Home / Blogs

RIPE NCC Members Secure their Resources Using Certification

Mirjam Kuehne

Resource certification verifies that an Internet number resource (IP address space or autnonomous system number) has legitimately been allocated by a Regional Internet Registry. It will also benefit every network operator and Internet user in the world by helping to ensure long-term routing stability.

In January 2011 the RIPE NCC launched a system that allows RIPE NCC members (LIRs) to generate a digital certificate for the assignment or allocation of Internet number resources made to them.

As shown in the figure below, the number of certificates for the RIPE NCC trust anchor is 409 as of today. This is the number of LIRs who have generated a certificate for their Internet number resources. The vast majority has also created Route Origin Authorisation (ROA) objects using their certificate, indicating which Autonomous Systems are authorised to announce their IP address blocks.

When the system was launched, we immediately observed a high number of certificates being generated. Since then we could see a steady increase.

In total, LIRs have created ROAs for over 54,000 IPv4 /24 equivalents (0.6% of IPv4 address space publicly announced as seen by the RIPE NCC Routing Information Service) and 13 million IPv6 /48 prefix equivalents.

We would like to encourage all other RIPE NCC members to make use of this system and certify their Internet number resources.

For more information plus a link to the daily updated statistics for the RIPE NCC and the four other RIRs, please refer to the background article on RIPE Labs: Resource Certification Statistics. You can find more information about the Certification system on the RIPE NCC web site: http://www.ripe.net/certification

Follow CircleID on
SHARE THIS POST

If you are pressed for time ...

... this is for you. More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.

I make a point of reading CircleID. There is no getting around the utility of knowing what thoughtful people are thinking and saying about our industry.

Vinton Cerf, Co-designer of the TCP/IP Protocols & the Architecture of the Internet

Share your comments

To post comments, please login or create an account.

Related

Topics

Domain Names

Sponsored byVerisign

DNS Security

Sponsored byAfilias

Cybersecurity

Sponsored byVerisign

New TLDs

Sponsored byAfilias

IP Addressing

Sponsored byAvenue4 LLC