3 ms·
RPKI and ASPA keeps you safer from other networks, but less safe from the registries. Consider what happens if your registry's country sanctions your country an
by pocksuppet 7mo ago
RPKI and ASPA keeps you safer from other networks, but less safe from the registries. Consider what happens if your registry's country sanctions your country and you are unable to update any records held at the registry.
- greyface- 7mo agoRegistries have always had the ability to revoke number assignments; RPKI just makes this revocation slightly more forceful. You're going to have a bad time announcing prefixes that don't belong to you, even in the absence of RPKI. We're all internetworking at the pleasure of IANA. Getting them out of the picture, and removing their ability to deplatform Internet participants, is a much larger task than just moving away from RPKI. We'd need to completely rethink how ASN and IP assignments are done.
- pocksuppet 7mo agoRegistries have tended to leave existing registration data alone in case of a situation like sanctions. They won't let you register more numbers, nor will they deregister them. If you just need the numbers, that's fine. If you also depend on the registry regularly taking data updates from you, that's a problem.