- RPKI is a system in which the holder of an IP address block states, through signed records (ROAs), which networks may announce that address, and networks check routes against these records to filter out mismatched ones. According to IPinfo's aggregation, the share of routes passing validation rose from 54.0% September 2025 to 70.3% September 2026.
- Among IPv4 addresses in China, the share of validated routes rose from 3.7% to 83.0%, accounting for a large part of the increase. Excluding China, the source states a rise from 58.0% to 63.2% over the same period.
- Invalid routes that failed validation were seen on average at only 2 locations per BGP peer across the RIPE RIS and RouteViews collectors. Validated routes were seen at 596 locations and routes without ROA records at 595 locations. This is the result of IPinfo measuring 1,614,288 routes on September 28, 2026.
- The source says IPinfo's aggregation found that 138,698 of 855,217 validated routes, 16.2%, still left room for attack because ROA permitted ranges are wider than actual announcements. This interpretation is IPinfo's analysis.
O: A network operator who is just starting to deploy RPKI may find it worthwhile to check whether the ROA maxLength range for their IP blocks is wider than the actual announcements, using the maxLength recommendation in the original article as a reference.
X: The per-hosting-provider figures and ASPA tallies in the original come from IPinfo's own measurements based on RIPE RIS and RouteViews collector data, so other data sources may not produce the same ratios.