What is the RIPE NCC RIS used for in the context of BGP security analysis?

• A. A network of route collectors providing global BGP data used for monitoring and anomaly detection
• B. A tool that encrypts BGP sessions
• C. A database for storing RPKI ROAs
• D. An internet exchange point

Answer: (A)

RIPE NCC RIS provides a global view of BGP by collecting routing information from a large network of route collectors around the world. This gives operators and researchers a live and historical picture of how prefixes are announced and propagate across the internet. That visibility is crucial for BGP security analysis because it lets you spot anomalies such as sudden prefix announcements, unexpected AS-path changes, route leaks, or potential hijacks. By examining this data, you can correlate events, understand routing behavior, and assess possible security incidents or misconfigurations. RIS is not a tool for encrypting BGP sessions, nor a database for storing RPKI ROAs, nor an Internet Exchange Point. Instead, its strength lies in providing observable evidence of global routing behavior for monitoring and anomaly detection.