the prefixes that wont be able to reach Cloudflare by the end of the year (unless RPKI ROAs are fixed)

Wed Sep 19 16:32:00 UTC 2018

Hi,

apparently Cloudflare will be enforcing RPKI route origin validation
"by the end of the year" [1].

https://blog.cloudflare.com/rpki-details/

If this is actually the case then some prefixes run at risk of loosing
the ability to reach Cloudflare.

This is a heads-up so you can check if you would be affected,
you can ctrl-f the list of 75 prefixes (ARIN region only)
bellow for your prefix or ASN.

(data as of 2018-09-19 14:06 UTC)

https://bgp.he.net/net/168.245.235.0/24  (AS13428)
https://bgp.he.net/net/69.28.67.0/24  (AS13768)
https://bgp.he.net/net/69.28.82.0/23  (AS13768)
https://bgp.he.net/net/68.64.234.0/24  (AS14237)
https://bgp.he.net/net/209.24.0.0/24  (AS15562)
https://bgp.he.net/net/172.98.214.0/24  (AS17139)
https://bgp.he.net/net/66.85.44.0/24  (AS19437)
https://bgp.he.net/net/23.139.0.0/24  (AS20860)
https://bgp.he.net/net/68.64.227.0/24  (AS262913)
https://bgp.he.net/net/192.136.187.0/24  (AS26827)
https://bgp.he.net/net/208.76.33.0/24  (AS26938)
https://bgp.he.net/net/208.76.39.0/24  (AS26938)
https://bgp.he.net/net/68.64.231.0/24  (AS30167)
https://bgp.he.net/net/192.133.106.0/24  (AS33060)
https://bgp.he.net/net/192.133.107.0/24  (AS33060)
https://bgp.he.net/net/192.209.63.0/24  (AS393398)
https://bgp.he.net/net/198.28.13.0/24  (AS393451)
https://bgp.he.net/net/2606:8e80:3000::/48  (AS394308)
https://bgp.he.net/net/2606:8e80:1000::/48  (AS394497)
https://bgp.he.net/net/2606:8e80:4000::/48  (AS394497)
https://bgp.he.net/net/2606:8e80::/48  (AS394497)
https://bgp.he.net/net/2606:8e80:5000::/48  (AS394497)
https://bgp.he.net/net/2606:8e80:2000::/48  (AS394644)
https://bgp.he.net/net/2606:8e80:4000::/48  (AS394644)
https://bgp.he.net/net/104.245.239.0/24  (AS395970)
https://bgp.he.net/net/172.98.209.0/24  (AS395970)
https://bgp.he.net/net/172.98.210.0/24  (AS395970)
https://bgp.he.net/net/172.98.212.0/24  (AS395970)
https://bgp.he.net/net/172.98.214.0/24  (AS395970)
https://bgp.he.net/net/172.98.215.0/24  (AS395970)
https://bgp.he.net/net/172.98.208.0/24  (AS41139)
https://bgp.he.net/net/172.98.211.0/24  (AS41139)
https://bgp.he.net/net/172.98.213.0/24  (AS41139)
https://bgp.he.net/net/168.245.223.0/24  (AS43181)
https://bgp.he.net/net/208.84.64.0/24  (AS52129)
https://bgp.he.net/net/208.86.200.0/24  (AS52129)
https://bgp.he.net/net/199.68.168.0/22  (AS53429)
https://bgp.he.net/net/199.68.175.0/24  (AS53429)
https://bgp.he.net/net/162.208.108.0/24  (AS55079)
https://bgp.he.net/net/162.208.109.0/24  (AS55079)
https://bgp.he.net/net/162.208.110.0/24  (AS55079)
https://bgp.he.net/net/162.208.111.0/24  (AS55079)
https://bgp.he.net/net/198.176.44.0/24  (AS55079)
https://bgp.he.net/net/198.176.46.0/24  (AS55079)
https://bgp.he.net/net/198.176.47.0/24  (AS55079)
https://bgp.he.net/net/2604:a680:2::/48  (AS55079)
https://bgp.he.net/net/2604:ab80:2::/48  (AS55079)
https://bgp.he.net/net/2604:ab80:5::/48  (AS55079)
https://bgp.he.net/net/198.176.45.0/24  (AS55097)
https://bgp.he.net/net/2604:a680:4::/48  (AS55097)
https://bgp.he.net/net/208.66.204.0/24  (AS6165)
https://bgp.he.net/net/208.66.205.0/24  (AS6165)
https://bgp.he.net/net/208.66.206.0/24  (AS6165)
https://bgp.he.net/net/208.66.207.0/24  (AS6165)
https://bgp.he.net/net/74.116.232.0/24  (AS6165)
https://bgp.he.net/net/74.116.233.0/24  (AS6165)
https://bgp.he.net/net/74.116.234.0/24  (AS6165)
https://bgp.he.net/net/74.116.235.0/24  (AS6165)
https://bgp.he.net/net/74.116.236.0/24  (AS6165)
https://bgp.he.net/net/74.116.237.0/24  (AS6165)
https://bgp.he.net/net/74.116.238.0/24  (AS6165)
https://bgp.he.net/net/198.24.10.0/24  (AS62541)
https://bgp.he.net/net/198.24.11.0/24  (AS62541)
https://bgp.he.net/net/104.171.208.0/20  (AS63267)
https://bgp.he.net/net/104.171.208.0/24  (AS63267)
https://bgp.he.net/net/69.28.64.0/20  (AS6364)
https://bgp.he.net/net/69.28.80.0/23  (AS6364)
https://bgp.he.net/net/69.28.84.0/23  (AS6364)
https://bgp.he.net/net/69.28.86.0/24  (AS6364)
https://bgp.he.net/net/69.28.87.0/24  (AS6364)
https://bgp.he.net/net/69.28.88.0/23  (AS6364)
https://bgp.he.net/net/69.28.88.0/24  (AS6364)
https://bgp.he.net/net/69.28.90.0/23  (AS6364)
https://bgp.he.net/net/69.28.92.0/22  (AS6364)
https://bgp.he.net/net/172.93.121.0/24  (AS8100)
https://bgp.he.net/net/66.85.45.0/24  (AS8100)
https://bgp.he.net/net/206.53.202.0/24  (AS11492) that is probably supposed to be invalid (DE-CIX Dallas peering LAN? :)

[1] https://twitter.com/Jerome_UZ/status/1042433414371205120

-- 
https://twitter.com/nusenu_
https://mastodon.social/@nusenu

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20180919/186a1d41/attachment.sig>