Find the change
Track origin changes from RIPE RIS Live and prioritize observations with model scores and routing context.
Sentinel / Routing security research
A routing alert is
the start of an investigation.
Sentinel examines BGP origin changes, gathers authority evidence, and gives operators a traceable record to review.
Open Sentinel console →Private workspace. Operator credentials required.
Ask the authority sources
Consult RPKI, announcement history, RDAP and supported carrier records. Preserve the evidence behind each decision.
Keep the operator in control
Inspect grouped observations, document a conclusion, and retain a versioned review history.
Evidence before conclusions
Designed for investigation.
A changed origin can reflect legitimate provisioning, a measurement artifact, or a routing incident. A model score alone does not determine which.
An evolving research system
Sentinel is an experimental triage system. Scores are not calibrated incident probabilities. Source availability and collection gaps affect coverage; consequential decisions require independent operator verification.
Research focuses on authority resolution, reproducible evidence, and reducing unnecessary review. No guaranteed detection or production accuracy is claimed.