Announced routes
Every prefix a peer of the route collectors sees with origin AS28686, things to look at first. Visibility = full-table peers that see it, of 673 (IPv4) and 636 (IPv6) on 75 collectors. Also as routes.csv.
| 93.191.248.0/21 | No ROA | RIR databaseRIPE | 673 100% |
| 185.184.116.0/22 | No ROA | RIR databaseRIPE | 671 100% |
| 185.196.104.0/22 | No ROA | RIR databaseRIPE | 671 100% |
| 2a0b:3380::/29 | No ROA | RIR databaseRIPE | 634 100% |
| 2a0a:6bc0::/29 | No ROA | RIR databaseRIPE | 633 100% |
| 93.191.255.0/24 | Valid | RIR databaseRIPE | 673 100% |
| 159.168.0.0/16 | Valid | RIR databaseRIPE | 673 100% |
| 159.168.0.0/24 | Valid | RIR databaseRIPE | 673 100% |
| 159.168.112.0/20 | Valid | RIR databaseRIPE | 673 100% |
| 159.168.144.0/21 | Valid | RIR databaseRIPE | 673 100% |
| 159.168.152.0/21 | Valid | RIR databaseRIPE | 673 100% |
| 194.147.176.0/20 | Valid | RIR databaseRIPE | 673 100% |
| 103.55.232.0/22 | Valid | RIR databaseRIPE | 671 100% |
| 159.168.1.0/24 | Valid | RIR databaseRIPE | 671 100% |
| 159.168.7.0/24 | Valid | RIR databaseRIPE | 671 100% |
| 159.168.12.0/24 | Valid | RIR databaseRIPE | 671 100% |
| 159.168.14.0/24 | Valid | RIR databaseRIPE | 671 100% |
| 159.168.24.0/23 | Valid | RIR databaseRIPE | 671 100% |
| 159.168.136.0/23 | Valid | RIR databaseRIPE | 671 100% |
| 159.168.138.0/24 | Valid | RIR databaseRIPE | 671 100% |
| 159.168.140.0/24 | Valid | RIR databaseRIPE | 671 100% |
| 159.168.141.0/24 | Valid | RIR databaseRIPE | 671 100% |
| 185.94.144.0/22 | Valid | RIR databaseRIPE | 671 100% |
| 185.130.140.0/22 | Valid | RIR databaseRIPE | 671 100% |
| 193.135.109.0/24 | Valid | RIR databaseRIPE | 671 100% |
| 193.222.224.0/20 | Valid | RIR databaseRIPE | 671 100% |
| 193.222.240.0/24 | Valid | RIR databaseRIPE | 671 100% |
| 194.147.192.0/22 | Valid | RIR databaseRIPE | 671 100% |
| 2001:67c:638::/48 | Valid | RIR databaseRIPE | 634 100% |
| 2a05:14c0::/29 | Valid | RIR databaseRIPE | 634 100% |
| 2a06:d9c0::/29 | Valid | RIR databaseRIPE | 633 100% |
AS-SET
AS28686's PeeringDB record names no AS-SET.
Fix list
The changes that would bring RPKI, the IRR and what's announced into line. Some are deliberate (a route object kept for a backup route, say); the network decides. All 5 are in fix.csv.
- ROA: none5
| Change | Prefix or set | Detail |
|---|---|---|
| ROA: none | 93.191.248.0/21 | No ROA covers it. Add a ROA for AS28686, maxLength 21. |
| ROA: none | 185.184.116.0/22 | No ROA covers it. Add a ROA for AS28686, maxLength 22. |
| ROA: none | 185.196.104.0/22 | No ROA covers it. Add a ROA for AS28686, maxLength 22. |
| ROA: none | 2a0b:3380::/29 | No ROA covers it. Add a ROA for AS28686, maxLength 29. |
| ROA: none | 2a0a:6bc0::/29 | No ROA covers it. Add a ROA for AS28686, maxLength 29. |
Route objects not announced
Every route object with origin AS28686 is announced.
Routes: the 08:00 UTC snapshots of 2026-11-12 from 75 RIPE RIS and RouteViews collectors. RPKI: our rpki-client run before the snapshot. IRR: the day's dumps of the five RIR databases and RADB's mirrors. The LEVEL3 and IDNIC databases publish no dump and aren't read, so route objects only there count as none.