cloudflare
Automate test using ripe atlas network
The ripe atlas network has many probes all over the world. It should be possible to use that to get information about many of the networks.
Hi @kroeckx, We're use this :) , but it's not automated We ran a few probes https://atlas.ripe.net/measurements/?page=1&search=target:invalid.rpki.cloudflare.com#tab-traceroute and we got satisfying results.
So thinking about this some more, I think this allows us to find who is filtering, and who is not.
If needed, I can run a larger measurements, and then process that data.
But I have no idea how to find out if they're signing or not. Maybe it's useful to split that column in 2?
There is a risk of encountering the issue mentioned in #105 . If you manage to run a continuous test, we'll definitely use the data but I cannot give any timeline.
For signing checks: our portal has data: https://rpki.cloudflare.com/?view=bgp&prefix=&asn=13335&validState=Valid But this also requires to map an organization which owns the IPs (in a certificate) to the actual ISP.
I'm not sure what you mean with the last sentence, or that the difference between the ISP and the AS is important.
The network originating the BGP announcements is not always the owner of the IP addresses. But in general, checking if the prefixes an ASN announce are signed is a good-enough metric.