asn.dev

Routing security

AS203592 CNH-PRIMARY

Unclassified RIPE

RPKI valid 100% 4 of 4 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 4 authorising this AS

Announcements

What this network originates

4 observed

Every prefix observed with AS203592 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a0c:2c0::/29RPKI validIRR30
2a0c:2c0:dd80::/44RPKI validIRR33
94.198.185.0/24RPKI validIRR53
185.128.116.0/22RPKI validIRR52

RPKI · ROAs

Route origin authorisations

4 ROAs

Signed statements by address holders that AS203592 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
94.198.185.0/24/24RIPENCC
185.128.116.0/22/22RIPENCC
2a0c:2c0::/29/29RIPENCC
2a0c:2c0:dd80::/44/44RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

3 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS3320Deutsche Telekom AGDeclaredObserved
AS8220COLT Technology Services Group LimitedDeclarednot observed
AS15372IBH connect GmbHDeclaredObserved
AS213973BCIX Management GmbHnot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

4 objects · 0 not announced

Route objects naming AS203592 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
94.198.185.0/24RIPE94.198.185.0/24DE-CLOUDANDHEAT-1-MNT2026-01-28Announced
185.128.116.0/22RIPE185.128.116.0/22DE-CLOUDANDHEAT-1-MNT2015-12-08Announced
2a0c:2c0::/29RIPE—DE-CLOUDANDHEAT-1-MNT2018-03-23Announced
2a0c:2c0:dd80::/44RIPE2a0c:02c0:dd80::/44DE-CLOUDANDHEAT-1-MNT2026-01-28Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS203592 directly show who expects to carry it.

AS-setWhereRelationship
AS-HURRICANEV6RADBLists AS203592 as a direct member
AS-IBHRIPELists AS203592 as a direct member
AS-IBH-V6RIPELists AS203592 as a direct member
AS-RETN-ACTUAL-V4RIPELists AS203592 as a direct member
AS-RETN-ACTUAL-V6RIPELists AS203592 as a direct member
AS3320:AS-DTAGRIPELists AS203592 as a direct member
AS3320:AS-DTAG-V6RIPELists AS203592 as a direct member
AS57328:AS-DDIXRIPELists AS203592 as a direct member
AS8220:AS-COLTDERIPELists AS203592 as a direct member

RPKI from rpki-client, validated 2026-10-17 12:17 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, collected 2026-10-17. Cross-check on bgp.he.net.