asn.dev

Routing security

AS6881 NIXCZ NIX.CZ z.s.p.o.

Unclassified RIPE Non-Profit

RPKI valid 50% 3 of 6 announcements
RPKI invalid 3 dropped by validating networks
No ROA 0 not covered by any ROA
IRR registered 100% 0 missing · 0 other origin
ROAs 11 authorising this AS

Announcements

What this network originates

6 observed

Every prefix observed with AS6881 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
2a02:38:bbbb::10/128RPKI invalid · lengthIRR covering1
2a02:39::/32RPKI invalidIRR1
91.207.231.0/24RPKI invalid · lengthIRR covering1
2a02:38::/32RPKI validIRR34
93.190.128.0/21RPKI validIRR52
195.47.235.0/24RPKI validIRR52

RPKI · ROAs

Route origin authorisations

11 ROAs

Signed statements by address holders that AS6881 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
91.207.230.0/23/23RIPENCC
91.207.234.0/23/23RIPENCC
91.210.16.0/22/32RIPENCC
93.190.128.0/21/32RIPENCC
185.1.34.0/24/32RIPENCC
194.30.187.0/24/32RIPENCC
194.50.100.0/24/32RIPENCC
195.47.235.0/24/32RIPENCC
2001:7f8:14::/48/128RIPENCC
2001:7f8:91::/48/128RIPENCC
2a02:38::/32/32RIPENCC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

4 declared

This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.

ASNetworkASPARouting paths
AS6939Hurricane Electric LLCDeclaredObserved
AS15685CASABLANCA INT a.s.DeclaredObserved
AS25512CD-Telematika a.s.DeclaredObserved
AS29208Quantcom, a.s.DeclaredObserved
AS29504Freenet Liberec, z.s.not declaredObserved
AS24482SG.GSnot declaredObserved
AS8218Zayo Infrastructure France SAnot declaredObserved

An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.

IRR

Registered route objects

6 objects · 2 not announced

Route objects naming AS6881 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

PrefixSourceDescriptionMaintainerChangedRouting
91.207.230.0/23RIPE—AS6881-MNT2019-10-04Not announced
91.207.234.0/23RIPE—AS6881-MNT2019-10-04Not announced
93.190.128.0/21RIPENIX.CZ PUBLIC NET2AS6881-MNT2016-10-07Announced
195.47.235.0/24RIPENIX.CZ PUBLIC NET1AS6881-MNT2016-10-07Announced
2a02:38::/32RIPENIX.CZ IPv6 PUBLIC NETAS6881-MNT2016-10-07Announced
2a02:39::/32RIPE—AS6881-MNT2022-12-20Announced

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS6881 directly show who expects to carry it.

AS-setWhereRelationship
AS6881:AS-NIXPeeringDBDeclared by the operator as its own set
AS-43413_NT-NIXRIPELists AS6881 as a direct member
AS-CDT-NETWORKSRIPELists AS6881 as a direct member
AS-DIALTELECOMRIPELists AS6881 as a direct member
AS-HURRICANEV6RADBLists AS6881 as a direct member
AS-RIS-RRC25RIPELists AS6881 as a direct member
AS-TO2-NIX-PEERRIPELists AS6881 as a direct member
AS-TRANSROUTE-SPECRIPELists AS6881 as a direct member
AS24971:AS-MAI-NIX-PEERRIPELists AS6881 as a direct member
AS42000:AS-NIXCZ-PEERINGSRIPELists AS6881 as a direct member
AS6881:AS-NIXRIPELists AS6881 as a direct member
AS6881:AS-NIX-FENIXRIPELists AS6881 as a direct member
AS8251:AS-NIX-PEERINGSRIPELists AS6881 as a direct member

RPKI from rpki-client, validated 2026-10-13 12:16 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-13. Cross-check on bgp.he.net.