BGP Looking Glass & Route Lookup
BGP lookup for any IP address or network prefix. See origin ASN, RPKI validation, and MOAS detection with broad global routing visibility.
Global Visibility
BGP data from authoritative routing sources with broad global coverage
RPKI Validator
Every route checked against published ROAs - valid, invalid, or not found
MOAS Detection
Detect BGP hijacks: flags prefixes announced by multiple origin ASNs
Origin Verification
Cross-reference origin ASN against IRR route objects and RPKI ROAs
A BGP Looking Glass With Many Vantage Points
A BGP looking glass shows how a prefix is routed on the Internet. Instead of querying the router of a single carrier, ipctl.io shows the routes as seen by many route collectors around the world: the origin ASN, how many collectors saw the route, whether the origin is authorized by an RPKI ROA, and whether another AS announces the same prefix (MOAS). Enter an IP address or prefix above to run a BGP lookup, or open a sample prefix to see the result.
What You Get
Detect Potential BGP Hijacks
ipctl.io automatically flags prefixes announced by multiple origin ASNs (MOAS - Multiple Origin AS). A prefix should have exactly one originating AS; when two or more ASNs announce the same prefix, it signals either a misconfiguration or an active BGP hijack attempt. Combine MOAS detection with RPKI validation to distinguish legitimate multi-homing from unauthorized origination - an RPKI-invalid route with a MOAS conflict is the strongest hijack signal.
MOAS Detection
Multiple origin ASNs flagged automatically
RPKI Validator
Cryptographic proof of authorized origin
IRR Cross-Check
Route objects verified against registry
Popular Prefix Lookups
Frequently Asked Questions
Can I detect BGP hijacks with this tool?
Yes. ipctl.io flags MOAS (Multiple Origin AS) conflicts - prefixes announced by more than one origin ASN simultaneously - which is the primary indicator of a BGP hijack. Combined with RPKI validation (which shows whether the originating ASN is cryptographically authorized), you can quickly assess whether an anomaly is a misconfiguration or an active hijack. An RPKI-invalid route with a MOAS conflict is the strongest hijack signal.
What is a BGP looking glass?
A BGP looking glass lets you see how a prefix is routed on the Internet - which ASN originates it, whether the route is cryptographically validated via RPKI, and how it appears across multiple vantage points. Traditional looking glasses are hosted by individual carriers; ipctl aggregates data from authoritative routing sources for a broader view.
Where does the BGP data come from?
We process full routing table dumps from authoritative routing data sources. Data is updated regularly from the latest available snapshots, providing broad visibility into Internet routing.
What does RPKI status mean?
RPKI (Resource Public Key Infrastructure) lets prefix holders cryptographically authorize which ASN may originate their routes. 'Valid' means the origin matches a published ROA, 'invalid' means it doesn't (possible hijack), and 'not found' means no ROA exists for the prefix.
Can I query BGP routes via API?
Yes. The GET /v1/prefix/{prefix} endpoint returns BGP routes with origin ASN, RPKI status, and collector information. The GET /v1/ip/{ip} endpoint also includes BGP routes for the covering prefix. Free tier includes 1,000 requests/day.
Free BGP API
Query BGP routes via our free BGP API - 250 requests/day without signup, 1,000/day with a free API key. Returns origin ASN, RPKI status, MOAS conflicts, and collector information as JSON.
Track routing table growth, RPKI adoption, and IPv6 deployment over time.
Migrating from BGPView or bgp.tools? See our migration guide → bgp.tools comparison →