Re: 1.1.1.1

[Anurag Bhatia via NANOG <nanog () lists nanog org>]

Hi Randy


AS4755 does not do ROV. AS6453 does but only for peers, not downstream side
yet. From measurements, I see not all but quite a few invalids in their
full table.

E.g invalid.rpki.isbgpsafeyet.com - AS13335 - intentionally kept with AS0
ROA and on downstream side of AS6453.


Lookup via their looking glass:

[image: image.png]



Comparing it with an invalid coming from their peering side:
2a02:26f0:128::/48 - originated by AS6762 (peer of AS6453):

[image: image.png]



Some of this confusion comes from incorrectly shown status of AS6453 on
https://isbgpsafeyet.com.


Thanks.

On Wed, Jul 16, 2025 at 11:12 PM Randy Bush via NANOG <nanog () lists nanog org>
wrote:

> > >
> https://blog.cloudflare.com/cloudflare-1-1-1-1-incident-on-july-14-2025/
> > https://anuragbhatia.com/post/2025/07/cloudflare-dns-outage/
>
> nice analyses of causes.  but my interest was in the effect of rov
> on constraining propagation within the topology.
>
> randy
> _______________________________________________
> NANOG mailing list
>
> https://lists.nanog.org/archives/list/nanog () lists nanog org/message/7QEM2JWCF7QOZHDWHIBN5RMPK3SRA5S6/


-- 
Anurag Bhatia
anuragbhatia.com
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/7K5ANHGN4PUOEGJK4PYVXQ4K6Z6FYXPW/