<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Gotham Narrow Book";
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
h1
{mso-style-priority:9;
mso-style-link:"Heading 1 Char";
margin-top:12.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
mso-line-height-alt:14.1pt;
page-break-after:avoid;
font-size:16.0pt;
font-family:"Gotham Bold";
color:#55ACEE;
font-weight:normal;}
h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
line-height:14.1pt;
page-break-after:avoid;
font-size:13.0pt;
font-family:"Gotham Bold";
color:#55ACEE;
font-weight:normal;}
h3
{mso-style-priority:9;
mso-style-link:"Heading 3 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
line-height:14.1pt;
page-break-after:avoid;
font-size:12.0pt;
font-family:"Gotham Bold";
color:#0E5992;
font-weight:normal;}
h4
{mso-style-priority:9;
mso-style-link:"Heading 4 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
line-height:14.1pt;
page-break-after:avoid;
font-size:11.0pt;
font-family:"Gotham Bold";
color:#1686DB;
font-weight:normal;
font-style:italic;}
h5
{mso-style-priority:9;
mso-style-link:"Heading 5 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
line-height:14.1pt;
page-break-after:avoid;
font-size:11.0pt;
font-family:"Gotham Bold";
color:#1686DB;
font-weight:normal;}
h6
{mso-style-priority:9;
mso-style-link:"Heading 6 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
line-height:14.1pt;
page-break-after:avoid;
font-size:11.0pt;
font-family:"Gotham Bold";
color:#0E5992;
font-weight:normal;}
p.MsoHeading7, li.MsoHeading7, div.MsoHeading7
{mso-style-priority:9;
mso-style-link:"Heading 7 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
line-height:14.1pt;
page-break-after:avoid;
font-size:11.0pt;
font-family:"Gotham Bold";
color:#0E5992;
font-style:italic;}
p.MsoHeading8, li.MsoHeading8, div.MsoHeading8
{mso-style-priority:9;
mso-style-link:"Heading 8 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
line-height:14.1pt;
page-break-after:avoid;
font-size:10.5pt;
font-family:"Gotham Bold";
color:#393946;}
p.MsoHeading9, li.MsoHeading9, div.MsoHeading9
{mso-style-priority:9;
mso-style-link:"Heading 9 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
line-height:14.1pt;
page-break-after:avoid;
font-size:10.5pt;
font-family:"Gotham Bold";
color:#393946;
font-style:italic;}
p.MsoTitle, li.MsoTitle, div.MsoTitle
{mso-style-priority:10;
mso-style-link:"Title Char";
margin-top:0in;
margin-right:0in;
margin-bottom:15.0pt;
margin-left:0in;
mso-add-space:auto;
border:none;
padding:0in;
font-size:26.0pt;
font-family:"Gotham Bold";
color:#131317;
letter-spacing:.25pt;}
p.MsoTitleCxSpFirst, li.MsoTitleCxSpFirst, div.MsoTitleCxSpFirst
{mso-style-priority:10;
mso-style-link:"Title Char";
mso-style-type:export-only;
margin:0in;
margin-bottom:.0001pt;
mso-add-space:auto;
border:none;
padding:0in;
font-size:26.0pt;
font-family:"Gotham Bold";
color:#131317;
letter-spacing:.25pt;}
p.MsoTitleCxSpMiddle, li.MsoTitleCxSpMiddle, div.MsoTitleCxSpMiddle
{mso-style-priority:10;
mso-style-link:"Title Char";
mso-style-type:export-only;
margin:0in;
margin-bottom:.0001pt;
mso-add-space:auto;
border:none;
padding:0in;
font-size:26.0pt;
font-family:"Gotham Bold";
color:#131317;
letter-spacing:.25pt;}
p.MsoTitleCxSpLast, li.MsoTitleCxSpLast, div.MsoTitleCxSpLast
{mso-style-priority:10;
mso-style-link:"Title Char";
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:15.0pt;
margin-left:0in;
mso-add-space:auto;
border:none;
padding:0in;
font-size:26.0pt;
font-family:"Gotham Bold";
color:#131317;
letter-spacing:.25pt;}
p.MsoSubtitle, li.MsoSubtitle, div.MsoSubtitle
{mso-style-priority:11;
mso-style-link:"Subtitle Char";
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Gotham Bold";
color:#55ACEE;
letter-spacing:.75pt;
font-style:italic;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.Heading1Char
{mso-style-name:"Heading 1 Char";
mso-style-priority:9;
mso-style-link:"Heading 1";
font-family:"Gotham Bold";
color:#55ACEE;}
span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Gotham Bold";
color:#55ACEE;}
span.Heading3Char
{mso-style-name:"Heading 3 Char";
mso-style-priority:9;
mso-style-link:"Heading 3";
font-family:"Gotham Bold";
color:#0E5992;}
span.Heading4Char
{mso-style-name:"Heading 4 Char";
mso-style-priority:9;
mso-style-link:"Heading 4";
font-family:"Gotham Bold";
color:#1686DB;
font-style:italic;}
span.Heading5Char
{mso-style-name:"Heading 5 Char";
mso-style-priority:9;
mso-style-link:"Heading 5";
font-family:"Gotham Bold";
color:#1686DB;}
span.Heading6Char
{mso-style-name:"Heading 6 Char";
mso-style-priority:9;
mso-style-link:"Heading 6";
font-family:"Gotham Bold";
color:#0E5992;}
span.Heading7Char
{mso-style-name:"Heading 7 Char";
mso-style-priority:9;
mso-style-link:"Heading 7";
font-family:"Gotham Bold";
color:#0E5992;
font-style:italic;}
span.Heading8Char
{mso-style-name:"Heading 8 Char";
mso-style-priority:9;
mso-style-link:"Heading 8";
font-family:"Gotham Bold";
color:#393946;}
span.Heading9Char
{mso-style-name:"Heading 9 Char";
mso-style-priority:9;
mso-style-link:"Heading 9";
font-family:"Gotham Bold";
color:#393946;
font-style:italic;}
span.TitleChar
{mso-style-name:"Title Char";
mso-style-priority:10;
mso-style-link:Title;
font-family:"Gotham Bold";
color:#131317;
letter-spacing:.25pt;}
span.SubtitleChar
{mso-style-name:"Subtitle Char";
mso-style-priority:11;
mso-style-link:Subtitle;
font-family:"Gotham Bold";
color:#55ACEE;
letter-spacing:.75pt;
font-style:italic;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle31
{mso-style-type:personal;
font-family:"Gotham Narrow Book";
color:windowtext;}
span.EmailStyle32
{mso-style-type:personal-compose;
font-family:"Gotham Narrow Book";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book"">Natha,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book"">Bedankt!<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book"">Spannende dingen:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book"">Job Snijders wees ons er meteen op de ARIN TAL niet automagisch opgenomen is, maar handmatig geladen moet worden in de RPKI validator.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book"">Er zijn 3 routerings issues gemeld door klanten van ons:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Gotham Narrow Book"">Airmax Italia (ISP) – invalid length<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book"">AS197650 (Airmax Italia) geeft in de ROA aan dat 185.30.112.0/22 alleen maar als een /22 uit AS197650 mag komen, maar ze annonceren alleen maar /24’s uit die reeks, dus… invalid.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book"">Wij hebben deze gewhitelist in onze validator en contact opgenomen met Airmax, maar geen enkele sjoege…<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Gotham Narrow Book"">Proofpoint (Cybersecurity leverancier(!)) – invalid ASN<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Gotham Narrow Book"">Proofpoint heeft 3 ASNs AS26211, AS22843 en AS13916.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book"">De ROA’s van 67.231.146.0/24 en 67.231.147.0/24 geven aan dat deze uit AS22843 moet komen echter worden deze geannonceerd vanuit AS26211 (eigenlijk een hijack). IP reeksen zijn gewhitelist
in onze validator.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book"">Via via in contact genomen met mensen van Proofpoint die het intern hebben doorgestuurd naar het netwerkteam welke het zou oppakken. Dit is inmiddels bijna 2 weken geleden….nog niet
opgelost.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book"">UK2 – AS13213 - Invalid ASN<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book"">AS13213 annonceert 31.24.227.0/24 van AS197820 terwijl de ROA van aangeeft dat dit alleen maar als /21 (31.24.224.0/21) geannonceerd mag worden vanuit AS197820. Prefix is gewhitelist
in onze validator <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book"">Contact opgenomen met AS13213.
</span><span style="font-family:"Gotham Narrow Book"">Reaktie ontvangen: “We are currently working towards resolving this, there’s just a degree of paperwork involved”.
</span><span lang="NL" style="font-family:"Gotham Narrow Book"">Ik heb aangegeven dat het niet om papierwerk gaat, maar om wat tijd achter de RIPE website (<a href="https://www.ripe.net/manage-ips-and-asns/resource-management/certification/resource-certification-roa-management">https://www.ripe.net/manage-ips-and-asns/resource-management/certification/resource-certification-roa-management</a>)...
Nog niet opgelost<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book"">Mvg,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book"">Robert<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="NL" style="font-family:"Gotham Narrow Book""><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Nathalie Trenaman <nathalie@ripe.net> <br>
<b>Sent:</b> Tuesday, September 4, 2018 1:17 PM<br>
<b>To:</b> Robert Heuvel <RHeuvel@atom86.net><br>
<b>Cc:</b> nlnog@nlnog.net<br>
<b>Subject:</b> Re: [NLNOG] atom86: invalid==reject (RPKI)<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="NL">Gefeliciteerd Robert (en team)!<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span lang="NL">En bedankt dat jullie dit gedaan hebben. Zijn er nog spannende dingen naar voren gekomen? Netwerken die een mailtje van jullie hebben gehad omdat ze een verkeerde ROA hadden gemaakt of zoiets?<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="NL"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="NL">Cheers,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="NL">Nathalie<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span lang="NL"><br>
<br>
<o:p></o:p></span></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span lang="NL">Op 4 sep. 2018, om 13:02 heeft Robert Heuvel <</span><a href="mailto:RHeuvel@atom86.net"><span lang="NL">RHeuvel@atom86.net</span></a><span lang="NL">> het volgende geschreven:<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span lang="NL"><o:p> </o:p></span></p>
<div>
<div>
<p class="MsoNormal" style="line-height:14.0pt"><span lang="NL" style="font-family:"Gotham Narrow Book"">Beste NLNOG-ers,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:14.0pt"><span lang="NL" style="font-family:"Gotham Narrow Book""> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:14.0pt"><span lang="NL" style="font-family:"Gotham Narrow Book"">Circa drie weken geleden heeft atom86 invalid==reject (RPKI) geïmplementeerd op haar peers en upstreams.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:14.0pt"><span lang="NL" style="font-family:"Gotham Narrow Book""> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:14.0pt"><span lang="NL" style="font-family:"Gotham Narrow Book"">Mijn gewaardeerde collega Ralph Dirkse heeft hier een niet te technisch artikel voor gemaakt en op LinkedIn geplaatst:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:14.0pt"><a href="https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fpulse%2Fatom86-leveraging-rpki-make-internet-safer-place-ralph-dirkse%2F%3Fpublished%3Dt&data=02%7C01%7C%7Ce89276722f9c464d0bba08d61257ed25%7Cdb27021b05df420391f71dc8f2fa0f3b%7C1%7C0%7C636716566183044865&sdata=GRsReFAn0yxVCOXrCbrWltqGsBbkNL1xyIwnbFz%2FZic%3D&reserved=0"><span lang="NL" style="font-family:"Gotham Narrow Book";color:#AAABA9">https://www.linkedin.com/pulse/atom86-leveraging-rpki-make-internet-safer-place-ralph-dirkse/?published=t</span></a><span lang="NL" style="font-family:"Gotham Narrow Book""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:14.0pt"><span lang="NL" style="font-family:"Gotham Narrow Book""> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:14.0pt"><span lang="NL" style="font-family:"Gotham Narrow Book"">We vertrouwen erop dat velen ons zullen volgen om het internet een veiligere plek te maken ;)<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:14.0pt"><span lang="NL" style="font-family:"Gotham Narrow Book""> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:14.0pt"><span style="font-family:"Gotham Narrow Book"">Mvg,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:14.0pt"><span style="font-family:"Gotham Narrow Book""> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Gotham Narrow Book"">Robert Heuvel<br>
atom86<br>
<br>
+31 624590510<br>
+31 207506500<br>
Boeing Avenue 271<br>
1119 PD Schiphol-Rijk<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:14.0pt"><span style="font-family:"Gotham Narrow Book""> <o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">_______________________________________________<br>
NLNOG mailing list<br>
</span><a href="mailto:NLNOG@nlnog.net"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#AAABA9">NLNOG@nlnog.net</span></a><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"><br>
</span><a href="https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmailman.nlnog.net%2Flistinfo%2Fnlnog&data=02%7C01%7C%7Ce89276722f9c464d0bba08d61257ed25%7Cdb27021b05df420391f71dc8f2fa0f3b%7C1%7C0%7C636716566183044865&sdata=x4I%2BnxI9RvOGOiztZ%2FkwIdYHCKGHan7ZtlKR6wPPQ7s%3D&reserved=0"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#AAABA9">http://mailman.nlnog.net/listinfo/nlnog</span></a><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>