asn.dev

Routing security

AS401293 AS401293 - FSTcloud

Unclassified ARIN

RPKI valid 92% 11 of 12 announcements
RPKI invalid 1 dropped by validating networks
No ROA 0 not covered by any ROA
IRR registered 92% 0 missing · 1 other origin
ROAs 20 authorising this AS

Announcements

What this network originates

12 observed

Every prefix observed with AS401293 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
134.202.233.0/24RPKI invalidIRR other origin1
2a0f:140::/29RPKI validIRR28
2a09:340::/29RPKI validIRR28
2a10:3c00::/29RPKI validIRR28
2a10:dfc0::/29RPKI validIRR28
2a11:2a80::/29RPKI validIRR29
2a11:9a80::/29RPKI validIRR28
2a11:22c0::/29RPKI validIRR28
2a11:efc0::/29RPKI validIRR28
2a11:f600::/29RPKI validIRR28
2a13:5040::/29RPKI validIRR28
160.21.145.0/24RPKI validIRR51

RPKI · ROAs

Route origin authorisations

20 ROAs

Signed statements by address holders that AS401293 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
134.202.17.0/24/24ARIN
160.21.145.0/24/24RIPENCC
191.44.101.0/24/24RIPENCC
2a09:340::/29/29RIPENCC
2a0e:c180::/29/29RIPENCC
2a0f:140::/29/29RIPENCC
2a0f:32c0::/29/29RIPENCC
2a10:3c00::/29/29RIPENCC
2a10:dfc0::/29/29RIPENCC
2a11:22c0::/29/29RIPENCC
2a11:2a80::/29/29RIPENCC
2a11:8380::/29/29RIPENCC
2a11:8580::/29/29RIPENCC
2a11:9a80::/29/29RIPENCC
2a11:a900::/29/29RIPENCC
2a11:efc0::/29/29RIPENCC
2a11:f600::/29/29RIPENCC
2a12:9880::/29/29RIPENCC
2a12:e600::/29/29RIPENCC
2a13:5040::/29/29RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

22 objects · 10 not announced

Route objects naming AS401293 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
134.202.17.0/24ARINGauss Research Laboratory, Inc.MNT-GRL-112026-09-10Not announced
191.44.101.0/24RADBautogenMAINT-AS8342026-09-04Not announced
191.44.101.0/24RIPE—NETUTILS-MNT2026-09-03Not announced
2a0e:c180::/29RIPE—PREFIXBROKER-MNT2026-09-22Not announced
2a0f:32c0::/29RIPE—PREFIXBROKER-MNT2026-09-22Not announced
2a11:8380::/29RIPE—PREFIXBROKER-MNT2026-09-22Not announced
2a11:8580::/29RIPE—PREFIXBROKER-MNT2026-09-22Not announced
2a11:a900::/29RIPE—PREFIXBROKER-MNT2026-09-22Not announced
2a12:9880::/29RIPE—PREFIXBROKER-MNT2026-09-22Not announced
2a12:e600::/29RIPE—PREFIXBROKER-MNT2026-09-22Not announced
160.21.145.0/24RADBautogenMAINT-AS8342026-11-06Announced
160.21.145.0/24RIPE—NETUTILS-MNT2026-11-06Announced
2a09:340::/29RIPE—PITLINE-MNT2026-07-18Announced
2a0f:140::/29RIPE—SC-RAPIDSEEDBOX-1-MNT2026-07-09Announced
2a10:3c00::/29RIPE—PREFIXBROKER-MNT2026-09-22Announced
2a10:dfc0::/29RIPE—PITLINE-MNT2026-07-18Announced
2a11:22c0::/29RIPE—PREFIXBROKER-MNT2026-09-22Announced
2a11:2a80::/29RIPE—PITLINE-MNT2026-07-18Announced
2a11:9a80::/29RIPE—PREFIXBROKER-MNT2026-09-22Announced
2a11:efc0::/29RIPE—SC-RAPIDSEEDBOX-1-MNT2026-07-09Announced
2a11:f600::/29RIPE—PREFIXBROKER-MNT2026-09-22Announced
2a13:5040::/29RIPE—LIR-LT-MBEISINA-1-MNT2026-07-14Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS401293 directly show who expects to carry it.

AS-setWhereRelationship
AS-ZENLAYERRADBLists AS401293 as a direct member
AS62610:AS-ZEC-CUSTOMERRADBLists AS401293 as a direct member

RPKI from rpki-client, validated 2026-11-07 13:08 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-11-07. Cross-check on bgp.he.net.