RFC 8145 Root Trust Anchor Reports
(too old to reply)
Matthew Luckie
2018-09-07 02:44:12 UTC
From http://root-trust-anchor-reports.research.icann.org/ :

The ICANN org is publishing the IP addresses that are sending RFC
8145 telemetry ostensibly indicating that a resolver at the reported
address (or another resolver that is forwarding through the resolver
at the address) is validating using only KSK-2010 as a trust
anchor. Publishing these addresses allows ISPs and other
organizations who know who operates resolvers at those addresses to
contact the resolver operator and notify them of the need to update
their DNSSEC trust anchors. Without further action, these resolvers
will stop working after the root KSK is rolled on 11 October 2018.


The following ASes have their country recorded as NZ in whois, and are
in the ICANN list. The following resolvers may or may not be operated
by the ASN identified.

4771 Spark 122-56-234-219.mobile.spark.co.nz. 122-57-192-56-adsl.sparkbb.co.nz. 122-61-118-222-adsl.sparkbb.co.nz. rns6.xtra.co.nz. 222-153-3-78-fibre.sparkbb.co.nz. 222-154-149-63-fibre.sparkbb.co.nz.

9500 Vodafone akrdns2.akl.vf.net.nz. akrdns3.akl.vf.net.nz. akrdns4.akl.vf.net.nz. cbrdns1.chc.vf.net.nz. cbrdns2.chc.vf.net.nz. 210-246-17-115.dsl.dyn.ihug.co.nz.

23655 SNAP

24183 DTS

38793 2degrees 52-149-148-118.nzcomms.co.nz. 121-151-149-118.nzcomms.co.nz.

45177 Vibe cdns-02.as45177.net.

45179 SiteHost 103-250-234-202.static.webslice.co.nz.

45267 Lightwire 114-134-0-194.lightwire.co.nz.

132347 MikiPro

132692 GlobiCom vpn2.torguardvpnaccess.com.

133607 Web Connect

135069 Feenix 103-208-143-164.feenix.co.nz.

Further information is available at the ICANN site, and it might pay
for other operators on NZNOG to double check the ICANN list.



Continue reading on narkive: