Hi, the tables bellow show the number of IPv4 and IPv6 blocks per AS that are unreachable in an RPKI route origin validating (ROV) environment (this list is filtered for UK ASNs). (data as of 2018-09-26 12:51 UTC).
Affected networks might soon (by the end of the year) loose the ability to talk to Cloudflare networks since they plan to deploy ROV. I'd encourage everyone to look into the ROAs of affected prefixes (or to ask their customer / responsible IP holder to do that). You can use the RPKI validator https://rpki-validator.ripe.net/bgp-preview or https://bgp.he.net (prefix view) to find the specific affected prefixes for a given ASN. The RIPE RPKI dashboard offers a notification service for these kinds of problems and every operator should use it to get automatic alerts and avoid reduced reachability. https://www.ripe.net/manage-ips-and-asns/resource-management/certification/resource-certification-roa-management If the invalids are expected (i.e. to test ROV) than you can ignore this email (and maybe drop me an email). some more context: https://medium.com/@nusenu/where-are-rpki-unreachable-networks-located-65c7a0bae0f8 kind regards, nusenu amount of RPKI INVALID and unreachable /24 blocks per ASN in UK: +----------+----------------------------------------------------+---------------+ | ASN | (announcing) AS Name | /24 netblocks | +----------+----------------------------------------------------+---------------+ | AS61317 | ASDETUK - Digital Energy Technologies Limited | 157 | | AS20860 | IOMART-AS - iomart Cloud Services Limited. | 37 | | AS203098 | TECHNODATA - Tesonet Ltd | 12 | | AS43323 | VISION247 - Vision247 Ltd | 8 | | AS200358 | BOLTN - BoltN Hosting Limited (Registrar Services) | 4 | | AS9009 | M247 - M247 Ltd | 4 | | AS199455 | ARQWIFI - Virgin WiFi Ltd | 4 | | AS13213 | UK2NET-AS - UK-2 Limited | 3 | | AS41139 | ELECTRAFLUX - Electraflux Ltd | 3 | | AS200707 | APPMAIL - Appmail Ltd | 3 | | AS35017 | SWIFTWAY-AS - Swiftway Sp. z o.o. | 3 | | AS52129 | PROOFPOINT-ASN-EU - Proofpoint Inc. | 2 | | AS41678 | TIBUS - The Internet Business Ltd | 2 | | AS2856 | BT-UK-AS - British Telecommunications PLC | 2 | | AS47631 | SIPCOM-NET1 - SIP Communications PLC | 2 | | AS62240 | CLOUVIDER - Clouvider Limited | 1 | | AS203682 | NEWCMI - Newcmi Limited | 1 | | AS60945 | VELOXSERV - VeloxServ Communications Ltd | 1 | | AS58305 | SYN - SYN LTD | 1 | | AS48967 | BATS_TRADING - Cboe Europe Limited | 1 | | AS203380 | DAINTERNATIONALGROUP - DA International Group Ltd. | 1 | | AS64402 | VMX - VMX Communications LIMITED | 1 | +----------+----------------------------------------------------+---------------+ for IPv6: +----------+-----------------------------------+---------------+ | ASN | (announcing) AS Name | /48 netblocks | +----------+-----------------------------------+---------------+ | AS51055 | BRIDGEP-AS - Bridge Fibre Limited | 65536 | | AS43323 | VISION247 - Vision247 Ltd | 65536 | | AS202222 | BOOSTY - Boosty Limited | 2 | +----------+-----------------------------------+---------------+ -- https://twitter.com/nusenu_
signature.asc
Description: OpenPGP digital signature
