asn.dev

Routing security

AS219121 CLOUFINITY - CLOUFINITY Sp. z o.o.

Unclassified RIPE Content

RPKI valid 75% 3 of 4 announcements
RPKI invalid 1 dropped by validating networks
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 3 authorising this AS

Announcements

What this network originates

4 observed

Every prefix observed with AS219121 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a14:1ec7:8001::/48RPKI invalid · lengthIRR covering2
2a14:1ec7:8000::/40RPKI validIRR34
81.168.87.0/24RPKI validIRR55
191.44.85.0/24RPKI validIRR54

RPKI · ROAs

Route origin authorisations

3 ROAs

Signed statements by address holders that AS219121 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
81.168.87.0/24/24RIPENCC
191.44.85.0/24/24RIPENCC
2a14:1ec7:8000::/40/40RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

7 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS174Cogent Communications, LLCDeclaredObserved
AS5617Orange Polska Spolka AkcyjnaDeclarednot observed
AS6939Hurricane Electric LLCDeclaredObserved
AS9002RETN LimitedDeclaredObserved
AS49559A-Systems Sp. z o.o.Declarednot observed
AS50263A-Systems Sp. z o.o.DeclaredObserved
AS62403PletX GmbHDeclaredObserved
AS24482SG.GSnot declaredObserved
AS208972GIBIRNET ILETISIM HIZMETLERI SANAYI VE TICARET LIMITED SIRKETInot declaredObserved
AS24748Atman Sp. z o.o.not declaredObserved
AS50673Serverius Holding B.V.not declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

4 objects · 0 not announced

Route objects naming AS219121 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
81.168.87.0/24RADBautogenMAINT-AS8342026-08-28Announced
191.44.85.0/24RADBautogenMAINT-AS8342026-10-13Announced
191.44.85.0/24RIPE—NETUTILS-MNT2026-10-13Announced
2a14:1ec7:8000::/40RIPE—CLOUFINITY-MNT2026-10-13Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS219121 directly show who expects to carry it.

AS-setWhereRelationship
AS219121:AS-CLOUFINITYPeeringDBDeclared by the operator as its own set
AS-DOMINIKARINLists AS219121 as a direct member
AS-DOMINIKRIPELists AS219121 as a direct member
AS-HURRICANEV6RADBLists AS219121 as a direct member
AS-RETN-ACTUAL-V4RIPELists AS219121 as a direct member
AS-RETN-ACTUAL-V6RIPELists AS219121 as a direct member
AS214481:AS-WCZAPKOWICZRIPELists AS219121 as a direct member
AS219121:AS-CLOUFINITYRIPELists AS219121 as a direct member
AS29535:AS-TPIXRIPELists AS219121 as a direct member
AS5617:AS-PL-TRANSITRIPELists AS219121 as a direct member

RPKI from rpki-client, validated 2026-10-29 12:01 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-29. Cross-check on bgp.he.net.