asn.dev

Routing security

AS35399 ITIO-AS

Hosting RIPE

RPKI valid 100% 12 of 12 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 12 authorising this AS

Announcements

What this network originates

12 observed

Every prefix observed with AS35399 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a03:b300::/32RPKI validIRR29
87.236.56.0/21RPKI validIRR52
87.236.56.0/22RPKI validIRR52
87.236.56.0/24RPKI validIRR32
87.236.57.0/24RPKI validIRR32
87.236.58.0/24RPKI validIRR32
87.236.59.0/24RPKI validIRR32
87.236.60.0/22RPKI validIRR52
87.236.60.0/24RPKI validIRR32
87.236.61.0/24RPKI validIRR32
87.236.62.0/24RPKI validIRR32
87.236.63.0/24RPKI validIRR32

RPKI · ROAs

Route origin authorisations

12 ROAs

Signed statements by address holders that AS35399 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
87.236.56.0/21/21RIPENCC
87.236.56.0/22/22RIPENCC
87.236.56.0/24/24RIPENCC
87.236.57.0/24/24RIPENCC
87.236.58.0/24/24RIPENCC
87.236.59.0/24/24RIPENCC
87.236.60.0/22/22RIPENCC
87.236.60.0/24/24RIPENCC
87.236.61.0/24/24RIPENCC
87.236.62.0/24/24RIPENCC
87.236.63.0/24/24RIPENCC
2a03:b300::/32/32RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

12 objects · 0 not announced

Route objects naming AS35399 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
87.236.56.0/21RIPEOnline50 NetworkITIO-MNT-TOP2011-06-09Announced
87.236.56.0/22RIPEOnline50 Site AITIO-MNT-TOP2011-06-09Announced
87.236.56.0/24RIPEOnline50 Site A InfrastructureITIO-MNT-TOP2011-06-09Announced
87.236.57.0/24RIPEOnline50 Site A Application ServersITIO-MNT-TOP2011-06-09Announced
87.236.58.0/24RIPEOnline50 Site A Hosted ServicesITIO-MNT-TOP2011-06-09Announced
87.236.59.0/24RIPEOnline50 Site A Access NetworkITIO-MNT-TOP2011-06-09Announced
87.236.60.0/22RIPEOnline50 Site BITIO-MNT-TOP2011-06-09Announced
87.236.60.0/24RIPEOnline50 Site B InfrastructureITIO-MNT-TOP2011-06-09Announced
87.236.61.0/24RIPEOnline50 Site B Application ServersITIO-MNT-TOP2011-06-09Announced
87.236.62.0/24RIPEOnline50 Site B Hosted ServicesITIO-MNT-TOP2011-06-09Announced
87.236.63.0/24RIPEOnline50 Site B Access NetworkITIO-MNT-TOP2011-06-09Announced
2a03:b300::/32RIPE—ITIO-MNT-TOP2020-12-23Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS35399 directly show who expects to carry it.

AS-setWhereRelationship
AS-CONNETU-LINXRIPELists AS35399 as a direct member
AS-GOSCOMBRIPELists AS35399 as a direct member
AS-ITINSIDEOUTRIPELists AS35399 as a direct member
AS-LIQUID-LINXPEERSRIPELists AS35399 as a direct member
AS29075:AS-PEERS:AS-LINXRIPELists AS35399 as a direct member
AS29075:AS-PEERS:AS-SETRIPELists AS35399 as a direct member
AS51202:AS-ALLALTDBLists AS35399 as a direct member

RPKI from rpki-client, validated 2026-10-15 12:09 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-15. Cross-check on bgp.he.net.