Routing security
AS9011 The Patent Office
Unclassified RIPE
Announcements
What this network originates
Every prefix observed with AS9011 as its origin, checked against RPKI and the IRR. Problems sort first.
| Prefix | RPKI | IRR | Vantage points |
|---|---|---|---|
| 2a00:ed00::/32 | RPKI valid | IRR | 30 |
| 212.100.0.0/19 | RPKI valid | IRR | 53 |
| 212.100.0.0/24 | RPKI valid | IRR | 57 |
| 212.100.1.0/24 | RPKI valid | IRR | 57 |
| 212.100.2.0/23 | RPKI valid | IRR | 57 |
| 212.100.4.0/24 | RPKI valid | IRR | 57 |
| 212.100.5.0/24 | RPKI valid | IRR | 57 |
| 212.100.6.0/23 | RPKI valid | IRR | 57 |
| 212.100.8.0/21 | RPKI valid | IRR | 57 |
| 212.100.16.0/20 | RPKI valid | IRR | 57 |
RPKI · ROAs
Route origin authorisations
Signed statements by address holders that AS9011 may originate these prefixes, up to the maximum length shown.
| Prefix | Max length | Trust anchor |
|---|---|---|
| 212.100.0.0/19 | /19 | RIPENCC |
| 212.100.0.0/24 | /24 | RIPENCC |
| 212.100.1.0/24 | /24 | RIPENCC |
| 212.100.2.0/23 | /23 | RIPENCC |
| 212.100.4.0/24 | /24 | RIPENCC |
| 212.100.5.0/24 | /24 | RIPENCC |
| 212.100.6.0/23 | /23 | RIPENCC |
| 212.100.8.0/21 | /21 | RIPENCC |
| 212.100.16.0/20 | /20 | RIPENCC |
| 2a00:ed00::/32 | /32 | RIPENCC |
ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.
RPKI · ASPA
Declared transit providers
This network has signed an ASPA record naming its transit providers. Each is compared against the upstreams observed in routing paths.
| AS | Network | ASPA | Routing paths |
|---|---|---|---|
| AS2856 | British Telecommunications Limited | Declared | Observed |
| AS5089 | Virgin Media Limited | Declared | Observed |
| AS13335 | Cloudflare, Inc. | Declared | Observed |
An observed upstream that is not declared is not necessarily a leak: our upstream inference cannot tell a transit provider from a peer seen in the same position. A declared provider that is never observed is usually a backup path.
IRR
Registered route objects
Route objects naming AS9011 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.
| Prefix | Source | Description | Maintainer | Changed | Routing |
|---|---|---|---|---|---|
| 212.100.0.0/19 | RIPE | Intellectual Property Office | UKPO-RIPE-MNT | 2015-03-17 | Announced |
| 212.100.0.0/24 | RIPE | — | UKPO-RIPE-MNT | 2020-10-01 | Announced |
| 212.100.1.0/24 | RIPE | — | UKPO-RIPE-MNT | 2020-10-01 | Announced |
| 212.100.2.0/23 | RIPE | — | UKPO-RIPE-MNT | 2021-01-12 | Announced |
| 212.100.4.0/24 | RIPE | — | UKPO-RIPE-MNT | 2020-10-01 | Announced |
| 212.100.5.0/24 | RIPE | — | UKPO-RIPE-MNT | 2020-10-01 | Announced |
| 212.100.6.0/23 | RIPE | — | UKPO-RIPE-MNT | 2021-01-12 | Announced |
| 212.100.8.0/21 | RIPE | — | UKPO-RIPE-MNT | 2021-01-12 | Announced |
| 212.100.16.0/20 | RIPE | — | UKPO-RIPE-MNT | 2021-01-12 | Announced |
| 2a00:ed00::/32 | RIPE | — | INFRAIPO-MNT | 2025-06-19 | Announced |
IRR
AS-sets
The as-set is what upstreams expand to build this network's customer filter. Sets that list AS9011 directly show who expects to carry it.
| AS-set | Where | Relationship |
|---|---|---|
AS-BTGB-CUST | RIPE | Lists AS9011 as a direct member |
AS-KDDCUSTOMER2 | RADB | Lists AS9011 as a direct member |
AS-NTLI | RIPE | Lists AS9011 as a direct member |
AS-TELSTRA-INTL-CUSTOMERS | RADB | Lists AS9011 as a direct member |
AS-UUNETUK | RIPE | Lists AS9011 as a direct member |
AS13335:AS-CUSTOMERS | ARIN | Lists AS9011 as a direct member |
AS262206:AS-CRI | RADB | Lists AS9011 as a direct member |
AS37271:AS-TEST-CF | RADB | Lists AS9011 as a direct member |
AS51202:AS-ALL | ALTDB | Lists AS9011 as a direct member |
RPKI from rpki-client, validated 2026-11-01 13:04 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-11-01. Cross-check on bgp.he.net.