asn.dev

Routing security

AS395747 CLOUDFLARENET-SFO05

Unclassified ARIN

RPKI valid 80% 32 of 40 announcements
RPKI invalid 0 none
No ROA 8 not covered by any ROA
IRR registered 78% 4 missing · 5 other origin
ROAs 60 authorising this AS

Announcements

What this network originates

40 observed

Every prefix observed with AS395747 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
8.21.12.0/24No ROAIRR other origin53
2400:cb00:1010::/48No ROANo IRR31
2400:cb00:1011::/48No ROANo IRR31
8.14.199.0/24No ROAIRR52
8.17.207.0/24No ROAIRR52
8.39.207.0/24No ROAIRR52
8.48.131.0/24No ROAIRR53
2606:54c1:d::/48No ROAIRR30
2a06:98c0:1c00::/48RPKI validIRR other origin29
162.158.64.0/24RPKI validIRR other origin54
162.159.204.0/24RPKI validIRR other origin52
172.64.202.0/24RPKI validNo IRR53
172.70.95.0/24RPKI validIRR other origin53
2606:4700:f3::/48RPKI validNo IRR29
2a06:98c0:1c0b::/48RPKI validIRR29
2a06:98c0:1c4a::/48RPKI validIRR29
2a06:98c0:1c59::/48RPKI validIRR29
108.162.209.0/24RPKI validIRR52
162.158.57.0/24RPKI validIRR52
162.158.58.0/24RPKI validIRR52
172.68.136.0/24RPKI validIRR52
172.69.61.0/24RPKI validIRR52
172.71.18.0/24RPKI validIRR52
172.71.19.0/24RPKI validIRR53
172.71.91.0/24RPKI validIRR52
172.71.136.0/24RPKI validIRR53
198.41.128.0/24RPKI validIRR53
2400:cb00:133::/48RPKI validIRR29
2400:cb00:251::/48RPKI validIRR29
2400:cb00:517::/48RPKI validIRR29
2400:cb00:518::/48RPKI validIRR31
2400:cb00:531::/48RPKI validIRR29
2400:cb00:539::/48RPKI validIRR31
2400:cb00:693::/48RPKI validIRR29
2400:cb00:748::/48RPKI validIRR29
2400:cb00:922::/48RPKI validIRR31
2400:cb00:1057::/48RPKI validIRR31
2606:54c1:2::/48RPKI validIRR31
2606:54c1:3::/48RPKI validIRR29
2606:54c1:9::/48RPKI validIRR30

RPKI · ROAs

Route origin authorisations

60 ROAs

Signed statements by address holders that AS395747 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
104.30.0.0/24/24ARIN
104.31.20.0/22/22ARIN
108.162.209.0/24/24ARIN
162.158.57.0/24/24ARIN
162.158.58.0/24/24ARIN
162.158.64.0/24/24ARIN
162.159.79.0/24/24ARIN
162.159.204.0/24/24ARIN
172.64.202.0/24/24ARIN
172.68.136.0/24/24ARIN
172.69.51.0/24/24ARIN
172.69.61.0/24/24ARIN
172.69.209.0/24/24ARIN
172.70.95.0/24/24ARIN
172.71.18.0/24/24ARIN
172.71.19.0/24/24ARIN
172.71.91.0/24/24ARIN
172.71.136.0/24/24ARIN
173.245.60.0/23/23ARIN
198.41.128.0/24/24ARIN
198.41.129.0/24/24ARIN
198.41.130.0/24/24ARIN
198.41.132.0/22/22ARIN
198.41.132.0/23/23ARIN
198.41.132.0/24/24ARIN
198.41.136.0/22/22ARIN
2400:cb00:131::/48/48APNIC
2400:cb00:133::/48/48APNIC
2400:cb00:164::/48/48APNIC
2400:cb00:171::/48/48APNIC
2400:cb00:251::/48/48APNIC
2400:cb00:302::/48/48APNIC
2400:cb00:517::/48/48APNIC
2400:cb00:518::/48/48APNIC
2400:cb00:531::/48/48APNIC
2400:cb00:539::/48/48APNIC
2400:cb00:692::/48/48APNIC
2400:cb00:693::/48/48APNIC
2400:cb00:748::/48/48APNIC
2400:cb00:922::/48/48APNIC
2400:cb00:1057::/48/48APNIC
2606:4700:f3::/48/48ARIN
2606:4700:2001::/48/48ARIN
2606:4700:3131::/48/48ARIN
2606:4700:ff01::/48/48ARIN
2606:54c1:2::/48/48ARIN
2606:54c1:3::/48/48ARIN
2606:54c1:9::/48/48ARIN
2606:54c2::/48/48ARIN
2a06:98c0:1c00::/48/48RIPENCC
2a06:98c0:1c01::/48/48RIPENCC
2a06:98c0:1c0b::/48/48RIPENCC
2a06:98c0:1c4a::/48/48RIPENCC
2a06:98c0:1c59::/48/48RIPENCC
2a09:bac0:108::/48/48RIPENCC
2a09:bac0:131::/48/48RIPENCC
2a09:bac0:133::/48/48RIPENCC
2a09:bac0:251::/48/48RIPENCC
2a09:bac0:693::/48/48RIPENCC
2a09:bac0:748::/48/48RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

56 objects · 25 not announced

Route objects naming AS395747 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
8.20.125.0/24ARINCloudflare, Inc.MNT-CLOUD142024-05-23Not announced
104.30.0.0/24ARINCloudflare, IncMNT-CLOUD142021-11-08Not announced
162.158.47.0/24ARINCloudflare, Inc.MNT-CLOUD142023-07-11Not announced
162.159.79.0/24ARINCloudflare, Inc.MNT-CLOUD142022-03-21Not announced
173.245.60.0/23ARINCloudflare, Inc.MNT-CLOUD142019-06-21Not announced
198.41.129.0/24ARINCloudflare, Inc.MNT-CLOUD142018-10-11Not announced
198.41.130.0/24ARINCloudflare, Inc.MNT-CLOUD142018-10-11Not announced
198.41.132.0/22ARINCloudflare, Inc.MNT-CLOUD142018-10-11Not announced
198.41.132.0/23ARIN101 Townsend StreetMNT-CLOUD142025-10-23Not announced
198.41.132.0/24ARIN101 Townsend StreetMNT-CLOUD142025-10-23Not announced
198.41.136.0/22ARINCloudflare, Inc.MNT-CLOUD142018-10-11Not announced
2400:cb00:131::/48APNICCloudflare, Inc.MAINT-CLOUDFLARE-AP2020-06-10Not announced
2400:cb00:164::/48APNICCloudflare, Inc.MAINT-CLOUDFLARE-AP2022-01-25Not announced
2400:cb00:171::/48APNICCloudflare, Inc.MAINT-CLOUDFLARE-AP2020-06-10Not announced
2400:cb00:302::/48APNICCloudflare, Inc.MAINT-CLOUDFLARE-AP2021-02-04Not announced
2400:cb00:692::/48APNICCloudflare, Inc.MAINT-CLOUDFLARE-AP2024-05-15Not announced
2606:4700:2001::/48ARINCloudflare, Inc.MNT-CLOUD142018-10-16Not announced
2606:4700:3131::/48ARINCloudflare, Inc.MNT-CLOUD142018-10-16Not announced
2606:4700:ff01::/48ARINCloudflare, Inc.MNT-CLOUD142025-09-17Not announced
2606:4700:ff02::/48ARINCloudflare, Inc.MNT-CLOUD142018-10-16Not announced
2a06:98c0:1c01::/48RIPE—MNT-CLOUDFLARE2022-07-20Not announced
2a09:bac0:108::/48RIPE—MNT-CLOUDFLARE2020-06-15Not announced
2a09:bac0:131::/48RIPE—MNT-CLOUDFLARE2020-06-15Not announced
2a09:bac0:133::/48RIPE—MNT-CLOUDFLARE2022-04-19Not announced
2a09:bac0:693::/48RIPE—MNT-CLOUDFLARE2024-08-13Not announced
8.14.199.0/24ARIN101 Townsend StreetMNT-CLOUD142025-05-01Announced
8.17.207.0/24ARINCloudflare, Inc.MNT-CLOUD142019-05-23Announced
8.39.207.0/24ARIN101 Townsend StreetMNT-CLOUD142025-05-01Announced
8.48.131.0/24ARINCloudflare, Inc.MNT-CLOUD142019-03-06Announced
108.162.209.0/24ARINCloudflare, Inc.MNT-CLOUD142023-08-14Announced
162.158.57.0/24ARINCloudflare, Inc.MNT-CLOUD142025-09-17Announced
162.158.58.0/24ARINCloudflare, Inc.MNT-CLOUD142025-09-18Announced
172.68.136.0/24ARINCloudflare, Inc.MNT-CLOUD142025-03-12Announced
172.69.61.0/24ARINCloudflare, Inc.MNT-CLOUD142025-09-17Announced
172.71.18.0/24ARINCloudflare, Inc.MNT-CLOUD142022-06-03Announced
172.71.19.0/24ARINCloudflare, Inc.MNT-CLOUD142022-06-08Announced
172.71.91.0/24ARINCloudflare, Inc.MNT-CLOUD142022-06-15Announced
172.71.136.0/24ARINCloudflare, Inc.MNT-CLOUD142022-06-24Announced
198.41.128.0/24ARINCloudflare, Inc.MNT-CLOUD142018-10-11Announced
2400:cb00:133::/48APNICCloudflare, Inc.MAINT-CLOUDFLARE-AP2020-06-10Announced
2400:cb00:251::/48APNICCloudflare, Inc.MAINT-CLOUDFLARE-AP2024-08-15Announced
2400:cb00:517::/48APNICCloudflare, Inc.MAINT-CLOUDFLARE-AP2022-06-03Announced
2400:cb00:518::/48APNICCloudflare, Inc.MAINT-CLOUDFLARE-AP2022-06-08Announced
2400:cb00:531::/48APNICCloudflare, Inc.MAINT-CLOUDFLARE-AP2022-06-15Announced
2400:cb00:539::/48APNICCloudflare, Inc.MAINT-CLOUDFLARE-AP2022-07-20Announced
2400:cb00:693::/48APNICCloudflare, Inc.MAINT-CLOUDFLARE-AP2024-08-13Announced
2400:cb00:748::/48APNICCloudflare, Inc.MAINT-CLOUDFLARE-AP2024-08-14Announced
2400:cb00:922::/48APNICCloudflare, Inc.MAINT-CLOUDFLARE-AP2024-10-07Announced
2400:cb00:1057::/48APNICCloudflare, Inc.MAINT-CLOUDFLARE-AP2025-10-23Announced
2606:54c1:2::/48ARINCloudflare, Inc.MNT-CLOUD142025-03-07Announced
2606:54c1:3::/48ARINCloudflare, Inc.MNT-CLOUD142025-03-07Announced
2606:54c1:9::/48ARINCloudflare, Inc.MNT-CLOUD142024-01-12Announced
2606:54c1:d::/48RADBCloudflare, Inc.MAINT-AS275062025-09-03Announced
2a06:98c0:1c0b::/48RIPE—MNT-CLOUDFLARE2022-07-05Announced
2a06:98c0:1c4a::/48RIPE—MNT-CLOUDFLARE2024-09-05Announced
2a06:98c0:1c59::/48RIPE—MNT-CLOUDFLARE2025-01-13Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS395747 directly show who expects to carry it.

AS-setWhereRelationship
AS-CCFRADBLists AS395747 as a direct member
AS-CCF-TESTRADBLists AS395747 as a direct member
AS-CTBC-CUSTOMERS118RADBLists AS395747 as a direct member
AS-GTTCUSTRIPELists AS395747 as a direct member
AS-GTTCUST6RIPELists AS395747 as a direct member
AS-LOGIXFIBERRADBLists AS395747 as a direct member
AS13335:AS-CLOUDFLAREARINLists AS395747 as a direct member
AS13335:AS-CUSTOMERSARINLists AS395747 as a direct member
AS199746:AS-BLACKLISTRIPELists AS395747 as a direct member
AS204464:AS-BLACKLISTRIPELists AS395747 as a direct member

RPKI from rpki-client, validated 2026-10-17 12:17 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, collected 2026-10-17. Cross-check on bgp.he.net.