[193754] in North American Network Operators' Group
Re: RPKI coverage statistics
daemon@ATHENA.MIT.EDU (Hank Nussbacher)
Tue Feb 21 04:54:26 2017
X-Original-To: nanog@nanog.org
To: Nagarjun Govindraj <nagarjun.govindraj@imaginea.com>,
"nanog@nanog.org" <nanog@nanog.org>
From: Hank Nussbacher <hank@efes.iucc.ac.il>
Date: Tue, 21 Feb 2017 09:25:41 +0200
In-Reply-To: <CAESotaFdBL8fAkr0qvYmhjQa2WHA5Hpgopf3YEG+B0md3w9Upw@mail.gmail.com>
Errors-To: nanog-bounces@nanog.org
On 21/02/2017 08:22, Nagarjun Govindraj via NANOG wrote:
> I am trying to solve the problem of BGP IP prefix hijack detection for the
> AS we own using RPKI system.
> But IP addresses covered under RPKI system is very less under 10%.
> How is community dealing with UNKNOWN state for the prefixes when queried
> against RPKI system.
Suggest reading:
https://www.nanog.org/sites/default/files/3_Gilad_Are_We_There_v1.pdf
from NANOG 69 earlier this month.
Regards,
Hank
> Reply from the community members shows that majority are using RPKI system.
> Is community using anyother methods on top of RPKI ?
>
> Regards,
> Nagarjun
>
>
> On Mon, Feb 20, 2017 at 3:31 PM Alex Band <alexb@ripe.net> wrote:
>
>> Hi Nagarjun,
>>
>> You can find some statistics on adoption, coverage and quality here:
>>
>> http://certification-stats.ripe.net
>>
>> https://lirportal.ripe.net/certification/content/static/statistics/world-roas.html
>> http://rpki.surfnet.nl
>>
>> All the best,
>>
>> Alex Band
>>
>>> On 20 Feb 2017, at 06:52, Nagarjun Govindraj via NANOG <nanog@nanog.org>
>> wrote:
>>> Hi All,
>>>
>>> where can I found the current coverage of IP prefixes under RPKI system.
>>> Stats like total prefixes issued collectively by all the organisations
>> like
>>> RIR's/IANA/ISP's.
>>> stats like prefixes coverd under RPKI system.
>>>
>>> The goal is to detect the BGP IP prefix hijacking using RPKI system.
>>> I would like to know the coverage before adopting RPKI system.
>>>
>>> I would like to know the suggestions from the community on using this
>>> system.
>>>
>>> Regards,
>>> Nagarjun
>>>
>>
