> Yes, we don't validate those prefixes cause we filter them strict.

in our measurements, an rpki-based origin check is significantly faster
than an acl of non-trivial length.

randy

Reply via email to