Hello everyone,


Heard of issues in a friend's network and found that their RPKI ROAs have been tweaked. Upon noticing I see some more similar random cases where origin AS has been changed to non-existent AS in some cases. Since these pools are with IRINN, networks cannot change these directly but have to go via IRINN way. 

An example of this: AS59199 - a non-existent AS with bunch of prefixes from Railtel to Microscan: 

  
image.png



I suspect some unauthorized alteration within RPKI ROA data. Anyone else facing issues today? 


Note: RPKI Invalids will face partial connectivity and many global networks would just drop them resulting in many issues. 

--
Anurag Bhatia