[routing-wg] RPKI Route Origin Validation and AS3333

On Thu, 18 Mar 2021, Nathalie Trenaman wrote:

> Currently, some of our upstream providers already perform ROV. This 
> means that some of our members that potentially misconfigured their ROA 
> or members who have lost control of creation and modification of their 
> ROAs cannot reach our services via those peers.

Thanks for the outreach to the community. Indeed, as stated above, the 
more providers are enabling RPKI, the less consequential it is whether 
RIPE NCC is performing ROV or not. This, as the scales tip to "if you made 
a ROA mistake you can't talk to the Internet", it instead becomes 
important that RIPE NCC staff has deep knowledge in how the RPKI ecosystem 
works, including monitoring etc. That would be an upside to performing ROV 
and implementing all monitoring that should come with it. Then RIPE NCC 
will have staff with operational knowledge of all aspects of routing, ROV 
and RPKI. I believe this would be beneficial to RIPE NCC and the Internet 
as a whole.

Thanks.

-- 
Mikael Abrahamsson    email: swmike at swm.pp.se