asn.dev

Routing security

AS17098 BROWNRICE-INTERNET-1 - Brownrice Internet, Inc.

Unclassified ARIN

RPKI valid 50% 5 of 10 announcements
RPKI invalid 0 none
No ROA 5 not covered by any ROA
IRR registered 90% 1 missing · 0 other origin
ROAs 5 authorising this AS

Announcements

What this network originates

10 observed

Every prefix observed with AS17098 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
8.28.86.0/23No ROAIRR56
63.133.223.0/24No ROAIRR52
2604:fa40::/32No ROAIRR29
2606:6680:53::/48No ROAIRR29
2606:6680:54::/48No ROAIRR29
209.182.252.0/22RPKI validNo IRR50
45.141.129.0/24RPKI validIRR56
158.51.40.0/22RPKI validIRR55
172.97.100.0/22RPKI validIRR55
185.101.23.0/24RPKI validIRR55

RPKI · ROAs

Route origin authorisations

5 ROAs

Signed statements by address holders that AS17098 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
45.141.129.0/24/24RIPENCC
158.51.40.0/22/32ARIN
172.97.100.0/22/32ARIN
185.101.23.0/24/24RIPENCC
209.182.252.0/22/32ARIN

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

2 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS3356Level 3 Parent, LLCDeclaredObserved
AS14901TAOS NET LLCDeclaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

10 objects · 0 not announced

Route objects naming AS17098 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
8.28.86.0/23ARINBROWNRICE-V4-1 reassignedMNT-BI-672021-01-29Announced
8.28.86.0/23RADBSpectrum Networks Proxy registrationMAINT-AS114042023-11-13Announced
45.141.129.0/24RIPE—SMARTHOST2025-04-12Announced
63.133.223.0/24ARINhttp://enoctus.comMNT-EWSL-202023-09-13Announced
158.51.40.0/22ARINBROWNRICE-V4-1 assigned by ARINMNT-BI-672021-01-29Announced
172.97.100.0/22RADBSpectrum Networks Proxy registrationMAINT-AS114042023-11-13Announced
185.101.23.0/24RIPE—SMARTHOST2025-04-12Announced
2604:fa40::/32ARINBROWNRICE-V6MNT-BI-672023-04-13Announced
2606:6680:53::/48ARINhttp://www.smarthost.netMNT-VL-1082023-03-18Announced
2606:6680:54::/48ARINhttp://www.smarthost.netMNT-VL-1082023-03-18Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS17098 directly show who expects to carry it.

AS-setWhereRelationship
AS-10835-TRANSITRADBLists AS17098 as a direct member
AS-HURRICANERADBLists AS17098 as a direct member
AS-TRANSROUTE-SPECRIPELists AS17098 as a direct member
AS-WAVE-CUSTOMERSRADBLists AS17098 as a direct member
AS14901:AS-TAOSNETARINLists AS17098 as a direct member
AS29831:AS-CUSTOMERSARINLists AS17098 as a direct member

RPKI from rpki-client, validated 2026-11-07 13:08 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-11-07. Cross-check on bgp.he.net.