asn.dev

Routing security

AS198473 DK-KBDS-AS

Unclassified RIPE Cable/DSL/ISP

RPKI valid 100% 8 of 8 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 9 authorising this AS

Announcements

What this network originates

8 observed

Every prefix observed with AS198473 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2.59.184.0/22RPKI validIRR57
2a10:b080::/29RPKI validIRR34
91.235.100.0/24RPKI validIRR57
185.20.140.0/22RPKI validIRR57
185.126.53.0/24RPKI validIRR57
185.126.54.0/23RPKI validIRR57
185.149.229.0/24RPKI validIRR57
185.149.230.0/24RPKI validIRR57

RPKI · ROAs

Route origin authorisations

9 ROAs

Signed statements by address holders that AS198473 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
2.59.184.0/22/22RIPENCC
91.235.100.0/24/24RIPENCC
185.20.140.0/22/22RIPENCC
185.126.53.0/24/24RIPENCC
185.126.54.0/23/23RIPENCC
185.149.229.0/24/24RIPENCC
185.149.230.0/24/24RIPENCC
2001:470:48b::/48/48ARIN
2a10:b080::/29/29RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

4 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS3292TDC Holding A/SDeclaredObserved
AS6939Hurricane Electric LLCDeclaredObserved
AS31027GlobalConnect A/SDeclaredObserved
AS39642Sinal A/SDeclaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

9 objects · 1 not announced

Route objects naming AS198473 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
2001:470:48b::/48ARINHurricane Electric LLCMNT-HURC2025-07-15Not announced
2.59.184.0/22RIPEKikkenborgs DataService - IPv4 route obj.MNT-THOMASKRUSE2021-03-30Announced
91.235.100.0/24RIPEKIKKENBORG-FIBER-IT-ApS - IPv4 route obj.MNT-THOMASKRUSE2021-04-09Announced
185.20.140.0/22RIPENemNet IPv4 route obj.MNT-THOMASKRUSE2026-07-10Announced
185.126.53.0/24RIPEKikkenborgs DataService - IPv4 route obj.MNT-THOMASKRUSE2026-04-21Announced
185.126.54.0/23RIPEKikkenborgs DataService - IPv4 route obj.MNT-THOMASKRUSE2026-04-21Announced
185.149.229.0/24RIPE—MNT-THOMASKRUSE2019-03-21Announced
185.149.230.0/24RIPEKikkenborgs DataService - IPv4 route obj.MNT-THOMASKRUSE2016-04-30Announced
2a10:b080::/29RIPE—MNT-THOMASKRUSE2020-12-21Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS198473 directly show who expects to carry it.

AS-setWhereRelationship
AS198473:AS-NEMNETPeeringDBDeclared by the operator as its own set
AS-HURRICANERADBLists AS198473 as a direct member
AS-HURRICANEV6RADBLists AS198473 as a direct member
AS198473:AS-NEMNETRIPELists AS198473 as a direct member
AS31027:AS-GCNET-LEGACYRIPELists AS198473 as a direct member
AS31027:AS-GCNETDKRIPELists AS198473 as a direct member
AS31027:AS-NIANETRIPELists AS198473 as a direct member

RPKI from rpki-client, validated 2026-10-15 12:09 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-15. Cross-check on bgp.he.net.