[routing-wg] RPKI ROAs and Monitoring

Hi Klaus, all,

> On 12 Dec 2022, at 12:12, Klaus Darilion via routing-wg <routing-wg at ripe.net> wrote:
> ...
> Is such monitoring already available and I only have to subcribe somewhere (free or comemrcial)? Do I miss something? Any hints what I should do before and after creating the ROAs?

BGP alerter and packetvis are great!

But, in addition, you mentioned you are using the RIPE NCC LIR Portal service for this. This service includes BGP previews and email alerts of ROAs vs BGP based on BGP announcement dumps from the RIS route collectors.

These dumps can be old, they may not include your route origin invalids if they are dropped before making it to any collector, and they may include announcements done by others (mostly typos). You should double check any suggestions based on this, but still.. it's another useful tool to use in addition.

> PS: What happens if my ROAs expire.

In the RIPE NCC portal service you *configure* ROAs, but the actual ROA objects are created and renewed automatically. So, they will not expire. They are removed and revoked when you remove the configuration.

You would do well to check for 'stale' configurations (for announcements that are no longer supposed to be done) that you may wish to remove.


Tim

>  
> -- 
> Klaus Darilion, Head of Operations
> nic.at GmbH, Jakob-Haringer-Straße 8/V
> 5020 Salzburg, Austria
>  
> -- 
> 
> To unsubscribe from this mailing list, get a password reminder, or change your subscription options, please visit: https://mailman.ripe.net/