@snow@kkarhan all it takes is to be accepting a default route on BGP (b/c that is a valid routing policy option) to someone who is not validating RPKI to make yourself show up as "not implementing BGP safely". Have seen many networks fail for this reason. There are some shades of grey here.