Routing security

AS28686 AVENIQ-AS

Unclassified RIPE

RPKI valid 84% 26 of 31 announcements

RPKI invalid 0 none

No ROA 5 not covered by any ROA

IRR registered 100% 0 missing · 0 other origin

ROAs 26 authorising this AS

Announcements

What this network originates

31 observed

Every prefix observed with AS28686 as its origin, checked against RPKI and the IRR. Problems sort first.

Prefix	RPKI	IRR	Vantage points
2a0a:6bc0::/29	No ROA	IRR	32
2a0b:3380::/29	No ROA	IRR	30
93.191.248.0/21	No ROA	IRR	52
185.184.116.0/22	No ROA	IRR	50
185.196.104.0/22	No ROA	IRR	54
2a05:14c0::/29	RPKI valid	IRR	29
2a06:d9c0::/29	RPKI valid	IRR	32
93.191.255.0/24	RPKI valid	IRR	56
103.55.232.0/22	RPKI valid	IRR	54
159.168.0.0/16	RPKI valid	IRR	52
159.168.0.0/24	RPKI valid	IRR	52
159.168.1.0/24	RPKI valid	IRR	50
159.168.7.0/24	RPKI valid	IRR	50
159.168.12.0/24	RPKI valid	IRR	50
159.168.14.0/24	RPKI valid	IRR	50
159.168.24.0/23	RPKI valid	IRR	50
159.168.112.0/20	RPKI valid	IRR	51
159.168.136.0/23	RPKI valid	IRR	50
159.168.138.0/24	RPKI valid	IRR	50
159.168.140.0/24	RPKI valid	IRR	50
159.168.141.0/24	RPKI valid	IRR	50
159.168.144.0/21	RPKI valid	IRR	52
159.168.152.0/21	RPKI valid	IRR	51
185.94.144.0/22	RPKI valid	IRR	50
185.130.140.0/22	RPKI valid	IRR	54
193.135.109.0/24	RPKI valid	IRR	50
193.222.224.0/20	RPKI valid	IRR	54
193.222.240.0/24	RPKI valid	IRR	54
194.147.176.0/20	RPKI valid	IRR	51
194.147.192.0/22	RPKI valid	IRR	50
2001:67c:638::/48	RPKI valid	IRR	32

RPKI · ROAs

Route origin authorisations

26 ROAs

Signed statements by address holders that AS28686 may originate these prefixes, up to the maximum length shown.

Prefix	Max length	Trust anchor
93.191.255.0/24	/24	RIPENCC
103.55.232.0/22	/22	RIPENCC
159.168.0.0/16	/16	RIPENCC
159.168.0.0/24	/24	RIPENCC
159.168.1.0/24	/24	RIPENCC
159.168.7.0/24	/24	RIPENCC
159.168.12.0/24	/24	RIPENCC
159.168.14.0/24	/24	RIPENCC
159.168.24.0/23	/23	RIPENCC
159.168.112.0/20	/20	RIPENCC
159.168.136.0/23	/23	RIPENCC
159.168.138.0/24	/24	RIPENCC
159.168.140.0/24	/24	RIPENCC
159.168.141.0/24	/24	RIPENCC
159.168.144.0/21	/21	RIPENCC
159.168.152.0/21	/21	RIPENCC
185.94.144.0/22	/22	RIPENCC
185.130.140.0/22	/22	RIPENCC
193.135.109.0/24	/24	RIPENCC
193.222.224.0/20	/20	RIPENCC
193.222.240.0/24	/24	RIPENCC
194.147.176.0/20	/20	RIPENCC
194.147.192.0/22	/22	RIPENCC
2001:67c:638::/48	/48	RIPENCC
2a05:14c0::/29	/29	RIPENCC
2a06:d9c0::/29	/29	RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

31 objects · 0 not announced

Route objects naming AS28686 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

Prefix	Source	Description	Maintainer	Changed	Routing
93.191.248.0/21	RIPE	—	`AVQ-MNT`	2024-10-16	Announced
93.191.255.0/24	RIPE	—	`AVQ-MNT`	2026-10-07	Announced
103.55.232.0/22	RIPE	—	`AVQ-MNT`	2025-11-05	Announced
159.168.0.0/16	RIPE	Aveniq AG, Switzerland	`AVQ-MNT`	2024-10-16	Announced
159.168.0.0/24	RIPE	Aveniq AG, Switzerland	`AVQ-MNT`	2024-10-16	Announced
159.168.1.0/24	RIPE	—	`AVQ-MNT`	2024-10-16	Announced
159.168.7.0/24	RIPE	—	`AVQ-MNT`	2024-10-16	Announced
159.168.12.0/24	RIPE	Axpo Group, Switzerland	`AVQ-MNT`	2024-10-16	Announced
159.168.14.0/24	RIPE	Axpo Group, Switzerland	`AVQ-MNT`	2024-10-16	Announced
159.168.24.0/23	RIPE	—	`AVQ-MNT`	2024-10-16	Announced
159.168.112.0/20	RIPE	Axpo Group, Switzerland	`AVQ-MNT`	2024-10-16	Announced
159.168.136.0/23	RIPE	—	`AVQ-MNT`	2024-10-16	Announced
159.168.138.0/24	RIPE	—	`AVQ-MNT`	2024-10-16	Announced
159.168.140.0/24	RIPE	—	`AVQ-MNT`	2024-10-16	Announced
159.168.141.0/24	RIPE	SWICA Healthcare Organisation, Switzerland	`AVQ-MNT`	2024-10-16	Announced
159.168.144.0/21	RIPE	Aveniq AG Customer, Switzerland	`AVQ-MNT`	2024-10-16	Announced
159.168.152.0/21	RIPE	Aveniq AG Customer, Switzerland	`AVQ-MNT`	2024-10-16	Announced
185.94.144.0/22	RIPE	Aveniq AG	`AVQ-MNT`	2024-10-16	Announced
185.130.140.0/22	RIPE	—	`AVQ-MNT`	2025-11-05	Announced
185.184.116.0/22	RIPE	Kantonsspital Baden, Switzerland	`CH-KSB-1-MNT`	2017-01-04	Announced
185.196.104.0/22	RIPE	—	`CH-MOEBEL-PFISTER-1-MNT`	2026-04-10	Announced
193.135.109.0/24	RIPE	Kernkraftwerk Leibstadt AG	`AVQ-MNT`	2024-10-16	Announced
193.222.224.0/20	RIPE	—	`AVQ-MNT`	2025-11-05	Announced
193.222.240.0/24	RIPE	—	`AVQ-MNT`	2025-11-05	Announced
194.147.176.0/20	RIPE	—	`AVQ-MNT`	2024-10-16	Announced
194.147.192.0/22	RIPE	—	`CH-GENERALI-MNT`	2024-10-16	Announced
2001:67c:638::/48	RIPE	—	`AVQ-MNT`	2025-11-05	Announced
2a05:14c0::/29	RIPE	Aveniq AG, Switzerland	`AVQ-MNT`	2024-10-16	Announced
2a06:d9c0::/29	RIPE	—	`AVQ-MNT`	2025-11-05	Announced
2a0a:6bc0::/29	RIPE	—	`CH-MOEBEL-PFISTER-1-MNT`	2026-04-10	Announced
2a0b:3380::/29	RIPE	Kantonsspital Baden, Switzerland	`CH-KSB-1-MNT`	2017-01-04	Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS28686 directly show who expects to carry it.

AS-set	Where	Relationship
`AS-LITECOM`	RIPE	Lists AS28686 as a direct member
`AS-TELSTRA-INTL-CUSTOMERS`	RADB	Lists AS28686 as a direct member
`AS13335:AS-CUSTOMERS`	ARIN	Lists AS28686 as a direct member
`AS3303:AS-SWCMLOCAL`	RIPE	Lists AS28686 as a direct member
`AS8220:AS-COLTCH`	RIPE	Lists AS28686 as a direct member

RPKI from rpki-client, validated 2026-10-16 12:09 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-16. Cross-check on bgp.he.net.