asn.dev

Routing security

AS40966 L7GUARD-AS ZAO Web Hosting

Hosting RIPE Content

RPKI valid 100% 11 of 11 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 12 authorising this AS

Announcements

What this network originates

11 observed

Every prefix observed with AS40966 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
185.67.164.0/22RPKI validIRR53
185.67.164.0/24RPKI validIRR47
185.67.165.0/24RPKI validIRR47
185.67.166.0/24RPKI validIRR47
185.67.167.0/24RPKI validIRR47
217.112.36.0/23RPKI validIRR53
217.112.36.0/24RPKI validIRR covering53
217.112.42.0/23RPKI validIRR53
217.112.44.0/24RPKI validIRR49
217.112.45.0/24RPKI validIRR53
217.112.46.0/24RPKI validIRR53

RPKI · ROAs

Route origin authorisations

12 ROAs

Signed statements by address holders that AS40966 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
185.67.164.0/22/22RIPENCC
185.67.164.0/24/24RIPENCC
185.67.165.0/24/24RIPENCC
185.67.166.0/24/24RIPENCC
185.67.167.0/24/24RIPENCC
217.112.32.0/20/20RIPENCC
217.112.36.0/23/23RIPENCC
217.112.36.0/24/24RIPENCC
217.112.42.0/23/23RIPENCC
217.112.44.0/24/24RIPENCC
217.112.45.0/24/24RIPENCC
217.112.46.0/24/24RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

12 objects · 0 not announced

Route objects naming AS40966 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
185.67.164.0/22RIPEVALUEHOST ADD RANGELIR-RU-BIGWEB-1-MNT2024-04-26Announced
185.67.164.0/24RIPEL7GuardLIR-RU-BIGWEB-1-MNT2025-06-19Announced
185.67.165.0/24RIPEL7GuardLIR-RU-BIGWEB-1-MNT2025-06-19Announced
185.67.166.0/24RIPEL7GuardLIR-RU-BIGWEB-1-MNT2025-06-18Announced
185.67.167.0/24RIPEL7GuardLIR-RU-BIGWEB-1-MNT2024-12-02Announced
217.112.36.0/23RIPEBIGWEB.HOSTLIR-RU-BIGWEB-1-MNT2023-09-27Announced
217.112.42.0/23RIPEVALUEHOST MSK 4LIR-RU-BIGWEB-1-MNT2023-04-03Announced
217.112.44.0/24ALTDBProxy-registered route objectMAINT-AS335972014-08-11Announced
217.112.44.0/24RIPEBIGWEB.HOSTLIR-RU-BIGWEB-1-MNT2023-09-27Announced
217.112.45.0/24ALTDBProxy-registered route objectMAINT-AS335972014-08-11Announced
217.112.45.0/24RIPEBIGWEB.HOSTLIR-RU-BIGWEB-1-MNT2023-09-27Announced
217.112.46.0/24RIPEBIGWEB.HOSTLIR-RU-BIGWEB-1-MNT2023-09-27Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS40966 directly show who expects to carry it.

AS-setWhereRelationship
AS-AMCALTDBLists AS40966 as a direct member
AS-AMC-TESTALTDBLists AS40966 as a direct member
AS-INFORELAYALTDBLists AS40966 as a direct member
AS-MF-MGSMRIPELists AS40966 as a direct member
AS-MSKROUTESERVERRIPELists AS40966 as a direct member
AS-MTS-B2BRIPELists AS40966 as a direct member
AS-ROSTELECOMRIPELists AS40966 as a direct member
AS-UTRANSIT-TRIPELists AS40966 as a direct member
AS-UTRANSIT-XRIPELists AS40966 as a direct member
AS-VALUEHOSTARINLists AS40966 as a direct member
AS-VALUEHOSTRIPELists AS40966 as a direct member
AS-VALUEHOST-CLOUDRIPELists AS40966 as a direct member
AS30943:AS-BIGWEBRIPELists AS40966 as a direct member
AS40966:AS-BIGWEBRIPELists AS40966 as a direct member
AS40966:AS-L7GUARDRIPELists AS40966 as a direct member

RPKI from rpki-client, validated 2026-11-01 13:04 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-11-01. Cross-check on bgp.he.net.