Telecom Tower & Network Infrastructure Offerings Across India [email protected]
Home About
Services
Blog
Network tools
Contact Get a Quote
Free network tools

BGP Security Check

Audit a prefix or network: bogon advertisements, RPKI and ROA max-length, IRR route objects, multiple origins (MOAS), sub-prefix announcements, private ASNs in paths, hijack and route-leak history — with a security grade.

Your public IP address216.73.217.5 IPv4
A92/100

216.73.216.0/22

216.73.216.47 is routed as 216.73.216.0/22.

10 passed 1 warnings 0 failed
  • ROA max-length is loose

    The ROA allows more-specific announcements up to /24 that are not needed. An attacker can forge the origin AS and announce a more-specific route that still validates (forged-origin sub-prefix hijack). Set maxLength to /22 (RFC 9319).

  • Not a bogon

    The prefix is in normal, allocatable public address space.

  • Prefix length /22

    Within the range accepted by networks worldwide (/8–/24).

  • Global visibility 99.4%

    163 of 164 full-table route-collector peers see this route.

  • Single origin AS

    Originated only by AS16509 AMAZON-02 - Amazon.com, Inc..

  • RPKI Valid for AS16509

    A ROA authorises this origin and prefix length.

  • IRR route object for AS16509

    Registered in: radb.

  • No more-specific announcements

    Nobody announces a smaller slice of this prefix.

  • Clean AS paths

    No private or reserved ASNs in 321 observed paths.

  • Stable origin

    No other origin AS announced this prefix in the last 30 days.

  • No hijacks detected

    No BGP hijack events for this prefix in the last 28 days.

About the grade: each failed check costs 25 points and each warning 8. Warnings are not always problems — anycast networks legitimately have multiple origins, and customers often announce more-specific routes — but they are what an attacker would exploit.

Results come from public internet registries and live global routing data. Results are cached for up to an hour. Lookups are logged with your IP address to prevent abuse — see our Privacy Policy.

Need help with RPKI, routing security or IP management?