diff --git a/core/tests/Drupal/Tests/Core/Routing/RouterTest.php b/core/tests/Drupal/Tests/Core/Routing/RouterTest.php
new file mode 100644
index 0000000000..ba0349ab6a
--- /dev/null
+++ b/core/tests/Drupal/Tests/Core/Routing/RouterTest.php
@@ -0,0 +1,159 @@
+<?php
+
+namespace Drupal\Tests\Core\Routing;
+
+use Drupal\Core\Access\AccessManagerInterface;
+use Drupal\Core\Access\AccessResult;
+use Drupal\Core\Path\CurrentPathStack;
+use Drupal\Core\Routing\AccessAwareRouterInterface;
+use Drupal\Core\Routing\Router;
+use Drupal\Core\Session\AccountInterface;
+use Drupal\Tests\UnitTestCase;
+use Prophecy\Argument;
+use Symfony\Cmf\Component\Routing\RouteObjectInterface;
+use Symfony\Cmf\Component\Routing\RouteProviderInterface;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
+use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
+use Symfony\Component\Routing\RequestContext;
+use Symfony\Component\Routing\Route;
+use Symfony\Component\Routing\RouteCollection;
+
+/**
+ * @coversDefaultClass \Drupal\Core\Routing\Router
+ * @group routing
+ */
+class RouterTest extends UnitTestCase {
+
+  /**
+   * The mocked router provider.
+   *
+   * @var \Prophecy\Prophecy\ObjectProphecy|\Symfony\Cmf\Component\Routing\RouteProviderInterface
+   */
+  protected $routeProvider;
+
+  /**
+   * The mocked current path stack.
+   *
+   * @var \Prophecy\Prophecy\ObjectProphecy|\Drupal\Core\Path\CurrentPathStack
+   */
+  protected $currentPathStack;
+
+  /**
+   * The mocked url generator.
+   *
+   * @var \Prophecy\Prophecy\ObjectProphecy|\Symfony\Component\Routing\Generator\UrlGeneratorInterface
+   */
+  protected $urlGenerator;
+
+  /**
+   * The mocked access manager.
+   *
+   * @var \Prophecy\Prophecy\ObjectProphecy|\Drupal\Core\Access\AccessManagerInterface
+   */
+  protected $accessManager;
+
+  /**
+   * The mocked current account.
+   *
+   * @var \Prophecy\Prophecy\ObjectProphecy|\Drupal\Core\Session\AccountInterface
+   */
+  protected $account;
+
+  /**
+   * The route.
+   *
+   * @var \Symfony\Component\Routing\Route
+   */
+  protected $route;
+
+  /**
+   * {@inheritdoc}
+   */
+  protected function setUp() {
+    parent::setUp();
+
+    $this->route = new Route('test');
+    $this->routeProvider = $this->prophesize(RouteProviderInterface::class);
+    $this->currentPathStack = $this->prophesize(CurrentPathStack::class);
+    $this->urlGenerator = $this->prophesize(UrlGeneratorInterface::class);
+    $this->accessManager = $this->prophesize(AccessManagerInterface::class);
+    $this->account = $this->prophesize(AccountInterface::class);
+  }
+
+  protected function setupRouter(Request $request, $check_access, AccessResult $access_result) {
+    $this->accessManager->checkRequest(Argument::type(Request::class), Argument::type(AccountInterface::class), TRUE)
+      ->shouldBeCalled()
+      ->willReturn($access_result);
+
+    $route_collection = new RouteCollection();
+    $route_collection->add('test', $this->route);
+    $this->routeProvider->getRouteCollectionForRequest($request)
+      ->willReturn($route_collection);
+
+    $this->currentPathStack->getPath(Argument::any())
+      ->willReturn('/test');
+
+    return new Router($this->routeProvider->reveal(), $this->currentPathStack->reveal(), $this->urlGenerator->reveal(), $this->accessManager->reveal(), $this->account->reveal(), $check_access);
+  }
+
+  /**
+   * Tests the matchRequest() function for access allowed.
+   *
+   * @covers ::matchRequest
+   * @covers ::checkAccess
+   */
+  public function testMatchRequestAllowed() {
+    $request = Request::create('/test');
+    $access_result = AccessResult::allowed();
+
+    $router = $this->setupRouter($request, TRUE, $access_result);
+    $router->setContext((new RequestContext())->fromRequest($request));
+
+    $parameters = $router->matchRequest($request);
+    $expected = [
+      RouteObjectInterface::ROUTE_NAME => 'test',
+      RouteObjectInterface::ROUTE_OBJECT => $this->route,
+      AccessAwareRouterInterface::ACCESS_RESULT => $access_result,
+    ];
+    $this->assertSame($expected, $request->attributes->all());
+    $this->assertSame($expected, $parameters);
+  }
+
+  /**
+   * Tests the matchRequest() function for access denied.
+   *
+   * @covers ::matchRequest
+   * @covers ::checkAccess
+   */
+  public function testMatchRequestDenied() {
+    $request = Request::create('/test');
+    $access_result = AccessResult::forbidden();
+
+    $router = $this->setupRouter($request, TRUE, $access_result);
+    $router->setContext((new RequestContext())->fromRequest($request));
+
+    $this->setExpectedException(AccessDeniedHttpException::class);
+    $router->matchRequest($request);
+  }
+
+  /**
+   * Tests the matchRequest() function for access denied with reason message.
+   *
+   * @covers ::matchRequest
+   * @covers ::checkAccess
+   */
+  public function testCheckAccessResultWithReason() {
+    $request = Request::create('/test');
+    $reason = $this->getRandomGenerator()->string();
+    $access_result = AccessResult::forbidden($reason);
+
+    $router = $this->setupRouter($request, TRUE, $access_result);
+    $router->setContext((new RequestContext())->fromRequest($request));
+
+    $this->setExpectedException(AccessDeniedHttpException::class, $reason);
+    $router->matchRequest($request);
+  }
+  
+
+}