Routing security

AS16006 ASN for Rupkki

Unclassified ARIN

RPKI valid 100% 12 of 12 announcements

RPKI invalid 0 none

No ROA 0 not covered by any ROA

IRR registered 100% 0 missing · 0 other origin

ROAs 4 authorising this AS

Announcements

What this network originates

12 observed

Every prefix observed with AS16006 as its origin, checked against RPKI and the IRR. Problems sort first.

Prefix	RPKI	IRR	Vantage points
2a01:9f80::/32	RPKI valid	IRR	34
95.170.224.0/22	RPKI valid	IRR	53
95.170.228.0/22	RPKI valid	IRR	53
95.170.232.0/22	RPKI valid	IRR	53
95.170.236.0/22	RPKI valid	IRR	53
95.170.240.0/22	RPKI valid	IRR	53
95.170.244.0/22	RPKI valid	IRR	53
95.170.248.0/22	RPKI valid	IRR	53
95.170.252.0/22	RPKI valid	IRR	53
141.136.48.0/22	RPKI valid	IRR	53
141.136.52.0/22	RPKI valid	IRR	53
185.18.64.0/22	RPKI valid	IRR	53

RPKI · ROAs

Route origin authorisations

4 ROAs

Signed statements by address holders that AS16006 may originate these prefixes, up to the maximum length shown.

Prefix	Max length	Trust anchor
95.170.224.0/19	/24	RIPENCC
141.136.48.0/21	/24	RIPENCC
185.18.64.0/22	/24	RIPENCC
2a01:9f80::/32	/32	RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

3 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

AS	Network	ASPA	Routing paths
AS5578	SWAN, a.s.	Declared	Observed
AS31117	ENERGOTEL a.s.	Declared	Observed
AS49115	E-MAX INTERNET & IT s.r.o.	Declared	not observed

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

20 objects · 8 not announced

Route objects naming AS16006 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

Prefix	Source	Description	Maintainer	Changed	Routing
95.170.224.0/19	RIPE	Rupkki	`MNT-RUP`	2009-02-09	Not announced
95.170.224.0/21	RIPE	Rupkki	`MNT-RUP`	2014-09-18	Not announced
95.170.232.0/21	RIPE	Rupkki	`MNT-RUP`	2014-09-18	Not announced
95.170.240.0/21	RIPE	Rupkki	`MNT-RUP`	2014-09-18	Not announced
95.170.248.0/21	RIPE	Rupkki	`MNT-RUP`	2014-09-18	Not announced
141.136.48.0/21	RIPE	Rupkki	`MNT-RUP`	2011-06-29	Not announced
185.18.64.0/23	RIPE	Rupkki	`MNT-RUP`	2014-09-26	Not announced
185.18.66.0/23	RIPE	Rupkki	`MNT-RUP`	2014-09-26	Not announced
95.170.224.0/22	RIPE	Rupkki	`MNT-RUP`	2014-09-26	Announced
95.170.228.0/22	RIPE	Rupkki	`MNT-RUP`	2014-09-26	Announced
95.170.232.0/22	RIPE	Rupkki	`MNT-RUP`	2014-09-26	Announced
95.170.236.0/22	RIPE	Rupkki	`MNT-RUP`	2014-09-26	Announced
95.170.240.0/22	RIPE	Rupkki	`MNT-RUP`	2014-09-26	Announced
95.170.244.0/22	RIPE	Rupkki	`MNT-RUP`	2014-09-26	Announced
95.170.248.0/22	RIPE	Rupkki	`MNT-RUP`	2014-09-26	Announced
95.170.252.0/22	RIPE	Rupkki	`MNT-RUP`	2011-03-30	Announced
141.136.48.0/22	RIPE	Rupkki	`MNT-RUP`	2014-09-26	Announced
141.136.52.0/22	RIPE	Rupkki	`MNT-RUP`	2014-09-26	Announced
185.18.64.0/22	RIPE	Rupkki	`MNT-RUP`	2014-09-18	Announced
2a01:9f80::/32	RIPE	RUPKKI s.r.o.	`MNT-RUP`	2012-02-21	Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS16006 directly show who expects to carry it.

AS-set	Where	Relationship
`AS-EASYNETUK`	RIPE	Lists AS16006 as a direct member
`AS-ENERGOTEL`	RIPE	Lists AS16006 as a direct member
`AS-GECOM`	RIPE	Lists AS16006 as a direct member
`AS-HURRICANEV6`	RADB	Lists AS16006 as a direct member
`AS-SLOVAK`	RIPE	Lists AS16006 as a direct member

RPKI from rpki-client, validated 2026-10-13 12:16 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-13. Cross-check on bgp.he.net.