asn.dev

Routing security

AS43408 OCD-UK Orange Cyberdefense UK Limited

Unclassified RIPE

RPKI valid 100% 4 of 4 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 11 authorising this AS

Announcements

What this network originates

4 observed

Every prefix observed with AS43408 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a00:1cd0:1::/48RPKI validIRR33
87.238.200.0/24RPKI validIRR53
87.238.205.0/24RPKI validIRR52
87.238.206.0/24RPKI validIRR52

RPKI · ROAs

Route origin authorisations

11 ROAs

Signed statements by address holders that AS43408 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
87.238.200.0/24/24RIPENCC
87.238.201.0/24/24RIPENCC
87.238.202.0/24/24RIPENCC
87.238.203.0/24/24RIPENCC
87.238.204.0/24/24RIPENCC
87.238.205.0/24/24RIPENCC
87.238.206.0/24/24RIPENCC
87.238.207.0/24/24RIPENCC
2a00:1cd0:1::/48/48RIPENCC
2a00:1cd0:2::/48/48RIPENCC
2a00:1cd0:6::/48/48RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

13 objects · 9 not announced

Route objects naming AS43408 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
87.238.201.0/24RIPEOrange Cyberdefense UK CM1 ManagementMISCDS-UK-MNT2020-05-01Not announced
87.238.202.0/24RIPEOrange Cyberdefense UK CM2 ManagementMISCDS-UK-MNT2020-05-01Not announced
87.238.203.0/24RIPEOrange Cyberdefense UK CM2MISCDS-UK-MNT2020-05-01Not announced
87.238.204.0/24RIPEOrange Cyberdefense UK BYFMISCDS-UK-MNT2020-05-01Not announced
87.238.207.0/24RIPEOrange Cyberdefense UK CM1MISCDS-UK-MNT2020-05-01Not announced
2a00:1cd0:2::/48RIPESDE DR IPv6MISCDS-UK-MNT2012-02-16Not announced
2a00:1cd0:3::/48RIPESDE CM1 IPv6MISCDS-UK-MNT2012-02-16Not announced
2a00:1cd0:4::/48RIPESDE SC IPv6MISCDS-UK-MNT2012-02-16Not announced
2a00:1cd0:6::/48RIPESDE CM2 IPv6MISCDS-UK-MNT2012-02-16Not announced
87.238.200.0/24RIPEOrange Cyberdefense UK MDTMISCDS-UK-MNT2020-05-01Announced
87.238.205.0/24RIPEOrange Cyberdefense UKMISCDS-UK-MNT2020-05-01Announced
87.238.206.0/24RIPESecureData Europe Limited - IB1 BlocksMISCDS-UK-MNT2018-09-10Announced
2a00:1cd0:1::/48RIPESDE HQ IPv6MISCDS-UK-MNT2012-02-16Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS43408 directly show who expects to carry it.

AS-setWhereRelationship
AS-4D-DC-CUSTOMERSRIPELists AS43408 as a direct member
AS-CUSTDCRIPELists AS43408 as a direct member
AS-HURRICANEV6RADBLists AS43408 as a direct member
AS-VIRTUAL1RIPELists AS43408 as a direct member

RPKI from rpki-client, validated 2026-11-08 13:05 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-11-08. Cross-check on bgp.he.net.