nanog mailing list archives

Re: RPKI coverage statistics


From: Hank Nussbacher <hank () efes iucc ac il>
Date: Tue, 21 Feb 2017 09:25:41 +0200

On 21/02/2017 08:22, Nagarjun Govindraj via NANOG wrote:
I am trying to solve the problem of BGP IP prefix hijack detection for the
AS we own using RPKI system.
But IP addresses covered under RPKI system is very less under 10%.
How is community dealing with UNKNOWN state for the prefixes when queried
against RPKI system.
Suggest reading:
https://www.nanog.org/sites/default/files/3_Gilad_Are_We_There_v1.pdf
from NANOG 69 earlier this month.

Regards,
Hank


Reply from the community members shows that majority are using RPKI system.
Is community using anyother methods on top of RPKI ?

Regards,
Nagarjun


On Mon, Feb 20, 2017 at 3:31 PM Alex Band <alexb () ripe net> wrote:

Hi Nagarjun,

You can find some statistics on adoption, coverage and quality here:

http://certification-stats.ripe.net

https://lirportal.ripe.net/certification/content/static/statistics/world-roas.html
http://rpki.surfnet.nl

All the best,

Alex Band

On 20 Feb 2017, at 06:52, Nagarjun Govindraj via NANOG <nanog () nanog org>
wrote:
Hi All,

where can I found the current coverage of IP prefixes under RPKI system.
Stats like total prefixes issued collectively by all the organisations
like
RIR's/IANA/ISP's.
stats like prefixes coverd under RPKI system.

The goal is to detect the BGP IP prefix hijacking using RPKI system.
I would like to know the coverage before adopting RPKI system.

I would like to know the suggestions from the community on using this
system.

Regards,
Nagarjun




Current thread: