Skip to content
thenetworkery

RPKI / ROA validator

Whether a route is RPKI valid, invalid or not found, with the ROAs covering the prefix, max-length mistakes and how to fix them.

Prefix
Origin AS (optional)

185.80.11.0/24 · 

curl -s "https://thenetworkery.com/api/v1/rpki?prefix=185.80.11.0%2F24&asn=39563"
JSON Docs

All checks passed

  • Pass

    185.80.11.0/24 from AS39563 is RPKI valid.

    A ROA authorises this origin AS for this prefix length.

  • Info

    ROAs covering 185.80.11.0/24: 1.

  • Info

    The ROA 185.80.8.0/22 AS39563 allows announcements up to /24.

    A loose max length lets anyone forge your origin AS on more-specific routes that RPKI then calls valid (RFC 9319). Prefer a ROA per prefix you actually announce.

Route origin validation
RouteOrigin ASStatus
185.80.11.0/24 AS39563 Valid
ROAs covering 185.80.11.0/24
PrefixMax lengthOrigin ASTrust anchor
185.80.8.0/22 /24 AS39563 RIPE NCC RPKI Root

Create or edit ROAs at your RIR

RIPE NCC ARIN APNIC LACNIC AFRINIC

Open in ASN & BGP prefix lookup · WHOIS / RDAP lookup · PeeringDB lookup

Source: RIPEstat (Routinator)