Routing security
AS23028 TEAM-CYMRU
Unclassified ARIN
Announcements
What this network originates
Every prefix observed with AS23028 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 38.229.33.0/24 | No ROA | IRR | 58 |
| 38.229.252.0/24 | No ROA | IRR | 58 |
| 68.22.187.0/24 | No ROA | IRR | 58 |
| 192.138.226.0/24 | No ROA | IRR | 58 |
| 203.28.18.0/24 | No ROA | IRR | 58 |
| 204.74.64.0/24 | No ROA | IRR | 58 |
| 216.31.0.0/18 | No ROA | IRR | 58 |
| 216.31.0.0/24 | No ROA | IRR covering | 58 |
| 216.31.1.0/24 | No ROA | IRR covering | 58 |
| 216.31.2.0/24 | No ROA | IRR covering | 58 |
| 216.31.3.0/24 | No ROA | IRR covering | 58 |
| 216.31.4.0/24 | No ROA | IRR covering | 58 |
| 216.31.6.0/24 | No ROA | IRR covering | 58 |
| 216.31.7.0/24 | No ROA | IRR covering | 58 |
| 216.31.8.0/24 | No ROA | IRR covering | 58 |
| 216.31.9.0/24 | No ROA | IRR covering | 58 |
| 216.31.12.0/24 | No ROA | IRR covering | 58 |
| 216.31.13.0/24 | No ROA | IRR covering | 58 |
| 216.31.14.0/24 | No ROA | IRR covering | 58 |
| 216.31.15.0/24 | No ROA | IRR covering | 58 |
| 216.31.17.0/24 | No ROA | IRR covering | 58 |
| 216.31.18.0/24 | No ROA | IRR covering | 58 |
| 216.31.20.0/24 | No ROA | IRR covering | 52 |
| 216.31.36.0/24 | No ROA | IRR covering | 52 |
| 216.31.37.0/24 | No ROA | IRR covering | 51 |
| 216.31.38.0/24 | No ROA | IRR covering | 52 |
| 216.31.39.0/24 | No ROA | IRR covering | 58 |
| 2604:8800::/32 | No ROA | IRR | 33 |
| 2604:8800::/47 | No ROA | IRR covering | 33 |
| 2604:8800:20::/48 | No ROA | IRR covering | 30 |
| 2604:8800:50::/47 | No ROA | IRR covering | 33 |
| 2604:8800:52::/48 | No ROA | IRR covering | 33 |
| 2604:8800:53::/48 | No ROA | IRR covering | 33 |
| 2604:8800:60::/48 | No ROA | IRR covering | 33 |
| 2604:8800:64::/48 | No ROA | IRR covering | 30 |
| 2604:8800:65::/48 | No ROA | IRR covering | 29 |
| 2604:8800:66::/48 | No ROA | IRR covering | 29 |
| 2604:8800:67::/48 | No ROA | IRR covering | 33 |
| 2604:8800:68::/48 | No ROA | IRR covering | 30 |
| 2604:8800:69::/48 | No ROA | IRR covering | 29 |
| 2604:8800:70::/48 | No ROA | IRR covering | 29 |
| 2604:8800:71::/48 | No ROA | IRR covering | 34 |
| 2620:0:6b0::/48 | No ROA | IRR | 33 |
| 216.31.19.0/24 | RPKI valid | IRR | 54 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS23028 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 216.31.10.0/24 | /24 | ARIN |
| 216.31.19.0/24 | /24 | ARIN |
| 216.31.33.0/24 | /24 | ARIN |
| 216.31.34.0/23 | /23 | ARIN |
| 2001:470:43f::/48 | /48 | ARIN |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS174 | Cogent Communications, LLC | Declared | not observed |
| AS2914 | NTT America, Inc. | Declared | Observed |
| AS6461 | Zayo Bandwidth | Declared | Observed |
| AS6939 | Hurricane Electric LLC | Declared | Observed |
| AS7018 | AT&T Enterprises, LLC | Declared | not observed |
| AS8220 | COLT Technology Services Group Limited | Declared | not observed |
| AS14618 | Amazon.com, Inc. | Declared | not observed |
| AS16509 | Amazon.com, Inc. | Declared | Observed |
| AS23352 | DEFT.COM | Declared | Observed |
| AS3257 | GTT Communications Inc. | not declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS23028 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 216.31.10.0/24 | ARIN | Team Cymru Inc. | MNT-TEAMC-1 | 2026-10-06 | Not announced |
| 216.31.10.0/24 | RADB | Amazon EC2 Prefix | MAINT-AS16509 | 2026-10-06 | Not announced |
| 216.31.33.0/24 | ARIN | Team Cymru Inc. | MNT-TEAMC-1 | 2026-06-22 | Not announced |
| 216.31.34.0/23 | ARIN | Team Cymru Inc. | MNT-TEAMC-1 | 2026-06-22 | Not announced |
| 2001:470:2c1::/48 | ARIN | NET-2001-470-2c1---48-AS23028 | MNT-HURC | 2024-06-01 | Not announced |
| 2001:470:43f::/48 | ARIN | Hurricane Electric LLC | MNT-HURC | 2025-04-11 | Not announced |
| 2604:8800:9::/48 | RADB | Team Cymru | MAINT-AS23028 | 2023-11-13 | Not announced |
| 38.229.33.0/24 | RADB | Team Cymru | MAINT-AS23028 | 2023-11-13 | Announced |
| 38.229.252.0/24 | RADB | Team Cymru | MAINT-AS23028 | 2023-11-13 | Announced |
| 68.22.187.0/24 | ALTDB | LLNW cust | MAINT-LLNW | 2009-08-14 | Announced |
| 68.22.187.0/24 | RADB | Team Cymru | MAINT-AS23028 | 2023-11-13 | Announced |
| 192.138.226.0/24 | ALTDB | LLNW cust | MAINT-LLNW | 2009-09-09 | Announced |
| 192.138.226.0/24 | RADB | Team Cymru | MAINT-AS23028 | 2023-11-13 | Announced |
| 203.28.18.0/24 | ALTDB | LLNW cust | MAINT-LLNW | 2009-09-09 | Announced |
| 203.28.18.0/24 | RADB | The University of Queensland (140915) | MAINT-AS2764 | 2023-11-13 | Announced |
| 204.74.64.0/24 | ALTDB | LLNW cust | MAINT-LLNW | 2009-09-09 | Announced |
| 204.74.64.0/24 | RADB | Team Cymru | MAINT-AS23028 | 2023-11-13 | Announced |
| 216.31.0.0/18 | ARIN | TC Wide Allocation | MNT-TEAMC-1 | 2026-08-27 | Announced |
| 216.31.0.0/18 | RADB | Team Cymru | MAINT-AS23028 | 2023-11-13 | Announced |
| 216.31.19.0/24 | ARIN | Team Cymru Inc. | MNT-TEAMC-1 | 2026-09-04 | Announced |
| 216.31.19.0/24 | RADB | Amazon EC2 Prefix | MAINT-AS16509 | 2026-09-08 | Announced |
| 2604:8800::/32 | RADB | Team Cymru | MAINT-AS23028 | 2023-11-13 | Announced |
| 2620:0:6b0::/48 | RADB | Team Cymru | MAINT-AS23028 | 2023-11-13 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS23028 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-GBLX | RIPE | Lists AS23028 as a direct member |
AS-GTTCUST | RIPE | Lists AS23028 as a direct member |
AS-GTTCUST6 | RIPE | Lists AS23028 as a direct member |
AS-HURRICANE | RADB | Lists AS23028 as a direct member |
AS-HURRICANEV6 | RADB | Lists AS23028 as a direct member |
AS-LIMELIGHT-CUST | ALTDB | Lists AS23028 as a direct member |
AS-RCN-CE-PEERS | RADB | Lists AS23028 as a direct member |
AS-SUMMITHQ-CUSTOMERS | ARIN | Lists AS23028 as a direct member |
AS-SUMMITHQ-TESTING | ARIN | Lists AS23028 as a direct member |
AS-TRANSROUTE-SPEC | RIPE | Lists AS23028 as a direct member |
AS-WEBWERKS-1 | RADB | Lists AS23028 as a direct member |
AS12897:AS-AMSIX-RS-PEERS | RIPE | Lists AS23028 as a direct member |
AS134783:AS-ALL | APNIC | Lists AS23028 as a direct member |
AS16509:AS-AMAZON-BYO-US-EAST-2 | ARIN | Lists AS23028 as a direct member |
AS23028:AS-CONE | RADB | Lists AS23028 as a direct member |
AS2764:AS-CUSTOMERS:AS9822 | RADB | Lists AS23028 as a direct member |
AS2764:AS-TRANSIT:AS9822 | RADB | Lists AS23028 as a direct member |
AS3303:AS-SWCMPEERS | RIPE | Lists AS23028 as a direct member |
AS33495:AS-MEMBERS | ALTDB | Lists AS23028 as a direct member |
AS6777:AS-AMS-IX-RS | RIPE | Lists AS23028 as a direct member |
AS6777:AS-AMS-IX-RS-V6 | RIPE | Lists AS23028 as a direct member |
AS680:AS-AMSIX-RS-PEERS | RIPE | Lists AS23028 as a direct member |
RPKI from rpki-client, validated 2026-10-13 12:16 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-13. Cross-check on bgp.he.net.