asn.dev

Routing security

AS200070 CZNIC-AS2

Unclassified RIPE NSP

RPKI valid 100% 10 of 10 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 80% 0 missing · 2 other origin
ROAs 10 authorising this AS

Announcements

What this network originates

10 observed

Every prefix observed with AS200070 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
193.29.206.0/24RPKI validIRR other origin15
2001:678:1::/48RPKI validIRR other origin5
185.43.134.0/24RPKI validIRR8
194.0.12.0/24RPKI validIRR2
194.0.14.0/24RPKI validIRR51
212.237.229.0/24RPKI validIRR19
2001:148f:fffb::/48RPKI validIRR6
2001:148f:fffd::/48RPKI validIRR2
2001:678:11::/48RPKI validIRR34
2001:678:f::/48RPKI validIRR1

RPKI · ROAs

Route origin authorisations

10 ROAs

Signed statements by address holders that AS200070 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
185.43.134.0/24/24RIPENCC
193.29.206.0/24/24RIPENCC
194.0.12.0/23/30RIPENCC
194.0.14.0/24/24RIPENCC
212.237.229.0/24/24RIPENCC
2001:678:1::/48/48RIPENCC
2001:678:f::/48/64RIPENCC
2001:678:10::/47/64RIPENCC
2001:148f:fffb::/48/48RIPENCC
2001:148f:fffd::/48/48RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

18 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS1299Arelion Sweden ABDeclaredObserved
AS1853ACONETDeclaredObserved
AS5459London Internet Exchange Ltd.DeclaredObserved
AS6461Zayo BandwidthDeclarednot observed
AS6830Liberty Global Europe Holding B.V.Declarednot observed
AS7521INTERNET MULTIFEED CO.DeclaredObserved
AS8674Netnod ABDeclarednot observed
AS12570O2 Czech Republic, a.s.Declarednot observed
AS16876ICANNDeclarednot observed
AS22548Nucleo de Inf. e Coord. do Ponto BR - NIC.BRDeclarednot observed
AS25248RADIOKOMUNIKACE a.s.Declarednot observed
AS27678NIC ChileDeclarednot observed
AS29802HIVELOCITY, Inc.Declarednot observed
AS34867Cosmonova LLCDeclarednot observed
AS37474ISPA SADeclarednot observed
AS38001NewMedia Express Pte LtdDeclarednot observed
AS40528ICANNDeclarednot observed
AS396356Latitude.shDeclarednot observed
AS6939Hurricane Electric LLCnot declaredObserved
AS24482SG.GSnot declaredObserved
AS48185team.blue NVnot declaredObserved
AS50300CustodianDC Limitednot declaredObserved
AS50304Blix Solutions ASnot declaredObserved
AS34549meerfarbig GmbH & Co. KGnot declaredObserved
AS12552GlobalConnect ABnot declaredObserved
AS17639Converge ICT Solutions Inc.not declaredObserved
AS37100SEACOM Limitednot declaredObserved
AS37721Virtual Technologies & Solutionsnot declaredObserved
AS213241TECHIT.BE SRLnot declaredObserved
AS3303Swisscom (Schweiz) AGnot declaredObserved
AS3741Dimension Datanot declaredObserved
AS29504Freenet Liberec, z.s.not declaredObserved
AS48362Stadtwerke Feldkirchnot declaredObserved
AS3214xTom GmbHnot declaredObserved
AS12779IT.Gate S.p.A.not declaredObserved
AS20485Joint Stock Company TransTeleComnot declaredObserved
AS29075IELO-LIAZO SERVICES SASnot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

9 objects · 0 not announced

Route objects naming AS200070 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
185.43.134.0/24RIPESecond CZ AnycastCZ-NIC-MNT2022-07-12Announced
194.0.12.0/24RIPEAnycasted .cz DNS serversCZ-NIC-MNT2017-08-07Announced
194.0.14.0/24RIPEAnycasted .cz DNS serversCZ-NIC-MNT2013-11-08Announced
212.237.229.0/24RIPESecond CZ AnycastCZ-NIC-MNT2022-11-10Announced
2001:678:f::/48RIPECZ.NIC, z.s.p.o. - anycast DNSCZ-NIC-MNT2017-08-07Announced
2001:678:11::/48RADBThis route object is for IFX Networks customer route which is being exported under this origin AS 200070MAINT-AS187472026-01-19Announced
2001:678:11::/48RIPECZ.NIC, z.s.p.o. - anycast DNSCZ-NIC-MNT2013-11-08Announced
2001:148f:fffb::/48RIPESecond CZ AnycastCZ-NIC-MNT2022-11-10Announced
2001:148f:fffd::/48RIPESecond CZ AnycastCZ-NIC-MNT2022-07-12Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS200070 directly show who expects to carry it.

AS-setWhereRelationship
AS-CZNIC-TRANSITPeeringDBDeclared by the operator as its own set
AS-ACOSERVRIPELists AS200070 as a direct member
AS-CTBC-CUSTOMERS117RADBLists AS200070 as a direct member
AS-CZNICRIPELists AS200070 as a direct member
AS-CZNIC-TRANSITRIPELists AS200070 as a direct member
AS-HURRICANEV6RADBLists AS200070 as a direct member
AS-IIJRADBLists AS200070 as a direct member
AS-IIJ6RADBLists AS200070 as a direct member
AS-LINXRIPELists AS200070 as a direct member
AS-MANDA-LINX-PEERS-V4RIPELists AS200070 as a direct member
AS-MANDA-LINX-PEERS-V6RIPELists AS200070 as a direct member
AS-MFEEDRADBLists AS200070 as a direct member
AS-VIX-MEMBERSRIPELists AS200070 as a direct member
AS2497:AS-IIJRADBLists AS200070 as a direct member
AS2497:AS-IIJ6RADBLists AS200070 as a direct member

RPKI from rpki-client, validated 2026-10-28 12:15 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-28. Cross-check on bgp.he.net.