[NLNOG] Free BGP/RPKI routing health check for your ASN — feedback welcome

[N&R consulting]

Hi all,

French network engineer here (MPLS backbone operations). I built a small
free tool that gives any ASN a routing health check in about 30 seconds, in
the browser, no signup:

https://sentinelle-routage.fr/en/

What it checks (data from RIPEstat, via a caching proxy):
- RIS visibility of your announced prefixes
- RPKI/ROA coverage and invalid originations
- BGP neighbors overview
- an overall grade, with a warning when low visibility may be legitimate
(anycast, regional networks)

It started on the FRnOG list three weeks ago, where the feedback (including
a few sharp reviews) led to fixes: edge caching against RIPEstat
rate-limits, false-positive warnings, and an English version. About 200
distinct ASNs have been checked so far.

Known limitations, to be upfront: the RPKI check runs on a prefix sample,
and there is no IRR consistency check yet (needs a backend, planned).

I'm now building the continuous monitoring version (hijack/leak/ROA alerts
by email/Telegram + a monthly routing compliance report aimed at
NIS2/MANRS) and looking for a handful of founding networks to shape it in
beta. If that's interesting, there's a form on the site, or just reply here.

Feedback on the scoring logic is very welcome, especially edge cases where
the grade feels wrong.

Thanks,

Abdelaziz EL-BORGI
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nlnog.net/pipermail/nlnog/attachments/20260702/538f3546/attachment.html>