Network · data from 2026-11-12
AS40806 GrapheneOS
Registry name: GRAPHENEOS - GrapheneOS Foundation, CA · PeeringDB
Announced routes
Every prefix a peer of the route collectors sees with origin AS40806, things to look at first. Visibility = full-table peers that see it, of 673 (IPv4) and 636 (IPv6) on 75 collectors. Also as routes.csv.
| 91.246.30.0/24 | Invalid: origin | None | 2 0%low visibility |
| 23.149.124.0/24 | Valid | RIR databaseARIN | 672 100% |
| 206.220.120.0/24 | Valid | RIR databaseARIN | 671 100% |
| 23.149.125.0/24 | Valid | RIR databaseARIN | 670 100% |
| 2602:f4d9:4::/48 | Valid | RIR databaseARIN | 636 100% |
| 2602:f4d9:9::/48 | Valid | RIR databaseARIN | 636 100% |
| 2602:f4d9:a::/48 | Valid | RIR databaseARIN | 636 100% |
| 2602:f4d9:b::/48 | Valid | RIR databaseARIN | 636 100% |
| 2602:f4d9:d::/48 | Valid | RIR databaseARIN | 635 100% |
| 2602:f4d9::/48 | Valid | RIR databaseARIN, RADB | 634 100% |
| 2602:f4d9:1::/48 | Valid | RIR databaseARIN | 634 100% |
| 2602:f4d9:2::/48 | Valid | RIR databaseARIN | 634 100% |
| 2602:f4d9:3::/48 | Valid | RIR databaseARIN | 634 100% |
| 2602:f4d9:5::/48 | Valid | RIR databaseARIN | 634 100% |
| 2602:f4d9:c::/48 | Valid | RIR databaseARIN | 634 100% |
AS-SET
PeeringDB's irr_as_set for AS40806: AS40806:AS-ALL. Expanded from the day's IRR dumps the way bgpq4 does against whois.radb.net: a name with a database is read from that database only, one without from the first database in RADB's order. "Not covered" = this network's own routes that a filter built from the set would leave out (AS40806 isn't in the set, or no route object for AS40806 covers the route; more-specifics of a route object are accepted down to /24 and /48, as with bgpq4 -A -R 24 / -R 48). Customers' routes aren't counted: the collectors show each route's origin, not which network it came through.
| Name | Database | ASNs | Sets | AS40806 in it | Not covered |
|---|---|---|---|---|---|
| AS40806:AS-ALL | ARIN | 1 | 1 | Yes | 1 |
Fix list
The changes that would bring RPKI, the IRR and what's announced into line. Some are deliberate (a route object kept for a backup route, say); the network decides. All 8 are in fix.csv.
- ROA: origin1
- Route object: none1
- Route object: not announced6
| Change | Prefix or set | Detail |
|---|---|---|
| ROA: origin | 91.246.30.0/24 | An AS0 ROA covers it (the holder's statement that it shouldn't be routed). If AS40806 should announce it, add a ROA for AS40806. |
| Route object: none | 91.246.30.0/24 | No route object for it. Add a route object with origin AS40806 in the RIR database for the space. |
Route objects not announced
Route objects with origin AS40806 whose prefix no peer sees AS40806 announce. Many are kept on purpose (backup routes, space announced only in some places).
| 206.220.121.0/24 | ARIN | Valid |
| 206.220.122.0/24 | ARIN | Valid |
| 206.220.123.0/24 | ARIN | Valid |
| 2602:f4d9:6::/48 | ARIN | Valid |
| 2602:f4d9:7::/48 | ARIN | Valid |
| 2602:f4d9:8::/48 | ARIN | Valid |
Routes: the 08:00 UTC snapshots of 2026-11-12 from 75 RIPE RIS and RouteViews collectors. RPKI: our rpki-client run before the snapshot. IRR: the day's dumps of the five RIR databases and RADB's mirrors. The LEVEL3 and IDNIC databases publish no dump and aren't read, so route objects only there count as none.