[sidr] New RIPE NCC RPKI Validator released

Alex Band <alexb@ripe.net> Tue, 10 April 2012 18:59 UTC

Return-Path: <alexb@ripe.net>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 554FF11E812F for <sidr@ietfa.amsl.com>; Tue, 10 Apr 2012 11:59:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0XZVpybANttf for <sidr@ietfa.amsl.com>; Tue, 10 Apr 2012 11:59:09 -0700 (PDT)
Received: from postlady.ripe.net (postlady.ipv6.ripe.net [IPv6:2001:67c:2e8:11::c100:1341]) by ietfa.amsl.com (Postfix) with ESMTP id 66B9411E80F2 for <sidr@ietf.org>; Tue, 10 Apr 2012 11:59:09 -0700 (PDT)
Received: from ayeaye.ripe.net ([193.0.23.5]) by postlady.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.72) (envelope-from <alexb@ripe.net>) id 1SHgHT-0005ym-DI for sidr@ietf.org; Tue, 10 Apr 2012 20:59:08 +0200
Received: from s258-sslvpn-1.ripe.net ([193.0.20.231] helo=vpn-70.ripe.net) by ayeaye.ripe.net with esmtp (Exim 4.72) (envelope-from <alexb@ripe.net>) id 1SHgHT-0005yo-9H for sidr@ietf.org; Tue, 10 Apr 2012 20:59:07 +0200
From: Alex Band <alexb@ripe.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_611F7FE4-8262-4BB6-8131-46AADDC4A4CE"; protocol="application/pkcs7-signature"; micalg="sha1"
Date: Tue, 10 Apr 2012 20:59:06 +0200
Message-Id: <A3B56E55-1A10-4304-8561-A51D9260BAEB@ripe.net>
To: sidr@ietf.org
Mime-Version: 1.0 (Apple Message framework v1257)
X-Mailer: Apple Mail (2.1257)
X-RIPE-Spam-Level: --
X-RIPE-Spam-Report: Spam Total Points: -2.9 points pts rule name description ---- ---------------------- ------------------------------------ -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000]
X-RIPE-Signature: ddd0bbf11d1e21354000f5f053f5ae697bef3aea1e194107d0b460a0da8d098a
Subject: [sidr] New RIPE NCC RPKI Validator released
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sidr>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Apr 2012 18:59:10 -0000

We just released a new version of our relying party software, RIPE NCC RPKI Validator 2.0.4:
http://www.ripe.net/lir-services/resource-management/certification/tools-and-resources

We improved the way errors and warnings are displayed, they now have a separate page with (hopefully) clear explanations. 
Also, we improved the rsync data fetching reliability. If a trust anchor is unavailable momentarily or for prolonged periods of time, the tool will now reschedule fetching as needed. 

We would really like you to try it out and report back on the stability and reliability from different parts of the world, especially when running it for longer periods of time.

As always, the Validator requires no configuration and has no dependencies other than Java 1.6 and rsync available on your system. 
Simply download, unzip and run ./bin/rpki-validator from the base directory and browse to http://localhost:8080

Cheers and thanks,

Alex