Collects the observable signs of a route hijack for one prefix and reports which of them are present, with the measurement behind each. Four signs carry different weight. RPKI invalidity is the only hard one: a ROA exists and does not authorise this announcement. An origin AS that appears in the current state but nowhere in the history window is the classic sign, and the response gives the historical origins so the change can be dated.
# 1. Ask the endpoint what it costs (no payment, no wallet needed): curl -i -X GET 'https://netz.halowerk.com/v1/hijack-suspicion' # -> HTTP/1.1 402 Payment Required # the response carries the price, asset and pay-to address. # 2. Pay and retry with any x402 client: npx x402-fetch 'https://netz.halowerk.com/v1/hijack-suspicion'
Endpoint: https://netz.halowerk.com/v1/hijack-suspicion. Operated by netz.halowerk.com, not by Animica. Price and availability were correct at the last probe on 2026-09-02 and are set by the operator, who may change them.
Returns the neighbouring autonomous systems observed next to a given AS in BGP paths, each with the number of observers that saw the adjacency and how often it …
Resolves a prefix to its announcing autonomous systems and puts that answer in context. The current state gives every origin AS seen for the prefix, the number …
Counts BGP updates for a prefix or an autonomous system in a recent window and compares them against a baseline built from a longer preceding period for the sam…
Measures IPv6 adoption for an AS in a way that survives contact with reality. Counting v6 prefixes is close to meaningless on its own, because a single allocati…
Parses one frame up to 4096 bytes without contacting equipment. Modbus TCP includes MBAP fields and length validation; RTU includes CRC-16 validation; common fu…
Combines the registry view and the routing view of a prefix into one answer, keeping them apart because they are not the same thing and their disagreement is th…
Reports the propagation of a prefix as the fraction of RIS observers that see it, separately for IPv4 and IPv6, because the absolute peer count moves with the s…
Looks at every AS path observed for a prefix and reports the ones that do not fit. Four patterns are checked. A path loop, where an AS appears twice with other …
Validates the pair of prefix and origin AS against the RPKI repository and returns the verdict together with every ROA that bears on it: the authorised origin, …