Hi Randy

AS4755 does not do ROV. AS6453 does but only for peers, not downstream side
yet. From measurements, I see not all but quite a few invalids in their
full table.

E.g invalid.rpki.isbgpsafeyet.com - AS13335 - intentionally kept with AS0
ROA and on downstream side of AS6453.


Lookup via their looking glass:

[image: image.png]



Comparing it with an invalid coming from their peering side:
2a02:26f0:128::/48 - originated by AS6762 (peer of AS6453):

[image: image.png]



Some of this confusion comes from incorrectly shown status of AS6453 on
https://isbgpsafeyet.com.


Thanks.

On Wed, Jul 16, 2025 at 11:12 PM Randy Bush via NANOG <[email protected]>
wrote:

> >>
> https://blog.cloudflare.com/cloudflare-1-1-1-1-incident-on-july-14-2025/
> > https://anuragbhatia.com/post/2025/07/cloudflare-dns-outage/
>
> nice analyses of causes.  but my interest was in the effect of rov
> on constraining propagation within the topology.
>
> randy
> _______________________________________________
> NANOG mailing list
>
> https://lists.nanog.org/archives/list/[email protected]/message/7QEM2JWCF7QOZHDWHIBN5RMPK3SRA5S6/
>


-- 
Anurag Bhatia
anuragbhatia.com
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/[email protected]/message/7K5ANHGN4PUOEGJK4PYVXQ4K6Z6FYXPW/

Reply via email to