Pulse — RPKI-invalid route
Routes that fail RPKI validation (origin ASN doesn't match the prefix's ROA, or prefix is longer than max-length).
What is RPKI-invalid route?
An RPKI-invalid route is a prefix whose origin ASN does not match the Route Origin Authorization (ROA) published by the legitimate holder, or whose length exceeds the ROA max-length. RPKI-invalid routes should be dropped by validating routers; their presence flags a misconfiguration or a possible origin hijack.
Geographic distribution
Flagged events
Showing 200 most recent of 7,264 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Oct 18, 02:16 UTC | 78 | 216.158.108.0/24 | AS59702 |
| Oct 18, 02:16 UTC | 74 | 91.205.78.0/24 | AS50964 |
| Oct 18, 02:16 UTC | 80 | 120.131.124.0/22 | AS59011 |
| Oct 18, 02:16 UTC | 80 | 213.139.67.0/24 | AS9304 |
| Oct 18, 02:16 UTC | 80 | 168.151.16.0/24 | AS11427 |
| Oct 18, 02:16 UTC | 82 | 140.161.232.0/22 | AS395064 |
| Oct 18, 02:16 UTC | 86 | 160.119.233.53/32 | AS328137 |
| Oct 18, 02:16 UTC | 90 | 149.50.103.100/32 | AS201814 |
| Oct 18, 02:16 UTC | 80 | 202.152.224.0/24 | AS24203 |
| Oct 18, 02:16 UTC | 72 | 163.52.23.0/24 | AS154848 |
| Oct 18, 02:16 UTC | 86 | 160.119.237.170/32 | AS328137 |
| Oct 18, 02:16 UTC | 80 | 23.230.32.0/24 | AS47553 |
| Oct 18, 02:16 UTC | 80 | 179.253.120.0/24 | AS401152 |
| Oct 18, 02:16 UTC | 86 | 103.174.217.252/32 | AS140766 |
| Oct 18, 02:16 UTC | 86 | 43.173.147.113/32 | AS132203 |
| Oct 18, 02:16 UTC | 86 | 160.119.226.56/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 45.118.147.248/32 | AS131414 |
| Oct 18, 02:16 UTC | 86 | 37.46.14.133/32 | AS48956 |
| Oct 18, 02:16 UTC | 86 | 170.80.226.207/32 | AS266385 |
| Oct 18, 02:16 UTC | 86 | 89.221.127.185/32 | AS24651 |
| Oct 18, 02:16 UTC | 86 | 103.75.73.1/32 | AS149078 |
| Oct 18, 02:16 UTC | 80 | 80.250.44.0/24 | AS7155 |
| Oct 18, 02:16 UTC | 86 | 160.119.233.71/32 | AS328137 |
| Oct 18, 02:16 UTC | 88 | 103.161.119.24/32 | AS135918 |
| Oct 18, 02:16 UTC | 86 | 96.62.223.16/32 | AS201640 |
| Oct 18, 02:16 UTC | 86 | 160.119.237.16/32 | AS328137 |
| Oct 18, 02:16 UTC | 80 | 104.234.250.0/24 | AS22773 |
| Oct 18, 02:16 UTC | 86 | 103.27.238.118/32 | AS131386 |
| Oct 18, 02:16 UTC | 82 | 160.119.227.236/30 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 103.97.125.44/32 | AS56153 |
| Oct 18, 02:16 UTC | 88 | 176.116.179.218/32 | AS31257 |
| Oct 18, 02:16 UTC | 80 | 2.27.196.0/22 | AS3257 |
| Oct 18, 02:16 UTC | 86 | 160.119.230.117/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 160.119.230.101/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 160.119.226.74/32 | AS328137 |
| Oct 18, 02:16 UTC | 72 | 59.165.72.0/21 | AS17908 |
| Oct 18, 02:16 UTC | 90 | 35.137.235.0/24 | AS33363 |
| Oct 18, 02:16 UTC | 88 | 157.66.24.75/32 | AS149107 |
| Oct 18, 02:16 UTC | 90 | 78.90.183.82/32 | AS8717 |
| Oct 18, 02:16 UTC | 80 | 45.192.251.0/24 | AS4760 |
| Oct 18, 02:16 UTC | 90 | 94.154.103.202/32 | AS197892 |
| Oct 18, 02:16 UTC | 86 | 92.245.191.42/32 | AS21086 |
| Oct 18, 02:16 UTC | 90 | 149.50.126.73/32 | AS201814 |
| Oct 18, 02:16 UTC | 86 | 185.37.149.145/32 | AS61102 |
| Oct 18, 02:16 UTC | 80 | 95.134.236.0/22 | AS3257 |
| Oct 18, 02:16 UTC | 80 | 83.147.223.0/24 | AS49434 |
| Oct 18, 02:16 UTC | 86 | 216.241.136.244/32 | AS35432 |
| Oct 18, 02:16 UTC | 80 | 103.169.62.0/23 | AS146746 |
| Oct 18, 02:16 UTC | 80 | 89.21.85.0/24 | AS141892 |
| Oct 18, 02:16 UTC | 84 | 118.213.130.0/24 | AS140061 |
| Oct 18, 02:16 UTC | 78 | 217.22.47.0/24 | AS49214 |
| Oct 18, 02:16 UTC | 80 | 156.236.84.0/24 | AS198990 |
| Oct 18, 02:16 UTC | 72 | 212.33.104.0/21 | AS12975 |
| Oct 18, 02:16 UTC | 74 | 118.107.48.0/21 | AS64050 |
| Oct 18, 02:16 UTC | 82 | 160.119.236.228/30 | AS328137 |
| Oct 18, 02:16 UTC | 90 | 185.234.234.73/32 | AS39507 |
| Oct 18, 02:16 UTC | 86 | 89.161.59.57/32 | AS39375 |
| Oct 18, 02:16 UTC | 86 | 160.119.231.74/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 43.96.36.130/32 | AS45102 |
| Oct 18, 02:16 UTC | 72 | 103.125.11.0/24 | AS17995 |
| Oct 18, 02:16 UTC | 80 | 77.90.177.0/24 | AS62240 |
| Oct 18, 02:16 UTC | 86 | 194.24.160.3/32 | AS29551 |
| Oct 18, 02:16 UTC | 90 | 94.154.96.119/32 | AS197892 |
| Oct 18, 02:16 UTC | 72 | 216.83.48.0/24 | AS33203 |
| Oct 18, 02:16 UTC | 72 | 38.21.126.0/23 | AS274911 |
| Oct 18, 02:16 UTC | 72 | 164.100.189.0/24 | AS4758 |
| Oct 18, 02:16 UTC | 86 | 112.215.125.0/24 | AS24203 |
| Oct 18, 02:16 UTC | 86 | 91.224.47.104/32 | AS59945 |
| Oct 18, 02:16 UTC | 90 | 84.40.157.164/32 | AS12741 |
| Oct 18, 02:16 UTC | 80 | 66.253.0.0/24 | AS3257 |
| Oct 18, 02:16 UTC | 86 | 185.18.205.65/32 | AS61102 |
| Oct 18, 02:16 UTC | 78 | 61.143.4.0/24 | AS136199 |
| Oct 18, 02:16 UTC | 86 | 89.144.32.3/32 | AS214762 |
| Oct 18, 02:16 UTC | 86 | 103.97.125.209/32 | AS56153 |
| Oct 18, 02:16 UTC | 86 | 160.119.230.87/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 160.119.231.56/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 43.96.9.130/32 | AS45102 |
| Oct 18, 02:16 UTC | 72 | 62.118.106.0/24 | AS41209 |
| Oct 18, 02:16 UTC | 82 | 42.51.240.0/24 | AS56005 |
| Oct 18, 02:16 UTC | 86 | 102.215.237.92/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 45.200.17.143/32 | AS54801 |
| Oct 18, 02:16 UTC | 76 | 2.48.48.0/23 | AS5384 |
| Oct 18, 02:16 UTC | 86 | 103.72.69.254/32 | AS149078 |
| Oct 18, 02:16 UTC | 86 | 45.119.83.216/32 | AS131386 |
| Oct 18, 02:16 UTC | 82 | 97.101.48.0/20 | AS33363 |
| Oct 18, 02:16 UTC | 86 | 103.131.74.30/32 | AS45544 |
| Oct 18, 02:16 UTC | 86 | 124.197.24.161/32 | AS140766 |
| Oct 18, 02:16 UTC | 86 | 195.88.114.44/32 | AS48956 |
| Oct 18, 02:16 UTC | 82 | 218.242.71.0/24 | AS9812 |
| Oct 18, 02:16 UTC | 80 | 141.11.208.0/24 | AS9304 |
| Oct 18, 02:16 UTC | 80 | 103.3.212.0/24 | AS141146 |
| Oct 18, 02:16 UTC | 84 | 115.113.56.0/23 | AS4755 |
| Oct 18, 02:16 UTC | 86 | 185.127.22.119/32 | AS199517 |
| Oct 18, 02:16 UTC | 72 | 46.60.0.0/23 | AS197350 |
| Oct 18, 02:16 UTC | 86 | 160.119.238.95/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 160.119.231.126/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 160.119.231.30/32 | AS328137 |
| Oct 18, 02:16 UTC | 80 | 50.118.226.0/24 | AS9009 |
| Oct 18, 02:16 UTC | 86 | 96.62.223.24/32 | AS201640 |
| Oct 18, 02:16 UTC | 86 | 46.227.109.187/32 | AS8819 |
| Oct 18, 02:16 UTC | 78 | 160.119.227.208/28 | AS328137 |
| Oct 18, 02:16 UTC | 78 | 5.245.123.0/24 | AS35819 |
| Oct 18, 02:16 UTC | 80 | 177.202.111.0/24 | AS401152 |
| Oct 18, 02:16 UTC | 80 | 36.255.195.0/24 | AS21859 |
| Oct 18, 02:16 UTC | 84 | 106.37.136.0/23 | AS4847 |
| Oct 18, 02:16 UTC | 80 | 154.84.252.0/24 | AS45194 |
| Oct 18, 02:16 UTC | 86 | 115.112.223.0/24 | AS4755 |
| Oct 18, 02:16 UTC | 86 | 103.97.125.252/32 | AS56153 |
| Oct 18, 02:16 UTC | 80 | 31.58.234.0/24 | AS133398 |
| Oct 18, 02:16 UTC | 78 | 5.245.5.0/24 | AS35819 |
| Oct 18, 02:16 UTC | 86 | 202.133.224.46/32 | AS17408 |
| Oct 18, 02:16 UTC | 86 | 107.149.109.109/32 | AS398823 |
| Oct 18, 02:16 UTC | 86 | 160.119.231.12/32 | AS328137 |
| Oct 18, 02:16 UTC | 80 | 103.122.212.0/23 | AS141145 |
| Oct 18, 02:16 UTC | 86 | 5.187.79.133/32 | AS43727 |
| Oct 18, 02:16 UTC | 72 | 103.94.234.0/24 | AS150783 |
| Oct 18, 02:16 UTC | 78 | 5.245.83.0/24 | AS35819 |
| Oct 18, 02:16 UTC | 86 | 96.62.223.47/32 | AS201640 |
| Oct 18, 02:16 UTC | 86 | 185.34.241.128/32 | AS44943 |
| Oct 18, 02:16 UTC | 84 | 121.52.18.0/24 | AS17885 |
| Oct 18, 02:16 UTC | 86 | 112.213.89.89/32 | AS45544 |
| Oct 18, 02:16 UTC | 74 | 5.192.18.0/24 | AS5384 |
| Oct 18, 02:16 UTC | 86 | 160.119.230.110/32 | AS328137 |
| Oct 18, 02:16 UTC | 80 | 103.56.92.0/24 | AS141985 |
| Oct 18, 02:16 UTC | 80 | 87.85.227.0/24 | AS16509 |
| Oct 18, 02:16 UTC | 80 | 45.154.84.0/24 | AS60781 |
| Oct 18, 02:16 UTC | 86 | 93.69.197.0/24 | AS30722 |
| Oct 18, 02:16 UTC | 88 | 103.228.36.32/32 | AS135918 |
| Oct 18, 02:16 UTC | 80 | 89.249.203.0/24 | AS9009 |
| Oct 18, 02:16 UTC | 78 | 212.48.208.0/23 | AS12389 |
| Oct 18, 02:16 UTC | 72 | 103.125.5.0/24 | AS17995 |
| Oct 18, 02:16 UTC | 78 | 9.137.4.0/23 | AS5384 |
| Oct 18, 02:16 UTC | 86 | 160.119.238.59/32 | AS328137 |
| Oct 18, 02:16 UTC | 80 | 122.48.32.0/19 | AS4847 |
| Oct 18, 02:16 UTC | 78 | 5.245.125.0/24 | AS35819 |
| Oct 18, 02:16 UTC | 86 | 160.119.238.46/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 102.215.237.27/32 | AS328137 |
| Oct 18, 02:16 UTC | 80 | 45.253.27.0/24 | AS4812 |
| Oct 18, 02:16 UTC | 86 | 185.252.182.53/32 | AS199723 |
| Oct 18, 02:16 UTC | 86 | 160.119.230.106/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 160.119.231.169/32 | AS328137 |
| Oct 18, 02:16 UTC | 90 | 108.191.147.0/24 | AS33363 |
| Oct 18, 02:16 UTC | 80 | 160.119.233.240/29 | AS328137 |
| Oct 18, 02:16 UTC | 80 | 151.240.4.0/22 | AS25369 |
| Oct 18, 02:16 UTC | 84 | 160.119.227.102/31 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 160.119.237.161/32 | AS328137 |
| Oct 18, 02:16 UTC | 76 | 152.36.8.0/24 | AS63178 |
| Oct 18, 02:16 UTC | 86 | 181.190.15.0/24 | AS14259 |
| Oct 18, 02:16 UTC | 80 | 213.172.82.0/24 | AS13099 |
| Oct 18, 02:16 UTC | 72 | 193.93.192.0/23 | AS34665 |
| Oct 18, 02:16 UTC | 76 | 59.165.149.0/24 | AS4755 |
| Oct 18, 02:16 UTC | 80 | 103.20.108.0/23 | AS23456 |
| Oct 18, 02:16 UTC | 80 | 154.86.176.0/24 | AS134548 |
| Oct 18, 02:16 UTC | 88 | 103.160.2.164/32 | AS135918 |
| Oct 18, 02:16 UTC | 86 | 160.119.230.10/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 45.200.17.70/32 | AS54801 |
| Oct 18, 02:16 UTC | 86 | 185.252.182.71/32 | AS199723 |
| Oct 18, 02:16 UTC | 84 | 160.119.227.12/31 | AS328137 |
| Oct 18, 02:16 UTC | 80 | 51.241.135.0/24 | AS50049 |
| Oct 18, 02:16 UTC | 86 | 160.119.238.64/32 | AS328137 |
| Oct 18, 02:16 UTC | 88 | 185.216.180.0/32 | AS205485 |
| Oct 18, 02:16 UTC | 86 | 66.42.89.156/32 | AS20473 |
| Oct 18, 02:16 UTC | 86 | 103.87.220.7/32 | AS131386 |
| Oct 18, 02:16 UTC | 78 | 118.107.140.0/24 | AS18053 |
| Oct 18, 02:16 UTC | 86 | 140.161.214.0/24 | AS395064 |
| Oct 18, 02:16 UTC | 80 | 103.192.72.0/22 | AS141825 |
| Oct 18, 02:16 UTC | 72 | 46.60.58.0/24 | AS197350 |
| Oct 18, 02:16 UTC | 78 | 176.204.114.0/24 | AS5384 |
| Oct 18, 02:16 UTC | 86 | 171.33.255.173/32 | AS31257 |
| Oct 18, 02:16 UTC | 90 | 176.116.166.37/32 | AS31257 |
| Oct 18, 02:16 UTC | 86 | 91.236.35.209/32 | AS198537 |
| Oct 18, 02:16 UTC | 80 | 132.243.215.0/24 | AS25198 |
| Oct 18, 02:16 UTC | 86 | 31.40.157.22/32 | AS206810 |
| Oct 18, 02:16 UTC | 86 | 160.119.230.195/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 160.119.230.69/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 102.215.237.123/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 160.119.226.92/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 102.215.237.63/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 85.114.159.90/32 | AS24961 |
| Oct 18, 02:16 UTC | 82 | 71.42.4.0/24 | AS33363 |
| Oct 18, 02:16 UTC | 88 | 163.223.8.159/32 | AS135918 |
| Oct 18, 02:16 UTC | 86 | 160.119.230.76/32 | AS328137 |
| Oct 18, 02:16 UTC | 88 | 108.189.148.0/23 | AS33363 |
| Oct 18, 02:16 UTC | 80 | 217.204.10.0/24 | AS3257 |
| Oct 18, 02:16 UTC | 86 | 96.62.223.38/32 | AS201640 |
| Oct 18, 02:16 UTC | 80 | 23.230.40.0/24 | AS47553 |
| Oct 18, 02:16 UTC | 82 | 109.244.232.0/22 | AS45090 |
| Oct 18, 02:16 UTC | 80 | 156.245.20.0/24 | AS133199 |
| Oct 18, 02:16 UTC | 90 | 212.104.103.81/32 | AS8717 |
| Oct 18, 02:16 UTC | 86 | 160.119.237.160/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 194.180.109.20/32 | AS200750 |
| Oct 18, 02:16 UTC | 80 | 45.195.137.0/24 | AS63023 |
| Oct 18, 02:16 UTC | 86 | 160.119.237.35/32 | AS328137 |
| Oct 18, 02:16 UTC | 86 | 160.119.231.168/32 | AS328137 |
| Oct 18, 02:16 UTC | 90 | 149.50.110.38/32 | AS201814 |
| Oct 18, 02:16 UTC | 86 | 66.71.205.65/32 | AS17294 |
| Oct 18, 02:16 UTC | 90 | 151.251.179.214/32 | AS8717 |
| Oct 18, 02:16 UTC | 76 | 43.180.32.0/19 | AS45090 |
| Oct 18, 02:16 UTC | 74 | 106.51.188.0/24 | AS24309 |
| Oct 18, 02:16 UTC | 80 | 31.77.240.0/24 | AS9304 |
Frequently Asked Questions
What is a BGP RPKI-invalid route?
An RPKI-invalid route is a prefix whose origin ASN does not match the Route Origin Authorization (ROA) published by the legitimate holder, or whose length exceeds the ROA max-length. RPKI-invalid routes should be dropped by validating routers; their presence flags a misconfiguration or a possible origin hijack.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the RPKI-invalid route feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-18 03:10 UTC.
How do I subscribe to RPKI-invalid route events?
Subscribe to the Atom feed at /pulse/bgp/rpki.atom or poll the JSON endpoint at /api/pulse/bgp/rpki.