[afnog] RPKI

[Saul]

Hi Randy, 
Thanks.
Just a question (OK, yet another one ;-) )

>ROAs vs ROA records
>I personally think this is bad practice.
>One wants to control each separately.

Are you saying instead of creating one ROA for say 154.72.96.0/20 with a
max length of /24

Rather create multiple ROAs one for the /20 and then individuals?

Thanks
Saul

-----Original Message-----
From: Randy Bush [mailto:randy at psg.com] 
Sent: 31 July 2015 10:25 AM
To: Saul <saul at enetworks.co.za>
Cc: Mark Tinka <mark.tinka at seacom.mu>; Nishal Goburdhan
<nishal at controlfreak.co.za>; afnog at afnog.org
Subject: Re: [afnog] RPKI

> So ultimately, how stable/reliable is the RPKI system/policy
implementation? 
> Or is the system fine, but AFRNICs systems aren't?

you may find http://archive.psg.com/141006.rpki-nanog.pdf interesting

randy