[RPKI] Repository URLs

[Jacquie Zhang]

Just wanted to add, what I wanted to get from understanding this is, our
Routinators are behind proxy servers, our security policy requires the
proxy server to explicitly whitelist each URL the Routinator will access.
If this list changes often and the proxy is not keeping up with the
changes, the Routinator will miss some ROA publication points. For our
proxy whitelist to work we need this URL list to be static, preferably
never changes.

Thanks for your time.

Jacquie

On Thu, Oct 28, 2021 at 9:04 PM Jacquie Zhang <jac.tech0 at gmail.com> wrote:

> Hi,
>
> On page https://rpki-validator.ripe.net/ui/repositories I see 40 URLs.
> I'm wondering whether each URL here is corresponding to a CA. The top 5 are
> the Root CAs then followed by 35 child CAs.
>
> Is this correct?
>
> Does this mean there are only 35 organisations in the whole world that are
> running Delegated Model, the rest are all running Hosted Model?
>
> If a new organisation started RPKI and decided to run Delegated Model,
> should we expect to see a new URL appearing here?
>
> I have a list of the URLs from a few months ago and that list doesn't
> match today's list . Should I interpret this as that the URL list here is
> dynamic, some URLs appear when new organisations adopt RPKI and some URLs
> disappear when some organisations quit RPKI? (I can't imagine any org would
> quit RPKI.)
>
>
> https://rrdp.arin.net/notification.xml
> https://rrdp.lacnic.net/rrdp/notification.xml
> https://rrdp.apnic.net/notification.xml
> https://rrdp.afrinic.net/notification.xml
> https://rrdp.ripe.net/notification.xml
> https://nostromo.heficed.net/rrdp/notification.xml
> https://rpki.akrn.net/rrdp/notification.xml
> https://rpki.admin.freerangecloud.com/rrdp/notification.xml
> https://rpki-repo.registro.br/rrdp/notification.xml
> https://rpki.cnnic.cn/rrdp/notify.xml
> https://magellan.ipxo.com/rrdp/notification.xml
> https://rrdp.sub.apnic.net/notification.xml
> https://rpki.roa.net/rrdp/notification.xml
> https://rpki.rand.apnic.net/rrdp/notification.xml
> https://rpki.blade.sh/rrdp/notification.xml
> https://rpki.e15f.net/rrdp/notification.xml
> rsync://rpki-repository.nic.ad.jp/ap/
> https://rrdp.twnic.tw/rrdp/notify.xml
> https://rpki.multacom.com/rrdp/notification.xml
> https://rpki.as207960.net/rrdp/notification.xml
> https://rpki1.terratransit.de/rrdp/notification.xml
> https://rrdp.rpki.nlnetlabs.nl/rrdp/notification.xml
> https://rpki1.rpki-test.sit.fraunhofer.de/rrdp/notification.xml
> https://sakuya.nat.moe/rrdp/notification.xml
> https://repo-rpki.idnic.net/rrdp/notification.xml
> https://rpki.sailx.co/rrdp/notification.xml
> https://rpki.dataplane.org/rrdp/notification.xml
> https://repo1.rpki.qs.nu/rrdp/notification.xml
> https://krill-eval-ctec.charter.com/rrdp/notification.xml
> https://rpkica.mckay.com/rrdp/notify.xml
> https://rpki.tools.westconnect.ca/rrdp/notification.xml
> https://chloe.sobornost.net/rpki/news.xml
> https://rpki.xindi.eu/rrdp/notification.xml
> https://rrdp.taaa.eu/rrdp/notification.xml
> https://rpki.luys.cloud/rrdp/notification.xml
> https://rpki-rrdp.mnihyc.com/rrdp/notification.xml
> https://rpki.apernet.io/rrdp/notification.xml
> https://rpki.caramelfox.net/rrdp/notification.xml
> https://chloe.sobornost.net/rpki/news-public.xml
> https://ca.rg.net/rrdp/notify.xml
>
> Thanks,
> Jacquie
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/rpki/attachments/20211028/db8ac106/attachment.htm>