Hi, > Removing a resource from the certificate to achieve the goal you describe > will make the route announcement NotFound, which means it will be accepted. > Evil RIR would have to replace an existing ROA with one that explicitly makes > a route invalid, i.e. issue an AS0 ROA for specific member prefix. This seems > like a pretty convoluted way to try and take a network offline.
I've seen worse… Sander
signature.asc
Description: Message signed with OpenPGP
