[Dnssec-deployment] Signed high-level reverse zones [was: IN-ADDR.ARPA Nameserver Change Complete]

[Chris Thompson]

Regarding the signing of high-level reverse zones, I wrote on May 5 2011:

[...]
>APNIC are now on board as well:
>
>           IN-ADDR.APPA delegations       IP6.ARPA delegations
>  Owner    with DS      without DS      with DS      without DS
>
>  RIPE         39            -              21            -
>  ARIN         74            -              11            -
>  APNIC        49            -              12            1 [*]
>  Other         -           65               -           11 [*]
>
>  Total       162           65              44           12

[*] These were wrong - the 6to4 space 2.0.0.2.ip6.arpa isn't really APNIC's.

Bringing this up to date:

           IN-ADDR.APPA delegations       IP6.ARPA delegations
  Owner    with DS      without DS      with DS      without DS

  RIPE         39            -              21            -
  ARIN         76            -              11            -
  APNIC        49            -              12            -
  LACNIC        1            9               2            1
  AfriNIC       6            -               3            -
  ICANN        16            -               -            -
  Other         -           32               -            6

  Total       187           41              49            7

The 16 ICANN zones are [224-239].in-addr.arpa (mostly empty).

No-one except the RIRs and ICANN have yet signed such zones. There are
some fairly intriguing delegations of class A IPv4 space from the early
days. The delegations of 20.in-addr.arpa and 34.in-addr.arpa don't
actually work at all.

-- 
Chris Thompson               University of Cambridge Computing Service,
Email: cet1 at ucs.cam.ac.uk    New Museums Site, Cambridge CB2 3QH,
Phone: +44 1223 334715       United Kingdom.