SUNUCYBERSECURITY · BGP / RPKI

SunuBGPGuard

Analyze the BGP/RPKI posture of any public ASN

Enter an Autonomous System Number (ASN): the tool queries RIPEstat (RIPE NCC), checks the RPKI status of announced prefixes, and produces an explainable report — free, no account, no BGP announcement is ever injected.

What this tool does not prove

A public BGP scan observes announcements visible on the Internet and published ROAs. It cannot verify the filters actually configured at operators and transit providers, nor guarantee that a network is impossible to hijack. "Unknown" means no matching ROA was found — not that an attack is underway.

Data from RIPEstat (RIPE NCC), queried live for every analysis. Passive analysis only: no BGP packet is ever sent, no announcement is injected onto the Internet.