asn.dev

Routing security

AS35684 SHC

Unclassified RIPE

RPKI valid 93% 13 of 14 announcements
RPKI invalid 0 none
No ROA 1 not covered by any ROA
IRR registered 93% 1 missing · 0 other origin
ROAs 14 authorising this AS

Announcements

What this network originates

14 observed

Every prefix observed with AS35684 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2001:678:302::/48No ROAIRR31
109.71.26.0/23RPKI validNo IRR54
2a0c:d980::/29RPKI validIRR31
2a05:7180::/29RPKI validIRR31
2a06:8500::/29RPKI validIRR31
2a06:9300::/29RPKI validIRR31
93.188.56.0/22RPKI validIRR54
185.79.44.0/22RPKI validIRR54
185.178.40.0/22RPKI validIRR54
194.59.192.0/22RPKI validIRR54
195.137.191.0/24RPKI validIRR54
2001:67c:18b0::/48RPKI validIRR31
2001:67c:74::/48RPKI validIRR31
2001:678:b68::/48RPKI validIRR31

RPKI · ROAs

Route origin authorisations

14 ROAs

Signed statements by address holders that AS35684 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
93.188.56.0/22/22RIPENCC
109.71.26.0/23/24RIPENCC
185.79.44.0/22/22RIPENCC
185.178.40.0/22/22RIPENCC
193.239.162.0/23/23RIPENCC
194.59.192.0/22/22RIPENCC
195.137.191.0/24/24RIPENCC
2001:678:b68::/48/48RIPENCC
2001:67c:74::/48/48RIPENCC
2001:67c:18b0::/48/48RIPENCC
2a05:7180::/29/29RIPENCC
2a06:8500::/29/29RIPENCC
2a06:9300::/29/29RIPENCC
2a0c:d980::/29/29RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

21 objects · 8 not announced

Route objects naming AS35684 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
185.117.160.0/22RIPE185-117-160-0--22-routeSHC-MNT2015-09-16Not announced
185.117.162.0/23RIPE—SHC-MNT2021-02-10Not announced
185.178.40.0/24RIPE—SHC-MNT2020-11-23Not announced
185.178.41.0/24RIPE—SHC-MNT2020-11-23Not announced
185.178.42.0/24RIPE—SHC-MNT2020-11-23Not announced
185.178.43.0/24RIPE—SHC-MNT2020-11-23Not announced
193.239.162.0/23RIPE—SHC-MNT2022-01-05Not announced
2a0a:5280::/29RIPE—SHC-MNT2020-11-23Not announced
93.188.56.0/22RIPE—AS35684-MNT2018-08-02Announced
185.79.44.0/22RIPE185-79-44-0--22-routeAS35684-MNT2014-11-28Announced
185.178.40.0/22RIPE—SHC-MNT2020-11-23Announced
194.59.192.0/22RIPE—AS35684-MNT2018-09-24Announced
195.137.191.0/24RIPE195-137-191-0--24-routeAS35684-MNT2014-07-22Announced
2001:678:302::/48RIPEroute-object for jr-online frankfurtAS35684-MNT2016-12-18Announced
2001:678:b68::/48RIPE—SHC-MNT2020-11-23Announced
2001:67c:74::/48RIPE—SHC-MNT2022-03-02Announced
2001:67c:18b0::/48RIPEUwe GrohnwaldtAS35684-MNT2014-07-23Announced
2a05:7180::/29RIPE2a05-7180--29-routeAS35684-MNT2014-11-28Announced
2a06:8500::/29RIPE2a06-8500--29-routeSHC-MNT2015-09-16Announced
2a06:9300::/29RIPE—AS35684-MNT2018-08-02Announced
2a0c:d980::/29RIPE—MNT-DE-MMG-12022-08-23Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS35684 directly show who expects to carry it.

AS-setWhereRelationship
AS-RETN-ACTUAL-V4RIPELists AS35684 as a direct member
AS-RETN-ACTUAL-V6RIPELists AS35684 as a direct member
AS-UGRIPELists AS35684 as a direct member

RPKI from rpki-client, validated 2026-10-18 12:08 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-18. Cross-check on bgp.he.net.