asn.dev

Routing security

AS204092 GRIFON

Unclassified RIPE

RPKI valid 100% 3 of 3 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 3 authorising this AS

Announcements

What this network originates

3 observed

Every prefix observed with AS204092 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a00:5884::/32RPKI validIRR37
80.67.190.0/24RPKI validIRR54
89.234.186.0/24RPKI validIRR54

RPKI · ROAs

Route origin authorisations

3 ROAs

Signed statements by address holders that AS204092 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
80.67.190.0/24/24RIPENCC
89.234.186.0/24/24RIPENCC
2a00:5884::/32/32RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

4 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS20766Association "Gitoyen"DeclaredObserved
AS30781Free Pro SASDeclarednot observed
AS34019Hivane AssociationDeclaredObserved
AS198978Alkante SASDeclaredObserved
AS6939Hurricane Electric LLCnot declaredObserved
AS3333Reseaux IP Europeens Network Coordination Centre (RIPE NCC)not declaredObserved
AS24482SG.GSnot declaredObserved
AS48185team.blue NVnot declaredObserved
AS20485Joint Stock Company TransTeleComnot declaredObserved
AS37100SEACOM Limitednot declaredObserved
AS37721Virtual Technologies & Solutionsnot declaredObserved
AS17639Converge ICT Solutions Inc.not declaredObserved
AS33891Core-Backbone GmbHnot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

4 objects · 1 not announced

Route objects naming AS204092 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
2a0e:f40::/29RIPE—ALARIG-MNT2019-06-28Not announced
80.67.190.0/24RIPEIPv4 route to GrifonGITOYEN-NCC2017-10-23Announced
89.234.186.0/24RIPEIPv4 route to GrifonOPDOP-MNT2015-09-13Announced
2a00:5884::/32RIPEIPv6 route to GrifonOPDOP-MNT2015-09-13Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS204092 directly show who expects to carry it.

AS-setWhereRelationship
AS-HURRICANEV6RADBLists AS204092 as a direct member
AS-RIS-RRC00RIPELists AS204092 as a direct member
AS-STOLON-UPSTREAMRIPELists AS204092 as a direct member
AS-TRANSROUTE-SPECRIPELists AS204092 as a direct member
AS1221:AS-CUSTOMERSAPNICLists AS204092 as a direct member
AS198978:AS-TRANSITRIPELists AS204092 as a direct member
AS204092:AS-GRIFONRIPELists AS204092 as a direct member

RPKI from rpki-client, validated 2026-10-11 12:23 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-11. Cross-check on bgp.he.net.