asn.dev

Routing security

AS208973 haarlem Gemeente Haarlem

Unclassified RIPE

RPKI valid 100% 2 of 2 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 2 authorising this AS

Announcements

What this network originates

2 observed

Every prefix observed with AS208973 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a07:3500:10c0::/48RPKI validIRR28
45.67.104.0/22RPKI validIRR52

RPKI · ROAs

Route origin authorisations

2 ROAs

Signed statements by address holders that AS208973 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
45.67.104.0/22/22RIPENCC
2a07:3500:10c0::/48/48RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

2 objects · 0 not announced

Route objects naming AS208973 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
45.67.104.0/22RIPE—MNT-NL-HAARLEM-12019-05-24Announced
2a07:3500:10c0::/48RIPEExternal services Gemeente HaarlemMNT-NL-HAARLEM-12021-11-01Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS208973 directly show who expects to carry it.

AS-setWhereRelationship
AS-AOARIPELists AS208973 as a direct member
AS-TNFRIPELists AS208973 as a direct member

RPKI from rpki-client, validated 2026-11-09 13:06 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-11-09. Cross-check on bgp.he.net.