prefixkit RU

IP & network

BGP and RPKI check

Who announces an IP or prefix in BGP, whether it is RPKI valid (ROA), how many networks see it, whether other ASes announce more-specifics, and what the AS paths look like.

Why check RPKI

RPKI is signed ROA records in which the address holder states which AS may announce the addresses and up to what prefix length. Large networks (Cloudflare, Hurricane Electric, NTT, Telia and many more) drop invalid routes. A mistake in a ROA, such as a missing new upstream AS or too small a maxLength, makes your addresses unreachable from part of the internet.

Every prefix of an autonomous system, with ready firewall lists, is on the AS pages.

Data: RIPEstat and RIPE RIS collectors, updated every few minutes and cached here for 15 minutes.