Network · data from 2026-11-12

AS395747 CLOUDFLARENET-SFO05 - Cloudflare, Inc.

Registry name: CLOUDFLARENET-SFO05 - Cloudflare, Inc., US · not in PeeringDB

19IPv4 routes 73.7% RPKI valid · 73.7% with a route object

21IPv6 routes 85.7% RPKI valid · 81.0% with a route object

0RPKI invalid 0 origin · 0 maxLength

8No ROA 9 with no route object for this origin

0Low visibility seen by under 10% of full-table peers

25Route objects not announced registered with origin AS395747, seen from no peer

Announced routes

Every prefix a peer of the route collectors sees with origin AS395747, things to look at first. Visibility = full-table peers that see it, of 673 (IPv4) and 636 (IPv6) on 75 collectors. Also as routes.csv.


8.21.12.0/24	No ROA	Other origin only	672 100%	67
2400:cb00:1010::/48	No ROA	None	635 100%	67
2400:cb00:1011::/48	No ROA	None	635 100%	67
2606:54c1:d::/48	No ROA	Other IRR onlyRADB	635 100%	68
8.17.207.0/24	No ROA	RIR databaseARIN	673 100%	67
8.48.131.0/24	No ROA	RIR databaseARIN	673 100%	67
8.14.199.0/24	No ROA	RIR databaseARIN	672 100%	67
8.39.207.0/24	No ROA	RIR databaseARIN	672 100%	67
162.159.204.0/24	Valid	Other origin only	673 100%	67
172.64.202.0/24	Valid	None	673 100%	67
172.70.95.0/24	Valid	Other origin only	673 100%	67
162.158.64.0/24	Valid	Other origin only	672 100%	67
2a06:98c0:1c00::/48	Valid	Other origin only	636 100%	68
2606:4700:f3::/48	Valid	None	635 100%	67
108.162.209.0/24	Valid	RIR databaseARIN	673 100%	67
162.158.57.0/24	Valid	RIR databaseARIN	673 100%	67
162.158.58.0/24	Valid	RIR databaseARIN	673 100%	67
172.68.136.0/24	Valid	RIR databaseARIN	673 100%	67
172.69.61.0/24	Valid	RIR databaseARIN	673 100%	67
172.71.18.0/24	Valid	RIR databaseARIN	673 100%	67
172.71.19.0/24	Valid	RIR databaseARIN	673 100%	67
172.71.91.0/24	Valid	RIR databaseARIN	673 100%	67
172.71.136.0/24	Valid	RIR databaseARIN	673 100%	67
198.41.128.0/24	Valid	RIR databaseARIN	673 100%	67
2400:cb00:251::/48	Valid	RIR databaseAPNIC	636 100%	68
2400:cb00:517::/48	Valid	RIR databaseAPNIC	636 100%	68
2400:cb00:531::/48	Valid	RIR databaseAPNIC	636 100%	68
2400:cb00:693::/48	Valid	RIR databaseAPNIC	636 100%	68
2400:cb00:748::/48	Valid	RIR databaseAPNIC	636 100%	68
2606:54c1:9::/48	Valid	RIR databaseARIN	636 100%	67
2a06:98c0:1c0b::/48	Valid	RIR databaseRIPE	636 100%	68
2a06:98c0:1c4a::/48	Valid	RIR databaseRIPE	636 100%	68
2a06:98c0:1c59::/48	Valid	RIR databaseRIPE	636 100%	68
2400:cb00:133::/48	Valid	RIR databaseAPNIC	635 100%	67
2400:cb00:518::/48	Valid	RIR databaseAPNIC	635 100%	67
2400:cb00:539::/48	Valid	RIR databaseAPNIC	635 100%	67
2400:cb00:922::/48	Valid	RIR databaseAPNIC	635 100%	67
2400:cb00:1057::/48	Valid	RIR databaseAPNIC	635 100%	67
2606:54c1:2::/48	Valid	RIR databaseARIN	635 100%	67
2606:54c1:3::/48	Valid	RIR databaseARIN	605 95%	67

AS-SET

AS395747 isn't in PeeringDB, where networks name their AS-SET.

Fix list

The changes that would bring RPKI, the IRR and what's announced into line. Some are deliberate (a route object kept for a backup route, say); the network decides. All 43 are in fix.csv.

ROA: none8
Route object: none9
Route object: RIR1
Route object: not announced25

Change	Prefix or set	Detail	Full-table peers
ROA: none	8.21.12.0/24	No ROA covers it. Add a ROA for AS395747, maxLength 24.	672 of 673
Route object: none	8.21.12.0/24	Route objects for it name AS13335. Add a route object with origin AS395747 in the RIR database for the space.	672 of 673
ROA: none	2400:cb00:1010::/48	No ROA covers it. Add a ROA for AS395747, maxLength 48.	635 of 636
Route object: none	2400:cb00:1010::/48	No route object for it. Add a route object with origin AS395747 in the RIR database for the space.	635 of 636
ROA: none	2400:cb00:1011::/48	No ROA covers it. Add a ROA for AS395747, maxLength 48.	635 of 636
Route object: none	2400:cb00:1011::/48	No route object for it. Add a route object with origin AS395747 in the RIR database for the space.	635 of 636
ROA: none	2606:54c1:d::/48	No ROA covers it. Add a ROA for AS395747, maxLength 48.	635 of 636
Route object: RIR	2606:54c1:d::/48	Route object only in RADB. Add it in the RIR database for the space.	635 of 636
ROA: none	8.17.207.0/24	No ROA covers it. Add a ROA for AS395747, maxLength 24.	673 of 673
ROA: none	8.48.131.0/24	No ROA covers it. Add a ROA for AS395747, maxLength 24.	673 of 673
ROA: none	8.14.199.0/24	No ROA covers it. Add a ROA for AS395747, maxLength 24.	672 of 673
ROA: none	8.39.207.0/24	No ROA covers it. Add a ROA for AS395747, maxLength 24.	672 of 673
Route object: none	162.159.204.0/24	Route objects for it name AS13335. Add a route object with origin AS395747 in the RIR database for the space.	673 of 673
Route object: none	172.64.202.0/24	No route object for it. Add a route object with origin AS395747 in the RIR database for the space.	673 of 673
Route object: none	172.70.95.0/24	Route objects for it name AS13335. Add a route object with origin AS395747 in the RIR database for the space.	673 of 673
Route object: none	162.158.64.0/24	Route objects for it name AS132892. Add a route object with origin AS395747 in the RIR database for the space.	672 of 673
Route object: none	2a06:98c0:1c00::/48	Route objects for it name AS13335. Add a route object with origin AS395747 in the RIR database for the space.	636 of 636
Route object: none	2606:4700:f3::/48	No route object for it. Add a route object with origin AS395747 in the RIR database for the space.	635 of 636

Change

Prefix or set

Detail

Full-table peers

ROA: none

8.21.12.0/24

No ROA covers it. Add a ROA for AS395747, maxLength 24.

672 of 673

Route object: none

8.21.12.0/24

Route objects for it name AS13335. Add a route object with origin AS395747 in the RIR database for the space.

672 of 673

ROA: none

2400:cb00:1010::/48

No ROA covers it. Add a ROA for AS395747, maxLength 48.

635 of 636

Route object: none

2400:cb00:1010::/48

No route object for it. Add a route object with origin AS395747 in the RIR database for the space.

635 of 636

ROA: none

2400:cb00:1011::/48

No ROA covers it. Add a ROA for AS395747, maxLength 48.

635 of 636

Route object: none

2400:cb00:1011::/48

No route object for it. Add a route object with origin AS395747 in the RIR database for the space.

635 of 636

ROA: none

2606:54c1:d::/48

No ROA covers it. Add a ROA for AS395747, maxLength 48.

635 of 636

Route object: RIR

2606:54c1:d::/48

Route object only in RADB. Add it in the RIR database for the space.

635 of 636

ROA: none

8.17.207.0/24

No ROA covers it. Add a ROA for AS395747, maxLength 24.

673 of 673

ROA: none

8.48.131.0/24

No ROA covers it. Add a ROA for AS395747, maxLength 24.

673 of 673

ROA: none

8.14.199.0/24

No ROA covers it. Add a ROA for AS395747, maxLength 24.

672 of 673

ROA: none

8.39.207.0/24

No ROA covers it. Add a ROA for AS395747, maxLength 24.

672 of 673

Route object: none

162.159.204.0/24

Route objects for it name AS13335. Add a route object with origin AS395747 in the RIR database for the space.

673 of 673

Route object: none

172.64.202.0/24

No route object for it. Add a route object with origin AS395747 in the RIR database for the space.

673 of 673

Route object: none

172.70.95.0/24

Route objects for it name AS13335. Add a route object with origin AS395747 in the RIR database for the space.

673 of 673

Route object: none

162.158.64.0/24

Route objects for it name AS132892. Add a route object with origin AS395747 in the RIR database for the space.

672 of 673

Route object: none

2a06:98c0:1c00::/48

Route objects for it name AS13335. Add a route object with origin AS395747 in the RIR database for the space.

636 of 636

Route object: none

2606:4700:f3::/48

No route object for it. Add a route object with origin AS395747 in the RIR database for the space.

635 of 636

Route objects not announced

Route objects with origin AS395747 whose prefix no peer sees AS395747 announce. Many are kept on purpose (backup routes, space announced only in some places).


8.20.125.0/24	ARIN	No ROA
104.30.0.0/24	ARIN	Valid
162.158.47.0/24	ARIN	Invalid: origin
162.159.79.0/24	ARIN	Valid
173.245.60.0/23	ARIN	Valid
198.41.129.0/24	ARIN	Valid
198.41.130.0/24	ARIN	Valid
198.41.132.0/22	ARIN	Valid
198.41.132.0/23	ARIN	Valid
198.41.132.0/24	ARIN	Valid
198.41.136.0/22	ARIN	Valid
2400:cb00:131::/48	APNIC	Valid
2400:cb00:164::/48	APNIC	Valid
2400:cb00:171::/48	APNIC	Valid
2400:cb00:302::/48	APNIC	Valid
2400:cb00:692::/48	APNIC	Valid
2606:4700:2001::/48	ARIN	Valid
2606:4700:3131::/48	ARIN	Valid
2606:4700:ff01::/48	ARIN	Valid
2606:4700:ff02::/48	ARIN	No ROA
2a06:98c0:1c01::/48	RIPE	Valid
2a09:bac0:108::/48	RIPE	Valid
2a09:bac0:131::/48	RIPE	Valid
2a09:bac0:133::/48	RIPE	Valid
2a09:bac0:693::/48	RIPE	Valid

8.20.125.0/24

ARIN

No ROA

104.30.0.0/24

ARIN

Valid

162.158.47.0/24

ARIN

Invalid: origin

162.159.79.0/24

ARIN

Valid

173.245.60.0/23

ARIN

Valid

198.41.129.0/24

ARIN

Valid

198.41.130.0/24

ARIN

Valid

198.41.132.0/22

ARIN

Valid

198.41.132.0/23

ARIN

Valid

198.41.132.0/24

ARIN

Valid

198.41.136.0/22

ARIN

Valid

2400:cb00:131::/48

APNIC

Valid

2400:cb00:164::/48

APNIC

Valid

2400:cb00:171::/48

APNIC

Valid

2400:cb00:302::/48

APNIC

Valid

2400:cb00:692::/48

APNIC

Valid

2606:4700:2001::/48

ARIN

Valid

2606:4700:3131::/48

ARIN

Valid

2606:4700:ff01::/48

ARIN

Valid

2606:4700:ff02::/48

ARIN

No ROA

2a06:98c0:1c01::/48

RIPE

Valid

2a09:bac0:108::/48

RIPE

Valid

2a09:bac0:131::/48

RIPE

Valid

2a09:bac0:133::/48

RIPE

Valid

2a09:bac0:693::/48

RIPE

Valid

Routes: the 08:00 UTC snapshots of 2026-11-12 from 75 RIPE RIS and RouteViews collectors. RPKI: our rpki-client run before the snapshot. IRR: the day's dumps of the five RIR databases and RADB's mirrors. The LEVEL3 and IDNIC databases publish no dump and aren't read, so route objects only there count as none.