RPKI validity checker
Check whether a prefix + origin ASN is RPKI-valid, invalid, or unknown.
The RPKI checker tells you whether a given prefix, originated by a given ASN, is covered by a valid ROA. It queries RIPEstat's rpki-validation endpoint.
Reading the result
- Valid — a ROA authorizes this origin for the prefix.
- Invalid — a ROA exists but the origin or length doesn't match (route may be dropped by validators).
- Unknown — no ROA covers the prefix.
Find it under Tools → RPKI. If your own prefix shows Invalid or Unknown, review RPKI & routing security.