Routing security
AS202297 SKYLON SKYLON
Unclassified RIPE
Announcements
What this network originates
Every prefix observed with AS202297 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 2a0e:fd45:40f6::/48 | No ROA | No IRR | 30 |
| 2a0f:5707:ab22::/48 | No ROA | IRR | 31 |
| 46.8.42.0/24 | No ROA | IRR | 52 |
| 109.248.43.0/24 | No ROA | IRR | 52 |
| 2a0c:9a40:8089::/48 | RPKI valid | No IRR | 29 |
| 2a04:ff07::/32 | RPKI valid | IRR | 30 |
| 2a14:c380:1a0::/44 | RPKI valid | IRR | 31 |
| 2001:678:aa4::/48 | RPKI valid | IRR | 30 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS202297 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 45.139.224.0/22 | /24 | RIPENCC |
| 2001:678:aa4::/48 | /48 | RIPENCC |
| 2001:678:aa8::/48 | /48 | RIPENCC |
| 2a04:ff07::/32 | /48 | RIPENCC |
| 2a0c:9a40:8089::/48 | /48 | RIPENCC |
| 2a0c:b642:1a08::/48 | /48 | RIPENCC |
| 2a14:c380:1a0::/44 | /44 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS39392 | SH.cz s.r.o. | Declared | Observed |
| AS47232 | ISP Alliance a.s. | Declared | not observed |
| AS6939 | Hurricane Electric LLC | not declared | Observed |
| AS24482 | SG.GS | not declared | Observed |
| AS33891 | Core-Backbone GmbH | not declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS202297 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 45.139.224.0/22 | RIPE | — | MNT-UK-SKYLON-1 | 2019-08-12 | Not announced |
| 91.193.75.0/24 | RIPE | — | PRIVACYFIRST-MNT | 2025-02-11 | Not announced |
| 2001:678:aa8::/48 | RIPE | — | FHR7-MNT | 2019-06-18 | Not announced |
| 2a04:ff00::/29 | RIPE | — | MNT-UK-SKYLON-1 | 2020-08-04 | Not announced |
| 2a04:ff07:d9::/48 | RIPE | — | SKYLON | 2020-02-15 | Not announced |
| 46.8.42.0/24 | RIPE | — | FHRNET-MNT | 2024-03-06 | Announced |
| 109.248.43.0/24 | RIPE | SkylonHost | SKYLON | 2019-10-04 | Announced |
| 2001:678:aa4::/48 | RIPE | — | FHR7-MNT | 2019-06-18 | Announced |
| 2a04:ff07::/32 | RIPE | — | SKYLON | 2020-04-30 | Announced |
| 2a0f:5707:ab22::/48 | RIPE | — | KIF-MNT | 2021-03-11 | Announced |
| 2a14:c380:1a0::/44 | RIPE | Mlokmodracek's Network of Liberty <hr> | MLOKMODRACEK-MNT | 2026-06-09 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS202297 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-DEDCLOUD-UPSTREAMS | RIPE | Lists AS202297 as a direct member |
AS-FHR | RIPE | Lists AS202297 as a direct member |
AS-LEN | RIPE | Lists AS202297 as a direct member |
AS-RIS-RRC00 | RIPE | Lists AS202297 as a direct member |
AS-SKYLON | RIPE | Lists AS202297 as a direct member |
AS210951:AS-UPSTREAMS | RIPE | Lists AS202297 as a direct member |
RPKI from rpki-client, validated 2026-10-12 12:10 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-12. Cross-check on bgp.he.net.