asn.dev

Routing security

AS214723 HEIJKOOP-AS

Unclassified RIPE Educational/Research

RPKI valid 100% 4 of 4 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 5 authorising this AS

Announcements

What this network originates

4 observed

Every prefix observed with AS214723 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a0a:6044:ba00::/48RPKI validIRR33
2a0a:6044:ba02::/47RPKI validIRR33
2a0e:fd45:2e80::/48RPKI validIRR34
2a06:9f41:100::/40RPKI validIRR34

RPKI · ROAs

Route origin authorisations

5 ROAs

Signed statements by address holders that AS214723 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
2a06:9f41:100::/40/40RIPENCC
2a0a:6044:ba00::/40/40RIPENCC
2a0a:6044:ba00::/48/48RIPENCC
2a0a:6044:ba02::/47/48RIPENCC
2a0e:fd45:2e80::/48/48RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

5 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS34872Sarah Rossius trading as Servperso SystemsDeclarednot observed
AS44103The Mastermind Holding B.V.Declarednot observed
AS58057Securebit AGDeclarednot observed
AS209533iFog GmbHDeclarednot observed
AS215085Maik Polman trading as PixelHostingDeclaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

7 objects · 3 not announced

Route objects naming AS214723 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
2a0a:6044:ba00::/40RIPEHYEHOST Customer IPv6 AllocationHYEHOST-MNT2025-06-22Not announced
2a0a:6044:ba02::/48RIPE—HYEHOST-MNT2026-06-13Not announced
2a0a:6044:ba03::/48RIPE—HYEHOST-MNT2026-06-13Not announced
2a06:9f41:100::/40RIPE—PIXELHOSTING-MNT2025-09-29Announced
2a0a:6044:ba00::/48RIPE—HYEHOST-MNT2026-06-13Announced
2a0a:6044:ba02::/47RIPE—HYEHOST-MNT2026-06-13Announced
2a0e:fd45:2e80::/48RIPE—RICK-MNT2024-06-11Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS214723 directly show who expects to carry it.

AS-setWhereRelationship
AS214723:AS-MARLIESPeeringDBDeclared by the operator as its own set
AS-4IXPRIPELists AS214723 as a direct member
AS-4IXP-RSRIPELists AS214723 as a direct member
AS-4IXPV6RIPELists AS214723 as a direct member
AS-HURRICANEV6RADBLists AS214723 as a direct member
AS-SBIX-RSRIPELists AS214723 as a direct member
AS204830:AS-IPOACRIPELists AS214723 as a direct member
AS209533:AS-BGPTUNNELRIPELists AS214723 as a direct member
AS214723:AS-MARLIESRIPELists AS214723 as a direct member
AS34872:AS-DOWNSTREAM-NLALTDBLists AS214723 as a direct member
AS34872:AS-DOWNSTREAM-NLRIPELists AS214723 as a direct member
AS44103:AS-BAKKER-IT-AUTO-DOWNSTREAMSRIPELists AS214723 as a direct member

RPKI from rpki-client, validated 2026-10-12 12:10 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-12. Cross-check on bgp.he.net.