Usage: check_bgp_prefix_visibility -a <Origin AS>[,AS2...] [-n <AS1>[,AS2,AS3...] [-w <Warn Min Neighbors>] [-c <Crit Min Neighbors]

Check the visibility of an IPv4 or IPv6 prefix in the global routing table.

Mandatory arguments:
 -a, --asn		Comma-separated list of acceptable origin ASN's for the prefix being checked
			Typically this is YOUR ASN, maybe a DDoS Scrubber service ASN, or a 2nd ASN you
			are transitioning to.  Other origin ASN's seen will return CRITICAL.

 -p, --prefix		IPv4 or IPv6 Prefix to check, in the form 192.0.2.0/24, 192.0.2/24, or 2001:db8::/32
 -u, --uniqueid		A unique identifier to include in the API request - see the RIPstat section below

Optional arguments:
 -d, --debug[=n]	Enable debug (at optional level 1 [lowest] to- 4 [highest])
 -h, --help		Print help (this screen)
 -i, --ignore		Comma-separated list of more-specific prefixes that can be ignored if seen in BGP
			Other more-specific prefixes will return CRITICAL

 -m, --multiline	If set, use HTML "<br>" as a line separator. Else use '\n'
 -t, --transits		If specified, commas-separated numeric list of neighbor ASN's that will trigger Critical
			if not present. Generally these should be only your Transit ASN's not your peers, as
			your prefixes may not show up at the route collectors via your peers.

 -x, --asn-file		If specified (full path and filename), ASN numbers will be translated into short names
			based on the list in this file.  The File format should be:
			"<ASNumber> <Short Name> - <Long Name>", one entry per line.
			This is 100% compatible with the list provided by RIPE here:
			https://ftp.ripe.net/ripe/asnames/asn.txt

 -w, --warn		If specified, return WARNING if count of neighbors is less than this value
 -c, --critical		If specified, return CRITICAL if count of neighbors is less than this value
 -y, --cwarn		If specified, return WARNING if count of collectors seeing the prefix is less than this value
 -z, --ccrit		If specified, return CRITICAL if count of collectors seeing the prefix is less than this value

This plugin pulls information from the global BGP table (as provided by RIPEstat) for the given prefix and performs several checks:

	ROUTING SECURITY

	This check will return CRITICAL in these cases:

	*An ASN not specified in the -a list is originating the prefix

	*A longer (more-specific) prefix not in the -i list appears in BGP

	CONNECTIVITY AND VISIBILITY

	This check will return WARNING or CRITICAL in these cases:

	*Any of the transit ASN's specified in -t does not appear as your direct upstream in BGP

	*The total number of "left" adjacent ASN's (transit providers, peers) is less than -w or -c

	*The total number of route collectors seeing your prefix is less than -y or -z

RIPEstat

	This tool queries the RIPEstat API. Please read the Termins of Conditions, Rules and Regular Usage sections here:
	https://stat.ripe.net/docs/data-api/ripestat-data-api)

	to familiarize yourself with their expectations and how to select and format the Unique ID parameter (-u --uniqueid).

	Proper use will help ensure this valuable service continues to be available!