RPKI / ROA Validator

Check whether a prefix is covered by a Route Origin Authorization (ROA) that authorises the given origin ASN.

About ROA validation

A Route Origin Authorization (ROA) is a cryptographically signed object that states which ASN is authorized to originate a given prefix up to a specified maximum length.

Valid — A covering ROA exists that authorises this ASN for this prefix and length.
Invalid — A covering ROA exists but it does not authorise this ASN (possible hijack).
Not found — No ROA covers this prefix; RPKI does not protect it.