DNS · Fix guide
Route-origin validation needs review
- RPKI
- Resource Public Key Infrastructure
- ROA
- Route Origin Authorisation
RPKI checks whether the network announcing the site address is authorised to originate its IP prefix.
What does this test measure?
RPKI checks whether the network announcing the site address is authorised to originate its IP prefix.
What to do next
- Confirm the affected IP, prefix and origin ASN with the hosting provider.
- If invalid, ask the address holder to correct the ROA or routing announcement.
- Do not create a ROA unless you control the address allocation.
Useful links
How to verify the fix
Check the same prefix and ASN with an independent RPKI validator.
When this result may be wrong
Routing data changes and multi-origin prefixes can produce temporary or provider-specific results. An unknown result is not a failure.
Ready to check again?
Check a domain
Run a fresh report after DNS caches and platform changes have had time to update.