Hi, On Wed, Oct 14, 2026 at 05:17:33PM +0000, Job Snijders wrote:
On Wed, Oct 14, 2026 at 06:57:03PM +0200, Gert Doering wrote:
On Wed, Oct 14, 2026 at 11:57:17AM +0000, Job Snijders via db-wg wrote:
* NONAUTH objects with a matching VALID ROA. [..] I believe the RIPE-NONAUTH cleanup should not use the dangerous 'AS0' TALs that APNIC & LACNIC maintain alongside their normal 'production' RPKI.
RIPE-NONAUTH has no single object with "origin: AS0".
Yes, but my comment about the presence of AS0 ROAs under these non-standards TALs.
I posit that the cleanup should happen based on the 'normal' Trust Anchors, not the 'special' ones.
"NONAUTH objects with matching valid ROA" would imply "origin: AS0" to be relevant for the "special TAL for AS0 ROAs" question, no? Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet GmbH Geschäftsführer: Sebastian v. Bomhard, Joseph-Dollinger-Bogen 14 Maja von Bomhard D-80807 München HRB: 317057 (AG München) Tel.: (089) 32356-0 USt-IdNr.: DE813185279