Home / Blogs

RIPE NCC Members Secure their Resources Using Certification

Resource certification verifies that an Internet number resource (IP address space or autnonomous system number) has legitimately been allocated by a Regional Internet Registry. It will also benefit every network operator and Internet user in the world by helping to ensure long-term routing stability.

In January 2011 the RIPE NCC launched a system that allows RIPE NCC members (LIRs) to generate a digital certificate for the assignment or allocation of Internet number resources made to them.

As shown in the figure below, the number of certificates for the RIPE NCC trust anchor is 409 as of today. This is the number of LIRs who have generated a certificate for their Internet number resources. The vast majority has also created Route Origin Authorisation (ROA) objects using their certificate, indicating which Autonomous Systems are authorised to announce their IP address blocks.

When the system was launched, we immediately observed a high number of certificates being generated. Since then we could see a steady increase.

In total, LIRs have created ROAs for over 54,000 IPv4 /24 equivalents (0.6% of IPv4 address space publicly announced as seen by the RIPE NCC Routing Information Service) and 13 million IPv6 /48 prefix equivalents.

We would like to encourage all other RIPE NCC members to make use of this system and certify their Internet number resources.

For more information plus a link to the daily updated statistics for the RIPE NCC and the four other RIRs, please refer to the background article on RIPE Labs: Resource Certification Statistics. You can find more information about the Certification system on the RIPE NCC web site: http://www.ripe.net/certification

Filed Under


Comment Title:

  Notify me of follow-up comments

We encourage you to post comments and engage in discussions that advance this post through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can report it using the link at the end of each comment. Views expressed in the comments do not represent those of CircleID. For more information on our comment policy, see Codes of Conduct.

CircleID Newsletter The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.

I make a point of reading CircleID. There is no getting around the utility of knowing what thoughtful people are thinking and saying about our industry.

Co-designer of the TCP/IP Protocols & the Architecture of the Internet



New TLDs

Sponsored byRadix

Threat Intelligence

Sponsored byWhoisXML API


Sponsored byDNIB.com

Domain Names

Sponsored byVerisign

IPv4 Markets

Sponsored byIPv4.Global

Brand Protection

Sponsored byCSC


Sponsored byVerisign