On 24/08/2020 17:49, Rayhaan Jaufeerally (NANOG) wrote:

There's also this site run by NIST: https://rpki-monitor.antd.nist.gov/ <https://rpki-monitor.antd.nist.gov/> which contains further breakdowns

Anyone know why https://rpki-monitor.antd.nist.gov/ is down? Thanks, Hank

hey,

Anyone know why https://rpki-monitor.antd.nist.gov/ is down?

Their NSes seem to be under DDOS attack on generally unreachable 95% of the time for a few days now. This is also impacting time.nist.gov and generating a lot of queue in recursive DNSes to a extent that we had to block time.nist.gov and related names in our recursors (obviously there is a lot of equipment out there that has hardcoded time.nist.gov for time sync). -- tarko

Good morning Nathalie, thanks for your answer. Does the widget show the ROA percentage covering the IPv4/IPv6 address space registered in the different RIRs? For example it means that now the 44% of the IPv4 space is covered by ROA for RIPE region? Does it mean that during RPKI validation process the 44% of BGP announcements will be Valid/Invalid and the 56% will be NotFound? Anyway does the widget show the same thing shown in this NIST first slide? https://rpki-monitor.antd.nist.gov/?p=0&s=1 Thanks, Fabiano Il giorno lun 24 ago 2020 alle ore 16:43 Nathalie Trenaman < nathalie@ripe.net> ha scritto:

Hi Fabiano,

Is this what you are looking for? https://stat.ripe.net/widget/rpki-by-trust-anchor

Cheers, Nathalie Trenaman RIPE NCC

Op 24 aug. 2020, om 15:21 heeft Fabiano D'Agostino < fabiano.dagostino96@gmail.com> het volgende geschreven:

Hi all, I would like to ask you if there is some information about ROA coverage of IPv4/v6 address space in the different RIRs.

Thanks in advance.

Regards,

Fabiano