Routing security
AS35202 ONTHEGO
Unclassified RIPE Educational/Research
Announcements
What this network originates
Every prefix observed with AS35202 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 2a0a:6400::/29 | RPKI valid | IRR | 35 |
| 2a0a:6400:116::/48 | RPKI valid | IRR | 35 |
| 2a0a:6400:117::/48 | RPKI valid | IRR | 37 |
| 5.180.116.0/22 | RPKI valid | IRR | 55 |
| 5.180.116.0/24 | RPKI valid | IRR | 55 |
| 5.180.117.0/24 | RPKI valid | IRR | 55 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS35202 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 5.180.116.0/22 | /24 | RIPENCC |
| 2a0a:6400::/29 | /48 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS6939 | Hurricane Electric LLC | Declared | Observed |
| AS12307 | Sandro Bolliger trading as Bolliger Network Solutions | Declared | not observed |
| AS34182 | rack.black Verein | Declared | Observed |
| AS34549 | meerfarbig GmbH & Co. KG | Declared | not observed |
| AS50869 | IPng Networks GmbH | Declared | not observed |
| AS57118 | CommunityRack.org Verein | Declared | Observed |
| AS24482 | SG.GS | not declared | Observed |
| AS48362 | Stadtwerke Feldkirch | not declared | Observed |
| AS9002 | RETN Limited | not declared | Observed |
| AS34019 | Hivane Association | not declared | Observed |
| AS34927 | iFog GmbH | not declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS35202 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 5.180.116.0/22 | RIPE | — | MNT-CH-OTG-1 | 2024-02-22 | Announced |
| 5.180.116.0/24 | RIPE | — | MNT-CH-OTG-1 | 2024-10-09 | Announced |
| 5.180.117.0/24 | RIPE | — | MNT-CH-OTG-1 | 2024-10-09 | Announced |
| 2a0a:6400::/29 | RIPE | — | MNT-CH-OTG-1 | 2019-04-01 | Announced |
| 2a0a:6400:116::/48 | RIPE | — | MNT-CH-OTG-1 | 2024-10-09 | Announced |
| 2a0a:6400:117::/48 | RIPE | — | MNT-CH-OTG-1 | 2024-10-09 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS35202 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-OTG | PeeringDB | Declared by the operator as its own set |
AS-HIVELOCITY | RIPE | Lists AS35202 as a direct member |
AS-HURRICANE | RADB | Lists AS35202 as a direct member |
AS-HURRICANEV6 | RADB | Lists AS35202 as a direct member |
AS-OTG | RIPE | Lists AS35202 as a direct member |
AS-TRANSROUTE-SPEC | RIPE | Lists AS35202 as a direct member |
AS35202:AS-OTG | RIPE | Lists AS35202 as a direct member |
AS42476:AS-SWISSIX-CONNECTED | RIPE | Lists AS35202 as a direct member |
AS50869:AS-MEMBERS | RIPE | Lists AS35202 as a direct member |
AS8298:AS-PEERS | RIPE | Lists AS35202 as a direct member |
RPKI from rpki-client, validated 2026-10-16 12:09 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-16. Cross-check on bgp.he.net.