asn.dev

Routing security

AS57021 NTP-SE Anycasted NTP services from Netnod IXPs

Unclassified RIPE

RPKI valid 100% 14 of 14 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 15 authorising this AS

Announcements

What this network originates

14 observed

Every prefix observed with AS57021 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a01:3f7::/48RPKI validIRR34
2a01:3f7:2::/48RPKI validIRR34
2a01:3f7:3::/48RPKI validIRR31
2a01:3f7:4::/48RPKI validIRR34
2a01:3f7:5::/48RPKI validIRR31
2a01:3f7:6::/48RPKI validIRR31
2a01:3f7:7::/48RPKI validIRR34
194.58.200.0/24RPKI validIRR53
194.58.202.0/24RPKI validIRR53
194.58.203.0/24RPKI validIRR55
194.58.204.0/24RPKI validIRR53
194.58.205.0/24RPKI validIRR55
194.58.206.0/24RPKI validIRR55
194.58.207.0/24RPKI validIRR54

RPKI · ROAs

Route origin authorisations

15 ROAs

Signed statements by address holders that AS57021 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
194.58.200.0/24/24RIPENCC
194.58.202.0/24/24RIPENCC
194.58.203.0/24/24RIPENCC
194.58.204.0/24/24RIPENCC
194.58.205.0/24/24RIPENCC
194.58.206.0/24/24RIPENCC
194.58.207.0/24/24RIPENCC
2a01:3f7::/32/48RIPENCC
2a01:3f7::/48/48RIPENCC
2a01:3f7:2::/48/48RIPENCC
2a01:3f7:3::/48/48RIPENCC
2a01:3f7:4::/48/48RIPENCC
2a01:3f7:5::/48/48RIPENCC
2a01:3f7:6::/48/48RIPENCC
2a01:3f7:7::/48/48RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

16 objects · 2 not announced

Route objects naming AS57021 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
194.58.201.0/24RIPENTP Services Netnod Stockholm SpareNETNOD-MNT2015-12-14Not announced
2a01:3f7:1::/48RIPENTP Services Netnod Stockholm SpareNETNOD-MNT2016-01-04Not announced
194.58.200.0/24RIPENTP Services Netnod AnycastNETNOD-MNT2015-12-10Announced
194.58.202.0/24RIPENTP Services Netnod StockholmNETNOD-MNT2015-12-14Announced
194.58.203.0/24RIPENTP Services Netnod GothenburgNETNOD-MNT2015-12-14Announced
194.58.204.0/24RIPENTP Services Netnod MalmoeNETNOD-MNT2015-12-14Announced
194.58.205.0/24RIPENTP Services Netnod SundsvallNETNOD-MNT2015-12-14Announced
194.58.206.0/24RIPENTP Services Netnod LuleaNETNOD-MNT2015-12-14Announced
194.58.207.0/24RIPENTP Services SpareNETNOD-MNT2015-12-14Announced
2a01:3f7::/48RIPENTP Services Netnod AnycastNETNOD-MNT2016-01-04Announced
2a01:3f7:2::/48RIPENTP Services Netnod StockholmNETNOD-MNT2016-01-04Announced
2a01:3f7:3::/48RIPENTP Services Netnod GothenburgNETNOD-MNT2016-01-04Announced
2a01:3f7:4::/48RIPENTP Services Netnod MalmoeNETNOD-MNT2016-01-04Announced
2a01:3f7:5::/48RIPENTP Services Netnod SundsvallNETNOD-MNT2016-01-04Announced
2a01:3f7:6::/48RIPENTP Services Netnod LuleaNETNOD-MNT2016-01-04Announced
2a01:3f7:7::/48RIPENTP Services SpareNETNOD-MNT2016-01-04Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS57021 directly show who expects to carry it.

AS-setWhereRelationship
AS-HURRICANEV6RADBLists AS57021 as a direct member
AS-NERIMRIPELists AS57021 as a direct member
AS-NETNODRIPELists AS57021 as a direct member
AS-SIINAPSERIPELists AS57021 as a direct member

RPKI from rpki-client, validated 2026-10-12 12:10 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-12. Cross-check on bgp.he.net.