Routing security
AS61221 IVALUA-AS
Unclassified AFRINIC
Announcements
What this network originates
Every prefix observed with AS61221 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 5.252.144.0/23 | RPKI valid | IRR covering | 52 |
| 5.252.144.0/24 | RPKI valid | IRR | 52 |
| 5.252.145.0/24 | RPKI valid | IRR | 52 |
| 5.252.146.0/23 | RPKI valid | IRR covering | 53 |
| 5.252.146.0/24 | RPKI valid | IRR | 53 |
| 5.252.147.0/24 | RPKI valid | IRR | 53 |
| 185.14.244.0/23 | RPKI valid | IRR covering | 52 |
| 185.14.244.0/24 | RPKI valid | IRR | 52 |
| 185.14.245.0/24 | RPKI valid | IRR | 52 |
| 185.14.246.0/23 | RPKI valid | IRR | 53 |
| 185.14.246.0/24 | RPKI valid | IRR | 53 |
| 185.14.247.0/24 | RPKI valid | IRR | 53 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS61221 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 5.252.144.0/23 | /23 | RIPENCC |
| 5.252.144.0/24 | /24 | RIPENCC |
| 5.252.145.0/24 | /24 | RIPENCC |
| 5.252.146.0/23 | /23 | RIPENCC |
| 5.252.146.0/24 | /24 | RIPENCC |
| 5.252.147.0/24 | /24 | RIPENCC |
| 185.14.244.0/23 | /23 | RIPENCC |
| 185.14.244.0/24 | /24 | RIPENCC |
| 185.14.245.0/24 | /24 | RIPENCC |
| 185.14.246.0/23 | /23 | RIPENCC |
| 185.14.246.0/24 | /24 | RIPENCC |
| 185.14.247.0/24 | /24 | RIPENCC |
| 2a03:b840:2::/48 | /48 | RIPENCC |
| 2a03:b840:3::/48 | /64 | RIPENCC |
| 2a03:b840:12::/48 | /48 | RIPENCC |
| 2a03:b840:13::/48 | /48 | RIPENCC |
| 2a03:b840:100::/48 | /48 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS174 | Cogent Communications, LLC | Declared | Observed |
| AS3356 | Level 3 Parent, LLC | Declared | Observed |
| AS6939 | Hurricane Electric LLC | Declared | Observed |
| AS8218 | Zayo Infrastructure France SA | Declared | Observed |
| AS24115 | Equinix | Declared | not observed |
| AS6696 | VERIXI SA | not declared | Observed |
| AS20766 | Association "Gitoyen" | not declared | Observed |
| AS24482 | SG.GS | not declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS61221 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 5.252.144.0/22 | RIPE | IVALUA superblock | IVALUA-MNT | 2023-07-04 | Not announced |
| 185.14.244.0/22 | RIPE | IVALUA superblock | IVALUA-MNT | 2013-06-11 | Not announced |
| 2a03:b840::/32 | RIPE | IVALUA superblock | IVALUA-MNT | 2013-06-11 | Not announced |
| 2a03:b840:2::/48 | RIPE | Ivalua TH3 | IVALUA-MNT | 2016-07-20 | Not announced |
| 2a03:b840:3::/48 | RIPE | Ivalua Equinix | IVALUA-MNT | 2013-03-13 | Not announced |
| 2a03:b840:3:1::/64 | RIPE | IVALUA-INFRA | IVALUA-MNT | 2013-04-10 | Not announced |
| 2a03:b840:12::/48 | RIPE | IVALUA-EQUINIX-CUSTOMERS | IVALUA-MNT | 2016-07-20 | Not announced |
| 2a03:b840:13::/48 | RIPE | IVALUA-TH3-CUSTOMERS | IVALUA-MNT | 2016-07-20 | Not announced |
| 2a03:b840:100::/48 | RIPE | Ivalua INFRA Equinix DC2 | IVALUA-MNT | 2013-05-15 | Not announced |
| 2a03:b840:101::/56 | RIPE | Ivalua INFRA Equinix SV4 | IVALUA-MNT | 2014-06-30 | Not announced |
| 2a03:b840:102::/48 | RIPE | Ivalua Equinix DC2 | IVALUA-MNT | 2013-05-15 | Not announced |
| 5.252.144.0/24 | RIPE | Ivalua Paris-North | IVALUA-MNT | 2023-07-04 | Announced |
| 5.252.145.0/24 | RIPE | Ivalua Paris-North | IVALUA-MNT | 2023-07-04 | Announced |
| 5.252.146.0/24 | RIPE | Ivalua Paris-South | IVALUA-MNT | 2023-07-04 | Announced |
| 5.252.147.0/24 | RIPE | Ivalua Paris-South | IVALUA-MNT | 2023-07-04 | Announced |
| 185.14.244.0/24 | RIPE | Ivalua Paris-North | IVALUA-MNT | 2023-07-04 | Announced |
| 185.14.245.0/24 | RIPE | Ivalua Paris-North | IVALUA-MNT | 2023-07-04 | Announced |
| 185.14.246.0/23 | RIPE | — | IVALUA-MNT | 2020-10-29 | Announced |
| 185.14.246.0/24 | RIPE | Ivalua Paris-South | IVALUA-MNT | 2023-07-04 | Announced |
| 185.14.247.0/24 | RIPE | Ivalua Paris-South | IVALUA-MNT | 2023-07-04 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS61221 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS8218:AS-CUSTOMERS | RIPE | Lists AS61221 as a direct member |
AS8218:AS-FR-CUSTOMERS | RIPE | Lists AS61221 as a direct member |
RPKI from rpki-client, validated 2026-10-11 12:23 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-11. Cross-check on bgp.he.net.