Pulse — RPKI-invalid route
Routes that fail RPKI validation (origin ASN doesn't match the prefix's ROA, or prefix is longer than max-length).
What is RPKI-invalid route?
An RPKI-invalid route is a prefix whose origin ASN does not match the Route Origin Authorization (ROA) published by the legitimate holder, or whose length exceeds the ROA max-length. RPKI-invalid routes should be dropped by validating routers; their presence flags a misconfiguration or a possible origin hijack.
Geographic distribution
Flagged events
Showing 200 most recent of 7,554 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Oct 18, 21:16 UTC | 86 | 96.62.223.47/32 | AS201640 |
| Oct 18, 21:16 UTC | 72 | 163.52.23.0/24 | AS154848 |
| Oct 18, 21:16 UTC | 86 | 212.143.2.201/32 | AS1680 |
| Oct 18, 21:16 UTC | 86 | 185.235.127.172/32 | AS198317 |
| Oct 18, 21:16 UTC | 86 | 202.81.234.255/32 | AS4658 |
| Oct 18, 21:16 UTC | 88 | 103.7.59.65/32 | AS131447 |
| Oct 18, 21:16 UTC | 80 | 185.55.240.0/22 | AS35042 |
| Oct 18, 21:16 UTC | 86 | 103.174.217.252/32 | AS140766 |
| Oct 18, 21:16 UTC | 86 | 43.173.147.113/32 | AS132203 |
| Oct 18, 21:16 UTC | 86 | 66.71.205.70/32 | AS17294 |
| Oct 18, 21:16 UTC | 86 | 45.118.147.248/32 | AS131414 |
| Oct 18, 21:16 UTC | 86 | 37.46.14.133/32 | AS48956 |
| Oct 18, 21:16 UTC | 86 | 103.75.73.1/32 | AS149078 |
| Oct 18, 21:16 UTC | 80 | 80.250.44.0/24 | AS7155 |
| Oct 18, 21:16 UTC | 88 | 103.161.119.24/32 | AS135918 |
| Oct 18, 21:16 UTC | 86 | 96.62.223.16/32 | AS201640 |
| Oct 18, 21:16 UTC | 86 | 5.187.79.162/32 | AS43727 |
| Oct 18, 21:16 UTC | 88 | 51.162.22.80/29 | AS15830 |
| Oct 18, 21:16 UTC | 80 | 165.49.254.0/24 | AS12989 |
| Oct 18, 21:16 UTC | 86 | 103.58.151.80/32 | AS63989 |
| Oct 18, 21:16 UTC | 86 | 175.100.203.13/32 | AS55355 |
| Oct 18, 21:16 UTC | 86 | 175.100.203.219/32 | AS55355 |
| Oct 18, 21:16 UTC | 86 | 103.58.151.255/32 | AS63989 |
| Oct 18, 21:16 UTC | 82 | 109.237.17.32/27 | AS15830 |
| Oct 18, 21:16 UTC | 86 | 103.27.238.118/32 | AS131386 |
| Oct 18, 21:16 UTC | 86 | 103.97.125.44/32 | AS56153 |
| Oct 18, 21:16 UTC | 80 | 2.27.196.0/22 | AS3257 |
| Oct 18, 21:16 UTC | 72 | 59.165.72.0/21 | AS17908 |
| Oct 18, 21:16 UTC | 86 | 160.119.226.74/32 | AS328137 |
| Oct 18, 21:16 UTC | 90 | 35.137.235.0/24 | AS33363 |
| Oct 18, 21:16 UTC | 88 | 103.7.58.190/32 | AS131447 |
| Oct 18, 21:16 UTC | 86 | 118.143.209.218/32 | AS55355 |
| Oct 18, 21:16 UTC | 90 | 149.50.126.73/32 | AS201814 |
| Oct 18, 21:16 UTC | 86 | 185.37.149.145/32 | AS61102 |
| Oct 18, 21:16 UTC | 80 | 95.134.236.0/22 | AS3257 |
| Oct 18, 21:16 UTC | 80 | 89.21.85.0/24 | AS141892 |
| Oct 18, 21:16 UTC | 80 | 103.169.62.0/23 | AS146746 |
| Oct 18, 21:16 UTC | 84 | 118.213.130.0/24 | AS140061 |
| Oct 18, 21:16 UTC | 72 | 187.111.112.0/24 | AS271680 |
| Oct 18, 21:16 UTC | 78 | 217.22.47.0/24 | AS49214 |
| Oct 18, 21:16 UTC | 80 | 156.236.84.0/24 | AS198990 |
| Oct 18, 21:16 UTC | 86 | 175.100.203.104/32 | AS55355 |
| Oct 18, 21:16 UTC | 72 | 212.33.104.0/21 | AS12975 |
| Oct 18, 21:16 UTC | 86 | 185.107.67.178/32 | AS204479 |
| Oct 18, 21:16 UTC | 86 | 175.100.203.112/32 | AS55355 |
| Oct 18, 21:16 UTC | 86 | 89.161.59.57/32 | AS39375 |
| Oct 18, 21:16 UTC | 80 | 103.207.84.0/24 | AS142647 |
| Oct 18, 21:16 UTC | 72 | 103.125.11.0/24 | AS17995 |
| Oct 18, 21:16 UTC | 90 | 94.154.96.119/32 | AS197892 |
| Oct 18, 21:16 UTC | 86 | 150.107.30.2/32 | AS131447 |
| Oct 18, 21:16 UTC | 72 | 216.83.48.0/24 | AS33203 |
| Oct 18, 21:16 UTC | 88 | 107.149.215.134/32 | AS398478 |
| Oct 18, 21:16 UTC | 72 | 164.100.189.0/24 | AS4758 |
| Oct 18, 21:16 UTC | 86 | 112.215.125.0/24 | AS24203 |
| Oct 18, 21:16 UTC | 86 | 43.229.150.81/32 | AS56309 |
| Oct 18, 21:16 UTC | 86 | 175.100.201.34/32 | AS55355 |
| Oct 18, 21:16 UTC | 82 | 212.71.230.32/27 | AS15830 |
| Oct 18, 21:16 UTC | 80 | 66.253.0.0/24 | AS3257 |
| Oct 18, 21:16 UTC | 86 | 160.119.230.98/32 | AS328137 |
| Oct 18, 21:16 UTC | 86 | 185.18.205.65/32 | AS61102 |
| Oct 18, 21:16 UTC | 78 | 61.143.4.0/24 | AS136199 |
| Oct 18, 21:16 UTC | 86 | 103.97.125.209/32 | AS56153 |
| Oct 18, 21:16 UTC | 86 | 66.71.205.148/32 | AS17294 |
| Oct 18, 21:16 UTC | 86 | 175.100.201.199/32 | AS55355 |
| Oct 18, 21:16 UTC | 72 | 62.118.106.0/24 | AS41209 |
| Oct 18, 21:16 UTC | 82 | 42.51.240.0/24 | AS56005 |
| Oct 18, 21:16 UTC | 86 | 66.71.205.109/32 | AS17294 |
| Oct 18, 21:16 UTC | 86 | 176.56.212.58/32 | AS59437 |
| Oct 18, 21:16 UTC | 76 | 2.48.48.0/23 | AS5384 |
| Oct 18, 21:16 UTC | 86 | 103.72.69.254/32 | AS149078 |
| Oct 18, 21:16 UTC | 86 | 45.119.83.216/32 | AS131386 |
| Oct 18, 21:16 UTC | 82 | 97.101.48.0/20 | AS33363 |
| Oct 18, 21:16 UTC | 86 | 124.197.24.161/32 | AS140766 |
| Oct 18, 21:16 UTC | 82 | 218.242.71.0/24 | AS9812 |
| Oct 18, 21:16 UTC | 80 | 141.11.208.0/24 | AS9304 |
| Oct 18, 21:16 UTC | 86 | 143.0.113.84/32 | AS262995 |
| Oct 18, 21:16 UTC | 90 | 5.53.128.119/32 | AS8717 |
| Oct 18, 21:16 UTC | 82 | 212.51.118.0/24 | AS5483 |
| Oct 18, 21:16 UTC | 86 | 195.56.122.0/24 | AS5483 |
| Oct 18, 21:16 UTC | 84 | 115.113.56.0/23 | AS4755 |
| Oct 18, 21:16 UTC | 86 | 175.100.203.181/32 | AS55355 |
| Oct 18, 21:16 UTC | 80 | 91.240.131.0/24 | AS198611 |
| Oct 18, 21:16 UTC | 86 | 185.127.22.119/32 | AS199517 |
| Oct 18, 21:16 UTC | 86 | 218.188.102.58/32 | AS55355 |
| Oct 18, 21:16 UTC | 86 | 175.100.201.52/32 | AS55355 |
| Oct 18, 21:16 UTC | 72 | 46.60.0.0/23 | AS197350 |
| Oct 18, 21:16 UTC | 80 | 103.183.59.0/24 | AS23456 |
| Oct 18, 21:16 UTC | 86 | 66.71.205.42/32 | AS17294 |
| Oct 18, 21:16 UTC | 86 | 96.62.223.24/32 | AS201640 |
| Oct 18, 21:16 UTC | 80 | 103.112.45.0/24 | AS23456 |
| Oct 18, 21:16 UTC | 78 | 216.158.108.0/24 | AS59702 |
| Oct 18, 21:16 UTC | 86 | 2.43.1.0/24 | AS30722 |
| Oct 18, 21:16 UTC | 86 | 175.100.201.70/32 | AS55355 |
| Oct 18, 21:16 UTC | 84 | 106.37.136.0/23 | AS4847 |
| Oct 18, 21:16 UTC | 86 | 115.112.223.0/24 | AS4755 |
| Oct 18, 21:16 UTC | 86 | 175.100.203.251/32 | AS55355 |
| Oct 18, 21:16 UTC | 86 | 103.97.125.252/32 | AS56153 |
| Oct 18, 21:16 UTC | 80 | 103.122.212.0/23 | AS141145 |
| Oct 18, 21:16 UTC | 86 | 5.187.79.133/32 | AS43727 |
| Oct 18, 21:16 UTC | 72 | 103.94.234.0/24 | AS150783 |
| Oct 18, 21:16 UTC | 86 | 192.115.202.142/32 | AS1680 |
| Oct 18, 21:16 UTC | 86 | 66.71.205.21/32 | AS17294 |
| Oct 18, 21:16 UTC | 84 | 121.52.18.0/24 | AS17885 |
| Oct 18, 21:16 UTC | 86 | 175.100.203.208/32 | AS55355 |
| Oct 18, 21:16 UTC | 86 | 175.100.201.81/32 | AS55355 |
| Oct 18, 21:16 UTC | 74 | 5.192.18.0/24 | AS5384 |
| Oct 18, 21:16 UTC | 80 | 103.56.92.0/24 | AS141985 |
| Oct 18, 21:16 UTC | 80 | 87.85.227.0/24 | AS16509 |
| Oct 18, 21:16 UTC | 88 | 103.228.36.32/32 | AS135918 |
| Oct 18, 21:16 UTC | 88 | 103.7.57.130/32 | AS131447 |
| Oct 18, 21:16 UTC | 80 | 89.249.203.0/24 | AS9009 |
| Oct 18, 21:16 UTC | 72 | 103.125.5.0/24 | AS17995 |
| Oct 18, 21:16 UTC | 78 | 9.137.4.0/23 | AS5384 |
| Oct 18, 21:16 UTC | 86 | 66.71.205.110/32 | AS17294 |
| Oct 18, 21:16 UTC | 86 | 66.71.205.127/32 | AS17294 |
| Oct 18, 21:16 UTC | 80 | 122.48.32.0/19 | AS4847 |
| Oct 18, 21:16 UTC | 86 | 66.71.205.151/32 | AS17294 |
| Oct 18, 21:16 UTC | 80 | 45.253.27.0/24 | AS4812 |
| Oct 18, 21:16 UTC | 86 | 66.71.205.166/32 | AS17294 |
| Oct 18, 21:16 UTC | 86 | 188.137.227.238/32 | AS211381 |
| Oct 18, 21:16 UTC | 86 | 194.28.191.35/32 | AS198906 |
| Oct 18, 21:16 UTC | 90 | 108.191.147.0/24 | AS33363 |
| Oct 18, 21:16 UTC | 80 | 151.240.4.0/22 | AS25369 |
| Oct 18, 21:16 UTC | 86 | 160.119.237.161/32 | AS328137 |
| Oct 18, 21:16 UTC | 76 | 152.36.8.0/24 | AS63178 |
| Oct 18, 21:16 UTC | 86 | 181.190.15.0/24 | AS14259 |
| Oct 18, 21:16 UTC | 80 | 213.172.82.0/24 | AS13099 |
| Oct 18, 21:16 UTC | 72 | 193.93.192.0/23 | AS34665 |
| Oct 18, 21:16 UTC | 86 | 119.15.116.2/32 | AS55393 |
| Oct 18, 21:16 UTC | 76 | 59.165.149.0/24 | AS4755 |
| Oct 18, 21:16 UTC | 88 | 103.7.59.203/32 | AS131447 |
| Oct 18, 21:16 UTC | 80 | 202.185.188.0/24 | AS65295 |
| Oct 18, 21:16 UTC | 80 | 154.86.176.0/24 | AS134548 |
| Oct 18, 21:16 UTC | 88 | 103.160.2.164/32 | AS135918 |
| Oct 18, 21:16 UTC | 86 | 64.177.54.154/32 | AS20473 |
| Oct 18, 21:16 UTC | 80 | 103.166.102.0/24 | AS23456 |
| Oct 18, 21:16 UTC | 80 | 51.241.135.0/24 | AS50049 |
| Oct 18, 21:16 UTC | 86 | 91.97.178.83/32 | AS9145 |
| Oct 18, 21:16 UTC | 88 | 185.216.180.0/32 | AS205485 |
| Oct 18, 21:16 UTC | 72 | 85.122.53.0/24 | AS48453 |
| Oct 18, 21:16 UTC | 86 | 103.87.220.7/32 | AS131386 |
| Oct 18, 21:16 UTC | 78 | 118.107.140.0/24 | AS18053 |
| Oct 18, 21:16 UTC | 86 | 140.161.214.0/24 | AS395064 |
| Oct 18, 21:16 UTC | 80 | 103.192.72.0/22 | AS141825 |
| Oct 18, 21:16 UTC | 72 | 46.60.58.0/24 | AS197350 |
| Oct 18, 21:16 UTC | 78 | 176.204.114.0/24 | AS5384 |
| Oct 18, 21:16 UTC | 80 | 132.243.215.0/24 | AS25198 |
| Oct 18, 21:16 UTC | 86 | 31.40.157.22/32 | AS206810 |
| Oct 18, 21:16 UTC | 86 | 118.143.209.187/32 | AS55355 |
| Oct 18, 21:16 UTC | 86 | 85.114.159.90/32 | AS24961 |
| Oct 18, 21:16 UTC | 86 | 118.143.209.191/32 | AS55355 |
| Oct 18, 21:16 UTC | 82 | 71.42.4.0/24 | AS33363 |
| Oct 18, 21:16 UTC | 88 | 163.223.8.159/32 | AS135918 |
| Oct 18, 21:16 UTC | 86 | 185.146.225.76/32 | AS203505 |
| Oct 18, 21:16 UTC | 80 | 217.114.102.152/29 | AS15830 |
| Oct 18, 21:16 UTC | 88 | 91.224.192.154/32 | AS56475 |
| Oct 18, 21:16 UTC | 88 | 108.189.148.0/23 | AS33363 |
| Oct 18, 21:16 UTC | 80 | 217.204.10.0/24 | AS3257 |
| Oct 18, 21:16 UTC | 86 | 96.62.223.38/32 | AS201640 |
| Oct 18, 21:16 UTC | 86 | 175.100.201.210/32 | AS55355 |
| Oct 18, 21:16 UTC | 82 | 109.244.232.0/22 | AS45090 |
| Oct 18, 21:16 UTC | 86 | 175.100.201.206/32 | AS55355 |
| Oct 18, 21:16 UTC | 72 | 195.151.140.0/24 | AS2854 |
| Oct 18, 21:16 UTC | 86 | 118.143.209.241/32 | AS55355 |
| Oct 18, 21:16 UTC | 80 | 49.157.104.0/24 | AS9658 |
| Oct 18, 21:16 UTC | 76 | 115.109.134.0/24 | AS17908 |
| Oct 18, 21:16 UTC | 88 | 194.42.118.210/32 | AS203937 |
| Oct 18, 21:16 UTC | 90 | 185.16.35.132/32 | AS199449 |
| Oct 18, 21:16 UTC | 86 | 103.118.244.160/32 | AS138968 |
| Oct 18, 21:16 UTC | 76 | 147.123.141.0/25 | AS15830 |
| Oct 18, 21:16 UTC | 80 | 45.93.47.0/24 | AS3257 |
| Oct 18, 21:16 UTC | 86 | 102.215.237.41/32 | AS328137 |
| Oct 18, 21:16 UTC | 86 | 160.119.230.245/32 | AS328137 |
| Oct 18, 21:16 UTC | 86 | 175.100.203.105/32 | AS55355 |
| Oct 18, 21:16 UTC | 86 | 103.72.68.254/32 | AS149078 |
| Oct 18, 21:16 UTC | 74 | 1.6.183.0/24 | AS9583 |
| Oct 18, 21:16 UTC | 90 | 134.17.16.41/32 | AS25106 |
| Oct 18, 21:16 UTC | 86 | 113.23.77.86/32 | AS18403 |
| Oct 18, 21:16 UTC | 76 | 212.37.162.0/23 | AS35205 |
| Oct 18, 21:16 UTC | 86 | 80.71.227.254/32 | AS198037 |
| Oct 18, 21:16 UTC | 74 | 103.79.203.0/24 | AS45097 |
| Oct 18, 21:16 UTC | 86 | 103.91.189.222/32 | AS136523 |
| Oct 18, 21:16 UTC | 86 | 5.187.79.225/32 | AS43727 |
| Oct 18, 21:16 UTC | 78 | 2.48.69.0/24 | AS5384 |
| Oct 18, 21:16 UTC | 86 | 175.100.203.113/32 | AS55355 |
| Oct 18, 21:16 UTC | 86 | 185.18.207.1/32 | AS61102 |
| Oct 18, 21:16 UTC | 86 | 118.143.209.219/32 | AS55355 |
| Oct 18, 21:16 UTC | 76 | 176.204.221.0/24 | AS5384 |
| Oct 18, 21:16 UTC | 86 | 103.27.239.252/32 | AS131386 |
| Oct 18, 21:16 UTC | 72 | 45.248.8.0/23 | AS62468 |
| Oct 18, 21:16 UTC | 86 | 175.100.202.54/32 | AS55355 |
| Oct 18, 21:16 UTC | 72 | 59.163.172.0/24 | AS17908 |
| Oct 18, 21:16 UTC | 78 | 192.7.77.0/24 | AS25019 |
| Oct 18, 21:16 UTC | 80 | 217.165.214.0/24 | AS5384 |
| Oct 18, 21:16 UTC | 80 | 148.224.24.0/22 | AS58349 |
| Oct 18, 21:16 UTC | 86 | 175.100.201.211/32 | AS55355 |
| Oct 18, 21:16 UTC | 80 | 185.37.232.0/24 | AS208326 |
| Oct 18, 21:16 UTC | 86 | 91.232.51.186/32 | AS199413 |
| Oct 18, 21:16 UTC | 80 | 104.132.12.0/24 | AS4637 |
| Oct 18, 21:16 UTC | 80 | 69.174.54.0/24 | AS3257 |
Frequently Asked Questions
What is a BGP RPKI-invalid route?
An RPKI-invalid route is a prefix whose origin ASN does not match the Route Origin Authorization (ROA) published by the legitimate holder, or whose length exceeds the ROA max-length. RPKI-invalid routes should be dropped by validating routers; their presence flags a misconfiguration or a possible origin hijack.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the RPKI-invalid route feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-18 21:50 UTC.
How do I subscribe to RPKI-invalid route events?
Subscribe to the Atom feed at /pulse/bgp/rpki.atom or poll the JSON endpoint at /api/pulse/bgp/rpki.