bgpreport

Network · data from 2026-11-12

AS21096 DSTSIP-AS The State Cyber Protection Center of the State Service of Special Communication and Information Protection of Ukraine

Registry name: DSTSIP-AS The State Cyber Protection Center of the State Service of Special Communication and Information Protection of Ukraine, UA · not in PeeringDB

5IPv4 routes 100.0% RPKI valid · 100.0% with a route object
1IPv6 routes 100.0% RPKI valid · 100.0% with a route object
0RPKI invalid 0 origin · 0 maxLength
0No ROA 0 with no route object for this origin
0Low visibility seen by under 10% of full-table peers
7Route objects not announced registered with origin AS21096, seen from no peer

Announced routes

Every prefix a peer of the route collectors sees with origin AS21096, things to look at first. Visibility = full-table peers that see it, of 673 (IPv4) and 636 (IPv6) on 75 collectors. Also as routes.csv.

176.103.114.0/23 Valid RIR databaseRIPE 671 100% 68
193.29.204.0/24 Valid RIR databaseRIPE 671 100% 68
193.109.8.0/22 Valid RIR databaseRIPE 671 100% 68
194.42.202.0/24 Valid RIR databaseRIPE 671 100% 68
194.42.203.0/24 Valid RIR databaseRIPE 671 100% 68
2a04:a900:6::/48 Valid RIR databaseRIPE 636 100% 69

AS-SET

AS21096 isn't in PeeringDB, where networks name their AS-SET.

Fix list

The changes that would bring RPKI, the IRR and what's announced into line. Some are deliberate (a route object kept for a backup route, say); the network decides. All 7 are in fix.csv.

  • Route object: not announced7

Route objects not announced

Route objects with origin AS21096 whose prefix no peer sees AS21096 announce. Many are kept on purpose (backup routes, space announced only in some places).

176.103.114.0/24RIPEInvalid: maxLength
176.103.115.0/24RIPEInvalid: maxLength
193.109.8.0/24RIPEInvalid: maxLength
193.109.9.0/24RIPEInvalid: maxLength
193.109.10.0/24RIPEInvalid: maxLength
193.109.11.0/24RIPEInvalid: maxLength
194.42.202.0/23RIPENo ROA

Routes: the 08:00 UTC snapshots of 2026-11-12 from 75 RIPE RIS and RouteViews collectors. RPKI: our rpki-client run before the snapshot. IRR: the day's dumps of the five RIR databases and RADB's mirrors. The LEVEL3 and IDNIC databases publish no dump and aren't read, so route objects only there count as none.