Routing security
AS201028 VEXSHIELD Vexura UG (Haftungsbeschraenkt)
Unclassified RIPE
Announcements
What this network originates
Every prefix observed with AS201028 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 2a06:9801:1000::/40 | RPKI valid | IRR | 35 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS201028 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 2a06:9801:1000::/40 | /40 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS41051 | Openfactory GmbH | Declared | not observed |
| AS197324 | Vladyslav Koba | Declared | Observed |
| AS212895 | Johannes Ernst | Declared | Observed |
| AS214762 | Sebastian Stefanek trading as MatHost.eu | Declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS201028 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 2a06:9801:57::/48 | RIPE | — | VEXURA_UG-MNT | 2026-05-18 | Not announced |
| 2a13:c8c4:a000::/48 | RIPE | Route for 2a13:c8c4:a000::/48 | VEXURA_UG-MNT | 2026-05-26 | Not announced |
| 2a13:c8c4:a001::/48 | RIPE | Route for 2a13:c8c4:a001::/48 | VEXURA_UG-MNT | 2026-05-26 | Not announced |
| 2a06:9801:1000::/40 | RIPE | 2a06:9801:1000::/40 | LAGRANGE-AUTO-MNT | 2026-07-08 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS201028 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-HURRICANE | RADB | Lists AS201028 as a direct member |
AS-HURRICANEV6 | RADB | Lists AS201028 as a direct member |
AS-HYEHOST:AS-ASHBURN | ARIN | Lists AS201028 as a direct member |
AS-HYEHOST:AS-AUCKLAND | ARIN | Lists AS201028 as a direct member |
AS-HYTRON | RADB | Lists AS201028 as a direct member |
AS-STEFAN | AFRINIC | Lists AS201028 as a direct member |
AS-STEFAN | ALTDB | Lists AS201028 as a direct member |
AS-STEFAN | ARIN | Lists AS201028 as a direct member |
AS17433:AS-HYTRON | APNIC | Lists AS201028 as a direct member |
AS17433:AS-HYTRON | RADB | Lists AS201028 as a direct member |
AS200950:AS-MAIN | RIPE | Lists AS201028 as a direct member |
AS201028:AS-VEXSHIELD | RIPE | Lists AS201028 as a direct member |
AS201028:AS-VEXSHIELD-DOWNSTREAMS | RIPE | Lists AS201028 as a direct member |
AS202662:AS-HYTRON | RIPE | Lists AS201028 as a direct member |
AS214556:AS-VEXURA-UPSTREAMS | RIPE | Lists AS201028 as a direct member |
AS214915:AS-PAWHOST-FLATTENED | RIPE | Lists AS201028 as a direct member |
RPKI from rpki-client, validated 2026-11-03 13:02 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-11-03. Cross-check on bgp.he.net.