<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1528315972884_474028"><span>Hi Job</span></div><div class="qtdSeparateBR" id="yui_3_16_0_ym19_1_1528315972884_474035"><br><br></div><div class="yahoo_quoted" id="yui_3_16_0_ym19_1_1528315972884_474039" style="display: block;"> <div style="font-family: Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1528315972884_474038"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1528315972884_474037"> <div dir="ltr" id="yui_3_16_0_ym19_1_1528315972884_474036"> <font id="yui_3_16_0_ym19_1_1528315972884_474041" size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Job Snijders via db-wg <db-wg@ripe.net><br> <b><span style="font-weight: bold;">To:</span></b> Lu Heng <h.lu@anytimechinese.com> <br><b><span style="font-weight: bold;">Cc:</span></b> Database WG <db-wg@ripe.net><br> <b><span style="font-weight: bold;">Sent:</span></b> Wednesday, 13 June 2018, 12:52<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [db-wg] A test on AFRINIC range announcing without RIPE route object<br> </font> </div> <div class="y_msg_container" id="yui_3_16_0_ym19_1_1528315972884_474043"><br>>> <br clear="none">>> In conclusion, If you employ a non-Afrinic asn for announcements<br clear="none">>> (which means a foreign asn), using RIPE’s route object will be the<br clear="none">>> only choice for you unless you are one of those big telecoms which has<br clear="none">>> the liberty to announce anything as they wish.<br clear="none"><br clear="none">> This is not correct, you can also use RADB, NTTCOM, LEVEL3, or ALTDB,<br clear="none">> etc. RIPE is/was not an exclusive provider for this type of service.<br clear="none"><div id="yui_3_16_0_ym19_1_1528315972884_474261"><br></div><div id="yui_3_16_0_ym19_1_1528315972884_474284">(wearing my devil's advocate hat)...<br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1528315972884_474160">So are you saying all these other databases offer the same service with the same security risk that we are about to remove from the RIPE Database? None of these databases have any authorisation link to any of the RIR's address registries. So can anyone create bogus ROUTE objects in these databases for any address space? Suggesting that people can use these databases implies that their contents are taken seriously, including any bogus ROUTE objects. So by closing down this service in the RIPE Database are we solving a problem (closing a security hole) or just moving the problem somewhere else?</div><div dir="ltr" id="yui_3_16_0_ym19_1_1528315972884_474348"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1528315972884_474350">Ideally all 5 RIRs should operate an IRR with authorisation linked to the address registrations and not required from any ASN. Then we would have a place to put ROUTE objects that can be trusted.</div><div dir="ltr" id="yui_3_16_0_ym19_1_1528315972884_474353"><br></div><div dir="ltr">cheers</div><div dir="ltr">denis</div><div dir="ltr" id="yui_3_16_0_ym19_1_1528315972884_474355">co-chair DB-WG<br></div><br><br></div> </div> </div> </div></div></body></html>