On Wed, Oct 14, 2026 at 09:40:56PM +0200, Gert Doering wrote:
On Wed, Oct 14, 2026 at 05:17:33PM +0000, Job Snijders wrote:
On Wed, Oct 14, 2026 at 06:57:03PM +0200, Gert Doering wrote:
On Wed, Oct 14, 2026 at 11:57:17AM +0000, Job Snijders via db-wg wrote:
* NONAUTH objects with a matching VALID ROA. [..] I believe the RIPE-NONAUTH cleanup should not use the dangerous 'AS0' TALs that APNIC & LACNIC maintain alongside their normal 'production' RPKI.
RIPE-NONAUTH has no single object with "origin: AS0".
Yes, but my comment about the presence of AS0 ROAs under these non-standards TALs.
I posit that the cleanup should happen based on the 'normal' Trust Anchors, not the 'special' ones.
"NONAUTH objects with matching valid ROA" would imply "origin: AS0" to be relevant for the "special TAL for AS0 ROAs" question, no?
Ah, right, thanks. Good point :-) Kind regards, Job