Routing security
AS38495 TRANSPOWER-B-AS-AP - Transpower New Zealand Ltd.
Unclassified APNIC
Announcements
What this network originates
Every prefix observed with AS38495 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 166.65.176.0/20 | No ROA | IRR covering | 53 |
| 166.65.192.0/20 | No ROA | IRR covering | 53 |
| 166.65.11.0/24 | RPKI valid | IRR | 54 |
| 166.65.16.0/20 | RPKI valid | IRR | 54 |
| 166.65.180.0/22 | RPKI valid | IRR | 57 |
| 166.65.184.0/21 | RPKI valid | IRR | 57 |
| 166.65.192.0/21 | RPKI valid | IRR | 57 |
| 166.65.208.0/20 | RPKI valid | IRR | 57 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS38495 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 166.65.11.0/24 | /24 | APNIC |
| 166.65.16.0/20 | /20 | APNIC |
| 166.65.176.0/22 | /22 | APNIC |
| 166.65.180.0/22 | /22 | APNIC |
| 166.65.180.0/23 | /23 | APNIC |
| 166.65.182.0/23 | /23 | APNIC |
| 166.65.184.0/21 | /21 | APNIC |
| 166.65.184.0/22 | /22 | APNIC |
| 166.65.188.0/22 | /22 | APNIC |
| 166.65.192.0/21 | /21 | APNIC |
| 166.65.192.0/22 | /22 | APNIC |
| 166.65.196.0/22 | /22 | APNIC |
| 166.65.200.0/21 | /21 | APNIC |
| 166.65.208.0/20 | /20 | APNIC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS13335 | Cloudflare, Inc. | Declared | Observed |
| AS49915 | Megaport (UK) Limited | Declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS38495 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 166.65.0.0/16 | RADB | PACNET (proxy-registered route object) | MAINT-AS4637 | 2023-11-13 | Not announced |
| 166.65.176.0/22 | APNIC | Transpower | MAINT-TRANSPOWER-NON-NZ | 2026-07-13 | Not announced |
| 166.65.180.0/23 | APNIC | — | MAINT-TRANSPOWER-NON-NZ | 2024-06-05 | Not announced |
| 166.65.182.0/23 | APNIC | — | MAINT-TRANSPOWER-NON-NZ | 2024-06-05 | Not announced |
| 166.65.184.0/22 | APNIC | — | MAINT-TRANSPOWER-NON-NZ | 2024-06-05 | Not announced |
| 166.65.184.0/22 | RADB | Proxy-registered route object | MAINT-AS3491 | 2025-03-28 | Not announced |
| 166.65.188.0/22 | APNIC | — | MAINT-TRANSPOWER-NON-NZ | 2024-06-05 | Not announced |
| 166.65.188.0/22 | RADB | Proxy-registered route object | MAINT-AS3491 | 2025-03-28 | Not announced |
| 166.65.192.0/22 | APNIC | — | MAINT-TRANSPOWER-NON-NZ | 2024-06-05 | Not announced |
| 166.65.196.0/22 | APNIC | — | MAINT-TRANSPOWER-NON-NZ | 2024-06-05 | Not announced |
| 166.65.200.0/21 | APNIC | Transpower | MAINT-TRANSPOWER-NON-NZ | 2026-07-13 | Not announced |
| 192.195.219.0/24 | RADB | PACNET (proxy-registered route object) | MAINT-AS4637 | 2023-11-13 | Not announced |
| 166.65.11.0/24 | APNIC | Transpower | MAINT-TRANSPOWER-NON-NZ | 2026-07-13 | Announced |
| 166.65.16.0/20 | APNIC | Transpower | MAINT-TRANSPOWER-NON-NZ | 2026-07-13 | Announced |
| 166.65.180.0/22 | APNIC | — | MAINT-TRANSPOWER-NON-NZ | 2024-06-05 | Announced |
| 166.65.184.0/21 | APNIC | — | MAINT-TRANSPOWER-NON-NZ | 2024-06-05 | Announced |
| 166.65.184.0/21 | RADB | PACNET (proxy-registered route object) | MAINT-AS4637 | 2023-11-13 | Announced |
| 166.65.192.0/21 | APNIC | — | MAINT-TRANSPOWER-NON-NZ | 2024-06-05 | Announced |
| 166.65.208.0/20 | APNIC | Transpower | MAINT-TRANSPOWER-NON-NZ | 2026-06-09 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS38495 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-ANC-CUSTOMER-PROXY-REGISTER | RADB | Lists AS38495 as a direct member |
AS-PACNET-CUSTOMER-PROXY-REGISTER | RADB | Lists AS38495 as a direct member |
AS-TELSTRA-INTL-CUSTOMERS | RADB | Lists AS38495 as a direct member |
AS-TRANSROUTE-SPEC | RIPE | Lists AS38495 as a direct member |
AS13335:AS-CUSTOMERS | ARIN | Lists AS38495 as a direct member |
AS49915:AS-CUSTOMERS | RIPE | Lists AS38495 as a direct member |
AS63830:AS-AKL-IX | RADB | Lists AS38495 as a direct member |
AS63830:AS-CHC-IX | RADB | Lists AS38495 as a direct member |
AS63830:AS-WLG-IX | RADB | Lists AS38495 as a direct member |
AS7606:AS-CHC-IX | RADB | Lists AS38495 as a direct member |
AS7606:AS-SA-IX | RADB | Lists AS38495 as a direct member |
AS7606:AS-WLG-IX | RADB | Lists AS38495 as a direct member |
RPKI from rpki-client, validated 2026-11-02 13:01 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-11-02. Cross-check on bgp.he.net.