Pulse — RPKI-invalid route
Routes that fail RPKI validation (origin ASN doesn't match the prefix's ROA, or prefix is longer than max-length).
What is RPKI-invalid route?
An RPKI-invalid route is a prefix whose origin ASN does not match the Route Origin Authorization (ROA) published by the legitimate holder, or whose length exceeds the ROA max-length. RPKI-invalid routes should be dropped by validating routers; their presence flags a misconfiguration or a possible origin hijack.
Geographic distribution
Flagged events
Showing 200 most recent of 10,896 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Oct 16, 08:16 UTC | 86 | 185.107.67.42/32 | AS204479 |
| Oct 16, 08:16 UTC | 86 | 160.119.231.205/32 | AS328137 |
| Oct 16, 08:16 UTC | 80 | 23.29.121.144/29 | AS29802 |
| Oct 16, 08:16 UTC | 78 | 38.128.184.0/24 | AS18859 |
| Oct 16, 08:16 UTC | 82 | 209.236.135.0/24 | AS397836 |
| Oct 16, 08:16 UTC | 80 | 179.254.140.0/23 | AS401152 |
| Oct 16, 08:16 UTC | 72 | 24.54.170.0/23 | AS4181 |
| Oct 16, 08:16 UTC | 90 | 5.53.138.120/32 | AS8717 |
| Oct 16, 08:16 UTC | 90 | 31.183.141.102/32 | AS16342 |
| Oct 16, 08:16 UTC | 78 | 203.143.68.0/24 | AS10105 |
| Oct 16, 08:16 UTC | 86 | 217.28.137.216/32 | AS199524 |
| Oct 16, 08:16 UTC | 86 | 170.80.225.227/32 | AS266385 |
| Oct 16, 08:16 UTC | 90 | 134.17.16.119/32 | AS25106 |
| Oct 16, 08:16 UTC | 82 | 67.204.147.0/24 | AS4181 |
| Oct 16, 08:16 UTC | 80 | 77.105.162.0/24 | AS41745 |
| Oct 16, 08:16 UTC | 86 | 74.50.113.108/32 | AS29802 |
| Oct 16, 08:16 UTC | 90 | 93.159.2.33/32 | AS12741 |
| Oct 16, 08:16 UTC | 86 | 92.118.164.2/32 | AS205679 |
| Oct 16, 08:16 UTC | 82 | 208.100.131.0/24 | AS4181 |
| Oct 16, 08:16 UTC | 86 | 160.119.230.225/32 | AS328137 |
| Oct 16, 08:16 UTC | 86 | 143.208.232.143/32 | AS52544 |
| Oct 16, 08:16 UTC | 80 | 139.159.104.0/22 | AS138421 |
| Oct 16, 08:16 UTC | 86 | 103.160.85.162/32 | AS140766 |
| Oct 16, 08:16 UTC | 76 | 94.143.240.0/24 | AS42387 |
| Oct 16, 08:16 UTC | 86 | 202.134.16.175/32 | AS45903 |
| Oct 16, 08:16 UTC | 86 | 154.206.101.180/32 | AS138915 |
| Oct 16, 08:16 UTC | 86 | 212.135.212.197/32 | AS216211 |
| Oct 16, 08:16 UTC | 86 | 134.17.94.24/32 | AS25106 |
| Oct 16, 08:16 UTC | 90 | 151.237.42.242/32 | AS39024 |
| Oct 16, 08:16 UTC | 72 | 24.54.182.0/23 | AS4181 |
| Oct 16, 08:16 UTC | 80 | 74.49.247.0/24 | AS33490 |
| Oct 16, 08:16 UTC | 80 | 179.253.189.0/24 | AS401152 |
| Oct 16, 08:16 UTC | 72 | 191.179.223.0/25 | AS28573 |
| Oct 16, 08:16 UTC | 80 | 5.45.144.0/22 | AS23456 |
| Oct 16, 08:16 UTC | 86 | 192.238.236.81/32 | AS138995 |
| Oct 16, 08:16 UTC | 80 | 115.186.0.0/24 | AS64524 |
| Oct 16, 08:16 UTC | 78 | 62.183.38.0/24 | AS25490 |
| Oct 16, 08:16 UTC | 80 | 154.198.164.0/24 | AS21859 |
| Oct 16, 08:16 UTC | 80 | 109.122.133.0/24 | AS49902 |
| Oct 16, 08:16 UTC | 86 | 202.130.98.170/32 | AS9381 |
| Oct 16, 08:16 UTC | 90 | 185.228.140.139/32 | AS199319 |
| Oct 16, 08:16 UTC | 72 | 177.67.82.0/24 | AS53013 |
| Oct 16, 08:16 UTC | 86 | 104.156.54.182/32 | AS29802 |
| Oct 16, 08:16 UTC | 90 | 185.184.225.216/32 | AS206441 |
| Oct 16, 08:16 UTC | 86 | 205.177.115.0/24 | AS3491 |
| Oct 16, 08:16 UTC | 90 | 185.184.227.250/32 | AS206441 |
| Oct 16, 08:16 UTC | 74 | 169.128.107.0/24 | AS46176 |
| Oct 16, 08:16 UTC | 86 | 96.61.204.0/23 | AS4181 |
| Oct 16, 08:16 UTC | 80 | 45.120.77.0/24 | AS136209 |
| Oct 16, 08:16 UTC | 80 | 103.110.109.0/24 | AS7642 |
| Oct 16, 08:16 UTC | 90 | 185.184.227.196/32 | AS206441 |
| Oct 16, 08:16 UTC | 86 | 103.232.123.215/32 | AS56150 |
| Oct 16, 08:16 UTC | 86 | 205.252.138.0/24 | AS3491 |
| Oct 16, 08:16 UTC | 76 | 208.71.218.0/24 | AS20014 |
| Oct 16, 08:16 UTC | 84 | 69.21.8.0/23 | AS4181 |
| Oct 16, 08:16 UTC | 74 | 75.184.160.0/19 | AS10796 |
| Oct 16, 08:16 UTC | 90 | 161.104.44.126/32 | AS50340 |
| Oct 16, 08:16 UTC | 90 | 185.184.224.231/32 | AS206441 |
| Oct 16, 08:16 UTC | 86 | 103.63.111.130/32 | AS45903 |
| Oct 16, 08:16 UTC | 80 | 199.166.219.0/24 | AS812 |
| Oct 16, 08:16 UTC | 80 | 45.196.132.0/24 | AS208972 |
| Oct 16, 08:16 UTC | 86 | 69.66.148.0/24 | AS7029 |
| Oct 16, 08:16 UTC | 90 | 185.184.225.211/32 | AS206441 |
| Oct 16, 08:16 UTC | 86 | 185.222.7.191/32 | AS208041 |
| Oct 16, 08:16 UTC | 80 | 158.172.96.0/24 | AS64411 |
| Oct 16, 08:16 UTC | 86 | 160.119.233.55/32 | AS328137 |
| Oct 16, 08:16 UTC | 86 | 102.215.237.4/32 | AS328137 |
| Oct 16, 08:16 UTC | 72 | 201.234.117.0/25 | AS273112 |
| Oct 16, 08:16 UTC | 80 | 80.69.15.0/24 | AS15830 |
| Oct 16, 08:16 UTC | 80 | 137.194.8.0/21 | AS1712 |
| Oct 16, 08:16 UTC | 82 | 5.38.60.0/24 | AS5384 |
| Oct 16, 08:16 UTC | 74 | 24.56.163.0/24 | AS4181 |
| Oct 16, 08:16 UTC | 72 | 38.50.175.0/24 | AS274525 |
| Oct 16, 08:16 UTC | 86 | 103.97.125.81/32 | AS56153 |
| Oct 16, 08:16 UTC | 86 | 74.50.127.40/32 | AS29802 |
| Oct 16, 08:16 UTC | 88 | 185.216.180.192/32 | AS205485 |
| Oct 16, 08:16 UTC | 86 | 160.119.230.222/32 | AS328137 |
| Oct 16, 08:16 UTC | 86 | 213.87.99.120/31 | AS8359 |
| Oct 16, 08:16 UTC | 74 | 185.137.69.0/24 | AS204303 |
| Oct 16, 08:16 UTC | 86 | 66.71.205.73/32 | AS17294 |
| Oct 16, 08:16 UTC | 88 | 46.254.17.106/32 | AS210079 |
| Oct 16, 08:16 UTC | 82 | 135.135.56.0/21 | AS4181 |
| Oct 16, 08:16 UTC | 80 | 193.160.68.0/24 | AS209372 |
| Oct 16, 08:16 UTC | 90 | 185.31.123.173/32 | AS199364 |
| Oct 16, 08:16 UTC | 80 | 185.212.126.0/23 | AS205596 |
| Oct 16, 08:16 UTC | 86 | 106.116.139.0/24 | AS4134 |
| Oct 16, 08:16 UTC | 72 | 61.11.30.0/24 | AS17908 |
| Oct 16, 08:16 UTC | 90 | 180.232.7.10/32 | AS9658 |
| Oct 16, 08:16 UTC | 72 | 176.204.76.0/23 | AS5384 |
| Oct 16, 08:16 UTC | 80 | 207.230.3.0/24 | AS207474 |
| Oct 16, 08:16 UTC | 72 | 177.67.83.0/24 | AS53013 |
| Oct 16, 08:16 UTC | 90 | 47.161.180.0/23 | AS5650 |
| Oct 16, 08:16 UTC | 80 | 185.166.106.0/24 | AS197207 |
| Oct 16, 08:16 UTC | 78 | 38.128.189.0/24 | AS18859 |
| Oct 16, 08:16 UTC | 86 | 103.119.2.245/32 | AS138968 |
| Oct 16, 08:16 UTC | 86 | 160.119.231.203/32 | AS328137 |
| Oct 16, 08:16 UTC | 82 | 209.236.178.0/24 | AS397836 |
| Oct 16, 08:16 UTC | 90 | 185.184.227.251/32 | AS206441 |
| Oct 16, 08:16 UTC | 80 | 103.17.29.0/24 | AS23875 |
| Oct 16, 08:16 UTC | 90 | 47.143.180.0/23 | AS5650 |
| Oct 16, 08:16 UTC | 86 | 160.119.230.81/32 | AS328137 |
| Oct 16, 08:16 UTC | 88 | 37.9.4.33/32 | AS49505 |
| Oct 16, 08:16 UTC | 86 | 66.71.205.119/32 | AS17294 |
| Oct 16, 08:16 UTC | 86 | 45.157.9.65/32 | AS64475 |
| Oct 16, 08:16 UTC | 86 | 160.119.231.73/32 | AS328137 |
| Oct 16, 08:16 UTC | 90 | 91.233.73.186/32 | AS50231 |
| Oct 16, 08:16 UTC | 76 | 176.204.100.0/24 | AS5384 |
| Oct 16, 08:16 UTC | 90 | 185.184.227.197/32 | AS206441 |
| Oct 16, 08:16 UTC | 80 | 178.115.80.0/20 | AS15554 |
| Oct 16, 08:16 UTC | 86 | 123.253.62.80/32 | AS136523 |
| Oct 16, 08:16 UTC | 82 | 223.221.252.0/23 | AS140061 |
| Oct 16, 08:16 UTC | 90 | 185.184.224.230/32 | AS206441 |
| Oct 16, 08:16 UTC | 88 | 103.176.23.151/32 | AS135918 |
| Oct 16, 08:16 UTC | 72 | 118.143.200.0/24 | AS9304 |
| Oct 16, 08:16 UTC | 80 | 95.215.202.0/23 | AS209811 |
| Oct 16, 08:16 UTC | 86 | 124.197.24.166/32 | AS140766 |
| Oct 16, 08:16 UTC | 90 | 47.162.16.0/23 | AS5650 |
| Oct 16, 08:16 UTC | 86 | 160.119.231.37/32 | AS328137 |
| Oct 16, 08:16 UTC | 86 | 184.60.214.0/23 | AS4181 |
| Oct 16, 08:16 UTC | 80 | 112.213.70.0/24 | AS132499 |
| Oct 16, 08:16 UTC | 90 | 185.184.225.210/32 | AS206441 |
| Oct 16, 08:16 UTC | 86 | 69.46.24.165/32 | AS29802 |
| Oct 16, 08:16 UTC | 82 | 5.38.61.0/24 | AS5384 |
| Oct 16, 08:16 UTC | 86 | 94.72.176.51/32 | AS29802 |
| Oct 16, 08:16 UTC | 86 | 203.29.19.226/32 | AS140766 |
| Oct 16, 08:16 UTC | 80 | 103.122.225.0/24 | AS23456 |
| Oct 16, 08:16 UTC | 72 | 70.40.24.0/21 | AS18859 |
| Oct 16, 08:16 UTC | 86 | 103.21.148.0/32 | AS38732 |
| Oct 16, 08:16 UTC | 80 | 185.124.197.184/29 | AS3337 |
| Oct 16, 08:16 UTC | 86 | 80.82.210.153/32 | AS24961 |
| Oct 16, 08:16 UTC | 90 | 47.143.60.0/23 | AS5650 |
| Oct 16, 08:16 UTC | 86 | 130.49.179.169/32 | AS41745 |
| Oct 16, 08:16 UTC | 86 | 103.77.162.34/32 | AS45544 |
| Oct 16, 08:16 UTC | 72 | 203.143.65.0/24 | AS10105 |
| Oct 16, 08:16 UTC | 86 | 160.119.230.71/32 | AS328137 |
| Oct 16, 08:16 UTC | 80 | 91.231.72.0/23 | AS199978 |
| Oct 16, 08:16 UTC | 72 | 41.223.98.0/23 | AS37508 |
| Oct 16, 08:16 UTC | 86 | 170.80.225.239/32 | AS266385 |
| Oct 16, 08:16 UTC | 80 | 110.40.13.0/24 | AS59011 |
| Oct 16, 08:16 UTC | 90 | 185.184.227.194/32 | AS206441 |
| Oct 16, 08:16 UTC | 82 | 1.44.176.0/22 | AS7474 |
| Oct 16, 08:16 UTC | 74 | 152.65.252.0/24 | AS15169 |
| Oct 16, 08:16 UTC | 80 | 77.90.166.0/24 | AS62240 |
| Oct 16, 08:16 UTC | 80 | 155.229.243.0/24 | AS3257 |
| Oct 16, 08:16 UTC | 90 | 185.184.227.95/32 | AS206441 |
| Oct 16, 08:16 UTC | 86 | 102.215.237.108/32 | AS328137 |
| Oct 16, 08:16 UTC | 80 | 185.124.197.64/29 | AS3337 |
| Oct 16, 08:16 UTC | 90 | 185.184.226.79/32 | AS206441 |
| Oct 16, 08:16 UTC | 90 | 185.184.227.253/32 | AS206441 |
| Oct 16, 08:16 UTC | 86 | 213.251.248.18/32 | AS25189 |
| Oct 16, 08:16 UTC | 78 | 24.49.137.0/24 | AS4181 |
| Oct 16, 08:16 UTC | 90 | 185.28.248.44/32 | AS60624 |
| Oct 16, 08:16 UTC | 90 | 62.133.139.28/32 | AS38987 |
| Oct 16, 08:16 UTC | 80 | 198.144.123.0/24 | AS3257 |
| Oct 16, 08:16 UTC | 82 | 5.192.107.0/24 | AS5384 |
| Oct 16, 08:16 UTC | 74 | 115.109.155.0/24 | AS17908 |
| Oct 16, 08:16 UTC | 88 | 160.250.137.219/32 | AS135918 |
| Oct 16, 08:16 UTC | 90 | 185.184.224.232/32 | AS206441 |
| Oct 16, 08:16 UTC | 86 | 69.130.192.0/22 | AS4181 |
| Oct 16, 08:16 UTC | 78 | 119.30.84.0/24 | AS23966 |
| Oct 16, 08:16 UTC | 86 | 5.187.79.183/32 | AS43727 |
| Oct 16, 08:16 UTC | 76 | 207.173.132.0/23 | AS11620 |
| Oct 16, 08:16 UTC | 82 | 23.92.64.24/30 | AS29802 |
| Oct 16, 08:16 UTC | 80 | 122.48.100.0/24 | AS4847 |
| Oct 16, 08:16 UTC | 74 | 216.38.46.0/23 | AS15100 |
| Oct 16, 08:16 UTC | 86 | 160.119.237.105/32 | AS328137 |
| Oct 16, 08:16 UTC | 80 | 194.5.145.0/24 | AS23456 |
| Oct 16, 08:16 UTC | 86 | 185.131.243.68/32 | AS203937 |
| Oct 16, 08:16 UTC | 80 | 103.125.140.0/23 | AS23456 |
| Oct 16, 08:16 UTC | 90 | 185.184.225.212/32 | AS206441 |
| Oct 16, 08:16 UTC | 86 | 42.96.39.174/32 | AS45903 |
| Oct 16, 08:16 UTC | 86 | 85.206.44.22/32 | AS8764 |
| Oct 16, 08:16 UTC | 90 | 94.244.0.226/32 | AS48278 |
| Oct 16, 08:16 UTC | 90 | 188.94.255.10/32 | AS15817 |
| Oct 16, 08:16 UTC | 86 | 160.119.226.206/32 | AS328137 |
| Oct 16, 08:16 UTC | 86 | 191.179.208.80/32 | AS28573 |
| Oct 16, 08:16 UTC | 80 | 185.193.152.0/23 | AS23456 |
| Oct 16, 08:16 UTC | 74 | 103.113.211.0/24 | AS203020 |
| Oct 16, 08:16 UTC | 90 | 185.184.224.47/32 | AS206441 |
| Oct 16, 08:16 UTC | 76 | 37.52.140.0/24 | AS6849 |
| Oct 16, 08:16 UTC | 90 | 185.184.224.159/32 | AS206441 |
| Oct 16, 08:16 UTC | 90 | 185.184.226.214/32 | AS206441 |
| Oct 16, 08:16 UTC | 90 | 173.168.26.0/24 | AS33363 |
| Oct 16, 08:16 UTC | 72 | 5.182.204.0/24 | AS213250 |
| Oct 16, 08:16 UTC | 86 | 94.177.129.248/32 | AS202744 |
| Oct 16, 08:16 UTC | 80 | 45.221.66.0/24 | AS34927 |
| Oct 16, 08:16 UTC | 80 | 168.222.90.0/24 | AS397373 |
| Oct 16, 08:16 UTC | 80 | 202.1.213.0/24 | AS131971 |
| Oct 16, 08:16 UTC | 86 | 94.177.129.127/32 | AS202744 |
| Oct 16, 08:16 UTC | 90 | 185.184.224.21/32 | AS206441 |
| Oct 16, 08:16 UTC | 78 | 70.40.22.0/24 | AS18859 |
| Oct 16, 08:16 UTC | 78 | 24.54.132.0/24 | AS4181 |
| Oct 16, 08:16 UTC | 88 | 89.42.160.42/32 | AS203230 |
| Oct 16, 08:16 UTC | 78 | 61.143.0.0/24 | AS136199 |
| Oct 16, 08:16 UTC | 80 | 94.184.8.0/24 | AS211056 |
| Oct 16, 08:16 UTC | 82 | 23.227.186.56/30 | AS29802 |
| Oct 16, 08:16 UTC | 90 | 185.184.226.97/32 | AS206441 |
| Oct 16, 08:16 UTC | 80 | 115.127.40.0/24 | AS65530 |
| Oct 16, 08:16 UTC | 86 | 203.205.22.125/32 | AS45903 |
| Oct 16, 08:16 UTC | 80 | 185.124.197.240/29 | AS3337 |
Frequently Asked Questions
What is a BGP RPKI-invalid route?
An RPKI-invalid route is a prefix whose origin ASN does not match the Route Origin Authorization (ROA) published by the legitimate holder, or whose length exceeds the ROA max-length. RPKI-invalid routes should be dropped by validating routers; their presence flags a misconfiguration or a possible origin hijack.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the RPKI-invalid route feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-16 08:55 UTC.
How do I subscribe to RPKI-invalid route events?
Subscribe to the Atom feed at /pulse/bgp/rpki.atom or poll the JSON endpoint at /api/pulse/bgp/rpki.