Pulse — RPKI-invalid route

Routes that fail RPKI validation (origin ASN doesn't match the prefix's ROA, or prefix is longer than max-length).

⇲ Atom All feeds ←

Events last 24h

10,483

Most recent

Aug 22, 05:30 UTC

Showing

200

Refresh

● every 60s

What is RPKI-invalid route?

An RPKI-invalid route is a prefix whose origin ASN does not match the Route Origin Authorization (ROA) published by the legitimate holder, or whose length exceeds the ROA max-length. RPKI-invalid routes should be dropped by validating routers; their presence flags a misconfiguration or a possible origin hijack.

Geographic distribution

Flagged events

Showing 200 most recent of 10,483 · last 24h

Most recent RPKI-invalid route events detected across RIPE RIS collectors in the last 24 hours
When	Severity	Prefix	AS	ROA mismatch
Aug 22, 05:30 UTC	88	178.237.85.80/29	AS15547	origin
Aug 22, 05:30 UTC	74	115.109.153.0/24	AS17908	origin
Aug 22, 05:30 UTC	86	185.221.80.100/32	AS35007	origin
Aug 22, 05:30 UTC	76	5.91.200.0/23	AS30722	origin
Aug 22, 05:30 UTC	80	82.41.99.0/24	AS65510	origin
Aug 22, 05:30 UTC	76	207.173.134.0/23	AS11620	origin
Aug 22, 05:30 UTC	86	66.71.205.97/32	AS17294	origin
Aug 22, 05:30 UTC	90	213.221.152.80/29	AS15547	origin
Aug 22, 05:30 UTC	86	5.187.79.134/32	AS43727	origin
Aug 22, 05:30 UTC	80	45.74.56.0/24	AS9009	origin
Aug 22, 05:30 UTC	90	89.161.12.30/32	AS39375	origin
Aug 22, 05:30 UTC	86	103.115.48.188/32	AS138968	origin
Aug 22, 05:30 UTC	80	188.17.226.0/24	AS12389	origin
Aug 22, 05:30 UTC	74	185.44.198.0/24	AS15547	origin
Aug 22, 05:30 UTC	72	103.124.189.0/24	AS17995	origin
Aug 22, 05:30 UTC	86	83.219.97.5/32	AS209693	origin
Aug 22, 05:30 UTC	88	95.215.63.220/31	AS15547	origin
Aug 22, 05:30 UTC	82	176.62.70.0/24	AS47165	origin
Aug 22, 05:30 UTC	86	83.219.97.39/32	AS209693	origin
Aug 22, 05:30 UTC	90	195.206.117.221/32	AS51960	origin
Aug 22, 05:30 UTC	86	185.145.196.125/32	AS24961	origin
Aug 22, 05:30 UTC	86	83.219.97.219/32	AS209693	origin
Aug 22, 05:30 UTC	86	45.154.96.235/32	AS212815	origin
Aug 22, 05:30 UTC	76	94.143.243.0/24	AS42387	origin
Aug 22, 05:30 UTC	72	2.48.184.0/21	AS5384	origin
Aug 22, 05:30 UTC	86	64.188.80.99/32	AS209693	origin
Aug 22, 05:30 UTC	86	185.145.196.13/32	AS24961	origin
Aug 22, 05:30 UTC	80	103.155.61.0/24	AS55081	origin
Aug 22, 05:30 UTC	86	185.145.196.75/32	AS24961	origin
Aug 22, 05:30 UTC	88	163.223.8.98/32	AS135918	origin
Aug 22, 05:30 UTC	90	217.117.134.209/32	AS201925	origin
Aug 22, 05:30 UTC	86	103.1.237.180/32	AS45544	origin
Aug 22, 05:30 UTC	78	77.92.96.0/28	AS25145	origin
Aug 22, 05:30 UTC	86	5.187.79.252/32	AS43727	origin
Aug 22, 05:30 UTC	86	77.92.101.54/32	AS25145	origin
Aug 22, 05:30 UTC	86	139.28.8.135/32	AS39629	origin
Aug 22, 05:30 UTC	86	83.219.97.237/32	AS209693	origin
Aug 22, 05:30 UTC	86	185.145.196.229/32	AS24961	origin
Aug 22, 05:30 UTC	86	83.219.97.25/32	AS209693	origin
Aug 22, 05:30 UTC	78	217.25.216.0/24	AS47165	origin
Aug 22, 05:30 UTC	90	194.85.138.205/32	AS3216	origin
Aug 22, 05:30 UTC	86	160.119.230.226/32	AS328137	origin
Aug 22, 05:30 UTC	86	66.42.53.133/32	AS20473	origin
Aug 22, 05:30 UTC	80	151.247.0.0/24	AS202828	origin
Aug 22, 05:30 UTC	72	31.172.171.0/24	AS15967	origin
Aug 22, 05:30 UTC	76	176.204.118.0/23	AS5384	origin
Aug 22, 05:30 UTC	78	118.107.136.0/24	AS18053	origin
Aug 22, 05:30 UTC	86	195.56.189.0/24	AS5483	origin
Aug 22, 05:30 UTC	90	194.85.138.227/32	AS3216	origin
Aug 22, 05:30 UTC	80	217.60.3.0/24	AS4766	origin
Aug 22, 05:30 UTC	84	36.170.63.0/24	AS9808	origin
Aug 22, 05:30 UTC	80	194.39.110.0/24	AS202651	origin
Aug 22, 05:30 UTC	84	210.240.202.0/23	AS1659	origin
Aug 22, 05:30 UTC	74	103.137.24.0/24	AS18053	origin
Aug 22, 05:30 UTC	90	194.85.138.241/32	AS3216	origin
Aug 22, 05:30 UTC	86	64.188.76.114/32	AS209693	origin
Aug 22, 05:30 UTC	74	206.251.42.0/23	AS19045	origin
Aug 22, 05:30 UTC	74	31.219.154.0/24	AS5384	origin
Aug 22, 05:30 UTC	80	46.60.50.0/24	AS197350	origin
Aug 22, 05:30 UTC	78	120.96.0.0/19	AS17716	origin
Aug 22, 05:30 UTC	86	92.42.102.189/32	AS209693	origin
Aug 22, 05:30 UTC	86	185.145.196.124/32	AS24961	origin
Aug 22, 05:30 UTC	80	121.4.4.0/22	AS132203	origin
Aug 22, 05:30 UTC	86	178.208.94.164/32	AS210079	origin
Aug 22, 05:30 UTC	84	77.69.201.0/24	AS6453	origin
Aug 22, 05:30 UTC	86	207.174.104.37/32	AS835	origin
Aug 22, 05:30 UTC	86	66.71.205.84/32	AS17294	origin
Aug 22, 05:30 UTC	86	160.119.236.41/32	AS328137	origin
Aug 22, 05:30 UTC	82	218.242.67.0/24	AS9812	origin
Aug 22, 05:30 UTC	88	103.77.173.218/32	AS140810	origin
Aug 22, 05:30 UTC	80	103.152.15.0/24	AS23456	origin
Aug 22, 05:30 UTC	86	160.119.231.207/32	AS328137	origin
Aug 22, 05:30 UTC	86	46.251.115.216/32	AS35432	origin
Aug 22, 05:30 UTC	80	81.13.184.0/22	AS15547	origin
Aug 22, 05:30 UTC	80	103.47.145.0/24	AS9009	origin
Aug 22, 05:30 UTC	82	77.92.107.132/30	AS25145	origin
Aug 22, 05:30 UTC	80	122.48.110.0/24	AS4847	origin
Aug 22, 05:30 UTC	86	176.125.254.95/32	AS209693	origin
Aug 22, 05:30 UTC	86	64.188.80.204/32	AS209693	origin
Aug 22, 05:30 UTC	88	213.221.154.80/28	AS15547	origin
Aug 22, 05:30 UTC	86	185.145.196.228/32	AS24961	origin
Aug 22, 05:30 UTC	86	103.87.220.201/32	AS131386	origin
Aug 22, 05:30 UTC	90	213.221.152.72/30	AS15547	origin
Aug 22, 05:30 UTC	86	160.119.237.25/32	AS328137	origin
Aug 22, 05:30 UTC	82	5.192.106.0/24	AS5384	origin
Aug 22, 05:30 UTC	80	23.26.245.0/24	AS29802	origin
Aug 22, 05:30 UTC	86	92.42.102.125/32	AS209693	origin
Aug 22, 05:30 UTC	86	83.219.97.131/32	AS209693	origin
Aug 22, 05:30 UTC	86	92.42.102.164/32	AS209693	origin
Aug 22, 05:30 UTC	88	185.209.71.94/32	AS204568	origin
Aug 22, 05:30 UTC	90	35.141.112.0/24	AS33363	origin
Aug 22, 05:30 UTC	86	160.119.230.6/32	AS328137	origin
Aug 22, 05:30 UTC	82	77.92.111.136/30	AS25145	origin
Aug 22, 05:30 UTC	86	93.114.56.146/32	AS199524	origin
Aug 22, 05:30 UTC	86	45.118.147.202/32	AS131414	origin
Aug 22, 05:30 UTC	80	116.206.126.0/24	AS45629	origin
Aug 22, 05:30 UTC	90	93.92.200.2/32	AS44923	origin
Aug 22, 05:30 UTC	80	45.205.1.0/24	AS54600	origin
Aug 22, 05:30 UTC	86	64.188.76.253/32	AS209693	origin
Aug 22, 05:30 UTC	74	176.204.71.0/24	AS5384	origin
Aug 22, 05:30 UTC	80	81.13.220.0/22	AS15547	origin
Aug 22, 05:30 UTC	82	204.111.94.0/23	AS4922	origin
Aug 22, 05:30 UTC	88	185.113.32.167/32	AS5582	origin
Aug 22, 05:30 UTC	82	77.92.114.112/30	AS25145	origin
Aug 22, 05:30 UTC	86	77.92.126.18/32	AS25145	origin
Aug 22, 05:30 UTC	86	103.87.220.74/32	AS131386	origin
Aug 22, 05:30 UTC	80	77.83.63.0/24	AS28885	origin
Aug 22, 05:30 UTC	86	103.146.167.68/32	AS140766	origin
Aug 22, 05:30 UTC	86	185.145.196.127/32	AS24961	origin
Aug 22, 05:30 UTC	72	38.50.174.0/24	AS274525	origin
Aug 22, 05:30 UTC	90	213.221.154.176/29	AS15547	origin
Aug 22, 05:30 UTC	82	77.92.115.92/30	AS25145	origin
Aug 22, 05:30 UTC	86	45.118.146.139/32	AS131414	origin
Aug 22, 05:30 UTC	88	163.223.8.4/32	AS135918	origin
Aug 22, 05:30 UTC	78	176.204.121.0/24	AS5384	origin
Aug 22, 05:30 UTC	76	77.92.98.64/27	AS25145	origin
Aug 22, 05:30 UTC	82	213.144.115.160/30	AS25145	origin
Aug 22, 05:30 UTC	86	176.125.254.201/32	AS209693	origin
Aug 22, 05:30 UTC	84	119.254.252.0/24	AS23844	origin
Aug 22, 05:30 UTC	86	83.219.97.50/32	AS209693	origin
Aug 22, 05:30 UTC	84	213.221.150.64/26	AS15547	origin
Aug 22, 05:30 UTC	86	102.215.237.15/32	AS328137	origin
Aug 22, 05:30 UTC	90	46.182.103.138/32	AS12741	origin
Aug 22, 05:30 UTC	80	95.86.183.0/24	AS203622	origin
Aug 22, 05:30 UTC	76	95.86.149.0/24	AS34876	origin
Aug 22, 05:30 UTC	76	176.204.100.0/24	AS5384	origin
Aug 22, 05:30 UTC	90	91.233.73.186/32	AS50231	origin
Aug 22, 05:30 UTC	88	213.221.154.192/28	AS15547	origin
Aug 22, 05:30 UTC	80	109.176.254.0/23	AS215269	origin
Aug 22, 05:30 UTC	80	157.20.112.0/23	AS4200000001	origin
Aug 22, 05:30 UTC	90	47.143.180.0/23	AS5650	origin
Aug 22, 05:30 UTC	76	81.88.179.0/24	AS15547	origin
Aug 22, 05:30 UTC	80	103.209.78.0/24	AS9009	origin
Aug 22, 05:30 UTC	80	103.17.29.0/24	AS23875	origin
Aug 22, 05:30 UTC	80	207.230.3.0/24	AS207474	origin
Aug 22, 05:30 UTC	72	176.204.76.0/23	AS5384	origin
Aug 22, 05:30 UTC	76	109.68.135.0/24	AS202246	origin
Aug 22, 05:30 UTC	86	92.42.102.6/32	AS209693	origin
Aug 22, 05:30 UTC	72	61.11.30.0/24	AS17908	origin
Aug 22, 05:30 UTC	78	5.245.203.0/24	AS35819	origin
Aug 22, 05:30 UTC	80	185.212.126.0/23	AS205596	origin
Aug 22, 05:30 UTC	82	160.119.236.200/30	AS328137	origin
Aug 22, 05:30 UTC	80	102.135.80.0/24	AS9009	origin
Aug 22, 05:30 UTC	86	87.251.16.104/32	AS209693	origin
Aug 22, 05:30 UTC	82	1.44.176.0/22	AS7474	origin
Aug 22, 05:30 UTC	80	202.181.16.0/24	AS137491	origin
Aug 22, 05:30 UTC	74	185.137.69.0/24	AS204303	origin
Aug 22, 05:30 UTC	90	46.151.143.69/32	AS197437	origin
Aug 22, 05:30 UTC	72	38.50.175.0/24	AS274525	origin
Aug 22, 05:30 UTC	86	64.188.80.48/32	AS209693	origin
Aug 22, 05:30 UTC	82	5.38.60.0/24	AS5384	origin
Aug 22, 05:30 UTC	82	77.92.114.92/30	AS25145	origin
Aug 22, 05:30 UTC	80	45.39.70.0/24	AS21859	origin
Aug 22, 05:30 UTC	80	154.57.179.0/24	AS58678	origin
Aug 22, 05:30 UTC	80	158.172.96.0/24	AS64411	origin
Aug 22, 05:30 UTC	88	103.167.90.181/32	AS63737	origin
Aug 22, 05:30 UTC	78	120.125.64.0/20	AS1659	origin
Aug 22, 05:30 UTC	80	45.249.124.0/22	AS4758	origin
Aug 22, 05:30 UTC	86	69.66.148.0/24	AS7029	origin
Aug 22, 05:30 UTC	90	78.155.24.168/29	AS15547	origin
Aug 22, 05:30 UTC	80	199.166.219.0/24	AS812	origin
Aug 22, 05:30 UTC	88	103.75.180.99/32	AS151858	origin
Aug 22, 05:30 UTC	86	95.85.250.190/32	AS209693	origin
Aug 22, 05:30 UTC	86	92.42.102.15/32	AS209693	origin
Aug 22, 05:30 UTC	80	154.194.200.0/22	AS19318	origin
Aug 22, 05:30 UTC	86	176.125.254.7/32	AS209693	origin
Aug 22, 05:30 UTC	78	86.111.133.0/24	AS15547	origin
Aug 22, 05:30 UTC	74	103.49.84.0/24	AS9009	origin
Aug 22, 05:30 UTC	72	179.63.163.0/24	AS271650	origin
Aug 22, 05:30 UTC	74	75.184.160.0/19	AS10796	origin
Aug 22, 05:30 UTC	80	85.209.228.0/24	AS61317	origin
Aug 22, 05:30 UTC	86	64.188.80.54/32	AS209693	origin
Aug 22, 05:30 UTC	86	205.252.138.0/24	AS3491	origin
Aug 22, 05:30 UTC	80	45.131.184.0/24	AS44486	origin
Aug 22, 05:30 UTC	82	77.92.115.36/30	AS25145	origin
Aug 22, 05:30 UTC	80	77.92.123.72/29	AS25145	origin
Aug 22, 05:30 UTC	80	45.120.77.0/24	AS136209	origin
Aug 22, 05:30 UTC	86	176.125.254.207/32	AS209693	origin
Aug 22, 05:30 UTC	84	120.118.0.0/18	AS1659	origin
Aug 22, 05:30 UTC	86	160.119.231.202/32	AS328137	origin
Aug 22, 05:30 UTC	72	177.8.53.0/24	AS262493	origin
Aug 22, 05:30 UTC	86	87.251.16.22/32	AS209693	origin
Aug 22, 05:30 UTC	80	103.222.255.0/24	AS23456	origin
Aug 22, 05:30 UTC	80	187.31.55.0/24	AS14571	origin
Aug 22, 05:30 UTC	80	185.217.136.0/24	AS57043	origin
Aug 22, 05:30 UTC	80	200.13.222.0/24	AS7087	origin
Aug 22, 05:30 UTC	86	103.87.220.5/32	AS131386	origin
Aug 22, 05:30 UTC	74	103.137.27.0/24	AS18053	origin
Aug 22, 05:30 UTC	84	157.211.160.0/23	AS4764	origin
Aug 22, 05:30 UTC	90	46.116.232.129/32	AS1680	origin
Aug 22, 05:30 UTC	74	2.48.102.0/23	AS5384	origin
Aug 22, 05:30 UTC	80	23.230.245.0/24	AS9009	origin
Aug 22, 05:30 UTC	72	94.160.128.0/17	AS1267	origin
Aug 22, 05:30 UTC	86	95.85.250.38/32	AS209693	origin
Aug 22, 05:30 UTC	86	167.88.165.67/32	AS14956	origin
Aug 22, 05:30 UTC	82	178.210.39.196/30	AS43727	origin
Aug 22, 05:30 UTC	82	213.144.106.128/30	AS25145	origin
Aug 22, 05:30 UTC	86	66.71.205.138/32	AS17294	origin
Aug 22, 05:30 UTC	90	31.182.218.229/32	AS16342	origin
Aug 22, 05:30 UTC	74	103.49.85.0/24	AS9009	origin

Frequently Asked Questions

What is a BGP RPKI-invalid route?

Where does this data come from?

Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.

How often is the RPKI-invalid route feed updated?

The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-08-22 06:15 UTC.

How do I subscribe to RPKI-invalid route events?

Subscribe to the Atom feed at /pulse/bgp/rpki.atom or poll the JSON endpoint at /api/pulse/bgp/rpki.