Routing security
AS11867 ZT-75-11867
Unclassified APNIC
Announcements
What this network originates
Every prefix observed with AS11867 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 2602:f700:2::/47 | No ROA | IRR | 31 |
| 23.134.52.0/24 | RPKI valid | IRR | 39 |
| 2602:f700::/48 | RPKI valid | IRR | 34 |
| 2602:f700:53::/48 | RPKI valid | IRR | 35 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS11867 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 23.134.52.0/24 | /24 | ARIN |
| 2602:f700::/48 | /48 | ARIN |
| 2602:f700:53::/48 | /48 | ARIN |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS32097 | WholeSale Internet, Inc. | Declared | Observed |
| AS213683 | Host.AL Shpk | Declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS11867 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 203.30.219.0/24 | RIPE | — | ARB-MNT | 2025-02-12 | Not announced |
| 216.223.33.0/24 | RADB | PNAP-NYC | MAINT-AS1828 | 2023-11-13 | Not announced |
| 23.134.52.0/24 | ARIN | 131 Continental Dr, | MNT-ZT-75 | 2026-07-06 | Announced |
| 2602:f700::/48 | ARIN | 131 Continental Dr, | MNT-ZT-75 | 2026-07-06 | Announced |
| 2602:f700:2::/47 | ARIN | 131 Continental Dr, | MNT-ZT-75 | 2026-07-06 | Announced |
| 2602:f700:53::/48 | ARIN | Osir, Inc. | MNT-ZT-75 | 2026-07-06 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS11867 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-4648-PAIX-PEER | RADB | Lists AS11867 as a direct member |
AS-CONTRIBNET | RIPE | Lists AS11867 as a direct member |
AS-HURRICANEV6 | RADB | Lists AS11867 as a direct member |
AS-PRIMUSTELEU | RIPE | Lists AS11867 as a direct member |
AS-PRTL-DE | RIPE | Lists AS11867 as a direct member |
AS-TMNET-PEERS | RADB | Lists AS11867 as a direct member |
AS-TRANSROUTE-SPEC | RIPE | Lists AS11867 as a direct member |
AS-WHOLESALE-INTERNET | ARIN | Lists AS11867 as a direct member |
AS213683:AS-DATACENTER-HS1 | RIPE | Lists AS11867 as a direct member |
AS213683:AS-HOST-AL | RIPE | Lists AS11867 as a direct member |
AS7575:AS-PEER | RADB | Lists AS11867 as a direct member |
RPKI from rpki-client, validated 2026-10-19 12:02 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-19. Cross-check on bgp.he.net.