RPKI Lookup

Route Origin Authorization Search

Enter an AS number or IP prefix to find Route Origin Authorizations

795,868 ROAs and 3,327 ASPAs from 5 trust anchors. Last updated: 12:46, Feb 7, 2026 UTC

Exact Matches

12
ASN Prefix Max Length Trust Anchor Expires
AS396597 2001:503:ba3e::2:30/128 /128 ARIN 2026-02-08
AS396585 2001:503:ba3e::2:30/128 /128 ARIN 2026-02-08
AS20431 2001:503:ba3e::2:30/128 /128 ARIN 2026-02-08
AS36626 2001:503:ba3e::2:30/128 /128 ARIN 2026-02-08
AS396553 2001:503:ba3e::2:30/128 /128 ARIN 2026-02-08
AS396590 2001:503:ba3e::2:30/128 /128 ARIN 2026-02-08
AS396543 2001:503:ba3e::2:30/128 /128 ARIN 2026-02-08
AS396566 2001:503:ba3e::2:30/128 /128 ARIN 2026-02-08
AS396572 2001:503:ba3e::2:30/128 /128 ARIN 2026-02-08
AS397207 2001:503:ba3e::2:30/128 /128 ARIN 2026-02-08
AS36619 2001:503:ba3e::2:30/128 /128 ARIN 2026-02-08
AS396542 2001:503:ba3e::2:30/128 /128 ARIN 2026-02-08

Covering ROAs

12

Less-specific prefixes that contain 2001:503:ba3e::2:30/128

ASN Prefix Max Length Trust Anchor Expires
AS27544 2001:503:ba3e::/48 /48 ARIN 2026-02-08
AS396582 2001:503:ba3e::/48 /48 ARIN 2026-02-08
AS396565 2001:503:ba3e::/48 /48 ARIN 2026-02-08
AS396599 2001:503:ba3e::/48 /48 ARIN 2026-02-08
AS10515 2001:503:ba3e::/48 /48 ARIN 2026-02-08
AS396554 2001:503:ba3e::/48 /48 ARIN 2026-02-08
AS397209 2001:503:ba3e::/48 /48 ARIN 2026-02-08
AS396616 2001:503:ba3e::/48 /48 ARIN 2026-02-08
AS397203 2001:503:ba3e::/48 /48 ARIN 2026-02-08
AS32651 2001:503:ba3e::/48 /48 ARIN 2026-02-08
AS396571 2001:503:ba3e::/48 /48 ARIN 2026-02-08
AS396553 2001:503:ba3e::/48 /48 ARIN 2026-02-08

Showing closest 12 covering prefixes.

24-Hour Activity

View Dashboard →
+1,171
Added
-811
Removed
1,982
Total Changes

See which ASNs are making the most changes →

API Access

JSON API

Access RPKI data programmatically. Current snapshots are free; historical data requires an Organization tier API key.

Route Validation (RFC 6811)

GET /any53/rpki/api/validate/?prefix=193.0.0.0/21&asn=3333
curl -sS "https://www.any53.com/any53/rpki/api/validate/?prefix=193.0.0.0/21&asn=3333" | jq .
{
  "prefix": "193.0.0.0/21",
  "asn": 3333,
  "status": "valid",
  "message": "Route is covered by a valid ROA",
  "matching_roa": {
    "asn": 3333,
    "prefix": "193.0.0.0/21",
    "max_length": 21,
    "trust_anchor": "ripe"
  }
}

List ROAs by ASN

GET /any53/rpki/api/roas/?asn=3333
curl -sS "https://www.any53.com/any53/rpki/api/roas/?asn=3333" | jq .

Covering/Contained Prefixes

GET /any53/rpki/api/roas/covering/193.0.0.0/24/
# Less-specific (covering) ROAs
curl -sS "https://www.any53.com/any53/rpki/api/roas/covering/193.0.0.0/24/" | jq .

# More-specific (contained) ROAs
curl -sS "https://www.any53.com/any53/rpki/api/roas/contained/193.0.0.0/16/" | jq .

ROA Change History

Track when ROAs were added, removed, or modified. Requires Organization tier.

GET /any53/rpki/api/history/?asn=3333&since=2026-01-01
curl -H "X-API-Key: ${YOUR_API_KEY}" \
  "https://www.any53.com/any53/rpki/api/history/?asn=3333&since=2026-01-01" | jq .
{
  "count": 3,
  "history": [
    {
      "timestamp": "2026-01-15T08:30:00Z",
      "change_type": "added",
      "asn": 3333,
      "prefix": "193.0.10.0/24",
      "max_length": 24,
      "trust_anchor": "ripe"
    },
    {
      "timestamp": "2026-01-10T14:15:00Z",
      "change_type": "modified",
      "asn": 3333,
      "prefix": "193.0.0.0/21",
      "max_length": 21,
      "expires": "2026-06-01T00:00:00Z",
      "old_expires": "2026-03-01T00:00:00Z"
    }
  ]
}

Endpoints

Endpoint Description Tier
GET /rpki/api/validate/ RFC 6811 route validation Free
GET /rpki/api/roas/ List ROAs (filter by ASN, prefix, TA) Free
GET /rpki/api/roas/covering/{prefix}/ Find less-specific ROAs Free
GET /rpki/api/roas/contained/{prefix}/ Find more-specific ROAs Free
GET /rpki/api/aspas/ List ASPAs (filter by customer, provider) Free
GET /rpki/api/snapshots/ List recent import snapshots Free
GET /rpki/api/history/ ROA change history (when did X happen?) Organization

Rate Limits

Tier Rate Limit Features
Anonymous 100/hour Current snapshot only
Verified 600/hour Current snapshot only
Organization 6000/hour Historical data, change tracking

Generate API Key

Get a free API key to start making requests. Provide an email to upgrade to the verified tier (600 requests/hour).

About RPKI

Resource Public Key Infrastructure (RPKI) enables network operators to cryptographically attest to the IP prefixes they are authorized to originate.

A Route Origin Authorization (ROA) binds an IP prefix to an AS number, allowing routers to validate BGP announcements and reject hijacks.

Trust Anchor Coverage

Data sourced from the five Regional Internet Registry trust anchors.

Trust Anchor ROAs
RIPE NCC 325,754
ARIN 235,352
APNIC 168,105
LACNIC 40,888
AFRINIC 25,769