asn.dev

Routing security

AS200970 RIEPERT

Residential RIPE

RPKI valid 100% 3 of 3 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 11 authorising this AS

Announcements

What this network originates

3 observed

Every prefix observed with AS200970 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a05:d9c0::/29RPKI validIRR34
185.89.160.0/22RPKI validIRR52
185.145.16.0/22RPKI validIRR52

RPKI · ROAs

Route origin authorisations

11 ROAs

Signed statements by address holders that AS200970 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
185.89.160.0/22/22RIPENCC
185.89.160.0/24/24RIPENCC
185.89.161.0/24/24RIPENCC
185.89.162.0/24/24RIPENCC
185.89.163.0/24/24RIPENCC
185.145.16.0/22/22RIPENCC
185.145.16.0/24/24RIPENCC
185.145.17.0/24/24RIPENCC
185.145.18.0/24/24RIPENCC
185.145.19.0/24/24RIPENCC
2a05:d9c0::/29/29RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

3 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS21013eww agDeclaredObserved
AS33891Core-Backbone GmbHDeclaredObserved
AS200683Elektro Puehringer GmbHDeclaredObserved
AS6939Hurricane Electric LLCnot declaredObserved
AS24482SG.GSnot declaredObserved
AS29504Freenet Liberec, z.s.not declaredObserved
AS48362Stadtwerke Feldkirchnot declaredObserved
AS9002RETN Limitednot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

11 objects · 8 not announced

Route objects naming AS200970 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
185.89.160.0/24RIPERIERERT-ATRIEPERT-MNT2019-02-05Not announced
185.89.161.0/24RIPERIERERT-ATRIEPERT-MNT2019-02-05Not announced
185.89.162.0/24RIPERIEPERT-ATRIEPERT-MNT2019-02-05Not announced
185.89.163.0/24RIPERIERERT-ATRIEPERT-MNT2019-02-05Not announced
185.145.16.0/24RIPERIERERT-ATRIEPERT-MNT2019-02-05Not announced
185.145.17.0/24RIPERIERERT-ATRIEPERT-MNT2019-02-05Not announced
185.145.18.0/24RIPERIERERT-ATRIEPERT-MNT2019-02-05Not announced
185.145.19.0/24RIPERIERERT-ATRIEPERT-MNT2019-02-05Not announced
185.89.160.0/22RIPERIERERT-ATRIEPERT-MNT2019-02-05Announced
185.145.16.0/22RIPERIERERT-ATRIEPERT-MNT2019-02-05Announced
2a05:d9c0::/29RIPERIEPERT-ATRIEPERT-MNT2019-02-05Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS200970 directly show who expects to carry it.

AS-setWhereRelationship
AS-HURRICANEV6RADBLists AS200970 as a direct member
AS-PTARIPELists AS200970 as a direct member
AS-RIS-RRC05RIPELists AS200970 as a direct member
AS-VIX-MEMBERSRIPELists AS200970 as a direct member
AS200970:AS-RIEPERTRIPELists AS200970 as a direct member

RPKI from rpki-client, validated 2026-10-15 12:09 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-15. Cross-check on bgp.he.net.