asn.dev

Routing security

AS4601 DNET DaKnObNET

Unclassified RIPE

RPKI valid 100% 3 of 3 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 3 authorising this AS

Announcements

What this network originates

3 observed

Every prefix observed with AS4601 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a0d:3dc0::/29RPKI validIRR33
147.189.216.0/21RPKI validIRR54
193.5.16.0/22RPKI validIRR54

RPKI · ROAs

Route origin authorisations

3 ROAs

Signed statements by address holders that AS4601 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
147.189.216.0/21/21RIPENCC
193.5.16.0/22/22RIPENCC
2a0d:3dc0::/29/29RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

3 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS8298IPng Networks GmbHDeclaredObserved
AS50869IPng Networks GmbHDeclarednot observed
AS58115SwissIX Internet ExchangeDeclarednot observed
AS6939Hurricane Electric LLCnot declaredObserved
AS1836green.ch AGnot declaredObserved
AS24482SG.GSnot declaredObserved
AS37721Virtual Technologies & Solutionsnot declaredObserved
AS48362Stadtwerke Feldkirchnot declaredObserved
AS34927iFog GmbHnot declaredObserved
AS9002RETN Limitednot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

3 objects · 0 not announced

Route objects naming AS4601 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
147.189.216.0/21RIPE—GR-DAKNOB-1-MNT2026-09-16Announced
193.5.16.0/22RIPE—GR-DAKNOB-1-MNT2024-10-21Announced
2a0d:3dc0::/29RIPE—GR-DAKNOB-1-MNT2024-10-21Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS4601 directly show who expects to carry it.

AS-setWhereRelationship
AS-FRANCEIX-PAR-LISTRIPELists AS4601 as a direct member
AS-RIS-RRC20RIPELists AS4601 as a direct member
AS-TRANSROUTE-SPECRIPELists AS4601 as a direct member
AS203462:AS-NVC-DECIX_FRA_RSRIPELists AS4601 as a direct member
AS42476:AS-SWISSIX-CONNECTEDRIPELists AS4601 as a direct member
AS4601:AS-DNETRIPELists AS4601 as a direct member
AS50869:AS-MEMBERSRIPELists AS4601 as a direct member
AS51706:AS-MEMBERS:AS-PAR-RSRIPELists AS4601 as a direct member
AS6695:AS-DECIX-FRA-CONNECTEDRIPELists AS4601 as a direct member
AS6695:AS-DECIX-FRA-RSRIPELists AS4601 as a direct member
AS6695:AS-DECIX-FRA-RS-V6RIPELists AS4601 as a direct member
AS8298:AS-DOWNSTREAMSRIPELists AS4601 as a direct member

RPKI from rpki-client, validated 2026-10-15 12:09 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-15. Cross-check on bgp.he.net.