{"tool":"network-report","status":"fail","input":{"query":"AS1267"},"findings":[{"level":"fail","text":"AS1267 (ASN-WINDTRE) announces 220 IPv4 and 2 IPv6 prefixes.","title":"AS1267 (ASN-WINDTRE) announces 220 IPv4 and 2 IPv6 prefixes.","params":{"query":"AS1267","who":"AS1267 (ASN-WINDTRE)","v4":220,"v6":2}},{"level":"fail","text":"26 of 222 announced prefixes are RPKI invalid: 91.255.32.0/20, 94.160.0.0/17, 94.160.128.0/17, 94.161.0.0/17, 94.161.128.0/17 (+21).","title":"26 of 222 announced prefixes are RPKI invalid: 91.255.32.0/20, 94.160.0.0/17, 94.160.128.0/17, 94.161.0.0/17, 94.161.128.0/17 (+21).","params":{"count":26,"total":222,"list":"91.255.32.0/20, 94.160.0.0/17, 94.160.128.0/17, 94.161.0.0/17, 94.161.128.0/17 (+21)"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes."},{"level":"warn","text":"74 of 222 announced prefixes have no IRR route object: 151.59.228.0/22, 151.58.160.0/20, 217.20.0.0/20, 94.166.0.0/17, 5.77.76.0/22 (+69).","title":"74 of 222 announced prefixes have no IRR route object: 151.59.228.0/22, 151.58.160.0/20, 217.20.0.0/20, 94.166.0.0/17, 5.77.76.0/22 (+69).","params":{"count":74,"total":222,"list":"151.59.228.0/22, 151.58.160.0/20, 217.20.0.0/20, 94.166.0.0/17, 5.77.76.0/22 (+69)","asn":1267},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS1267 in your RIR’s IRR database (or RADB).","record":"route: 151.59.228.0/22\norigin: AS1267\n\nroute: 151.58.160.0/20\norigin: AS1267\n\nroute: 217.20.0.0/20\norigin: AS1267"},{"level":"warn","text":"No public NOC, policy or technical contact.","title":"No public NOC, policy or technical contact.","params":{},"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."}],"data":{"query":"AS1267","kind":"asn","special":null,"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"IT","country":"Italy","date":"1993-09-01","status":"allocated","range":"AS1267","opaque_id":"e57355ff-e991-4a8a-bba3-f4b0c2ffee17","special":null},"verdict":{"level":"fail","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS1267","who":"AS1267 (ASN-WINDTRE)","v4":220,"v6":2}},"seconds":6.0999999999999996,"sections":{"routing":{"status":"fail","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":1267,"v4":220,"v6":2}},{"tool":["rpki",{"prefix":"91.255.32.0/20","asn":"1267"}],"guide":"create-rpki-roas","level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":26,"total":222,"list":"91.255.32.0/20, 94.160.0.0/17, 94.160.128.0/17, 94.161.0.0/17, 94.161.128.0/17 (+21)"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes."},{"level":"info","title":":count of :total announced prefixes are RPKI valid.","params":{"count":117,"total":222}},{"level":"info","title":"The RPKI state of :count prefixes was not looked up (no ROA of AS:asn covers them; only the first :n are checked).","params":{"count":79,"asn":1267,"n":10}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":74,"total":222,"list":"151.59.228.0/22, 151.58.160.0/20, 217.20.0.0/20, 94.166.0.0/17, 5.77.76.0/22 (+69)","asn":1267},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 151.59.228.0/22\norigin: AS1267\n\nroute: 151.58.160.0/20\norigin: AS1267\n\nroute: 217.20.0.0/20\norigin: AS1267"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":93,"right":1011}}],"data":{"asn":1267,"holder":"ASN-WINDTRE WIND TRE S.P.A.","announced":true,"v4":220,"v6":2,"prefixes":["2.156.0.0/18","2.156.64.0/18","2.156.128.0/18","2.156.192.0/18","2.157.0.0/18","2.157.64.0/18","2.157.128.0/18","2.157.192.0/18","2.158.0.0/18","2.158.64.0/18","2.158.128.0/18","2.158.192.0/18","2.159.0.0/18","2.159.64.0/18","2.159.128.0/18","2.159.192.0/18","5.77.64.0/22","5.77.68.0/22","5.77.72.0/22","5.77.76.0/22","5.77.80.0/22","5.77.84.0/22","5.77.88.0/22","5.77.92.0/22","31.190.0.0/16","31.191.0.0/16","37.100.0.0/16","37.101.0.0/16","37.102.0.0/16","37.103.0.0/16","62.98.0.0/16","81.81.0.0/16","91.254.0.0/16","91.255.0.0/16","91.255.0.0/19","91.255.32.0/20","94.160.0.0/16","94.160.0.0/17","94.160.128.0/17","94.161.0.0/16","94.161.0.0/17","94.161.128.0/17","94.162.0.0/16","94.162.0.0/17","94.162.128.0/17","94.163.0.0/16","94.163.0.0/17","94.163.128.0/17","94.164.0.0/16","94.164.0.0/17","94.164.128.0/17","94.165.0.0/16","94.165.0.0/17","94.165.128.0/17","94.166.0.0/16","94.166.0.0/17","94.166.128.0/17","94.167.0.0/16","94.167.0.0/17","94.167.128.0/17","151.3.0.0/16","151.4.0.0/16","151.5.0.0/16","151.6.0.0/16","151.7.0.0/16","151.8.0.0/16","151.9.0.0/16","151.10.0.0/16","151.11.0.0/16","151.12.0.0/16","151.13.0.0/16","151.13.131.0/24","151.14.0.0/16","151.15.0.0/16","151.16.0.0/16","151.17.0.0/16","151.18.0.0/16","151.19.0.0/16","151.20.0.0/16","151.21.0.0/16","151.22.0.0/16","151.23.0.0/16","151.24.0.0/16","151.25.0.0/16","151.26.0.0/16","151.27.0.0/16","151.28.0.0/16","151.29.0.0/16","151.30.0.0/16","151.31.0.0/16","151.32.0.0/16","151.33.0.0/16","151.34.0.0/16","151.35.0.0/16","151.36.0.0/16","151.37.0.0/16","151.38.0.0/16","151.39.0.0/16","151.40.0.0/16","151.41.0.0/16"],"rpki":{"valid":117,"invalid":26,"unchecked":79,"not-found":0},"rpki_problems":[{"prefix":"91.255.32.0/20","state":"invalid"},{"prefix":"94.160.0.0/17","state":"invalid"},{"prefix":"94.160.128.0/17","state":"invalid"},{"prefix":"94.161.0.0/17","state":"invalid"},{"prefix":"94.161.128.0/17","state":"invalid"},{"prefix":"94.162.0.0/17","state":"invalid"},{"prefix":"94.162.128.0/17","state":"invalid"},{"prefix":"94.163.0.0/17","state":"invalid"},{"prefix":"94.163.128.0/17","state":"invalid"},{"prefix":"94.165.0.0/17","state":"invalid"},{"prefix":"94.166.0.0/17","state":"invalid"},{"prefix":"94.166.128.0/17","state":"invalid"},{"prefix":"151.13.131.0/24","state":"invalid"},{"prefix":"151.58.128.0/20","state":"invalid"},{"prefix":"151.58.144.0/20","state":"invalid"},{"prefix":"151.58.160.0/20","state":"invalid"},{"prefix":"2.156.0.0/18","state":"invalid"},{"prefix":"2.156.64.0/18","state":"invalid"},{"prefix":"2.156.128.0/18","state":"invalid"},{"prefix":"2.156.192.0/18","state":"invalid"},{"prefix":"2.157.0.0/18","state":"invalid"},{"prefix":"2.157.64.0/18","state":"invalid"},{"prefix":"2.157.128.0/18","state":"invalid"},{"prefix":"2.157.192.0/18","state":"invalid"},{"prefix":"2.158.0.0/18","state":"invalid"},{"prefix":"2.158.64.0/18","state":"invalid"}],"irr_missing":["151.59.228.0/22","151.58.160.0/20","217.20.0.0/20","94.166.0.0/17","5.77.76.0/22","94.165.128.0/17","2.156.0.0/18","94.162.128.0/17","2.158.192.0/18","5.77.64.0/22","217.171.68.0/22","2.159.128.0/18","2.158.128.0/18","217.171.72.0/22","2.159.0.0/18","5.77.68.0/22","94.161.128.0/17","151.59.232.0/22","94.164.0.0/17","151.59.144.0/21","217.171.76.0/22","151.59.128.0/21","151.59.24.0/21","94.163.128.0/17","151.59.152.0/21","2.156.64.0/18","91.255.32.0/20","2.157.64.0/18","94.166.128.0/17","94.162.0.0/17"],"irr_missing_count":74,"bogons":[],"upstreams":[{"asn":3356,"power":2450,"name":"Lumen AS3356"},{"asn":1299,"power":2279,"name":"Arelion (Twelve99)"},{"asn":6762,"power":1395,"name":"Telecom Italia Sparkle"},{"asn":6939,"power":704,"name":"Hurricane Electric"},{"asn":9002,"power":482,"name":"RETN"},{"asn":13030,"power":345,"name":"Init7"},{"asn":34549,"power":258,"name":"meerfarbig GmbH & Co. KG"},{"asn":34019,"power":240,"name":"Hivane"},{"asn":49559,"power":223,"name":"A-Systems"},{"asn":35625,"power":209,"name":"Eurofiber France"},{"asn":6461,"power":197,"name":"Zayo"},{"asn":29691,"power":191,"name":"Nine Internet Solutions AG"}],"left":93,"right":1011},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS1267"},"summary":{"level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":26,"total":222,"list":"91.255.32.0/20, 94.160.0.0/17, 94.160.128.0/17, 94.161.0.0/17, 94.161.128.0/17 (+21)"}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}],"data":{"query":"AS1267","looked_up":"AS1267","kind":"autnum","source":"https://rdap.arin.net/registry/autnum/1267","terms":"https://www.arin.net/resources/registry/whois/tou/","summary":{"Name":"ASN-WINDTRE","Handle":"AS1267","Range":"AS1267","Status":"active","Registered":"2002-09-19T13:11:07Z","Last changed":"2026-10-12T13:00:01Z","Abuse contact":"abuse@wind.it"},"entities":[{"roles":["registrant"],"kind":"individual","name":"AS1267-MNT","email":null},{"roles":["administrative","technical"],"kind":"individual","name":"WINDTRE s.p.a","email":null},{"roles":["registrant"],"kind":"individual","name":"MNT-IUNET","email":null},{"roles":["registrant"],"kind":"org","name":"WIND TRE S.P.A.","email":null},{"roles":["registrant"],"kind":"individual","name":"RIPE-NCC-LEGACY-MNT","email":null},{"roles":["abuse"],"kind":"group","name":"Abuse-C Role","email":"abuse@wind.it"}],"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"IT","country":"Italy","date":"1993-09-01","status":"allocated","range":"AS1267","opaque_id":"e57355ff-e991-4a8a-bba3-f4b0c2ffee17","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS1267"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}},"peering":{"status":"warn","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":1267,"name":"WINDTRE"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Open"},"detail":"Peers with anyone at a shared location, usually without a contract."},{"level":"info","title":"Present at :ix internet exchanges with :ports ports (:capacity in total).","params":{"ix":9,"ports":13,"capacity":"1.8T"}},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."}],"data":{"asn":1267,"net":{"id":2174,"name":"WINDTRE","aka":"","website":"https://www.windtre.it/","looking_glass":"","route_server":"","irr_as_set":"RIPE::AS-WINDTRE","info_type":"NSP","info_prefixes4":2000,"info_prefixes6":200,"info_traffic":"50-100Gbps","info_ratio":"Mostly Inbound","info_scope":"Europe","info_unicast":true,"info_ipv6":true,"info_never_via_route_servers":false,"ix_count":9,"fac_count":6,"policy_url":"","policy_general":"Open","policy_locations":"Preferred","policy_ratio":false,"policy_contracts":"Not Required","updated":"2026-11-02T04:55:11Z"},"ix_count":9,"capacity":1820100,"ix":[],"ix_total":13,"fac":[],"fac_total":6,"poc":[],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"1267"},"summary":{"level":"warn","title":"No public NOC, policy or technical contact.","params":[]}}},"fixes":[{"tool":["rpki",{"prefix":"91.255.32.0/20","asn":"1267"}],"guide":"create-rpki-roas","level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":26,"total":222,"list":"91.255.32.0/20, 94.160.0.0/17, 94.160.128.0/17, 94.161.0.0/17, 94.161.128.0/17 (+21)"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes.","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":74,"total":222,"list":"151.59.228.0/22, 151.58.160.0/20, 217.20.0.0/20, 94.166.0.0/17, 5.77.76.0/22 (+69)","asn":1267},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 151.59.228.0/22\norigin: AS1267\n\nroute: 151.58.160.0/20\norigin: AS1267\n\nroute: 217.20.0.0/20\norigin: AS1267","section":"routing"},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS1267"}