asn.dev

Routing security

AS2852 CESNET2

Education RIPE

RPKI valid 100% 27 of 27 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 31 authorising this AS

Announcements

What this network originates

27 observed

Every prefix observed with AS2852 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
78.128.128.0/17RPKI validIRR55
146.102.0.0/16RPKI validIRR55
147.32.0.0/16RPKI validIRR55
147.33.0.0/16RPKI validIRR55
147.228.0.0/16RPKI validIRR55
147.230.0.0/16RPKI validIRR55
147.231.0.0/16RPKI validIRR55
147.251.0.0/16RPKI validIRR55
158.194.0.0/16RPKI validIRR55
158.196.0.0/16RPKI validIRR55
160.216.0.0/16RPKI validIRR55
160.217.0.0/16RPKI validIRR55
185.8.160.0/22RPKI validIRR55
193.84.32.0/20RPKI validIRR55
193.84.53.0/24RPKI validIRR55
193.84.55.0/24RPKI validIRR55
193.84.56.0/21RPKI validIRR55
193.84.80.0/22RPKI validIRR55
193.84.104.0/22RPKI validIRR55
193.84.116.0/23RPKI validIRR55
193.84.160.0/20RPKI validIRR55
193.84.192.0/19RPKI validIRR55
193.84.192.0/20RPKI validIRR55
193.84.208.0/20RPKI validIRR55
195.113.0.0/16RPKI validIRR55
195.178.64.0/19RPKI validIRR55
2001:718::/29RPKI validIRR34

RPKI · ROAs

Route origin authorisations

31 ROAs

Signed statements by address holders that AS2852 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
78.128.128.0/17/24RIPENCC
146.102.0.0/16/24RIPENCC
147.32.0.0/16/24RIPENCC
147.33.0.0/16/24RIPENCC
147.228.0.0/16/24RIPENCC
147.230.0.0/16/24RIPENCC
147.231.0.0/16/24RIPENCC
147.251.0.0/16/24RIPENCC
158.194.0.0/16/24RIPENCC
158.196.0.0/16/24RIPENCC
160.216.0.0/16/24RIPENCC
160.217.0.0/16/24RIPENCC
185.8.160.0/22/24RIPENCC
192.108.128.0/24/24RIPENCC
193.84.32.0/20/24RIPENCC
193.84.53.0/24/24RIPENCC
193.84.55.0/24/24RIPENCC
193.84.56.0/21/24RIPENCC
193.84.80.0/22/24RIPENCC
193.84.104.0/22/24RIPENCC
193.84.116.0/23/24RIPENCC
193.84.160.0/20/24RIPENCC
193.84.192.0/19/24RIPENCC
193.84.192.0/20/24RIPENCC
193.84.208.0/20/24RIPENCC
194.50.26.0/23/24RIPENCC
195.113.0.0/16/24RIPENCC
195.178.64.0/19/24RIPENCC
217.69.96.0/20/24RIPENCC
2001:718::/29/48RIPENCC
2a00:5800::/32/48RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

9 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS174Cogent Communications, LLCDeclaredObserved
AS1853ACONETDeclaredObserved
AS2607Zdruzenie pouzivatelov Slovenskej akademickej datovej siete SANETDeclaredObserved
AS6461Zayo BandwidthDeclaredObserved
AS6762TELECOM ITALIA SPARKLE S.p.A.Declarednot observed
AS6939Hurricane Electric LLCDeclaredObserved
AS20965GEANT VerenigingDeclaredObserved
AS21320GEANT VerenigingDeclaredObserved
AS60606PRO-ZETA a.s.DeclaredObserved
AS34549meerfarbig GmbH & Co. KGnot declaredObserved
AS3333Reseaux IP Europeens Network Coordination Centre (RIPE NCC)not declaredObserved
AS24482SG.GSnot declaredObserved
AS29504Freenet Liberec, z.s.not declaredObserved
AS48362Stadtwerke Feldkirchnot declaredObserved
AS50300CustodianDC Limitednot declaredObserved
AS4657StarHub Ltdnot declaredObserved
AS20485Joint Stock Company TransTeleComnot declaredObserved
AS20766Association "Gitoyen"not declaredObserved
AS34927iFog GmbHnot declaredObserved
AS37100SEACOM Limitednot declaredObserved
AS37721Virtual Technologies & Solutionsnot declaredObserved
AS48185team.blue NVnot declaredObserved
AS50673Serverius Holding B.V.not declaredObserved
AS17639Converge ICT Solutions Inc.not declaredObserved
AS12552GlobalConnect ABnot declaredObserved
AS29632Netassist International EOODnot declaredObserved
AS213241TECHIT.BE SRLnot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

55 objects · 1 not announced

Route objects naming AS2852 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
2001:718::/32RIPECESNET6-TCZAS2852-MNT2010-04-08Not announced
78.128.128.0/17RADBauto-generated route object for 78.128.128.0/17MAINT-AS28522023-11-13Announced
78.128.128.0/17RIPECESNET-TCZAS2852-MNT2007-06-15Announced
146.102.0.0/16RADBauto-generated route object for 146.102.0.0/16MAINT-AS28522023-11-13Announced
146.102.0.0/16RIPEVSE-TCZAS2852-MNT2006-06-26Announced
147.32.0.0/16RADBCVUTMAINT-AS28522024-04-10Announced
147.32.0.0/16RIPE—TENCZ-RPKI-MNT2024-04-07Announced
147.33.0.0/16RADBVSCHTMAINT-AS28522024-04-10Announced
147.33.0.0/16RIPE—TENCZ-RPKI-MNT2024-04-07Announced
147.228.0.0/16RADBZCUMAINT-AS28522023-11-13Announced
147.228.0.0/16RIPEZCU-TCZAS2852-MNT2012-08-31Announced
147.230.0.0/16RADBTULMAINT-AS28522024-04-10Announced
147.230.0.0/16RIPE—TENCZ-RPKI-MNT2024-04-07Announced
147.231.0.0/16RADBCASMAINT-AS28522024-04-10Announced
147.231.0.0/16RIPE—TENCZ-RPKI-MNT2024-04-07Announced
147.251.0.0/16RADBauto-generated route object for 147.251.0.0/16MAINT-AS28522023-11-13Announced
147.251.0.0/16RIPEMUNI-TCZAS2852-MNT2006-06-26Announced
158.194.0.0/16RADBauto-generated route object for 158.194.0.0/16MAINT-AS28522023-11-13Announced
158.194.0.0/16RIPEUPOL-TCZAS2852-MNT2006-06-26Announced
158.196.0.0/16RADBauto-generated route object for 158.196.0.0/16MAINT-AS28522023-11-13Announced
158.196.0.0/16RIPEVSB-TCZAS2852-MNT2006-06-26Announced
160.216.0.0/16RADBUNOBMAINT-AS28522024-04-10Announced
160.216.0.0/16RIPE—TENCZ-RPKI-MNT2024-04-07Announced
160.217.0.0/16RADBJCUMAINT-AS28522024-04-10Announced
160.217.0.0/16RIPE—TENCZ-RPKI-MNT2024-04-07Announced
185.8.160.0/22RADBCESNET z.s.p.o.MAINT-AS28522023-11-13Announced
185.8.160.0/22RIPECESNET-TCZAS2852-MNT2016-05-02Announced
193.84.32.0/20RADBauto-generated route object for 193.84.32.0/20MAINT-AS28522023-11-13Announced
193.84.32.0/20RIPECZU-T34CZAS2852-MNT2013-12-12Announced
193.84.53.0/24RADBCUNI-PI1-TCZMAINT-AS28522023-11-13Announced
193.84.53.0/24RIPECUNI-PI1-TCZAS2852-MNT2013-04-17Announced
193.84.55.0/24RADBCUNI-PI2-TCZMAINT-AS28522023-11-13Announced
193.84.55.0/24RIPECUNI-PI2-TCZAS2852-MNT2013-04-17Announced
193.84.56.0/21RADBCUNI-PI2-TCZMAINT-AS28522023-11-13Announced
193.84.56.0/21RIPECUNI-PI2-TCZAS2852-MNT2013-04-17Announced
193.84.80.0/22RADBTEST-NETMAINT-AS28522023-11-13Announced
193.84.80.0/22RIPETEST-NET-TCZAS2852-MNT2013-05-07Announced
193.84.104.0/22RADBCzech Technical UniversityMAINT-AS28522023-11-13Announced
193.84.104.0/22RIPESFA-CTUAS2852-MNT2024-08-01Announced
193.84.116.0/23RADBCAVMAINT-AS28522023-11-13Announced
193.84.116.0/23RIPEInstitute of Chemical Process Fundamentals of the CAS, v.v.i.AS2852-MNT2016-06-09Announced
193.84.160.0/20RADBauto-generated route object for 193.84.160.0/20MAINT-AS28522023-11-13Announced
193.84.160.0/20RIPENRI-T34CZAS2852-MNT2006-06-26Announced
193.84.192.0/19RADBauto-generated route object for 193.84.192.0/19MAINT-AS28522023-11-13Announced
193.84.192.0/19RIPEOPF_SLU-T34CZAS2852-MNT2013-05-30Announced
193.84.192.0/20RADBOPF_SLUMAINT-AS28522024-04-10Announced
193.84.192.0/20RIPE—TENCZ-RPKI-MNT2024-04-07Announced
193.84.208.0/20RADBOPF_SLUMAINT-AS28522024-04-10Announced
193.84.208.0/20RIPE—TENCZ-RPKI-MNT2024-04-07Announced
195.113.0.0/16RADBauto-generated route object for 195.113.0.0/16MAINT-AS28522023-11-13Announced
195.113.0.0/16RIPECESNET-TCZAS2852-MNT2006-06-26Announced
195.178.64.0/19RADBauto-generated route object for 195.178.64.0/19MAINT-AS28522023-11-13Announced
195.178.64.0/19RIPECESNET-T34CZAS2852-MNT2006-06-26Announced
2001:718::/29RADBCZ-TEN-34-20010521MAINT-AS28522026-03-17Announced
2001:718::/29RIPE—AS2852-MNT2022-02-26Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS2852 directly show who expects to carry it.

AS-setWhereRelationship
AS-43413_NT-NIXRIPELists AS2852 as a direct member
AS-CESNET-FENIXRIPELists AS2852 as a direct member
AS-CESNET6RIPELists AS2852 as a direct member
AS-EBONERIPELists AS2852 as a direct member
AS-HURRICANEV6RADBLists AS2852 as a direct member
AS-MANDA-AMSIX-PEERS-V4RIPELists AS2852 as a direct member
AS-MANDA-AMSIX-PEERS-V6RIPELists AS2852 as a direct member
AS-MANDA-DECIX-PEERS-V4RIPELists AS2852 as a direct member
AS-MANDA-DECIX-PEERS-V6RIPELists AS2852 as a direct member
AS-SCHERINGNRNSRIPELists AS2852 as a direct member
AS-TO2-NIX-PEERRIPELists AS2852 as a direct member
AS1200:AS-AMS-IX-PEERSRIPELists AS2852 as a direct member
AS24971:AS-MAI-NIX-PEERRIPELists AS2852 as a direct member
AS25151:AS-AMS-IX-PEERSRIPELists AS2852 as a direct member
AS2852:AS-CESNETRIPELists AS2852 as a direct member
AS2852:AS-CESNET-NIX-FENIXRIPELists AS2852 as a direct member
AS29075:AS-PEERS:AS-AMS-IXRIPELists AS2852 as a direct member
AS3303:AS-SWCMPEERSRIPELists AS2852 as a direct member
AS42000:AS-NIXCZ-PEERINGSRIPELists AS2852 as a direct member
AS43190:AS-AMSIX-PEERSRIPELists AS2852 as a direct member
AS49685:AS-PEERS-AMSIXRIPELists AS2852 as a direct member
AS49820:AS-AMS-IX-PEERSRIPELists AS2852 as a direct member
AS6695:AS-DECIX-FRA-CONNECTEDRIPELists AS2852 as a direct member
AS6695:AS-DECIX-FRA-RSRIPELists AS2852 as a direct member
AS6695:AS-DECIX-FRA-RS-V6RIPELists AS2852 as a direct member
AS6777:AS-AMS-IX-RSRIPELists AS2852 as a direct member
AS6777:AS-AMS-IX-RS-SETSRIPELists AS2852 as a direct member
AS6777:AS-AMS-IX-RS-SETS-V6RIPELists AS2852 as a direct member
AS6777:AS-AMS-IX-RS-V6RIPELists AS2852 as a direct member
AS8218:AS-AMSIX-RSRIPELists AS2852 as a direct member
AS8218:AS-PEERSRIPELists AS2852 as a direct member
AS8251:AS-NIX-PEERINGSRIPELists AS2852 as a direct member

RPKI from rpki-client, validated 2026-10-13 12:16 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-13. Cross-check on bgp.he.net.