Routing security
AS215859 HETZNER-CLOUD4-AS
Hosting RIPE Content
Announcements
What this network originates
Every prefix observed with AS215859 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 2a01:4ff:200::/40 | RPKI valid | IRR | 34 |
| 5.223.0.0/16 | RPKI valid | IRR | 58 |
| 5.223.0.0/17 | RPKI valid | IRR covering | 16 |
| 5.223.8.0/21 | RPKI valid | IRR covering | 16 |
| 5.223.16.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.17.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.18.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.19.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.20.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.21.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.22.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.23.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.24.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.25.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.26.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.27.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.28.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.29.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.30.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.32.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.33.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.34.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.35.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.36.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.37.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.38.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.39.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.40.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.41.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.42.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.43.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.44.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.45.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.46.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.47.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.48.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.49.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.50.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.51.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.52.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.53.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.54.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.55.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.56.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.57.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.58.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.59.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.60.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.61.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.62.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.63.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.64.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.65.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.66.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.67.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.68.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.69.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.70.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.71.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.72.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.73.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.74.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.75.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.76.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.77.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.78.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.79.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.80.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.81.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.82.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.83.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.84.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.85.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.86.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.87.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.88.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.89.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.90.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.91.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.92.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.93.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.94.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.95.0/24 | RPKI valid | IRR covering | 15 |
| 5.223.128.0/17 | RPKI valid | IRR covering | 16 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS215859 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 5.223.0.0/16 | /24 | RIPENCC |
| 2a01:4ff:200::/40 | /48 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS1299 | Arelion Sweden AB | Declared | Observed |
| AS2914 | NTT America, Inc. | Declared | Observed |
| AS18106 | Viewqwest Pte Ltd | Declared | Observed |
| AS24482 | SG.GS | Declared | Observed |
| AS6939 | Hurricane Electric LLC | not declared | Observed |
| AS37989 | DCS1 Pte. Ltd. | not declared | Observed |
| AS38001 | NewMedia Express Pte Ltd | not declared | Observed |
| AS8966 | EMIRATES TELECOMMUNICATIONS GROUP COMPANY (ETISALAT GROUP) PJSC | not declared | Observed |
| AS17639 | Converge ICT Solutions Inc. | not declared | Observed |
| AS61292 | Blix Group AS | not declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS215859 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 5.223.0.0/16 | RIPE | HETZNER-DC | HOS-GUN | 2024-08-05 | Announced |
| 2a01:4ff:200::/40 | RIPE | — | HOS-GUN | 2024-07-01 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS215859 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-HETZNER:AS-HETZNER-CLOUD4 | PeeringDB | Declared by the operator as its own set |
AS-HETZNER:AS-HETZNER-CLOUD4 | RIPE | Lists AS215859 as a direct member |
AS-HURRICANE | RADB | Lists AS215859 as a direct member |
AS-HURRICANEV6 | RADB | Lists AS215859 as a direct member |
AS-SGGS | APNIC | Lists AS215859 as a direct member |
AS-TRANSROUTE-SPEC | RIPE | Lists AS215859 as a direct member |
AS18106:AS-TRANSIT | APNIC | Lists AS215859 as a direct member |
AS18106:AS-TRANSIT | RADB | Lists AS215859 as a direct member |
RPKI from rpki-client, validated 2026-10-20 11:55 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-20. Cross-check on bgp.he.net.