asn.dev

Routing security

AS201616 THEOH-AS

Unclassified RIPE

RPKI valid 100% 2 of 2 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 3 authorising this AS

Announcements

What this network originates

2 observed

Every prefix observed with AS201616 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a0e:f43:3::/48RPKI validIRR35
2001:678:bb0::/48RPKI validIRR34

RPKI · ROAs

Route origin authorisations

3 ROAs

Signed statements by address holders that AS201616 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
2001:678:bb0::/48/48RIPENCC
2a0e:f43:3::/48/48RIPENCC
2a11:29c0:3da0::/44/48RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

8 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS8283Netwerkvereniging ColoclueDeclaredObserved
AS3935131173 Services ABDeclaredObserved
AS41051Openfactory GmbHDeclarednot observed
AS44684Mythic Beasts LtdDeclaredObserved
AS48070DSM (GB) LimitedDeclarednot observed
AS212396FyfeWeb LtdDeclaredObserved
AS212635Jurrian van IerselDeclaredObserved
AS215638Cilix LimitedDeclaredObserved
AS6939Hurricane Electric LLCnot declaredObserved
AS24482SG.GSnot declaredObserved
AS48185team.blue NVnot declaredObserved
AS50300CustodianDC Limitednot declaredObserved
AS3333Reseaux IP Europeens Network Coordination Centre (RIPE NCC)not declaredObserved
AS17639Converge ICT Solutions Inc.not declaredObserved
AS34019Hivane Associationnot declaredObserved
AS37721Virtual Technologies & Solutionsnot declaredObserved
AS48362Stadtwerke Feldkirchnot declaredObserved
AS205794JINZE YANGnot declaredObserved
AS213241TECHIT.BE SRLnot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

3 objects · 1 not announced

Route objects naming AS201616 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
2a11:29c0:3da0::/44RIPE—THEOH-MNT2026-05-29Not announced
2001:678:bb0::/48RIPE—THEOH-MNT2026-02-06Announced
2a0e:f43:3::/48RIPE—GRIFON-MNT2026-02-08Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS201616 directly show who expects to carry it.

AS-setWhereRelationship
AS-ESABRIPELists AS201616 as a direct member
AS-FASTWEBRIPELists AS201616 as a direct member
AS-FASTWEB-V6RIPELists AS201616 as a direct member
AS-HURRICANEV6RADBLists AS201616 as a direct member
AS-LONAP-CONNECTEDRIPELists AS201616 as a direct member
AS-LONAP-MLPRIPELists AS201616 as a direct member
AS-LONAP-MLP-V6RIPELists AS201616 as a direct member
AS-MYTHIC-CUSTOMERSRIPELists AS201616 as a direct member
AS-RETN-ACTUAL-V6RIPELists AS201616 as a direct member
AS201616:AS-THEOHRIPELists AS201616 as a direct member
AS212635:AS-212635RIPELists AS201616 as a direct member
AS212635:AS-212635-PEERSRIPELists AS201616 as a direct member
AS48070:AS-DSM-CUSTRIPELists AS201616 as a direct member
AS680:AS-AMSIX-RS-PEERSRIPELists AS201616 as a direct member
AS8283:AS-COLOCLUERIPELists AS201616 as a direct member

RPKI from rpki-client, validated 2026-10-15 12:09 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-15. Cross-check on bgp.he.net.