[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

the prefixes that wont be able to reach Cloudflare by the end of the year (unless RPKI ROAs are fixed)



Hi,

apparently Cloudflare will be enforcing RPKI route origin validation
"by the end of the year" [1].

https://blog.cloudflare.com/rpki-details/

If this is actually the case then some prefixes run at risk of loosing
the ability to reach Cloudflare.

This is a heads-up so you can check if you would be affected,
you can ctrl-f the list of 75 prefixes (ARIN region only)
bellow for your prefix or ASN.

(data as of 2018-09-19 14:06 UTC)


https://bgp.he.net/net/168.245.235.0/24  (AS13428)
https://bgp.he.net/net/69.28.67.0/24  (AS13768)
https://bgp.he.net/net/69.28.82.0/23  (AS13768)
https://bgp.he.net/net/68.64.234.0/24  (AS14237)
https://bgp.he.net/net/209.24.0.0/24  (AS15562)
https://bgp.he.net/net/172.98.214.0/24  (AS17139)
https://bgp.he.net/net/66.85.44.0/24  (AS19437)
https://bgp.he.net/net/23.139.0.0/24  (AS20860)
https://bgp.he.net/net/68.64.227.0/24  (AS262913)
https://bgp.he.net/net/192.136.187.0/24  (AS26827)
https://bgp.he.net/net/208.76.33.0/24  (AS26938)
https://bgp.he.net/net/208.76.39.0/24  (AS26938)
https://bgp.he.net/net/68.64.231.0/24  (AS30167)
https://bgp.he.net/net/192.133.106.0/24  (AS33060)
https://bgp.he.net/net/192.133.107.0/24  (AS33060)
https://bgp.he.net/net/192.209.63.0/24  (AS393398)
https://bgp.he.net/net/198.28.13.0/24  (AS393451)
https://bgp.he.net/net/2606:8e80:3000::/48  (AS394308)
https://bgp.he.net/net/2606:8e80:1000::/48  (AS394497)
https://bgp.he.net/net/2606:8e80:4000::/48  (AS394497)
https://bgp.he.net/net/2606:8e80::/48  (AS394497)
https://bgp.he.net/net/2606:8e80:5000::/48  (AS394497)
https://bgp.he.net/net/2606:8e80:2000::/48  (AS394644)
https://bgp.he.net/net/2606:8e80:4000::/48  (AS394644)
https://bgp.he.net/net/104.245.239.0/24  (AS395970)
https://bgp.he.net/net/172.98.209.0/24  (AS395970)
https://bgp.he.net/net/172.98.210.0/24  (AS395970)
https://bgp.he.net/net/172.98.212.0/24  (AS395970)
https://bgp.he.net/net/172.98.214.0/24  (AS395970)
https://bgp.he.net/net/172.98.215.0/24  (AS395970)
https://bgp.he.net/net/172.98.208.0/24  (AS41139)
https://bgp.he.net/net/172.98.211.0/24  (AS41139)
https://bgp.he.net/net/172.98.213.0/24  (AS41139)
https://bgp.he.net/net/168.245.223.0/24  (AS43181)
https://bgp.he.net/net/208.84.64.0/24  (AS52129)
https://bgp.he.net/net/208.86.200.0/24  (AS52129)
https://bgp.he.net/net/199.68.168.0/22  (AS53429)
https://bgp.he.net/net/199.68.175.0/24  (AS53429)
https://bgp.he.net/net/162.208.108.0/24  (AS55079)
https://bgp.he.net/net/162.208.109.0/24  (AS55079)
https://bgp.he.net/net/162.208.110.0/24  (AS55079)
https://bgp.he.net/net/162.208.111.0/24  (AS55079)
https://bgp.he.net/net/198.176.44.0/24  (AS55079)
https://bgp.he.net/net/198.176.46.0/24  (AS55079)
https://bgp.he.net/net/198.176.47.0/24  (AS55079)
https://bgp.he.net/net/2604:a680:2::/48  (AS55079)
https://bgp.he.net/net/2604:ab80:2::/48  (AS55079)
https://bgp.he.net/net/2604:ab80:5::/48  (AS55079)
https://bgp.he.net/net/198.176.45.0/24  (AS55097)
https://bgp.he.net/net/2604:a680:4::/48  (AS55097)
https://bgp.he.net/net/208.66.204.0/24  (AS6165)
https://bgp.he.net/net/208.66.205.0/24  (AS6165)
https://bgp.he.net/net/208.66.206.0/24  (AS6165)
https://bgp.he.net/net/208.66.207.0/24  (AS6165)
https://bgp.he.net/net/74.116.232.0/24  (AS6165)
https://bgp.he.net/net/74.116.233.0/24  (AS6165)
https://bgp.he.net/net/74.116.234.0/24  (AS6165)
https://bgp.he.net/net/74.116.235.0/24  (AS6165)
https://bgp.he.net/net/74.116.236.0/24  (AS6165)
https://bgp.he.net/net/74.116.237.0/24  (AS6165)
https://bgp.he.net/net/74.116.238.0/24  (AS6165)
https://bgp.he.net/net/198.24.10.0/24  (AS62541)
https://bgp.he.net/net/198.24.11.0/24  (AS62541)
https://bgp.he.net/net/104.171.208.0/20  (AS63267)
https://bgp.he.net/net/104.171.208.0/24  (AS63267)
https://bgp.he.net/net/69.28.64.0/20  (AS6364)
https://bgp.he.net/net/69.28.80.0/23  (AS6364)
https://bgp.he.net/net/69.28.84.0/23  (AS6364)
https://bgp.he.net/net/69.28.86.0/24  (AS6364)
https://bgp.he.net/net/69.28.87.0/24  (AS6364)
https://bgp.he.net/net/69.28.88.0/23  (AS6364)
https://bgp.he.net/net/69.28.88.0/24  (AS6364)
https://bgp.he.net/net/69.28.90.0/23  (AS6364)
https://bgp.he.net/net/69.28.92.0/22  (AS6364)
https://bgp.he.net/net/172.93.121.0/24  (AS8100)
https://bgp.he.net/net/66.85.45.0/24  (AS8100)
https://bgp.he.net/net/206.53.202.0/24  (AS11492) that is probably supposed to be invalid (DE-CIX Dallas peering LAN? :)


[1] https://twitter.com/Jerome_UZ/status/1042433414371205120

-- 
https://twitter.com/nusenu_
https://mastodon.social/@nusenu

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20180919/186a1d41/attachment.sig>