Routing security

AS58339 MARIA-AS

Unclassified RIPE

RPKI valid 100% 33 of 33 announcements

RPKI invalid 0 none

No ROA 0 not covered by any ROA

IRR registered 100% 0 missing · 0 other origin

ROAs 45 authorising this AS

Announcements

What this network originates

33 observed

Every prefix observed with AS58339 as its origin, checked against RPKI and the IRR. Problems sort first.

Prefix	RPKI	IRR	Vantage points
2a05:dfc1:5f00::/48	RPKI valid	IRR	32
2a05:dfc1:5f20::/48	RPKI valid	IRR	33
2a05:dfc1:8e00::/44	RPKI valid	IRR covering	32
2a05:dfc1:8e00::/45	RPKI valid	IRR covering	29
2a05:dfc1:8e9a::/48	RPKI valid	IRR covering	32
2a05:dfc1:8e9b::/48	RPKI valid	IRR covering	32
2a05:dfc1:8e9c::/48	RPKI valid	IRR covering	32
2a05:dfc1:8e9d::/48	RPKI valid	IRR covering	32
2a05:dfc1:8e9e::/48	RPKI valid	IRR covering	32
2a05:dfc1:8e9f::/48	RPKI valid	IRR covering	32
2a05:dfc1:8e20::/44	RPKI valid	IRR covering	32
2a05:dfc1:8e80::/44	RPKI valid	IRR covering	32
2a05:dfc1:8e80::/46	RPKI valid	IRR covering	29
2a05:dfc1:8e90::/48	RPKI valid	IRR covering	30
2a05:dfc1:8e92::/48	RPKI valid	IRR covering	32
2a05:dfc1:8e93::/48	RPKI valid	IRR covering	32
2a05:dfc1:8e94::/48	RPKI valid	IRR covering	32
2a05:dfc1:8e95::/48	RPKI valid	IRR covering	32
2a05:dfc1:8e96::/48	RPKI valid	IRR covering	32
2a05:dfc1:8e97::/48	RPKI valid	IRR covering	32
2a05:dfc1:8e98::/48	RPKI valid	IRR covering	32
2a05:dfc1:8e99::/48	RPKI valid	IRR covering	32
2a05:dfc1:8ea0::/44	RPKI valid	IRR covering	32
2a05:dfc1:8eb0::/44	RPKI valid	IRR covering	32
2a05:dfc1:8ec0::/44	RPKI valid	IRR covering	32
2a05:dfc1:8ec0::/48	RPKI valid	IRR covering	29
2a05:dfc1:8ee0::/44	RPKI valid	IRR covering	29
2a05:dfc1:8ee0::/47	RPKI valid	IRR covering	29
2a14:7581:5c00::/40	RPKI valid	IRR	7
2a14:7581:5d00::/40	RPKI valid	IRR	7
2a14:7581:5e00::/40	RPKI valid	IRR	7
2a14:7583:ec00::/40	RPKI valid	IRR	34
2a14:7583:ed00::/40	RPKI valid	IRR	33

RPKI · ROAs

Route origin authorisations

45 ROAs

Signed statements by address holders that AS58339 may originate these prefixes, up to the maximum length shown.

Prefix	Max length	Trust anchor
2a05:dfc1:5f00::/40	/48	RIPENCC
2a05:dfc1:5f00::/48	/48	RIPENCC
2a05:dfc1:5f10::/48	/48	RIPENCC
2a05:dfc1:5f15::/48	/48	RIPENCC
2a05:dfc1:5f20::/48	/48	RIPENCC
2a05:dfc1:5f25::/48	/48	RIPENCC
2a05:dfc1:5f30::/48	/48	RIPENCC
2a05:dfc1:5f35::/48	/48	RIPENCC
2a05:dfc1:5f50::/44	/44	RIPENCC
2a05:dfc1:5f60::/44	/44	RIPENCC
2a05:dfc1:5f70::/48	/48	RIPENCC
2a05:dfc1:8e00::/40	/48	RIPENCC
2a05:dfc1:8e00::/44	/44	RIPENCC
2a05:dfc1:8e00::/45	/45	RIPENCC
2a05:dfc1:8e10::/44	/44	RIPENCC
2a05:dfc1:8e20::/44	/44	RIPENCC
2a05:dfc1:8e30::/44	/44	RIPENCC
2a05:dfc1:8e80::/44	/44	RIPENCC
2a05:dfc1:8e80::/46	/46	RIPENCC
2a05:dfc1:8e90::/48	/48	RIPENCC
2a05:dfc1:8e92::/48	/48	RIPENCC
2a05:dfc1:8e93::/48	/48	RIPENCC
2a05:dfc1:8e94::/48	/48	RIPENCC
2a05:dfc1:8e95::/48	/48	RIPENCC
2a05:dfc1:8e96::/48	/48	RIPENCC
2a05:dfc1:8e97::/48	/48	RIPENCC
2a05:dfc1:8e98::/48	/48	RIPENCC
2a05:dfc1:8e99::/48	/48	RIPENCC
2a05:dfc1:8e9a::/48	/48	RIPENCC
2a05:dfc1:8e9b::/48	/48	RIPENCC
2a05:dfc1:8e9c::/48	/48	RIPENCC
2a05:dfc1:8e9d::/48	/48	RIPENCC
2a05:dfc1:8e9e::/48	/48	RIPENCC
2a05:dfc1:8e9f::/48	/48	RIPENCC
2a05:dfc1:8ea0::/44	/44	RIPENCC
2a05:dfc1:8eb0::/44	/44	RIPENCC
2a05:dfc1:8ec0::/44	/44	RIPENCC
2a05:dfc1:8ec0::/48	/48	RIPENCC
2a05:dfc1:8ee0::/44	/44	RIPENCC
2a05:dfc1:8ee0::/47	/47	RIPENCC
2a14:7581:5c00::/40	/48	RIPENCC
2a14:7581:5d00::/40	/48	RIPENCC
2a14:7581:5e00::/40	/48	RIPENCC
2a14:7583:ec00::/40	/48	RIPENCC
2a14:7583:ed00::/40	/48	RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

23 objects · 15 not announced

Route objects naming AS58339 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

Prefix	Source	Description	Maintainer	Changed	Routing
2a05:dfc1:5f00::/40	RIPE	—	`MARIA-NET-MNT`	2023-07-17	Not announced
2a05:dfc1:5f10::/48	RIPE	—	`MARIA-NET-MNT`	2023-07-17	Not announced
2a05:dfc1:5f15::/48	RADB	Vultr Customer Route	`MAINT-AS20473`	2023-11-14	Not announced
2a05:dfc1:5f15::/48	RIPE	—	`MARIA-NET-MNT`	2023-07-17	Not announced
2a05:dfc1:5f25::/48	RIPE	—	`MARIA-NET-MNT`	2023-07-18	Not announced
2a05:dfc1:5f30::/48	RIPE	—	`MARIA-NET-MNT`	2023-07-18	Not announced
2a05:dfc1:5f35::/48	RIPE	—	`MARIA-NET-MNT`	2023-07-18	Not announced
2a05:dfc1:5f50::/44	RIPE	—	`MARIA-NET-MNT`	2023-07-18	Not announced
2a05:dfc1:5f60::/44	RIPE	—	`MARIA-NET-MNT`	2023-07-23	Not announced
2a05:dfc1:5f70::/44	RIPE	—	`MARIA-NET-MNT`	2023-07-23	Not announced
2a05:dfc1:5f85::/48	RIPE	—	`MARIA-NET-MNT`	2023-09-08	Not announced
2a05:dfc1:8e00::/40	RADB	Vultr Customer Route	`MAINT-AS20473`	2023-11-14	Not announced
2a05:dfc1:8e00::/40	RIPE	—	`MARIA-NET-MNT`	2023-09-06	Not announced
2a05:dfc1:8e30::/44	RIPE	MARIA-Services-TW	`MARIA-NET-MNT`	2025-02-10	Not announced
2a10:2f01:211::/48	RIPE	Customer Route for ready 2 use BGP Server	`SBMT`	2023-07-18	Not announced
2a05:dfc1:5f00::/48	RIPE	—	`MARIA-NET-MNT`	2023-07-27	Announced
2a05:dfc1:5f20::/48	RIPE	—	`MARIA-NET-MNT`	2023-07-18	Announced
2a14:7581:5c00::/40	RIPE	—	`MARIA-NET-MNT`	2026-08-03	Announced
2a14:7581:5d00::/40	RIPE	—	`MARIA-NET-MNT`	2026-08-03	Announced
2a14:7581:5e00::/40	RIPE	—	`MARIA-NET-MNT`	2026-08-03	Announced
2a14:7583:ec00::/40	RADB	Vultr Customer Route	`MAINT-AS20473`	2026-09-26	Announced
2a14:7583:ec00::/40	RIPE	—	`MARIA-NET-MNT`	2026-04-01	Announced
2a14:7583:ed00::/40	RIPE	—	`MARIA-NET-MNT`	2026-04-01	Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS58339 directly show who expects to carry it.

AS-set	Where	Relationship
`AS-4IXP`	RIPE	Lists AS58339 as a direct member
`AS-4IXP-RS`	RIPE	Lists AS58339 as a direct member
`AS-4IXPV6`	RIPE	Lists AS58339 as a direct member
`AS-BNET`	RIPE	Lists AS58339 as a direct member
`AS-BTELEKOM`	RIPE	Lists AS58339 as a direct member
`AS-HURRICANEV6`	RADB	Lists AS58339 as a direct member
`AS-MISAKA-CUSTOMERS2`	RIPE	Lists AS58339 as a direct member
`AS-SBIX-RS`	RIPE	Lists AS58339 as a direct member
`AS138997:AS-ALL`	APNIC	Lists AS58339 as a direct member
`AS138997:AS-REDUCED`	APNIC	Lists AS58339 as a direct member
`AS20473:AS-VULTR`	RADB	Lists AS58339 as a direct member
`AS209533:AS-BGPTUNNEL`	RIPE	Lists AS58339 as a direct member
`AS34984:AS-TELLCOM`	RIPE	Lists AS58339 as a direct member
`AS58339:AS-MARIA`	RIPE	Lists AS58339 as a direct member
`AS917:AS-CUSTOMERS`	ARIN	Lists AS58339 as a direct member
`AS917:AS-CUSTOMERS-LARGE`	ARIN	Lists AS58339 as a direct member

RPKI from rpki-client, validated 2026-10-12 12:10 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-12. Cross-check on bgp.he.net.