[routing-wg] looking for online RPKI dashboard / looking glass?

Hi Gert,

If it’s just origin you’re after then this may help:
http://localcert.ripe.net:8088/bgp-preview

This ‘BGP Preview’ page lists the announcements seen by RIS Route Collectors, does the RPKI analysis, and let’s you filter by IP or ASN as you wish. It does not do any AS path inspection.

Note that this is not really a production service by the RIPE NCC at the moment, we use this server to test new releases of our 2.x RPKI Validator. But of course you could run the RPKI validator locally.

Also, you may know that we are getting very close now to releasing the RPKI Validator 3.0. We are currently dealing with some minor last issue (related to rpki-rtr and BGPSec keys) but we will have an official pre-production release ready before RIPE 76 and I plan to present it during the Opensource WG. The 3.0 version has a similar BGP Preview page. If you already want to give it a spin you can find a link to the beta releases on GitHub, and please let us know if you find any issues :)

https://github.com/RIPE-NCC/rpki-validator-3/wiki/RIPE-NCC-RPKI-Validator-3-beta-tester-page

Kind regards

Tim Bruijnzeels



> On 1 May 2018, at 20:44, Gert Doering <gert at space.net> wrote:
> 
> Hi,
> 
> is there an online looking glass to see RPKI status for ``everything a 
> given AS announces / transits''?
> 
> Say, I want to check my AS (AS5539) plus all downstream customers 
> (... visible at the vantage point of said tool, of course).
> 
> I have found whois.bgpmon.net, which I can use by feeding prefix after
> prefix into whois and then parsing the reply, but that's a bit cumbersome
> for "give me all there is to know".  Basically
> 
>  show ip bgp reg _5539_
> 
> and then for each prefix returned, check RPKI status, flag green/red/yellow.
> 
> 
> The RIPE LIRportal RPKI dashboard sort of does the job for all ASes that
> I have created ROAs for (so, if I maintain my customer ROAs, I would see
> them) but I cannot query an arbitrary AS, or "the whole customer cone".
> 
> 
> (I expected RIPE Stats to have something like this in the BGP widget, but
> to my surprise, no...)
> 
> Gert Doering
>        -- NetMaster
> -- 
> have you enabled IPv6 on something today...?
> 
> SpaceNet AG                      Vorstand: Sebastian v. Bomhard, Michael Emmer
> Joseph-Dollinger-Bogen 14        Aufsichtsratsvors.: A. Grundner-Culemann
> D-80807 Muenchen                 HRB: 136055 (AG Muenchen)
> Tel: +49 (0)89/32356-444         USt-IdNr.: DE813185279