asn.dev

Routing security

AS60431 PNO-AS

Unclassified RIPE

RPKI valid 100% 5 of 5 announcements
RPKI invalid 0 none
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 4 authorising this AS

Announcements

What this network originates

5 observed

Every prefix observed with AS60431 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a0f:85c1:bc0::/44RPKI validIRR33
2a05:dfc1:4c00::/44RPKI validIRR34
2a05:dfc1:4c20::/44RPKI validIRR33
31.58.70.0/24RPKI validIRR54
2001:678:cb0::/48RPKI validIRR31

RPKI · ROAs

Route origin authorisations

4 ROAs

Signed statements by address holders that AS60431 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
31.58.70.0/24/24RIPENCC
2001:678:cb0::/48/48RIPENCC
2a05:dfc1:4c00::/40/48RIPENCC
2a0f:85c1:bc0::/44/44RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

8 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS174Cogent Communications, LLCDeclaredObserved
AS6939Hurricane Electric LLCDeclaredObserved
AS34927iFog GmbHDeclaredObserved
AS41495Faelix LimitedDeclaredObserved
AS50917Diederik Focko de ZeeDeclaredObserved
AS56630Melbikomas UABDeclarednot observed
AS137409GSL Networks Pty LTDDeclarednot observed
AS209735Lagrange Cloud Technologies LimitedDeclaredObserved
AS24482SG.GSnot declaredObserved
AS25091IP-Max SAnot declaredObserved
AS1103SURF B.V.not declaredObserved
AS20764CJSC RASCOMnot declaredObserved
AS20766Association "Gitoyen"not declaredObserved
AS37721Virtual Technologies & Solutionsnot declaredObserved
AS205794JINZE YANGnot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

7 objects · 2 not announced

Route objects naming AS60431 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
2a05:dfc1:4c00::/40RIPE—CLOUDIE-MNT2023-06-01Not announced
2a05:dfc1:4cff::/48RIPE—PNO-NOC-MNT2023-11-13Not announced
31.58.70.0/24RIPE—NETUTILS-MNT2025-03-13Announced
2001:678:cb0::/48RIPE—PNO-NOC-MNT2023-06-09Announced
2a05:dfc1:4c00::/44RIPE—PNO-NOC-MNT2024-10-07Announced
2a05:dfc1:4c20::/44RIPE—PNO-NOC-MNT2024-05-30Announced
2a0f:85c1:bc0::/44RIPE—PNO-NOC-MNT2025-03-14Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS60431 directly show who expects to carry it.

AS-setWhereRelationship
AS-HURRICANEV6RADBLists AS60431 as a direct member
AS-IFOGALTDBLists AS60431 as a direct member
AS-IFOGRIPELists AS60431 as a direct member
AS-RETN-ACTUAL-V6RIPELists AS60431 as a direct member
AS-SITEFASTRIPELists AS60431 as a direct member
AS-TRANSROUTE-SPECRIPELists AS60431 as a direct member
AS137409:AS-MERCURYRADBLists AS60431 as a direct member
AS50917:AS-PR-PFRIPELists AS60431 as a direct member
AS60431:AS-PNORIPELists AS60431 as a direct member

RPKI from rpki-client, validated 2026-10-17 12:17 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, collected 2026-10-17. Cross-check on bgp.he.net.