Routing security
AS212317 HETZNER-CLOUD3-AS
Hosting RIPE Content
Announcements
What this network originates
Every prefix observed with AS212317 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 2a01:4ff:100::/40 | RPKI valid | IRR | 29 |
| 5.78.0.0/16 | RPKI valid | IRR | 52 |
| 5.78.8.0/21 | RPKI valid | IRR covering | 52 |
| 5.78.16.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.17.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.18.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.19.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.20.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.21.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.22.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.23.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.24.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.25.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.26.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.27.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.28.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.29.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.30.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.31.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.40.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.41.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.42.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.43.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.44.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.45.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.46.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.47.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.48.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.49.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.50.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.51.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.52.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.53.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.54.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.55.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.56.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.57.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.58.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.59.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.60.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.61.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.62.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.63.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.64.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.65.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.66.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.67.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.68.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.69.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.70.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.71.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.72.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.73.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.74.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.75.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.76.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.77.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.78.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.79.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.80.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.81.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.82.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.83.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.84.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.85.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.86.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.87.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.88.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.89.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.90.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.91.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.92.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.93.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.94.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.95.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.96.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.97.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.98.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.99.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.100.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.101.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.102.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.103.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.104.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.105.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.106.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.107.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.108.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.109.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.110.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.111.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.112.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.113.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.114.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.115.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.116.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.117.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.118.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.119.0/24 | RPKI valid | IRR covering | 51 |
| 5.78.120.0/24 | RPKI valid | IRR covering | 51 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS212317 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 2.30.0.0/17 | /24 | RIPENCC |
| 5.78.0.0/16 | /24 | RIPENCC |
| 2a01:4ff:100::/40 | /48 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS1299 | Arelion Sweden AB | Declared | Observed |
| AS3356 | Level 3 Parent, LLC | Declared | Observed |
| AS6453 | TATA COMMUNICATIONS (AMERICA) INC | Declared | Observed |
| AS20055 | Wholesail networks LLC | Declared | not observed |
| AS6939 | Hurricane Electric LLC | not declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS212317 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 2.30.0.0/17 | RIPE | HETZNER-DC | HOS-GUN | 2026-09-09 | Not announced |
| 5.78.0.0/16 | RIPE | HETZNER-DC | HOS-GUN | 2022-06-09 | Announced |
| 2a01:4ff:100::/40 | RIPE | HETZNER-IPv6-BLK | HOS-GUN | 2022-10-10 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS212317 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-HETZNER-CLOUD3 | PeeringDB | Declared by the operator as its own set |
AS-HETZNER-CLOUD3 | RIPE | Lists AS212317 as a direct member |
AS-WHOLESAIL | ARIN | Lists AS212317 as a direct member |
RPKI from rpki-client, validated 2026-10-12 12:10 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-12. Cross-check on bgp.he.net.