Skip to content
Osint Daily
Osint Daily cover for bgpmap.net, under Domain & infrastructure, published 16 Oct 2026. The right side crops the listing capture. Free multi-vantage BGP map. No signup.

01 · Product name

bgpmap.net

Free multi-vantage BGP map. No signup.

Published by MatinB.

In short

bgpmap.net is a free BGP looking glass. Public peers at RIPE RIS and RouteViews show how an IP, prefix, AS, or hostname is reached. The Most Observed Route is the route the most distinct peers report. The site and its REST API are free, with no signup and no key. Data is credited under CC BY 4.0. The methodology page describes RPKI state as valid, invalid, or unknown, from RIPEstat. The footer names MatinB. A route is an observation, not proof of who operates a host.

Product pricing strategy

02

Free

bgpmap.net's homepage FAQ says the site is free, with no signup and no paywall, and that the public REST API needs no key. No plan, seat, or credit bundle was printed on the homepage, the methodology page, or the API page opened on 18 Oct 2026. The API page is the documentation of that free interface, not a checkout. CC BY 4.0 is the credit line for the RIPE RIS and RouteViews data, which is a license for the data, not a fee. Alerts for members are mentioned in a public post about the site. The homepage that loaded did not print a member price, so this listing does not invent one. Hosting and upstream data sources can change the service. Until a page prints a number, the price to quote is none. Cite the FAQ sentence and the date.

Utility and features

03

The homepage, opened on 18 Oct 2026, describes a lookup of an IP, a prefix, an AS number, or a hostname, in IPv4 and IPv6. If a hostname resolves to several addresses, or an AS announces several prefixes, the page says you pick. Nothing is chosen for you. Every result is described as a snapshot you can share, with sources, peer and collector counts, and a UTC timestamp. Repeat lookups are briefly cached. The methodology page says a repeat query for the same IP or prefix within one minute reuses the snapshot, and that Refresh fetches a new one. The Most Observed Route is defined there as well: not a path stitched together from popular hops.

  • Free, no key. The homepage FAQ says the site and the REST API are free, with no signup and no API key.
  • Most Observed Route. The route is the one the most distinct peer networks report. It is not a single router's best path.
  • RPKI from RIPEstat. The methodology page defines the state as valid, invalid, or unknown, and links the RIPEstat check.

The methodology page also describes RPKI origin validation. The state is the Route Origin Validation result from RIPEstat, comparing the observed origin AS with the prefix's published ROAs, and each result links back to RIPEstat. The homepage FAQ says the REST API returns the graph, the raw RIPE data, and an evidence block, with no key. The footer credits RIPE RIS and RouteViews under CC BY 4.0 and names MatinB as the builder. A Telegram bot, @BGPMapBot, is linked. This listing looked up the public address 1.1.1.1 so the capture would not show the review machine's address. The homepage prefills a visitor IP. Do not publish that address from a shared environment.

  1. 1

    Look up a prefix you chose. This listing used 1.1.1.1 so the frame would not show the review host.

  2. 2

    Read the Most Observed Route beside the peer and collector counts and the UTC time.

  3. 3

    Open the RIPEstat link before you quote an RPKI state.

  4. 4

    Attribute RIPE RIS and RouteViews when you reuse the data. The footer says CC BY 4.0.

Caveats

04

A path on bgpmap is what public collector peers reported, summarized as the Most Observed Route. Routers disagree by local policy. The page says there is no single best path, and it says the route is not stitched from popular hops. It is not proof that traffic from your network took that path, and it is not proof of who owns a host inside the prefix. RPKI state is origin validation from RIPEstat: valid, invalid, or unknown. Unknown is a missing check, not a clean bill. Invalid is a mismatch with published ROAs, which still needs the RIPEstat page it links to.

Snapshots are cached for about a minute. Read the UTC timestamp on the result. Refresh if you need a new pull. Counts of peers and collectors move. The homepage prefills the visitor's IP. Do not paste that address into a report from a cloud browser. Use a prefix you meant to look up, such as a public resolver address. CC BY 4.0 means you attribute RIPE RIS and RouteViews. It does not make the map a warrant.

Screenshots

05

bgpmap route for 1.1.1.1. Public lookup on 18 Oct 2026 of 1.1.1.1, not the review machine. The frame shows the Most Observed Route to AS13335 and the RPKI valid state from the page. Captured 2026-10-18. Source
AS path for 1.1.1.1 on bgpmap. The same 18 Oct 2026 lookup of 1.1.1.1. The path lists collector peers, AS1299, and AS13335. The review machine's address is not in the frame. Captured 2026-10-18. Source

Potential use cases

06

  • You need a shareable picture of how public collectors see a prefix. Open bgpmap.net and look up an address you chose. This listing used 1.1.1.1 so the frame would not contain the review machine. Read the Most Observed Route, the peer and collector counts, and the UTC timestamp. The homepage says the route is the one the largest number of distinct peer networks report, not a path stitched from popular hops. Attribute RIPE RIS and RouteViews. The footer says CC BY 4.0.
  • A ticket asks for RPKI. Use the methodology page, not a social post. It defines the state as valid, invalid, or unknown, from RIPEstat Route Origin Validation, and it links the RIPEstat check. Unknown means the check did not produce a state. Invalid means the observed origin disagrees with published ROAs. Open the linked page before you quote the word. The homepage FAQ does not itself print that definition.
  • The same prefix is queried twice in a minute and the picture does not change. The methodology says a repeat within one minute reuses the snapshot, and Refresh builds a new one. Write the UTC time that is on the result. The homepage also prefills the visitor's IP. Delete that address if it appears in a shared browser. The site said it is free, with no signup and no API key, on 18 Oct 2026.

Hard cases

The case where the first result is easy to over-read.

One route is briefed as the internet

The page says routers disagree by local policy and that there is no single best path. The Most Observed Route is a count of collector peers. It is not the path from your office, and it is not the name of the company that operates a host. Cache and the UTC stamp belong in the note. Leave the prefilled visitor IP out.

Questions

Does bgpmap.net cost money?

The homepage FAQ on 18 Oct 2026 said it is free, with no signup and no paywall, and that the REST API needs no key. No dollar price was printed.

Does the homepage itself print RPKI?

The RPKI definition is on the methodology page: valid, invalid, or unknown, from RIPEstat Route Origin Validation. Cite that page, not a social post.

Citations

07

Titled sources. These public pages are what the quotes on this listing come from.

When this listing changes, the letter says so.

Developments in OSINT. Confirm from your inbox before the first issue.

Only for this letter. Privacy

Related tools