Network · data from 2026-11-12
AS35788 Forcepoint - AMER
Registry name: Forcepoint-Cloud-AMER-AS Forcepoint UK Limited, GB · PeeringDB
Announced routes
Every prefix a peer of the route collectors sees with origin AS35788, things to look at first. Visibility = full-table peers that see it, of 673 (IPv4) and 636 (IPv6) on 75 collectors. Also as routes.csv.
| 157.167.17.0/24 | Invalid: origin | Other origin only | 2 0%low visibility |
| 157.167.18.0/24 | Invalid: origin | Other origin only | 2 0%low visibility |
| 157.167.21.0/24 | Invalid: origin | Other origin only | 2 0%low visibility |
| 157.167.22.0/24 | Invalid: origin | Other origin only | 2 0%low visibility |
| 157.167.24.0/24 | Invalid: origin | Other origin only | 2 0%low visibility |
| 157.167.25.0/24 | Invalid: origin | Other origin only | 2 0%low visibility |
| 157.167.132.0/24 | Invalid: origin | Other origin only | 2 0%low visibility |
| 103.1.197.0/24 | No ROA | Other origin only | 2 0%low visibility |
| 103.1.198.0/24 | No ROA | Other origin only | 2 0%low visibility |
| 103.1.199.0/24 | No ROA | Other origin only | 2 0%low visibility |
AS-SET
PeeringDB's irr_as_set for AS35788: AS-WHS-US. Expanded from the day's IRR dumps the way bgpq4 does against whois.radb.net: a name with a database is read from that database only, one without from the first database in RADB's order. "Not covered" = this network's own routes that a filter built from the set would leave out (AS35788 isn't in the set, or no route object for AS35788 covers the route; more-specifics of a route object are accepted down to /24 and /48, as with bgpq4 -A -R 24 / -R 48). Customers' routes aren't counted: the collectors show each route's origin, not which network it came through.
| Name | Database | ASNs | Sets | AS35788 in it | Not covered |
|---|---|---|---|---|---|
| AS-WHS-US | RADB | 2 | 2 | Yes | 10 |
| RIPE (also) | 2 | 2 | Yes | 10 |
Fix list
The changes that would bring RPKI, the IRR and what's announced into line. Some are deliberate (a route object kept for a backup route, say); the network decides. All 32 are in fix.csv.
- ROA: origin7
- ROA: none3
- Route object: none10
- Route object: not announced12
| Change | Prefix or set | Detail |
|---|---|---|
| ROA: origin | 157.167.17.0/24 | ROAs covering it name AS44444, not AS35788. If AS35788 should announce it, add a ROA for AS35788. |
| Route object: none | 157.167.17.0/24 | Route objects for it name AS44444. Add a route object with origin AS35788 in the RIR database for the space. |
| ROA: origin | 157.167.18.0/24 | ROAs covering it name AS44444, not AS35788. If AS35788 should announce it, add a ROA for AS35788. |
| Route object: none | 157.167.18.0/24 | Route objects for it name AS44444. Add a route object with origin AS35788 in the RIR database for the space. |
| ROA: origin | 157.167.21.0/24 | ROAs covering it name AS44444, not AS35788. If AS35788 should announce it, add a ROA for AS35788. |
| Route object: none | 157.167.21.0/24 | Route objects for it name AS44444. Add a route object with origin AS35788 in the RIR database for the space. |
| ROA: origin | 157.167.22.0/24 | ROAs covering it name AS44444, not AS35788. If AS35788 should announce it, add a ROA for AS35788. |
| Route object: none | 157.167.22.0/24 | Route objects for it name AS44444. Add a route object with origin AS35788 in the RIR database for the space. |
| ROA: origin | 157.167.24.0/24 | ROAs covering it name AS44444, not AS35788. If AS35788 should announce it, add a ROA for AS35788. |
| Route object: none | 157.167.24.0/24 | Route objects for it name AS44444. Add a route object with origin AS35788 in the RIR database for the space. |
| ROA: origin | 157.167.25.0/24 | ROAs covering it name AS44444, not AS35788. If AS35788 should announce it, add a ROA for AS35788. |
| Route object: none | 157.167.25.0/24 | Route objects for it name AS44444. Add a route object with origin AS35788 in the RIR database for the space. |
| ROA: origin | 157.167.132.0/24 | ROAs covering it name AS44444, not AS35788. If AS35788 should announce it, add a ROA for AS35788. |
| Route object: none | 157.167.132.0/24 | Route objects for it name AS44444. Add a route object with origin AS35788 in the RIR database for the space. |
| ROA: none | 103.1.197.0/24 | No ROA covers it. Add a ROA for AS35788, maxLength 24. |
| Route object: none | 103.1.197.0/24 | Route objects for it name AS14618, AS44444. Add a route object with origin AS35788 in the RIR database for the space. |
| ROA: none | 103.1.198.0/24 | No ROA covers it. Add a ROA for AS35788, maxLength 24. |
| Route object: none | 103.1.198.0/24 | Route objects for it name AS14618, AS44444. Add a route object with origin AS35788 in the RIR database for the space. |
| ROA: none | 103.1.199.0/24 | No ROA covers it. Add a ROA for AS35788, maxLength 24. |
| Route object: none | 103.1.199.0/24 | Route objects for it name AS14618, AS44444. Add a route object with origin AS35788 in the RIR database for the space. |
Route objects not announced
Route objects with origin AS35788 whose prefix no peer sees AS35788 announce. Many are kept on purpose (backup routes, space announced only in some places).
| 85.115.41.0/24 | RIPE | Invalid: origin |
| 85.115.42.0/24 | RIPE | Invalid: origin |
| 177.39.96.0/24 | RADB | No ROA |
| 192.151.178.0/24 | RADB | No ROA |
| 208.87.232.0/24 | RADB | No ROA |
| 208.87.233.0/24 | RADB | No ROA |
| 208.87.234.0/24 | RADB | No ROA |
| 208.87.235.0/24 | RADB | No ROA |
| 208.87.236.0/24 | RADB | No ROA |
| 208.87.237.0/24 | RADB | No ROA |
| 208.87.238.0/24 | RADB | No ROA |
| 208.87.239.0/24 | RADB | No ROA |
Routes: the 08:00 UTC snapshots of 2026-11-12 from 75 RIPE RIS and RouteViews collectors. RPKI: our rpki-client run before the snapshot. IRR: the day's dumps of the five RIR databases and RADB's mirrors. The LEVEL3 and IDNIC databases publish no dump and aren't read, so route objects only there count as none.