asn.dev

Routing security

AS209453 GANDI-LIVEDNS AS for LiveDNS Anycast servers

Hosting RIPE

RPKI valid 83% 10 of 12 announcements
RPKI invalid 0 none
No ROA 2 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 14 authorising this AS

Announcements

What this network originates

12 observed

Every prefix observed with AS209453 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2604:3400:abca::/48No ROAIRR31
2604:3400:abcc::/48No ROAIRR31
173.246.98.0/24RPKI validIRR51
173.246.100.0/24RPKI validIRR56
213.167.229.0/24RPKI validIRR51
213.167.230.0/24RPKI validIRR56
217.70.179.0/24RPKI validIRR51
217.70.187.0/24RPKI validIRR56
2001:4b98:aaaa::/48RPKI validIRR32
2001:4b98:aaab::/48RPKI validIRR32
2001:4b98:abcb::/48RPKI validIRR31
2604:3400:aaac::/48RPKI validIRR32

RPKI · ROAs

Route origin authorisations

14 ROAs

Signed statements by address holders that AS209453 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
173.246.98.0/24/24ARIN
173.246.100.0/24/24ARIN
173.246.101.0/24/24ARIN
173.246.108.0/24/24ARIN
213.167.229.0/24/24RIPENCC
213.167.230.0/24/24RIPENCC
217.70.179.0/24/24RIPENCC
217.70.187.0/24/24RIPENCC
2001:4b98:aaaa::/48/48RIPENCC
2001:4b98:aaab::/48/48RIPENCC
2001:4b98:abcb::/48/48RIPENCC
2604:3400:dc1::/48/48ARIN
2604:3400:dc3::/48/48ARIN
2604:3400:aaac::/48/48ARIN

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

27 objects · 5 not announced

Route objects naming AS209453 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
173.246.96.0/24ARINGandi as1MNT-GANDI-22019-04-18Not announced
173.246.101.0/24ARINGandi US Inc.MNT-GANDI-22019-05-21Not announced
173.246.108.0/24ARINGandi to1MNT-GANDI-22019-02-20Not announced
2604:3400:dc3::/48ARINGandi US Inc.MNT-GANDI-22019-03-06Not announced
2604:3400:ac01::/48ARINGandi US Inc.MNT-GANDI-22019-05-21Not announced
173.246.98.0/24ARINA-DNSMNT-GANDI-32020-10-08Announced
173.246.98.0/24RADBCustomer routeMAINT-AS362362026-06-08Announced
173.246.100.0/24ARINGandi LiveDNS AMNT-GANDI-22019-02-20Announced
173.246.100.0/24RADBCustomer RouteMAINT-AS362362026-06-08Announced
213.167.229.0/24RADBCustomer routeMAINT-AS362362026-06-08Announced
213.167.229.0/24RIPEB-DNSGANDI-NOC2020-10-08Announced
213.167.230.0/24RADBCustomer routeMAINT-AS362362026-06-08Announced
213.167.230.0/24RIPEGANDI is an ICANN accredited registrarGANDI-NOC2019-02-14Announced
217.70.179.0/24RADBCustomer routeMAINT-AS362362026-06-08Announced
217.70.179.0/24RIPEC-DNSGANDI-NOC2020-10-08Announced
217.70.187.0/24RADBCustomer routeMAINT-AS362362026-06-08Announced
217.70.187.0/24RIPEGANDI is an ICANN accredited registrarGANDI-NOC2019-02-15Announced
2001:4b98:aaaa::/48RADBCustomer routeMAINT-AS362362026-06-08Announced
2001:4b98:aaaa::/48RIPEGANDI is an ICANN accredited registrarGANDI-NOC2019-02-15Announced
2001:4b98:aaab::/48RADBCustomer routeMAINT-AS362362026-06-08Announced
2001:4b98:aaab::/48RIPEGANDI is an ICANN accredited registrarGANDI-NOC2019-06-06Announced
2001:4b98:abcb::/48RADBCustomer routeMAINT-AS362362026-06-08Announced
2001:4b98:abcb::/48RIPEB-DNSGANDI-NOC2020-10-08Announced
2604:3400:aaac::/48ARINGandi US Inc.MNT-GANDI-22019-03-06Announced
2604:3400:aaac::/48RADBCustomer routeMAINT-AS362362026-06-08Announced
2604:3400:abca::/48ARINA-DNSMNT-GANDI-32020-10-08Announced
2604:3400:abcc::/48ARINc.dns.gandi.netMNT-GANDI-22023-10-26Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS209453 directly show who expects to carry it.

AS-setWhereRelationship
AS-BEZEQINTRIPELists AS209453 as a direct member
AS-BSORIPELists AS209453 as a direct member
AS-E1-AUTOMATION-CUSTOMERRADBLists AS209453 as a direct member
AS-EQUINIX-MERADBLists AS209453 as a direct member
AS-EQUINIX-SYRADBLists AS209453 as a direct member
AS-GANDIRIPELists AS209453 as a direct member
AS-H1P-EURADBLists AS209453 as a direct member
AS-INTERACTIVE3DRIPELists AS209453 as a direct member
AS-IXREACHRIPELists AS209453 as a direct member
AS-KDDCUSTOMER2RADBLists AS209453 as a direct member
AS-NETACTUATERADBLists AS209453 as a direct member
AS-PACKETRADBLists AS209453 as a direct member
AS-RCN-CE-PEERSRADBLists AS209453 as a direct member
AS-SUPERLOOP-CUSTRADBLists AS209453 as a direct member
AS-TELSTRA-INTL-CUSTOMERSRADBLists AS209453 as a direct member
AS1221:AS-CUSTOMERSAPNICLists AS209453 as a direct member
AS16559:AS-PEERSRADBLists AS209453 as a direct member
AS20473:AS-VULTRRADBLists AS209453 as a direct member
AS3303:AS-SWCMPEERSRIPELists AS209453 as a direct member
AS33495:AS-MEMBERSALTDBLists AS209453 as a direct member
AS60068:AS-DATAPACKET-CUSTOMERS:AS-GANDIRIPELists AS209453 as a direct member
AS7545:AS-TPGN-CUSTOMERSRADBLists AS209453 as a direct member

RPKI from rpki-client, validated 2026-10-13 12:16 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-13. Cross-check on bgp.he.net.