asn.dev

Routing security

AS36321 CSTL

Unclassified ARIN

RPKI valid 100% 6 of 6 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 83% 0 missing · 1 other origin
ROAs 7 authorising this AS

Announcements

What this network originates

6 observed

Every prefix observed with AS36321 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
64.124.8.0/24RPKI validIRR other origin52
66.187.0.0/23RPKI validIRR51
74.80.208.0/24RPKI validIRR52
199.83.232.0/23RPKI validIRR51
199.184.214.0/24RPKI validIRR51
2620:4e:e000::/48RPKI validIRR29

RPKI · ROAs

Route origin authorisations

7 ROAs

Signed statements by address holders that AS36321 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
64.124.8.0/24/24ARIN
66.187.0.0/23/25ARIN
74.80.208.0/24/24ARIN
199.83.232.0/23/23ARIN
199.83.232.0/26/26ARIN
199.184.214.0/24/24ARIN
2620:4e:e000::/48/48ARIN

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

11 objects · 2 not announced

Route objects naming AS36321 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
64.74.128.0/24RADBPNAP-SFO SparkartMAINT-AS18282023-11-13Not announced
66.187.0.0/25RADBCastle East 1MAINT-ENELSON-AS363212023-11-13Not announced
66.187.0.0/23ARIN575 market streetMNT-CG-5942025-03-19Announced
66.187.0.0/23RADBCSTL-EASTMAINT-ENELSON-AS363212023-11-13Announced
74.80.208.0/24ARIN575 market streetMNT-CG-5942025-03-19Announced
74.80.208.0/24RADBCastle-SouthWestMAINT-ENELSON-AS363212023-11-13Announced
199.83.232.0/23RADBCastle WestMAINT-ENELSON-AS363212023-11-13Announced
199.184.214.0/24ARIN575 market streetMNT-CG-5942025-03-19Announced
199.184.214.0/24RADBCastle-west-2MAINT-ENELSON-AS363212023-11-13Announced
2620:4e:e000::/48ARIN575 market streetMNT-CG-5942025-03-19Announced
2620:4e:e000::/48RADBCastle West IPV6MAINT-ENELSON-AS363212023-11-13Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS36321 directly show who expects to carry it.

AS-setWhereRelationship
AS-PNAPSFORADBLists AS36321 as a direct member
AS-WAVE-CUSTOMERSRADBLists AS36321 as a direct member
AS-XO-BARINLists AS36321 as a direct member

RPKI from rpki-client, validated 2026-10-15 12:09 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-15. Cross-check on bgp.he.net.