asn.dev

Routing security

AS211321 NLNETLABS

Unclassified RIPE

RPKI valid 57% 4 of 7 announcements
RPKI invalid 3 dropped by validating networks
No ROA 0 not covered by any ROA
IRR registered 86% 1 missing · 0 other origin
ROAs 8 authorising this AS

Announcements

What this network originates

7 observed

Every prefix observed with AS211321 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a04:b906::/48RPKI invalidNo IRR1
2a04:b907::/48RPKI invalid · lengthIRR3
185.49.142.0/24RPKI invalid · lengthIRR6
2a04:b904::/48RPKI validIRR33
2a04:b904:7200::/40RPKI validIRR33
2a04:b907::/47RPKI validIRR30
185.49.142.0/23RPKI validIRR52

RPKI · ROAs

Route origin authorisations

8 ROAs

Signed statements by address holders that AS211321 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
185.49.142.0/23/23RIPENCC
185.49.143.0/24/24RIPENCC
192.228.88.0/23/23ARIN
192.228.91.0/24/24ARIN
2a04:b902::/48/48RIPENCC
2a04:b904::/48/48RIPENCC
2a04:b904:7200::/40/40RIPENCC
2a04:b907::/47/47RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

16 objects · 10 not announced

Route objects naming AS211321 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
192.228.88.0/23ARINThis prefix is announced in the context of a RPKI Beacon.MNT-ISC-942024-05-31Not announced
192.228.91.0/24ARINThis prefix is announced in the context of a RPKI Beacon.MNT-ISC-942024-05-31Not announced
203.119.21.0/24APNICReseaux IP Europeens Network Coordination CentreMAINT-NL-RIPE-NCC2022-07-15Not announced
203.119.22.0/23APNICReseaux IP Europeens Network Coordination CentreMAINT-NL-RIPE-NCC2022-07-13Not announced
203.119.22.0/23RADBVultr Customer RouteMAINT-AS204732023-11-13Not announced
2001:ddb::/48APNICReseaux IP Europeens Network Coordination CentreMAINT-NL-RIPE-NCC2022-07-15Not announced
2001:ddb::/48RADBVultr Customer RouteMAINT-AS204732026-09-26Not announced
2a04:b905::/32RADBVultr Customer RouteMAINT-AS204732023-11-13Not announced
2a04:b907:4::/47RADBVultr Customer RouteMAINT-AS204732023-11-13Not announced
2a04:b907:4::/47RIPE—NLNETLABS-MNT2022-05-30Not announced
185.49.142.0/23RADBVultr Customer RouteMAINT-AS204732023-11-13Announced
185.49.142.0/24RIPE—NLNETLABS-MNT2021-12-22Announced
2a04:b904::/48RIPE—NLNETLABS-MNT2021-06-17Announced
2a04:b904:7200::/40RIPE—NLNETLABS-MNT2025-11-18Announced
2a04:b907::/47RADBVultr Customer RouteMAINT-AS204732023-11-13Announced
2a04:b907::/48RIPE—NLNETLABS-MNT2021-12-22Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS211321 directly show who expects to carry it.

AS-setWhereRelationship
AS-NLNETLABSRIPELists AS211321 as a direct member
AS-RETN-ACTUAL-V6RIPELists AS211321 as a direct member
AS20473:AS-VULTRRADBLists AS211321 as a direct member
AS8283:AS-COLOCLUERIPELists AS211321 as a direct member

RPKI from rpki-client, validated 2026-10-22 12:01 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-22. Cross-check on bgp.he.net.