asn.dev

Routing security

AS39961 CCSF - San Francisco Department of Telecommunications and Information Services

Unclassified ARIN Government

RPKI valid 100% 13 of 13 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 2 authorising this AS

Announcements

What this network originates

13 observed

Every prefix observed with AS39961 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
208.121.0.0/24RPKI validIRR covering51
208.121.1.0/24RPKI validIRR covering51
208.121.5.0/24RPKI validIRR covering52
208.121.6.0/24RPKI validIRR covering51
208.121.32.0/20RPKI validIRR covering52
208.121.48.0/20RPKI validIRR covering51
208.121.64.0/18RPKI validIRR covering52
208.121.128.0/17RPKI validIRR covering52
208.121.203.0/24RPKI validIRR covering52
208.121.224.0/24RPKI validIRR covering51
208.121.225.0/24RPKI validIRR covering51
208.121.226.0/23RPKI validIRR covering51
208.121.230.0/24RPKI validIRR covering56

RPKI · ROAs

Route origin authorisations

2 ROAs

Signed statements by address holders that AS39961 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
208.121.0.0/16/32ARIN
2001:470:620::/48/48ARIN

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

4 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS6939Hurricane Electric LLCDeclaredObserved
AS7018AT&T Enterprises, LLCDeclaredObserved
AS7922Comcast Cable Communications, LLCDeclarednot observed
AS11040unnamedDeclarednot observed
AS11404Wave Broadbandnot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

2 objects · 2 not announced

Route objects naming AS39961 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
208.121.0.0/16ARINOne South Van Ness AvenueMNT-SFDTIS2026-10-06Not announced
2001:470:620::/48ARINHurricane Electric LLCMNT-HURC2026-09-18Not announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS39961 directly show who expects to carry it.

AS-setWhereRelationship
AS-COMCAST-EDIARADBLists AS39961 as a direct member
AS-HURRICANERADBLists AS39961 as a direct member
AS-SFMIX-RSARINLists AS39961 as a direct member
AS-WAVE-CUSTOMERSRADBLists AS39961 as a direct member

RPKI from rpki-client, validated 2026-11-06 13:02 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-11-06. Cross-check on bgp.he.net.