Yeah ,that's what I meant. They can remove the certificate for the resource
holder and sign a new certificate for these resources and set ROA for as0
only. Technically speaking.

*Brandon Z.*
HUIZE LTD
www.huize.asia  <https://huize.asia/>| www.ixp.su | Twitter

This e-mail and any attachments or any reproduction of this e-mail in
whatever manner are confidential and for the use of the addressee(s) only.
HUIZE LTD can’t take any liability and guarantee of the text of the email
message and virus.


On Fri, Nov 15, 2024 at 01:21 William Herrin <b...@herrin.us> wrote:

> On Thu, Nov 14, 2024 at 9:03 AM Tom Beecher <beec...@beecher.cc> wrote:
> > As explained earlier,  RIRs cannot "create" INVALIDs.
>
> Hi Tom,
>
> Wouldn't they just withdraw the delegation and issue an AS0 ROA
> covering the address block? Does that not cause the associated route
> advertisements to become RPKI invalid?
>
> Regards,
> Bill Herrin
>
>
> --
> William Herrin
> b...@herrin.us
> https://bill.herrin.us/
>

Reply via email to