---
title: "RPKI validity of an ASN's registry route objects"
method: GET
path: "/api/v1/network/asn/{asn}/rpki"
tags: ["Sugra NetAtlas"]
---

# RPKI validity of an ASN's registry route objects

`GET /api/v1/network/asn/{asn}/rpki`

The ASN's RIPE Database registry route / route6 objects (inverse origin), each annotated with its RPKI Route Origin Validation verdict (valid / invalid / unknown), plus a summary. NOTE: the RIPE Database 'roa-check' search parameter is a no-op over the JSON REST API (verified live - it adds no annotation to the returned objects), so the verdict is computed per route from RPKI validation (prefix + origin). Complements the single-prefix /prefix/{cidr}/rpki with the AS-wide registry view. Upstream registry: 'global' (all RIRs via GRS, default) | ripe | ripe-nonauth | <rir>-grs.

## Path parameters

- `asn` integer, required — Origin ASN.

## Query parameters

- `source` string — Upstream registry: 'global' (all RIRs via GRS, default) | ripe | ripe-nonauth | <rir>-grs.
- `limit` integer — Max distinct route prefixes validated.

## Response `200`

Successful Response

- unknown

## Other responses

- `401` — Missing or invalid `x-api-key` header.
- `422` — Validation Error
- `429` — Daily rate limit exceeded. Check `X-RateLimit-Reset` for the next window.
- `503` — Upstream source is temporarily unavailable. Retry after a short delay.

---

[API](https://skmtc.net/sugra/apis/sugra-api.md) · [All operations](https://skmtc.net/sugra/apis/sugra-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/sugra/sugra-api/versions/4e2740743eb4/schema)