Welcome to RPKI Monitor

This website displays graphically RPKI object contents as well as the relation between the objects from the global RPKI repository, and all (if any) validation warnings or errors on the problematic element(s). it also detects illegal ROA competitions that result from misconfigured or compromised RPKI CAs, or CAs that have been compelled to misbehave.

This RPKI monitor project is aimed at improving the robustness of the RPKI system and aiding internet operators to better understand, inspect and troubleshoot the RPKI system. This project is a part of ZDNS RPKI safeguard research program, sponsored by CNCERT and APNIC. see more

This RPKI Monitor is established by RPSTIR (www.rpstir.net)

RPKI Statistics

Statistics of the global RPKI repository, including certificates, ROAs, CRLs, manifests and ghostbusters.

ROA Chain Analyser

A particular ROA's validation state, authentication chain, all RPKI data and their relationship, and all (if any) validation warnings or errors in this chain.

Certificate Chain Analyser

A particular certificate’s superior and subordinate certificates.

ROA Competetion Monitor

A particular ROA's competing ROA, which contains the same set of INRs and might validate malicious routes.

RPKI Statistics

39675

Number of CA Certificates

10929

Number of CRLs

18299

Number of ROAs

10948

Number of Manifests

ROA Chain Analyser

A particular ROA's validation state, authentication chain, all RPKI data and their relationship, and all (if any) validation warnings or errors in this chain.

By IP prefix. (E.g., 182.18.223/24)

By IP address. (E.g., 182.18.223.1)

By ASN. (E.g., 23944)

Certificate Chain Analyser

A particular certificate’s superior certificates.

(E.g., ThDxPylfvys1nITd0WUbyFGqivU.Cer)

A particular certificate’s subordinate certificates.

(E.g., MBQsnQtBo7n7YD12mEgjb9HzGSQ.Cer)

ROA Competetion Monitor

Find roa compete by the ipaddress

(E.g., 147.28.226/24)