Enforcing the First AS in BGP AS_PATHsCloudflare / Jun 3, 2026Forged AS_PATHs omitted attacker ASNFirst AS enforcement blocks these hijacksRFC 7606 treat-as-withdraw not universally appliedbgpas_pathfirst-asasparpkirfc7606route-hijack