asn.dev

Routing security

AS20917 FIDUCIAL-CLOUD-AS

Unclassified ARIN Cable/DSL/ISP

RPKI valid 100% 10 of 10 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 90% 1 missing · 0 other origin
ROAs 5 authorising this AS

Announcements

What this network originates

10 observed

Every prefix observed with AS20917 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
185.22.196.0/22RPKI validNo IRR52
91.232.40.0/22RPKI validIRR52
185.22.197.0/24RPKI validIRR52
185.22.198.0/24RPKI validIRR52
213.163.160.0/19RPKI validIRR52
213.163.178.0/24RPKI validIRR52
213.163.184.0/24RPKI validIRR52
213.163.185.0/24RPKI validIRR52
213.163.186.0/24RPKI validIRR52
213.163.188.0/24RPKI validIRR52

RPKI · ROAs

Route origin authorisations

5 ROAs

Signed statements by address holders that AS20917 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
91.232.40.0/22/24RIPENCC
185.22.196.0/22/24RIPENCC
213.163.160.0/19/24RIPENCC
2a00:e80::/32/32RIPENCC
2a04:2000::/29/32RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

17 objects · 8 not announced

Route objects naming AS20917 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
185.22.196.0/24RIPENEXTOMNT-KHEOPS-ORGANISATION2025-10-17Not announced
185.22.199.0/24RIPENEXTOMNT-KHEOPS-ORGANISATION2025-10-17Not announced
213.163.160.0/24RIPEKHEOPS-WAN-IPMNT-KHEOPS-ORGANISATION2022-10-12Not announced
213.163.162.0/24RIPEKHEOPS-HOSTING-MUTUALISEMNT-KHEOPS-ORGANISATION2022-10-12Not announced
213.163.170.0/24RIPEFIDUCIAL CLOUD SASUMNT-KHEOPS-ORGANISATION2025-08-26Not announced
213.163.187.0/24RIPESUBNET-FC-DC-PAR3MNT-KHEOPS-ORGANISATION2022-03-23Not announced
2a00:e80::/32RIPEKHEOPS ORGANISATIONMNT-KHEOPS-ORGANISATION2013-10-23Not announced
2a04:2000::/29RIPENexto SASMNT-KHEOPS-ORGANISATION2023-07-20Not announced
91.232.40.0/22RIPEFC-FCN-01MNT-KHEOPS-ORGANISATION2023-04-24Announced
185.22.197.0/24RIPEFR-FC-RANGE-FIRMEMNT-KHEOPS-ORGANISATION2025-10-17Announced
185.22.198.0/24RIPEFR-FC-RANGE-FIRMEMNT-KHEOPS-ORGANISATION2022-03-22Announced
213.163.160.0/19RIPEKHEOPSORGMNT-KHEOPS-ORGANISATION2020-11-26Announced
213.163.178.0/24RIPESUBNET-FC-MULTI-DCMNT-KHEOPS-ORGANISATION2022-09-27Announced
213.163.184.0/24RIPESUBNET-FC-DC-LYO4MNT-KHEOPS-ORGANISATION2025-08-26Announced
213.163.185.0/24RIPESUBNET-FC-DC-LYO1MNT-KHEOPS-ORGANISATION2022-03-22Announced
213.163.186.0/24RIPESUBNET-FC-DC-MRS3MNT-KHEOPS-ORGANISATION2022-03-23Announced
213.163.188.0/24RIPESUBNET-FC-MULTI-DCMNT-KHEOPS-ORGANISATION2022-03-23Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS20917 directly show who expects to carry it.

AS-setWhereRelationship
AS-SET-FIDUCIAL-CLOUD-01PeeringDBDeclared by the operator as its own set
AS-BLUENETECH-SFINX-PEERSRIPELists AS20917 as a direct member
AS-KHEOPSRIPELists AS20917 as a direct member
AS-SET-FIDUCIAL-CLOUD-01RIPELists AS20917 as a direct member
AS-SFINX-MEMBERSRIPELists AS20917 as a direct member
AS174:AS-COGC-026RADBLists AS20917 as a direct member
AS39801:AS-MULTIPASS-CUST-LISTRIPELists AS20917 as a direct member
AS43100:AS-MEMBERS:AS-LYN-RSRIPELists AS20917 as a direct member

RPKI from rpki-client, validated 2026-10-28 12:15 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-28. Cross-check on bgp.he.net.