asn.dev

Routing security

AS208702 ERNST

Unclassified RIPE

RPKI valid 100% 5 of 5 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 5 authorising this AS

Announcements

What this network originates

5 observed

Every prefix observed with AS208702 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
45.154.92.0/24RPKI validIRR53
45.154.93.0/24RPKI validIRR53
45.154.94.0/24RPKI validIRR53
45.154.95.0/24RPKI validIRR53
2001:678:a98::/48RPKI validIRR35

RPKI · ROAs

Route origin authorisations

5 ROAs

Signed statements by address holders that AS208702 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
45.154.92.0/24/24RIPENCC
45.154.93.0/24/24RIPENCC
45.154.94.0/24/24RIPENCC
45.154.95.0/24/24RIPENCC
2001:678:a98::/48/48RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

6 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS6939Hurricane Electric LLCDeclaredObserved
AS31142unnamedDeclarednot observed
AS34927iFog GmbHDeclaredObserved
AS137933CyberForest LLC.Declarednot observed
AS202409unnamedDeclarednot observed
AS209762unnamedDeclarednot observed
AS37989DCS1 Pte. Ltd.not declaredObserved
AS12586GHOSTnet GmbHnot declaredObserved
AS24482SG.GSnot declaredObserved
AS4913410VPN Research Network LTDnot declaredObserved
AS202365Omer GOLGELInot declaredObserved
AS212508Lowhosting services of Davide Gennarinot declaredObserved
AS58057Securebit AGnot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

5 objects · 0 not announced

Route objects naming AS208702 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
45.154.92.0/24RIPE—MNT-0X4A6F2021-02-07Announced
45.154.93.0/24RIPE—MNT-0X4A6F2021-02-07Announced
45.154.94.0/24RIPE—MNT-0X4A6F2021-02-07Announced
45.154.95.0/24RIPE—MNT-0X4A6F2021-02-07Announced
2001:678:a98::/48RIPE—MNT-0X4A6F2021-02-07Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS208702 directly show who expects to carry it.

AS-setWhereRelationship
AS-ERNSTRIPELists AS208702 as a direct member
AS-EVIXALTDBLists AS208702 as a direct member
AS-HURRICANEV6RADBLists AS208702 as a direct member
AS-IFOGALTDBLists AS208702 as a direct member
AS-IFOGRIPELists AS208702 as a direct member
AS-RETN-ACTUAL-V4RIPELists AS208702 as a direct member
AS-RETN-ACTUAL-V6RIPELists AS208702 as a direct member
AS37989:AS-SGAPNICLists AS208702 as a direct member

RPKI from rpki-client, validated 2026-10-23 12:03 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-23. Cross-check on bgp.he.net.