[ncc-services-wg] regarding 2008-08 - was: RIPE NCC Resource Certification service update

Hello APWG,

(copying in NCC services WG, but since this is more regarding the formal
policy proposal side of things, the place to discuss it is the apwg list
-> reply-To: has been set accordingly).

We have a slightly weird situation here where we have a policy proposal
(2008-08) that has not *yet* concluded, which give the RIPE NCC the mandate 
to setup and operate the infrastructure to give out certificates to LIRs
from the RIPE region (PA space holders, for a start, PI to be done in 
the next round).

This proposal has not yet concluded, due to mostly "word smithing"
reasons, and also due to somewhat lacking feedback from the community
(that's *you*).  There was no strong resistance either, so I assume 
that it might eventually reach consensus.


On the other hand, the RIPE NCC sees the necessity for this sort of 
machinery, and has started the service *already* (see below for the mail
from Alex Band with the NCC view of things), without waiting for the
proposal to conclude.

The RIPE NCC members have approved the expenses for this as part of the
NCC business plan, so the NCC has the necessary (at least financial) 
backing to go forward here.


So, technically, we might question whether we need the policy proposal
2008-08 at all anymore, or whether it should be withdrawn (being obsoleted
by events).  I have discussed this with the certification task force 
(CA-TF) and Alex' mail also answers this - the NCC wants a clear policy 
document that says that not only the financial side is OK, but also that 
the address policy community agrees with what the NCC is doing, and gives 
their support to the NCC.

As a consequence, you'll see 2008-08 v3.0 show up here soon, for 
another round of review, and I *really* would appreciate a somewhat
more active feedback from the WG (you!) this time.

regards,

Gert Doering,
	APWG chair


On Mon, Jan 31, 2011 at 09:30:25AM +0100, Alex Band wrote:
> Dear colleagues,
> 
> It's been one month since I sent the announcement about the RIPE NCC Resource Certification service. I would like to give you an overview of the current status. 
> 
> The facts by numbers:
> ------------------------------
> LIRs who have enabled the service: 219
> Number of Route Origin Authorisations they created: 170
> Number of prefixes covered by these ROAs: 469
> Total IPv4 space covered by ROAs in the RIPE region: 40159 /24s
> Total IPv6 space covered by ROAs in the RIPE region: 7340035 /48s
> Unique visitors to ripe.net/certification: 1564
> Downloads of the RIPE NCC Validator: 117
> 
> So while 219 LIRs have enabled the service, and very diligently created a large number of ROAs to specify their routing policy, unfortunately nobody gave any feedback on any of the mailing lists. It is very important that you let your voice be heard and provide input on policy proposal 2008-08:
> http://ripe.net/ripe/policies/proposals/2008-08.html
> 
> Please note that version 3.0 of this proposal will be published very soon. As soon as it is available, I urge you to read it and provide feedback, because the fact that the current service not backed by a policy is not a sustainable state of affairs. 
> 
> Kind regards,
> 
> Alex Band
> Product Manager, RIPE NCC
> http://ripe.net/certification
> 
> P.S. Here are some links courtesy of LACNIC in case you would like to track the progress:
> http://www.labs.lacnic.net/~rpki/rpki-monitor/rpki-ta-status.xml
> http://www.labs.lacnic.net/~rpki/rpki-evolution-report_EN.txt
> http://www.labs.lacnic.net/~rpki/rpki-heatmaps/latest/ripe-roa-heatmap.png




Gert Doering
        -- NetMaster
-- 
did you enable IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (89) 32356-444            USt-IdNr.: DE813185279
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3583 bytes
Desc: not available
URL: </ripe/mail/archives/ncc-services-wg/attachments/20110203/d09c11c8/attachment.bin>