Hi Randy AS4755 does not do ROV. AS6453 does but only for peers, not downstream side yet. From measurements, I see not all but quite a few invalids in their full table. E.g invalid.rpki.isbgpsafeyet.com - AS13335 - intentionally kept with AS0 ROA and on downstream side of AS6453. Lookup via their looking glass: [image: image.png] Comparing it with an invalid coming from their peering side: 2a02:26f0:128::/48 - originated by AS6762 (peer of AS6453): [image: image.png] Some of this confusion comes from incorrectly shown status of AS6453 on https://isbgpsafeyet.com. Thanks. On Wed, Jul 16, 2025 at 11:12 PM Randy Bush via NANOG <nanog@lists.nanog.org> wrote:
https://blog.cloudflare.com/cloudflare-1-1-1-1-incident-on-july-14-2025/ https://anuragbhatia.com/post/2025/07/cloudflare-dns-outage/
nice analyses of causes. but my interest was in the effect of rov on constraining propagation within the topology.
randy _______________________________________________ NANOG mailing list
https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/7QEM2JWC...
-- Anurag Bhatia anuragbhatia.com