asn.dev

Routing security

AS3527 NIH-NET - National Institutes of Health

Unclassified ARIN

RPKI valid 81% 13 of 16 announcements
RPKI invalid 0 none
No ROA 3 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 20 authorising this AS

Announcements

What this network originates

16 observed

Every prefix observed with AS3527 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
156.40.0.0/16No ROAIRR56
157.98.0.0/16No ROAIRR56
162.99.224.0/19No ROAIRR53
128.231.0.0/16RPKI validIRR56
128.231.3.0/24RPKI validIRR53
128.231.245.0/24RPKI validIRR53
137.187.0.0/16RPKI validIRR56
165.112.0.0/16RPKI validIRR56
165.112.0.0/20RPKI validIRR7
165.112.0.0/21RPKI validIRR7
165.112.136.0/21RPKI validIRR7
192.231.145.0/24RPKI validIRR56
192.231.146.0/23RPKI validIRR53
192.231.146.0/24RPKI validIRR53
192.231.147.0/24RPKI validIRR56
2607:f220:400::/43RPKI validIRR31

RPKI · ROAs

Route origin authorisations

20 ROAs

Signed statements by address holders that AS3527 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
128.231.0.0/16/25ARIN
137.187.0.0/16/25ARIN
156.40.0.0/18/25ARIN
156.40.64.0/20/25ARIN
156.40.80.0/21/25ARIN
156.40.88.0/22/25ARIN
156.40.92.0/24/25ARIN
156.40.96.0/19/25ARIN
156.40.128.0/18/25ARIN
156.40.192.0/22/25ARIN
156.40.196.0/24/25ARIN
156.40.198.0/23/25ARIN
156.40.200.0/21/25ARIN
156.40.208.0/20/25ARIN
156.40.224.0/19/25ARIN
165.112.0.0/16/25ARIN
192.231.145.0/24/29ARIN
192.231.146.0/23/29ARIN
2601:9400::/24/48ARIN
2607:f220:400::/40/48ARIN

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

48 objects · 26 not announced

Route objects naming AS3527 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
128.231.192.0/24RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Not announced
128.231.202.0/24RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Not announced
137.187.186.0/23RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Not announced
137.187.192.0/23RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Not announced
156.40.0.0/18ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Not announced
156.40.64.0/20ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Not announced
156.40.80.0/21ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Not announced
156.40.88.0/22ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Not announced
156.40.92.0/24ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Not announced
156.40.96.0/19ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Not announced
156.40.116.0/22RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Not announced
156.40.120.0/22RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Not announced
156.40.128.0/18ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Not announced
156.40.192.0/22ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Not announced
156.40.196.0/24ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Not announced
156.40.198.0/23ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Not announced
156.40.200.0/21ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Not announced
156.40.208.0/20ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Not announced
156.40.224.0/19ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Not announced
156.40.254.0/23RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Not announced
156.40.254.0/24RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Not announced
156.40.255.0/24RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Not announced
165.112.137.0/24RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Not announced
165.112.138.0/24RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Not announced
2601:9400::/24ARIN9000 Rockville PikeMNT-NIH2025-05-09Not announced
2607:f220:400::/40ARIN9000 Rockville PikeMNT-NIH2025-09-17Not announced
128.231.0.0/16ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Announced
128.231.0.0/16RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced
128.231.3.0/24RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced
128.231.245.0/24RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced
137.187.0.0/16ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Announced
137.187.0.0/16RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced
156.40.0.0/16RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced
157.98.0.0/16RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced
162.99.224.0/19RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced
165.112.0.0/16ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Announced
165.112.0.0/16RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced
165.112.0.0/20RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced
165.112.0.0/21RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced
165.112.136.0/21RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced
192.231.145.0/24ARIN9000 Rockville PikeMNT-NIH-Z2025-06-05Announced
192.231.145.0/24RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced
192.231.146.0/23ARINNational Institutes of HealthMNT-NIH-Z2025-12-04Announced
192.231.146.0/23RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced
192.231.146.0/24RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced
192.231.147.0/24RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced
2607:f220:400::/43ARINNational Library of MedicineMNT-NIH2020-07-08Announced
2607:f220:400::/43RADBProxy-registered route object for NIHMAINT-AS108862023-11-13Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS3527 directly show who expects to carry it.

AS-setWhereRelationship
AS-JAGUAR-PEERING-V6-NL-IXRIPELists AS3527 as a direct member
AS-NIHARINLists AS3527 as a direct member
AS10886:AS-3527-ALLRADBLists AS3527 as a direct member
AS10886:AS-ALLRADBLists AS3527 as a direct member

RPKI from rpki-client, validated 2026-11-05 13:06 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-11-05. Cross-check on bgp.he.net.