asn.dev

Routing security

AS59689 CODE40-AS

Hosting RIPE

RPKI valid 100% 3 of 3 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 3 authorising this AS

Announcements

What this network originates

3 observed

Every prefix observed with AS59689 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a02:5cc0::/32RPKI validIRR34
185.3.128.0/22RPKI validIRR53
185.106.117.0/24RPKI validIRR53

RPKI · ROAs

Route origin authorisations

3 ROAs

Signed statements by address holders that AS59689 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
185.3.128.0/22/22RIPENCC
185.106.117.0/24/24RIPENCC
2a02:5cc0::/32/32RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

3 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS6939Hurricane Electric LLCDeclaredObserved
AS29075IELO-LIAZO SERVICES SASDeclaredObserved
AS30781Free Pro SASDeclaredObserved
AS24482SG.GSnot declaredObserved
AS50628Leonix Telecom SASnot declaredObserved
AS12779IT.Gate S.p.A.not declaredObserved
AS37721Virtual Technologies & Solutionsnot declaredObserved
AS39801France IX Services SASUnot declaredObserved
AS20766Association "Gitoyen"not declaredObserved
AS34927iFog GmbHnot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

3 objects · 0 not announced

Route objects naming AS59689 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
185.3.128.0/22RIPECODE40 cidr blockLIR-FR-CODE40-1-MNT2025-03-22Announced
185.106.117.0/24RIPECode40 117 blockLIR-FR-CODE40-1-MNT2026-01-30Announced
2a02:5cc0::/32RIPEKeyade ipv6 cidr blockMNT-KEYADE2012-09-26Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS59689 directly show who expects to carry it.

AS-setWhereRelationship
AS-FRANCEIX-MRS-LISTRIPELists AS59689 as a direct member
AS-FRANCEIX-PAR-LISTRIPELists AS59689 as a direct member
AS-HURRICANEV6RADBLists AS59689 as a direct member
AS-KEYADERIPELists AS59689 as a direct member
AS-TELICITY-PEERING-FRANCE-IXRIPELists AS59689 as a direct member
AS29075:AS-CUSTOMERSRIPELists AS59689 as a direct member
AS29169:AS-PEERS4RIPELists AS59689 as a direct member
AS29169:AS-PEERS6RIPELists AS59689 as a direct member
AS42064:AS-MEMBERS:AS-MRS-RSRIPELists AS59689 as a direct member
AS51706:AS-MEMBERS:AS-MRS-RSRIPELists AS59689 as a direct member
AS51706:AS-MEMBERS:AS-PAR-RSRIPELists AS59689 as a direct member
AS59689:AS-CODE40RIPELists AS59689 as a direct member

RPKI from rpki-client, validated 2026-10-13 12:16 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-13. Cross-check on bgp.he.net.