BGP Prefix Lookup
Enter a prefix (or a single address). Answered from our daily copy of the global routing table.
178.238.216.0/21
Announced exactly
- 178.238.216.0/21AS29278Rackhost Zrt.RPKI Valid178.238.216.0
- Registry
- RIPE NCC · Hungary · Jul 27, 2010
- Delegated block
- 178.238.208.0 – 178.238.223.255
Covering routes
- 178.238.208.0/20AS29278Rackhost Zrt.RPKI Valid178.238.208.0
More-specific routes
- 178.238.216.0/24AS49857Inclust System Ltd.RPKI Valid178.238.216.0
- 178.238.217.0/24AS49857Inclust System Ltd.RPKI Valid178.238.217.0
- 178.238.219.0/24AS33947WLA Interservice Ltd.RPKI Valid178.238.219.0
- 178.238.220.0/24AS201237Datatrans Internet LtdRPKI Valid178.238.220.0
- 178.238.221.0/24AS5483Magyar Telekom Plc.RPKI Valid178.238.221.0
- 178.238.222.0/24AS43359Tarhely.Eu Szolgaltato Kft.RPKI Valid178.238.222.0
- 178.238.223.0/24AS42964SigmaNet Szolgaltato es Kereskedelm LtdRPKI Valid178.238.223.0
On the internet, routes are announced as prefixes: an autonomous system tells its neighbours via BGP that it can deliver traffic for, say, 49.224.0.0/14. This tool looks a prefix up in our daily copy of the global routing table and shows three things:
- Exact announcements: which AS originates exactly this prefix. More than one origin (a MOAS) is normal for anycast services and some multihomed networks, and suspicious otherwise.
- Covering routes: less-specific announcements that contain it. Traffic follows the most specific route, so a covering route matters if the more-specific one disappears.
- More-specifics: announcements inside it, which may belong to other networks (customers, or a hijack).
Each announced route is also checked against the RPKI: whether a ROA authorises its origin AS.
The table is the view from APNIC’s route collector. Most of the global table is the same from everywhere, but a route that is filtered before it reaches that collector will not appear.
Frequently asked questions
Why is my /24 not listed but a /16 is?
Your addresses are announced as part of the larger block, and no one announces the /24 separately. That is the normal case for most customers of a provider.
What is a more-specific hijack?
Someone announces a longer prefix inside your space. Because routers prefer the most specific route, traffic goes to them. RPKI with a strict max length makes such announcements invalid.
Can I enter a single address?
Yes. The tool then shows the most specific announced route that contains it.