Routing security
AS209369 TCPRO
Hosting RIPE
Announcements
What this network originates
Every prefix observed with AS209369 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 2a13:5280::/29 | RPKI valid | IRR | 31 |
| 2a13:5280::/32 | RPKI valid | IRR covering | 31 |
| 77.78.90.0/24 | RPKI valid | IRR | 52 |
| 185.22.96.0/22 | RPKI valid | IRR | 52 |
| 185.22.96.0/23 | RPKI valid | IRR covering | 52 |
| 185.22.98.0/23 | RPKI valid | IRR covering | 52 |
| 213.134.21.0/24 | RPKI valid | IRR | 52 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS209369 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 77.78.90.0/24 | /24 | RIPENCC |
| 185.22.96.0/22 | /23 | RIPENCC |
| 213.134.21.0/24 | /24 | RIPENCC |
| 2a13:5280::/29 | /64 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS21430 | WIA spol. s.r.o. | Declared | Observed |
| AS39392 | SH.cz s.r.o. | Declared | Observed |
| AS60606 | PRO-ZETA a.s. | Declared | Observed |
| AS6939 | Hurricane Electric LLC | not declared | Observed |
| AS1764 | Next Layer Telekommunikationsdienstleistungs- und Beratungs GmbH | not declared | Observed |
| AS8218 | Zayo Infrastructure France SA | not declared | Observed |
| AS24482 | SG.GS | not declared | Observed |
| AS29504 | Freenet Liberec, z.s. | not declared | Observed |
| AS37721 | Virtual Technologies & Solutions | not declared | Observed |
| AS20562 | Broadband Hosting B.V. | not declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS209369 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 77.78.90.0/24 | RIPE | — | TCPRO-CZ-MNT | 2025-02-08 | Announced |
| 185.22.96.0/22 | RIPE | — | TCPRO-CZ-MNT | 2025-02-06 | Announced |
| 213.134.21.0/24 | RIPE | — | TCPRO-CZ-MNT | 2025-02-06 | Announced |
| 2a13:5280::/29 | RIPE | — | TCPRO-CZ-MNT | 2025-02-08 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS209369 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS209369:AS-TCPRO-TRANSIT | PeeringDB | Declared by the operator as its own set |
AS-ARKATEK | RIPE | Lists AS209369 as a direct member |
AS-WIA-CUST | RIPE | Lists AS209369 as a direct member |
AS209369:AS-TCPRO-NIX-CZ-IXP | RIPE | Lists AS209369 as a direct member |
AS209369:AS-TCPRO-PEERING-CZ-IXP | RIPE | Lists AS209369 as a direct member |
AS209369:AS-TCPRO-TRANSIT | RIPE | Lists AS209369 as a direct member |
RPKI from rpki-client, validated 2026-10-12 12:10 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-12. Cross-check on bgp.he.net.