Routing security
AS21217 SAFEHOSTNET Colocation center in Geneva
Hosting RIPE
Announcements
What this network originates
Every prefix observed with AS21217 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 80.80.224.0/21 | RPKI valid | IRR | 55 |
| 80.80.232.0/22 | RPKI valid | IRR | 55 |
| 80.80.236.0/23 | RPKI valid | IRR | 55 |
| 80.80.238.0/24 | RPKI valid | IRR | 51 |
| 83.97.120.0/22 | RPKI valid | IRR | 55 |
| 91.199.255.0/24 | RPKI valid | IRR | 51 |
| 185.169.92.0/23 | RPKI valid | IRR | 51 |
| 185.169.95.0/24 | RPKI valid | IRR | 55 |
| 185.247.8.0/22 | RPKI valid | IRR | 55 |
| 185.247.9.0/24 | RPKI valid | IRR covering | 52 |
| 185.254.152.0/24 | RPKI valid | IRR | 51 |
| 193.72.147.0/24 | RPKI valid | IRR | 55 |
| 194.88.9.0/24 | RPKI valid | IRR | 55 |
| 2001:40c0::/48 | RPKI valid | IRR | 36 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS21217 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 80.80.224.0/21 | /21 | RIPENCC |
| 80.80.232.0/22 | /22 | RIPENCC |
| 80.80.236.0/23 | /23 | RIPENCC |
| 80.80.238.0/24 | /24 | RIPENCC |
| 83.97.120.0/22 | /22 | RIPENCC |
| 91.199.255.0/24 | /24 | RIPENCC |
| 185.169.92.0/23 | /23 | RIPENCC |
| 185.169.95.0/24 | /24 | RIPENCC |
| 185.247.8.0/22 | /22 | RIPENCC |
| 185.247.9.0/24 | /24 | RIPENCC |
| 185.254.152.0/24 | /24 | RIPENCC |
| 193.72.147.0/24 | /24 | RIPENCC |
| 194.88.9.0/24 | /24 | RIPENCC |
| 2001:40c0::/48 | /48 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.
IRR
Registered route objects
Route objects naming AS21217 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 80.80.224.0/24 | RIPE | — | SHNET-MNT | 2023-07-11 | Not announced |
| 80.80.225.0/24 | RIPE | — | SHNET-MNT | 2023-07-11 | Not announced |
| 80.80.226.0/24 | RIPE | — | SHNET-MNT | 2023-07-11 | Not announced |
| 80.80.227.0/24 | RIPE | — | SHNET-MNT | 2023-07-11 | Not announced |
| 80.80.228.0/24 | RIPE | — | SHNET-MNT | 2023-07-11 | Not announced |
| 80.80.229.0/24 | RIPE | — | SHNET-MNT | 2023-07-11 | Not announced |
| 80.80.230.0/24 | RIPE | — | SHNET-MNT | 2023-07-11 | Not announced |
| 80.80.231.0/24 | RIPE | — | SHNET-MNT | 2023-07-11 | Not announced |
| 80.80.232.0/24 | RIPE | — | SHNET-MNT | 2023-07-11 | Not announced |
| 80.80.233.0/24 | RIPE | — | SHNET-MNT | 2023-07-11 | Not announced |
| 80.80.234.0/24 | RIPE | — | SHNET-MNT | 2023-07-11 | Not announced |
| 80.80.235.0/24 | RIPE | — | SHNET-MNT | 2023-07-11 | Not announced |
| 80.80.236.0/24 | RIPE | — | SHNET-MNT | 2023-07-11 | Not announced |
| 80.80.237.0/24 | RIPE | — | SHNET-MNT | 2023-07-11 | Not announced |
| 185.169.92.0/22 | RIPE | CH-SAFEHOST | SHNET-MNT | 2016-09-28 | Not announced |
| 185.254.152.0/22 | RIPE | CH-SAFEHOST | SHNET-MNT | 2022-01-13 | Not announced |
| 185.254.153.0/24 | RIPE | — | SHNET-MNT | 2023-04-12 | Not announced |
| 185.254.154.0/24 | RIPE | — | SHNET-MNT | 2023-04-12 | Not announced |
| 185.254.155.0/24 | RIPE | — | SHNET-MNT | 2023-04-12 | Not announced |
| 2001:40c0::/32 | RIPE | Safe Host SA LIR allocation | SHNET-MNT | 2011-02-28 | Not announced |
| 2001:40c0::/40 | RIPE | Safe Host 1st block | SHNET-MNT | 2011-02-28 | Not announced |
| 2a00:77c0::/48 | RIPE | HOIST GROUP IPv6 Network via Safehost (AS21217) | SHNET-MNT | 2018-02-26 | Not announced |
| 80.80.224.0/21 | RIPE | CH-SAFEHOST | SHNET-MNT | 2023-07-17 | Announced |
| 80.80.232.0/22 | RIPE | CH-SAFEHOST | SHNET-MNT | 2023-07-17 | Announced |
| 80.80.236.0/23 | RIPE | CH-SAFEHOST | SHNET-MNT | 2023-07-17 | Announced |
| 80.80.238.0/24 | RIPE | — | SHNET-MNT | 2023-07-11 | Announced |
| 83.97.120.0/22 | RIPE | HOISTGROUP Network via Safehost (AS21217) | SHNET-MNT | 2017-08-23 | Announced |
| 91.199.255.0/24 | RIPE | 2L Multimedia NET # 1 | SHNET-MNT | 2016-10-04 | Announced |
| 185.169.92.0/23 | RIPE | CH-SAFEHOST | SHNET-MNT | 2024-03-25 | Announced |
| 185.169.95.0/24 | RIPE | CH-SAFEHOST | SHNET-MNT | 2024-03-25 | Announced |
| 185.247.8.0/22 | RIPE | CH-SAFEHOST | SHNET-MNT | 2022-01-13 | Announced |
| 185.254.152.0/24 | RIPE | — | SHNET-MNT | 2023-04-12 | Announced |
| 193.72.147.0/24 | RIPE | CH-SAFEHOST-ELCA | SHNET-MNT | 2014-08-14 | Announced |
| 194.88.9.0/24 | RIPE | CH-MJT-NET | SHNET-MNT | 2014-02-17 | Announced |
| 2001:40c0::/48 | RIPE | Safe Host Int | SHNET-MNT | 2011-02-28 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS21217 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-CABLECOM | RIPE | Lists AS21217 as a direct member |
AS-HURRICANEV6 | RADB | Lists AS21217 as a direct member |
AS-IP-MAX:AS-F5 | RIPE | Lists AS21217 as a direct member |
AS-SAFEHOST | RIPE | Lists AS21217 as a direct member |
AS-SIG-TELECOM-CUST | RIPE | Lists AS21217 as a direct member |
AS-SIG-TELECOM-V6-CUST | RIPE | Lists AS21217 as a direct member |
AS-TERACOMDK | RIPE | Lists AS21217 as a direct member |
AS-TRANSROUTE-SPEC | RIPE | Lists AS21217 as a direct member |
AS1221:AS-CUSTOMERS | APNIC | Lists AS21217 as a direct member |
AS25091:AS-DOWNSTREAMS | RIPE | Lists AS21217 as a direct member |
AS3303:AS-SWCMLOCAL | RIPE | Lists AS21217 as a direct member |
RPKI from rpki-client, validated 2026-10-16 12:09 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-16. Cross-check on bgp.he.net.