RPKI Validation Status

This data call returns the RPKI validity state for a combination of prefix and Autonomous System. This combination will be used to perform the lookup against the RIPE NCC's RPKI Validator, and then return its RPKI validity state. More specifically, according to its documentation:

When you supply a combination of Autonomous System (AS) and prefix, they will be matched against all the Validated ROA Prefixes (VRPs) that are in the cache of the RPKI Validator
This datacall has 3 supported versions:

Note: All of the validator instances used by RIPEstat are production grade. RIPEstat does not fetch information from rpki-validator.ripe.net or localcert.ripe.net, but from internal instances.

https://stat.ripe.net/data/rpki-validation/data.json?resource=3333&prefix=193.0.0.0/21 

e.g. https://stat.ripe.net/data/rpki-validation/data.json?resource=3333&prefix=193.0.0.0/21

Parameters

Key Value Info Required
resource ASN The ASN used to perform the RPKI validity state lookup. YES
prefix (or prefixes) prefix The prefix (or comma-separated list of prefixes) to perform the RPKI validity state lookup. Note the prefix's length is also taken from this field. YES

Output

Data

Key Info
status The RPKI validity state, according to RIPE NCC's RPKI validator. Possible states are:
  • valid - the announcement matches a roa and is valid
  • invalid_asn - there is a roa with the same (or covering) prefix, but a different ASN
  • invalid_length - the announcement's prefix length is greater than the ROA's maximum length
  • unknown - no ROA found for the announcement
description The description that ended in the returned status.
prefix The prefix this query is based on.
resource The resource (ASN) this query is based on.

Example

"data": {
        "validating_roas": [
            {
                "origin": "AS3333",
                "source": "RIPE NCC RPKI Root",
                "prefix": "193.0.0.0/21",
                "max_length": 21,
                "validity": "valid"
            }
        ],
        "status": "valid",
        "prefix": "193.0.0.0/21",
        "resource": "3333"
    }

deprecated - 0.1

Uses RIPE NCC RPKI Validator Version 2.26 as a backend

current - 0.2

Uses RIPE NCC RPKI Validator Version 3 as a backend