On Thu, 18 Mar 2021, Nathalie Trenaman wrote:
Currently, some of our upstream providers already perform ROV. This means that some of our members that potentially misconfigured their ROA or members who have lost control of creation and modification of their ROAs cannot reach our services via those peers.
Thanks for the outreach to the community. Indeed, as stated above, the more providers are enabling RPKI, the less consequential it is whether RIPE NCC is performing ROV or not. This, as the scales tip to "if you made a ROA mistake you can't talk to the Internet", it instead becomes important that RIPE NCC staff has deep knowledge in how the RPKI ecosystem works, including monitoring etc. That would be an upside to performing ROV and implementing all monitoring that should come with it. Then RIPE NCC will have staff with operational knowledge of all aspects of routing, ROV and RPKI. I believe this would be beneficial to RIPE NCC and the Internet as a whole.
Thanks. -- Mikael Abrahamsson email: swm...@swm.pp.se
