asn.dev

Reports

RPKI-invalid announcements

Routes whose origin or length a ROA does not authorise, most widely propagated first. Networks doing route-origin validation drop these; the vantage-point count shows how many of ours still carried each one.

Routing security

Invalid announcements

6,793 announcements
PrefixOriginNetworkReasonVantage points
85.234.170.0/24AS2914NTT America, Inc.RPKI invalid54 / 75
85.234.171.0/24AS2914NTT America, Inc.RPKI invalid54 / 75
50.82.59.0/24AS30036Mediacom Communications CorpRPKI invalid · length53 / 75
173.29.12.0/23AS30036Mediacom Communications CorpRPKI invalid · length53 / 75
173.29.243.0/24AS30036Mediacom Communications CorpRPKI invalid · length53 / 75
173.30.106.0/24AS30036Mediacom Communications CorpRPKI invalid · length53 / 75
173.31.47.0/24AS30036Mediacom Communications CorpRPKI invalid · length53 / 75
195.214.216.0/22AS3257GTT Communications Inc.RPKI invalid53 / 75
195.214.216.0/24AS3257GTT Communications Inc.RPKI invalid53 / 75
82.152.6.0/24AS402904PrimeRPKI invalid52 / 75
89.30.200.0/24AS218713NETCENSUS LTDRPKI invalid52 / 75
91.123.72.0/22AS3949NTT America, Inc.RPKI invalid52 / 75
154.16.138.0/24AS61317Hivelocity LLCRPKI invalid52 / 75
163.5.250.0/24AS6079RCNRPKI invalid52 / 75
217.24.68.0/22AS3949NTT America, Inc.RPKI invalid52 / 75
91.123.76.0/22AS174Cogent Communications, LLCRPKI invalid51 / 75
92.118.162.0/24AS219075VSEEK LIMITEDRPKI invalid51 / 75
167.179.250.0/24AS45758Triple T Broadband Public Company LimitedRPKI invalid51 / 75
185.193.16.0/24AS25369Hydra Communications LtdRPKI invalid51 / 75
193.43.252.0/23AS35273Serhii Leonidovich PonomarovRPKI invalid · length48 / 75
156.238.68.0/24AS131471Login.Me (Pvt) LtdRPKI invalid44 / 75
82.152.193.0/24AS25369Hydra Communications LtdRPKI invalid43 / 75
82.152.221.0/24AS25369Hydra Communications LtdRPKI invalid43 / 75
82.153.125.0/24AS25369Hydra Communications LtdRPKI invalid43 / 75
94.249.205.0/24AS202147VPSUS LTDRPKI invalid43 / 75
156.238.86.0/24AS134489S. B Link NetworkRPKI invalid43 / 75
151.244.239.0/24AS219105AppFabric LLCRPKI invalid42 / 75
184.174.51.0/24AS199925Phan Nhat NghiRPKI invalid42 / 75
206.123.147.0/24AS9009M247 Europe SRLRPKI invalid42 / 75
5.83.220.0/24AS197173HIGHLIGHT APPS LTDRPKI invalid41 / 75
31.56.0.0/24AS216396WALEED ALNAMIRPKI invalid41 / 75
66.93.18.0/24AS215607dataforest GmbHRPKI invalid41 / 75
143.20.151.0/24AS273091GRUPO INAN SPARPKI invalid41 / 75
154.86.176.0/24AS134548DXTL Tseung Kwan O ServiceRPKI invalid41 / 75
156.238.70.0/24AS131471Login.Me (Pvt) LtdRPKI invalid41 / 75
64.93.19.0/24AS7361DataZone Networks LLCRPKI invalid40 / 75
64.93.20.0/24AS7361DataZone Networks LLCRPKI invalid40 / 75
64.93.22.0/24AS7361DataZone Networks LLCRPKI invalid40 / 75
64.93.23.0/24AS7361DataZone Networks LLCRPKI invalid40 / 75
69.17.49.0/24AS395092Shock Hosting LLCRPKI invalid40 / 75
82.29.8.0/22AS200260Debugged LtdRPKI invalid40 / 75
82.29.8.0/24AS200260Debugged LtdRPKI invalid40 / 75
82.29.9.0/24AS200260Debugged LtdRPKI invalid40 / 75
82.29.10.0/24AS200260Debugged LtdRPKI invalid40 / 75
82.29.11.0/24AS200260Debugged LtdRPKI invalid40 / 75
107.149.36.0/24AS25198INTERKVM HOST SRLRPKI invalid40 / 75
148.135.183.0/24AS197196PANSTAR CLOUD LIMITEDRPKI invalid40 / 75
142.248.59.0/24AS401746FasNET Services LLCRPKI invalid39 / 75
154.86.140.0/24AS134548DXTL Tseung Kwan O ServiceRPKI invalid39 / 75
154.86.141.0/24AS134548DXTL Tseung Kwan O ServiceRPKI invalid39 / 75
154.86.142.0/24AS134548DXTL Tseung Kwan O ServiceRPKI invalid39 / 75
154.86.143.0/24AS134548DXTL Tseung Kwan O ServiceRPKI invalid39 / 75
154.86.158.0/24AS136897Enjoyvc Cloud Group Limited.RPKI invalid39 / 75
172.111.141.0/24AS9009M247 Europe SRLRPKI invalid39 / 75
13.141.16.0/22AS5650Frontier Communications of America, Inc.RPKI invalid38 / 75
13.141.40.0/22AS5650Frontier Communications of America, Inc.RPKI invalid38 / 75
62.144.48.0/24AS5650Frontier Communications of America, Inc.RPKI invalid38 / 75
62.144.49.0/24AS5650Frontier Communications of America, Inc.RPKI invalid38 / 75
62.144.51.0/24AS5650Frontier Communications of America, Inc.RPKI invalid38 / 75
62.144.54.0/24AS5650Frontier Communications of America, Inc.RPKI invalid38 / 75
62.144.55.0/24AS5650Frontier Communications of America, Inc.RPKI invalid38 / 75
154.86.159.0/24AS136897Enjoyvc Cloud Group Limited.RPKI invalid38 / 75
156.238.64.0/24AS131471Login.Me (Pvt) LtdRPKI invalid38 / 75
156.238.65.0/24AS131471Login.Me (Pvt) LtdRPKI invalid38 / 75
156.238.66.0/24AS131471Login.Me (Pvt) LtdRPKI invalid38 / 75
156.238.67.0/24AS131471Login.Me (Pvt) LtdRPKI invalid38 / 75
82.139.216.0/23AS13335Cloudflare, Inc.RPKI invalid37 / 75
31.57.60.0/24AS213563ELGAE HOSPEDAGEM E DATACENTER LTDARPKI invalid35 / 75
45.205.0.0/24AS209242Cloudflare London, LLCRPKI invalid35 / 75
15.241.2.0/24AS16509Amazon.com, Inc.RPKI invalid · length32 / 75
103.21.244.0/24AS13335Cloudflare, Inc.RPKI invalid32 / 75
2404:4a00:3293::/48AS45758Triple T Broadband Public Company LimitedRPKI invalid32 / 75
82.41.194.0/24AS8075Microsoft CorporationRPKI invalid31 / 75
162.158.208.0/24AS13335Cloudflare, Inc.RPKI invalid · length30 / 75
2a10:eac0::/29AS1004Ambyre LLCRPKI invalid30 / 75
212.103.45.0/24AS8075Microsoft CorporationRPKI invalid29 / 75
2602:f75c:100::/40AS401746FasNET Services LLCRPKI invalid29 / 75
82.21.41.0/24AS210814VUNIFY LTDRPKI invalid28 / 75
2a14:7586:b000::/36AS213124zylinktech LLCRPKI invalid26 / 75
2a14:7586:c000::/36AS213124zylinktech LLCRPKI invalid26 / 75
2a14:7586:d000::/36AS213124zylinktech LLCRPKI invalid26 / 75
82.39.119.0/24AS16276OVH SASRPKI invalid23 / 75
109.122.133.0/24AS49902SOCIETE REUNIONNAISE DU RADIOTELEPHONE SCSRPKI invalid · length23 / 75
104.234.12.0/24AS174Cogent Communications, LLCRPKI invalid22 / 75
109.66.32.0/22AS174Cogent Communications, LLCRPKI invalid22 / 75
206.53.58.0/24AS174Cogent Communications, LLCRPKI invalid22 / 75
2606:4700:7000::/48AS13335Cloudflare, Inc.RPKI invalid22 / 75
38.51.238.0/24AS174Cogent Communications, LLCRPKI invalid19 / 75
38.211.251.0/24AS174Cogent Communications, LLCRPKI invalid19 / 75
78.105.156.0/24AS16276OVH SASRPKI invalid19 / 75
82.25.10.0/24AS213994DESTAKBUBBLE LDARPKI invalid19 / 75
154.57.85.0/24AS174Cogent Communications, LLCRPKI invalid19 / 75
78.111.138.0/24AS16276OVH SASRPKI invalid18 / 75
87.85.240.0/24AS219084Belce TaylanRPKI invalid18 / 75
12.43.88.0/24AS2386AT&T Enterprises, LLCRPKI invalid · length17 / 75
12.43.89.0/24AS2386AT&T Enterprises, LLCRPKI invalid · length17 / 75
12.43.90.0/24AS2386AT&T Enterprises, LLCRPKI invalid · length17 / 75
12.43.91.0/24AS2386AT&T Enterprises, LLCRPKI invalid · length17 / 75
38.45.53.0/24AS215596KISSGROUP SASRPKI invalid · length17 / 75
172.82.172.0/24AS25198INTERKVM HOST SRLRPKI invalid16 / 75

Widely seen invalids are usually a stale or too-narrow ROA the holder has not updated; rarely seen ones are mostly filtered already. A hijack looks like either. Cross-check with rpki-client, whose output this is built from.