Routing security
AS5398 INTERNETONE
Unclassified RIPE
Announcements
What this network originates
Every prefix observed with AS5398 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 2001:67c:19e0::/48 | No ROA | No IRR | 32 |
| 2a0f:e880::/29 | RPKI valid | IRR | 32 |
| 46.21.29.0/24 | RPKI valid | IRR | 53 |
| 77.220.64.0/19 | RPKI valid | IRR | 53 |
| 193.221.216.0/23 | RPKI valid | IRR | 53 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS5398 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 31.44.32.0/21 | /21 | RIPENCC |
| 31.44.40.0/22 | /22 | RIPENCC |
| 45.143.158.0/24 | /24 | RIPENCC |
| 45.143.159.0/24 | /24 | RIPENCC |
| 46.21.22.0/24 | /24 | RIPENCC |
| 46.21.29.0/24 | /24 | RIPENCC |
| 77.220.64.0/19 | /19 | RIPENCC |
| 193.221.216.0/23 | /23 | RIPENCC |
| 2a0f:e880::/29 | /29 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS174 | Cogent Communications, LLC | Declared | Observed |
| AS2914 | NTT America, Inc. | Declared | Observed |
| AS3356 | Level 3 Parent, LLC | Declared | Observed |
| AS9002 | RETN Limited | Declared | not observed |
| AS6939 | Hurricane Electric LLC | not declared | Observed |
| AS24482 | SG.GS | not declared | Observed |
| AS31543 | myNet GmbH | not declared | Observed |
| AS59919 | Brainbox S.r.l. | not declared | Observed |
| AS13030 | Init7 (Switzerland) Ltd. | not declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS5398 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 45.91.229.0/24 | RIPE | — | LIR-CH-AS5398-1-MNT | 2024-06-11 | Not announced |
| 46.21.22.0/24 | RIPE | — | LIR-CH-SIATI-1-MNT | 2026-04-14 | Not announced |
| 46.21.29.0/24 | RIPE | — | LIR-CH-AS5398-1-MNT | 2022-10-23 | Announced |
| 77.220.64.0/19 | RIPE | — | LIR-IT-INTERNETONE-1-MNT | 2026-04-10 | Announced |
| 193.221.216.0/23 | RIPE | — | LIR-IT-INTERNETONE-1-MNT | 2026-04-10 | Announced |
| 2a0f:e880::/29 | RIPE | — | LIR-IT-INTERNETONE-1-MNT | 2026-04-26 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS5398 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-5398 | RIPE | Lists AS5398 as a direct member |
AS-NAMEX-PEERS-ROMA | RIPE | Lists AS5398 as a direct member |
AS-NL-IX-RS | RIPE | Lists AS5398 as a direct member |
AS-RETN-ACTUAL-V4 | RIPE | Lists AS5398 as a direct member |
AS-RETN-ACTUAL-V6 | RIPE | Lists AS5398 as a direct member |
AS25091:AS-PEERS | RIPE | Lists AS5398 as a direct member |
AS50869:AS-PEERS | RIPE | Lists AS5398 as a direct member |
AS8298:AS-PEERS | RIPE | Lists AS5398 as a direct member |
AS8821:AS-PEERS | RIPE | Lists AS5398 as a direct member |
RPKI from rpki-client, validated 2026-10-11 12:23 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-11. Cross-check on bgp.he.net.