# Network Intel

Who runs an IP or ASN, is a route valid, abuse contacts, routing visibility, CIDR math.

## How to pay

Machine-payable over x402. USDC on: Base (eip155:8453), Solana (solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp), Polygon (eip155:137), Arbitrum One (eip155:42161).
No accounts. No API keys. No signup. The paying wallet is the account.

## Machine-readable

- OpenAPI: https://network-intel.x402tookit.com/openapi.json
- x402 manifest: https://network-intel.x402tookit.com/.well-known/x402
- Catalog (free): https://network-intel.x402tookit.com/catalog
- Health (free): https://network-intel.x402tookit.com/health
- Uptime (free): https://network-intel.x402tookit.com/uptime

## Endpoints (9)

### GET /abuse-contact — $0.02
Abuse contact email(s) and the responsible regional registry for an IP address, prefix or AS number.
Params: resource: string
Example: https://network-intel.x402tookit.com/abuse-contact?resource=8.8.8.8

### GET /asn-profile — $0.03
Profile of an AS number: holder, registry block, announced IPv4 and IPv6 prefix counts and abuse contact.
Params: asn: string
Example: https://network-intel.x402tookit.com/asn-profile?asn=15169

### GET /cidr-calc — $0.02
IPv4 CIDR math: network, broadcast, netmask, usable hosts and range; optionally test if an IP is inside the block.
Params: cidr: string, ip?: string
Example: https://network-intel.x402tookit.com/cidr-calc?cidr=192.168.10.77%2F26&ip=192.168.10.100

### GET /ip-geo — $0.02
Approximate country, city and coordinates of a public IP, with how much of its prefix that location covers.
Params: ip: string
Example: https://network-intel.x402tookit.com/ip-geo?ip=1.1.1.1

### GET /ip-parse — $0.02
Classify an IPv4 or IPv6 address: version, public or private, special range, canonical form and reverse-DNS name.
Params: ip: string
Example: https://network-intel.x402tookit.com/ip-parse?ip=192.168.1.10

### GET /ip-profile — $0.03
Profile of a public IP: announcing AS and holder, enclosing prefix, whether it is routed, abuse contact and country.
Params: ip: string
Example: https://network-intel.x402tookit.com/ip-profile?ip=8.8.8.8

### GET /prefix-routing — $0.02
Routing visibility of a prefix: origin ASes, share of RIS peers that see it, first and last seen, covering routes.
Params: prefix: string
Example: https://network-intel.x402tookit.com/prefix-routing?prefix=8.8.8.0%2F24

### GET /route-origin-check — $0.05
Check an IP is originated by the AS you expect, with its RPKI status: MATCH, MISMATCH or MULTI_ORIGIN, a hijack screen.
Params: ip: string, expectedAsn: string
Example: https://network-intel.x402tookit.com/route-origin-check?ip=1.1.1.1&expectedAsn=13335

### GET /rpki-check — $0.02
RPKI route-origin validation: is this AS authorized by a ROA to announce this prefix? valid, invalid or unknown.
Params: asn: string, prefix: string
Example: https://network-intel.x402tookit.com/rpki-check?asn=15169&prefix=8.8.8.0%2F24

## Terms

Network facts come from RIPEstat (RIPE NCC) public routing and registry data and local computation, provided as is. Registry data can be stale or wrong, geolocation is approximate, and RPKI status describes route-origin validation only. This is not a threat verdict about an address.