Pulse — RPKI-invalid route
Routes that fail RPKI validation (origin ASN doesn't match the prefix's ROA, or prefix is longer than max-length).
What is RPKI-invalid route?
An RPKI-invalid route is a prefix whose origin ASN does not match the Route Origin Authorization (ROA) published by the legitimate holder, or whose length exceeds the ROA max-length. RPKI-invalid routes should be dropped by validating routers; their presence flags a misconfiguration or a possible origin hijack.
Geographic distribution
Flagged events
Showing 200 most recent of 9,619 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Oct 17, 03:15 UTC | 86 | 45.131.35.50/32 | AS216323 |
| Oct 17, 03:15 UTC | 80 | 154.198.58.0/24 | AS267834 |
| Oct 17, 03:15 UTC | 74 | 176.204.198.0/23 | AS5384 |
| Oct 17, 03:15 UTC | 80 | 185.145.190.0/24 | AS23456 |
| Oct 17, 03:15 UTC | 80 | 78.105.162.0/24 | AS7029 |
| Oct 17, 03:15 UTC | 80 | 77.92.109.160/29 | AS25145 |
| Oct 17, 03:15 UTC | 90 | 31.183.187.0/32 | AS16342 |
| Oct 17, 03:15 UTC | 88 | 50.7.158.251/32 | AS30058 |
| Oct 17, 03:15 UTC | 86 | 176.118.43.166/32 | AS41820 |
| Oct 17, 03:15 UTC | 88 | 103.161.118.77/32 | AS135918 |
| Oct 17, 03:15 UTC | 90 | 42.96.2.92/32 | AS135918 |
| Oct 17, 03:15 UTC | 86 | 140.130.104.0/21 | AS1659 |
| Oct 17, 03:15 UTC | 80 | 151.243.146.0/24 | AS215228 |
| Oct 17, 03:15 UTC | 80 | 186.209.104.0/24 | AS266061 |
| Oct 17, 03:15 UTC | 82 | 203.71.12.0/22 | AS1659 |
| Oct 17, 03:15 UTC | 78 | 153.75.206.0/24 | AS399007 |
| Oct 17, 03:15 UTC | 80 | 199.166.36.0/23 | AS36351 |
| Oct 17, 03:15 UTC | 88 | 206.156.16.0/24 | AS3561 |
| Oct 17, 03:15 UTC | 80 | 43.243.120.0/22 | AS23456 |
| Oct 17, 03:15 UTC | 86 | 96.62.223.18/32 | AS201640 |
| Oct 17, 03:15 UTC | 90 | 109.125.223.219/32 | AS44692 |
| Oct 17, 03:15 UTC | 80 | 66.17.143.0/24 | AS199527 |
| Oct 17, 03:15 UTC | 74 | 103.254.223.0/24 | AS55361 |
| Oct 17, 03:15 UTC | 80 | 93.190.187.0/24 | AS57866 |
| Oct 17, 03:15 UTC | 86 | 45.11.78.147/32 | AS134823 |
| Oct 17, 03:15 UTC | 88 | 97.101.138.0/23 | AS33363 |
| Oct 17, 03:15 UTC | 90 | 213.191.180.207/32 | AS8717 |
| Oct 17, 03:15 UTC | 86 | 124.117.243.0/24 | AS4134 |
| Oct 17, 03:15 UTC | 86 | 102.215.237.8/32 | AS328137 |
| Oct 17, 03:15 UTC | 82 | 77.92.109.12/30 | AS25145 |
| Oct 17, 03:15 UTC | 80 | 45.227.254.0/24 | AS53107 |
| Oct 17, 03:15 UTC | 74 | 123.58.238.0/23 | AS4847 |
| Oct 17, 03:15 UTC | 80 | 117.131.200.0/24 | AS38019 |
| Oct 17, 03:15 UTC | 80 | 64.32.144.0/24 | AS3257 |
| Oct 17, 03:15 UTC | 86 | 87.76.134.0/32 | AS214762 |
| Oct 17, 03:15 UTC | 78 | 151.58.128.0/20 | AS1267 |
| Oct 17, 03:15 UTC | 74 | 2.48.200.0/23 | AS5384 |
| Oct 17, 03:15 UTC | 80 | 200.13.198.0/24 | AS18747 |
| Oct 17, 03:15 UTC | 80 | 154.16.86.0/24 | AS211826 |
| Oct 17, 03:15 UTC | 80 | 208.93.96.0/23 | AS13760 |
| Oct 17, 03:15 UTC | 86 | 103.232.122.19/32 | AS56150 |
| Oct 17, 03:15 UTC | 74 | 176.204.94.0/23 | AS5384 |
| Oct 17, 03:15 UTC | 86 | 201.149.110.71/32 | AS61873 |
| Oct 17, 03:15 UTC | 86 | 103.97.125.21/32 | AS56153 |
| Oct 17, 03:15 UTC | 86 | 96.62.223.193/32 | AS201640 |
| Oct 17, 03:15 UTC | 86 | 103.191.145.2/32 | AS140766 |
| Oct 17, 03:15 UTC | 86 | 91.199.12.51/32 | AS198984 |
| Oct 17, 03:15 UTC | 80 | 160.187.207.0/24 | AS151690 |
| Oct 17, 03:15 UTC | 80 | 103.179.117.0/24 | AS23456 |
| Oct 17, 03:15 UTC | 86 | 92.38.168.43/32 | AS199524 |
| Oct 17, 03:15 UTC | 86 | 103.87.220.18/32 | AS131386 |
| Oct 17, 03:15 UTC | 86 | 95.163.227.163/32 | AS197695 |
| Oct 17, 03:15 UTC | 86 | 108.187.4.26/32 | AS138995 |
| Oct 17, 03:15 UTC | 80 | 45.59.106.0/24 | AS9304 |
| Oct 17, 03:15 UTC | 86 | 160.119.230.124/32 | AS328137 |
| Oct 17, 03:15 UTC | 72 | 85.140.84.0/22 | AS39001 |
| Oct 17, 03:15 UTC | 76 | 77.28.16.0/24 | AS6821 |
| Oct 17, 03:15 UTC | 88 | 103.69.86.239/32 | AS135918 |
| Oct 17, 03:15 UTC | 80 | 161.82.148.0/24 | AS132280 |
| Oct 17, 03:15 UTC | 86 | 177.125.219.178/32 | AS262355 |
| Oct 17, 03:15 UTC | 86 | 78.24.201.1/32 | AS200410 |
| Oct 17, 03:15 UTC | 86 | 96.62.223.23/32 | AS201640 |
| Oct 17, 03:15 UTC | 80 | 177.202.105.0/24 | AS401152 |
| Oct 17, 03:15 UTC | 90 | 217.113.234.217/32 | AS16342 |
| Oct 17, 03:15 UTC | 90 | 84.205.172.6/32 | AS57608 |
| Oct 17, 03:15 UTC | 78 | 5.245.254.0/24 | AS35819 |
| Oct 17, 03:15 UTC | 80 | 218.21.26.0/24 | AS4134 |
| Oct 17, 03:15 UTC | 88 | 194.42.118.69/32 | AS203937 |
| Oct 17, 03:15 UTC | 78 | 93.148.205.0/24 | AS30722 |
| Oct 17, 03:15 UTC | 86 | 46.227.110.89/32 | AS8819 |
| Oct 17, 03:15 UTC | 80 | 77.90.171.0/24 | AS62240 |
| Oct 17, 03:15 UTC | 80 | 122.48.80.0/20 | AS4847 |
| Oct 17, 03:15 UTC | 76 | 31.218.22.0/23 | AS5384 |
| Oct 17, 03:15 UTC | 78 | 119.30.93.0/24 | AS23966 |
| Oct 17, 03:15 UTC | 86 | 211.25.165.0/24 | AS9930 |
| Oct 17, 03:15 UTC | 80 | 82.22.39.0/24 | AS133153 |
| Oct 17, 03:15 UTC | 80 | 163.223.57.0/24 | AS150178 |
| Oct 17, 03:15 UTC | 90 | 34.117.46.0/24 | AS396982 |
| Oct 17, 03:15 UTC | 80 | 120.125.80.0/21 | AS1659 |
| Oct 17, 03:15 UTC | 86 | 103.252.252.181/32 | AS45544 |
| Oct 17, 03:15 UTC | 86 | 185.34.240.211/32 | AS44943 |
| Oct 17, 03:15 UTC | 80 | 207.145.250.0/24 | AS3257 |
| Oct 17, 03:15 UTC | 80 | 179.253.119.0/24 | AS401152 |
| Oct 17, 03:15 UTC | 82 | 5.192.110.0/24 | AS5384 |
| Oct 17, 03:15 UTC | 72 | 94.163.0.0/17 | AS1267 |
| Oct 17, 03:15 UTC | 72 | 2.48.210.0/23 | AS5384 |
| Oct 17, 03:15 UTC | 80 | 104.247.154.0/23 | AS33490 |
| Oct 17, 03:15 UTC | 86 | 160.119.231.209/32 | AS328137 |
| Oct 17, 03:15 UTC | 74 | 36.106.240.0/24 | AS17638 |
| Oct 17, 03:15 UTC | 88 | 163.24.242.0/23 | AS1659 |
| Oct 17, 03:15 UTC | 88 | 163.223.225.194/32 | AS135918 |
| Oct 17, 03:15 UTC | 74 | 115.109.153.0/24 | AS17908 |
| Oct 17, 03:15 UTC | 76 | 77.28.142.0/24 | AS6821 |
| Oct 17, 03:15 UTC | 80 | 200.13.192.0/19 | AS18747 |
| Oct 17, 03:15 UTC | 84 | 118.213.128.0/24 | AS140061 |
| Oct 17, 03:15 UTC | 88 | 46.149.218.129/32 | AS52195 |
| Oct 17, 03:15 UTC | 76 | 207.173.134.0/23 | AS11620 |
| Oct 17, 03:15 UTC | 84 | 212.225.251.0/24 | AS34977 |
| Oct 17, 03:15 UTC | 80 | 87.232.109.0/24 | AS58349 |
| Oct 17, 03:15 UTC | 78 | 5.245.114.0/24 | AS35819 |
| Oct 17, 03:15 UTC | 78 | 199.247.141.0/24 | AS32815 |
| Oct 17, 03:15 UTC | 80 | 188.17.226.0/24 | AS12389 |
| Oct 17, 03:15 UTC | 72 | 103.124.189.0/24 | AS17995 |
| Oct 17, 03:15 UTC | 80 | 169.128.104.0/22 | AS33651 |
| Oct 17, 03:15 UTC | 90 | 94.154.103.162/32 | AS197892 |
| Oct 17, 03:15 UTC | 86 | 163.24.244.0/22 | AS1659 |
| Oct 17, 03:15 UTC | 86 | 96.62.223.17/32 | AS201640 |
| Oct 17, 03:15 UTC | 80 | 77.90.145.0/24 | AS2856 |
| Oct 17, 03:15 UTC | 86 | 160.119.231.108/32 | AS328137 |
| Oct 17, 03:15 UTC | 90 | 45.11.60.145/32 | AS202004 |
| Oct 17, 03:15 UTC | 76 | 200.24.24.0/23 | AS273027 |
| Oct 17, 03:15 UTC | 90 | 185.124.131.4/32 | AS48727 |
| Oct 17, 03:15 UTC | 80 | 109.122.10.0/24 | AS9304 |
| Oct 17, 03:15 UTC | 90 | 31.182.121.94/32 | AS16342 |
| Oct 17, 03:15 UTC | 80 | 207.145.189.0/24 | AS3257 |
| Oct 17, 03:15 UTC | 90 | 178.213.92.138/32 | AS204126 |
| Oct 17, 03:15 UTC | 76 | 94.143.243.0/24 | AS42387 |
| Oct 17, 03:15 UTC | 88 | 160.250.137.110/32 | AS135918 |
| Oct 17, 03:15 UTC | 80 | 2.27.87.0/24 | AS58232 |
| Oct 17, 03:15 UTC | 86 | 103.74.100.183/32 | AS135918 |
| Oct 17, 03:15 UTC | 90 | 109.125.223.215/32 | AS44692 |
| Oct 17, 03:15 UTC | 80 | 156.248.9.0/24 | AS151407 |
| Oct 17, 03:15 UTC | 86 | 5.187.79.227/32 | AS43727 |
| Oct 17, 03:15 UTC | 80 | 45.140.4.0/24 | AS209372 |
| Oct 17, 03:15 UTC | 82 | 209.236.159.0/24 | AS397836 |
| Oct 17, 03:15 UTC | 84 | 119.254.252.0/24 | AS23844 |
| Oct 17, 03:15 UTC | 80 | 185.251.127.0/24 | AS196749 |
| Oct 17, 03:15 UTC | 86 | 141.212.120.0/24 | AS36375 |
| Oct 17, 03:15 UTC | 78 | 176.204.121.0/24 | AS5384 |
| Oct 17, 03:15 UTC | 86 | 193.42.218.30/32 | AS201754 |
| Oct 17, 03:15 UTC | 80 | 93.95.19.0/24 | AS198486 |
| Oct 17, 03:15 UTC | 88 | 163.223.8.4/32 | AS135918 |
| Oct 17, 03:15 UTC | 90 | 185.172.86.154/32 | AS206910 |
| Oct 17, 03:15 UTC | 86 | 45.118.146.139/32 | AS131414 |
| Oct 17, 03:15 UTC | 72 | 170.248.56.0/22 | AS3573 |
| Oct 17, 03:15 UTC | 86 | 160.119.230.128/32 | AS328137 |
| Oct 17, 03:15 UTC | 88 | 163.61.110.133/32 | AS135918 |
| Oct 17, 03:15 UTC | 86 | 103.146.167.68/32 | AS140766 |
| Oct 17, 03:15 UTC | 78 | 5.245.202.0/24 | AS35819 |
| Oct 17, 03:15 UTC | 86 | 103.87.220.74/32 | AS131386 |
| Oct 17, 03:15 UTC | 80 | 140.150.9.0/24 | AS21859 |
| Oct 17, 03:15 UTC | 78 | 217.77.49.0/24 | AS42387 |
| Oct 17, 03:15 UTC | 88 | 185.113.32.167/32 | AS5582 |
| Oct 17, 03:15 UTC | 86 | 193.160.209.111/32 | AS9123 |
| Oct 17, 03:15 UTC | 86 | 96.62.223.30/32 | AS201640 |
| Oct 17, 03:15 UTC | 86 | 70.176.124.0/24 | AS22773 |
| Oct 17, 03:15 UTC | 90 | 185.234.235.8/32 | AS39507 |
| Oct 17, 03:15 UTC | 86 | 217.79.188.59/32 | AS24961 |
| Oct 17, 03:15 UTC | 84 | 218.6.162.0/24 | AS4134 |
| Oct 17, 03:15 UTC | 74 | 176.204.71.0/24 | AS5384 |
| Oct 17, 03:15 UTC | 78 | 5.245.242.0/24 | AS35819 |
| Oct 17, 03:15 UTC | 74 | 46.23.110.64/26 | AS47959 |
| Oct 17, 03:15 UTC | 86 | 45.118.147.202/32 | AS131414 |
| Oct 17, 03:15 UTC | 76 | 212.27.252.0/22 | AS3327 |
| Oct 17, 03:15 UTC | 86 | 114.94.214.0/24 | AS4812 |
| Oct 17, 03:15 UTC | 90 | 35.141.112.0/24 | AS33363 |
| Oct 17, 03:15 UTC | 90 | 194.183.60.187/32 | AS20804 |
| Oct 17, 03:15 UTC | 80 | 202.169.160.0/20 | AS65534 |
| Oct 17, 03:15 UTC | 86 | 96.62.223.190/32 | AS201640 |
| Oct 17, 03:15 UTC | 82 | 5.192.106.0/24 | AS5384 |
| Oct 17, 03:15 UTC | 72 | 2.48.184.0/21 | AS5384 |
| Oct 17, 03:15 UTC | 86 | 78.24.201.103/32 | AS200410 |
| Oct 17, 03:15 UTC | 86 | 43.132.107.239/32 | AS132203 |
| Oct 17, 03:15 UTC | 90 | 31.6.64.198/32 | AS39869 |
| Oct 17, 03:15 UTC | 86 | 170.80.224.158/32 | AS266385 |
| Oct 17, 03:15 UTC | 86 | 160.119.231.206/32 | AS328137 |
| Oct 17, 03:15 UTC | 86 | 172.105.35.53/32 | AS63949 |
| Oct 17, 03:15 UTC | 80 | 77.90.184.0/24 | AS2856 |
| Oct 17, 03:15 UTC | 86 | 202.133.224.56/32 | AS17408 |
| Oct 17, 03:15 UTC | 88 | 201.165.198.0/24 | AS13999 |
| Oct 17, 03:15 UTC | 86 | 193.34.172.53/32 | AS41820 |
| Oct 17, 03:15 UTC | 86 | 202.133.224.74/32 | AS17408 |
| Oct 17, 03:15 UTC | 88 | 103.252.94.212/32 | AS135918 |
| Oct 17, 03:15 UTC | 74 | 84.54.107.64/26 | AS202175 |
| Oct 17, 03:15 UTC | 90 | 109.125.223.217/32 | AS44692 |
| Oct 17, 03:15 UTC | 86 | 124.117.208.0/24 | AS4134 |
| Oct 17, 03:15 UTC | 80 | 151.247.0.0/24 | AS202828 |
| Oct 17, 03:15 UTC | 86 | 103.232.122.231/32 | AS56150 |
| Oct 17, 03:15 UTC | 80 | 82.158.125.0/24 | AS23456 |
| Oct 17, 03:15 UTC | 76 | 176.204.118.0/23 | AS5384 |
| Oct 17, 03:15 UTC | 78 | 118.107.136.0/24 | AS18053 |
| Oct 17, 03:15 UTC | 88 | 91.232.191.121/32 | AS57536 |
| Oct 17, 03:15 UTC | 86 | 38.180.57.240/32 | AS58061 |
| Oct 17, 03:15 UTC | 84 | 210.240.202.0/23 | AS1659 |
| Oct 17, 03:15 UTC | 74 | 103.137.24.0/24 | AS18053 |
| Oct 17, 03:15 UTC | 78 | 104.246.215.0/24 | AS5645 |
| Oct 17, 03:15 UTC | 86 | 222.75.111.0/24 | AS4134 |
| Oct 17, 03:15 UTC | 86 | 103.87.220.201/32 | AS131386 |
| Oct 17, 03:15 UTC | 80 | 122.48.110.0/24 | AS4847 |
| Oct 17, 03:15 UTC | 86 | 103.91.188.47/32 | AS136523 |
| Oct 17, 03:15 UTC | 78 | 175.6.44.0/24 | AS63835 |
| Oct 17, 03:15 UTC | 88 | 103.77.173.218/32 | AS140810 |
| Oct 17, 03:15 UTC | 86 | 207.174.104.51/32 | AS835 |
| Oct 17, 03:15 UTC | 82 | 218.242.67.0/24 | AS9812 |
| Oct 17, 03:15 UTC | 78 | 5.245.102.0/24 | AS35819 |
| Oct 17, 03:15 UTC | 86 | 207.174.104.37/32 | AS835 |
| Oct 17, 03:15 UTC | 78 | 59.36.255.0/24 | AS136199 |
| Oct 17, 03:15 UTC | 76 | 77.28.154.0/24 | AS6821 |
| Oct 17, 03:15 UTC | 86 | 45.151.251.1/32 | AS209853 |
| Oct 17, 03:15 UTC | 80 | 45.198.39.0/24 | AS141968 |
Frequently Asked Questions
What is a BGP RPKI-invalid route?
An RPKI-invalid route is a prefix whose origin ASN does not match the Route Origin Authorization (ROA) published by the legitimate holder, or whose length exceeds the ROA max-length. RPKI-invalid routes should be dropped by validating routers; their presence flags a misconfiguration or a possible origin hijack.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the RPKI-invalid route feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-17 03:50 UTC.
How do I subscribe to RPKI-invalid route events?
Subscribe to the Atom feed at /pulse/bgp/rpki.atom or poll the JSON endpoint at /api/pulse/bgp/rpki.