Routing security

AS400522 ROOTCLOUD - rootcloud LLC

Unclassified Spamhaus ASN-DROP ARIN

RPKI valid 0% 0 of 33 announcements

RPKI invalid 0 none

No ROA 33 not covered by any ROA

IRR registered 27% 9 missing · 15 other origin

ROAs 0 authorising this AS

Announcements

What this network originates

33 observed

Every prefix observed with AS400522 as its origin, checked against RPKI and the IRR. Problems sort first.

Prefix	RPKI	IRR	Vantage points
2a0c:3a00::/29	No ROA	IRR other origin	28
2a0c:d9c0::/29	No ROA	IRR other origin	28
2a0c:d840::/29	No ROA	IRR other origin	28
2a0d:dc40::/29	No ROA	IRR other origin	28
2a0d:dc40::/30	No ROA	IRR other origin	28
2a0e:3f80::/29	No ROA	IRR other origin	28
2a0e:3f80::/30	No ROA	IRR other origin	28
2a0e:3f84::/30	No ROA	IRR other origin	28
2a07:c740::/29	No ROA	IRR other origin	28
2a07:eb40::/29	No ROA	IRR other origin	28
2a07:f640::/29	No ROA	IRR other origin	28
2a07:fa40::/29	No ROA	IRR other origin	28
2a09:c00::/29	No ROA	IRR other origin	28
2a12:73c0::/32	No ROA	No IRR	28
2a12:a5c0::/29	No ROA	IRR other origin	28
2a12:a040::/29	No ROA	IRR other origin	28
2a12:a640::/32	No ROA	No IRR	28
2a12:a641::/32	No ROA	No IRR	28
2a12:a642::/32	No ROA	No IRR	28
2a12:a643::/32	No ROA	No IRR	28
2a12:a644::/32	No ROA	No IRR	28
2a12:a645::/32	No ROA	No IRR	28
2a12:a646::/32	No ROA	No IRR	28
2a12:a647::/32	No ROA	No IRR	28
2a11:f700::/29	No ROA	IRR	28
2a11:f700::/30	No ROA	IRR	28
2a11:f700::/32	No ROA	IRR	28
2a11:f701::/32	No ROA	IRR	28
2a11:f702::/32	No ROA	IRR covering	28
2a11:f704::/32	No ROA	IRR	28
2a11:f705::/32	No ROA	IRR	28
2a11:f706::/32	No ROA	IRR	28
2a11:f707::/32	No ROA	IRR	28

RPKI · ROAs

Route origin authorisations

0 ROAs

Signed statements by address holders that AS400522 may originate these prefixes, up to the maximum length shown.

No ROA names this AS as an authorised origin.

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

13 objects · 5 not announced

Route objects naming AS400522 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

Prefix	Source	Description	Maintainer	Changed	Routing
2a0f:df40::/29	RADB	UO # ULTRAONE	`MAINT-AS399989`	2026-01-07	Not announced
2a0f:e140::/29	RADB	UO # ULTRAONE	`MAINT-AS399989`	2026-01-07	Not announced
2a11:f703::/32	RADB	UO # ULTRAONE	`MAINT-AS399989`	2026-01-07	Not announced
2a13:600::/29	RADB	UO # ULTRAONE	`MAINT-AS399989`	2026-01-07	Not announced
2a13:7b00::/29	RADB	UO # ULTRAONE	`MAINT-AS399989`	2026-01-07	Not announced
2a11:f700::/29	RADB	UO # ULTRAONE	`MAINT-AS399989`	2026-01-07	Announced
2a11:f700::/30	RADB	UO # ULTRAONE	`MAINT-AS399989`	2026-01-07	Announced
2a11:f700::/32	RADB	UO # ULTRAONE	`MAINT-AS399989`	2026-01-07	Announced
2a11:f701::/32	RADB	UO # ULTRAONE	`MAINT-AS399989`	2026-01-07	Announced
2a11:f704::/32	RADB	UO # ULTRAONE	`MAINT-AS399989`	2026-01-07	Announced
2a11:f705::/32	RADB	UO # ULTRAONE	`MAINT-AS399989`	2026-01-07	Announced
2a11:f706::/32	RADB	UO # ULTRAONE	`MAINT-AS399989`	2026-01-07	Announced
2a11:f707::/32	RADB	UO # ULTRAONE	`MAINT-AS399989`	2026-01-07	Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS400522 directly show who expects to carry it.

AS-set	Where	Relationship
`AS-AS3507`	ALTDB	Lists AS400522 as a direct member
`AS32693:AS-ALL`	RADB	Lists AS400522 as a direct member
`AS399989:AS-ALL`	RADB	Lists AS400522 as a direct member

RPKI from rpki-client, validated 2026-11-13 13:05 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-11-13. Cross-check on bgp.he.net.