It's very important to specify the /24 inside the /23 for example so as you said "for all our subnets being advertised".
On Tue, Nov 1, 2022 at 5:01 PM Randy Bush <ra...@psg.com> wrote: > > Thanks everyone for your inputs. So bottomline setup RPKI and setup ROA's > > for all our subnets being advertised. > > if the BGP advertisements are correct, then mirror them in ROAs. most, > if not all, CA UIs make that easy. > > randy >
