Re: deploying RPKI based Origin Validation

On 13/Jul/18 18:37, Grant Taylor via NANOG wrote:

 

Yep.

You would almost need separate logical networks / VRF to be able to prevent the longest prefix match winning issue that you reminded me of.

Oooh, complexity - things we want to avoid :-). Then again, we don't run the Internet in a VRF, so... Mark.