RPKI coverage and route-origin validation for release 2026-11.
For every routed IPv4 /24 in the release, ProdIPData records whether an RPKI Route Origin Authorisation (ROA)
covers it and how its announced origin validates against those ROAs. This page sums that up by regional
registry and by country. The per-/24 detail is in every CSV and Parquet package, in the
RouteOriginValidation and RpkiAuthorizedASNs columns.
See also the country coverage map, the release 2026-11 overview and the methodology.
By regional registry
Shares of each registry's routed /24s. The trend line compares ROA coverage with the first monthly snapshot in the history.
| RIR | Routed /24 | Covered by a ROA | Valid | Invalid (origin) | NotFound |
|---|---|---|---|---|---|
| ARIN | 5,549,532 | 52.8% +2.1 pt since 2026-07 |
44.4% | 4.3% | 47.2% |
| APNIC | 3,111,535 | 73.7% +1.8 pt since 2026-07 |
67.0% | 1.0% | 26.3% |
| RIPE | 3,026,583 | 85.8% +1.0 pt since 2026-07 |
82.3% | 0.9% | 14.2% |
| LACNIC | 684,802 | 68.1% +7.4 pt since 2026-07 |
63.8% | 0.6% | 31.9% |
| AFRINIC | 422,972 | 61.2% +5.3 pt since 2026-07 |
56.1% | 1.6% | 38.8% |
Largest countries by routed /24s
The 40 countries with the most routed /24s. 178 countries with at least 256 routed /24s are in the full JSON file.
| Country | Routed /24 | Covered by a ROA | Valid | Invalid (origin) | NotFound |
|---|---|---|---|---|---|
| United States | 5,001,130 | 49.7% |
40.9% | 4.8% | 50.3% |
| China | 1,148,590 | 83.8% |
78.1% | 1.2% | 16.2% |
| Japan | 707,593 | 82.2% |
78.1% | 0.1% | 17.8% |
| Germany | 514,913 | 90.9% |
89.4% | 0.2% | 9.1% |
| South Korea | 436,336 | 4.5% |
4.0% | 0.0% | 95.5% |
| United Kingdom | 402,297 | 85.4% |
81.5% | 1.0% | 14.6% |
| Brazil | 326,195 | 42.9% |
41.3% | 0.3% | 57.1% |
| France | 297,670 | 92.7% |
90.3% | 0.2% | 7.3% |
| Canada | 236,044 | 76.3% |
73.8% | 0.4% | 23.7% |
| Italy | 220,306 | 52.2% |
50.0% | 0.6% | 47.8% |
| Netherlands | 188,543 | 92.0% |
86.1% | 2.3% | 8.0% |
| Australia | 188,332 | 78.4% |
75.3% | 0.5% | 21.6% |
| India | 179,171 | 89.4% |
76.3% | 1.7% | 10.6% |
| Russia | 174,278 | 58.6% |
56.8% | 0.6% | 41.4% |
| Taiwan | 146,059 | 99.6% |
84.8% | 7.3% | 0.4% |
| Spain | 137,524 | 94.4% |
90.6% | 1.4% | 5.6% |
| Mexico | 114,146 | 81.4% |
68.0% | 0.4% | 18.6% |
| Sweden | 113,078 | 85.8% |
80.9% | 0.1% | 14.2% |
| South Africa | 102,063 | 64.5% |
61.5% | 0.4% | 35.5% |
| Singapore | 100,175 | 93.0% |
57.9% | 0.6% | 7.0% |
| Egypt | 93,987 | 98.6% |
97.8% | 0.0% | 1.4% |
| Hong Kong SAR China | 92,067 | 83.6% |
77.3% | 2.6% | 16.4% |
| Poland | 82,045 | 90.2% |
85.4% | 0.8% | 9.8% |
| Indonesia | 79,413 | 90.4% |
56.4% | 0.3% | 9.6% |
| Argentina | 75,679 | 88.8% |
86.5% | 0.6% | 11.2% |
| Ireland | 71,383 | 94.7% |
78.9% | 0.4% | 5.3% |
| Colombia | 69,848 | 97.5% |
91.4% | 1.8% | 2.5% |
| Türkiye | 67,049 | 97.9% |
92.9% | 0.4% | 2.1% |
| Switzerland | 66,433 | 87.4% |
83.3% | 1.0% | 12.6% |
| Vietnam | 64,437 | 98.8% |
98.1% | 0.1% | 1.2% |
| Norway | 59,689 | 83.7% |
83.4% | 0.1% | 16.3% |
| Finland | 54,132 | 82.8% |
82.5% | 0.1% | 17.2% |
| Morocco | 48,060 | 20.1% |
20.1% | 0.0% | 79.9% |
| Denmark | 48,052 | 93.5% |
92.3% | 0.0% | 6.5% |
| Belgium | 47,542 | 88.0% |
86.9% | 0.3% | 11.9% |
| Saudi Arabia | 46,098 | 98.5% |
91.6% | 1.4% | 1.5% |
| Austria | 43,228 | 80.3% |
77.7% | 0.3% | 19.7% |
| Iran | 41,992 | 99.0% |
89.4% | 5.0% | 1.0% |
| Thailand | 40,510 | 91.2% |
83.0% | 1.6% | 8.8% |
| Chile | 37,908 | 96.0% |
92.6% | 1.2% | 4.0% |
How to read these figures
- Routed = the /24 has an origin ASN in this release.
- RPKI-protected = covered by at least one ROA.
- Invalid-Origin = announced by an AS that no covering ROA authorises: a possible hijack or, more often, a stale or missing ROA (misconfiguration). It does not identify an attacker.
- NotFound = no ROA covers the /24, so route-origin validation cannot judge it.
Valid, Invalid and NotFound are shares of routed /24s; the remainder had no validation state in the release
(Unknown). An Invalid state is a signal to look closer, not evidence of an attack.