On 1/Oct/18 09:47, Alex Band wrote:
> > Thus, a continued outage of an RPKI CA (or publication server) will result in > announcements with status NotFound. This means that the prefixes held by this > CA will no longer benefit from protection by the RPKI. However, since only > *invalid* announcements should be dropped, this should not lead to large > scale outages in routing. Indeed, and this is on the basis that operators are not overzealous about aggressively acting against a "NotFound" RPKI state. Mark.