Pulse — RPKI-invalid route
Routes that fail RPKI validation (origin ASN doesn't match the prefix's ROA, or prefix is longer than max-length).
What is RPKI-invalid route?
An RPKI-invalid route is a prefix whose origin ASN does not match the Route Origin Authorization (ROA) published by the legitimate holder, or whose length exceeds the ROA max-length. RPKI-invalid routes should be dropped by validating routers; their presence flags a misconfiguration or a possible origin hijack.
Geographic distribution
Flagged events
Showing 200 most recent of 7,812 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Aug 30, 13:56 UTC | 90 | 45.136.254.22/32 | AS56309 |
| Aug 30, 13:56 UTC | 86 | 89.43.17.12/32 | AS41151 |
| Aug 30, 13:56 UTC | 88 | 108.189.148.0/23 | AS33363 |
| Aug 30, 13:56 UTC | 86 | 66.232.120.54/32 | AS29802 |
| Aug 30, 13:56 UTC | 88 | 163.223.8.159/32 | AS135918 |
| Aug 30, 13:56 UTC | 80 | 154.210.213.0/24 | AS18229 |
| Aug 30, 13:56 UTC | 80 | 23.26.227.0/24 | AS400810 |
| Aug 30, 13:56 UTC | 74 | 186.208.10.0/24 | AS262713 |
| Aug 30, 13:56 UTC | 80 | 94.232.168.44/32 | AS48434 |
| Aug 30, 13:56 UTC | 90 | 185.124.187.67/32 | AS203760 |
| Aug 30, 13:56 UTC | 86 | 31.40.157.22/32 | AS206810 |
| Aug 30, 13:56 UTC | 80 | 94.232.168.198/32 | AS48434 |
| Aug 30, 13:56 UTC | 80 | 185.39.160.0/22 | AS202520 |
| Aug 30, 13:56 UTC | 80 | 94.232.171.140/32 | AS48434 |
| Aug 30, 13:56 UTC | 80 | 94.232.171.230/32 | AS48434 |
| Aug 30, 13:56 UTC | 78 | 176.204.114.0/24 | AS5384 |
| Aug 30, 13:56 UTC | 72 | 46.60.58.0/24 | AS197350 |
| Aug 30, 13:56 UTC | 80 | 187.31.41.0/24 | AS14571 |
| Aug 30, 13:56 UTC | 86 | 36.88.151.0/24 | AS7713 |
| Aug 30, 13:56 UTC | 80 | 185.232.152.2/32 | AS48434 |
| Aug 30, 13:56 UTC | 86 | 23.227.187.132/32 | AS29802 |
| Aug 30, 13:56 UTC | 86 | 45.154.24.2/32 | AS56309 |
| Aug 30, 13:56 UTC | 78 | 118.107.140.0/24 | AS18053 |
| Aug 30, 13:56 UTC | 86 | 103.87.220.7/32 | AS131386 |
| Aug 30, 13:56 UTC | 74 | 77.83.10.0/24 | AS201776 |
| Aug 30, 13:56 UTC | 86 | 45.144.164.176/32 | AS56309 |
| Aug 30, 13:56 UTC | 80 | 94.232.174.130/32 | AS48434 |
| Aug 30, 13:56 UTC | 72 | 41.138.96.0/20 | AS25543 |
| Aug 30, 13:56 UTC | 90 | 94.101.26.105/32 | AS48789 |
| Aug 30, 13:56 UTC | 88 | 185.216.180.0/32 | AS205485 |
| Aug 30, 13:56 UTC | 76 | 206.251.44.0/24 | AS19045 |
| Aug 30, 13:56 UTC | 82 | 157.211.144.0/22 | AS4764 |
| Aug 30, 13:56 UTC | 90 | 155.212.168.81/32 | AS29182 |
| Aug 30, 13:56 UTC | 80 | 154.86.176.0/24 | AS134548 |
| Aug 30, 13:56 UTC | 86 | 43.229.149.119/32 | AS56309 |
| Aug 30, 13:56 UTC | 86 | 43.229.134.243/32 | AS56309 |
| Aug 30, 13:56 UTC | 86 | 195.22.119.36/32 | AS200918 |
| Aug 30, 13:56 UTC | 80 | 213.172.82.0/24 | AS13099 |
| Aug 30, 13:56 UTC | 86 | 160.119.237.161/32 | AS328137 |
| Aug 30, 13:56 UTC | 86 | 67.141.246.0/23 | AS7029 |
| Aug 30, 13:56 UTC | 80 | 94.232.171.126/32 | AS48434 |
| Aug 30, 13:56 UTC | 72 | 103.233.137.0/24 | AS63696 |
| Aug 30, 13:56 UTC | 80 | 217.195.201.0/24 | AS23456 |
| Aug 30, 13:56 UTC | 80 | 151.247.1.0/24 | AS202828 |
| Aug 30, 13:56 UTC | 80 | 193.35.46.0/24 | AS1 |
| Aug 30, 13:56 UTC | 90 | 108.191.147.0/24 | AS33363 |
| Aug 30, 13:56 UTC | 80 | 94.232.171.139/32 | AS48434 |
| Aug 30, 13:56 UTC | 86 | 185.26.187.165/32 | AS203622 |
| Aug 30, 13:56 UTC | 80 | 94.232.171.249/32 | AS48434 |
| Aug 30, 13:56 UTC | 74 | 125.166.17.0/24 | AS7713 |
| Aug 30, 13:56 UTC | 80 | 103.105.252.0/24 | AS23456 |
| Aug 30, 13:56 UTC | 86 | 162.216.5.14/32 | AS29802 |
| Aug 30, 13:56 UTC | 86 | 103.13.28.1/32 | AS56309 |
| Aug 30, 13:56 UTC | 80 | 185.78.21.213/32 | AS48434 |
| Aug 30, 13:56 UTC | 80 | 45.253.27.0/24 | AS4812 |
| Aug 30, 13:56 UTC | 78 | 5.245.125.0/24 | AS35819 |
| Aug 30, 13:56 UTC | 80 | 122.48.32.0/19 | AS4847 |
| Aug 30, 13:56 UTC | 80 | 147.234.238.0/24 | AS65107 |
| Aug 30, 13:56 UTC | 86 | 66.71.205.110/32 | AS17294 |
| Aug 30, 13:56 UTC | 72 | 103.125.5.0/24 | AS17995 |
| Aug 30, 13:56 UTC | 86 | 43.229.151.150/32 | AS56309 |
| Aug 30, 13:56 UTC | 80 | 94.232.175.77/32 | AS48434 |
| Aug 30, 13:56 UTC | 80 | 89.249.203.0/24 | AS9009 |
| Aug 30, 13:56 UTC | 82 | 154.68.228.0/24 | AS37661 |
| Aug 30, 13:56 UTC | 74 | 5.192.18.0/24 | AS5384 |
| Aug 30, 13:56 UTC | 86 | 196.0.26.0/24 | AS21491 |
| Aug 30, 13:56 UTC | 86 | 66.71.205.192/32 | AS17294 |
| Aug 30, 13:56 UTC | 86 | 66.6.59.99/32 | AS213382 |
| Aug 30, 13:56 UTC | 84 | 121.52.18.0/24 | AS17885 |
| Aug 30, 13:56 UTC | 80 | 94.232.171.104/32 | AS48434 |
| Aug 30, 13:56 UTC | 86 | 185.34.240.52/32 | AS44943 |
| Aug 30, 13:56 UTC | 86 | 66.6.59.128/32 | AS213382 |
| Aug 30, 13:56 UTC | 86 | 45.144.164.132/32 | AS56309 |
| Aug 30, 13:56 UTC | 86 | 74.50.113.73/32 | AS29802 |
| Aug 30, 13:56 UTC | 86 | 5.187.79.133/32 | AS43727 |
| Aug 30, 13:56 UTC | 86 | 103.13.31.31/32 | AS56309 |
| Aug 30, 13:56 UTC | 80 | 193.107.208.0/23 | AS9457 |
| Aug 30, 13:56 UTC | 88 | 195.136.159.84/32 | AS199260 |
| Aug 30, 13:56 UTC | 80 | 94.232.175.136/32 | AS48434 |
| Aug 30, 13:56 UTC | 86 | 43.229.149.1/32 | AS56309 |
| Aug 30, 13:56 UTC | 90 | 93.159.25.108/32 | AS12741 |
| Aug 30, 13:56 UTC | 80 | 94.232.168.242/32 | AS48434 |
| Aug 30, 13:56 UTC | 86 | 185.169.55.182/32 | AS208425 |
| Aug 30, 13:56 UTC | 86 | 115.112.223.0/24 | AS4755 |
| Aug 30, 13:56 UTC | 82 | 157.211.196.0/22 | AS4764 |
| Aug 30, 13:56 UTC | 80 | 36.255.195.0/24 | AS21859 |
| Aug 30, 13:56 UTC | 82 | 203.192.150.0/24 | AS4637 |
| Aug 30, 13:56 UTC | 78 | 5.245.123.0/24 | AS35819 |
| Aug 30, 13:56 UTC | 72 | 94.166.128.0/17 | AS1267 |
| Aug 30, 13:56 UTC | 72 | 180.181.252.0/23 | AS4764 |
| Aug 30, 13:56 UTC | 80 | 23.227.160.32/29 | AS29802 |
| Aug 30, 13:56 UTC | 72 | 177.8.55.0/24 | AS262493 |
| Aug 30, 13:56 UTC | 80 | 107.155.68.64/29 | AS29802 |
| Aug 30, 13:56 UTC | 86 | 160.119.230.149/32 | AS328137 |
| Aug 30, 13:56 UTC | 86 | 103.117.151.1/32 | AS56309 |
| Aug 30, 13:56 UTC | 86 | 160.250.186.22/32 | AS150895 |
| Aug 30, 13:56 UTC | 86 | 45.158.38.106/32 | AS29802 |
| Aug 30, 13:56 UTC | 86 | 124.117.248.0/24 | AS4134 |
| Aug 30, 13:56 UTC | 72 | 46.60.0.0/23 | AS197350 |
| Aug 30, 13:56 UTC | 86 | 160.119.231.130/32 | AS328137 |
| Aug 30, 13:56 UTC | 90 | 31.182.170.189/32 | AS16342 |
| Aug 30, 13:56 UTC | 86 | 103.22.183.32/32 | AS56309 |
| Aug 30, 13:56 UTC | 88 | 94.131.199.105/32 | AS61371 |
| Aug 30, 13:56 UTC | 82 | 71.42.4.0/24 | AS33363 |
| Aug 30, 13:56 UTC | 82 | 218.242.71.0/24 | AS9812 |
| Aug 30, 13:56 UTC | 86 | 160.119.230.192/32 | AS328137 |
| Aug 30, 13:56 UTC | 80 | 185.78.20.1/32 | AS48434 |
| Aug 30, 13:56 UTC | 74 | 91.205.78.0/24 | AS50964 |
| Aug 30, 13:56 UTC | 74 | 45.249.233.0/24 | AS132215 |
| Aug 30, 13:56 UTC | 86 | 124.197.24.161/32 | AS140766 |
| Aug 30, 13:56 UTC | 80 | 120.131.124.0/22 | AS59011 |
| Aug 30, 13:56 UTC | 80 | 213.139.67.0/24 | AS9304 |
| Aug 30, 13:56 UTC | 80 | 168.151.16.0/24 | AS11427 |
| Aug 30, 13:56 UTC | 86 | 93.123.23.196/32 | AS31490 |
| Aug 30, 13:56 UTC | 86 | 66.6.59.175/32 | AS213382 |
| Aug 30, 13:56 UTC | 86 | 64.83.38.160/32 | AS979 |
| Aug 30, 13:56 UTC | 86 | 160.119.237.34/32 | AS328137 |
| Aug 30, 13:56 UTC | 90 | 109.233.92.20/32 | AS41676 |
| Aug 30, 13:56 UTC | 86 | 124.117.216.0/24 | AS4134 |
| Aug 30, 13:56 UTC | 80 | 202.152.224.0/24 | AS24203 |
| Aug 30, 13:56 UTC | 88 | 91.236.84.28/32 | AS60624 |
| Aug 30, 13:56 UTC | 86 | 192.115.202.142/32 | AS1680 |
| Aug 30, 13:56 UTC | 86 | 212.143.2.201/32 | AS1680 |
| Aug 30, 13:56 UTC | 80 | 94.232.172.234/32 | AS48434 |
| Aug 30, 13:56 UTC | 86 | 103.174.217.252/32 | AS140766 |
| Aug 30, 13:56 UTC | 86 | 66.6.59.126/32 | AS213382 |
| Aug 30, 13:56 UTC | 86 | 89.37.116.49/32 | AS62390 |
| Aug 30, 13:56 UTC | 72 | 184.51.254.0/24 | AS34164 |
| Aug 30, 13:56 UTC | 86 | 45.118.147.248/32 | AS131414 |
| Aug 30, 13:56 UTC | 86 | 103.75.73.1/32 | AS149078 |
| Aug 30, 13:56 UTC | 86 | 188.95.151.85/32 | AS60829 |
| Aug 30, 13:56 UTC | 86 | 66.6.59.180/32 | AS213382 |
| Aug 30, 13:56 UTC | 82 | 157.211.52.0/22 | AS4764 |
| Aug 30, 13:56 UTC | 88 | 103.161.119.24/32 | AS135918 |
| Aug 30, 13:56 UTC | 86 | 5.187.79.162/32 | AS43727 |
| Aug 30, 13:56 UTC | 86 | 160.119.237.16/32 | AS328137 |
| Aug 30, 13:56 UTC | 86 | 66.6.59.34/32 | AS213382 |
| Aug 30, 13:56 UTC | 86 | 188.95.151.71/32 | AS60829 |
| Aug 30, 13:56 UTC | 78 | 5.245.26.0/24 | AS35819 |
| Aug 30, 13:56 UTC | 80 | 147.234.192.0/24 | AS65107 |
| Aug 30, 13:56 UTC | 86 | 103.27.238.118/32 | AS131386 |
| Aug 30, 13:56 UTC | 86 | 107.155.89.131/32 | AS29802 |
| Aug 30, 13:56 UTC | 72 | 59.165.72.0/21 | AS17908 |
| Aug 30, 13:56 UTC | 90 | 35.137.235.0/24 | AS33363 |
| Aug 30, 13:56 UTC | 80 | 185.78.20.38/32 | AS48434 |
| Aug 30, 13:56 UTC | 80 | 94.232.172.179/32 | AS48434 |
| Aug 30, 13:56 UTC | 90 | 62.109.19.23/32 | AS29182 |
| Aug 30, 13:56 UTC | 86 | 43.229.134.1/32 | AS56309 |
| Aug 30, 13:56 UTC | 90 | 94.154.103.202/32 | AS197892 |
| Aug 30, 13:56 UTC | 82 | 178.210.36.36/30 | AS43727 |
| Aug 30, 13:56 UTC | 86 | 66.6.59.84/32 | AS213382 |
| Aug 30, 13:56 UTC | 86 | 66.6.59.207/32 | AS213382 |
| Aug 30, 13:56 UTC | 86 | 185.37.149.145/32 | AS61102 |
| Aug 30, 13:56 UTC | 80 | 94.232.171.193/32 | AS48434 |
| Aug 30, 13:56 UTC | 84 | 118.213.130.0/24 | AS140061 |
| Aug 30, 13:56 UTC | 86 | 8.218.31.110/32 | AS45102 |
| Aug 30, 13:56 UTC | 72 | 187.111.112.0/24 | AS271680 |
| Aug 30, 13:56 UTC | 82 | 97.101.48.0/20 | AS33363 |
| Aug 30, 13:56 UTC | 86 | 103.22.183.129/32 | AS56309 |
| Aug 30, 13:56 UTC | 86 | 45.119.83.216/32 | AS131386 |
| Aug 30, 13:56 UTC | 86 | 196.0.128.0/24 | AS21491 |
| Aug 30, 13:56 UTC | 86 | 181.41.141.18/32 | AS29802 |
| Aug 30, 13:56 UTC | 76 | 2.48.48.0/23 | AS5384 |
| Aug 30, 13:56 UTC | 86 | 74.50.98.91/32 | AS29802 |
| Aug 30, 13:56 UTC | 84 | 77.69.220.0/24 | AS6453 |
| Aug 30, 13:56 UTC | 86 | 78.62.177.179/32 | AS8764 |
| Aug 30, 13:56 UTC | 80 | 94.232.168.176/32 | AS48434 |
| Aug 30, 13:56 UTC | 86 | 102.215.237.92/32 | AS328137 |
| Aug 30, 13:56 UTC | 86 | 66.71.205.109/32 | AS17294 |
| Aug 30, 13:56 UTC | 82 | 42.51.240.0/24 | AS56005 |
| Aug 30, 13:56 UTC | 72 | 62.118.106.0/24 | AS41209 |
| Aug 30, 13:56 UTC | 82 | 157.211.172.0/22 | AS4764 |
| Aug 30, 13:56 UTC | 80 | 187.31.47.0/24 | AS14571 |
| Aug 30, 13:56 UTC | 90 | 201.39.237.56/29 | AS4230 |
| Aug 30, 13:56 UTC | 80 | 94.232.168.206/32 | AS48434 |
| Aug 30, 13:56 UTC | 80 | 94.232.168.219/32 | AS48434 |
| Aug 30, 13:56 UTC | 86 | 45.151.250.2/32 | AS209853 |
| Aug 30, 13:56 UTC | 86 | 185.18.205.65/32 | AS61102 |
| Aug 30, 13:56 UTC | 78 | 61.143.4.0/24 | AS136199 |
| Aug 30, 13:56 UTC | 86 | 160.119.230.98/32 | AS328137 |
| Aug 30, 13:56 UTC | 80 | 94.232.168.169/32 | AS48434 |
| Aug 30, 13:56 UTC | 86 | 103.72.69.254/32 | AS149078 |
| Aug 30, 13:56 UTC | 80 | 66.253.0.0/24 | AS3257 |
| Aug 30, 13:56 UTC | 80 | 187.31.38.0/24 | AS14571 |
| Aug 30, 13:56 UTC | 80 | 172.94.81.0/24 | AS396356 |
| Aug 30, 13:56 UTC | 72 | 212.33.104.0/21 | AS12975 |
| Aug 30, 13:56 UTC | 74 | 118.107.48.0/21 | AS64050 |
| Aug 30, 13:56 UTC | 86 | 103.13.29.128/32 | AS56309 |
| Aug 30, 13:56 UTC | 90 | 185.234.234.73/32 | AS39507 |
| Aug 30, 13:56 UTC | 86 | 74.50.118.241/32 | AS29802 |
| Aug 30, 13:56 UTC | 72 | 38.21.16.0/20 | AS272906 |
| Aug 30, 13:56 UTC | 78 | 197.243.21.0/24 | AS37228 |
| Aug 30, 13:56 UTC | 80 | 94.232.168.154/32 | AS48434 |
| Aug 30, 13:56 UTC | 72 | 103.125.11.0/24 | AS17995 |
| Aug 30, 13:56 UTC | 86 | 66.6.59.254/32 | AS213382 |
| Aug 30, 13:56 UTC | 86 | 142.249.39.244/32 | AS153371 |
| Aug 30, 13:56 UTC | 86 | 112.215.125.0/24 | AS24203 |
| Aug 30, 13:56 UTC | 86 | 188.95.151.201/32 | AS60829 |
| Aug 30, 13:56 UTC | 86 | 141.98.17.121/32 | AS56309 |
| Aug 30, 13:56 UTC | 86 | 43.229.150.81/32 | AS56309 |
Frequently Asked Questions
What is a BGP RPKI-invalid route?
An RPKI-invalid route is a prefix whose origin ASN does not match the Route Origin Authorization (ROA) published by the legitimate holder, or whose length exceeds the ROA max-length. RPKI-invalid routes should be dropped by validating routers; their presence flags a misconfiguration or a possible origin hijack.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the RPKI-invalid route feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-08-30 14:25 UTC.
How do I subscribe to RPKI-invalid route events?
Subscribe to the Atom feed at /pulse/bgp/rpki.atom or poll the JSON endpoint at /api/pulse/bgp/rpki.