{"tool":"network-report","status":"fail","input":{"query":"AS201776"},"findings":[{"level":"fail","text":"AS201776 (MIRANDA-AS) announces 120 IPv4 and 1 IPv6 prefixes.","title":"AS201776 (MIRANDA-AS) announces 120 IPv4 and 1 IPv6 prefixes.","params":{"query":"AS201776","who":"AS201776 (MIRANDA-AS)","v4":120,"v6":1}},{"level":"fail","text":"7 of 121 announced prefixes are RPKI invalid: 91.201.108.0/22, 91.201.108.0/23, 91.201.108.0/24, 91.201.109.0/24, 91.201.110.0/23 (+2).","title":"7 of 121 announced prefixes are RPKI invalid: 91.201.108.0/22, 91.201.108.0/23, 91.201.108.0/24, 91.201.109.0/24, 91.201.110.0/23 (+2).","params":{"count":7,"total":121,"list":"91.201.108.0/22, 91.201.108.0/23, 91.201.108.0/24, 91.201.109.0/24, 91.201.110.0/23 (+2)"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes."},{"level":"warn","text":"3 of 121 announced prefixes have no ROA (RPKI not found): 31.40.168.0/23, 31.40.170.0/23, 193.239.24.0/22.","title":"3 of 121 announced prefixes have no ROA (RPKI not found): 31.40.168.0/23, 31.40.170.0/23, 193.239.24.0/22.","params":{"count":3,"total":121,"list":"31.40.168.0/23, 31.40.170.0/23, 193.239.24.0/22","asn":201776},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS201776 and a max length equal to the prefix length:","record":"31.40.168.0/23 AS201776 max-length /23\n31.40.170.0/23 AS201776 max-length /23\n193.239.24.0/22 AS201776 max-length /22"},{"level":"warn","text":"18 of 121 announced prefixes have no IRR route object: 2.63.180.0/22, 31.40.169.0/24, 178.173.126.0/24, 94.126.30.0/24, 31.40.211.0/24 (+13).","title":"18 of 121 announced prefixes have no IRR route object: 2.63.180.0/22, 31.40.169.0/24, 178.173.126.0/24, 94.126.30.0/24, 31.40.211.0/24 (+13).","params":{"count":18,"total":121,"list":"2.63.180.0/22, 31.40.169.0/24, 178.173.126.0/24, 94.126.30.0/24, 31.40.211.0/24 (+13)","asn":201776},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS201776 in your RIR’s IRR database (or RADB).","record":"route: 2.63.180.0/22\norigin: AS201776\n\nroute: 31.40.169.0/24\norigin: AS201776\n\nroute: 178.173.126.0/24\norigin: AS201776"}],"data":{"query":"AS201776","kind":"asn","special":null,"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"RU","country":"Russia","date":"2014-07-16","status":"allocated","range":"AS201776","opaque_id":"122f8042-e872-4bde-b80b-6e8ff7232de4","special":null},"verdict":{"level":"fail","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS201776","who":"AS201776 (MIRANDA-AS)","v4":120,"v6":1}},"seconds":2.5,"sections":{"routing":{"status":"fail","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":201776,"v4":120,"v6":1}},{"tool":["rpki",{"prefix":"91.201.108.0/22","asn":"201776"}],"guide":"create-rpki-roas","level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":7,"total":121,"list":"91.201.108.0/22, 91.201.108.0/23, 91.201.108.0/24, 91.201.109.0/24, 91.201.110.0/23 (+2)"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes."},{"tool":["rpki",{"prefix":"31.40.168.0/23","asn":"201776"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":3,"total":121,"list":"31.40.168.0/23, 31.40.170.0/23, 193.239.24.0/22","asn":201776},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"31.40.168.0/23 AS201776 max-length /23\n31.40.170.0/23 AS201776 max-length /23\n193.239.24.0/22 AS201776 max-length /22"},{"level":"info","title":":count of :total announced prefixes are RPKI valid.","params":{"count":101,"total":121}},{"level":"info","title":"The RPKI state of :count prefixes was not looked up (no ROA of AS:asn covers them; only the first :n are checked).","params":{"count":10,"asn":201776,"n":10}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":18,"total":121,"list":"2.63.180.0/22, 31.40.169.0/24, 178.173.126.0/24, 94.126.30.0/24, 31.40.211.0/24 (+13)","asn":201776},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 2.63.180.0/22\norigin: AS201776\n\nroute: 31.40.169.0/24\norigin: AS201776\n\nroute: 178.173.126.0/24\norigin: AS201776"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":24,"right":70}}],"data":{"asn":201776,"holder":"MIRANDA-AS Miranda-Media Ltd","announced":true,"v4":120,"v6":1,"prefixes":["2.59.51.0/24","2.63.144.0/20","2.63.158.0/24","2.63.159.0/24","2.63.176.0/20","2.63.176.0/24","2.63.180.0/22","2.63.184.0/24","2.63.224.0/20","2.63.225.0/24","2.63.231.0/24","2.63.232.0/24","31.40.130.0/24","31.40.132.0/24","31.40.137.0/24","31.40.138.0/24","31.40.140.0/24","31.40.143.0/24","31.40.151.0/24","31.40.153.0/24","31.40.162.0/23","31.40.165.0/24","31.40.167.0/24","31.40.168.0/23","31.40.168.0/24","31.40.169.0/24","31.40.170.0/23","31.40.170.0/24","31.40.171.0/24","31.40.172.0/23","31.40.178.0/23","31.40.208.0/22","31.40.208.0/24","31.40.209.0/24","31.40.211.0/24","31.40.252.0/22","37.44.252.0/22","46.61.150.0/24","46.61.245.0/24","46.161.9.0/24","77.83.8.0/22","77.83.10.0/24","77.83.16.0/22","78.31.216.0/24","78.31.217.0/24","78.31.218.0/24","78.31.219.0/24","78.31.220.0/24","78.31.221.0/24","78.31.222.0/24","78.31.223.0/24","78.136.196.0/22","78.136.200.0/21","78.153.137.0/24","78.153.138.0/24","78.153.147.0/24","83.171.252.0/22","83.172.60.0/22","83.172.61.0/24","83.172.62.0/24","84.42.92.0/24","84.42.93.0/24","84.42.94.0/24","84.42.95.0/24","85.115.200.0/22","85.174.144.0/20","85.174.150.0/24","89.107.136.0/22","89.107.138.0/23","91.103.110.0/23","91.201.108.0/22","91.201.108.0/23","91.201.108.0/24","91.201.109.0/24","91.201.110.0/23","91.201.110.0/24","91.201.111.0/24","92.118.132.0/24","92.118.133.0/24","92.118.135.0/24","94.126.24.0/21","94.126.30.0/24","109.94.220.0/22","109.236.52.0/22","109.237.104.0/24","176.119.169.0/24","176.119.170.0/24","176.119.171.0/24","176.119.172.0/24","176.208.74.0/24","176.211.120.0/22","178.34.152.0/21","178.34.158.0/24","178.34.176.0/20","178.173.124.0/22","178.173.126.0/24","178.173.127.0/24","185.64.44.0/22","185.116.228.0/23","185.116.230.0/23"],"rpki":{"valid":101,"not-found":3,"invalid":7,"unchecked":10},"rpki_problems":[{"prefix":"91.201.108.0/22","state":"invalid"},{"prefix":"91.201.108.0/23","state":"invalid"},{"prefix":"91.201.108.0/24","state":"invalid"},{"prefix":"91.201.109.0/24","state":"invalid"},{"prefix":"91.201.110.0/23","state":"invalid"},{"prefix":"91.201.110.0/24","state":"invalid"},{"prefix":"91.201.111.0/24","state":"invalid"},{"prefix":"31.40.168.0/23","state":"not-found"},{"prefix":"31.40.170.0/23","state":"not-found"},{"prefix":"193.239.24.0/22","state":"not-found"}],"irr_missing":["2.63.180.0/22","31.40.169.0/24","178.173.126.0/24","94.126.30.0/24","31.40.211.0/24","31.40.208.0/24","178.173.127.0/24","89.107.138.0/23","31.40.209.0/24","77.83.10.0/24","2.63.232.0/24","31.40.171.0/24","2.63.184.0/24","2.63.176.0/24","85.174.150.0/24","31.40.170.0/24","2.63.225.0/24","2.63.231.0/24"],"irr_missing_count":18,"bogons":[],"upstreams":[{"asn":12389,"power":27742,"name":"Rostelecom"},{"asn":20764,"power":4476,"name":"RASCOM"},{"asn":39529,"power":77,"name":"MTRX-ALCHEVSK-AS - Osipenko Alexander Nikolaevich, RU"},{"asn":47692,"power":53,"name":"Nessus GmbH"},{"asn":8218,"power":46,"name":"Zayo Europe"},{"asn":49434,"power":44,"name":"FBW Networks"},{"asn":39351,"power":42,"name":"31173 Services"},{"asn":62000,"power":42,"name":"moji-netrix edge network"},{"asn":200612,"power":38,"name":"Gulf Bridge International"},{"asn":50673,"power":38,"name":"Serverius"},{"asn":15958,"power":37,"name":"CETIN Ltd. Belgrade"},{"asn":50629,"power":32,"name":"LWLcom"}],"left":24,"right":70},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS201776"},"summary":{"level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":7,"total":121,"list":"91.201.108.0/22, 91.201.108.0/23, 91.201.108.0/24, 91.201.109.0/24, 91.201.110.0/23 (+2)"}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}],"data":{"query":"AS201776","looked_up":"AS201776","kind":"autnum","source":"https://rdap.db.ripe.net/autnum/201776","terms":"https://www.ripe.net/manage-ips-and-asns/db/support/documentation/terms/","summary":{"Name":"MIRANDA-AS","Handle":"AS201776","Range":"AS201776","Status":"active","Registered":"2014-07-16T12:36:48Z","Last changed":"2025-04-16T06:38:14Z","Abuse contact":"abuse@miranda-media.ru"},"entities":[{"roles":["registrant"],"kind":"individual","name":"MIRANDA-MNT","email":null},{"roles":["registrant"],"kind":"org","name":"Miranda-Media Ltd","email":null},{"roles":["registrant"],"kind":"individual","name":"RIPE-NCC-END-MNT","email":null},{"roles":["abuse"],"kind":"group","name":"MIRANDA-MEDIA LTD. Technical Team","email":"abuse@miranda-media.ru"}],"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"RU","country":"Russia","date":"2014-07-16","status":"allocated","range":"AS201776","opaque_id":"122f8042-e872-4bde-b80b-6e8ff7232de4","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS201776"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}},"peering":{"status":"pass","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":201776,"name":"Miranda-Media Ltd"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Open"},"detail":"Peers with anyone at a shared location, usually without a contract."},{"level":"info","title":"Present at :ix internet exchanges with :ports ports (:capacity in total).","params":{"ix":3,"ports":3,"capacity":"240G"}}],"data":{"asn":201776,"net":{"id":13722,"name":"Miranda-Media Ltd","aka":"Miranda","website":"http://www.miranda-media.ru","looking_glass":"","route_server":"","irr_as_set":"AS-MRNDA","info_type":"NSP","info_prefixes4":600,"info_prefixes6":20,"info_traffic":"500-1000Gbps","info_ratio":"Mostly Inbound","info_scope":"Regional","info_unicast":true,"info_ipv6":true,"info_never_via_route_servers":false,"ix_count":3,"fac_count":1,"policy_url":"","policy_general":"Open","policy_locations":"Not Required","policy_ratio":false,"policy_contracts":"Not Required","updated":"2026-10-13T11:50:18Z"},"ix_count":3,"capacity":240000,"ix":[],"ix_total":3,"fac":[],"fac_total":1,"poc":[{"role":"NOC","email":"noc@miranda-media.ru"},{"role":"Policy","email":"service-b2o@miranda-media.ru"},{"role":"Public Relations","email":"sales-b2o@miranda-media.ru"}],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"201776"},"summary":{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":201776,"name":"Miranda-Media Ltd"}}}},"fixes":[{"tool":["rpki",{"prefix":"91.201.108.0/22","asn":"201776"}],"guide":"create-rpki-roas","level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":7,"total":121,"list":"91.201.108.0/22, 91.201.108.0/23, 91.201.108.0/24, 91.201.109.0/24, 91.201.110.0/23 (+2)"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes.","section":"routing"},{"tool":["rpki",{"prefix":"31.40.168.0/23","asn":"201776"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":3,"total":121,"list":"31.40.168.0/23, 31.40.170.0/23, 193.239.24.0/22","asn":201776},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"31.40.168.0/23 AS201776 max-length /23\n31.40.170.0/23 AS201776 max-length /23\n193.239.24.0/22 AS201776 max-length /22","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":18,"total":121,"list":"2.63.180.0/22, 31.40.169.0/24, 178.173.126.0/24, 94.126.30.0/24, 31.40.211.0/24 (+13)","asn":201776},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 2.63.180.0/22\norigin: AS201776\n\nroute: 31.40.169.0/24\norigin: AS201776\n\nroute: 178.173.126.0/24\norigin: AS201776","section":"routing"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS201776"}