You are here: Home > Publications > RIPE Labs > Alex Band

Alex Band

RIPE NCC Staff — 15 Oct, 2010 07:06 PM
New Release of the Resource Certification System by Alex Band — last modified 17 Oct, 2016 08:58 AM

We are proud to announce a new release of the RIPE NCC Resource Certification system. We are gearing up for the production release on 1 January 2011 and have implemented some critical changes and new features.

Download link for ROA by Alex Band — last modified 10 Mar, 2011 11:30 AM

Download link for ROA in the RIPE NCC ROA Repository in the LIR Portal

Resource Certification Web Validator Released by Alex Band — last modified 14 Oct, 2018 12:38 PM

We have just released the RIPE NCC Resource Certification Web Validator. It will allow you to validate a Route Origin Authorisation (ROA) file against the RIPE NCC Trust Anchor through a web form, either online or locally.

Resource Certification Statistics by Alex Band — last modified 14 Oct, 2018 12:39 PM

Since we started providing the certification service on 1 January 2011, many LIRs made use of the service. In this article you can see some graphs showing the number of certificates in place today, as well as certified address space.

Using the ‘Maximum Length’ Option in ROAs by Alex Band — last modified 30 Nov, 2016 11:08 PM

In the resource certification system you specify your routing policy via Route Origin Authorization (ROA) objects. One of the options you can set is the ‘Maximum Length’, which specifies the maximum length of an IP address prefix that the AS is authorised to advertise. In this article we will analyse if this feature is being used properly.

Local Certification Service Launched by Alex Band — last modified 14 Oct, 2018 12:29 PM

In order to use the RIPE NCC Resource Certification (RPKI) Service, the only option up to now was to rely on the hosted system in the LIR Portal. Today we are releasing a proof of concept of the Local Certification Service. This allows RIPE NCC members to run Resource Certification on their own systems.

1. Configure the repository by Alex Band — last modified 16 Aug, 2011 03:42 PM

Step 1 of setting up the Local Certification Service: Configure the rsync repository and base directory.

3. Log into the LIR Portal Pilot Server by Alex Band — last modified 11 Aug, 2011 01:30 PM

Step 3: Log into the LIR Portal Pilot Server. You need to be added to the 'Certification' group by your LIR Portal Administrator to gain access.

7. Resource Certificate created by Alex Band — last modified 11 Aug, 2011 01:39 PM

In the final step you have successfully created a Resource Certificate listing your Internet Number Resources.

Comparing Certified Resources to BGP Routing by Alex Band — last modified 19 Jun, 2017 03:42 PM

We have implemented a new feature in the Resource Certification Service that compares the certified resources a Local Internet Registry (LIR) holds and the Route Origin Authorisations (ROAs) they have created with the BGP announcements seen by the RIPE NCC Remote Route Collectors. It will display the validation results, and can notify the user of mismatches and potential hijacking attempts.

Updated Authentication for the LIR Portal by Alex Band — last modified 30 Nov, 2016 10:39 PM

In addition to the regular method of using a username and password to log into the LIR Portal, we also offer users the option to log in with an X.509 identity certificate installed in a web browser. On Tuesday, 6 September, the RIPE NCC will deploy an update to this "Identity Certificate Login" system and at the same time implement some changes to user management.

Introducing the IP Analyser by Alex Band — last modified 29 May, 2018 11:14 AM

The RIPE NCC is proud to introduce the IP Analyser. This is a brand new service accessible through the LIR Portal that gives our members an insight into their IPv4 and IPv6 allocations and assignments. The ultimate goal is to offer a complete overview of all the IP resources you hold, and inform you about everything related to them.

Resource Certification (RPKI) Data Quality and Usage by Alex Band — last modified 14 Oct, 2018 12:27 PM

The amount of members requesting a Resource Certificate is steadily climbing, soon reaching 900. What is even more impressive is the amount of routing information these LIRs have entered in the system by creating Route Origin Authorisations (ROAs). But what is the quality of the data and is it used by anyone?

RPKI Invalids by Alex Band — last modified 24 Feb, 2012 07:56 AM

BGP Annoucements seen as invalid by the RPKI system

Using API Keys To Access LIR Portal Data Locally by Alex Band — last modified 24 Nov, 2017 10:06 AM

To offer our members better local access to our tools and data sets, it is now possible to create API access keys in the LIR Portal. The keys can be used to grant applications and scripts access to your (private) LIR data. The Information will be fetched securely over HTTPS and can be used in your IP address management tools, for example.

Modifications to the IP Analyser to Reflect New Policy by Alex Band — last modified 29 May, 2018 12:11 PM

We are in the process of implementing the policy regarding Post Depletion Adjustment of Procedures (2013-03). In this article we will give an overview of the changes we are making to the IP Analyser web interface and API, so you can accommodate your scripts and workflow. We intend to implement these changes on 16 April 2014.

The IPv6 Analyser by Alex Band — last modified 29 May, 2018 11:14 AM

The IPv6 Analyser is a toolset that offers our members a visual insight into all the allocations, aggregations and assignments they have made. It was announced a few weeks ago and we're seeing LIRs starting to use it. Please find below some more details about this tool.

Adventures in Using PGP for the RIPE Database by Alex Band — last modified 17 Oct, 2016 09:00 AM

At RIPE 70, Tim Bruijnzeels presented some statistics on the type of authentication people use to update the RIPE Database. There was one data point that particularly stood out for me: 76% of all updates via email are done using an MD5 password. I was stunned, because this way you are required to send your password in clear text over the Internet...

Improving the RIPE Database Web Interface by Alex Band — last modified 17 Oct, 2016 08:56 AM

There is an extensive project underway to make our services easier to use and work together seamlessly, so that they provide the most value to you. Over the last couple of months we have been working very hard on the RIPE Database. We have made some fundamental changes to the web interface, which we are pleased to introduce to you.

Improving "Syncupdates" in the RIPE Database by Alex Band — last modified 17 Oct, 2016 08:56 AM

Over the last couple of months we've been putting a lot of focus on improving the usability of the RIPE Database web interface. We started with tightly integrating our Single Sign-On system, RIPE NCC Access, into webupdates. This allows users to seamlessly make changes in all of the different RIPE NCC service interfaces while only requiring a single set of credentials. Then we added better validation, auto-complete, "diffs", integrated abuse-contact creation, updates in a text-area and many more tweaks and improvements to enhance the user experience. The last big part of the RIPE Database web interface that was left untouched is Syncupdates. Until now...