[sad] Ron Yokubaitis reacted to your message: ________________________________ From: Steven Wallace via NANOG <[email protected]> Sent: Thursday, October 30, 2025 5:25:44 PM To: [email protected] <[email protected]>; North American Network Operators Group <[email protected]> Cc: James Deaton <[email protected]>; Matthew Luckie <[email protected]>; Steven Wallace <[email protected]> Subject: CAIDA and Internet2 are working on a tool to assist network operators plan their RPKI-ROAs
You can kick the tires here: https://urldefense.proofpoint.com/v2/url?u=https-3A__rootbeer.testing.ns.internet2.edu_roa-2Dplanner_&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=cGrDT0liF-gD_o4EJ7o_qg&m=wgmMkIOXEorDvhnLu0EJRyq7vJxH6Hnj012onAvwwg5ZVYQgmVs3NAIm0zh_7q7U&s=fRGzTIu9XgEHcCsmSt5vowLRVplth4M46c3JhOlU8s4&e= The implementation remains fragile and will be unavailable intermittently, but we hope to improve it over the next couple of weeks. Please send me ([email protected]) any suggestions, concerns, etc. From the help page: The RPKI-ROA Planner is a tool designed to help network operators efficiently plan their Route Origin Authorizations (ROAs), which are vital for securing BGP routing. To generate a comprehensive set of ROA recommendations for a user-supplied IP prefix, the Planner aggregates routing and registration information from four key sources: - Internet Routing Registry (IRR): Route Objects are gathered from services like https://urldefense.proofpoint.com/v2/url?u=https-3A__stat.ripe.net_data_whois_&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=cGrDT0liF-gD_o4EJ7o_qg&m=wgmMkIOXEorDvhnLu0EJRyq7vJxH6Hnj012onAvwwg5ZVYQgmVs3NAIm0zh_7q7U&s=_t175830ywF6B-Uhst1GMDbcXEvqcMOxiAkphHtjlDA&e=. - Regional Internet Registries (RIRs): IP registration data is fetched from sources such as https://urldefense.proofpoint.com/v2/url?u=https-3A__rdap.arin.net_registry_ip_&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=cGrDT0liF-gD_o4EJ7o_qg&m=wgmMkIOXEorDvhnLu0EJRyq7vJxH6Hnj012onAvwwg5ZVYQgmVs3NAIm0zh_7q7U&s=m6dfLp0D89Cuzoq6K8yVAFNKuLq_PRfmMIw2gIUO6MI&e=. - Routing History: Historical routing data is analyzed using services like RIPEstat (https://urldefense.proofpoint.com/v2/url?u=https-3A__stat.ripe.net_data_routing-2Dhistory&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=cGrDT0liF-gD_o4EJ7o_qg&m=wgmMkIOXEorDvhnLu0EJRyq7vJxH6Hnj012onAvwwg5ZVYQgmVs3NAIm0zh_7q7U&s=to3En-Oyq78eiAq3wxYqpsaI5FnBPcMxmrCqgYadZng&e=). - Global Route Views: The Planner includes routes observed in the global research and education community (via Routeviews). Crucially, these routes may be longer (more specific) than those typically seen in the Default-Free Zone (DFZ). Assumption: If a route was observed in the past, is currently visible, or is documented in an IRR object, it is a candidate for a new ROA. It excludes any candidate routes that are already covered by an existing, valid ROA, ensuring you only focus on what's missing. All candidate routes are presented to you in the table. You have full control to deselect individual routes or use age filters to exclude older, potentially stale data before the final ROA set is calculated. The Planner prioritizes generating multi-prefix ROAs (covering multiple routes with one authorization) over single-prefix ROAs. Using multi-prefix ROAs is the recommended best practice for maintaining cleaner, more efficient RPKI records. thanks! Steven Wallace Director - Routing Integrity Internet2 [email protected] _______________________________________________ NANOG mailing list https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.nanog.org_archives_list_nanog-40lists.nanog.org_message_POCE6AEW6H4JWERF5TE5V3YLDBCS3WT6_&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=cGrDT0liF-gD_o4EJ7o_qg&m=wgmMkIOXEorDvhnLu0EJRyq7vJxH6Hnj012onAvwwg5ZVYQgmVs3NAIm0zh_7q7U&s=3Ril4s1OcaHzkd4l_be6OvyBdMwdP5HmJGS5-Lumf0s&e= _______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/[email protected]/message/I6LRA4ZRGOTAOO7RVCG6MSHTIQAGX7LC/
