asn.dev

Routing security

AS396968 IMPUT-POP3

Unclassified ARIN

RPKI valid 100% 4 of 4 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 2 authorising this AS

Announcements

What this network originates

4 observed

Every prefix observed with AS396968 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a12:bec4:1b31::/48RPKI validIRR29
2a12:bec4:1b32::/48RPKI validIRR34
2a12:bec4:1b33::/48RPKI validIRR32
2a12:bec4:1b34::/48RPKI validIRR32

RPKI · ROAs

Route origin authorisations

2 ROAs

Signed statements by address holders that AS396968 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
2a12:bec4:1b30::/44/48RIPENCC
2a14:7581:3500::/40/48RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

2 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS16909imputDeclaredObserved
AS401507imputDeclaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

17 objects · 13 not announced

Route objects naming AS396968 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
23.143.96.0/24RADBEquinix created the route object on behalf of the Customer.MAINT-AS146092023-11-13Not announced
2a14:7581:3530::/48RIPE—IMPUT-MNT2025-12-11Not announced
2a14:7581:3540::/48RIPE—IMPUT-MNT2025-12-11Not announced
2a14:7581:358d::/48RIPE—IMPUT-MNT2025-12-11Not announced
2a14:7581:35c7::/48RIPE—IMPUT-MNT2025-12-11Not announced
2a14:c380:300::/48RIPE—IMPUT-MNT2025-07-04Not announced
2a14:c380:301::/48RIPE—IMPUT-MNT2025-07-04Not announced
2a14:c380:302::/48RIPE—IMPUT-MNT2025-07-04Not announced
2a14:c380:303::/48RIPE—IMPUT-MNT2025-07-04Not announced
2a14:c380:304::/48RIPE—IMPUT-MNT2025-07-04Not announced
2a14:c380:305::/48RIPE—IMPUT-MNT2025-07-04Not announced
2a14:c380:306::/48RIPE—IMPUT-MNT2025-07-04Not announced
2a14:c380:307::/48RIPE—IMPUT-MNT2025-07-08Not announced
2a12:bec4:1b31::/48RIPE—IMPUT-MNT2025-09-22Announced
2a12:bec4:1b32::/48RIPE—IMPUT-MNT2025-09-22Announced
2a12:bec4:1b33::/48RIPE—IMPUT-MNT2025-09-22Announced
2a12:bec4:1b34::/48RIPE—IMPUT-MNT2025-09-22Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS396968 directly show who expects to carry it.

AS-setWhereRelationship
AS-CLOUDIE:AS-KANSASRIPELists AS396968 as a direct member
AS-EC-MIRADBLists AS396968 as a direct member
AS-HURRICANEV6RADBLists AS396968 as a direct member
AS-IMPUTARINLists AS396968 as a direct member
AS52025:AS-DOWNSTREAMS-FREMONTRIPELists AS396968 as a direct member
AS52025:AS-DOWNSTREAMS-KANSASCITYRIPELists AS396968 as a direct member
AS52025:AS-DOWNSTREAMS-STOCKHOLMRIPELists AS396968 as a direct member

RPKI from rpki-client, validated 2026-10-17 12:17 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, collected 2026-10-17. Cross-check on bgp.he.net.