bgpreport

Network · data from 2026-11-12

AS24940 Hetzner Online

Registry name: HETZNER-AS Hetzner Online GmbH, DE · PeeringDB

96IPv4 routes 66.7% RPKI valid · 96.9% with a route object
5IPv6 routes 80.0% RPKI valid · 100.0% with a route object
2RPKI invalid 2 origin · 0 maxLength
31No ROA 3 with no route object for this origin
3Low visibility seen by under 10% of full-table peers
24Route objects not announced registered with origin AS24940, seen from no peer

Announced routes

Every prefix a peer of the route collectors sees with origin AS24940, things to look at first. Visibility = full-table peers that see it, of 673 (IPv4) and 636 (IPv6) on 75 collectors. Also as routes.csv.

195.66.224.0/21 Invalid: origin None 5 1%low visibility 5
185.1.166.0/23 Invalid: origin Other origin only 4 1%low visibility 4
185.0.48.0/22 No ROA None 5 1%low visibility 5
144.76.0.0/16 No ROA RIR databaseRIPE 673 100% 66
148.251.0.0/16 No ROA RIR databaseRIPE 673 100% 66
78.138.62.0/24 No ROA RIR databaseRIPE 672 100% 66
91.190.240.0/21 No ROA RIR databaseRIPE 672 100% 66
171.25.225.0/24 No ROA RIR databaseRIPE 672 100% 66
185.50.120.0/23 No ROA RIR databaseRIPE 672 100% 66
185.107.52.0/22 No ROA RIR databaseRIPE 672 100% 66
185.126.28.0/22 No ROA RIR databaseRIPE 672 100% 66
185.157.83.0/24 No ROA RIR databaseRIPE 672 100% 66
185.157.176.0/23 No ROA RIR databaseRIPE 672 100% 66
185.157.178.0/23 No ROA RIR databaseRIPE 672 100% 66
185.171.224.0/22 No ROA RIR databaseRIPE 672 100% 66
185.189.228.0/24 No ROA RIR databaseRIPE 672 100% 66
185.189.229.0/24 No ROA RIR databaseRIPE 672 100% 66
185.189.230.0/24 No ROA RIR databaseRIPE 672 100% 66
185.189.231.0/24 No ROA RIR databaseRIPE 672 100% 66
185.213.45.0/24 No ROA RIR databaseRIPE 672 100% 66
185.216.237.0/24 No ROA RIR databaseRIPE 672 100% 66
185.226.99.0/24 No ROA RIR databaseRIPE 672 100% 66
185.228.8.0/23 No ROA RIR databaseRIPE 672 100% 66
193.110.6.0/23 No ROA RIR databaseRIPE 672 100% 66
194.42.180.0/22 No ROA RIR databaseRIPE 672 100% 66
194.42.184.0/22 No ROA RIR databaseRIPE 672 100% 66
194.62.106.0/24 No ROA RIR databaseRIPE 672 100% 66
204.29.146.0/24 No ROA RIR databaseRIPE 672 100% 66
216.55.108.0/22 No ROA RIR databaseARIN 672 100% 66
149.245.242.0/24 No ROA RIR databaseRIPE 671 100% 66
136.243.0.0/16 No ROA RIR databaseRIPE 670 100% 66
138.201.0.0/16 No ROA RIR databaseRIPE 670 100% 66
2a06:be80::/29 No ROA RIR databaseRIPE 633 100% 67
2.28.0.0/16 Valid RIR databaseRIPE 673 100% 66
2.31.0.0/16 Valid RIR databaseRIPE 673 100% 66
5.9.0.0/16 Valid RIR databaseRIPE 673 100% 66
5.75.128.0/17 Valid RIR databaseRIPE 673 100% 66
23.88.0.0/17 Valid RIR databaseRIPE 673 100% 66
37.27.0.0/16 Valid RIR databaseRIPE 673 100% 66
46.4.0.0/16 Valid RIR databaseRIPE 673 100% 66
46.224.0.0/15 Valid RIR databaseRIPE 673 100% 66
49.13.0.0/16 Valid RIR databaseRIPE 673 100% 66
62.238.0.0/17 Valid RIR databaseRIPE 673 100% 66
65.108.0.0/16 Valid RIR databaseRIPE 673 100% 66
65.109.0.0/16 Valid RIR databaseRIPE 673 100% 66
77.42.0.0/17 Valid RIR databaseRIPE 673 100% 66
78.18.0.0/15 Valid RIR databaseRIPE 673 100% 66
78.46.0.0/15 Valid RIR databaseRIPE 673 100% 66
85.10.192.0/18 Valid RIR databaseRIPE 673 100% 66
88.99.0.0/16 Valid RIR databaseRIPE 673 100% 66
91.99.0.0/16 Valid RIR databaseRIPE 673 100% 66
91.107.128.0/17 Valid RIR databaseRADB, RIPE 673 100% 66
95.217.0.0/16 Valid RIR databaseRIPE 673 100% 66
116.202.0.0/16 Valid RIR databaseRIPE 673 100% 66
116.203.0.0/16 Valid RIR databaseRIPE 673 100% 66
128.140.0.0/17 Valid RIR databaseRIPE 673 100% 66
138.199.128.0/17 Valid RIR databaseRIPE 673 100% 66
142.132.128.0/17 Valid RIR databaseRIPE 673 100% 66
157.180.0.0/17 Valid RIR databaseRIPE 673 100% 66
159.69.0.0/16 Valid RIR databaseRIPE 673 100% 66
162.55.0.0/16 Valid RIR databaseRIPE 673 100% 66
167.233.0.0/16 Valid RIR databaseRIPE 673 100% 66
178.104.0.0/15 Valid RIR databaseRIPE 673 100% 66
188.34.128.0/17 Valid RIR databaseRIPE 673 100% 66
188.245.0.0/16 Valid RIR databaseRIPE 673 100% 66
197.242.84.0/22 Valid RIR databaseAFRINIC, RIPE-NONAUTH 673 100% 66
204.168.128.0/17 Valid RIR databaseRIPE 673 100% 66
213.239.192.0/18 Valid RIR databaseRIPE 673 100% 66
31.58.88.0/24 Valid RIR databaseRADB, RIPE 672 100% 66
85.93.20.0/24 Valid RIR databaseRIPE 672 100% 66
178.212.75.0/24 Valid RIR databaseRIPE 672 100% 66
193.105.82.0/24 Valid RIR databaseRIPE 672 100% 66
193.163.198.0/24 Valid RIR databaseRIPE 672 100% 66
195.60.226.0/24 Valid RIR databaseRIPE 672 100% 66
195.248.224.0/24 Valid RIR databaseRIPE 672 100% 66
201.131.3.0/24 Valid RIR databaseLACNIC 672 100% 66
45.15.99.0/24 Valid RIR databaseRIPE 671 100% 66
45.145.227.0/24 Valid RIR databaseRIPE 671 100% 66
2.29.0.0/16 Valid RIR databaseRIPE 670 100% 66
46.62.128.0/17 Valid RIR databaseRIPE 670 100% 67
49.12.0.0/16 Valid RIR databaseRIPE 670 100% 66
65.21.0.0/16 Valid RIR databaseRIPE 670 100% 66
89.167.0.0/17 Valid RIR databaseRIPE 670 100% 66
91.98.0.0/16 Valid RIR databaseRIPE 670 100% 66
94.130.0.0/16 Valid RIR databaseRIPE 670 100% 66
95.216.0.0/16 Valid RIR databaseRIPE 670 100% 66
135.181.0.0/16 Valid RIR databaseRIPE 670 100% 66
157.90.0.0/16 Valid RIR databaseRIPE 670 100% 66
167.235.0.0/16 Valid RIR databaseRIPE 670 100% 66
168.119.0.0/16 Valid RIR databaseRIPE 670 100% 66
176.9.0.0/16 Valid RIR databaseRIPE 670 100% 66
178.63.0.0/16 Valid RIR databaseRIPE 670 100% 66
188.40.0.0/16 Valid RIR databaseRIPE 670 100% 66
195.201.0.0/16 Valid RIR databaseRIPE 670 100% 66
213.133.96.0/19 Valid RIR databaseRIPE 670 100% 66
88.198.0.0/16 Valid RIR databaseRIPE 669 99% 66
185.12.65.0/24 Valid RIR databaseRIPE 638 95% 66
2a01:4f8::/32 Valid RIR databaseRIPE 634 100% 67
2a01:4ff:ff01::/48 Valid RIR databaseRIPE 634 100% 67
2a12:2240::/29 Valid RIR databaseRIPE 632 99% 67
2a01:4f9::/32 Valid RIR databaseRIPE 630 99% 67

AS-SET

PeeringDB's irr_as_set for AS24940: AS-HETZNER. Expanded from the day's IRR dumps the way bgpq4 does against whois.radb.net: a name with a database is read from that database only, one without from the first database in RADB's order. "Not covered" = this network's own routes that a filter built from the set would leave out (AS24940 isn't in the set, or no route object for AS24940 covers the route; more-specifics of a route object are accepted down to /24 and /48, as with bgpq4 -A -R 24 / -R 48). Customers' routes aren't counted: the collectors show each route's origin, not which network it came through.

NameDatabaseASNsSets Route objectsAS24940 in itNot covered
AS-HETZNER RIPE1 member set in no database: AS209186:AS-DOWNSTREAM 276328,929 Yes 3

Fix list

The changes that would bring RPKI, the IRR and what's announced into line. Some are deliberate (a route object kept for a backup route, say); the network decides. All 61 are in fix.csv.

  • ROA: origin2
  • ROA: none31
  • Route object: none3
  • AS-SET: missing member1
  • Route object: not announced24
ChangePrefix or setDetailFull-table peers
ROA: origin195.66.224.0/21An AS0 ROA covers it (the holder's statement that it shouldn't be routed). If AS24940 should announce it, add a ROA for AS24940.5 of 673
Route object: none195.66.224.0/21No route object for it. Add a route object with origin AS24940 in the RIR database for the space.5 of 673
ROA: origin185.1.166.0/23ROAs covering it name AS202409, not AS24940. If AS24940 should announce it, add a ROA for AS24940.4 of 673
Route object: none185.1.166.0/23Route objects for it name AS202409. Add a route object with origin AS24940 in the RIR database for the space.4 of 673
ROA: none185.0.48.0/22No ROA covers it. Add a ROA for AS24940, maxLength 22.5 of 673
Route object: none185.0.48.0/22No route object for it. Add a route object with origin AS24940 in the RIR database for the space.5 of 673
ROA: none144.76.0.0/16No ROA covers it. Add a ROA for AS24940, maxLength 16.673 of 673
ROA: none148.251.0.0/16No ROA covers it. Add a ROA for AS24940, maxLength 16.673 of 673
ROA: none78.138.62.0/24No ROA covers it. Add a ROA for AS24940, maxLength 24.672 of 673
ROA: none91.190.240.0/21No ROA covers it. Add a ROA for AS24940, maxLength 21.672 of 673
ROA: none171.25.225.0/24No ROA covers it. Add a ROA for AS24940, maxLength 24.672 of 673
ROA: none185.50.120.0/23No ROA covers it. Add a ROA for AS24940, maxLength 23.672 of 673
ROA: none185.107.52.0/22No ROA covers it. Add a ROA for AS24940, maxLength 22.672 of 673
ROA: none185.126.28.0/22No ROA covers it. Add a ROA for AS24940, maxLength 22.672 of 673
ROA: none185.157.83.0/24No ROA covers it. Add a ROA for AS24940, maxLength 24.672 of 673
ROA: none185.157.176.0/23No ROA covers it. Add a ROA for AS24940, maxLength 23.672 of 673
ROA: none185.157.178.0/23No ROA covers it. Add a ROA for AS24940, maxLength 23.672 of 673
ROA: none185.171.224.0/22No ROA covers it. Add a ROA for AS24940, maxLength 22.672 of 673
ROA: none185.189.228.0/24No ROA covers it. Add a ROA for AS24940, maxLength 24.672 of 673
ROA: none185.189.229.0/24No ROA covers it. Add a ROA for AS24940, maxLength 24.672 of 673
ROA: none185.189.230.0/24No ROA covers it. Add a ROA for AS24940, maxLength 24.672 of 673
ROA: none185.189.231.0/24No ROA covers it. Add a ROA for AS24940, maxLength 24.672 of 673
ROA: none185.213.45.0/24No ROA covers it. Add a ROA for AS24940, maxLength 24.672 of 673
ROA: none185.216.237.0/24No ROA covers it. Add a ROA for AS24940, maxLength 24.672 of 673
ROA: none185.226.99.0/24No ROA covers it. Add a ROA for AS24940, maxLength 24.672 of 673
ROA: none185.228.8.0/23No ROA covers it. Add a ROA for AS24940, maxLength 23.672 of 673
ROA: none193.110.6.0/23No ROA covers it. Add a ROA for AS24940, maxLength 23.672 of 673
ROA: none194.42.180.0/22No ROA covers it. Add a ROA for AS24940, maxLength 22.672 of 673
ROA: none194.42.184.0/22No ROA covers it. Add a ROA for AS24940, maxLength 22.672 of 673
ROA: none194.62.106.0/24No ROA covers it. Add a ROA for AS24940, maxLength 24.672 of 673
ROA: none204.29.146.0/24No ROA covers it. Add a ROA for AS24940, maxLength 24.672 of 673
ROA: none216.55.108.0/22No ROA covers it. Add a ROA for AS24940, maxLength 22.672 of 673
ROA: none149.245.242.0/24No ROA covers it. Add a ROA for AS24940, maxLength 24.671 of 673
ROA: none136.243.0.0/16No ROA covers it. Add a ROA for AS24940, maxLength 16.670 of 673
ROA: none138.201.0.0/16No ROA covers it. Add a ROA for AS24940, maxLength 16.670 of 673
ROA: none2a06:be80::/29No ROA covers it. Add a ROA for AS24940, maxLength 29.633 of 636
AS-SET: missing memberAS-HETZNERAS-HETZNER (RIPE) lists AS209186:AS-DOWNSTREAM; no IRR database read has it.

Route objects not announced

Route objects with origin AS24940 whose prefix no peer sees AS24940 announce. Many are kept on purpose (backup routes, space announced only in some places).

5.161.0.0/17RADBValid
5.161.0.0/18RADBValid
5.161.64.0/18RADBValid
5.161.128.0/18RADBValid
5.222.0.0/16RIPENo ROA
45.136.70.0/23RIPEValid
45.148.28.0/22RIPEValid
82.39.175.0/24RADB, RIPEValid
83.219.100.0/22RIPENo ROA
91.107.128.0/19RADBValid
94.72.141.0/24RIPEValid
139.28.242.0/23RADBValid
185.136.140.0/23RIPENo ROA
193.223.77.0/24RIPENo ROA
194.35.12.0/23RIPEValid
217.60.74.0/24RIPEValid
217.78.237.0/24RIPEValid
2001:67c:1164::/48RIPEValid
2620:dd:a000::/48ARINValid
2a06:1301:4050::/48RIPENo ROA
2a11:e980::/29RIPEValid
2a13:9500:12c::/48RIPEValid
2a13:9500:151::/48RIPEValid
2a13:9500:165::/48RIPEValid

Routes: the 08:00 UTC snapshots of 2026-11-12 from 75 RIPE RIS and RouteViews collectors. RPKI: our rpki-client run before the snapshot. IRR: the day's dumps of the five RIR databases and RADB's mirrors. The LEVEL3 and IDNIC databases publish no dump and aren't read, so route objects only there count as none.