<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Dear colleagues,<div class=""><br class=""></div><div class="">Last week, on Wednesday 4 May 2022, 14:00 UTC, we held a RIPE NCC Open House on the topic of RPKI Data.</div><div class="">You can find the recording here: <a href="https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-rpki-data" class="">https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-rpki-data</a></div><div class=""><br class=""></div><div class="">Thank you to all who participated, I thought it was a useful session and I enjoyed the discussion and feedback we received.</div><div class="">During the session I promised to send an e-mail to this list with a summary of all data and visualisations we currently have public for RPKI:</div><div class=""><br class=""></div><div class="">Visualisations:</div><div class=""><br class=""></div><div class=""><a href="https://certification-stats.ripe.net/" class="">https://certification-stats.ripe.net/</a></div><div class="">-Generated from the RIR Trust Anchor Statistics <a href="https://ftp.ripe.net/rpki/" class="">https://ftp.ripe.net/rpki/</a></div><div class=""><br class=""></div><div class=""><a href="https://lirportal.ripe.net/certification/content/static/statistics/world-roas.html" class="">https://lirportal.ripe.net/certification/content/static/statistics/world-roas.html</a></div><div class="">-Generated from "delegated stats” in combination with BGP data from RIS</div><div class="">-No IPv6 </div><div class=""><br class=""></div><div class="">Data:</div><div class=""><br class=""></div><div class=""><a href="https://ftp.ripe.net/rpki/" class="">https://ftp.ripe.net/rpki/</a></div><div class="">-Documented on <a href="https://github.com/RIPE-NCC/internet-dataset-descriptions/blob/main/rpki-repo-archive.md" class="">https://github.com/RIPE-NCC/internet-dataset-descriptions/blob/main/rpki-repo-archive.md</a></div><div class="">-Daily data per Trust Anchor per 2011</div><div class=""><br class=""></div><div class="">Public tools:</div><div class=""><br class=""></div><div class=""><a href="https://rpki-validator.ripe.net/ui/" class="">https://rpki-validator.ripe.net/ui/</a></div><div class="">-User interface for Relying Party software</div><div class=""><br class=""></div><div class=""><a href="https://stat.ripe.net/widget/rpki-by-trust-anchor" class="">https://stat.ripe.net/widget/rpki-by-trust-anchor</a></div><div class="">-Generated from <a href="https://ftp.ripe.net/rpki/" class="">https://ftp.ripe.net/rpki/</a></div><div class=""><br class=""></div><div class=""><a href="https://stat.ripe.net/app/use-cases/asn/rpki-check/S1_3333_C16e" class="">https://stat.ripe.net/app/use-cases/asn/rpki-check/S1_3333_C16e</a> (example)</div><div class="">-Shows <span style="font-family: "Public Sans", sans-serif; orphans: 2; white-space: pre-line; widows: 2;" class="">the RPKI validity state for a combination of prefix and Autonomous System.</span></div><div class=""><span style="font-family: "Public Sans", sans-serif; orphans: 2; white-space: pre-line; widows: 2;" class="">-Generated from </span><a href="https://rpki-validator.ripe.net/ui/" class="">https://rpki-validator.ripe.net/ui/</a></div><div class=""><br class=""></div><div class=""><a href="https://stat.ripe.net/docs/02.data-api/rpki-history.html" class="">https://stat.ripe.net/docs/02.data-api/rpki-history.html</a></div><div class="">-API call <span style="color: rgb(51, 51, 51); font-family: "Public Sans", Helvetica, Verdana, sans-serif; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);" class="">returns a timeseries with the count of VRPs (Validated ROA Payload) for the requested resource. </span></div><div class=""><span style="color: rgb(51, 51, 51); font-family: "Public Sans", Helvetica, Verdana, sans-serif; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);" class="">-G</span>enerated from <a href="https://ftp.ripe.net/rpki/" class="">https://ftp.ripe.net/rpki/</a></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">My key take aways from the session:</div><div class=""><br class=""></div><div class="">-Ruediger Volk asked for an inventory of our current data, visualisations and tools. I started by this e-mail to the Working Group and I’m still considering how to make them easier to find on our website. </div><div class="">-Randy Bush noted that experiments will/might pollute our data. Ties suggested to add known experiments to the GitHub dataset description.</div><div class="">-<span style="font-variant-ligatures: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); text-decoration-thickness: initial;" class="">Mingwei</span><span style="font-variant-ligatures: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); text-decoration-thickness: initial;" class=""> Zhang mentioned that he is currently working with Emile Aben and Agustin Formoso on “when did a VRP appear/disappear” feature for RIPEstat. This will be a very valuable addition for trouble shooting.</span><span style="color: rgb(77, 81, 86); font-family: arial, sans-serif; font-size: 14px; font-variant-ligatures: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); text-decoration-thickness: initial;" class=""> </span></div><div class=""><span style="font-variant-ligatures: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); text-decoration-thickness: initial;" class="">-John Kristoff would like to see statistics on the time it takes from the moment someone hits “submit” in the LIR portal for a ROA, to the moment the VRP is visible in the repository and when it is seen picked up by routers. </span></div><div class=""><span style="font-variant-ligatures: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); text-decoration-thickness: initial;" class="">-Job Snijders mentioned that it would be beneficial to have <a href="http://ftp.ripe.net/rpki" class="">ftp.ripe.net/rpki</a> data available as </span><span style="font-family: "Open Sans", sans-serif; orphans: 2; widows: 2;" class=""><a href="rsync://ftp.ripe.net/rpki" class="">rsync://ftp.ripe.net/rpki</a></span></div><div class=""><span style="font-family: "Open Sans", sans-serif; orphans: 2; widows: 2;" class="">-Amreesh Phokeer suggested a more granular data set for Trust Anchor data. This is currently a daily dump. We are interested to hear how granular would be useful. Also Amreesh would be interested in statistics about revoked ROAs. </span></div><div class=""><span style="font-family: "Open Sans", sans-serif; orphans: 2; widows: 2;" class="">-Ruediger Volk added that he would be interested in data that shows how frequent CRLs are used. Job Snijders provided insight in his mail to the WG: </span><font face="Open Sans, sans-serif" class=""><a href="https://www.ripe.net/ripe/mail/archives/routing-wg/2022-May/004566.html" class="">https://www.ripe.net/ripe/mail/archives/routing-wg/2022-May/004566.html</a></font></div><div class="">-Sacha mentioned that it would be useful to have a tool that would show how a ROA would impact a route, without actually creating that ROA, or for a prefix that you don’t have holdership of. </div><div class="">-Nathalie said that she would like to get rid of the world map, as it is now well-known and does not include IPv6. A better alternative, that includes IPv6 can be found on: <a href="https://rpki-maps.nlnetlabs.nl/ui/world.html" class="">https://rpki-maps.nlnetlabs.nl/ui/world.html</a></div><div class=""><font face="Open Sans, sans-serif" class=""><br class=""></font></div><div class=""><font face="Open Sans, sans-serif" class="">We’re looking into all your suggestions and where possible implement them. Stay tuned :)</font></div><div class=""><font face="Open Sans, sans-serif" class=""><br class=""></font></div><div class="">If I missed something, or if you want to share your thoughts, have suggestions, please send an e-mail to the list or directly to us on <a href="mailto:rpki@ripe.net" class="">rpki@ripe.net</a></div><div class=""><br class=""></div><div class="">Kind regards,</div><div class=""><br class=""></div><div class="">Nathalie Trenaman</div><div class="">Routing Security Programme Manager</div><div class="">RIPE NCC</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div></body></html>