asn.dev

Routing security

AS401538 NOVA86

Hosting ARIN Network Services

RPKI valid 100% 9 of 9 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 3 authorising this AS

Announcements

What this network originates

9 observed

Every prefix observed with AS401538 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
23.130.156.0/24RPKI validIRR51
208.70.216.0/24RPKI validIRR51
208.70.217.0/24RPKI validIRR51
2602:f766::/36RPKI validIRR34
2602:f766::/37RPKI validIRR34
2602:f766:800::/37RPKI validIRR covering34
2602:f766:a::/48RPKI validIRR covering34
2602:f766:d::/48RPKI validIRR covering34
2602:f766:f::/48RPKI validIRR34

RPKI · ROAs

Route origin authorisations

3 ROAs

Signed statements by address holders that AS401538 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
23.130.156.0/24/32ARIN
208.70.216.0/22/32ARIN
2602:f766::/36/128ARIN

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

7 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS174Cogent Communications, LLCDeclarednot observed
AS6939Hurricane Electric LLCDeclaredObserved
AS20394Rainier ConnectDeclarednot observed
AS33387Nocix, LLCDeclaredObserved
AS34927iFog GmbHDeclaredObserved
AS393577Tritan DevelopmentDeclaredObserved
AS393746Amazing Creations and More LLCDeclaredObserved
AS52025ParadoxNetworks Limitednot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

8 objects · 2 not announced

Route objects naming AS401538 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
208.70.216.0/22ARINNova86MNT-NL-8742026-06-26Not announced
2602:f766:1::/48ARINNova-1MNT-NL-8742026-06-26Not announced
23.130.156.0/24ARINNova86MNT-NL-8742026-06-26Announced
208.70.216.0/24ARIN208.70.216.0/24MNT-NL-8742026-06-26Announced
208.70.217.0/24ARIN208.70.217.0/24MNT-NL-8742026-06-26Announced
2602:f766::/36ARINNova86 L.L.C.MNT-NL-8742026-06-26Announced
2602:f766::/37ARINnova86MNT-NL-8742026-06-26Announced
2602:f766:f::/48ARINNova86 Free TransitMNT-NL-8742026-06-26Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS401538 directly show who expects to carry it.

AS-setWhereRelationship
AS-NOVA86-LLCPeeringDBDeclared by the operator as its own set
AS-HURRICANEV6RADBLists AS401538 as a direct member
AS-IFOG-USRIPELists AS401538 as a direct member
AS-NOVA86-COREARINLists AS401538 as a direct member
AS-PHOENIXNET-LABS-UPSTREAMSARINLists AS401538 as a direct member
AS-TRITAN-TRANSITALTDBLists AS401538 as a direct member
AS-TRITAN-TRANSITARINLists AS401538 as a direct member

RPKI from rpki-client, validated 2026-10-12 12:10 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-12. Cross-check on bgp.he.net.