SUNUCYBERSECURITY · BGP / RPKI
SunuBGPGuard
Analyze the BGP/RPKI posture of any public ASN
Enter an Autonomous System Number (ASN): the tool queries RIPEstat (RIPE NCC), checks the RPKI status of announced prefixes, and produces an explainable report — free, no account, no BGP announcement is ever injected.
What this tool does not prove
A public BGP scan observes announcements visible on the Internet and published ROAs. It cannot verify the filters actually configured at operators and transit providers, nor guarantee that a network is impossible to hijack. "Unknown" means no matching ROA was found — not that an attack is underway.
Data from RIPEstat (RIPE NCC), queried live for every analysis. Passive analysis only: no BGP packet is ever sent, no announcement is injected onto the Internet.