asn.dev

Routing security

AS401661 EMBNEX-AS

Hosting DROP-listed space ARIN Content

RPKI valid 100% 4 of 4 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 75% 1 missing · 0 other origin
ROAs 4 authorising this AS

Announcements

What this network originates

4 observed

Every prefix observed with AS401661 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2604:be0::/32RPKI validNo IRR31
16.5.0.0/24RPKI validIRR53
16.5.20.0/24RPKI validIRR1
198.89.99.0/24RPKI validIRR53

RPKI · ROAs

Route origin authorisations

4 ROAs

Signed statements by address holders that AS401661 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
16.5.0.0/24/24ARIN
16.5.20.0/24/24ARIN
198.89.99.0/24/24ARIN
2604:be0::/32/32ARIN

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

6 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS174Cogent Communications, LLCDeclarednot observed
AS3356Level 3 Parent, LLCDeclaredObserved
AS6939Hurricane Electric LLCDeclaredObserved
AS7195EDGEUNO S.A.SDeclarednot observed
AS63023GTHostDeclaredObserved
AS268624Gamers Club LtdaDeclaredObserved
AS24482SG.GSnot declaredObserved
AS37721Virtual Technologies & Solutionsnot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

5 objects · 0 not announced

Route objects naming AS401661 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
16.5.0.0/24ARINHEWLETT PACKARD ENTERPRISE COMPANYMNT-HPE-152026-08-08Announced
16.5.0.0/24RADBautogenMAINT-AS8342026-08-10Announced
16.5.20.0/24ARINUsed by EndUserMNT-DCL-5772026-09-07Announced
16.5.20.0/24RADBautogenMAINT-AS8342026-09-08Announced
198.89.99.0/24ARINUsed by EndUserMNT-DCL-5772026-06-05Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS401661 directly show who expects to carry it.

AS-setWhereRelationship
AS401661:AS-CONEPeeringDBDeclared by the operator as its own set
AS-DURAND1-CUSTOMERRADBLists AS401661 as a direct member
AS-GTHOSTARINLists AS401661 as a direct member
AS-ROCKETNETWORK-CUSTOMERSRADBLists AS401661 as a direct member
AS401661:AS-CONEARINLists AS401661 as a direct member

RPKI from rpki-client, validated 2026-10-15 12:09 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-15. Cross-check on bgp.he.net.