asn.dev

Routing security

AS21286 KPN-CORPORATE-MARKET

Unclassified RIPE

RPKI valid 96% 27 of 28 announcements
RPKI invalid 0 none
No ROA 1 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 28 authorising this AS

Announcements

What this network originates

28 observed

Every prefix observed with AS21286 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
158.67.0.0/16No ROAIRR51
2a02:2b50:ffff::/48RPKI validIRR30
2a03:4800::/40RPKI validIRR30
2a03:4800:100::/40RPKI validIRR30
2a07:3502:1120::/48RPKI validIRR30
80.79.96.0/20RPKI validIRR51
145.13.0.0/16RPKI validIRR51
145.15.0.0/22RPKI validIRR51
145.15.90.0/24RPKI validIRR51
145.15.92.0/22RPKI validIRR51
145.15.96.0/22RPKI validIRR51
145.222.0.0/16RPKI validIRR51
192.33.235.0/24RPKI validIRR51
192.33.238.0/24RPKI validIRR51
192.33.239.0/24RPKI validIRR51
192.35.133.0/24RPKI validIRR51
192.58.226.0/24RPKI validIRR51
192.58.227.0/24RPKI validIRR51
192.101.111.0/24RPKI validIRR51
192.101.112.0/24RPKI validIRR51
192.101.113.0/24RPKI validIRR51
193.176.216.0/23RPKI validIRR51
193.202.32.0/23RPKI validIRR51
194.104.32.0/24RPKI validIRR51
194.104.59.0/24RPKI validIRR51
199.88.208.0/24RPKI validIRR51
199.88.209.0/24RPKI validIRR51
2001:67c:5a0::/48RPKI validIRR30

RPKI · ROAs

Route origin authorisations

28 ROAs

Signed statements by address holders that AS21286 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
80.79.96.0/20/20RIPENCC
145.13.0.0/16/16RIPENCC
145.15.0.0/22/22RIPENCC
145.15.90.0/24/24RIPENCC
145.15.92.0/22/22RIPENCC
145.15.96.0/22/22RIPENCC
145.222.0.0/16/16RIPENCC
192.33.235.0/24/24RIPENCC
192.33.238.0/24/24RIPENCC
192.33.239.0/24/24RIPENCC
192.35.133.0/24/24RIPENCC
192.58.226.0/24/24RIPENCC
192.58.227.0/24/24RIPENCC
192.58.228.0/24/24RIPENCC
192.101.111.0/24/24RIPENCC
192.101.112.0/24/24RIPENCC
192.101.113.0/24/24RIPENCC
193.176.216.0/23/23RIPENCC
193.202.32.0/23/23RIPENCC
194.104.32.0/24/24RIPENCC
194.104.59.0/24/24RIPENCC
199.88.208.0/24/24RIPENCC
199.88.209.0/24/24RIPENCC
2001:67c:5a0::/48/48RIPENCC
2a02:2b50:ffff::/48/48RIPENCC
2a03:4800::/40/40RIPENCC
2a03:4800:100::/40/40RIPENCC
2a07:3502:1120::/48/48RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

31 objects · 3 not announced

Route objects naming AS21286 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
144.44.0.0/16RIPEKPN BVKPN-MNT2025-11-06Not announced
170.37.203.0/24RIPEKPN Corporate Market B.V. PI block 1 (Staples Europe BV)NL-STAPLES-1-MNT2018-08-14Not announced
192.58.228.0/24RIPEKPN Corporate MarketKPN-MNT2018-09-19Not announced
80.79.96.0/20RIPEKPN B.V.KPN-MNT2023-03-22Announced
145.13.0.0/16RIPEF&ITKPNCM-MNT2013-07-25Announced
145.15.0.0/22RIPEKPN Corporate Market B.V. PI block (Nederlandse Spoorwegen)KPNCM-MNT2012-03-09Announced
145.15.90.0/24RIPEKPN Corporate Market B.V. PI block (Nederlandse Spoorwegen)KPNCM-MNT2014-05-22Announced
145.15.92.0/22RIPEKPN Corporate Market B.V. PI block (Nederlandse Spoorwegen)KPNCM-MNT2013-06-27Announced
145.15.96.0/22RIPEKPN Corporate Market B.V. PI block (Nederlandse Spoorwegen)KPNCM-MNT2013-07-23Announced
145.222.0.0/16RIPEKPN Corporate Market B.V. PA blockKPNCM-MNT2012-03-08Announced
158.67.0.0/16RIPEGETRONICS-ICTOKPN-MNT2015-08-04Announced
192.33.235.0/24RIPEEuropean Data CentersKPN-MNT2015-08-04Announced
192.33.238.0/24RIPEEuropean Data CentersKPN-MNT2015-08-04Announced
192.33.239.0/24RIPEEuropean Data CentersKPN-MNT2015-08-04Announced
192.35.133.0/24RIPEEuropean Data CentersKPN-MNT2015-08-04Announced
192.58.226.0/24RIPEEuropean Data CentersKPN-MNT2015-08-04Announced
192.58.227.0/24RIPEEuropean Data CentersKPN-MNT2015-08-04Announced
192.101.111.0/24RIPEGetronics PinkRoccadeKPNCM-MNT2015-01-12Announced
192.101.112.0/24RIPEGetronics PinkRoccadeKPNCM-MNT2015-01-12Announced
192.101.113.0/24RIPEGetronics PinkRoccadeKPNCM-MNT2015-01-12Announced
193.176.216.0/23RIPEKPN Corporate Market B.V. PI block (Enexis)KPNCM-MNT2012-03-09Announced
193.202.32.0/23RIPEEuropean Data CentersKPN-MNT2015-08-04Announced
194.104.32.0/24RIPEGEMNETKPNCM-MNT2014-05-15Announced
194.104.59.0/24RIPEGEMNETKPNCM-MNT2014-05-15Announced
199.88.208.0/24RIPEEuropean Data CentersKPN-MNT2015-08-04Announced
199.88.209.0/24RIPEEuropean Data CentersKPN-MNT2015-08-04Announced
2001:67c:5a0::/48RIPENL-ENEXISKPNCM-MNT2014-05-14Announced
2a02:2b50:ffff::/48RIPEGEMNETKPNCM-MNT2017-10-17Announced
2a03:4800::/40RIPEKPN B.V.KPN-MNT2023-03-22Announced
2a03:4800:100::/40RIPEKPN B.V.KPN-MNT2023-03-22Announced
2a07:3502:1120::/48RIPE—KPN-MNT2020-01-28Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS21286 directly show who expects to carry it.

AS-setWhereRelationship
AS-EBONERIPELists AS21286 as a direct member
AS-HWNG-DOWNSTREAMSALTDBLists AS21286 as a direct member
AS-KPNCMRIPELists AS21286 as a direct member
AS-OPENPEERINGRIPELists AS21286 as a direct member
AS-XO-BARINLists AS21286 as a direct member
AS1136:AS-KPNNLRIPELists AS21286 as a direct member
AS209141:AS-RUCUSTRADBLists AS21286 as a direct member

RPKI from rpki-client, validated 2026-10-13 12:16 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-13. Cross-check on bgp.he.net.