Pulse — RPKI-invalid route
Routes that fail RPKI validation (origin ASN doesn't match the prefix's ROA, or prefix is longer than max-length).
What is RPKI-invalid route?
An RPKI-invalid route is a prefix whose origin ASN does not match the Route Origin Authorization (ROA) published by the legitimate holder, or whose length exceeds the ROA max-length. RPKI-invalid routes should be dropped by validating routers; their presence flags a misconfiguration or a possible origin hijack.
Geographic distribution
Flagged events
Showing 200 most recent of 8,087 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Aug 15, 03:51 UTC | 78 | 70.40.26.0/24 | AS18859 |
| Aug 15, 03:51 UTC | 80 | 94.232.175.77/32 | AS48434 |
| Aug 15, 03:51 UTC | 86 | 160.119.230.110/32 | AS328137 |
| Aug 15, 03:51 UTC | 74 | 5.192.18.0/24 | AS5384 |
| Aug 15, 03:51 UTC | 84 | 121.52.18.0/24 | AS17885 |
| Aug 15, 03:51 UTC | 80 | 45.201.1.0/24 | AS58955 |
| Aug 15, 03:51 UTC | 80 | 94.232.171.104/32 | AS48434 |
| Aug 15, 03:51 UTC | 78 | 192.83.191.0/24 | AS1659 |
| Aug 15, 03:51 UTC | 90 | 195.222.17.122/32 | AS3327 |
| Aug 15, 03:51 UTC | 78 | 5.245.83.0/24 | AS35819 |
| Aug 15, 03:51 UTC | 86 | 74.50.113.73/32 | AS29802 |
| Aug 15, 03:51 UTC | 78 | 5.245.62.0/24 | AS35819 |
| Aug 15, 03:51 UTC | 88 | 195.136.159.84/32 | AS199260 |
| Aug 15, 03:51 UTC | 80 | 94.232.175.136/32 | AS48434 |
| Aug 15, 03:51 UTC | 90 | 91.222.26.13/32 | AS51960 |
| Aug 15, 03:51 UTC | 86 | 185.169.55.182/32 | AS208425 |
| Aug 15, 03:51 UTC | 80 | 94.232.168.242/32 | AS48434 |
| Aug 15, 03:51 UTC | 86 | 193.163.203.185/32 | AS207957 |
| Aug 15, 03:51 UTC | 86 | 115.112.223.0/24 | AS4755 |
| Aug 15, 03:51 UTC | 80 | 212.24.127.0/24 | AS31898 |
| Aug 15, 03:51 UTC | 84 | 98.167.186.0/24 | AS22773 |
| Aug 15, 03:51 UTC | 80 | 36.255.195.0/24 | AS21859 |
| Aug 15, 03:51 UTC | 80 | 167.160.27.0/24 | AS59447 |
| Aug 15, 03:51 UTC | 90 | 31.182.101.38/32 | AS16342 |
| Aug 15, 03:51 UTC | 78 | 5.245.123.0/24 | AS35819 |
| Aug 15, 03:51 UTC | 72 | 94.166.128.0/17 | AS1267 |
| Aug 15, 03:51 UTC | 72 | 180.181.252.0/23 | AS4764 |
| Aug 15, 03:51 UTC | 80 | 23.227.160.32/29 | AS29802 |
| Aug 15, 03:51 UTC | 72 | 177.8.55.0/24 | AS262493 |
| Aug 15, 03:51 UTC | 90 | 47.161.158.0/23 | AS5650 |
| Aug 15, 03:51 UTC | 80 | 107.155.68.64/29 | AS29802 |
| Aug 15, 03:51 UTC | 80 | 45.149.94.0/24 | AS9009 |
| Aug 15, 03:51 UTC | 90 | 140.127.82.0/23 | AS1659 |
| Aug 15, 03:51 UTC | 86 | 8.210.17.120/32 | AS45102 |
| Aug 15, 03:51 UTC | 90 | 185.184.225.35/32 | AS206441 |
| Aug 15, 03:51 UTC | 90 | 93.174.30.78/32 | AS41676 |
| Aug 15, 03:51 UTC | 80 | 50.118.226.0/24 | AS9009 |
| Aug 15, 03:51 UTC | 90 | 185.184.227.174/32 | AS206441 |
| Aug 15, 03:51 UTC | 86 | 107.155.124.50/32 | AS29802 |
| Aug 15, 03:51 UTC | 86 | 152.89.117.94/32 | AS208785 |
| Aug 15, 03:51 UTC | 86 | 203.205.17.189/32 | AS45903 |
| Aug 15, 03:51 UTC | 86 | 45.158.38.106/32 | AS29802 |
| Aug 15, 03:51 UTC | 90 | 185.184.225.239/32 | AS206441 |
| Aug 15, 03:51 UTC | 90 | 213.193.68.168/30 | AS6730 |
| Aug 15, 03:51 UTC | 72 | 46.60.0.0/23 | AS197350 |
| Aug 15, 03:51 UTC | 86 | 91.198.56.231/32 | AS201754 |
| Aug 15, 03:51 UTC | 86 | 8.218.54.109/32 | AS45102 |
| Aug 15, 03:51 UTC | 90 | 185.184.227.162/32 | AS206441 |
| Aug 15, 03:51 UTC | 86 | 202.153.199.32/32 | AS17408 |
| Aug 15, 03:51 UTC | 76 | 77.28.233.0/24 | AS6821 |
| Aug 15, 03:51 UTC | 90 | 185.184.224.186/32 | AS206441 |
| Aug 15, 03:51 UTC | 82 | 218.242.71.0/24 | AS9812 |
| Aug 15, 03:51 UTC | 82 | 97.101.48.0/20 | AS33363 |
| Aug 15, 03:51 UTC | 80 | 203.68.96.0/22 | AS1659 |
| Aug 15, 03:51 UTC | 86 | 196.0.128.0/24 | AS21491 |
| Aug 15, 03:51 UTC | 86 | 74.50.98.91/32 | AS29802 |
| Aug 15, 03:51 UTC | 76 | 2.48.48.0/23 | AS5384 |
| Aug 15, 03:51 UTC | 76 | 77.28.175.0/24 | AS6821 |
| Aug 15, 03:51 UTC | 90 | 185.184.225.17/32 | AS206441 |
| Aug 15, 03:51 UTC | 86 | 193.56.63.100/32 | AS215514 |
| Aug 15, 03:51 UTC | 88 | 81.13.239.192/26 | AS15547 |
| Aug 15, 03:51 UTC | 86 | 103.77.224.71/32 | AS20473 |
| Aug 15, 03:51 UTC | 86 | 172.86.91.86/32 | AS14956 |
| Aug 15, 03:51 UTC | 86 | 150.107.49.27/32 | AS207590 |
| Aug 15, 03:51 UTC | 80 | 94.232.168.176/32 | AS48434 |
| Aug 15, 03:51 UTC | 82 | 42.51.240.0/24 | AS56005 |
| Aug 15, 03:51 UTC | 86 | 150.107.49.10/32 | AS207590 |
| Aug 15, 03:51 UTC | 82 | 157.211.172.0/22 | AS4764 |
| Aug 15, 03:51 UTC | 80 | 187.31.47.0/24 | AS14571 |
| Aug 15, 03:51 UTC | 90 | 201.39.237.56/29 | AS4230 |
| Aug 15, 03:51 UTC | 86 | 43.96.9.130/32 | AS45102 |
| Aug 15, 03:51 UTC | 86 | 150.107.49.66/32 | AS207590 |
| Aug 15, 03:51 UTC | 80 | 45.202.120.0/22 | AS19318 |
| Aug 15, 03:51 UTC | 72 | 62.118.106.0/24 | AS41209 |
| Aug 15, 03:51 UTC | 86 | 150.107.49.51/32 | AS207590 |
| Aug 15, 03:51 UTC | 80 | 85.11.187.0/24 | AS56655 |
| Aug 15, 03:51 UTC | 80 | 94.232.168.206/32 | AS48434 |
| Aug 15, 03:51 UTC | 80 | 94.232.168.219/32 | AS48434 |
| Aug 15, 03:51 UTC | 86 | 150.107.49.92/32 | AS207590 |
| Aug 15, 03:51 UTC | 90 | 31.183.98.68/32 | AS16342 |
| Aug 15, 03:51 UTC | 80 | 94.232.168.169/32 | AS48434 |
| Aug 15, 03:51 UTC | 86 | 160.119.230.98/32 | AS328137 |
| Aug 15, 03:51 UTC | 80 | 66.253.0.0/24 | AS3257 |
| Aug 15, 03:51 UTC | 86 | 185.221.83.15/32 | AS35007 |
| Aug 15, 03:51 UTC | 90 | 185.184.227.221/32 | AS206441 |
| Aug 15, 03:51 UTC | 86 | 91.224.47.104/32 | AS59945 |
| Aug 15, 03:51 UTC | 90 | 185.184.225.4/32 | AS206441 |
| Aug 15, 03:51 UTC | 72 | 216.83.48.0/24 | AS33203 |
| Aug 15, 03:51 UTC | 86 | 66.206.16.39/32 | AS29802 |
| Aug 15, 03:51 UTC | 86 | 103.232.120.34/32 | AS56150 |
| Aug 15, 03:51 UTC | 86 | 185.37.151.113/32 | AS61102 |
| Aug 15, 03:51 UTC | 72 | 103.125.11.0/24 | AS17995 |
| Aug 15, 03:51 UTC | 86 | 43.96.36.130/32 | AS45102 |
| Aug 15, 03:51 UTC | 86 | 207.56.4.118/32 | AS54801 |
| Aug 15, 03:51 UTC | 80 | 153.76.202.0/23 | AS199412 |
| Aug 15, 03:51 UTC | 80 | 94.232.168.154/32 | AS48434 |
| Aug 15, 03:51 UTC | 78 | 197.243.21.0/24 | AS37228 |
| Aug 15, 03:51 UTC | 86 | 134.59.73.0/24 | AS2200 |
| Aug 15, 03:51 UTC | 72 | 38.21.16.0/20 | AS272906 |
| Aug 15, 03:51 UTC | 86 | 74.50.118.241/32 | AS29802 |
| Aug 15, 03:51 UTC | 80 | 89.249.203.0/24 | AS9009 |
| Aug 15, 03:51 UTC | 74 | 118.107.48.0/21 | AS64050 |
| Aug 15, 03:51 UTC | 74 | 70.40.24.0/22 | AS18859 |
| Aug 15, 03:51 UTC | 80 | 187.31.38.0/24 | AS14571 |
| Aug 15, 03:51 UTC | 80 | 20.137.184.0/21 | AS4237 |
| Aug 15, 03:51 UTC | 72 | 187.111.112.0/24 | AS271680 |
| Aug 15, 03:51 UTC | 80 | 94.232.171.193/32 | AS48434 |
| Aug 15, 03:51 UTC | 86 | 150.107.49.2/32 | AS207590 |
| Aug 15, 03:51 UTC | 86 | 185.127.94.112/32 | AS47447 |
| Aug 15, 03:51 UTC | 72 | 82.25.54.0/24 | AS963 |
| Aug 15, 03:51 UTC | 82 | 157.211.196.0/22 | AS4764 |
| Aug 15, 03:51 UTC | 90 | 185.184.224.103/32 | AS206441 |
| Aug 15, 03:51 UTC | 86 | 82.97.250.14/32 | AS9123 |
| Aug 15, 03:51 UTC | 88 | 212.170.228.0/25 | AS3352 |
| Aug 15, 03:51 UTC | 86 | 150.107.49.117/32 | AS207590 |
| Aug 15, 03:51 UTC | 80 | 103.177.144.0/23 | AS23456 |
| Aug 15, 03:51 UTC | 86 | 47.238.149.68/32 | AS45102 |
| Aug 15, 03:51 UTC | 86 | 23.227.196.117/32 | AS29802 |
| Aug 15, 03:51 UTC | 90 | 185.184.224.112/32 | AS206441 |
| Aug 15, 03:51 UTC | 82 | 66.255.180.0/24 | AS7029 |
| Aug 15, 03:51 UTC | 74 | 31.218.186.0/24 | AS5384 |
| Aug 15, 03:51 UTC | 80 | 185.37.55.3/32 | AS48434 |
| Aug 15, 03:51 UTC | 72 | 37.245.252.0/23 | AS5384 |
| Aug 15, 03:51 UTC | 86 | 196.0.8.0/24 | AS21491 |
| Aug 15, 03:51 UTC | 86 | 217.79.242.231/32 | AS29802 |
| Aug 15, 03:51 UTC | 86 | 207.56.18.174/32 | AS54801 |
| Aug 15, 03:51 UTC | 74 | 94.58.179.0/24 | AS5384 |
| Aug 15, 03:51 UTC | 74 | 176.204.216.0/23 | AS5384 |
| Aug 15, 03:51 UTC | 72 | 176.62.223.0/24 | AS197510 |
| Aug 15, 03:51 UTC | 90 | 43.153.61.204/32 | AS132203 |
| Aug 15, 03:51 UTC | 80 | 216.82.143.0/24 | AS18859 |
| Aug 15, 03:51 UTC | 74 | 185.47.99.0/24 | AS202339 |
| Aug 15, 03:51 UTC | 80 | 45.74.45.0/24 | AS9009 |
| Aug 15, 03:51 UTC | 88 | 46.254.16.231/32 | AS210079 |
| Aug 15, 03:51 UTC | 80 | 103.92.232.0/23 | AS23456 |
| Aug 15, 03:51 UTC | 80 | 216.82.157.0/24 | AS18859 |
| Aug 15, 03:51 UTC | 86 | 179.61.14.218/32 | AS29802 |
| Aug 15, 03:51 UTC | 88 | 195.20.200.73/32 | AS59611 |
| Aug 15, 03:51 UTC | 90 | 31.7.180.181/32 | AS33891 |
| Aug 15, 03:51 UTC | 74 | 1.194.194.0/24 | AS139587 |
| Aug 15, 03:51 UTC | 76 | 31.219.132.0/24 | AS5384 |
| Aug 15, 03:51 UTC | 72 | 204.154.124.0/23 | AS18859 |
| Aug 15, 03:51 UTC | 80 | 77.83.83.0/24 | AS63023 |
| Aug 15, 03:51 UTC | 72 | 103.125.8.0/24 | AS17995 |
| Aug 15, 03:51 UTC | 78 | 80.251.119.0/24 | AS39125 |
| Aug 15, 03:51 UTC | 72 | 41.74.164.0/23 | AS37228 |
| Aug 15, 03:51 UTC | 80 | 23.252.77.0/24 | AS3257 |
| Aug 15, 03:51 UTC | 80 | 154.61.150.0/24 | AS174 |
| Aug 15, 03:51 UTC | 90 | 83.143.148.24/32 | AS34917 |
| Aug 15, 03:51 UTC | 80 | 185.78.20.47/32 | AS48434 |
| Aug 15, 03:51 UTC | 72 | 77.29.228.0/22 | AS6821 |
| Aug 15, 03:51 UTC | 80 | 31.57.200.0/24 | AS149513 |
| Aug 15, 03:51 UTC | 74 | 77.28.228.0/23 | AS6821 |
| Aug 15, 03:51 UTC | 88 | 101.32.94.226/32 | AS132203 |
| Aug 15, 03:51 UTC | 86 | 115.85.5.141/32 | AS9658 |
| Aug 15, 03:51 UTC | 86 | 85.187.243.1/32 | AS29694 |
| Aug 15, 03:51 UTC | 88 | 2.16.216.0/22 | AS20940 |
| Aug 15, 03:51 UTC | 86 | 207.56.20.52/32 | AS54801 |
| Aug 15, 03:51 UTC | 76 | 94.143.245.0/24 | AS42387 |
| Aug 15, 03:51 UTC | 82 | 140.133.32.0/19 | AS1659 |
| Aug 15, 03:51 UTC | 72 | 202.191.157.0/24 | AS9583 |
| Aug 15, 03:51 UTC | 86 | 23.92.70.5/32 | AS29802 |
| Aug 15, 03:51 UTC | 86 | 185.18.207.67/32 | AS61102 |
| Aug 15, 03:51 UTC | 86 | 43.96.72.130/32 | AS45102 |
| Aug 15, 03:51 UTC | 80 | 185.105.44.0/23 | AS262287 |
| Aug 15, 03:51 UTC | 86 | 47.239.100.34/32 | AS45102 |
| Aug 15, 03:51 UTC | 78 | 31.47.153.0/24 | AS12389 |
| Aug 15, 03:51 UTC | 76 | 77.29.121.0/24 | AS6821 |
| Aug 15, 03:51 UTC | 90 | 93.159.47.158/32 | AS12741 |
| Aug 15, 03:51 UTC | 90 | 185.184.224.115/32 | AS206441 |
| Aug 15, 03:51 UTC | 74 | 210.70.82.0/23 | AS1659 |
| Aug 15, 03:51 UTC | 86 | 178.254.192.170/32 | AS20911 |
| Aug 15, 03:51 UTC | 86 | 43.99.55.110/32 | AS45102 |
| Aug 15, 03:51 UTC | 80 | 94.232.172.179/32 | AS48434 |
| Aug 15, 03:51 UTC | 80 | 185.78.20.38/32 | AS48434 |
| Aug 15, 03:51 UTC | 80 | 203.64.120.0/21 | AS1659 |
| Aug 15, 03:51 UTC | 86 | 160.119.230.117/32 | AS328137 |
| Aug 15, 03:51 UTC | 90 | 35.137.235.0/24 | AS33363 |
| Aug 15, 03:51 UTC | 72 | 59.165.72.0/21 | AS17908 |
| Aug 15, 03:51 UTC | 80 | 103.186.26.0/23 | AS23456 |
| Aug 15, 03:51 UTC | 90 | 185.184.224.208/32 | AS206441 |
| Aug 15, 03:51 UTC | 90 | 89.105.204.171/32 | AS24875 |
| Aug 15, 03:51 UTC | 86 | 8.218.28.227/32 | AS45102 |
| Aug 15, 03:51 UTC | 86 | 107.155.89.131/32 | AS29802 |
| Aug 15, 03:51 UTC | 90 | 185.184.226.153/32 | AS206441 |
| Aug 15, 03:51 UTC | 86 | 103.183.198.15/32 | AS7483 |
| Aug 15, 03:51 UTC | 86 | 43.99.62.93/32 | AS45102 |
| Aug 15, 03:51 UTC | 86 | 150.107.49.180/32 | AS207590 |
| Aug 15, 03:51 UTC | 90 | 140.131.2.0/23 | AS1659 |
| Aug 15, 03:51 UTC | 80 | 62.217.157.0/24 | AS8814 |
| Aug 15, 03:51 UTC | 86 | 5.187.79.162/32 | AS43727 |
| Aug 15, 03:51 UTC | 82 | 157.211.52.0/22 | AS4764 |
| Aug 15, 03:51 UTC | 86 | 89.37.116.49/32 | AS62390 |
| Aug 15, 03:51 UTC | 72 | 162.222.246.0/23 | AS18859 |
| Aug 15, 03:51 UTC | 86 | 172.86.117.71/32 | AS14956 |
| Aug 15, 03:51 UTC | 80 | 168.151.16.0/24 | AS11427 |
| Aug 15, 03:51 UTC | 74 | 45.249.233.0/24 | AS132215 |
| Aug 15, 03:51 UTC | 74 | 91.205.78.0/24 | AS50964 |
| Aug 15, 03:51 UTC | 80 | 185.78.20.1/32 | AS48434 |
| Aug 15, 03:51 UTC | 80 | 120.131.124.0/22 | AS59011 |
Frequently Asked Questions
What is a BGP RPKI-invalid route?
An RPKI-invalid route is a prefix whose origin ASN does not match the Route Origin Authorization (ROA) published by the legitimate holder, or whose length exceeds the ROA max-length. RPKI-invalid routes should be dropped by validating routers; their presence flags a misconfiguration or a possible origin hijack.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the RPKI-invalid route feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-08-15 04:20 UTC.
How do I subscribe to RPKI-invalid route events?
Subscribe to the Atom feed at /pulse/bgp/rpki.atom or poll the JSON endpoint at /api/pulse/bgp/rpki.