asn.dev

Routing security

AS39904 MERIT-AS MERIT GROUP a.s.

Unclassified RIPE

RPKI valid 100% 4 of 4 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 4 authorising this AS

Announcements

What this network originates

4 observed

Every prefix observed with AS39904 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a02:7a00::/32RPKI validIRR34
46.227.168.0/21RPKI validIRR53
91.215.12.0/22RPKI validIRR52
195.189.0.0/22RPKI validIRR52

RPKI · ROAs

Route origin authorisations

4 ROAs

Signed statements by address holders that AS39904 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
46.227.168.0/21/32RIPENCC
91.215.12.0/22/32RIPENCC
195.189.0.0/22/32RIPENCC
2a02:7a00::/32/128RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

5 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS5588unnamedDeclarednot observed
AS6939Hurricane Electric LLCDeclaredObserved
AS16019Vodafone Czech Republic a.s.DeclaredObserved
AS42000Futruy s.r.o.Declarednot observed
AS47200NIX.CZ z.s.p.o.Declarednot observed
AS6855Slovak Telekom, a.s.not declaredObserved
AS24482SG.GSnot declaredObserved
AS29504Freenet Liberec, z.s.not declaredObserved
AS1764Next Layer Telekommunikationsdienstleistungs- und Beratungs GmbHnot declaredObserved
AS8218Zayo Infrastructure France SAnot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

4 objects · 0 not announced

Route objects naming AS39904 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
46.227.168.0/21RIPEMERIT-GROUP-AS39904MERIT-MNT2012-11-09Announced
91.215.12.0/22RIPEMERIT-GROUP-AS39904MERIT-MNT2011-01-24Announced
195.189.0.0/22RIPEMERIT-GROUP-AS39904MERIT-MNT2011-01-24Announced
2a02:7a00::/32RIPEMERIT-GROUP-AS39904MERIT-MNT2011-02-03Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS39904 directly show who expects to carry it.

AS-setWhereRelationship
AS-HURRICANEV6RADBLists AS39904 as a direct member
AS-MERIT-NIXRIPELists AS39904 as a direct member
AS-MERIT-UPSTREAMRIPELists AS39904 as a direct member
AS8508:AS-SASK-UPC-INRIPELists AS39904 as a direct member

RPKI from rpki-client, validated 2026-10-13 12:16 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-13. Cross-check on bgp.he.net.