asn.dev

Routing security

AS3327 CITIC CITIC Telecom CPC Netherlands B.V.

Unclassified RIPE

RPKI valid 96% 51 of 53 announcements
RPKI invalid 0 none
No ROA 2 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 52 authorising this AS

Announcements

What this network originates

53 observed

Every prefix observed with AS3327 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a01:80::/48No ROAIRR covering30
62.128.96.0/24No ROAIRR52
62.128.100.0/22RPKI validIRR52
62.128.100.0/23RPKI validIRR52
62.128.102.0/23RPKI validIRR52
62.128.104.0/21RPKI validIRR52
62.128.104.0/23RPKI validIRR52
62.128.106.0/24RPKI validIRR14
62.128.112.0/20RPKI validIRR52
62.128.113.0/24RPKI validIRR1
62.128.126.0/24RPKI validIRR52
87.98.0.0/18RPKI validIRR52
87.98.64.0/19RPKI validIRR52
87.98.124.0/22RPKI validIRR52
87.98.125.0/24RPKI validIRR52
89.219.0.0/24RPKI validIRR52
89.219.3.0/24RPKI validIRR52
89.219.128.0/22RPKI validIRR52
89.219.134.0/23RPKI validIRR52
89.219.136.0/21RPKI validIRR52
89.219.144.0/21RPKI validIRR52
89.219.152.0/23RPKI validIRR52
89.219.154.0/24RPKI validIRR52
89.219.161.0/24RPKI validIRR52
89.219.162.0/24RPKI validIRR52
89.219.168.0/24RPKI validIRR52
185.178.204.0/22RPKI validIRR52
195.222.0.0/19RPKI validIRR52
195.222.16.0/24RPKI validIRR51
212.27.224.0/19RPKI validIRR52
212.27.226.0/24RPKI validIRR52
212.27.227.0/24RPKI validIRR52
212.27.228.0/24RPKI validIRR52
212.27.231.0/24RPKI validIRR53
212.27.232.0/24RPKI validIRR52
212.27.252.0/22RPKI validIRR21
212.47.192.0/19RPKI validIRR52
212.49.0.0/19RPKI validIRR52
212.49.24.0/24RPKI validIRR52
212.65.85.0/24RPKI validIRR52
212.65.86.0/23RPKI validIRR52
217.28.240.0/20RPKI validIRR52
217.28.243.0/24RPKI validIRR14
217.28.244.0/22RPKI validIRR52
217.28.244.0/24RPKI validIRR52
217.28.245.0/24RPKI validIRR53
217.28.246.0/24RPKI validIRR52
217.28.247.0/24RPKI validIRR52
217.28.248.0/24RPKI validIRR1
217.28.249.0/24RPKI validIRR14
217.28.251.0/24RPKI validIRR1
2001:ad0::/32RPKI validIRR30
2001:ad0:5000::/40RPKI validIRR30

RPKI · ROAs

Route origin authorisations

52 ROAs

Signed statements by address holders that AS3327 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
62.128.100.0/22/22RIPENCC
62.128.100.0/23/23RIPENCC
62.128.102.0/23/23RIPENCC
62.128.104.0/21/21RIPENCC
62.128.104.0/23/23RIPENCC
62.128.106.0/24/24RIPENCC
62.128.112.0/20/20RIPENCC
62.128.113.0/24/24RIPENCC
62.128.126.0/24/24RIPENCC
87.98.0.0/18/18RIPENCC
87.98.64.0/19/19RIPENCC
87.98.124.0/22/22RIPENCC
87.98.125.0/24/24RIPENCC
89.219.0.0/24/24RIPENCC
89.219.3.0/24/24RIPENCC
89.219.128.0/22/22RIPENCC
89.219.134.0/23/23RIPENCC
89.219.136.0/21/21RIPENCC
89.219.144.0/21/21RIPENCC
89.219.152.0/23/23RIPENCC
89.219.154.0/24/24RIPENCC
89.219.161.0/24/24RIPENCC
89.219.162.0/24/24RIPENCC
89.219.168.0/24/24RIPENCC
185.178.204.0/22/22RIPENCC
195.222.0.0/19/19RIPENCC
195.222.16.0/24/24RIPENCC
212.27.224.0/19/19RIPENCC
212.27.226.0/24/24RIPENCC
212.27.227.0/24/24RIPENCC
212.27.228.0/24/24RIPENCC
212.27.231.0/24/24RIPENCC
212.27.232.0/24/24RIPENCC
212.27.252.0/22/22RIPENCC
212.47.192.0/19/19RIPENCC
212.49.0.0/19/19RIPENCC
212.49.24.0/24/24RIPENCC
212.65.85.0/24/24RIPENCC
212.65.86.0/23/23RIPENCC
217.28.240.0/20/20RIPENCC
217.28.243.0/24/24RIPENCC
217.28.244.0/22/22RIPENCC
217.28.244.0/24/24RIPENCC
217.28.245.0/24/24RIPENCC
217.28.246.0/24/24RIPENCC
217.28.247.0/24/24RIPENCC
217.28.248.0/24/24RIPENCC
217.28.249.0/24/24RIPENCC
217.28.251.0/24/24RIPENCC
217.28.254.0/24/24RIPENCC
2001:ad0::/32/32RIPENCC
2001:ad0:5000::/40/40RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

9 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS2914NTT America, Inc.DeclaredObserved
AS3216PJSC "Vimpelcom"DeclaredObserved
AS3257GTT Communications Inc.DeclaredObserved
AS3326PRIVATE JOINT STOCK COMPANY "DATAGROUP"Declarednot observed
AS6453TATA COMMUNICATIONS (AMERICA) INCDeclaredObserved
AS8359MTS PJSCDeclaredObserved
AS12741Netia SADeclarednot observed
AS59692IQWeb FZ-LLCDeclaredObserved
AS203790Strictera L.L.C-FZDeclaredObserved
AS6939Hurricane Electric LLCnot declaredObserved
AS34549meerfarbig GmbH & Co. KGnot declaredObserved
AS50304Blix Solutions ASnot declaredObserved
AS1836green.ch AGnot declaredObserved
AS17639Converge ICT Solutions Inc.not declaredObserved
AS24482SG.GSnot declaredObserved
AS37721Virtual Technologies & Solutionsnot declaredObserved
AS38001NewMedia Express Pte Ltdnot declaredObserved
AS42708Glesys ABnot declaredObserved
AS48362Stadtwerke Feldkirchnot declaredObserved
AS48185team.blue NVnot declaredObserved
AS50300CustodianDC Limitednot declaredObserved
AS3333Reseaux IP Europeens Network Coordination Centre (RIPE NCC)not declaredObserved
AS212024Marc Schmittnot declaredObserved
AS3741Dimension Datanot declaredObserved
AS4657StarHub Ltdnot declaredObserved
AS12552GlobalConnect ABnot declaredObserved
AS12779IT.Gate S.p.A.not declaredObserved
AS37100SEACOM Limitednot declaredObserved
AS3303Swisscom (Schweiz) AGnot declaredObserved
AS20766Association "Gitoyen"not declaredObserved
AS34927iFog GmbHnot declaredObserved
AS49673Truenetwork LLCnot declaredObserved
AS50673Serverius Holding B.V.not declaredObserved
AS33891Core-Backbone GmbHnot declaredObserved
AS1257Tele2 Sverige ABnot declaredObserved
AS29632Netassist International EOODnot declaredObserved
AS20473The Constant Company, LLCnot declaredObserved
AS34019Hivane Associationnot declaredObserved
AS57724DDOS-GUARD LTDnot declaredObserved
AS213241TECHIT.BE SRLnot declaredObserved
AS20485Joint Stock Company TransTeleComnot declaredObserved
AS29075IELO-LIAZO SERVICES SASnot declaredObserved
AS61049Exascale Ltdnot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

64 objects · 12 not announced

Route objects naming AS3327 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
89.219.0.0/22RIPE—AS3327-MNT2024-04-12Not announced
95.215.132.0/22RIPEHelmes ASAS3327-MNT2009-03-05Not announced
185.20.101.0/24RIPEPrimend OUAS3327-MNT2020-06-11Not announced
185.99.180.0/22RIPECSM BAKERY SOLUTIONS EMEA 2NETWORK_SERVICES12018-08-06Not announced
194.99.140.0/24RIPECSM BAKERY SOLUTIONSNETWORK_SERVICES12018-06-06Not announced
212.27.240.0/23RIPENorby LTAS3327-MNT2013-03-07Not announced
212.47.215.0/24RIPEData Telecom, 212.47.215.0/24AS3327-MNT2006-03-30Not announced
212.49.28.0/24RIPECITIC Telecom CPC (Norby) / [NO # 925044]AS3327-MNT2023-12-12Not announced
212.49.29.0/24RIPECITIC Telecom CPC (Norby)AS3327-MNT2023-12-12Not announced
212.65.88.0/24RIPECITIC Telecom CPC-SPB-RUAS3327-MNT2019-06-14Not announced
217.28.254.0/24RIPECITIC Telecom CPCAS3327-MNT2025-12-16Not announced
2a01:80::/32RIPECITIC Telecom CPC, 2a01:80::/32AS3327-MNT2019-06-14Not announced
62.128.96.0/24RIPE—AS3327-MNT2026-10-07Announced
62.128.100.0/22RIPECITIC Telecom CPC EstoniaAS3327-MNT2019-06-17Announced
62.128.100.0/23RIPECITIC Telecom CPC-MOW-MAR8AS3327-MNT2019-06-17Announced
62.128.102.0/23RIPECITIC Telecom CPC-PLAS3327-MNT2019-06-17Announced
62.128.104.0/21RIPECITIC Telecom CPC EstoniaAS3327-MNT2019-06-17Announced
62.128.104.0/23RIPECITIC Telecom CPC-RUAS3327-MNT2019-06-14Announced
62.128.106.0/24RIPECITIC Telecom CPC-LVAS3327-MNT2019-06-17Announced
62.128.112.0/20RIPECITIC Telecom CPC EstoniaAS3327-MNT2019-06-17Announced
62.128.113.0/24RIPECITIC Telecom CPC-LTAS3327-MNT2019-06-14Announced
62.128.126.0/24RIPECITIC Telecom CPC-MOW-M9AS3327-MNT2019-06-17Announced
87.98.0.0/18RIPECITIC Telecom CPC (Norby)AS3327-MNT2019-06-14Announced
87.98.64.0/19RIPECITIC Telecom CPC (Norby)AS3327-MNT2019-06-17Announced
87.98.124.0/22RIPE—AS3327-MNT2018-06-26Announced
87.98.125.0/24RIPE—AS3327-MNT2022-09-15Announced
89.219.0.0/24RIPECITIC Telecom CPCAS3327-MNT2025-12-18Announced
89.219.3.0/24RIPECITIC Telecom CPCAS3327-MNT2026-06-19Announced
89.219.128.0/22RIPECITIC Telecom CPC ClientsAS3327-MNT2019-06-14Announced
89.219.134.0/23RIPECITIC Telecom CPC ClientsAS3327-MNT2019-06-14Announced
89.219.136.0/21RIPECITIC Telecom CPC ClientsAS3327-MNT2019-06-17Announced
89.219.144.0/21RIPECITIC Telecom CPC ClientsAS3327-MNT2019-06-14Announced
89.219.152.0/23RIPECITIC Telecom CPC ClientsAS3327-MNT2019-06-14Announced
89.219.154.0/24RIPECITIC Telecom CPC ClientsAS3327-MNT2019-06-14Announced
89.219.161.0/24RIPECITIC Telecom CPC ClientsAS3327-MNT2019-06-14Announced
89.219.162.0/24RIPECITIC Telecom CPC ClientsAS3327-MNT2019-06-14Announced
89.219.168.0/24RIPECITIC Telecom CPC ClientsAS3327-MNT2019-06-17Announced
185.178.204.0/22RIPE—AS3327-MNT2018-10-26Announced
195.222.0.0/19RIPEData Telecom, 195.222.0/19AS3327-MNT2002-11-04Announced
195.222.16.0/24RIPE# 892069AS3327-MNT2022-08-15Announced
212.27.224.0/19RIPECITIC Telecom CPC (Norby)AS3327-MNT2019-06-14Announced
212.27.226.0/24RIPECITIC Telecom CPC-PL-WAWAS3327-MNT2019-06-14Announced
212.27.227.0/24RIPECITIC Telecom CPCAS3327-MNT2025-12-16Announced
212.27.228.0/24RIPECITIC Telecom CPC-HU-BUDAS3327-MNT2019-06-17Announced
212.27.231.0/24RIPECITIC Telecom CPC - TATA Internet IZOAS3327-MNT2025-12-18Announced
212.27.232.0/24RIPECITIC Telecom CPCAS3327-MNT2025-12-16Announced
212.27.252.0/22RIPECITIC Telecom CPCAS3327-MNT2026-10-16Announced
212.47.192.0/19RIPECITIC Telecom CPC, 212.47.192/19AS3327-MNT2019-06-14Announced
212.49.0.0/19RIPECITIC Telecom CPC (Norby)AS3327-MNT2019-06-14Announced
212.49.24.0/24RIPECITIC Telecom CPCAS3327-MNT2025-12-16Announced
212.65.85.0/24RIPE—AS3327-MNT2018-06-06Announced
212.65.86.0/23RIPECITIC Telecom CPC-SPB-RUAS3327-MNT2019-06-17Announced
217.28.240.0/20RIPECITIC Telecom CPC-NETAS3327-MNT2019-06-14Announced
217.28.243.0/24RIPECITIC Telecom CPC-LVAS3327-MNT2019-06-14Announced
217.28.244.0/22RIPECITIC Telecom CPC-RUAS3327-MNT2019-06-14Announced
217.28.244.0/24RIPECITIC Telecom CPC-RUAS3327-MNT2022-10-14Announced
217.28.245.0/24RIPECITIC Telecom CPC - TATA Internet IZOAS3327-MNT2022-10-14Announced
217.28.246.0/24RIPECITIC Telecom CPC-RUAS3327-MNT2022-10-14Announced
217.28.247.0/24RIPECITIC Telecom CPC-RU SPBAS3327-MNT2022-10-14Announced
217.28.248.0/24RIPECITIC Telecom CPC-LTAS3327-MNT2019-06-14Announced
217.28.249.0/24RIPECITIC Telecom CPC-LVAS3327-MNT2019-06-14Announced
217.28.251.0/24RIPECITIC Telecom CPC-LTAS3327-MNT2019-06-14Announced
2001:ad0::/32RIPECITIC Telecom CPC, 2001:ad0::/32AS3327-MNT2019-06-14Announced
2001:ad0:5000::/40RIPE—AS3327-MNT2018-06-26Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS3327 directly show who expects to carry it.

AS-setWhereRelationship
AS-ATRATO:AS-PEERSRIPELists AS3327 as a direct member
AS-CHTR-SYNCRADBLists AS3327 as a direct member
AS-CITICTEL-CPCRIPELists AS3327 as a direct member
AS-CITICTEL-CPC-AMSIXRIPELists AS3327 as a direct member
AS-CITICTEL-CPC-DERIPELists AS3327 as a direct member
AS-CITICTEL-CPC-DECIXRIPELists AS3327 as a direct member
AS-CITICTEL-CPC-EERIPELists AS3327 as a direct member
AS-CITICTEL-CPC-GUARDRIPELists AS3327 as a direct member
AS-CITICTEL-CPC-LIPTAMRIPELists AS3327 as a direct member
AS-CITICTEL-CPC-LIXRIPELists AS3327 as a direct member
AS-CITICTEL-CPC-LTRIPELists AS3327 as a direct member
AS-CITICTEL-CPC-LVRIPELists AS3327 as a direct member
AS-CITICTEL-CPC-MSK-IXRIPELists AS3327 as a direct member
AS-CITICTEL-CPC-NETNODRIPELists AS3327 as a direct member
AS-CITICTEL-CPC-PLRIPELists AS3327 as a direct member
AS-CITICTEL-CPC-PLIXRIPELists AS3327 as a direct member
AS-CITICTEL-CPC-RTIXRIPELists AS3327 as a direct member
AS-CITICTEL-CPC-RURIPELists AS3327 as a direct member
AS-CITICTEL-CPC-SERIPELists AS3327 as a direct member
AS-CITICTEL-CPC-TLLIXRIPELists AS3327 as a direct member
AS-CITICTEL-CPC-UKRIPELists AS3327 as a direct member
AS-CITICTEL-CPC:AS-CITICTEL-CPC-NLRIPELists AS3327 as a direct member
AS-DDITS:AS-PEERSRIPELists AS3327 as a direct member
AS-DDOS-GUARDRIPELists AS3327 as a direct member
AS-DOCLER:AS-PEERSRIPELists AS3327 as a direct member
AS-FINECOM-PEERS-AMSIXRIPELists AS3327 as a direct member
AS-FINECOM-PEERS-DECIXRIPELists AS3327 as a direct member
AS-GBLXRIPELists AS3327 as a direct member
AS-GREEN-IPV6-PEERSRIPELists AS3327 as a direct member
AS-GREEN-PEERSRIPELists AS3327 as a direct member
AS-GTTCUSTRIPELists AS3327 as a direct member
AS-GTTCUST6RIPELists AS3327 as a direct member
AS-ITS-CLIENTS-UARIPELists AS3327 as a direct member
AS-ITS-UAIXRIPELists AS3327 as a direct member
AS-KPNQWESTEERIPELists AS3327 as a direct member
AS-KQFR-INTLRIPELists AS3327 as a direct member
AS-LIECOMTEL-PEERSRIPELists AS3327 as a direct member
AS-LIXLVRIPELists AS3327 as a direct member
AS-LT-IXRIPELists AS3327 as a direct member
AS-MANDA-AMSIX-PEERS-V4RIPELists AS3327 as a direct member
AS-MANDA-AMSIX-PEERS-V6RIPELists AS3327 as a direct member
AS-MANDA-DECIX-PEERS-V4RIPELists AS3327 as a direct member
AS-MANDA-DECIX-PEERS-V6RIPELists AS3327 as a direct member
AS-MANDA-LINX-PEERS-V4RIPELists AS3327 as a direct member
AS-MANDA-LINX-PEERS-V6RIPELists AS3327 as a direct member
AS-MTURIPELists AS3327 as a direct member
AS-MTU2RIPELists AS3327 as a direct member
AS-NIC-LVRIPELists AS3327 as a direct member
AS-PLIX-CONNECTEDRIPELists AS3327 as a direct member
AS-RETN-ACTUAL-V4RIPELists AS3327 as a direct member
AS-RIS-RRC07RIPELists AS3327 as a direct member
AS-RR-SYNCRADBLists AS3327 as a direct member
AS-TELECOM-PEERSRIPELists AS3327 as a direct member
AS-TITANAMSIXRIPELists AS3327 as a direct member
AS-TITANDECIXRIPELists AS3327 as a direct member
AS1200:AS-AMS-IX-PEERSRIPELists AS3327 as a direct member
AS16243:AS-PEERS-AMSIXRIPELists AS3327 as a direct member
AS20932:AS-PEERINGRIPELists AS3327 as a direct member
AS3303:AS-SWCMPEERSRIPELists AS3327 as a direct member
AS3491:AS-CUSTOMERS-EURADBLists AS3327 as a direct member
AS34968:AS-AMS-IX-PEERSRIPELists AS3327 as a direct member
AS34968:AS-AMS-IX-V6-PEERSRIPELists AS3327 as a direct member
AS5413:AS-ROUTE-SERVER-DE-CIXRIPELists AS3327 as a direct member
AS59692:AS-IQWEBRIPELists AS3327 as a direct member
AS61180:AS-PEERS-AMSIXRIPELists AS3327 as a direct member
AS6695:AS-DECIX-FRA-CONNECTEDRIPELists AS3327 as a direct member
AS6695:AS-DECIX-FRA-RSRIPELists AS3327 as a direct member
AS6695:AS-DECIX-FRA-RS-V6RIPELists AS3327 as a direct member
AS6777:AS-AMS-IX-RSRIPELists AS3327 as a direct member
AS6777:AS-AMS-IX-RS-V6RIPELists AS3327 as a direct member
AS680:AS-AMSIX-RS-PEERSRIPELists AS3327 as a direct member
AS8218:AS-AMSIX-RSRIPELists AS3327 as a direct member

RPKI from rpki-client, validated 2026-10-19 12:02 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-19. Cross-check on bgp.he.net.