RPKI ROA is trivially by-passable with a path modification attack. It only helps stopping hijackings of really well connected networks. And sadly it’s still not

RPKI ROA is trivially by-passable with a path modification attack. It only helps stopping hijackings of really well connected networks. And sadly it’s still not required. > and ASPA is coming Yeah, but it’s not here and requires verification at each AS append, which means we’re a good 5 years before it’s really enforceable on arbitrary prefixes across transit networks.