asn.dev

Routing security

AS22062 GEOSTAR

Unclassified ARIN

RPKI valid 80% 8 of 10 announcements
RPKI invalid 0 none
No ROA 2 not covered by any ROA
IRR registered 90% 1 missing · 0 other origin
ROAs 5 authorising this AS

Announcements

What this network originates

10 observed

Every prefix observed with AS22062 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
74.207.216.0/24No ROANo IRR53
207.58.192.0/24No ROAIRR52
135.84.84.0/22RPKI validIRR57
135.84.85.0/24RPKI validIRR covering57
162.217.132.0/22RPKI validIRR50
162.217.132.0/24RPKI validIRR covering57
162.217.133.0/24RPKI validIRR covering51
162.217.134.0/24RPKI validIRR covering57
162.217.135.0/24RPKI validIRR covering57
199.96.152.0/22RPKI validIRR57

RPKI · ROAs

Route origin authorisations

5 ROAs

Signed statements by address holders that AS22062 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
135.84.84.0/22/24ARIN
162.217.132.0/22/24ARIN
199.96.152.0/22/24ARIN
2001:470:5e4::/48/48ARIN
2605:8500::/32/48ARIN

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

5 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS174Cogent Communications, LLCDeclaredObserved
AS6461Zayo BandwidthDeclarednot observed
AS6939Hurricane Electric LLCDeclaredObserved
AS11696Fusion, LLCDeclaredObserved
AS19009OneClevelandDeclaredObserved
AS1299Arelion Sweden ABnot declaredObserved
AS20205Amplex Electric, Inc.not declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

10 objects · 3 not announced

Route objects naming AS22062 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
2001:470:5e4::/48ARINHurricane Electric LLCMNT-HURC2026-07-11Not announced
2605:8500::/32ARINGeoStar, LLC.MNT-GL2026-06-26Not announced
2605:8500::/32RADBGeoStar IPv6MAINT-AS220622023-11-13Not announced
135.84.84.0/22ARINGeoStar, LLC.MNT-GL2026-06-26Announced
135.84.84.0/22RADBGeoStarMAINT-AS220622024-07-08Announced
162.217.132.0/22ARINGeoStar, LLC.MNT-GL2026-06-26Announced
162.217.132.0/22RADBGEOSTARMAINT-AS220622023-11-13Announced
199.96.152.0/22ARINGeoStar, LLC.MNT-GL2026-06-26Announced
199.96.152.0/22RADBGeoStarMAINT-AS220622024-07-08Announced
207.58.192.0/24RADBLeased BlockMAINT-AS220622025-09-06Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS22062 directly show who expects to carry it.

AS-setWhereRelationship
AS-19009-ASSOCIATEDRADBLists AS22062 as a direct member
AS-FUSIONRADBLists AS22062 as a direct member
AS-HURRICANERADBLists AS22062 as a direct member
AS-TRANSROUTE-SPECRIPELists AS22062 as a direct member
AS-XOARINLists AS22062 as a direct member
AS-XO-BARINLists AS22062 as a direct member
AS22062:AS-ALLRADBLists AS22062 as a direct member

RPKI from rpki-client, validated 2026-10-17 12:17 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, collected 2026-10-17. Cross-check on bgp.he.net.