May 2022 - Test - lists.nanog.org

FYI - 2FA to be come mandatory for ARIN Online? (was: Fwd: [arin-announce] Consultation on Requiring Two-Factor Authentication (2FA) for ARIN Online Accounts
by John Curran 30 May '22

30 May '22

NANOGers - A consultation opened today on potentially requiring use of 2-factor authentication to login into ARIN Online – this would take place once SMS 2FA is deployed. If you think that this is: a) a great idea, b) a bad idea, c) anything else, then feel free to subscribe to the arin-consult mailing list (open to all at http://lists.arin.net/mailman/listinfo/arin-consult) and provide your feedback. Best wishes, /John John Curran President and CEO American Registry for Internet Numbers Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-announce] Consultation on Requiring Two-Factor Authentication (2FA) for ARIN Online Accounts Date: 24 May 2022 at 12:45:48 PM EDT To: "arin-announce(a)arin.net<mailto:arin-announce@arin.net>" <arin-announce(a)arin.net<mailto:arin-announce@arin.net>> **Background** In 2015, ARIN deployed a Time-Based One-Time password (TOTP) implementation of Two-Factor Authentication (2FA). Since the time of implementing that login security feature, 3.2 percent of ARIN Online users have opted to use 2FA with their accounts. Since October 2020, the ARIN Online system has been subject to a series of dictionary-based password guessing attacks. In March of 2021, we conducted ACSP Consultation 2021.2: Password Security for ARIN Online Accounts (https://www.arin.net/participate/community/acsp/consultations/2021/2021-2/) on proposed improvements to increase account security. This consultation resulted in an agreement to move forward with several improvements that have subsequently been deployed. However, we continue to see frequent attacks on our log-in systems, and ARIN staff continues to be heavily engaged in mitigating these attacks. Accounts not using 2FA are susceptible to these attacks. We recently updated the community on this topic during ARIN 49 held in Nashville and online in April. You can review this information from the ARIN 49 Meeting Report (https://www.arin.net/participate/meetings/ARIN49/) by looking for the presentation titled “Brute Force Login Attacks”. It is our intention to make 2FA mandatory for all existing and new ARIN Online accounts going forward. The security of ARIN Online accounts is paramount to the success of the registry, and we do not believe it is tenable to continue without making 2FA required for all ARIN Online accounts. We are currently developing a second method of 2FA use with ARIN Online to add to our long-deployed TOTP implementation. In the coming months, we will deploy a Short Message Service (SMS) 2FA implementation, thereby adding a second 2FA option for ARIN Online users. At that time, users will be able to choose between two types of 2FA – SMS and TOTP. Adoption of TOTP 2FA has been limited in part due to perceived complexity, and the addition of SMS-based 2FA will provide a second option that is easier to use for many customers – and provide much more protection than the simple username-password condition of many ARIN Online user accounts today. (ARIN also plans on adding support for a third 2FA option in the future – Fast Identity Online 2 (FIDO2) – in response to community suggestions, but we do not believe it is prudent to delay requiring 2FA on ARIN Online accounts until that third option becomes available.) **Requiring 2FA For ARIN Online Accounts** By requiring 2FA for ARIN Online accounts that control number resources, the ARIN community should see stronger security for the registry, reduced risk of account fraud attempts, and increased confidence in the integrity of their ARIN resources. ARIN intends to require 2FA for all ARIN Online accounts shortly after SMS-based 2FA authentication is generally available. We are seeking confirmation from the ARIN community regarding this plan, and ask the following consultation question: ------------------- Once SMS-based two-factor authentication (2FA) is available for ARIN Online, do you believe ARIN *should not* proceed with requiring 2FA authentication (SMS-based or TOTP) for all ARIN Online accounts? If so, why? ------------------- The feedback you provide during this consultation will help form our path forward to increasing the security of ARIN Online for all customers. Thank you for your participation in the ARIN Consultation and Suggestion Process. Please provide comments to arin-consult(a)arin.net<mailto:arin-consult@arin.net>. You can subscribe to this mailing list at: http://lists.arin.net/mailman/listinfo/arin-consult This consultation will remain open through 5:00 PM ET on 24 June 2022. Regards, John Curran President and CEO American Registry for Internet Numbers (ARIN) _______________________________________________ ARIN-Announce You are receiving this message because you are subscribed to the ARIN Announce Mailing List (ARIN-announce(a)arin.net) Unsubscribe or manage your mailing list subscription at: https://lists.arin.net/mailman/listinfo/arin-announce Please contact info(a)arin.net if you experience any issues.

16 18

Open source tool for network map visualization
by Marinos Dimolianis 30 May '22

30 May '22

Hi all, I was looking for an open source tool to visualize our network infrastructure in a world map including also our link utilization. Any ideas? Thank you in advance, Marinos

4 3

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 27 May '22

27 May '22

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 28 May, 2022 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 899258 Prefixes after maximum aggregation (per Origin AS): 339060 Deaggregation factor: 2.65 Unique aggregates announced (without unneeded subnets): 433427 Total ASes present in the Internet Routing Table: 73221 Prefixes per ASN: 12.28 Origin-only ASes present in the Internet Routing Table: 62839 Origin ASes announcing only one prefix: 25797 Transit ASes present in the Internet Routing Table: 10382 Transit-only ASes present in the Internet Routing Table: 377 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 66 Max AS path prepend of ASN (267602) 58 Prefixes from unregistered ASNs in the Routing Table: 922 Number of instances of unregistered ASNs: 930 Number of 32-bit ASNs allocated by the RIRs: 39487 Number of 32-bit ASNs visible in the Routing Table: 32740 Prefixes from 32-bit ASNs in the Routing Table: 154208 Number of bogon 32-bit ASNs visible in the Routing Table: 244 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 509 Number of addresses announced to Internet: 3066265472 Equivalent to 182 /8s, 195 /16s and 127 /24s Percentage of available address space announced: 82.8 Percentage of allocated address space announced: 82.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 305546 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 235296 Total APNIC prefixes after maximum aggregation: 66895 APNIC Deaggregation factor: 3.52 Prefixes being announced from the APNIC address blocks: 230516 Unique aggregates announced from the APNIC address blocks: 95039 APNIC Region origin ASes present in the Internet Routing Table: 12684 APNIC Prefixes per ASN: 18.17 APNIC Region origin ASes announcing only one prefix: 3644 APNIC Region transit ASes present in the Internet Routing Table: 1756 Average APNIC Region AS path length visible: 4.7 Max APNIC Region AS path length visible: 31 Number of APNIC region 32-bit ASNs visible in the Routing Table: 7885 Number of APNIC addresses announced to Internet: 774119680 Equivalent to 46 /8s, 36 /16s and 33 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 262331 Total ARIN prefixes after maximum aggregation: 120469 ARIN Deaggregation factor: 2.18 Prefixes being announced from the ARIN address blocks: 262077 Unique aggregates announced from the ARIN address blocks: 126232 ARIN Region origin ASes present in the Internet Routing Table: 19038 ARIN Prefixes per ASN: 13.77 ARIN Region origin ASes announcing only one prefix: 6908 ARIN Region transit ASes present in the Internet Routing Table: 1939 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 35 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4509 Number of ARIN addresses announced to Internet: 1293438976 Equivalent to 77 /8s, 24 /16s and 80 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 258167 Total RIPE prefixes after maximum aggregation: 117921 RIPE Deaggregation factor: 2.19 Prefixes being announced from the RIPE address blocks: 255678 Unique aggregates announced from the RIPE address blocks: 151267 RIPE Region origin ASes present in the Internet Routing Table: 28140 RIPE Prefixes per ASN: 9.09 RIPE Region origin ASes announcing only one prefix: 12025 RIPE Region transit ASes present in the Internet Routing Table: 3972 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 40 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10706 Number of RIPE addresses announced to Internet: 714228352 Equivalent to 42 /8s, 146 /16s and 66 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 114749 Total LACNIC prefixes after maximum aggregation: 27619 LACNIC Deaggregation factor: 4.15 Prefixes being announced from the LACNIC address blocks: 114575 Unique aggregates announced from the LACNIC address blocks: 48660 LACNIC Region origin ASes present in the Internet Routing Table: 10963 LACNIC Prefixes per ASN: 10.45 LACNIC Region origin ASes announcing only one prefix: 2657 LACNIC Region transit ASes present in the Internet Routing Table: 2213 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 66 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8675 Number of LACNIC addresses announced to Internet: 176530176 Equivalent to 10 /8s, 133 /16s and 163 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 27793 Total AfriNIC prefixes after maximum aggregation: 5473 AfriNIC Deaggregation factor: 5.08 Prefixes being announced from the AfriNIC address blocks: 35903 Unique aggregates announced from the AfriNIC address blocks: 11809 AfriNIC Region origin ASes present in the Internet Routing Table: 1635 AfriNIC Prefixes per ASN: 21.96 AfriNIC Region origin ASes announcing only one prefix: 563 AfriNIC Region transit ASes present in the Internet Routing Table: 328 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 34 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 965 Number of AfriNIC addresses announced to Internet: 107659776 Equivalent to 6 /8s, 106 /16s and 194 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9204 8884 43 CHINAMOBILE-CN China Mobile Communicati 7545 5928 789 695 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4709 4192 75 ERX-CERNET-BKB China Education and Rese 7552 3555 1330 19 VIETEL-AS-AP Viettel Group, VN 7713 3485 1039 53 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3423 1880 56 VNPT-AS-VN VNPT Corp, VN 4766 2492 11121 601 KIXS-AS-KR Korea Telecom, KR 9498 2410 499 236 BBIL-AP BHARTI Airtel Ltd., IN 45090 2169 1438 79 TENCENT-NET-AP Shenzhen Tencent Compute 4755 2123 425 214 TATACOMM-AS TATA Communications formerl Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 6470 10358 2808 AMAZON-02, US 11492 4515 299 659 CABLEONE, US 22773 3917 3072 364 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3901 264 31 VIASAT-SP-BACKBONE, US 16625 3529 1817 2528 AKAMAI-AS, US 6327 3442 1319 65 SHAW, CA 749 2866 50792 2124 DNIC-AS-00749, US 30036 2622 373 172 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2448 4961 420 CENTURYLINK-US-LEGACY-QWEST, US 20115 2250 3050 492 CHARTER-20115, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6814 1730 150 UNI2-AS, ES 9121 6735 1692 17 TTNET, TR 8551 3998 374 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 3969 3360 204 AKAMAI-ASN1, NL 39891 3819 220 34 ALJAWWALSTC-AS, SA 12389 2949 2273 908 ROSTELECOM-AS, RU 6849 2927 355 21 UKRTELNET, UA 9009 2471 246 1277 M247, GB 34984 2238 357 628 TELLCOM-AS, TR 47331 2089 328 1602 TTNET, TR Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10655 3404 554 Uninet S.A. de C.V., MX 10620 3480 518 736 Telmex Colombia S.A., CO 11830 2437 369 63 Instituto Costarricense de Electricidad 13999 1833 302 472 Mega Cable, S.A. de C.V., MX 6503 1449 355 527 Axtel, S.A.B. de C.V., MX 28573 1368 2333 255 CLARO S.A., BR 3816 1257 671 148 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1077 369 21 Telefonica del Peru S.A.A., PE 11664 1027 192 442 Techtel LMDS Comunicaciones Interactiva 11172 958 133 61 Alestra, S. de R.L. de C.V., MX Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1655 393 21 LINKdotNET-AS, EG 24835 1466 497 30 RAYA-AS, EG 36992 1314 1519 263 ETISALAT-MISR, EG 36903 1199 545 114 MT-MPLS, MA 29571 956 65 64 ORANGE-COTE-IVOIRE, CI 36935 675 520 42 Vodafone-, EG 6713 611 1863 34 IAM-AS, MA 15399 517 51 37 WANANCHI-, KE 37342 464 32 1 MOVITEL, MZ 23889 423 232 16 MauritiusTelecom, MU Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10655 3404 554 Uninet S.A. de C.V., MX 9808 9204 8884 43 CHINAMOBILE-CN China Mobile Communicati 12479 6814 1730 150 UNI2-AS, ES 9121 6735 1692 17 TTNET, TR 16509 6470 10358 2808 AMAZON-02, US 7545 5928 789 695 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4709 4192 75 ERX-CERNET-BKB China Education and Rese 11492 4515 299 659 CABLEONE, US 8551 3998 374 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 3969 3360 204 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9204 9161 CHINAMOBILE-CN China Mobile Communications Grou 9121 6735 6718 TTNET, TR 12479 6814 6664 UNI2-AS, ES 7545 5928 5233 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4709 4634 ERX-CERNET-BKB China Education and Research Net 8551 3998 3959 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7155 3901 3870 VIASAT-SP-BACKBONE, US 11492 4515 3856 CABLEONE, US 39891 3819 3785 ALJAWWALSTC-AS, SA 20940 3969 3765 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 65454 PRIVATE 1.9.206.0/24 4788 TMNET-AS-AP TM Net, Internet 398083 UNALLOCATED 5.133.124.0/24 399587 UT, US 33123 UNALLOCATED 8.10.69.0/24 11168 SCC, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 395056 UNALLOCATED 8.45.133.0/24 3356 LEVEL3, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.129.40.0/24 Origin: 6461 ZAYO-6461, US 23.129.40.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.129.56.0/24 Origin: 6461 ZAYO-6461, US 23.129.56.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.129.136.0/24 Origin: 6461 ZAYO-6461, US 23.129.136.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.141.0.0/24 Origin: 395350 UNASSIGNED 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.166.208.0/24 Origin: 398906 LUFTCLOUD-ASN-01, US 23.166.208.0/24 Transit: 132132 REPUBLICTELECOM-SG MyRepublic Ltd., SG Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:41 /11:100 /12:303 /13:590 /14:1210 /15:2061 /16:13542 /17:8295 /18:13884 /19:25158 /20:44042 /21:52201 /22:108486 /23:96209 /24:532297 /25:810 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 9121 5891 6735 TTNET, TR 12479 5787 6814 UNI2-AS, ES 8151 4375 10655 Uninet S.A. de C.V., MX 8551 3464 3998 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 3418 4515 CABLEONE, US 6327 3250 3442 SHAW, CA 39891 3131 3819 ALJAWWALSTC-AS, SA 7155 2991 3901 VIASAT-SP-BACKBONE, US 22773 2919 3917 ASN-CXA-ALL-CCI-22773-RDC, US 6849 2778 2927 UKRTELNET, UA Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1927 2:1019 3:154 4:6 5:3794 6:104 7:5 8:1567 9:1 11:173 12:1704 13:295 14:2381 15:202 16:42 17:384 18:162 20:212 21:4 22:188 23:5650 24:2329 25:6 27:2602 29:19 31:2435 32:95 34:4 35:82 36:1773 37:4455 38:2899 39:706 40:152 41:3970 42:1110 43:2184 44:292 45:16097 46:4144 47:324 49:1688 50:2172 51:108 52:1434 54:370 55:750 56:8 57:58 58:1758 59:1168 60:956 61:2260 62:2530 63:1942 64:5533 65:2333 66:4855 67:2978 68:1192 69:4177 70:1332 71:685 72:3053 74:2644 75:1393 76:586 77:2171 78:3921 79:3115 80:1994 81:1750 82:1497 83:1211 84:1365 85:3682 86:711 87:1971 88:2757 89:3297 90:535 91:7626 92:2017 93:2598 94:3501 95:4817 96:1311 97:349 98:998 99:737 100:77 101:1046 102:2066 103:29136 104:4418 105:457 106:876 107:2527 108:842 109:4262 110:2040 111:3308 112:2036 113:1538 114:1484 115:1977 116:1917 117:2507 118:2313 119:1838 120:1696 121:1075 122:2580 123:2101 124:1589 125:2128 128:1231 129:1090 130:979 131:2054 132:770 133:378 134:1906 135:291 136:882 137:862 138:2435 139:1506 140:862 141:1420 142:1292 143:1431 144:1209 145:347 146:1816 147:1492 148:2211 149:1730 150:852 151:1080 152:1849 153:459 154:3464 155:1425 156:1840 157:1236 158:1046 159:2205 160:2521 161:1283 162:3459 163:1273 164:1658 165:1605 166:728 167:1710 168:3777 169:833 170:4480 171:831 172:3181 173:3123 174:1024 175:1123 176:3590 177:4660 178:3551 179:2024 180:2290 181:2999 182:3256 183:1954 184:2371 185:19514 186:4265 187:3784 188:3885 189:3279 190:8894 191:1304 192:11006 193:8626 194:7020 195:4964 196:2969 197:2374 198:5997 199:6047 200:7574 201:5732 202:10500 203:10037 204:4544 205:3446 206:3757 207:3380 208:4016 209:4662 210:4305 211:2460 212:4042 213:3432 214:1155 215:67 216:6469 217:2672 218:1284 219:571 220:1949 221:980 222:842 223:2159 End of report

1 0

BGP Javascript Map/Visualization
by Brian Johnson 26 May '22

26 May '22

Hey all, Sorry for the noise. Years ago someone here built and shared a javascript visualization of what their routers saw for the state of BGP and paths to get to various ASs. One could use WSAD and other keys to fly around and examine various other ASs. I thought it was as2814.net, but that seems to not be a thing anymore. Can someone refresh my memory where that might be? Or did it get taken down? Thanks in advance, - brian

6 5

New "Internet Innovators" w/ Mother of the Internet + More!
by Nanog News 26 May '22

26 May '22

Sign Up for NANOG 85 Peering Forum TODAY! *Register Now for N85, Happening 6 - 8 JUN in Montréal* It's not too late! Sign up today for your table at the Peering Coordination Forum, taking place at 5 pm EST on Monday, 6 JUN 2022 at NANOG 85. *SIGN UP <https://www.nanog.org/events/nanog-85/peering-forum/>* New Episode of "Internet Innovators" *Candid Interview w/ Iconic "Mother of the Internet" Radia Perlman * Known as the "Mother of the Internet," this Internet icon is no stranger to standing out in a crowd in a heavily male-dominated industry. NANOG executive director Edward McNair had the pleasure of speaking with Radia Perlman at our last meeting, NANOG 84, in Austin, TX. Perlman's dynamic, warm personality and fearless ability "to be different" has changed the digital landscape for the world. Watch the full episode and learn more about the icon behind the technology now. *WATCH NOW * <https://www.nanog.org/news-stories/nanog-tv/internet-innovators/internet-in…> NANOG 85 Guest Appearance: Vint Cerf + John Brzozowski *Cerf + Brzozowski To Share Thoughts on IPv6 in Celebration of the 10th Anniversary of World IPv6 Launch Day* Don't miss this opening keynote presentation with a father of the Internet and Google evangelist, Vint Cerf, and John Brzozowski, CTO & VP of MachineQ, as they host an intriguing conversation on IPv6. Register for NANOG 85 and download this talk into your calendar. *REGISTER NOW <https://www.nanog.org/events/nanog-85/registration/>* Virtual Attendees: Have You Registered for NANOG 85 Yet? You can feel like you're in the room, too - use the chat window on our streaming platform to talk with other attendees in chat or submit a question for Q+A in real-time. *SEE FULL AGENDA * <https://www.nanog.org/events/nanog-85/nanog-85-agenda/>

1 0

FW: [arin-announce] ARIN Community Grant Program Application Deadline Extended
by John Sweeting 25 May '22

25 May '22

NANOGers - The ARIN Community Grant Program has extended the 2022 "call for applications” until 15 June. If you are aware of a non-commercial development or research project that could enhance Internet operations and might benefit from additional funding, please bring this opportunity to their attention. More information noted below. Thanks! John S. CCO, ARIN On 5/25/22, 12:52 PM, "ARIN-announce on behalf of ARIN" <arin-announce-bounces(a)arin.net on behalf of info(a)arin.net> wrote: If you have a project that needs funding, is non-commercial in nature, and benefits the Internet community within the ARIN service region, it’s not too late to apply to the 2022 ARIN Community Grant Program. The application deadline has been extended to 15 June 2022, so send your application in today: https://arin.smapply.net/prog/grants2022/ If you’re not familiar with ARIN’s Community Grant Program, learn more about it at: https://www.arin.net/grants or read our recent blog on the Top 5 Reasons to Apply for an ARIN Community Grant: https://www.arin.net/blog/2022/05/25/top-5-reasons-apply-grant-program/ ------------- About the ARIN Community Grant Program The ARIN Community Grant Program provides financial grants in support of operational and research projects that improve the overall Internet industry and Internet user environment that advance ARIN’s mission and broadly benefit the Internet community within the ARIN region. Projects must fit into one or more of these four broad categories: - Internet technical improvements that promote and facilitate the expansion, development, and growth of the infrastructure of the Internet consistent with the public interest - Registry processes and technology improvements that help maintain a globally consistent and highly usable Internet Number Registry system - Informational outreach that advances the Internet on topics such as, but not limited to: IPv6 deployment, Internet research, and Internet governance - Research related to ARIN’s mission and operations For 2022, the ARIN Board of Trustees has approved a total expenditure of up to $60,000 (USD) for grants of varying amounts, starting at $1,000 to $20,000 (USD) and based on project need. We encourage all applicants to clearly demonstrate how projects meet eligibility guidelines and selection criteria through the application form to improve chances of selection. ARIN looks forward to funding important projects through the ARIN Community Grant Program in 2022. Regards, American Registry for Internet Numbers (ARIN) _______________________________________________ ARIN-Announce You are receiving this message because you are subscribed to the ARIN Announce Mailing List (ARIN-announce(a)arin.net) Unsubscribe or manage your mailing list subscription at: https://lists.arin.net/mailman/listinfo/arin-announce Please contact info(a)arin.net if you experience any issues.

1 0

RE: Newbie x Cisco IOS-XR x ROV: BCP to not harassing peer(s)
by Jakob Heitz (jheitz) 24 May '22

24 May '22

This attack will work very well until the victim starts advertising its prefix. The victim may not notice the fake advertisement because the fake advertisement will not reach the victim AS due to AS-path loop checking. So potential victims must advertise all prefixes that they register in RPKI or subscribe to an Internet monitoring service to detect the fake advertisements. And don't forget maxlen. You must advertise in BGP every prefix covered by maxlen. Regards, Jakob. -----Original Message----- From: Saku Ytti <saku(a)ytti.fi> On Tue, 24 May 2022 at 11:23, Max Tulyev <maxtul(a)netassist.ua> wrote: > To make a working hijack of the routed prefix (for sniffing traffic, > DDoS or something similar), you have to announce a more specific > prefix(es). It can be denied by RPKI. > > If you signed RPKI prefix is still unannounced - yes, somebody can > hijack it by forging the origin ASN - that's quite easy. This axiomatically assumes first come, first serve, which is obviously not complete understanding of BGP best path algorithm. -- ++ytti

2 1

Question re prevention of enumeration with DNSSEC (NSEC3, etc.)
by Amir Herzberg 24 May '22

24 May '22

Hi NANOGers, I have a small question re DNSSEC `proof of non-existence' records: NSEC, NSEC3 and the (dead?) NSEC5 proposal. <begin background (probably known to all/most):> NSEC3 was motivated as a method to prevent Zone enumeration, then Berenstein showed its defense is pretty weak. RFC7129 (White Lies) prevents this enumeration attack but requires online signing with the zone's key, which introduces another vulnerability and, of course, overhead of online-signing. NSEC5 was proposed to prevent enumeration without online signing, so arguably more secure than RFC7129, but has comparable online overhead and appears `dead'; the I-D expired (last update July'17). Note that NSEC3 also supports `opt-out', which reduces overhead for adoptions in domains with many non-adopting ASes, and I believe is not supported by NSEC. <end background> Questions: - Do you find zone enumeration a real concern? - Do you think the white-lies countermeasure is sufficient and fine, or do you have security and/or performance concern (or just think it's pointless)? - and the final question... would you think an alternative to NSEC5 which will be more efficient and simpler would be of potential practical importance, or just a nice academic `exercise'? I'm really unsure about these questions - esp. the last one - and your feedback may help me decide on the importance of this line of research. Just fun or of possible practical importance? thanks and peace, Amir -- Amir Herzberg Comcast professor of Security Innovations, Computer Science and Engineering, University of Connecticut Homepage: https://sites.google.com/site/amirherzberg/home `Applied Introduction to Cryptography' textbook and lectures: https://sites.google.com/site/amirherzberg/applied-crypto-textbook <https://sites.google.com/site/amirherzberg/applied-crypto-textbook>

14 25

RE: Newbie x Cisco IOS-XR x ROV: BCP to not harassing peer(s)
by Jakob Heitz (jheitz) 24 May '22

24 May '22

To address the risk of somebody exhausting your memory by dumping a ton of routes on you, we added two new options to "soft-reconfiguration inbound" in IOS-XR. RPKI-dropped-only Saves a copy of only the routes dropped by an RPKI validation-state test in neighbor-in route-policy. RPKI-tested-only Saves a copy of only the routes tested in an RPKI validation-state test in neighbor-in route-policy. This was released in 7.3.1 in Feb 2021. The bug CSCwb17937 was fixed in 7.5.2, just released. Fixed a few other things in 7.5.2 also. Tomoya, apologies that you had a terrible time with it. Regards, Jakob. -----Original Message----- Date: Wed, 11 May 2022 14:31:28 -0700 From: Randy Bush <randy(a)psg.com> To: Pirawat WATANAPONGSE via NANOG <nanog(a)nanog.org> Subject: Re: Newbie x Cisco IOS-XR x ROV: BCP to not harassing peer(s) and upstream(s) Message-ID: <m2lev7kb7z.wl-randy(a)psg.com> Content-Type: text/plain; charset=US-ASCII > Is setting 'Soft Reconfiguration' enough for me to keep ROV running? yes, should be. > If not, is there any other solution? yes. jakob says he has implemented https://datatracker.ietf.org/doc/draft-ietf-sidrops-rov-no-rr/, though i do not known in what xr image(s) randy

7 11

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 20 May '22

20 May '22

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 21 May, 2022 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 898401 Prefixes after maximum aggregation (per Origin AS): 338496 Deaggregation factor: 2.65 Unique aggregates announced (without unneeded subnets): 432821 Total ASes present in the Internet Routing Table: 73208 Prefixes per ASN: 12.27 Origin-only ASes present in the Internet Routing Table: 62857 Origin ASes announcing only one prefix: 25798 Transit ASes present in the Internet Routing Table: 10351 Transit-only ASes present in the Internet Routing Table: 379 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 66 Max AS path prepend of ASN (267602) 58 Prefixes from unregistered ASNs in the Routing Table: 920 Number of instances of unregistered ASNs: 925 Number of 32-bit ASNs allocated by the RIRs: 39435 Number of 32-bit ASNs visible in the Routing Table: 32698 Prefixes from 32-bit ASNs in the Routing Table: 154112 Number of bogon 32-bit ASNs visible in the Routing Table: 234 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 550 Number of addresses announced to Internet: 3065123456 Equivalent to 182 /8s, 178 /16s and 18 /24s Percentage of available address space announced: 82.8 Percentage of allocated address space announced: 82.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 305118 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 235350 Total APNIC prefixes after maximum aggregation: 66814 APNIC Deaggregation factor: 3.52 Prefixes being announced from the APNIC address blocks: 230530 Unique aggregates announced from the APNIC address blocks: 94912 APNIC Region origin ASes present in the Internet Routing Table: 12666 APNIC Prefixes per ASN: 18.20 APNIC Region origin ASes announcing only one prefix: 3622 APNIC Region transit ASes present in the Internet Routing Table: 1747 Average APNIC Region AS path length visible: 4.7 Max APNIC Region AS path length visible: 32 Number of APNIC region 32-bit ASNs visible in the Routing Table: 7862 Number of APNIC addresses announced to Internet: 774272768 Equivalent to 46 /8s, 38 /16s and 119 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 261942 Total ARIN prefixes after maximum aggregation: 120183 ARIN Deaggregation factor: 2.18 Prefixes being announced from the ARIN address blocks: 261791 Unique aggregates announced from the ARIN address blocks: 126089 ARIN Region origin ASes present in the Internet Routing Table: 19046 ARIN Prefixes per ASN: 13.75 ARIN Region origin ASes announcing only one prefix: 6916 ARIN Region transit ASes present in the Internet Routing Table: 1938 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 35 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4503 Number of ARIN addresses announced to Internet: 1292504064 Equivalent to 77 /8s, 10 /16s and 12 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 257788 Total RIPE prefixes after maximum aggregation: 117753 RIPE Deaggregation factor: 2.19 Prefixes being announced from the RIPE address blocks: 255188 Unique aggregates announced from the RIPE address blocks: 151009 RIPE Region origin ASes present in the Internet Routing Table: 28148 RIPE Prefixes per ASN: 9.07 RIPE Region origin ASes announcing only one prefix: 12033 RIPE Region transit ASes present in the Internet Routing Table: 3967 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 40 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10708 Number of RIPE addresses announced to Internet: 713994624 Equivalent to 42 /8s, 142 /16s and 177 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 114731 Total LACNIC prefixes after maximum aggregation: 27608 LACNIC Deaggregation factor: 4.16 Prefixes being announced from the LACNIC address blocks: 114561 Unique aggregates announced from the LACNIC address blocks: 48615 LACNIC Region origin ASes present in the Internet Routing Table: 10950 LACNIC Prefixes per ASN: 10.46 LACNIC Region origin ASes announcing only one prefix: 2666 LACNIC Region transit ASes present in the Internet Routing Table: 2195 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 66 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8664 Number of LACNIC addresses announced to Internet: 176484608 Equivalent to 10 /8s, 132 /16s and 241 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 27670 Total AfriNIC prefixes after maximum aggregation: 5449 AfriNIC Deaggregation factor: 5.08 Prefixes being announced from the AfriNIC address blocks: 35781 Unique aggregates announced from the AfriNIC address blocks: 11747 AfriNIC Region origin ASes present in the Internet Routing Table: 1632 AfriNIC Prefixes per ASN: 21.92 AfriNIC Region origin ASes announcing only one prefix: 561 AfriNIC Region transit ASes present in the Internet Routing Table: 326 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 34 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 961 Number of AfriNIC addresses announced to Internet: 107563520 Equivalent to 6 /8s, 105 /16s and 74 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9166 8884 43 CHINAMOBILE-CN China Mobile Communicati 7545 5898 789 695 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4709 4192 75 ERX-CERNET-BKB China Education and Rese 7552 3591 1330 19 VIETEL-AS-AP Viettel Group, VN 7713 3491 1039 53 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3426 1880 56 VNPT-AS-VN VNPT Corp, VN 4766 2494 11121 601 KIXS-AS-KR Korea Telecom, KR 9498 2408 499 237 BBIL-AP BHARTI Airtel Ltd., IN 45090 2169 1438 79 TENCENT-NET-AP Shenzhen Tencent Compute 4755 2120 438 204 TATACOMM-AS TATA Communications formerl Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 6414 10351 2772 AMAZON-02, US 11492 4510 299 660 CABLEONE, US 22773 3913 3067 353 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3901 264 31 VIASAT-SP-BACKBONE, US 16625 3539 1821 2534 AKAMAI-AS, US 6327 3438 1318 62 SHAW, CA 749 2881 50795 2138 DNIC-AS-00749, US 30036 2634 374 120 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2466 4961 421 CENTURYLINK-US-LEGACY-QWEST, US 20115 2250 3050 492 CHARTER-20115, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6799 1730 150 UNI2-AS, ES 9121 6720 1692 17 TTNET, TR 8551 3996 374 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 3973 3360 201 AKAMAI-ASN1, NL 39891 3819 220 34 ALJAWWALSTC-AS, SA 12389 2949 2273 908 ROSTELECOM-AS, RU 6849 2927 355 21 UKRTELNET, UA 9009 2489 249 1295 M247, GB 34984 2242 357 627 TELLCOM-AS, TR 47331 2087 328 1598 TTNET, TR Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10596 3396 568 Uninet S.A. de C.V., MX 10620 3472 518 743 Telmex Colombia S.A., CO 11830 2437 369 63 Instituto Costarricense de Electricidad 13999 1823 300 468 Mega Cable, S.A. de C.V., MX 6503 1447 355 527 Axtel, S.A.B. de C.V., MX 28573 1382 2333 255 CLARO S.A., BR 3816 1257 671 148 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1079 369 21 Telefonica del Peru S.A.A., PE 11664 1022 192 445 Techtel LMDS Comunicaciones Interactiva 11172 958 133 61 Alestra, S. de R.L. de C.V., MX Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1653 393 21 LINKdotNET-AS, EG 24835 1441 497 29 RAYA-AS, EG 36992 1313 1519 263 ETISALAT-MISR, EG 36903 1199 545 114 MT-MPLS, MA 29571 947 65 57 ORANGE-COTE-IVOIRE, CI 36935 619 520 42 Vodafone-, EG 6713 611 1863 34 IAM-AS, MA 15399 516 51 36 WANANCHI-, KE 37342 465 32 1 MOVITEL, MZ 23889 423 232 16 MauritiusTelecom, MU Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10596 3396 568 Uninet S.A. de C.V., MX 9808 9166 8884 43 CHINAMOBILE-CN China Mobile Communicati 12479 6799 1730 150 UNI2-AS, ES 9121 6720 1692 17 TTNET, TR 16509 6414 10351 2772 AMAZON-02, US 7545 5898 789 695 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4709 4192 75 ERX-CERNET-BKB China Education and Rese 11492 4510 299 660 CABLEONE, US 8551 3996 374 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 3973 3360 201 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9166 9123 CHINAMOBILE-CN China Mobile Communications Grou 9121 6720 6703 TTNET, TR 12479 6799 6649 UNI2-AS, ES 7545 5898 5203 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4709 4634 ERX-CERNET-BKB China Education and Research Net 8551 3996 3957 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7155 3901 3870 VIASAT-SP-BACKBONE, US 11492 4510 3850 CABLEONE, US 39891 3819 3785 ALJAWWALSTC-AS, SA 20940 3973 3772 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 65454 PRIVATE 1.9.206.0/24 4788 TMNET-AS-AP TM Net, Internet 398083 UNALLOCATED 5.133.124.0/24 399587 UT, US 33123 UNALLOCATED 8.10.69.0/24 11168 SCC, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 395056 UNALLOCATED 8.45.133.0/24 3356 LEVEL3, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.129.40.0/24 Origin: 6461 ZAYO-6461, US 23.129.40.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.129.56.0/24 Origin: 6461 ZAYO-6461, US 23.129.56.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.129.136.0/24 Origin: 6461 ZAYO-6461, US 23.129.136.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.8.0/24 Origin: 3257 GTT-BACKBONE GTT, US 23.131.8.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.88.0/24 Origin: 3257 GTT-BACKBONE GTT, US 23.131.88.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:41 /11:100 /12:303 /13:590 /14:1210 /15:2059 /16:13526 /17:8287 /18:13889 /19:25188 /20:43913 /21:52216 /22:108436 /23:96172 /24:531636 /25:806 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 9121 5876 6720 TTNET, TR 12479 5775 6799 UNI2-AS, ES 8151 4323 10596 Uninet S.A. de C.V., MX 8551 3462 3996 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 3415 4510 CABLEONE, US 6327 3250 3438 SHAW, CA 39891 3131 3819 ALJAWWALSTC-AS, SA 7155 2991 3901 VIASAT-SP-BACKBONE, US 22773 2918 3913 ASN-CXA-ALL-CCI-22773-RDC, US 6849 2778 2927 UKRTELNET, UA Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1937 2:1021 3:154 4:6 5:3789 6:104 7:5 8:1566 9:1 11:173 12:1711 13:296 14:2382 15:201 16:41 17:384 18:161 20:212 21:4 22:188 23:5668 24:2315 25:6 27:2602 29:19 31:2424 32:95 34:4 35:78 36:1757 37:4424 38:2882 39:698 40:152 41:3966 42:1092 43:2175 44:291 45:16047 46:4139 47:322 49:1701 50:2158 51:108 52:1427 54:369 55:747 56:8 57:59 58:1812 59:1213 60:948 61:2259 62:2513 63:1946 64:5524 65:2313 66:4865 67:2975 68:1193 69:4172 70:1330 71:685 72:3052 74:2651 75:1392 76:579 77:2164 78:3914 79:3112 80:1989 81:1742 82:1494 83:1209 84:1357 85:3666 86:709 87:1959 88:2744 89:3280 90:531 91:7639 92:2017 93:2590 94:3488 95:4773 96:1309 97:349 98:993 99:736 100:76 101:1044 102:2050 103:29071 104:4387 105:463 106:874 107:2517 108:832 109:4258 110:2032 111:3287 112:2031 113:1553 114:1487 115:1976 116:1915 117:2510 118:2330 119:1839 120:1696 121:1076 122:2580 123:2120 124:1586 125:2127 128:1231 129:1104 130:976 131:2063 132:769 133:378 134:1900 135:290 136:880 137:862 138:2443 139:1504 140:861 141:1403 142:1288 143:1441 144:1201 145:346 146:1811 147:1491 148:2217 149:1729 150:851 151:1081 152:1849 153:459 154:3472 155:1418 156:1839 157:1234 158:1045 159:2168 160:2514 161:1275 162:3462 163:1273 164:1650 165:1605 166:721 167:1708 168:3781 169:840 170:4489 171:828 172:3175 173:3144 174:1021 175:1129 176:3589 177:4649 178:3545 179:2034 180:2284 181:3008 182:3250 183:1954 184:2375 185:19492 186:4295 187:3748 188:3882 189:3272 190:8860 191:1307 192:10993 193:8616 194:7000 195:4978 196:2954 197:2375 198:5999 199:6035 200:7496 201:5726 202:10490 203:10033 204:4546 205:3450 206:3764 207:3381 208:4019 209:4652 210:4324 211:2458 212:4056 213:3444 214:1149 215:67 216:6474 217:2668 218:1267 219:571 220:1940 221:979 222:843 223:2154 End of report

1 0