About Applying for ASN

Comments

• SGraf Member, Patron Provider

  October 2023 edited October 2023

  @LTniger said:
  Can someone eli5 how to obtain ASN? Step by step. Pre-requisites etc. I guess we talking about ipv6 only asn's? How much does it cost yearly? What knowlwdge is necessaey to operate asn? CCNA?

  Certainly.

  You only benefit from having your own AS-Number if you want to exchange routing information with two or more other networks via bgp (and have at least a /24 ipv4 or a /48 ipv6 - as those are generally the smallest size networks you will see in "global" routing).

  Other than for routing purposes, the AS-Number has no direct benefits. Its basically just a unique identifier.

  In terms of the AS-Number i makes no difference if you have ipv4 or ipv6 resources.

  The Use-Cases are simple:
  Have a technical need (ie: connect to more than one network(ie:isp), have some ip-resources (assigned to you) that you want to show up in the global routing table and want to exchange said routing information with BGP).

  Lets talk who to obtain an AS-Number from:

  • Generally you always have a RIR that is responsible for the area your Organisation (either natural person, or legal person/company) is located in. (see: https://www.nro.net/list-of-country-codes-ordered-by-rir/ ).
  • For some RIR's there is a model where a User may descide not to go direct with the RIR, but instead go thru a LIR (Local Internet Registry). This is true for Ripe and Arin (called members there), for the other RIR's i am not familiar with the process.
  • ** Generally you should obtain an AS-Number with your responsible RIR. there are some cases where it may be within policy to go to a different rir - but those are the exception..not the normal process..**

  The cost depends on the route you take and who you deal with. The Fees for becoming a Member of a RIR are typically published on their website. This is typically more expensive than just getting resources thru a LIR in most cases.

  So what is the process like?
  This depends on the RIR, but generally all of them will require your network to be "multi-homed", meaning you need to connect to two other networks and will want to exchange route information with BGP.

  In order to process the request:

  • you generally have to pass a KYC Process (ID, ...) sign some paperwork...
  • For Ripe you will also need Objects in their database. The LIR can do this for you, or you can DIY (it wont make much difference either way, because the information will be checked by the LIR and parts of it later validated by RIPE)
  • You can find out all the details at the MyRootPW Knowledge base (for RIPE): https://clients.myrootpw.com/plugin/support_manager/knowledgebase/index/7/
  • Have at least one IPv4 or IPv6 Resource (minimum /24 or /48) that you can use with the AS. Generally your LIR will also be able to help with this.

  Regarding Knowledge to use an AS-Number:

  • You want to configure a router (either software such as bird, ffrrouting, ... or hardware) and establish bgp sessions to your two peers.
  • Afterwards you can "announce" your ip-resources to your peers, and if everything goes to plan, those will be reachable via the public internet.
  • Enjoy and use your ip-resources.

  The AS-Number thing is really more just there so you can be "multi homed" with bgp..." and define your own routing policy if you connect to multiple networks...

  Knowledge Required:

  There are quire a few tutorials online on how to get this done. Regarding your "ccna?" question: No, BGP is outside of the scope of the CCNA curriculum, as it only contains rip and ospf for dynamic routing. For neither of those you will need an AS-Number.

  I hope this helps, let me know if you have any further questions.

  Thanked by 5Levi ralf wedge1001 quicksilver03 alilet
• DeadlyChemist Member

  October 2023

  @yoursunny said:

  @DeadlyChemist said:

  @yoursunny said:
  If you operate in RIPE service region, we recommend @Cloudie , $40 one time with /40 PA prefix.
  https://my.cloudie.sh/index.php?rp=/store/lir-services/asn-registration-ripe

  could you tell me what do i even have to put in all these fields? thanks (private individual)
  it's been on my bucket list for long time to have ASN and later maybe own a ipv6 block...

  Open a ticket and ask.
  They'll give you video tutorials on how to create RIPE objects.
  Tell them I referred you, so I remain in their good list.

  It's unlikely you'll own IPv6 block - getting PI block requires justification and costs €50/year for a /48.
  The order comes with /40 PA block leased to you with no recurring fees.

  @SGraf said:

  @DeadlyChemist said:

  could you tell me what do i even have to put in all these fields? thanks (private individual)
  it's been on my bucket list for long time to have ASN and later maybe own a ipv6 block...

  Or you can go with a LIR such as me. I'm happy to coach you thru the process via chat or ticket... , but my prices are not quite as low as some others that got mentioned in this thread.

  That said you will need a person/maintainer pair. The contents of this should match you as a natural person.
  Then you will need an ORG object. (This should match you, if natural person, or your company if a business). Those fields should be pretty much self explanatory. Name, Address,... You will also need to reference your person and maintainer object in the ORG-Object.

  After that find two Peers that will do bgp with you (Ideally in the location of your choice within the Ripe Service Area.). Get their contact addresses, as-numbers.

  Then you have a bit of paperwork ahead. (Sponsoring agreement will need a signature).

  You will also be required to pass a bit of KYC. Both on the part of the LIR (and for the RipeNCC). Depending on the LIR, they will either collect all the required documents from you and forward it to the ripencc, or supply you with a document upload link for things that go beyond what the LIR can/will/want-to collect from you.

  Feel free to take a look at the MyRootPW Knowlegebase on the topic: https://clients.myrootpw.com/plugin/support_manager/knowledgebase/index/7/

  That said, I'm rather strict on on policy compliant use and resource assignment. This does have its benefits tho, as there will be no unexpected surprises down the road for our clients.

  I also want to note that over the last year we have seen a massive increase in interest in Internet Resource requests from Parties located outside of the service area. Many of those requests we had to reject. Often those cases are not because of a strong connection/presence in the ripe service area or a justified technical need- but are instead a result of trying to "optimize costs" or "find an easier way" compared to going with the correct RIR/...

  first of all thank you both for answering!
  I'd say i have about max 100$ to burn (lol)

  /48 ipv6 is like 65k adresses, for 50€/y recurring? this does not make sense to me, people offer it way cheaper with VPS' is my math wrong?

  yeah i'd like to have an ASN and later a IP block which apperantly i can't OWN but i have to lease?

  we have like, infinite v6 adresses so ehhh

  soon is BF so yeah...
• SGraf Member, Patron Provider

  October 2023 edited October 2023

  @DeadlyChemist said:

  @yoursunny said:

  @DeadlyChemist said:

  @yoursunny said:
  If you operate in RIPE service region, we recommend @Cloudie , $40 one time with /40 PA prefix.
  https://my.cloudie.sh/index.php?rp=/store/lir-services/asn-registration-ripe

  could you tell me what do i even have to put in all these fields? thanks (private individual)
  it's been on my bucket list for long time to have ASN and later maybe own a ipv6 block...

  Open a ticket and ask.
  They'll give you video tutorials on how to create RIPE objects.
  Tell them I referred you, so I remain in their good list.

  It's unlikely you'll own IPv6 block - getting PI block requires justification and costs €50/year for a /48.
  The order comes with /40 PA block leased to you with no recurring fees.

  @SGraf said:

  @DeadlyChemist said:

  could you tell me what do i even have to put in all these fields? thanks (private individual)
  it's been on my bucket list for long time to have ASN and later maybe own a ipv6 block...

  Or you can go with a LIR such as me. I'm happy to coach you thru the process via chat or ticket... , but my prices are not quite as low as some others that got mentioned in this thread.

  That said you will need a person/maintainer pair. The contents of this should match you as a natural person.
  Then you will need an ORG object. (This should match you, if natural person, or your company if a business). Those fields should be pretty much self explanatory. Name, Address,... You will also need to reference your person and maintainer object in the ORG-Object.

  After that find two Peers that will do bgp with you (Ideally in the location of your choice within the Ripe Service Area.). Get their contact addresses, as-numbers.

  Then you have a bit of paperwork ahead. (Sponsoring agreement will need a signature).

  You will also be required to pass a bit of KYC. Both on the part of the LIR (and for the RipeNCC). Depending on the LIR, they will either collect all the required documents from you and forward it to the ripencc, or supply you with a document upload link for things that go beyond what the LIR can/will/want-to collect from you.

  Feel free to take a look at the MyRootPW Knowlegebase on the topic: https://clients.myrootpw.com/plugin/support_manager/knowledgebase/index/7/

  That said, I'm rather strict on on policy compliant use and resource assignment. This does have its benefits tho, as there will be no unexpected surprises down the road for our clients.

  I also want to note that over the last year we have seen a massive increase in interest in Internet Resource requests from Parties located outside of the service area. Many of those requests we had to reject. Often those cases are not because of a strong connection/presence in the ripe service area or a justified technical need- but are instead a result of trying to "optimize costs" or "find an easier way" compared to going with the correct RIR/...

  first of all thank you both for answering!
  I'd say i have about max 100$ to burn (lol)

  /48 ipv6 is like 65k adresses, for 50€/y recurring? this does not make sense to me, people offer it way cheaper with VPS' is my math wrong?

  yeah i'd like to have an ASN and later a IP block which apperantly i can't OWN but i have to lease?

  we have like, infinite v6 adresses so ehhh

  soon is BF so yeah...

  The answer to this is dictated by policy. The billing just reflects it. So lets break down this one. Anything below is just reflective of how Ripe Deals with it - Other RIR's may do it differently.

  Provider Independent (PI): Provider Independent (PI) address space is assigned to End-Users for the purpose of infrastructure. RIPE does not permit these end users to rent out or distribute the IP address space to third parties.

  Provider-aggregatable (PA): Provider-aggregatable (PA) address space is assigned to LIRs who may assign or sub-allocate portions of this address space to customers.

  So when you see PI for 50 per year, that is "at or below cost", as ripe bills every sponsored PI resource to the LIR at 50 / year. This is before you apply any payment gatway fees, administrative work or Tax...

  When you take a look at the Plans for PA listed at MyRotoPW you will see something like "/48 up to /40 IPv6 Assignment". This basically means we "reserve" a /40 per client that has that plan. However due to the policy, we generally make smaller assignments out of that, one /48 at a time ("one for each site"). Unless the end-user can demonstrate a technical need for larger assignments at any given time...

  So in short the "PA" is issued to you at for the duration of your contract with the LIR. You cannot "transfer" it to another LIR, or to yourself if you at some point become a LIR yourself. However in terms of how it can be used.. You can use those resources for yourself and even for some clients of yours. With PA it "usage rights" is granted to you - however you may only use it for yourself.... However you can find a different "sponsoring LIR" at any point.

  "Sponsoring" means that LIR acts as your tether to the ripencc and is your point of contact,.....

  The whole "its so big, just give us $amount of space" really does not work in relation to the policy. See https://www.ripe.net/publications/docs/ripe-738 and https://www.ripe.net/publications/docs/ripe-690

  The real question you got to ask yourself in the long term is this: What happens when the RIR audits your LIR and discovers non complience in terms of policy and space allocations.....

  If you have any other LIR Questions, le me know.

  edit: added a reference to best operational practices

  Thanked by 1ralf
• nezam05 Member

  October 2023

  @LTniger said: Can someone eli5 how to obtain ASN? Step by step

  https://quantum5.ca/2023/10/10/what-i-wish-i-knew-when-i-got-my-asn/

  Best one I read so far on the topic
• tomle Member, LIR

  October 2023

  @SGraf said:
  So in short the "PA" is issued to you at for the duration of your contract with the LIR. You cannot "transfer" it to another LIR, or to yourself if you at some point become a LIR yourself. However in terms of how it can be used.. You can use those resources for yourself and even for some clients of yours. With PI it "usage rights" is granted to you - however you may only use it for yourself.... However you can find a different "sponsoring LIR" at any point.

  For clarity.
• SGraf Member, Patron Provider

  October 2023

  @tomle said:

  @SGraf said:
  So in short the "PA" is issued to you at for the duration of your contract with the LIR. You cannot "transfer" it to another LIR, or to yourself if you at some point become a LIR yourself. However in terms of how it can be used.. You can use those resources for yourself and even for some clients of yours. With PI it "usage rights" is granted to you - however you may only use it for yourself.... However you can find a different "sponsoring LIR" at any point.

  For clarity.

  Thank you for fixing my typing error.