From sofia at apnic.net Fri Oct 3 02:02:00 2025 From: sofia at apnic.net (Sofia Silva Berenguer) Date: Fri, 3 Oct 2025 02:02:00 +0000 Subject: [DBWG] The process to create a ROA through each RIR portal Message-ID: (Apologies for duplicates) Hi all, The NRO has just published a new reference page: https://www.nro.net/technical-coordination/nro-rpki-program/joint-rpki-baseline-documents/the-process-of-creating-roas-through-each-rir-portal/ This page brings together direct links to each RIR?s official documentation for creating Route Origin Authorisations (ROAs) through their portals and summarises some differences across the RIRs. Why this matters: * This page gives operators a single place to find the correct entry point, no matter which RIR(s) you hold resources with. * It also helps compare the different processes across RIRs without having to search separately. The aim is to keep the RIR websites as the source of truth while providing a convenient overview in one place. A FAQ page is also available: https://www.nro.net/technical-coordination/nro-rpki-program/joint-rpki-baseline-documents/joint-rpki-baseline-documents-faqs/ If you have any questions or comments, please reach out to us at rpki_program at nro.net We hope you?ll find this a helpful resource. Warm regards, Sof?a -- I am sending this email at a time that suits me and the time zone I work in. Please feel free to read, and act on or respond, at a time that suits you. ____________________________________________________________________ Sof?a Silva Berenguer NRO RPKI Program Manager e: sofia at apnic.net ____________________________________________________________________ -------------- next part -------------- An HTML attachment was scrubbed... URL: From hvisage at hevis.co.za Mon Oct 27 13:08:35 2025 From: hvisage at hevis.co.za (Hendrik Visage) Date: Mon, 27 Oct 2025 13:08:35 +0000 Subject: [DBWG] Proposal request: Geofeed attribute - RFC 9632 (old RFC9092) References: <0A0F63F4-66F6-457D-97C8-0CBCF777E6FE@hevis.co.za> Message-ID: <44B44364-96E7-44A3-B09C-0B2F8B9BCC2D@hevis.co.za> Good day, So as a new member I?ll start to mention some pain points that hit me with the AfriNIC WHOIS database, and lets start with the Geofeed attribute: Afrinic whois doesn?t currently support that tag. The original RFC9092 was published July 2021, while the new RFC9632 was published in Aug 2024. Current Afrinic support is only the Remarks attribute, but that attribute, at least for PI resources, isn?t writeable/updatable by the resouce owner, and requires hostmaster at afrinic to assist. Proposal: AfriNIC WHOIS db to include the Geofeed attribute, and allow the resource owners to add and update it themselves. Hendrik Visage --- Hendrik Visage hvisage at hevis.co.za HeViS.Co Systems Pty Ltd https://www.envisage.co.za From hvisage at hevis.co.za Mon Oct 27 13:10:30 2025 From: hvisage at hevis.co.za (Hendrik Visage) Date: Mon, 27 Oct 2025 13:10:30 +0000 Subject: [DBWG] Remarks attribute for aut-num Message-ID: <2B5B8CCE-50D6-482E-9B3C-1EBD1142914C@hevis.co.za> Good day, As I?m busy setting up Anycast services, I get requested (for automated authentication of ASN ownership) to add entries to the remarks attribute on the aut-num object. At present I have to log requests with hsotmaster at afrinic to assist. Request: Could we have this field to be create/added and be made updatable by the resource owners --- Hendrik Visage --- Hendrik Visage hvisage at hevis.co.za HeViS.Co Systems Pty Ltd https://www.envisage.co.za -------------- next part -------------- An HTML attachment was scrubbed... URL: From geier at geier.ne.tz Tue Oct 28 04:46:44 2025 From: geier at geier.ne.tz (Frank Habicht) Date: Tue, 28 Oct 2025 07:46:44 +0300 Subject: [DBWG] Proposal request: Geofeed attribute - RFC 9632 (old RFC9092) In-Reply-To: <44B44364-96E7-44A3-B09C-0B2F8B9BCC2D@hevis.co.za> References: <0A0F63F4-66F6-457D-97C8-0CBCF777E6FE@hevis.co.za> <44B44364-96E7-44A3-B09C-0B2F8B9BCC2D@hevis.co.za> Message-ID: <8383c513-aa34-4fa0-b198-eb724ad1f16c@geier.ne.tz> Hi Henrik, everyone, Welcome to the group. I suggest we allow for 2 weeks (until Nov 11 inclusive) for everyone to share their opinions/contributions here. In the meantime AfriNIC staff can prepare their impact assessment with all pros/cons for this and then share *after* above date. I think it's a good proposal and the right way forward. All of it. Because it's also very well stated by Henrik. Btw: personally I have created inetnum objects for subnets of the allocation and put the geofeed through the remarks attribute there. I think that's a work-around and the proposed solution by Henrik is allowing the real straight-forward solution. Greetings, Frank co-chair On 10/27/2025 4:08 PM, Hendrik Visage wrote: > > Good day, > > > So as a new member I?ll start to mention some pain points that hit me with the AfriNIC WHOIS database, and lets start with the Geofeed attribute: > > Afrinic whois doesn?t currently support that tag. The original RFC9092 was published July 2021, while the new RFC9632 was published in Aug 2024. > > Current Afrinic support is only the Remarks attribute, but that attribute, at least for PI resources, isn?t writeable/updatable by the resouce owner, and requires hostmaster at afrinic to assist. > > Proposal: AfriNIC WHOIS db to include the Geofeed attribute, and allow the resource owners to add and update it themselves. > > Hendrik Visage > > > --- > > Hendrik Visage > > hvisage at hevis.co.za > > > HeViS.Co Systems Pty Ltd > > https://www.envisage.co.za > > > > > _______________________________________________ > DBWG mailing list > DBWG at afrinic.net > https://lists.afrinic.net/mailman/listinfo/dbwg From geier at geier.ne.tz Tue Oct 28 04:59:37 2025 From: geier at geier.ne.tz (Frank Habicht) Date: Tue, 28 Oct 2025 07:59:37 +0300 Subject: [DBWG] Remarks attribute for aut-num In-Reply-To: <2B5B8CCE-50D6-482E-9B3C-1EBD1142914C@hevis.co.za> References: <2B5B8CCE-50D6-482E-9B3C-1EBD1142914C@hevis.co.za> Message-ID: <34ca7c75-b086-4287-aeae-b57cd9cb5f74@geier.ne.tz> Hi Hendrik, Thanks for this request / proposal (separate from the other). I have to admit that I was not aware of the use of the aut-num remarks attribute for authentication, but it does make sense. I would also here suggest that we have a 2-weeks comment period for everyone to bring their views and contributions (and queries), until November 11th inclusive. Meantime AfriNIC staff can prepare an impact assessment for this proposal. If there are any hard facts about implementation or the database mechanics that need to be considered in the discussion, I believe in this case it's good we hear them from staff even before expiry of the next 2 weeks, i.e. as soon as possible. Could staff also find out and share how this is handled in the other RIRs. Do these have any way (web interface...???) for members to modify 'remarks' attributes of aut-num objects? Thank you. Greetings, Frank (co-chair) On 10/27/2025 4:10 PM, Hendrik Visage wrote: > Good day, > > ?As I?m busy setting up Anycast services, I get requested (for > automated authentication of ASN ownership) to add entries to the remarks > attribute on the aut-num object. At present I have to log requests with > hsotmaster at afrinic to assist. > > Request: Could we have this field to be create/added and be made > updatable by the resource owners > > --- > Hendrik Visage > > --- > > Hendrik Visage > > hvisage at hevis.co.za > > > HeViS.Co Systems Pty Ltd > > https://www.envisage.co.za > > > _______________________________________________ > DBWG mailing list > DBWG at afrinic.net > https://lists.afrinic.net/mailman/listinfo/dbwg From hvisage at hevis.co.za Tue Oct 28 10:41:57 2025 From: hvisage at hevis.co.za (Hendrik Visage) Date: Tue, 28 Oct 2025 10:41:57 +0000 Subject: [DBWG] Remarks attribute for aut-num In-Reply-To: <34ca7c75-b086-4287-aeae-b57cd9cb5f74@geier.ne.tz> References: <2B5B8CCE-50D6-482E-9B3C-1EBD1142914C@hevis.co.za> <34ca7c75-b086-4287-aeae-b57cd9cb5f74@geier.ne.tz> Message-ID: <4A920A0C-3BCD-48A7-8F52-D0B5B7D64AEA@hevis.co.za> > On 28 Oct 2025, at 06:59, Frank Habicht wrote: > > Hi Hendrik, > > Thanks for this request / proposal (separate from the other). > > I have to admit that I was not aware of the use of the aut-num remarks attribute for authentication, but it does make sense. My request [AFRINIC Hostmaster #1001319] just now got pushed back another day or so to explain this exact reason :D Any case Refer to AS213481 (RIPE) where I did similar of what I what to achieve > Could staff also find out and share how this is handled in the other RIRs. Do these have any way (web interface...???) for members to modify 'remarks' attributes of aut-num objects? Screen shots of RIPE DB web interface (Would LOVE to have AfriNIC at this level ;) of the process to add the remarks field (and what other attributes is addable and updatable with HostMaster interaction) [cid:e4862f79-64cd-4eee-927d-d715e52e04b8 at indiv5.local] [cid:bb0f68f3-bbb2-4ae8-86e6-422c17021aab at indiv5.local] --- Hendrik Visage hvisage at hevis.co.za HeViS.Co Systems Pty Ltd https://www.envisage.co.za -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: PastedGraphic-1.png Type: image/png Size: 205173 bytes Desc: PastedGraphic-1.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: PastedGraphic-2.png Type: image/png Size: 193615 bytes Desc: PastedGraphic-2.png URL: From james.chirwa at afrinic.net Tue Oct 28 11:29:24 2025 From: james.chirwa at afrinic.net (James Chirwa) Date: Tue, 28 Oct 2025 15:29:24 +0400 Subject: [DBWG] Remarks attribute for aut-num In-Reply-To: <4A920A0C-3BCD-48A7-8F52-D0B5B7D64AEA@hevis.co.za> References: <2B5B8CCE-50D6-482E-9B3C-1EBD1142914C@hevis.co.za> <34ca7c75-b086-4287-aeae-b57cd9cb5f74@geier.ne.tz> <4A920A0C-3BCD-48A7-8F52-D0B5B7D64AEA@hevis.co.za> Message-ID: <4e8a9da3-1284-47dc-b14d-9fb66ac1374a@afrinic.net> Hi Hendrik, I take note of your concern and would like to clarify the circumstances. Your request is a unique one, I have to say, it?s the first time we?ve received this type of inquiry. When we ask for additional information, it is mainly to: 1. Ensure that our response and actions accurately meet the member?s expectations. 2. Gain a better understanding of a new use case, which helps us enhance our support content for similar future requests. Be assured that your request is being taken care of. Regards, James Regards, On 28/10/2025 14:41, Hendrik Visage wrote: > > > > On 28 Oct 2025, at 06:59, Frank Habicht wrote: > > > > Hi Hendrik, > > > > Thanks for this request / proposal (separate from the other). > > > > I have to admit that I was not aware of the use of the aut-num > remarks attribute for authentication, but it does make sense. > > > My request [AFRINIC Hostmaster #1001319]? just now got pushed back > another day or so to explain this exact reason :D > > Any case Refer to AS213481 (RIPE) where I did similar of what I what > to achieve > > > Could staff also find out and share how this is handled in the other > RIRs. Do these have any way (web interface...???) for members to > modify 'remarks' attributes of aut-num objects? > > Screen shots of RIPE DB web interface (Would LOVE to have AfriNIC at > this level ;) of the process to add the remarks field (and what other > attributes is addable and updatable with HostMaster interaction) > > > > > > > --- > > Hendrik Visage > > hvisage at hevis.co.za > > > HeViS.Co Systems Pty Ltd > > https://www.envisage.co.za > > > _______________________________________________ > DBWG mailing list > DBWG at afrinic.net > https://lists.afrinic.net/mailman/listinfo/dbwg -- James Chirwa Head of Member Services African Network Information Centre (AFRINIC) Limited t: +230 403 51 00 | dir: +230 403 51 42 f: +230 466 6758 w:www.afrinic.net | tt: @afrinic SM: facebook.com/afrinic | flickr.com/afrinic | youtube.com/afrinicmedia -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: PastedGraphic-1.png Type: image/png Size: 205173 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: PastedGraphic-2.png Type: image/png Size: 193615 bytes Desc: not available URL: From hvisage at hevis.co.za Tue Oct 28 11:44:46 2025 From: hvisage at hevis.co.za (Hendrik Visage) Date: Tue, 28 Oct 2025 11:44:46 +0000 Subject: [DBWG] Remarks attribute for aut-num In-Reply-To: <4e8a9da3-1284-47dc-b14d-9fb66ac1374a@afrinic.net> References: <2B5B8CCE-50D6-482E-9B3C-1EBD1142914C@hevis.co.za> <34ca7c75-b086-4287-aeae-b57cd9cb5f74@geier.ne.tz> <4A920A0C-3BCD-48A7-8F52-D0B5B7D64AEA@hevis.co.za> <4e8a9da3-1284-47dc-b14d-9fb66ac1374a@afrinic.net> Message-ID: <6A12C06F-545D-41D9-87E0-29A0E1C2349B@hevis.co.za> Thank you James! Yes, it?s just that I didn?t see it as too unique? perhaps ?cause I?m trying to do things that operators of RIPE experience as ?expected behaviour? and yet different at AfriNIC. What I also tried to highlight: There are lots of stuff that is user-modifiable at RIPE but needs hostmaster interaction at AfriNIC. The reason I am comparing against RIPE, is that I first had to learn to operate RIPE?s DB while awaiting OR resource approval. So Thank you for the clarification, it is appreciated, and I grasp that 3years of in-limbo operations wasn?t good for the AfriNIC staff either. My wish is that AfriNIC with the board in place, can start focussing on improving these type of services to comparable levels of the other RIRs DB access and automations --- Hendrik Visage Director - HeViS.Co Systems Pty Ltd T/A Envisage Cloud Solutions Mobile: +27-84-612-5345 hvisage at hevis.co.za hvisage at envisage.co.za Instant messaging: https://t.me/hvisage On 28 Oct 2025, at 13:29, James Chirwa wrote: Hi Hendrik, I take note of your concern and would like to clarify the circumstances. Your request is a unique one, I have to say, it?s the first time we?ve received this type of inquiry. When we ask for additional information, it is mainly to: 1. Ensure that our response and actions accurately meet the member?s expectations. 2. Gain a better understanding of a new use case, which helps us enhance our support content for similar future requests. Be assured that your request is being taken care of. Regards, James Regards, On 28/10/2025 14:41, Hendrik Visage wrote: > On 28 Oct 2025, at 06:59, Frank Habicht wrote: > > Hi Hendrik, > > Thanks for this request / proposal (separate from the other). > > I have to admit that I was not aware of the use of the aut-num remarks attribute for authentication, but it does make sense. My request [AFRINIC Hostmaster #1001319] just now got pushed back another day or so to explain this exact reason :D Any case Refer to AS213481 (RIPE) where I did similar of what I what to achieve > Could staff also find out and share how this is handled in the other RIRs. Do these have any way (web interface...???) for members to modify 'remarks' attributes of aut-num objects? Screen shots of RIPE DB web interface (Would LOVE to have AfriNIC at this level ;) of the process to add the remarks field (and what other attributes is addable and updatable with HostMaster interaction) --- Hendrik Visage hvisage at hevis.co.za HeViS.Co Systems Pty Ltd https://www.envisage.co.za _______________________________________________ DBWG mailing list DBWG at afrinic.net https://lists.afrinic.net/mailman/listinfo/dbwg -- James Chirwa Head of Member Services African Network Information Centre (AFRINIC) Limited t: +230 403 51 00 | dir: +230 403 51 42 f: +230 466 6758 w: www.afrinic.net | tt: @afrinic SM: facebook.com/afrinic | flickr.com/afrinic | youtube.com/afrinicmedia --- Hendrik Visage hvisage at hevis.co.za HeViS.Co Systems Pty Ltd https://www.envisage.co.za -------------- next part -------------- An HTML attachment was scrubbed... URL: From james.chirwa at afrinic.net Tue Oct 28 13:39:20 2025 From: james.chirwa at afrinic.net (James Chirwa) Date: Tue, 28 Oct 2025 17:39:20 +0400 Subject: [DBWG] Remarks attribute for aut-num In-Reply-To: <6A12C06F-545D-41D9-87E0-29A0E1C2349B@hevis.co.za> References: <2B5B8CCE-50D6-482E-9B3C-1EBD1142914C@hevis.co.za> <34ca7c75-b086-4287-aeae-b57cd9cb5f74@geier.ne.tz> <4A920A0C-3BCD-48A7-8F52-D0B5B7D64AEA@hevis.co.za> <4e8a9da3-1284-47dc-b14d-9fb66ac1374a@afrinic.net> <6A12C06F-545D-41D9-87E0-29A0E1C2349B@hevis.co.za> Message-ID: You?re welcome, Hendrik, and thank you for your understanding. The restoration of the Board of Directors is indeed a positive development, and we look forward to making progress in enhancing the products and service delivery. Best regards, James On 28/10/2025 15:44, Hendrik Visage wrote: > Thank you James! > > ?Yes, it?s just that I didn?t see it as too unique? perhaps ?cause I?m > trying to do things that operators of RIPE experience as ?expected > behaviour? and yet different at AfriNIC. > > ?What I also tried to highlight: There are lots of stuff that is > user-modifiable at RIPE ?but needs hostmaster interaction at AfriNIC. > The reason I am comparing ?against RIPE, is that I first had to learn > to operate RIPE?s DB while awaiting OR resource approval. > > ?So Thank you for the clarification, it is appreciated, and I grasp > that 3years of ?in-limbo operations wasn?t good for the AfriNIC staff > either. > > My wish is that AfriNIC with the board in place, can start focussing > on improving these type of services to comparable levels of the other > RIRs DB access and automations > > --- > Hendrik Visage > Director - HeViS.Co Systems Pty Ltd > T/A ?Envisage Cloud Solutions > Mobile: +27-84-612-5345 > hvisage at hevis.co.za > hvisage at envisage.co.za > Instant messaging: https://t.me/hvisage > > >> On 28 Oct 2025, at 13:29, James Chirwa wrote: >> >> Hi Hendrik, >> >> I take note of your concern and would like to clarify the circumstances. >> >> Your request is a unique one, I have to say, it?s the first time >> we?ve received this type of inquiry. When we ask for additional >> information, it is mainly to: >> >> 1. Ensure that our response and actions accurately meet the member?s >> expectations. >> 2. Gain a better understanding of a new use case, which helps us >> enhance our support content for similar future requests. >> >> Be assured that your request is being taken care of. >> >> Regards, >> >> James >> >> >> Regards, >> On 28/10/2025 14:41, Hendrik Visage wrote: >>> >>> >>> > On 28 Oct 2025, at 06:59, Frank Habicht wrote: >>> > >>> > Hi Hendrik, >>> > >>> > Thanks for this request / proposal (separate from the other). >>> > >>> > I have to admit that I was not aware of the use of the aut-num >>> remarks attribute for authentication, but it does make sense. >>> >>> >>> My request [AFRINIC Hostmaster #1001319]? just now got pushed back >>> another day or so to explain this exact reason :D >>> >>> Any case Refer to AS213481 (RIPE) where I did similar of what I what >>> to achieve >>> >>> > Could staff also find out and share how this is handled in the >>> other RIRs. Do these have any way (web interface...???) for members >>> to modify 'remarks' attributes of aut-num objects? >>> >>> Screen shots of RIPE DB web interface (Would LOVE to have AfriNIC at >>> this level ;) of the process to add the remarks field (and what >>> other attributes is addable and updatable with HostMaster interaction) >>> >>> >>> >>> >>> >>> >>> >>> >>> --- >>> >>> Hendrik Visage >>> >>> hvisage at hevis.co.za >>> >>> >>> HeViS.Co Systems Pty Ltd >>> >>> https://www.envisage.co.za >>> >>> >>> >>> >>> _______________________________________________ >>> DBWG mailing list >>> DBWG at afrinic.net >>> https://lists.afrinic.net/mailman/listinfo/dbwg >> -- >> James Chirwa >> Head of Member Services >> African Network Information Centre (AFRINIC) Limited >> t: +230 403 51 00 | dir: +230 403 51 42 >> f: +230 466 6758 >> w:www.afrinic.net | tt: @afrinic >> SM: facebook.com/afrinic | flickr.com/afrinic | youtube.com/afrinicmedia > > --- > > Hendrik Visage > > hvisage at hevis.co.za > > > HeViS.Co Systems Pty Ltd > > https://www.envisage.co.za > -- James Chirwa Head of Member Services African Network Information Centre (AFRINIC) Limited t: +230 403 51 00 | dir: +230 403 51 42 f: +230 466 6758 w:www.afrinic.net | tt: @afrinic SM: facebook.com/afrinic | flickr.com/afrinic | youtube.com/afrinicmedia -------------- next part -------------- An HTML attachment was scrubbed... URL: From hvisage at hevis.co.za Wed Oct 29 20:34:56 2025 From: hvisage at hevis.co.za (Hendrik Visage) Date: Wed, 29 Oct 2025 20:34:56 +0000 Subject: [DBWG] Creation of Hierarchical AS-SET problems Message-ID: <53D1C427-6E97-48A5-9839-3593EA39EFA0@hevis.co.za> Good day, I want to create a hierarchical AS-SET AS329532:AS-ENVISAGE-AF similar to AS213481:AS-ENVISAGE-RIPE as-set: AS213481:AS-ENVISAGE-RIPE members: AS213481 members: AS216243 members: as-as329532 tech-c: NO2631-RIPE admin-c: NO2631-RIPE mnt-by: ENVISAGE-CLOUD-MNT created: 2025-02-03T12:48:32Z last-modified: 2025-10-29T19:14:03Z source: RIPE First problem: my.afrinic.net IRR?s as-set doesn?t accept that (the whois.afrinic.net webui is in maintenance mode, so can?t test that at present either) Also looking at Apnic documentation it matches their examples at https://www.apnic.net/manage-ip/using-whois/guide/as-set/#:~:text=The%20name%20of%20a%20set,starts%20with%20'AS%2D'. mnars.org gives a similar example: https://manrs.org/2022/12/why-network-operators-should-use-hierarchical-as-sets/ Trying via Email, I get the following error: --- Create FAILED: [as-set] AS329532:AS-ENVISAGE-AF as-set: AS329532:AS-ENVISAGE-AF descr: Envisage Cloud Solutions descr: Anycast usage members: AS329532 remarks: LAGRANGE.CLOUD-4a295058e187ceaa43e7da0fb248645c org: ORG-HCSL1-AFRINIC tech-c: HV2-AFRINIC admin-c: HV2-AFRINIC notify: sysadmin at hevis.co.za mnt-by: HCSL1-MNT changed: hvisage at hevis.co.za 20251029 source: AFRINIC ***Error: Authorisation for parent [aut-num] AS329532 failed using "mnt-by:" not authenticated by: AFRINIC-HM-MNT Am I missing something in the request? I can however create a non-hierarchical one like, but want to create one similar to the examples as used elsewhere. % Information related to 'as-AS329532' as-set: as-AS329532 admin-c: HV2-AFRINIC tech-c: HV2-AFRINIC descr: ECS-as-set mnt-by: HCSL1-MNT source: AFRINIC # Filtered members: AS213481 members: AS329532 Sub-Problem 3: as-AS329532 doesn?t show up in my.afrinic.net ?s IRR AS-SET page, as (at creation time) ORG wasn?t filled in -> shouldn?t that be rather made a mandatory field? --- Hendrik Visage Director - HeViS.Co Systems Pty Ltd T/A Envisage Cloud Solutions Mobile: +27-84-612-5345 hvisage at hevis.co.za hvisage at envisage.co.za Instant messaging: https://t.me/hvisage --- Hendrik Visage hvisage at hevis.co.za HeViS.Co Systems Pty Ltd https://www.envisage.co.za From hvisage at hevis.co.za Wed Oct 29 21:50:52 2025 From: hvisage at hevis.co.za (Hendrik Visage) Date: Wed, 29 Oct 2025 21:50:52 +0000 Subject: [DBWG] Creation of Hierarchical AS-SET problems In-Reply-To: <53D1C427-6E97-48A5-9839-3593EA39EFA0@hevis.co.za> References: <53D1C427-6E97-48A5-9839-3593EA39EFA0@hevis.co.za> Message-ID: Seems Apnic is curently only allowing hierarchical AS-SETs https://www.apnic.net/community/policy/resources#a_h_10_7 Proposed and implemented in 2023: https://www.apnic.net/community/policy/proposals/prop-151/ --- Hendrik Visage Director - HeViS.Co Systems Pty Ltd T/A Envisage Cloud Solutions Mobile: +27-84-612-5345 hvisage at hevis.co.za hvisage at envisage.co.za Instant messaging: https://t.me/hvisage On 29 Oct 2025, at 22:34, Hendrik Visage wrote: Good day, I want to create a hierarchical AS-SET AS329532:AS-ENVISAGE-AF similar to AS213481:AS-ENVISAGE-RIPE as-set: AS213481:AS-ENVISAGE-RIPE members: AS213481 members: AS216243 members: as-as329532 tech-c: NO2631-RIPE admin-c: NO2631-RIPE mnt-by: ENVISAGE-CLOUD-MNT created: 2025-02-03T12:48:32Z last-modified: 2025-10-29T19:14:03Z source: RIPE First problem: my.afrinic.net IRR?s as-set doesn?t accept that (the whois.afrinic.net webui is in maintenance mode, so can?t test that at present either) Also looking at Apnic documentation it matches their examples at https://www.apnic.net/manage-ip/using-whois/guide/as-set/#:~:text=The%20name%20of%20a%20set,starts%20with%20'AS%2D'. mnars.org gives a similar example: https://manrs.org/2022/12/why-network-operators-should-use-hierarchical-as-sets/ Trying via Email, I get the following error: --- Create FAILED: [as-set] AS329532:AS-ENVISAGE-AF as-set: AS329532:AS-ENVISAGE-AF descr: Envisage Cloud Solutions descr: Anycast usage members: AS329532 remarks: LAGRANGE.CLOUD-4a295058e187ceaa43e7da0fb248645c org: ORG-HCSL1-AFRINIC tech-c: HV2-AFRINIC admin-c: HV2-AFRINIC notify: sysadmin at hevis.co.za mnt-by: HCSL1-MNT changed: hvisage at hevis.co.za 20251029 source: AFRINIC ***Error: Authorisation for parent [aut-num] AS329532 failed using "mnt-by:" not authenticated by: AFRINIC-HM-MNT Am I missing something in the request? I can however create a non-hierarchical one like, but want to create one similar to the examples as used elsewhere. % Information related to 'as-AS329532' as-set: as-AS329532 admin-c: HV2-AFRINIC tech-c: HV2-AFRINIC descr: ECS-as-set mnt-by: HCSL1-MNT source: AFRINIC # Filtered members: AS213481 members: AS329532 Sub-Problem 3: as-AS329532 doesn?t show up in my.afrinic.net ?s IRR AS-SET page, as (at creation time) ORG wasn?t filled in -> shouldn?t that be rather made a mandatory field? --- Hendrik Visage Director - HeViS.Co Systems Pty Ltd T/A Envisage Cloud Solutions Mobile: +27-84-612-5345 hvisage at hevis.co.za hvisage at envisage.co.za Instant messaging: https://t.me/hvisage --- Hendrik Visage hvisage at hevis.co.za HeViS.Co Systems Pty Ltd https://www.envisage.co.za -------------- next part -------------- An HTML attachment was scrubbed... URL: From sofia at apnic.net Thu Oct 30 21:58:25 2025 From: sofia at apnic.net (Sofia Silva Berenguer) Date: Thu, 30 Oct 2025 21:58:25 +0000 Subject: [DBWG] Discussion: Draft on RPKI Trust Anchor Constraints in SIDROPS Message-ID: (Apologies for duplication) Hello all, The NRO RPKI Program [1] has published a blog post explaining the proposed solution to concerns with the current RPKI Trust Anchor configuration, now documented in the Internet-Draft https://www.ietf.org/archive/id/draft-nro-sidrops-ta-constraints-00.txt The draft defines a mechanism that allows RPKI Trust Anchors (TAs) to declare which TA is authoritative for which Internet Number Resources, helping prevent RPKI validation conflicts. You can read the blog post here: https://blog.apnic.net/2025/10/30/a-solution-to-the-concerns-about-the-current-rpki-trust-anchor-configuration/ We welcome feedback and discussion on the sidrops mailing list [2] and during the upcoming SIDROPS WG session at IETF 124 (Montreal, Nov 3) [3]. Warm regards, Sof?a ? [1] https://www.nro.net/technical-coordination/nro-rpki-program/ [2] https://mailman3.ietf.org/mailman3/lists/sidrops at ietf.org/ [3] https://datatracker.ietf.org/meeting/124/session/sidrops -- I am sending this email at a time that suits me and the time zone I work in. Please feel free to read, and act on or respond, at a time that suits you. ____________________________________________________________________ Sof?a Silva Berenguer NRO RPKI Program Manager e: sofia at apnic.net ____________________________________________________________________ -------------- next part -------------- An HTML attachment was scrubbed... URL: