ROA coverage info

Mailman List Mirror (Read Only)
1

Hi all,

I would like to ask you if there is some information about ROA coverage of IPv4/v6 address space in the different RIRs.

Thanks in advance.

Regards,

Fabiano

1 Like
2

FYI

https://www.nro.net/wp-content/uploads/rpki-uploads/rir-adoption.txt

Di

3

Hi Fabiano,

Is this what you are looking for?
https://stat.ripe.net/widget/rpki-by-trust-anchor

Cheers,
Nathalie Trenaman
RIPE NCC

4

There’s also this site run by NIST: https://rpki-monitor.antd.nist.gov/ which contains further breakdowns

5

+1 to RIPE stats.

Here is from NLnet labs: https://www.nlnetlabs.nl/projects/rpki/rpki-analytics/

6

Good morning Nathalie,
thanks for your answer. Does the widget show the ROA percentage covering the IPv4/IPv6 address space registered in the different RIRs? For example it means that now the 44% of the IPv4 space is covered by ROA for RIPE region? Does it mean that during RPKI validation process the 44% of BGP announcements will be Valid/Invalid and the 56% will be NotFound?

Anyway does the widget show the same thing shown in this NIST first slide?
https://rpki-monitor.antd.nist.gov/?p=0&s=1

Thanks,

Fabiano

7

Anyone know why https://rpki-monitor.antd.nist.gov/ is down?

Thanks,
Hank

8

can’t even reach nist.gov.

9

hey,

Anyone know why https://rpki-monitor.antd.nist.gov/ is down?

Their NSes seem to be under DDOS attack on generally unreachable 95% of the time for a few days now.

This is also impacting time.nist.gov and generating a lot of queue in recursive DNSes to a extent that we had to block time.nist.gov and related names in our recursors (obviously there is a lot of equipment out there that has hardcoded time.nist.gov for time sync).