CloudSpex

Free network tool

ASN & RPKI Lookup

See which network announces an IP address (or a domain's web and mail servers), who owns it, and whether that route is protected by RPKI.

Instant result, no email needed.

What RPKI tells you

RPKI lets the holder of an address block sign which network (ASN) may announce it. A valid route is protected against accidental or malicious hijacks by networks that check RPKI; invalid means the announcement contradicts the signature; unknown means no signature exists. Data comes from the RIPEstat API (RIPE NCC) and is named on the result.

For the reverse DNS of the same IP, use the Reverse DNS Lookup.

Frequently asked questions

What is an ASN?

An Autonomous System Number identifies a network on the internet, such as a hosting provider, cloud or ISP. Every routed IP address is announced by at least one.

Is RPKI 'unknown' a problem?

Not an error: it means the address holder has not published a ROA. The route is simply unprotected. Most large clouds sign their routes; ask your provider if yours does not.

Why can a domain show two networks?

The website and the mail servers are often hosted by different providers, for example a web host and Microsoft 365.

Infrastructure changes hands more often than domains do.

Add your domain to CloudSpex to be told when its DNS, hosting or mail setup changes.

Start Monitoring Free