. BGP Blackholing Project – Join & Fight! - Łukasz Bromirski, Cisco Systems The presentation is available at: https://ripe68.ripe.net/presentations/369-bgp_bh_ripe.pdf Nick Hilliard, INEX, said that he really likes this tool from a technical viewpoint and would love to become involved in it. He said, however, that politically it is a disaster, and that all kinds of law enforcement agencies, courts and copyright holders would like it. He said it was a socially corrosive project, technically beautiful but covered in layer 9 issues. Lukasz agreed with Nick, and said that he was just trying to achieve something at a technical level. F. Setting up RPKI for Provider Independent (PI) End User Space- Alex Band, RIPE NCC The presentation is available at: https://ripe68.ripe.net/presentations/370-RPKI_for_PI.pdf João thanked Alex for his presentation, saying that that the process seems clear and simple. Erik Bais, A2B Internet, added that he had tried this tool. He asked how it would work for PI users who have moved to other sponsoring organisations. Alex said that he will look into this. G. RIPE Database Routing Update - Denis Walker, RIPE NCC During his presentation, Denis asked some questions of the community. His first question was about cleaning up the syntax of AUT-NUM objects in the RIPE Database. Rudiger Volk said that not everyone was using it in the same way, and that it should not be changed. Denis said he was asking for feedback. If the community feels that nothing is broken and doesn't need a fix then the RIPE NCC will do nothing. He then asked about deletion of orphaned ASN objects and what should be done. Alex le Heux, Kobo Inc., said that the RIPE NCC should do nothing. Rudiger Volk said that a cleanup is not necessary. He said that there's a lot of garbage in the various routing registries in the world. Denis said that "we" don't want garbage in the RIPE Database. Rudiger said that we should just leave things as they are, and not interfere with objects maintained by people. João Damas agreed with Rudiger. He said perhaps warnings were okay, but do not do a cleanup. Alex le Heux said that even warnings may be too much work. He said that the operational impact would be low to none. Nick Hilliard said that RPSL syntax was convoluted such that trying to clean up may cause problems. Denis Walker said that there was an action on the RIPE NCC from the RIPE NCC Services Working Group to clean up these references. João said that the consensus from the Routing Working Group was to not do any cleanup. Denis said that emails were sent to people to clean up their own objects and reference. Some people had done this but most had not. H. Charter Discussion João commented that only Job Snijders had sent feedback on the proposed new charter. He invited the session participants to read it and to comment on the mailing list so that it can be wrapped up before the next RIPE Meeting. Z. AOB There were no other points of business. João thanked the room before closing the session.

1 0

Fwd: [stat-dev] RIPE routing registry (ab)used to legitimize prefix hijacks
by Daniel Karrenberg 06 Nov '14

06 Nov '14

Dear colleagues, maybe this is something you could find time to discuss at today's face-to-face meeting. I believe the points Rene raises are worth considering. I do not have a concrete proposal how to improve this undesirable state of things. Of course RPKI is the a better tool. But do we need to do something here before it is deployed widely? Daniel -------- Forwarded Message -------- Subject: [stat-dev] RIPE routing registry (ab)used to legitimize prefix hijacks Date: Thu, 06 Nov 2014 01:32:29 +0100 From: Rene Wilhelm <wilhelm(a)ripe.net> ... As per the below message from nanog.org list, AS201640 is hijacking a total of eleven routes to IP space scattered all over the world... none of which appears to belong to anybody in or near Bulgaria. Interestingly, as shown in the RIPEstat AS routing consistency widget[*], some of the announcements get a touch of legitimacy by corresponding route objects in the RIPE routing registry; because the IP space is from other RIRs (apnic, afrinic), the usual checks for hierarchical authorization do not apply and hijackers can fool RIPE DB users, claim AS201640 is allowed to originate the hijacked prefixes. Is there anything we can do about that? remove the rogue objects? disallow new route objects with origin AS201640 in non-RIPE space? Do the RIPE DB terms and conditions have clauses which deal with entering false information? Even if it has no impact on the hijack in progress, I think it helps quality and reputation of RIPE routing registry if we act on dubious, most likely false, entries which are brought to our attention. -- Rene [*] https://stat.ripe.net/widget/as-routing-consistency#w.resource=AS201640 -------- Original Message -------- Return-path: <nanog-bounces(a)nanog.org> Envelope-to: wilhelm(a)ripe.net Delivery-date: Wed, 05 Nov 2014 23:00:02 +0100 Received: from koko.ripe.net ([193.0.19.72]) by titi.ripe.net with esmtps (UNKNOWN:AES256-GCM-SHA384:256) (Exim 4.72) (envelope-from <nanog-bounces(a)nanog.org>) id 1Xm8cT-0008Am-OP; Wed, 05 Nov 2014 23:00:01 +0100 Received: from mail.nanog.org ([2001:1838:2001:8::10]) by koko.ripe.net with esmtp (Exim 4.72) (envelope-from <nanog-bounces(a)nanog.org>) id 1Xm8cS-0002Ry-LF; Wed, 05 Nov 2014 23:00:01 +0100 Received: from mail.nanog.org (localhost [127.0.0.1]) by mail.nanog.org (Postfix) with ESMTP id 9D2632D41A9; Wed, 5 Nov 2014 21:59:24 +0000 (UTC) X-Original-To: nanog(a)nanog.org Delivered-To: nanog(a)nanog.org Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mail.nanog.org (Postfix) with ESMTP id C10362D415F for <nanog(a)nanog.org>; Wed, 5 Nov 2014 21:59:17 +0000 (UTC) Received: from segfault-nmh-helo.tristatelogic.com (localhost [127.0.0.1]) by segfault.tristatelogic.com (Postfix) with ESMTP id 297803AF26 for <nanog(a)nanog.org>; Wed, 5 Nov 2014 13:59:17 -0800 (PST) From: Ronald F. Guilmette <rfg(a)tristatelogic.com> To: nanog(a)nanog.org Subject: Hijack factory: AS201640 -- MEGA - SPRED LTD / Michael A. Persaud Date: Wed, 05 Nov 2014 13:59:17 -0800 Message-ID: <81757.1415224757(a)server1.tristatelogic.com> X-BeenThere: nanog(a)nanog.org X-Mailman-Version: 2.1.16 Precedence: list List-Id: North American Network Operators Group <nanog.nanog.org> List-Unsubscribe: <http://mailman.nanog.org/mailman/options/nanog>, <mailto:nanog-request@nanog.org?subject=unsubscribe> List-Archive: <http://mailman.nanog.org/pipermail/nanog/> List-Post: <mailto:nanog@nanog.org> List-Help: <mailto:nanog-request@nanog.org?subject=help> List-Subscribe: <http://mailman.nanog.org/mailman/listinfo/nanog>, <mailto:nanog-request@nanog.org?subject=subscribe> Errors-To: nanog-bounces(a)nanog.org Sender: "NANOG" <nanog-bounces(a)nanog.org> X-RIPE-Spam-Level: + X-RIPE-Spam-Report: Spam Total Points: 1.5 points pts rule name description ---- ---------------------- ------------------------------------ -0.6 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] 4.0 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net) X-RIPE-Signature: b6ab524b1e2ef58d696cc0c68bdb4d998c7e56c7a3ace7a0c536a4fd780385ef I already posted about this rogue AS days ago, but nothing has really changed much, since then, with respect to its hijacking of IP space. Well, at least Brian Krebs was kind anough to write about it: http://krebsonsecurity.com/2014/11/still-spamming-after-all-these-years/ (Please note that that is a convicted felon spamming from the hijacked IP space. He's not allowed to own firearms, but he _can_ apparently own a keyboard.) As of today, AS201640 is still hijacking a total of eleven routes to IP space scattered all over the world... none of which appears to belong to anybody in or near Bulgaria. In fact, it would appear that the organization that is the registrant of AS201640 currently has exactly -zero- IP addresses to call its own. Nobody in a postion to _do_ anything about this gives a darn? As of today: 36.0.56.0/21 41.92.206.0/23 41.198.80.0/20 41.198.224.0/20 61.242.128.0/19 119.227.224.0/19 123.29.96.0/19 177.22.117.0/24 177.46.48.0/22 187.189.158.0/23 202.39.112.0/20

3 2