RPKI and offline routes

Theodore Baschak theodore at ciscodude.net
Mon Jun 13 22:32:52 UTC 2016


Can RPKI be used with routes that are not being advertised at the moment?
As in to sign a route that *could* be there, but is not there presently.

There's been several BGP hijacks that I've followed closely that involved hijacking IP space as well as the ASN that would normally originate it. I'm wondering if having valid ROAs/RPKI would have helped in this case or not. 


Theodore Baschak - AS395089 - Hextet Systems




More information about the NANOG mailing list