RPKI
Two ROAs, minimal maxLength, RFC 9319 conformant. It shuts the door on route hijacks, and you can check it in thirty seconds.
We publish … ROAs covering 138.122.60.0/22 (maxLength /24) and 2804:25e4::/32 (maxLength /48). All originated prefixes validate.
Validate live — us, or anyone
ROV posture
We filter RPKI-Invalid on ingress where equipment supports it. The point is to drop forged-origin sub-prefix hijacks, the kind that only validate when maxLength is left loose. Don't take our word for it: run the validator above against our prefixes.