asn.dev

Routing security

AS33984 SURFPLANET-AS

Hosting RIPE

RPKI valid 88% 14 of 16 announcements
RPKI invalid 0 none
No ROA 2 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 14 authorising this AS

Announcements

What this network originates

16 observed

Every prefix observed with AS33984 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a0e:2980:1::/48No ROAIRR34
45.15.101.0/24No ROAIRR51
2a02:f98::/32RPKI validIRR34
46.235.24.0/24RPKI validIRR51
46.235.25.0/24RPKI validIRR51
46.235.26.0/24RPKI validIRR51
46.235.27.0/24RPKI validIRR51
46.235.28.0/24RPKI validIRR51
46.235.29.0/24RPKI validIRR51
46.235.30.0/24RPKI validIRR51
46.235.31.0/24RPKI validIRR51
78.111.64.0/20RPKI validIRR51
81.20.128.0/20RPKI validIRR51
85.88.0.0/19RPKI validIRR51
217.117.110.0/24RPKI validIRR51
217.117.111.0/24RPKI validIRR51

RPKI · ROAs

Route origin authorisations

14 ROAs

Signed statements by address holders that AS33984 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
46.235.24.0/24/24RIPENCC
46.235.25.0/24/24RIPENCC
46.235.26.0/24/24RIPENCC
46.235.27.0/24/24RIPENCC
46.235.28.0/24/24RIPENCC
46.235.29.0/24/24RIPENCC
46.235.30.0/24/24RIPENCC
46.235.31.0/24/24RIPENCC
78.111.64.0/20/20RIPENCC
81.20.128.0/20/20RIPENCC
85.88.0.0/19/19RIPENCC
217.117.110.0/24/24RIPENCC
217.117.111.0/24/24RIPENCC
2a02:f98::/32/32RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

19 objects · 3 not announced

Route objects naming AS33984 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
45.15.102.0/24RIPE—MNT-DE-DALASON-12019-05-21Not announced
185.155.192.0/22RIPE—DE-ROHWERDER-1-MNT2022-01-21Not announced
2a0e:2980:2::/48RIPE—MNT-DE-DALASON-12019-05-21Not announced
45.15.101.0/24RIPE—MNT-DE-DALASON-12019-05-21Announced
46.235.24.0/24RIPE—SURFPLANET-MNT2018-02-02Announced
46.235.25.0/24RIPE—SURFPLANET-MNT2018-02-02Announced
46.235.26.0/24RIPE—SURFPLANET-MNT2018-02-02Announced
46.235.27.0/24RIPE—SURFPLANET-MNT2018-02-02Announced
46.235.28.0/24RIPE—SURFPLANET-MNT2018-02-02Announced
46.235.29.0/24RIPE—SURFPLANET-MNT2018-02-02Announced
46.235.30.0/24RIPE—SURFPLANET-MNT2018-02-02Announced
46.235.31.0/24RIPE—SURFPLANET-MNT2018-02-02Announced
78.111.64.0/20RIPESurfplanet GmbH PA-BlockSURFPLANET-MNT2007-09-06Announced
81.20.128.0/20RIPESurfplanet GmbH PA-BlockSURFPLANET-MNT2009-01-06Announced
85.88.0.0/19RIPESurfplanet GmbH PA-BlockSURFPLANET-MNT2004-10-26Announced
217.117.110.0/24RIPEuniserve GmbHVT-MNT2019-04-08Announced
217.117.111.0/24RIPEuniserve GmbHVT-MNT2019-04-08Announced
2a02:f98::/32RIPESurfplanet GmbH PA-BlockSURFPLANET-MNT2009-06-04Announced
2a0e:2980:1::/48RIPE—MNT-DE-DALASON-12019-05-21Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS33984 directly show who expects to carry it.

AS-setWhereRelationship
AS-GBLXEURIPELists AS33984 as a direct member
AS-HURRICANEV6RADBLists AS33984 as a direct member
AS-NETCOLOGNERIPELists AS33984 as a direct member
AS-RETN-ACTUAL-V4RIPELists AS33984 as a direct member
AS-RETN-ACTUAL-V6RIPELists AS33984 as a direct member
AS33984:AS-RIPERIPELists AS33984 as a direct member

RPKI from rpki-client, validated 2026-10-17 12:17 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, collected 2026-10-17. Cross-check on bgp.he.net.