asn.dev

Routing security

AS28725 CETIN-AS

Residential RIPE

RPKI valid 91% 10 of 11 announcements
RPKI invalid 0 none
No ROA 1 not covered by any ROA
IRR registered 91% 1 missing · 0 other origin
ROAs 9 authorising this AS

Announcements

What this network originates

11 observed

Every prefix observed with AS28725 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
136.238.226.0/24No ROANo IRR51
2a0b:bb40::/32RPKI validIRR30
2a07:1f40::/29RPKI validIRR30
80.78.150.0/24RPKI validIRR52
85.162.0.0/15RPKI validIRR53
85.162.0.0/16RPKI validIRR52
85.163.0.0/16RPKI validIRR52
185.218.92.0/23RPKI validIRR52
194.50.64.0/22RPKI validIRR52
194.147.12.0/22RPKI validIRR52
212.96.180.0/24RPKI validIRR52

RPKI · ROAs

Route origin authorisations

9 ROAs

Signed statements by address holders that AS28725 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
80.74.32.0/20/24RIPENCC
80.78.150.0/24/24RIPENCC
85.162.0.0/15/24RIPENCC
185.218.92.0/23/23RIPENCC
194.50.64.0/22/22RIPENCC
194.147.12.0/22/24RIPENCC
212.96.180.0/24/24RIPENCC
2a07:1f40::/29/32RIPENCC
2a0b:bb40::/32/32RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

17 objects · 7 not announced

Route objects naming AS28725 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
80.74.32.0/20RIPECETINCZCTNET-MNT2016-02-29Not announced
80.74.32.0/21RIPECETINCZCTNET-MNT2016-02-29Not announced
80.74.40.0/21RIPECETINCZCTNET-MNT2016-02-29Not announced
85.162.0.0/17RIPECETINCETIN-MNT2017-01-12Not announced
85.162.128.0/17RIPECETINCETIN-MNT2017-01-12Not announced
85.163.0.0/17RIPECETINCETIN-MNT2017-01-12Not announced
85.163.128.0/17RIPECETINCETIN-MNT2017-01-12Not announced
80.78.150.0/24RIPE—MNET-IP-MNT2026-04-27Announced
85.162.0.0/15RIPECETINCETIN-MNT2016-03-07Announced
85.162.0.0/16RIPECETINCETIN-MNT2017-01-12Announced
85.163.0.0/16RIPECETINCETIN-MNT2017-01-12Announced
185.218.92.0/23RIPE—CETIN-MNT2017-09-01Announced
194.50.64.0/22RIPECzech Army | IPv4 routeCETIN-MNT2020-12-30Announced
194.147.12.0/22RIPE—CETIN-MNT2018-09-26Announced
212.96.180.0/24RIPE—MNET-IP-MNT2025-10-01Announced
2a07:1f40::/29RIPECETINCETIN-MNT2016-02-29Announced
2a0b:bb40::/32RIPE—CETIN-MNT2017-09-01Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS28725 directly show who expects to carry it.

AS-setWhereRelationship
AS-BTN-CUSTOMERSRADBLists AS28725 as a direct member
AS-CESNET-NIX-PEERSRIPELists AS28725 as a direct member
AS-CETINRIPELists AS28725 as a direct member
AS-CTIOLRIPELists AS28725 as a direct member
AS-CTNETRIPELists AS28725 as a direct member
AS-MANDA-DECIX-PEERS-V4RIPELists AS28725 as a direct member
AS-MANDA-DECIX-PEERS-V6RIPELists AS28725 as a direct member
AS-MANDA-LINX-PEERS-V4RIPELists AS28725 as a direct member
AS-MANDA-LINX-PEERS-V6RIPELists AS28725 as a direct member
AS203462:AS-NVC-DECIX_FRA_RSRIPELists AS28725 as a direct member
AS24971:AS-MAI-NIX-PEERRIPELists AS28725 as a direct member
AS42000:AS-NIXCZ-PEERINGSRIPELists AS28725 as a direct member
AS6695:AS-DECIX-FRA-CONNECTEDRIPELists AS28725 as a direct member
AS6695:AS-DECIX-FRA-RSRIPELists AS28725 as a direct member
AS6695:AS-DECIX-FRA-RS-V6RIPELists AS28725 as a direct member
AS6777:AS-AMS-IX-RSRIPELists AS28725 as a direct member
AS6777:AS-AMS-IX-RS-V6RIPELists AS28725 as a direct member
AS680:AS-AMSIX-RS-PEERSRIPELists AS28725 as a direct member

RPKI from rpki-client, validated 2026-10-15 12:09 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-15. Cross-check on bgp.he.net.