Routing security
AS54538 PAN0001
Unclassified ARIN
Announcements
What this network originates
Every prefix observed with AS54538 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 65.154.226.0/24 | No ROA | No IRR | 51 |
| 65.155.38.0/24 | No ROA | No IRR | 51 |
| 66.232.34.0/24 | No ROA | IRR other origin | 52 |
| 66.232.40.0/24 | No ROA | No IRR | 52 |
| 70.42.131.0/24 | No ROA | No IRR | 52 |
| 72.165.69.0/24 | No ROA | No IRR | 51 |
| 74.201.127.0/24 | No ROA | No IRR | 51 |
| 154.59.123.0/24 | No ROA | No IRR | 52 |
| 154.59.126.0/24 | No ROA | No IRR | 52 |
| 2604:a940:1::/48 | No ROA | No IRR | 31 |
| 66.232.36.0/24 | No ROA | IRR | 50 |
| 199.167.52.0/24 | No ROA | IRR | 51 |
| 199.167.53.0/24 | No ROA | IRR | 51 |
| 2620:52:c000::/48 | No ROA | IRR | 31 |
| 2a14:dc00::/48 | RPKI valid | IRR | 30 |
| 2a14:dc00:1::/48 | RPKI valid | IRR | 30 |
| 2a14:dc00:2::/48 | RPKI valid | IRR | 30 |
| 2a14:dc00:3::/48 | RPKI valid | IRR | 30 |
| 66.232.37.0/24 | RPKI valid | IRR | 51 |
| 144.125.105.0/24 | RPKI valid | IRR | 50 |
| 147.185.136.0/24 | RPKI valid | IRR | 52 |
| 165.85.144.0/24 | RPKI valid | IRR | 50 |
| 165.85.145.0/24 | RPKI valid | IRR | 50 |
| 165.85.149.0/24 | RPKI valid | IRR | 52 |
| 165.85.151.0/24 | RPKI valid | IRR | 50 |
| 165.85.250.0/23 | RPKI valid | IRR | 52 |
| 165.85.252.0/24 | RPKI valid | IRR | 50 |
| 169.224.130.0/24 | RPKI valid | IRR | 50 |
| 169.224.131.0/24 | RPKI valid | IRR | 50 |
| 169.224.138.0/24 | RPKI valid | IRR | 50 |
| 193.110.180.0/24 | RPKI valid | IRR | 52 |
| 193.110.181.0/24 | RPKI valid | IRR covering | 52 |
| 202.189.133.0/24 | RPKI valid | IRR | 50 |
| 2606:f4c0:7010::/44 | RPKI valid | IRR | 29 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS54538 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 66.232.37.0/24 | /24 | ARIN |
| 144.125.104.0/24 | /24 | ARIN |
| 144.125.105.0/24 | /24 | ARIN |
| 147.185.136.0/24 | /24 | ARIN |
| 165.85.73.0/24 | /24 | ARIN |
| 165.85.144.0/24 | /24 | ARIN |
| 165.85.145.0/24 | /24 | ARIN |
| 165.85.149.0/24 | /24 | ARIN |
| 165.85.151.0/24 | /24 | ARIN |
| 165.85.250.0/23 | /23 | ARIN |
| 165.85.252.0/24 | /24 | ARIN |
| 169.224.130.0/24 | /24 | ARIN |
| 169.224.131.0/24 | /24 | ARIN |
| 169.224.138.0/24 | /24 | ARIN |
| 193.110.180.0/23 | /24 | RIPENCC |
| 195.88.212.0/24 | /24 | RIPENCC |
| 202.189.133.0/24 | /24 | APNIC |
| 2606:f4c0:7000::/43 | /44 | ARIN |
| 2a14:dc00::/48 | /48 | RIPENCC |
| 2a14:dc00:1::/48 | /48 | RIPENCC |
| 2a14:dc00:2::/48 | /48 | RIPENCC |
| 2a14:dc00:3::/48 | /48 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.
IRR
Registered route objects
Route objects naming AS54538 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 64.74.133.224/27 | RADB | PNAP-SJE paloaltonetit-1 | MAINT-AS1828 | 2023-11-13 | Not announced |
| 64.74.215.0/24 | RADB | PNAP-SJE | MAINT-AS1828 | 2023-11-13 | Not announced |
| 72.5.231.0/24 | RADB | PNAP-SJE paloaltonetit route | MAINT-AS1828 | 2023-11-13 | Not announced |
| 144.125.104.0/24 | ARIN | Palo Alto Networks, Inc | MNT-PAN-22 | 2025-06-04 | Not announced |
| 144.125.104.0/24 | RADB | 144.125.104.0/24 used PA Dev testing | MAINT-AS64280 | 2025-06-04 | Not announced |
| 165.85.73.0/24 | ARIN | Palo Alto Networks, Inc | MNT-PAN-22 | 2025-10-31 | Not announced |
| 165.85.73.0/24 | RADB | — | MAINT-AS64280 | 2025-11-06 | Not announced |
| 169.224.130.0/23 | RADB | 169.224.130.0/23 used PA Dev testing | MAINT-AS64280 | 2025-06-18 | Not announced |
| 193.110.180.0/23 | RIPE | — | LIR-NL-PALOALTO-1-MNT | 2025-11-11 | Not announced |
| 202.126.13.0/24 | RADB | 202.126.13.0/24 is being used by Palo Alto Networks - APAC region | MAINT-AS64280 | 2023-11-13 | Not announced |
| 2604:a940::/48 | RADB | PNAP-WDC002 3434399 | MAINT-AS1828 | 2023-11-13 | Not announced |
| 2606:f4c0:7000::/43 | ARIN | Prisma Access Equinix QA subnet IRR | MNT-PAN-22 | 2024-09-05 | Not announced |
| 2606:f4c0:7000::/44 | RADB | 2606:f4c0:7000::/44 is for EQUINIX COLO | MAINT-AS64280 | 2024-10-15 | Not announced |
| 66.232.36.0/24 | RADB | 66.232.36.0/24 is being used by Palo Alto Networks - APAC region | MAINT-AS64280 | 2023-11-13 | Announced |
| 66.232.37.0/24 | RADB | 66.232.37.0/24 is being used by Palo Alto Networks - APAC region | MAINT-AS64280 | 2023-11-13 | Announced |
| 144.125.105.0/24 | ARIN | Palo Alto Networks, Inc | MNT-PAN-22 | 2025-06-18 | Announced |
| 144.125.105.0/24 | RADB | 144.125.105.0/24 used PA Dev testing | MAINT-AS64280 | 2025-09-08 | Announced |
| 147.185.136.0/24 | RADB | PNAP-SJE CS0504844 | MAINT-AS1828 | 2023-11-13 | Announced |
| 165.85.144.0/24 | ARIN | Prisma Access Equinix QA subnet IRR | MNT-PAN-22 | 2023-03-23 | Announced |
| 165.85.144.0/24 | RADB | This is a proxy route object for an Equinix Connect Customer, Palo Alto | MAINT-AS14609 | 2023-11-13 | Announced |
| 165.85.145.0/24 | ARIN | Prisma Access Equinix QA subnet IRR | MNT-PAN-22 | 2023-03-23 | Announced |
| 165.85.145.0/24 | RADB | This is a proxy route object for an Equinix Connect Customer, Palo Alto | MAINT-AS14609 | 2023-11-13 | Announced |
| 165.85.149.0/24 | RADB | PNAP-SJE paloaltotechops0469158 | MAINT-AS1828 | 2023-11-13 | Announced |
| 165.85.151.0/24 | ARIN | Palo Alto Networks, Inc | MNT-PAN-22 | 2025-06-03 | Announced |
| 165.85.151.0/24 | RADB | 165.85.151.0/24 used by PAQA teams for testing | MAINT-AS64280 | 2025-06-04 | Announced |
| 165.85.250.0/23 | RADB | PNAP-SJE paloaltotechops | MAINT-AS1828 | 2023-11-13 | Announced |
| 165.85.252.0/24 | ARIN | Palo Alto Networks, Inc | MNT-PAN-22 | 2025-06-03 | Announced |
| 165.85.252.0/24 | RADB | 165.85.252.0/24 used by PAQA teams for testing | MAINT-AS64280 | 2025-06-04 | Announced |
| 169.224.130.0/24 | ARIN | Prisma Access Equinix QA subnet IRR | MNT-PAN-22 | 2024-08-30 | Announced |
| 169.224.130.0/24 | RADB | 169.224.130.0/24 is used for Equinix COLO | MAINT-AS64280 | 2024-10-15 | Announced |
| 169.224.131.0/24 | ARIN | Prisma Access Equinix QA subnet IRR | MNT-PAN-22 | 2024-08-30 | Announced |
| 169.224.131.0/24 | RADB | 169.224.131.0/24 IS BY EQUINIX COLO | MAINT-AS64280 | 2024-10-15 | Announced |
| 169.224.138.0/24 | RADB | — | MAINT-AS64280 | 2024-10-22 | Announced |
| 193.110.180.0/24 | RIPE | — | LIR-NL-PALOALTO-1-MNT | 2025-11-11 | Announced |
| 199.167.52.0/24 | RADB | PNAP-SJE paloaltonetit-1 | MAINT-AS1828 | 2023-11-13 | Announced |
| 199.167.53.0/24 | RADB | PNAP-DAL | MAINT-AS1828 | 2023-11-13 | Announced |
| 202.189.133.0/24 | APNIC | Singapore Telecommunications (SINGTEL Internet Exchange) | MAINT-SINGTEL-IX | 2021-09-14 | Announced |
| 2606:f4c0:7010::/44 | RADB | 2606:f4c0:7010::/44 is for EQUINIX COLO | MAINT-AS64280 | 2024-10-15 | Announced |
| 2620:52:c000::/48 | RADB | PNAP-SJE paloalto-route | MAINT-AS1828 | 2023-11-13 | Announced |
| 2a14:dc00::/48 | RIPE | — | LIR-NL-PALOALTO-1-MNT | 2026-01-12 | Announced |
| 2a14:dc00:1::/48 | RIPE | — | LIR-NL-PALOALTO-1-MNT | 2026-01-12 | Announced |
| 2a14:dc00:2::/48 | RIPE | — | LIR-NL-PALOALTO-1-MNT | 2026-01-12 | Announced |
| 2a14:dc00:3::/48 | RIPE | — | LIR-NL-PALOALTO-1-MNT | 2026-01-12 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS54538 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-C3 | RADB | Lists AS54538 as a direct member |
AS-EC-SV | RADB | Lists AS54538 as a direct member |
AS-GTTCUST | RIPE | Lists AS54538 as a direct member |
AS-HOTNET-IL | RIPE | Lists AS54538 as a direct member |
AS-IIJ | RADB | Lists AS54538 as a direct member |
AS-IIJ6 | RADB | Lists AS54538 as a direct member |
AS-JARMTELCO | ALTDB | Lists AS54538 as a direct member |
AS-NV | RIPE | Lists AS54538 as a direct member |
AS-PNAPSJE | RADB | Lists AS54538 as a direct member |
AS-SINGTEL | RADB | Lists AS54538 as a direct member |
AS-ZENLAYER | RADB | Lists AS54538 as a direct member |
AS2497:AS-IIJ | RADB | Lists AS54538 as a direct member |
AS2497:AS-IIJ6 | RADB | Lists AS54538 as a direct member |
AS8220:AS-COLTSG | RIPE | Lists AS54538 as a direct member |
RPKI from rpki-client, validated 2026-10-15 12:09 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-15. Cross-check on bgp.he.net.