BGP Security Check
Audit a prefix or network: bogon advertisements, RPKI and ROA max-length, IRR route objects, multiple origins (MOAS), sub-prefix announcements, private ASNs in paths, hijack and route-leak history — with a security grade.
216.73.216.0/22
216.73.217.5 is routed as 216.73.216.0/22.
- ROA max-length is loose
The ROA allows more-specific announcements up to /24 that are not needed. An attacker can forge the origin AS and announce a more-specific route that still validates (forged-origin sub-prefix hijack). Set maxLength to /22 (RFC 9319).
- Not a bogon
The prefix is in normal, allocatable public address space.
- Prefix length /22
Within the range accepted by networks worldwide (/8–/24).
- Global visibility 99.4%
163 of 164 full-table route-collector peers see this route.
- Single origin AS
Originated only by AS16509 AMAZON-02 - Amazon.com, Inc..
- RPKI Valid for AS16509
A ROA authorises this origin and prefix length.
- IRR route object for AS16509
Registered in: radb.
- No more-specific announcements
Nobody announces a smaller slice of this prefix.
- Clean AS paths
No private or reserved ASNs in 321 observed paths.
- Stable origin
No other origin AS announced this prefix in the last 30 days.
- No hijacks detected
No BGP hijack events for this prefix in the last 28 days.
Results come from public internet registries and live global routing data. Results are cached for up to an hour. Lookups are logged with your IP address to prevent abuse — see our Privacy Policy.
