bgpreport

Network · data from 2026-11-12

AS9211 n@work

Registry name: WORK-AS Nawork Internet Informationssysteme GmbH, DE · PeeringDB

18IPv4 routes 83.3% RPKI valid · 100.0% with a route object
2IPv6 routes 100.0% RPKI valid · 100.0% with a route object
1RPKI invalid 1 origin · 0 maxLength
2No ROA 0 with no route object for this origin
1Low visibility seen by under 10% of full-table peers
2Route objects not announced registered with origin AS9211, seen from no peer

Announced routes

Every prefix a peer of the route collectors sees with origin AS9211, things to look at first. Visibility = full-table peers that see it, of 673 (IPv4) and 636 (IPv6) on 75 collectors. Also as routes.csv.

195.242.100.0/22 Invalid: origin RIR databaseRIPE 0 0%low visibility 1
192.104.77.0/24 No ROA RIR databaseRIPE 671 100% 68
194.59.4.0/24 No ROA RIR databaseRIPE 671 100% 68
87.253.190.0/24 Valid RIR databaseRIPE 673 100% 66
87.253.191.0/24 Valid RIR databaseRIPE 673 100% 66
31.24.96.0/21 Valid RIR databaseRIPE 671 100% 68
87.253.160.0/20 Valid RIR databaseRIPE 671 100% 68
193.28.52.0/23 Valid RIR databaseRIPE 671 100% 68
193.102.240.0/22 Valid RIR databaseRIPE 671 100% 68
193.194.129.0/24 Valid RIR databaseRIPE 671 100% 68
194.49.7.0/24 Valid RIR databaseRIPE 671 100% 68
194.76.62.0/23 Valid RIR databaseRIPE 671 100% 68
194.156.189.0/24 Valid RIR databaseRIPE 671 100% 68
212.12.32.0/20 Valid RIR databaseRIPE 671 100% 68
212.12.56.0/21 Valid RIR databaseRIPE 671 100% 68
213.238.32.0/20 Valid RIR databaseRIPE 671 100% 68
213.238.50.0/23 Valid RIR databaseRIPE 671 100% 68
213.238.52.0/22 Valid RIR databaseRIPE 671 100% 68
2a00:ea8::/32 Valid RIR databaseRIPE 635 100% 69
2a00:eab::/32 Valid RIR databaseRIPE 635 100% 69

AS-SET

PeeringDB's irr_as_set for AS9211: AS9211:AS-WORK. Expanded from the day's IRR dumps the way bgpq4 does against whois.radb.net: a name with a database is read from that database only, one without from the first database in RADB's order. "Not covered" = this network's own routes that a filter built from the set would leave out (AS9211 isn't in the set, or no route object for AS9211 covers the route; more-specifics of a route object are accepted down to /24 and /48, as with bgpq4 -A -R 24 / -R 48). Customers' routes aren't counted: the collectors show each route's origin, not which network it came through.

NameDatabaseASNsSets Route objectsAS9211 in itNot covered
AS9211:AS-WORK RIPElists itself further down 337250 Yes 0

Fix list

The changes that would bring RPKI, the IRR and what's announced into line. Some are deliberate (a route object kept for a backup route, say); the network decides. All 5 are in fix.csv.

  • ROA: origin1
  • ROA: none2
  • Route object: not announced2
ChangePrefix or setDetailFull-table peers
ROA: origin195.242.100.0/22ROAs covering it name AS52051, not AS9211. If AS9211 should announce it, add a ROA for AS9211.0 of 673
ROA: none192.104.77.0/24No ROA covers it. Add a ROA for AS9211, maxLength 24.671 of 673
ROA: none194.59.4.0/24No ROA covers it. Add a ROA for AS9211, maxLength 24.671 of 673

Route objects not announced

Route objects with origin AS9211 whose prefix no peer sees AS9211 announce. Many are kept on purpose (backup routes, space announced only in some places).

213.238.35.0/24RIPEValid
2a0b:cc7::/32RIPENo ROA

Routes: the 08:00 UTC snapshots of 2026-11-12 from 75 RIPE RIS and RouteViews collectors. RPKI: our rpki-client run before the snapshot. IRR: the day's dumps of the five RIR databases and RADB's mirrors. The LEVEL3 and IDNIC databases publish no dump and aren't read, so route objects only there count as none.