OpenBSD CVS

CVS log for src/etc/rpki/ripe.constraints


[BACK] Up to [local] / src / etc / rpki

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.5 / (download) - annotate - [select for diffs], Wed Apr 17 14:31:59 2024 UTC (6 weeks, 3 days ago) by job
Branch: MAIN
CVS Tags: HEAD
Changes since 1.4: +883 -1 lines
Diff to previous 1.4 (colored)

Sync RPKI Trust Anchor constraints to nro-delegated-stats

Turns out that registry at https://www.iana.org/assignments/as-numbers/as-numbers.xml
is an incomplete one, where only 'new' assignments are listed. In the
past this registry used to list all ASNs, but the RIRs asked IANA to
revert to not being very detailed...

There is another source of truth, the 'nro-delegated-stats' file at
https://ftp.ripe.net/pub/stats/ripencc/nro-stats/latest/nro-delegated-stats
this is updated daily and composed of information from each RIR.

Summary of changes:

* LACNIC manages a more ASNs than previously known:
  - allow those ASNs for LACNIC
  - deny those for RIPE, APNIC, ARIN

* AFRINIC's allow list was good (compared to nro-delegated-stats), but the
  full set of AfriNIC ASNs wasn't denylisted for RIPE, ARIN, APNIC.

OK tb@

Revision 1.4 / (download) - annotate - [select for diffs], Tue Jan 30 03:40:01 2024 UTC (4 months ago) by job
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5
Changes since 1.3: +13 -3 lines
Diff to previous 1.3 (colored)

Add more RPKI TA constraints: LACNIC ASNs cannot transfer to/from other RIRs

OK tb@

Revision 1.3 / (download) - annotate - [select for diffs], Tue Dec 26 13:36:18 2023 UTC (5 months ago) by job
Branch: MAIN
Changes since 1.2: +37 -30 lines
Diff to previous 1.2 (colored)

Align the other RIRs with the recent clarifications from AFRINIC

Following https://lists.afrinic.net/pipermail/dbwg/2023-December/000496.html
Simply apply the inverse of 'afrinic.constraints' r1.2 to the other RIR files
(since no resources can be transferred from AFRINIC to any other RIRs).

OK tb@

Revision 1.2 / (download) - annotate - [select for diffs], Tue Dec 19 08:10:19 2023 UTC (5 months, 1 week ago) by job
Branch: MAIN
Changes since 1.1: +2 -0 lines
Diff to previous 1.1 (colored)

Add markers

OK tb@

Revision 1.1 / (download) - annotate - [select for diffs], Wed Dec 13 11:34:56 2023 UTC (5 months, 2 weeks ago) by job
Branch: MAIN

Impose constraints on RPKI Trust Anchors

See https://datatracker.ietf.org/doc/html/draft-snijders-constraining-rpki-trust-anchors
for more information.

Tested for a few months.

OK tb@ claudio@

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.