<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<meta content="text/html; charset=UTF-8">
<style type="text/css" style="">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<div id="x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p>So in the ARIN world, Krill only works with "delegated" RPKI, not "hosted" RPKI - do I understand that correctly?</p>
<p>If so, are there any plans to allow Krill's analytics and rules to monitor ARIN Hosted RPKI ROAs?</p>
<p>-Adam</p>
<p><br>
</p>
<div id="x_Signature">
<div id="x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:rgb(0,0,0); font-family:Calibri,Helvetica,sans-serif,EmojiFont,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols">
<div>
<p class="x_MsoNormal"><b><span style="font-size:10.0pt; color:#44546A">Adam Thompson</span></b><span style="font-size:9.0pt; color:#44546A"><br>
Consultant, Infrastructure Services<br>
<span id="x_ms-rterangepaste-start"></span><img alt="[MERLIN LOGO]" width="128px" height="39px;" style="" src="https://mail.merlin.mb.ca/owa/%0Ab0lEQVR42u1bbVBTVxp+6LIrXMFGuXZBSUgy5SOKQwIWdwlCEJnZVpmgTovMjjWoO926dAzVwZ2u%0AFtTOrDJ1Sbfqtq5KqLOidRRYxaWCEmCjK1tImBGT0A4fAcWRWMNXQEdlfwQuCd58YQXp3ucPyc05%0A59573ue87/O+5+A1MjIyAhdQNeqhOF2JsloNACAqlA1hGAeyVWJIoiPAYGbCy8vLy8sVAZTlamTu%0AO+7w90RROBTZGRCGcZgZ/akRQNWoR9LWfLcGK5BnQL4+hZnVGUaAV5w1UJyudHuwbEUxZE48BYOX%0AlATOPIDXrzbZfWf5E1DIM7BxlRgAYO63oKxWA8WZSmhbjJQ+UB3ZCZY/wczuTA4BdO6/+kiOQ9Gn%0ALFcjW1EMc78F0gQRSvM/YGZ4pocAW0gTRE4Vv2yVGNWHc8ANIlFWq2HCwQyB2wRIS4x22UYYxoHm%0AqzwIwzgoKldDWa5mZvinQgBuUIBb7Vj+BEoOZIHlT0BecArt3SZmlmciAbhB5KQH5QaRKDmQhd6B%0AIcj2MqFgxhLgeZS8JDoC29JTUKMxoLSmkZnpmRgCEkXhNlmBwePB87ZIwQ0iIS8oZmZ6JhLAVvVP%0AJpaz/AnkbpGi4+59RhDORAKkJYqoz5N147JVYnCDSChOX2Zm+yWEtysxJ4mOgKpRj96BIaga9ZPa%0A/cvdIkXmvuPQthghDOOg/V4fSuvbUHqjFdq2HvRaHlFto7gk5KujIFshYKwzBfBoN3DjKjGUuzd7%0AfBNzvwVzU7KwOT0N3//wBDXNtyGJXAjJ4oXjbQYfQlmth3nwIQBg2+ooKDYtZyz0Io3vznYwAPDW%0A5FAaoK0k3+MUsfRGK+Qn6vDkyVPsSIvGxqQIsGbPepYogw+R9HEJtG3We2kOroeQRzKWeoEEcKsQ%0AlLtFOq7sj5VRn7V3Bpz207aZINldgsxDV5AimIeum3WQxiykNT4AsGbPQu47sePEqW9lrDSdGmAM%0AQlEUFgnCcEvXgqJyNZqeBkI7ZF8jiAryg4TPgiwmCMIFflBcbEL2iTrIV0eh9I9vQWtow7HT1nRS%0Atsrxqk5bxmes8jIQwDz0GMqGbigb7qKpewBRkcsBXQsA4KHhBi5+9D78CF9rivhgGKrWByhqvAtl%0A/W1EPv0Bzcb7KNn51jMGdZVOjmkABtOYBuZVtYF74DqyL36PDvMw5PFslG6KwbZ064kfXWsXzpZc%0AQiKfhUQ+CxtjAlH4tgD/TA/FSFsLTMNPkZOZQruazf0Wpw+kunl7vA5hIxIZTIEH0N4ZgOysDk3d%0A1tiet5KHbeJgsHytzRTZGajRGKBtMaKoXA1hKIc6BlZ6oxWyz6vA/+UcCJZG4KPLbXgzgoRwgZ+9%0ALhg9OOJQMI7GfdbsWZBEMgSYMgJo7wxAclSD3uHHYPl6o2TDEkj4rGc6VB/OAW9tDsz9FmQriq37%0ABb7zkHnoCoQ8EtV710DV3o/iph6U3uqhCKBt6bTWFhY4jv/t9/pQVK2n0kAGUxQCtHcGIPrrfynj%0AV/9ORGt8wFrerT6cQ20UZe47DuW//oO0ZXxU710D1uxZlMdg+Yw7mLFKoLMUMu9MPbX65QwBpsYD%0AmIceQ3JUQ10oWB36jNt+JisI46D6cA6S/pAPc78FNXV1iAplQ2vgQxIdgdLmHquiXzwfACAvKEbH%0A3fvWvqFsh7HfdvXbpooWiwUdxk63X4okScwnnZ9f8GRMgiAQwrE+t05v8LiPLTqMnbBYLG4/py16%0ATPdhMo2LaEFEOO31EA4bBEG4NYa3Qt2J3uHH1tU51weymEC3HoYXHIh316XisqoO+vY7aPquE0lb%0A85H6myTUgot1AhaU576BqkGPGo2B8h50J4vMgw+Rtr/cShAeibx0ay2gVn0NJ0+dgWVoyGNmE76+%0ASIiPw4aMdLvr58ouoOJylUdjCsLDsGvnDgDAJ/kHPXqOtdJUrJOmUt9PFp+BztBC+5sr1Kqv4XzZ%0ABer7P04cpb3OYQfjz3s+dmuMV5QNd+1yeXfx24LL+EptxJLoX0M2ekr4VdarMBB8+P/CC5WnirDn%0AWBllfADI3SylNb5kdwm1H1CYtRIA8G2jFl8eV07K+ABgGRpCReUVnLN52YrKKpwvuzDpMSeD82UX%0A3PYaPxaMnV344niheyGg48HwuAiz+ewMf6u4CbW+GwDw6aYEcEh/RL3xBnKvm+EFL4xovkFfb59d%0AH/n6FNp/HEnbfwlN7aZR4ydTpd9a9TW7dkujhUgQx4EgCHQYO3Gy+Az124aMdIRw2LBYLLilb0FF%0AZRX1m05vAEZX2beNWodjuvImdEgQxyEhPo7Wzdeqr1EhRmdoodz1VKFOfR0A8PvNmc4JwJ3rQxm+%0AqXsApc0mpC12LNSMpn7sL2kAAMQLgvD0Zz+H/MJ3+Ex9HxI+C3vj5uLqvBioGv1G9QKb9kSx1e1f%0AQk2zNe+XrRDY7QCOxUkAmE8GIDtr63jnCdsXIexgCMLDAAAxIiEGLYPUBDiK8yEctv2YkwBJBlD3%0AnRgyyIAAFBw6Mq0Czx0SeOeu5CHzrI66IDurg7w7GHIxm1Lztth/vhF9lkeIiuTh8by54B24Dpav%0ANxSpodgmDgYALI/kItdFtU+yu4Ra+bIVAhRmJTtsH0Ezyc4wnyTtQgGt8QICnlvQOQ9BlmkzPEEQ%0A1AJyRQJvWUwgmroHoPi3daX0Dj/Gnqp27KlqRyKfBWGQH0WE9gfDaBr0gXnh66h5AHDx6JlikSuM%0AFYzGYr4r40806I+FBo0WDRqtxyLQFjq9Aedo2uv0BkroTQd25WzHJ/kH3SKBtzX1ex3SRSSKRmv/%0AY6hpNaOm1WzXITzAB4kLfDDc24cv3lni9natefAh8s7U47OLTePexg3jv8zQGVpcGpogCFqd8CIR%0AwmE7JMHExUQtWwmfBQmfhcK3BZTRVaN/x4pCfyqshvr6bYw5TpUo0C0CKK/qID9RZ3fypzAreVpP%0A/TgScJ6IQJeeIyIc72akgwwIcFiLmGoSTHwXWr+dOGrwxAnVQHXzbfvK3ekbkCxeSEuC9nt9UFbr%0AobyqQ0dPP3Wd+9ocFGYlT3udv8dkohVwnmCdNBVrRzMMY2cX9h34lJrsBHEc3tssc9r/1gtOD0M4%0AbHyY9b5d7WKiJvJ+nhv0Wh5BtP00pLE8CHnzKcNr20yUwLNL+ZbxUZiV7PBAyFS774rKKsSIRB5V%0A4xyBww7G7p07KBKMpbETSWCbcho7u/CXz49gabQQ8wMCnBrSVarqzAu9t1mGL48r6UWgJ4OxZs+i%0A3a8vq29DWX2bw37c1+agIDN+2g97CCLC7WL2yeKvcbL460mLwMmQYFFEmJ34dEeM7srZ/lx1hASx%0ANdTRkeAVTwaSxvLgKWHy0mOhOZj+Upz0eTMl+YUXZMZIYFt6tZ34BHHclBeFnIUkjzyAYtNyNLWb%0AqEObzlZ8XnospLG8Sbv7hPg4LBqdqImxmiRJuxo6OUHZLgoPgxdNjZ0gCOzK2W7dkBkacrsOQNqE%0ACNv7OjIkhx2MDz/YaleEMnZ2gcMOntQzjL2fo/dydJ2OBIQvAWOn9blOFf4dDP7P8T+TSF9YFJq8%0AQgAAAABJRU5ErkJggg=="><span id="x_ms-rterangepaste-end"></span><br>
100 - 135 Innovation Drive<br>
Winnipeg, MB, R3T 6A8<br>
(204) 977-6824 or 1-800-430-6404 (MB only)<br>
<a href="mailto:athompson@merlin.mb.ca" id="LPNoLP"><span style="color:#44546A">athompson@merlin.mb.ca</span></a><br>
<a href="http://www.merlin.mb.ca/" id="LPNoLP"><span style="color:#44546A">www.merlin.mb.ca</span></a></span></p>
</div>
<br>
</div>
</div>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> NANOG <nanog-bounces+athompson=merlin.mb.ca@nanog.org> on behalf of Alex Band <alex@nlnetlabs.nl><br>
<b>Sent:</b> Thursday, June 25, 2020 8:31:52 AM<br>
<b>To:</b> Nanog<br>
<b>Subject:</b> Ensuring RPKI ROAs match your routing intent </font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">Hi everyone,<br>
<br>
Over the last two years NLnet Labs has been working on free, open source RPKI software and research for the community, supported by the RIPE NCC Community Projects Fund, Brazilian NIR NIC.br and Asia Pacific RIR APNIC. I have an update that we�d like to share.<br>
<br>
When creating a ROA in RPKI, it can have an effect on one or more BGP announcements, making them either Valid, Invalid or NotFound. Understanding what exactly determines these three states is not immediately obvious, especially in the beginning.<br>
<br>
At times, this can make creating ROAs a bit of a shot in the dark. I�ve seen several examples in the past where an operator created a ROA in their RIR Portal, waited for it to be published and then checked in services like BGPMon or the HE BGP Toolkit to see
if everything turned out as expected. <br>
<br>
This is why, during my time at the RIPE NCC, we put a lot of work into making it immediately obvious what the effect of a ROA is going to be on the BGP announcements with your address space. Several RIRs have followed in these footsteps since.
<br>
<br>
I presented on this journey at NANOG 63 in 2015:<br>
<a href="https://archive.nanog.org/meetings/abstract?id=2500">https://archive.nanog.org/meetings/abstract?id=2500</a><br>
<br>
Now, in my new adventure at NLnet Labs, we�ve gotten the same team together to make simple, intuitive ROA management for Delegated RPKI available for everyone, seamlessly across RIR regions.
<br>
<br>
With Krill 0.7.1 �Sobremesa� you can easily create and maintain ROAs in a user interface that incorporates all of the best practices and lessons learned over the last 10 years and monitor them in ways never before possible, such as through Prometheus.
<br>
<br>
Blog post with details:<br>
<a href="http://link.medium.com/1SsTJSAvB7">http://link.medium.com/1SsTJSAvB7</a><br>
<br>
All the best,<br>
<br>
Alex</div>
</span></font>
</body>
</html>