[routing-wg] RPKI - newbie questions

Hi Hank,

On Mon, 3 Feb 2014, Hank Nussbacher wrote:

> I hope this is the right forum - not sure which RIPE WG is the best to ask 
> these newbie questions.
>
> 1.  How can one know how many prefixes from the global routing table of 500K 
> prefixes are "RPKI"ed?  The best I can find is telnet to rpki-rtr.ripe.net 
> and start counting lines via "sho ip bgp rpki table"
> or scan http://localcert.ripe.net:8088/roas
> I know of http://certification-stats.ripe.net/ but that is a graph showing 
> how many LIRs are RPKIed, not how many prefixes have been RPKIed.

You might want to check the RPKI dashboard at http://rpki.surfnet.nl, some 
stats there (on global, RIR and AS level).

> 2.  If I have a prefix and I want to do a similar lookup like whois to see 
> certain parameters of that specific prefix, how can I see whether that 
> specific prefix has RPKI enabled?  Is there a whois-rpki thingie?

bgpmon has a nice whois addition for quering prefixes.

see their blog from 2011: 
https://www.bgpmon.net/securing-bgp-routing-with-rpki-and-roas/

Regards,

Jac

-- 
Jac Kloots
Network Services
SURFnet bv