Routing security
AS41047 NL-MLAB MLAB Open Source Community
Unclassified ARIN
Announcements
What this network originates
Every prefix observed with AS41047 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 2a06:a005:1ca0::/44 | No ROA | IRR | 35 |
| 2a06:a005:1cb0::/44 | No ROA | IRR | 35 |
| 2a06:a005:1cc0::/44 | No ROA | IRR | 35 |
| 2a06:a005:1cd0::/44 | No ROA | IRR | 35 |
| 2a06:a005:1ce0::/44 | No ROA | IRR | 35 |
| 2a0e:a6c0::/32 | RPKI valid | IRR | 34 |
| 2a0e:a6c1::/32 | RPKI valid | IRR | 34 |
| 2a0e:a6c2::/32 | RPKI valid | IRR | 34 |
| 2a0e:a6c3::/32 | RPKI valid | IRR | 34 |
| 2a0e:a6c4::/32 | RPKI valid | IRR | 35 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS41047 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 2a0e:a6c0::/32 | /32 | RIPENCC |
| 2a0e:a6c1::/32 | /32 | RIPENCC |
| 2a0e:a6c2::/32 | /32 | RIPENCC |
| 2a0e:a6c3::/32 | /32 | RIPENCC |
| 2a0e:a6c4::/32 | /32 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS6939 | Hurricane Electric LLC | Declared | Observed |
| AS24961 | WIIT AG | Declared | Observed |
| AS41051 | Openfactory GmbH | Declared | Observed |
| AS47536 | PathConnect GmbH | Declared | Observed |
| AS209533 | iFog GmbH | Declared | Observed |
| AS212895 | Johannes Ernst | Declared | Observed |
| AS219331 | Thomas BOUZIN | Declared | Observed |
| AS58057 | Securebit AG | not declared | Observed |
| AS24482 | SG.GS | not declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS41047 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 2a0e:a6c0::/29 | RIPE | — | MLAB-MNT | 2022-09-14 | Not announced |
| 2a06:a005:1ca0::/44 | RIPE | — | MLAB-MNT | 2026-10-02 | Announced |
| 2a06:a005:1cb0::/44 | RIPE | — | MLAB-MNT | 2026-10-02 | Announced |
| 2a06:a005:1cc0::/44 | RIPE | — | MLAB-MNT | 2026-10-02 | Announced |
| 2a06:a005:1cd0::/44 | RIPE | — | MLAB-MNT | 2026-10-02 | Announced |
| 2a06:a005:1ce0::/44 | RIPE | — | MLAB-MNT | 2026-10-02 | Announced |
| 2a0e:a6c0::/32 | RIPE | — | MLAB-MNT | 2021-11-15 | Announced |
| 2a0e:a6c1::/32 | RIPE | — | MLAB-MNT | 2020-07-08 | Announced |
| 2a0e:a6c2::/32 | RIPE | — | MLAB-MNT | 2020-07-08 | Announced |
| 2a0e:a6c3::/32 | RIPE | — | MLAB-MNT | 2020-07-08 | Announced |
| 2a0e:a6c4::/32 | RIPE | — | MLAB-MNT | 2026-10-02 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS41047 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-HURRICANEV6 | RADB | Lists AS41047 as a direct member |
AS-LSC-IXP-CONNECTED | RIPE | Lists AS41047 as a direct member |
AS-MLAB-NETWORKS | RIPE | Lists AS41047 as a direct member |
AS-NETSHELTER | RIPE | Lists AS41047 as a direct member |
AS-RETN-ACTUAL-V6 | RIPE | Lists AS41047 as a direct member |
AS-STEFAN | AFRINIC | Lists AS41047 as a direct member |
AS-SUMPTION | RIPE | Lists AS41047 as a direct member |
AS-VM-JE-CUS | RIPE | Lists AS41047 as a direct member |
AS208059:AS-TRANSIT-V4 | RIPE | Lists AS41047 as a direct member |
AS208059:AS-TRANSIT-V6 | RIPE | Lists AS41047 as a direct member |
AS209533:AS-BGPTUNNEL | RIPE | Lists AS41047 as a direct member |
AS219331:AS-FREEPKT | RIPE | Lists AS41047 as a direct member |
AS39533:AS-SET:AS41047 | RIPE | Lists AS41047 as a direct member |
AS41051:AS-PARTICIPANTS | RIPE | Lists AS41047 as a direct member |
AS51088:AS-A2B | RIPE | Lists AS41047 as a direct member |
AS52025:AS-DOWNSTREAMS-AMSTERDAM | RIPE | Lists AS41047 as a direct member |
AS52025:AS-DOWNSTREAMS-ASHBURN | RIPE | Lists AS41047 as a direct member |
AS52025:AS-DOWNSTREAMS-AUCKLAND | RIPE | Lists AS41047 as a direct member |
AS52025:AS-DOWNSTREAMS-FRANKFURT | RIPE | Lists AS41047 as a direct member |
AS52025:AS-DOWNSTREAMS-FREMONT | RIPE | Lists AS41047 as a direct member |
AS52025:AS-DOWNSTREAMS-KANSASCITY | RIPE | Lists AS41047 as a direct member |
AS52025:AS-DOWNSTREAMS-NEWARK | RIPE | Lists AS41047 as a direct member |
AS52025:AS-DOWNSTREAMS-SINGAPORE | RIPE | Lists AS41047 as a direct member |
AS52025:AS-DOWNSTREAMS-STOCKHOLM | RIPE | Lists AS41047 as a direct member |
AS52025:AS-DOWNSTREAMS-SYDNEY | RIPE | Lists AS41047 as a direct member |
AS52025:AS-DOWNSTREAMS-TORONTO | RIPE | Lists AS41047 as a direct member |
AS56890:AS-DECIX-DUS-CONNECTED | RIPE | Lists AS41047 as a direct member |
AS56890:AS-DECIX-DUS-RS | RIPE | Lists AS41047 as a direct member |
AS56890:AS-DECIX-DUS-RS-V6 | RIPE | Lists AS41047 as a direct member |
RPKI from rpki-client, validated 2026-10-15 12:09 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-15. Cross-check on bgp.he.net.