Routing security
AS211993 SOVERIN
Hosting LACNIC
Announcements
What this network originates
Every prefix observed with AS211993 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 2.57.58.0/24 | RPKI valid | IRR | 51 |
| 2a10:de80::/48 | RPKI valid | IRR covering | 30 |
| 2a10:de80:1::/48 | RPKI valid | IRR covering | 30 |
| 2a10:de80:b12a::/48 | RPKI valid | IRR covering | 30 |
| 2a10:de80:b12c::/48 | RPKI valid | IRR covering | 30 |
| 2a10:de80:b101::/48 | RPKI valid | IRR covering | 30 |
| 185.233.34.0/24 | RPKI valid | IRR | 51 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS211993 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 2.57.58.0/24 | /24 | RIPENCC |
| 185.233.34.0/24 | /24 | RIPENCC |
| 2a10:de80::/32 | /32 | RIPENCC |
| 2a10:de80::/48 | /48 | RIPENCC |
| 2a10:de80:1::/48 | /48 | RIPENCC |
| 2a10:de80:b000::/36 | /48 | RIPENCC |
| 2a10:de80:b101::/48 | /48 | RIPENCC |
| 2a10:de80:b12a::/48 | /48 | RIPENCC |
| 2a10:de80:b12c::/48 | /48 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS35133 | Eranium B.V. | Declared | Observed |
| AS57866 | Fusix Networks B.V. | Declared | Observed |
| AS211588 | Innovation Harbor B.V. | Declared | not observed |
| AS6939 | Hurricane Electric LLC | not declared | Observed |
| AS50304 | Blix Solutions AS | not declared | Observed |
| AS12859 | BIT BV | not declared | Observed |
| AS24482 | SG.GS | not declared | Observed |
| AS56655 | Gigahost AS | not declared | Observed |
| AS20764 | CJSC RASCOM | not declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS211993 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 2a10:de80::/32 | RIPE | — | LIR-NL-SOVERIN-1-MNT | 2021-04-06 | Not announced |
| 2.57.58.0/24 | RIPE | — | CLDIN-MNT | 2024-12-17 | Announced |
| 185.233.34.0/24 | RIPE | — | LIR-NL-SOVERIN-1-MNT | 2021-04-06 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS211993 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-RETN-ACTUAL-V4 | RIPE | Lists AS211993 as a direct member |
AS12859:AS-BIT | RIPE | Lists AS211993 as a direct member |
AS206221:AS-ERA-IX-AMSTERDAM | RIPE | Lists AS211993 as a direct member |
AS35133:AS-ERANIUM-CUSTOMERS | RIPE | Lists AS211993 as a direct member |
AS57866:AS-FUSIX | RIPE | Lists AS211993 as a direct member |
RPKI from rpki-client, validated 2026-10-21 12:00 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-21. Cross-check on bgp.he.net.