i think the bottom line here is that the IRR, and by that i mean the total collection of IRR instances, is poorly secured by design. we can spend a lot of time with patches and workarounds, or we can take it for what it is and live with it.
if you want security and authenticity by design, use the RPKI you can buy a wooden or a fiberglass sailboat. do you want to spend your life sanding or sailing? randy
