asn.dev

Routing security

AS203323 OPENSENT

Unclassified RIPE

RPKI valid 100% 3 of 3 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 4 authorising this AS

Announcements

What this network originates

3 observed

Every prefix observed with AS203323 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2.58.58.0/24RPKI validIRR52
2a09:e244:b000::/36RPKI validIRR31
2a09:e244:b000::/48RPKI validIRR31

RPKI · ROAs

Route origin authorisations

4 ROAs

Signed statements by address holders that AS203323 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
2.58.58.0/24/24RIPENCC
2a01:5c40:c000::/64/64RIPENCC
2a09:e244:b000::/36/48RIPENCC
2a09:e244:b000::/48/48RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

6 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS174Cogent Communications, LLCDeclarednot observed
AS3356Level 3 Parent, LLCDeclarednot observed
AS6453TATA COMMUNICATIONS (AMERICA) INCDeclaredObserved
AS6762TELECOM ITALIA SPARKLE S.p.A.Declarednot observed
AS6830Liberty Global Europe Holding B.V.Declarednot observed
AS35133Eranium B.V.Declarednot observed
AS6939Hurricane Electric LLCnot declaredObserved
AS50304Blix Solutions ASnot declaredObserved
AS12859BIT BVnot declaredObserved
AS20764CJSC RASCOMnot declaredObserved
AS24482SG.GSnot declaredObserved
AS34927iFog GmbHnot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

3 objects · 0 not announced

Route objects naming AS203323 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
2.58.58.0/24RIPE—OPENSENT-MNT2025-12-05Announced
2a09:e244:b000::/36RIPE—OPENSENT-MNT2025-12-05Announced
2a09:e244:b000::/48RIPE—OPENSENT-MNT2026-04-26Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS203323 directly show who expects to carry it.

AS-setWhereRelationship
AS203323:AS-OPENSENTRIPELists AS203323 as a direct member
AS680:AS-AMSIX-RS-PEERSRIPELists AS203323 as a direct member

RPKI from rpki-client, validated 2026-10-13 12:16 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-13. Cross-check on bgp.he.net.