Autonomous system
AS12684 SES-LUX-AS
Residential RIPE
Summary
SES ASTRA
telecom transit infrastructure
A satellite operator holding address space from three regional registries at once, because its coverage does not respect their boundaries.
What it's used for
- Satellite communications and connectivity. 180,736 addresses in 165 IPv4 prefixes, five IPv6 prefixes, and 198 observed BGP neighbours.
Notable
- The blocks come from three different regional registries:
212.165.160.0/20and213.169.112.0/20are European,64.110.160.0/19and216.236.192.0/19North American, and122.201.32.0/20and210.5.192.0/20Asia-Pacific. - Netnames record two acquired companies:
SESA1for SES Americom, andNSS-NETBLOCK-1,NSS-NETBLOCK-3andNEWSKIESfor New Skies Satellites. - The operator's own allocations are
LU-ASTRANET-20020806andLU-ASTRANET-20021104. - Two blocks are named for their function:
A2C-CUST-EXTandM_PLUS_CPE. - One IPv6 announcement is
2a02::/32, the first/32inside2a02::/16.
Interesting
- Regional registries divide the world into five territories and hand out addresses within them. A satellite covers a third of the planet from one position, so its operator has to hold space in every region it can see, and the routing table ends up describing a footprint drawn by orbital mechanics rather than by geography.
- 198 neighbours against 165 prefixes is a transit profile, not an access one. Selling capacity to networks in places where terrestrial fibre is expensive or absent means peering with each of them, and each of those sessions is a country's worth of connectivity.
CPEis customer premises equipment, which in this context means a dish. The naming convention carriers use for a modem in a living room turns out to apply unchanged to a receiver pointed at geostationary orbit.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 16 exchanges in 8 countries, largest first.
| Exchange | Location | Their address |
|---|---|---|
| IX.br (PTT.br) São Paulo | São Paulo, Brazil | 187.16.222.102 |
| DE-CIX Frankfurt | Frankfurt, Germany | 80.81.193.110 |
| France-IX Paris | Paris, France | 37.49.236.135 |
| Equinix Internet Exchange Singapore | Singapore, Singapore | 27.111.228.110 |
| Equinix Internet Exchange Ashburn | Ashburn, United States | 206.126.236.53 |
| Coresite - Any2 West | Los Angeles, United States | 206.72.211.192 |
| Any2 California | Los Angeles, United States | 206.72.211.192 |
| Megaport IX Sydney | Sydney, Australia | 103.26.68.225 |
Transit providers
45 upstream, 13 downstream and 74 adjacent networks observed; most-used upstreams first.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-13, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 164 prefixes · 181K addresses IPv6 5 prefixes
| Country | Name | Prefixes |
|---|---|---|
| LU | Luxembourg | 169 |
Registry
Allocation record
- Registry
- RIPE
- Handle
AS12684- Registry name
- SES-LUX-AS
- Registrant
- AS12684-MNT
- Abuse contact
- noc@ses.com
- Registered
- 2002-07-11
- Last changed
- 2017-11-15
- Allocation
- allocated
Routing security
RPKI and IRR
- RPKI
- 26% valid · 47 valid, 133 with no ROA
- ROAs
- 83 authorising AS12684
- ASPA
- no ASPA record
- IRR
- 100% registered · 180 of 180 announcements
- Route objects
- 378 naming AS12684
Reputation
Classification and threat
Residential Fixed-line consumer ISP. Addresses here are homes.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 436 networks and 1,771 prefixes, as published 2026-10-13. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere