Routing security
AS198981 NETSHIELD-BYOIP
Hosting Spamhaus ASN-DROP RIPE
Announcements
What this network originates
Every prefix observed with AS198981 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 2a01:ecc0:2000::/36 | RPKI valid | IRR | 31 |
| 194.153.135.0/24 | RPKI valid | IRR | 52 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS198981 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 2.27.0.0/24 | /24 | RIPENCC |
| 2.27.2.0/24 | /24 | RIPENCC |
| 194.153.135.0/24 | /24 | RIPENCC |
| 212.192.250.0/24 | /24 | RIPENCC |
| 212.192.255.0/24 | /24 | RIPENCC |
| 213.165.53.0/24 | /24 | RIPENCC |
| 2a01:ecc0:2000::/36 | /36 | RIPENCC |
| 2a05:dfc1:2b00::/40 | /48 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS49418 | NETSHIELD LTD | Declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS198981 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 91.108.243.0/24 | RIPE | — | QWARTA-MNT | 2024-06-11 | Not announced |
| 212.192.250.0/24 | RIPE | — | NETSHIELD-MNT | 2023-08-29 | Not announced |
| 212.192.255.0/24 | RIPE | — | NETSHIELD-MNT | 2023-11-28 | Not announced |
| 2a05:dfc1:2b00::/40 | RIPE | — | CLOUDIE-MNT | 2023-04-06 | Not announced |
| 2a0f:cdc6:1001::/48 | RIPE | — | NETSHIELD-MNT | 2023-04-16 | Not announced |
| 194.153.135.0/24 | RIPE | — | NETSHIELD-MNT | 2026-01-28 | Announced |
| 2a01:ecc0:2000::/36 | RIPE | — | ALANIA-MNT | 2025-09-14 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS198981 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-AVANTEL | RIPE | Lists AS198981 as a direct member |
AS-DEMOS | RIPE | Lists AS198981 as a direct member |
AS-EMIX | RADB | Lists AS198981 as a direct member |
AS-STORMWALL-SET | RADB | Lists AS198981 as a direct member |
AS-STORMWALL-SET | RIPE | Lists AS198981 as a direct member |
AS-ZSTTK-SET | RIPE | Lists AS198981 as a direct member |
AS41194:AS-RASCOM | RIPE | Lists AS198981 as a direct member |
AS49418:AS-NETSHIELD | RIPE | Lists AS198981 as a direct member |
RPKI from rpki-client, validated 2026-10-17 12:17 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, collected 2026-10-17. Cross-check on bgp.he.net.