Routing security
AS33808 ITENOS
Unclassified RIPE
Announcements
What this network originates
Every prefix observed with AS33808 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 2a00:17f0::/32 | RPKI valid | IRR | 30 |
| 79.171.88.0/21 | RPKI valid | IRR | 52 |
| 89.31.0.0/21 | RPKI valid | IRR | 52 |
| 134.101.125.0/24 | RPKI valid | IRR | 52 |
| 193.110.68.0/22 | RPKI valid | IRR | 52 |
| 217.170.176.0/21 | RPKI valid | IRR | 52 |
| 217.170.184.0/22 | RPKI valid | IRR | 52 |
| 217.170.188.0/22 | RPKI valid | IRR | 52 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS33808 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 79.171.88.0/21 | /21 | RIPENCC |
| 89.31.0.0/21 | /21 | RIPENCC |
| 134.101.125.0/24 | /24 | RIPENCC |
| 193.110.68.0/22 | /22 | RIPENCC |
| 217.170.176.0/20 | /20 | RIPENCC |
| 217.170.176.0/21 | /21 | RIPENCC |
| 217.170.184.0/22 | /22 | RIPENCC |
| 217.170.188.0/22 | /22 | RIPENCC |
| 2a00:17f0::/32 | /32 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS3320 | Deutsche Telekom AG | Declared | not observed |
| AS50533 | I.T.E.N.O.S. International Telecom Network Operation Services GmbH | Declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS33808 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 217.170.176.0/20 | RIPE | — | ITENOS-MNT | 2025-03-09 | Not announced |
| 79.171.88.0/21 | RIPE | ITENOS-DCF | ITENOS-MNT | 2008-04-14 | Announced |
| 89.31.0.0/21 | RIPE | ITENOS-DCF | ITENOS-MNT | 2006-09-20 | Announced |
| 134.101.125.0/24 | RIPE | ITENOS-DCF | ITENOS-MNT | 2021-06-28 | Announced |
| 193.110.68.0/22 | RIPE | ITENOS-DCF | ITENOS-MNT | 2004-08-04 | Announced |
| 217.170.176.0/21 | RIPE | ITENOS-Datacenters | ITENOS-MNT | 2009-03-25 | Announced |
| 217.170.184.0/22 | RIPE | ITENOS-Datacenters | ITENOS-MNT | 2010-08-03 | Announced |
| 217.170.188.0/22 | RIPE | ITENOS-DATACENTER-DSSD | ITENOS-MNT | 2013-04-09 | Announced |
| 2a00:17f0::/32 | RIPE | ITENOS | ITENOS-MNT | 2009-12-22 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS33808 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS174:AS-COGC-036 | RADB | Lists AS33808 as a direct member |
AS33808:AS-ITENOS-IPB | RIPE | Lists AS33808 as a direct member |
AS50533:AS-ALL | RIPE | Lists AS33808 as a direct member |
AS50533:AS-DOWNSTREAMS | RIPE | Lists AS33808 as a direct member |
AS51202:AS-ALL | ALTDB | Lists AS33808 as a direct member |
RPKI from rpki-client, validated 2026-10-19 12:02 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-19. Cross-check on bgp.he.net.