Sugra NetAtlas direction - sources

Sugra NetAtlas is the network intelligence direction of the Sugra API: IP, ASN, BGP routing, RPKI validation, prefix history, hijack and outage signals, Tor network directory, DNS/WHOIS/RDAP, and certificate transparency. It is served under the Sugra NetAtlas OpenAPI tag (65 endpoints) at base path /api/v1/network.

NetAtlas contains zero commercial (Tier C) upstreams. Every source is sovereign, academic, or non-profit and is named openly below, together with its license and the endpoints it backs.

How the direction is assembled

The 65 endpoints split into three dedicated groups and one composed surface:

/network/tor/* (8 endpoints): live queries to Tor Metrics (Onionoo).

/network/atlas/* (8 endpoints): live queries to RIPE Atlas.

/network/outage/* (4 endpoints): live queries to IODA (outage alerts, monitored entities, entity countries, recent outages).

The remaining 45 composed lookups (IP, ASN, prefix, registry WHOIS, DNS/RDAP, certificate transparency, hijack, search, bulk): answered from the compiled Sugra NetAtlas artifact plus live registry and statistics queries. RIPEstat answers 14 of these 45.

The groups are additive: 45 + 8 + 8 + 4 = 65.

Atlas feeds are bulk registry and routing datasets compiled into the Sugra NetAtlas artifact, which is rebuilt daily. They carry no dedicated endpoints of their own; they answer through the composed lookups, and every atlas response lists its contributing feeds in _meta.sources.

Sugra-branded composite

Source	What it provides	Endpoints
Sugra NetAtlas	The composed lookup surface: IP-to-ASN and geolocation resolution, ASN profiles, prefix origin and RPKI state, privacy and abuse signals, registry WHOIS, DNS/RDAP, certificate transparency, and hijack detection, built from the feeds listed below plus live RIPE NCC queries. License: Sugra wrapper, CC-BY-SA-4.0 on the atlas artifact.	45

Sovereign sources (Tier S)

Source	What it provides	License	Endpoints
RIR Delegated Stats (ARIN/RIPE/APNIC/LACNIC/AFRINIC)	Authoritative IP address and ASN allocation records from the five regional internet registries.	Public domain	atlas feed
RIPE RIS	BGP route collector data from the RIPE NCC Routing Information Service; underpins prefix history and hijack detection.	RIPE NCC terms	atlas feed
RPKI ROAs (RIPE NCC)	Route Origin Authorization snapshots; power the RPKI validation state returned by `/prefix/{cidr}/rpki` and `/asn/{asn}/rpki`.	RIPE NCC terms	atlas feed

Intergovernmental sources (Tier I)

None. NetAtlas uses no intergovernmental sources.

Academic and non-profit sources (Tier A)

Source	What it provides	License	Endpoints
RIPEstat	Per-resource registry and routing statistics: ASN overview, peers, announced prefixes, routing status, BGP updates, WHOIS, abuse contacts, prefix overview, RPKI validation, and search.	RIPE NCC terms	14 of the 45 composed lookups
RIPE Atlas	The global active measurement network: probes, anchors, and measurements under `/network/atlas/*`.	RIPE NCC terms	8
Tor Metrics (Onionoo)	Tor relay and bridge directory: summaries, details, bandwidth, clients, uptime, and flags under `/network/tor/*`.	Tor Metrics terms	8
IODA (Georgia Tech)	Internet outage detection: connectivity alerts, monitored entities, and recent outages under `/network/outage/*`.	Georgia Tech IODA terms	4
RouteViews	BGP table archives from the University of Oregon collectors; feed the atlas prefix-to-origin mapping.	University of Oregon open	atlas feed
Geofeeds (RFC 8805)	Operator-published prefix geolocation feeds; the primary geolocation input and the backing of `/network/geofeed/{resource}`.	Operator-published	atlas feed
GeoNames	Geographic gazetteer used to normalize city and country names in geolocation answers.	CC-BY-4.0	atlas feed
firehol IP Lists	Aggregated abuse and blocklist collections; feed the per-IP abuse signal.	CC-BY-SA-4.0	atlas feed
X4BNet VPN/DC Lists	VPN and datacenter address ranges; feed the per-IP privacy classification.	MIT	atlas feed

Example requests

Resolve an IP to its origin ASN through the composed atlas:

{
  "ip": "8.8.8.8",
  "asn": {
    "number": 15169,
    "org": "Google LLC",
    "org_source": "peeringdb",
    "network_type": "Content"
  },
  "_meta": {
    "product": "Sugra NetAtlas",
    "atlas_built_at": "2026-07-18T04:09:39Z",
    "confidence": "high",
    "sources": ["RIR delegated", "RouteViews", "Geofeeds", "..."]
  }
}

Current Tor network summary from the live Tor Metrics upstream:

Returns the latest published relay and bridge consensus with per-relay nicknames, fingerprints, and addresses.

Notes

Endpoint accounting: the three dedicated groups (8 + 8 + 4) plus the 45 composed lookups sum to the tag total of 65. RIPEstat's 14 endpoints are a subset of the 45, not an additional group.

Sources marked "atlas feed" carry no dedicated endpoints; they are compiled into the Sugra NetAtlas artifact and surface through the composed lookups.

The _meta block on atlas responses carries atlas_built_at, a confidence grade, and the exact list of feeds that contributed to the answer.

Authentication and rate limits are shared across all directions; see the Authentication page for key setup.

Flagship endpoints, example requests and typical workflows for this direction live on the Sugra NetAtlas direction page.

Sugra NetAtlas direction - sources

How the direction is assembled#

Sugra-branded composite#

Sovereign sources (Tier S)#

Intergovernmental sources (Tier I)#

Academic and non-profit sources (Tier A)#

Example requests#