Re: [AusNOG] Experiences with RPKI

2024-05-22 Thread Phil Mawson
Hi Joe, First up, well done on working on your RPKI roll out. Signing your own routes is the most important step you can take to protect your own network. In regards to using max length, I do advise against that as what it means someone can still hijack one of your un-advertised routes and it

[AusNOG] Experiences with RPKI

2024-05-22 Thread Joseph Goldman
G'day list, In the process of rolling out RPKI - and while I thought I had a good grasp on everything, there is one niggling piece of information that I've come against and can't verify. Was hoping people can share their experiences. We are only doing our ROA's to begin with and not