[ncc-services-wg] RPKI Validator over IPv6

Hi Denis,

I’ll will report the IPv6 reachability issue for localcert.ripe.net to our IT department.

I have to note that we’re just providing these services as a best-effort so you can see what the RPKI Validator works like and for example if your ROAs are showing up properly. But when using RPKI data, you should be running the validator application locally, within your own network. The reason for signing the certificates and ROAs in the first place is so that you can do cryptographic validation yourself, to verify that the information has not been tampered with.

Setting it up is really easy, all you need is a UNIX-like system with Java and rsync available. Just download, unpack and run…

Kind regards,

Alex Band
Product Manager 
RIPE NCC

On 10 May 2014, at 10:54, Denis Fondras - Liopen <ripe at liopen.fr> wrote:

> Hello all,
> 
> (First of all, sorry if I am not posting on the right mailing-list)
> 
> I'm trying to connect to the testbed RPKI validators listed in [1] from
> an IPv6-only router but can't get to it.
> 
> It seems the one hosted by Kaia Global Networks has no IPv6 and the one
> hosted by RIPE NCC is IPv6-enabled but it seems ports 323 and 8282 are
> not responding.
> 
> Is there any testbed RPKI validator IPv6-reachable ?
> 
> Thank you in advance.
> 
> Regards,
> Denis
> 
> 
> [1]
> http://www.ripe.net/lir-services/resource-management/certification/tools-and-resources
> 
> 
> -- 
> Denis Fondras / Liopen
> Tél: +33.473.242.720
> Mob: +33.761.029.186
> Mél: contact at liopen.fr
> JID: denis at liopen.fr
> PGP: 0xF7D4828559706135
> 
>