asn.dev

Routing security

AS398960 CRYOFLESH - Cryoflesh Inc

Unclassified ARIN

RPKI valid 83% 5 of 6 announcements
RPKI invalid 0 none
No ROA 1 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 3 authorising this AS

Announcements

What this network originates

6 observed

Every prefix observed with AS398960 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
44.31.23.0/24No ROAIRR56
23.168.144.0/24RPKI validIRR56
23.168.145.0/24RPKI validIRR56
2602:808:4000::/48RPKI validIRR32
2602:808:4002::/48RPKI validIRR14
2602:808:4004::/48RPKI validIRR32

RPKI · ROAs

Route origin authorisations

3 ROAs

Signed statements by address holders that AS398960 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
23.168.144.0/24/32ARIN
23.168.145.0/24/32ARIN
2602:808:4000::/44/64ARIN

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

2 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS18530Isomedia, Inc.Declarednot observed
AS395823doof.netDeclaredObserved
AS9002RETN Limitednot declaredObserved
AS24482SG.GSnot declaredObserved
AS394256Tech Futures Interactive Inc.not declaredObserved
AS3130RGnet OUnot declaredObserved
AS34927iFog GmbHnot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

6 objects · 0 not announced

Route objects naming AS398960 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
23.168.144.0/24ARINMNT-CRYOF route 023.168.144.000/24 AS398960MNT-CRYOF2020-11-06Announced
23.168.145.0/24ARINMNT-CRYOF route 023.168.145.000/24 AS398960MNT-CRYOF2021-05-25Announced
44.31.23.0/24RADBAF7MHMAINT-ARDC2026-04-17Announced
2602:808:4000::/48ARINMNT-CRYOF route 2602:0808:4000:0000:0000:0000:0000:0000/48 AS398960MNT-CRYOF2020-11-06Announced
2602:808:4002::/48ARINCryoflesh anycast rangeMNT-CRYOF2020-11-06Announced
2602:808:4004::/48ARINCryoflesh SEA1MNT-CRYOF2021-02-12Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS398960 directly show who expects to carry it.

AS-setWhereRelationship
AS-CRYOFPeeringDBDeclared by the operator as its own set
AS-CRYOFARINLists AS398960 as a direct member
AS-DOOFARINLists AS398960 as a direct member
AS-HURRICANERADBLists AS398960 as a direct member
AS-HURRICANEV6RADBLists AS398960 as a direct member
AS-ISOMEDIARADBLists AS398960 as a direct member
AS-WAVE-CUSTOMERSRADBLists AS398960 as a direct member

RPKI from rpki-client, validated 2026-11-09 13:06 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-11-09. Cross-check on bgp.he.net.