asn.dev

Routing security

AS203898 CLOUDFLARENET-UK Cloudflare, Inc.

Unclassified RIPE

RPKI valid 100% 3 of 3 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 4 authorising this AS

Announcements

What this network originates

3 observed

Every prefix observed with AS203898 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
185.122.0.0/24RPKI validIRR51
2606:54c1:a::/48RPKI validIRR29
2606:54c1:c::/48RPKI validIRR30

RPKI · ROAs

Route origin authorisations

4 ROAs

Signed statements by address holders that AS203898 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
185.122.0.0/24/24RIPENCC
2606:54c1:a::/48/48ARIN
2606:54c1:c::/48/48ARIN
2a06:98c0:1000::/48/48RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

3 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS1273IDDQD-ASDeclarednot observed
AS2860NOS COMUNICACOES, S.A.DeclaredObserved
AS8220COLT Technology Services Group LimitedDeclaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

5 objects · 2 not announced

Route objects naming AS203898 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
188.114.105.0/24RIPECloudFlare, Inc.MNT-CLOUDFLARE2015-10-16Not announced
2a06:98c0:1000::/48RIPE—MNT-CLOUDFLARE2020-06-15Not announced
185.122.0.0/24RIPECloudFlare, Inc.MNT-CLOUDFLARE2015-10-19Announced
2606:54c1:a::/48ARINCloudflare, Inc.MNT-CLOUD142024-01-12Announced
2606:54c1:c::/48ARINCloudflare, Inc.MNT-CLOUD142024-04-15Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS203898 directly show who expects to carry it.

AS-setWhereRelationship
AS-CTBC-CUSTOMERS109RADBLists AS203898 as a direct member
AS-METRONETUKRIPELists AS203898 as a direct member
AS-SSETRIPELists AS203898 as a direct member
AS-VODAFONE-PTRIPELists AS203898 as a direct member
AS1273:AS-CWWRIPELists AS203898 as a direct member
AS1273:AS-CWW-V6RIPELists AS203898 as a direct member
AS13335:AS-CUSTOMERSARINLists AS203898 as a direct member
AS2860:AS-CUSTOMERSRIPELists AS203898 as a direct member
AS61231:AS-NEOSRIPELists AS203898 as a direct member
AS8220:AS-COLTUKRIPELists AS203898 as a direct member

RPKI from rpki-client, validated 2026-10-31 20:05 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-31. Cross-check on bgp.he.net.