{"uid":"cap_fXf0F1oqdNDeJSJymbXeq","slug":"sitecheck-web-intel-bgp-prefix-origin-lookup-fe4de035","name":"SiteCheck Web Intel BGP Prefix Origin Lookup","description":"For an IPv4 prefix (e.g. 8.8.8.0/24): the origin AS seen announcing it now across RIPE RIS peers, its RPKI status for that origin (valid, invalid or unknown), route objects, visibility, and how many more-specific and less-specific prefixes are seen. An 'invalid' RPKI status is a hijack warning sign; it is not proof of a hijack.","url":"https://api.webintel-api.workers.dev/api/security/bgp-prefix-origin?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["prefix"],"properties":{"prefix":{"type":"string","description":"IPv4 prefix in CIDR form, e.g. 8.8.8.0/24 (required)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_QbsRMeDHGkTeRqdqG8mun","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns the origin AS, RPKI validation status, route objects, visibility, and more/less-specific prefix data for a given IPv4 CIDR prefix using RIPE RIS routing data","exampleAgentPrompt":"Can you check the BGP origin AS and RPKI status for the prefix 8.8.8.0/24 — I want to know if it's valid, invalid, or unknown, and see any more-specific or less-specific prefixes being announced?","exampleUseCases":[{"title":"Detecting potential BGP hijack","prompt":"I'm seeing suspicious traffic and want to know if 185.220.101.0/24 has an RPKI-invalid origin AS right now — can you check its BGP prefix origin and tell me if it looks like it might be hijacked?"},{"title":"Network infrastructure audit","prompt":"We're auditing our IP space — can you look up the BGP origin AS, RPKI status, and route objects for 203.0.113.0/24 and tell me how many more-specific prefixes are being announced from it?"},{"title":"Third-party ASN verification","prompt":"Before we peer with this ISP, can you verify what AS is currently announcing the prefix 45.140.0.0/22 and whether its RPKI status is valid?"}],"resultDescription":"Returns the origin autonomous system (AS) currently announcing the prefix across RIPE RIS peers, the RPKI validation status (valid, invalid, or unknown), associated route objects, visibility metrics, and counts or details of more-specific and less-specific prefixes seen in the routing table. An 'invalid' RPKI status indicates a possible hijack signal but is not conclusive proof.","failureModes":["Prefix not found in RIPE RIS routing tables — no announcements visible","Invalid CIDR notation supplied — malformed prefix input","IPv6 prefix provided — endpoint only supports IPv4","Prefix too broad or too specific to return meaningful results","Upstream RIPE RIS data temporarily unavailable — stale or missing data"],"whenToPreferThis":"Choose this endpoint when you need real-time BGP origin AS and RPKI validation data for a specific IPv4 prefix, particularly for threat intelligence workflows, BGP hijack detection, or routing infrastructure audits. It is ideal when you need both the origin AS and RPKI status in a single call using RIPE RIS data, without requiring your own BGP infrastructure or API keys.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-25T12:31:29.154Z","isFirstParty":false,"canonicalSlug":"sitecheck-web-intel-bgp-prefix-origin-lookup-fe4de035"}