asn.dev

Routing security

AS38927 NETBUILD-AS

Unclassified RIPE

RPKI valid 88% 7 of 8 announcements
RPKI invalid 0 none
No ROA 1 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 9 authorising this AS

Announcements

What this network originates

8 observed

Every prefix observed with AS38927 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a14:2440::/29No ROAIRR34
2a02:420::/29RPKI validIRR34
46.226.80.0/21RPKI validIRR52
87.237.120.0/21RPKI validIRR52
91.213.232.0/24RPKI validIRR52
93.191.48.0/21RPKI validIRR52
185.146.236.0/22RPKI validIRR52
193.19.112.0/23RPKI validIRR52

RPKI · ROAs

Route origin authorisations

9 ROAs

Signed statements by address holders that AS38927 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
46.226.80.0/21/21RIPENCC
87.237.120.0/21/21RIPENCC
91.213.232.0/24/24RIPENCC
93.191.48.0/21/21RIPENCC
185.121.135.0/24/24RIPENCC
185.146.236.0/22/22RIPENCC
193.19.112.0/23/23RIPENCC
212.232.19.0/24/24RIPENCC
2a02:420::/29/29RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

2 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS9063VSE NET GmbHDeclaredObserved
AS15965CEGECOM S.A.DeclaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

11 objects · 3 not announced

Route objects naming AS38927 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
93.191.53.0/24RIPEAyedo Cloud Solutions GmbHNETBUILD-MNT2026-05-27Not announced
185.121.135.0/24RIPE—LIR-DE-REIBER-1-MNT2025-08-17Not announced
212.232.19.0/24RIPEAyedo Cloud Solutions GmbHLIR-DE-AYEDO-1-MNT2025-02-12Not announced
46.226.80.0/21RIPENet-Build GmbHNETBUILD-MNT2015-09-04Announced
87.237.120.0/21RIPENet-Build GmbHNETBUILD-MNT2023-02-22Announced
91.213.232.0/24RIPENet-Build GmbHNETBUILD-MNT2017-05-17Announced
93.191.48.0/21RIPENet-Build GmbHNETBUILD-MNT2015-09-09Announced
185.146.236.0/22RIPENet-Build GmbHNETBUILD-MNT2016-04-11Announced
193.19.112.0/23RIPENet-Build GmbHNETBUILD-MNT2017-05-17Announced
2a02:420::/29RIPENet-Build GmbHNETBUILD-MNT2015-09-14Announced
2a14:2440::/29RIPEAyedo Cloud Solutions GmbHLIR-DE-AYEDO-1-MNT2024-06-18Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS38927 directly show who expects to carry it.

AS-setWhereRelationship
AS-CEGECOMRIPELists AS38927 as a direct member
AS-CEGECOM-V6RIPELists AS38927 as a direct member
AS-HURRICANEV6RADBLists AS38927 as a direct member
AS-NETBUILDRIPELists AS38927 as a direct member
AS-SAARGATERIPELists AS38927 as a direct member
AS-SAARGATE-V6RIPELists AS38927 as a direct member

RPKI from rpki-client, validated 2026-10-16 12:09 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-16. Cross-check on bgp.he.net.