[156424] in North American Network Operators' Group
Re: [arin-announce] Resource Public Key Infrastructure (RPKI) Now
daemon@ATHENA.MIT.EDU (Alex Band)
Tue Sep 18 03:33:12 2012
From: Alex Band <alexb@ripe.net>
In-Reply-To: <CC7CBE45.7B493%markk@arin.net>
Date: Tue, 18 Sep 2012 09:32:12 +0200
To: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
The first ROAs created in the ARIN system are starting to appear:
https://dl.dropbox.com/u/26242517/ARIN_ROAs_20120918.png
Check the progress in our public RPKI Validator testbed (hosted by =
EuroTransit and connected to a Juniper running 12.2 with BGP Origin =
Validation support):
http://rpki01.fra2.de.euro-transit.net:8080
Public testbed info at the bottom of this page:=20
http://www.ripe.net/certification/tools-and-resources
-Alex
On 17 Sep 2012, at 17:51, Mark Kosters <markk@arin.net> wrote:
> Hi
>=20
> This announcement may be of interest to many of you.
>=20
> Regards,
> Mark
>=20
> From: INFO <info@arin.net<mailto:info@arin.net>>
> Date: Monday, September 17, 2012 9:59 AM
> To: "arin-announce@arin.net<mailto:arin-announce@arin.net>" =
<arin-announce@arin.net<mailto:arin-announce@arin.net>>
> Subject: [arin-announce] Resource Public Key Infrastructure (RPKI) Now =
Available to ARIN Customers
>=20
> ARIN is proud to announce that ARIN resource holders with either a =
signed RSA or LRSA may now participate in RPKI through ARIN Online. =
Additionally, those wishing to validate RPKI information may do so after =
requesting a Trust Anchor Locator (TAL). ARIN=92s TAL is required to =
validate information from ARIN=92s RPKI repository.
>=20
> RPKI is a free, opt-in service that allows users to certify their =
Internet number resources to help secure Internet routing. This =
initiative has been developed within the IETF's SIDR Working Group, with =
involvement from Regional Internet Registries (RIRs), and numerous =
Internet Service Providers (ISPs).
>=20
> ARIN encourages members of the Internet community to certify their =
resources through RPKI. Internet routing today is vulnerable to =
hijacking and the provisioning/use of certificates is one of steps =
required to make routing more secure. Widespread RPKI adoption will =
help simplify IP address holder verification and routing decision-making =
on the Internet.
>=20
> ARIN plans to continually review and improve RPKI based upon user =
feedback. Users are encouraged to report any issues via the =
arin-tech-discuss mailing list.
>=20
> For more information about this crucial step in securing Internet =
routing as well as future enhancement plans, visit ARIN=92s RPKI Home =
Page at https://www.arin.net/resources/rpki/index.html.
>=20
> Regards,
>=20
> Mark Kosters
> Chief Technical Officer (CTO)
> American Registry for Internet Numbers (ARIN)
>=20
