Routing security
AS21320 GEANT_IAS_VRF
Unclassified RIPE
Announcements
What this network originates
Every prefix observed with AS21320 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 83.97.88.0/21 | RPKI valid | IRR | 53 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS21320 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 83.97.88.0/21 | /21 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS174 | Cogent Communications, LLC | Declared | Observed |
| AS2603 | NORDUnet | Declared | Observed |
| AS3356 | Level 3 Parent, LLC | Declared | Observed |
| AS6939 | Hurricane Electric LLC | not declared | Observed |
| AS9002 | RETN Limited | not declared | Observed |
| AS3216 | PJSC "Vimpelcom" | not declared | Observed |
| AS3303 | Swisscom (Schweiz) AG | not declared | Observed |
| AS48185 | team.blue NV | not declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS21320 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 83.97.88.0/21 | RIPE | GEANT IAS VRF | DANTE-MNT | 2017-07-04 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS21320 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-BIX | RIPE | Lists AS21320 as a direct member |
AS-BIX-V6 | RIPE | Lists AS21320 as a direct member |
AS-GEANT-EUPEER | RIPE | Lists AS21320 as a direct member |
AS-GEANT-GWS | RIPE | Lists AS21320 as a direct member |
AS-GEANTNRN | RIPE | Lists AS21320 as a direct member |
AS-GRIX-ATH | RIPE | Lists AS21320 as a direct member |
AS-GRIX-ATH-RS | RIPE | Lists AS21320 as a direct member |
AS-RIS-RRC01 | RIPE | Lists AS21320 as a direct member |
AS-RIS-RRC03 | RIPE | Lists AS21320 as a direct member |
AS-RIS-RRC04 | RIPE | Lists AS21320 as a direct member |
AS-RIS-RRC05 | RIPE | Lists AS21320 as a direct member |
AS-RIS-RRC10 | RIPE | Lists AS21320 as a direct member |
AS-RIS-RRC12 | RIPE | Lists AS21320 as a direct member |
AS-SIX-MEMBERS | RIPE | Lists AS21320 as a direct member |
AS-VIX-MEMBERS | RIPE | Lists AS21320 as a direct member |
AS136968:AS-COM-IX-ROUTE-SERVER | APNIC | Lists AS21320 as a direct member |
AS1930:AS-UPSTREAMS | RIPE | Lists AS21320 as a direct member |
AS20717:AS-DECIX-MRS-CONNECTED | RIPE | Lists AS21320 as a direct member |
AS20717:AS-DECIX-MRS-RS | RIPE | Lists AS21320 as a direct member |
AS20717:AS-DECIX-MRS-RS-V6 | RIPE | Lists AS21320 as a direct member |
AS3303:AS-SWCMPEERS | RIPE | Lists AS21320 as a direct member |
AS48793:AS-DECIX-MAD-CONNECTED | RIPE | Lists AS21320 as a direct member |
AS48793:AS-DECIX-MAD-RS | RIPE | Lists AS21320 as a direct member |
AS48793:AS-DECIX-MAD-RS-V6 | RIPE | Lists AS21320 as a direct member |
AS49820:AS-AMS-IX-PEERS | RIPE | Lists AS21320 as a direct member |
AS6695:AS-DECIX-FRA-CONNECTED | RIPE | Lists AS21320 as a direct member |
AS6695:AS-DECIX-FRA-RS | RIPE | Lists AS21320 as a direct member |
AS6695:AS-DECIX-FRA-RS-V6 | RIPE | Lists AS21320 as a direct member |
RPKI from rpki-client, validated 2026-10-12 12:10 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-12. Cross-check on bgp.he.net.