{"tool":"network-report","status":"fail","input":{"query":"AS41897"},"findings":[{"level":"fail","text":"AS41897 (SAT-TRAKT-AS) announces 129 IPv4 and 5 IPv6 prefixes.","title":"AS41897 (SAT-TRAKT-AS) announces 129 IPv4 and 5 IPv6 prefixes.","params":{"query":"AS41897","who":"AS41897 (SAT-TRAKT-AS)","v4":129,"v6":5}},{"level":"fail","text":"2 of 134 announced prefixes are RPKI invalid: 45.158.17.0/24, 95.85.183.0/24.","title":"2 of 134 announced prefixes are RPKI invalid: 45.158.17.0/24, 95.85.183.0/24.","params":{"count":2,"total":134,"list":"45.158.17.0/24, 95.85.183.0/24"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes."},{"level":"warn","text":"1 of 134 announced prefixes have no ROA (RPKI not found): 185.50.184.0/22.","title":"1 of 134 announced prefixes have no ROA (RPKI not found): 185.50.184.0/22.","params":{"count":1,"total":134,"list":"185.50.184.0/22","asn":41897},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS41897 and a max length equal to the prefix length:","record":"185.50.184.0/22 AS41897 max-length /22"},{"level":"warn","text":"4 of 134 announced prefixes have no IRR route object: 2a00:ad07:3000::/36, 46.40.16.0/23, 46.40.43.0/24, 2a00:ad00:2010::/44.","title":"4 of 134 announced prefixes have no IRR route object: 2a00:ad07:3000::/36, 46.40.16.0/23, 46.40.43.0/24, 2a00:ad00:2010::/44.","params":{"count":4,"total":134,"list":"2a00:ad07:3000::/36, 46.40.16.0/23, 46.40.43.0/24, 2a00:ad00:2010::/44","asn":41897},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS41897 in your RIR’s IRR database (or RADB).","record":"route6: 2a00:ad07:3000::/36\norigin: AS41897\n\nroute: 46.40.16.0/23\norigin: AS41897\n\nroute: 46.40.43.0/24\norigin: AS41897"},{"level":"warn","text":"No IRR as-set is listed.","title":"No IRR as-set is listed.","params":{},"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"warn","text":"No public NOC, policy or technical contact.","title":"No public NOC, policy or technical contact.","params":{},"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."}],"data":{"query":"AS41897","kind":"asn","special":null,"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"RS","country":"Serbia","date":"2006-11-10","status":"allocated","range":"AS41897","opaque_id":"90c59993-a2a1-47e8-a3d5-a1d8cccdf743","special":null},"verdict":{"level":"fail","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS41897","who":"AS41897 (SAT-TRAKT-AS)","v4":129,"v6":5}},"seconds":0.5,"sections":{"routing":{"status":"fail","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":41897,"v4":129,"v6":5}},{"tool":["rpki",{"prefix":"45.158.17.0/24","asn":"41897"}],"guide":"create-rpki-roas","level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":2,"total":134,"list":"45.158.17.0/24, 95.85.183.0/24"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes."},{"tool":["rpki",{"prefix":"185.50.184.0/22","asn":"41897"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":1,"total":134,"list":"185.50.184.0/22","asn":41897},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"185.50.184.0/22 AS41897 max-length /22"},{"level":"info","title":":count of :total announced prefixes are RPKI valid.","params":{"count":131,"total":134}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":4,"total":134,"list":"2a00:ad07:3000::/36, 46.40.16.0/23, 46.40.43.0/24, 2a00:ad00:2010::/44","asn":41897},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2a00:ad07:3000::/36\norigin: AS41897\n\nroute: 46.40.16.0/23\norigin: AS41897\n\nroute: 46.40.43.0/24\norigin: AS41897"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":11,"right":1}}],"data":{"asn":41897,"holder":"SAT-TRAKT-AS Sat-Trakt D.O.O.","announced":true,"v4":129,"v6":5,"prefixes":["45.158.16.0/22","45.158.17.0/24","46.40.0.0/18","46.40.1.0/24","46.40.4.0/24","46.40.6.0/24","46.40.8.0/24","46.40.9.0/24","46.40.10.0/24","46.40.11.0/24","46.40.12.0/23","46.40.14.0/24","46.40.15.0/24","46.40.16.0/23","46.40.18.0/24","46.40.19.0/24","46.40.20.0/24","46.40.21.0/24","46.40.22.0/24","46.40.23.0/24","46.40.27.0/24","46.40.29.0/24","46.40.30.0/24","46.40.35.0/24","46.40.40.0/24","46.40.41.0/24","46.40.42.0/24","46.40.43.0/24","46.40.48.0/24","46.40.49.0/24","46.40.50.0/24","46.40.51.0/24","46.40.52.0/24","46.40.53.0/24","46.40.54.0/24","46.40.55.0/24","46.40.56.0/24","46.40.57.0/24","46.40.58.0/24","46.40.59.0/24","46.40.62.0/24","46.40.63.0/24","46.251.8.0/22","78.109.97.0/24","78.109.98.0/24","78.109.99.0/24","78.109.100.0/23","78.109.102.0/23","80.245.96.0/22","81.24.240.0/21","81.24.247.0/24","85.222.176.0/20","85.222.176.0/24","85.222.177.0/24","85.222.178.0/24","85.222.179.0/24","85.222.180.0/22","89.147.80.0/20","89.147.80.0/22","89.147.80.0/24","89.147.81.0/24","89.147.82.0/24","89.147.83.0/24","89.147.84.0/22","89.147.88.0/24","89.147.89.0/24","89.147.92.0/24","89.147.93.0/24","89.147.94.0/24","89.147.95.0/24","91.102.224.0/21","91.102.229.0/24","91.147.240.0/21","94.248.184.0/21","94.248.232.0/21","94.248.232.0/22","94.248.236.0/24","94.248.237.0/24","94.248.238.0/24","94.248.239.0/24","95.85.128.0/18","95.85.128.0/22","95.85.135.0/24","95.85.136.0/22","95.85.144.0/24","95.85.145.0/24","95.85.146.0/24","95.85.147.0/24","95.85.148.0/24","95.85.149.0/24","95.85.150.0/24","95.85.151.0/24","95.85.152.0/23","95.85.154.0/24","95.85.155.0/24","95.85.156.0/22","95.85.172.0/24","95.85.176.0/22","95.85.183.0/24","95.85.184.0/23"],"rpki":{"valid":131,"invalid":2,"not-found":1,"unchecked":0},"rpki_problems":[{"prefix":"45.158.17.0/24","state":"invalid"},{"prefix":"95.85.183.0/24","state":"invalid"},{"prefix":"185.50.184.0/22","state":"not-found"}],"irr_missing":["2a00:ad07:3000::/36","46.40.16.0/23","46.40.43.0/24","2a00:ad00:2010::/44"],"irr_missing_count":4,"bogons":[],"upstreams":[{"asn":1299,"power":351,"name":"Arelion (Twelve99)"},{"asn":9002,"power":315,"name":"RETN"},{"asn":13004,"power":239,"name":"Serbian Open eXchange"},{"asn":6939,"power":102,"name":"Hurricane Electric"},{"asn":43277,"power":66,"name":"VICTORY-MEDIA - Victory media d.o.o, RS"},{"asn":15576,"power":6,"name":"NTS Workspace AG"},{"asn":14840,"power":4,"name":"BR.Digital"},{"asn":22356,"power":4,"name":"Durand do Brasil"},{"asn":47692,"power":4,"name":"Nessus GmbH"},{"asn":15958,"power":2,"name":"CETIN Ltd. Belgrade"},{"asn":6204,"power":1,"name":"ZET.NET"}],"left":11,"right":1},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS41897"},"summary":{"level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":2,"total":134,"list":"45.158.17.0/24, 95.85.183.0/24"}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}],"data":{"query":"AS41897","looked_up":"AS41897","kind":"autnum","source":"https://rdap.db.ripe.net/autnum/41897","terms":"https://www.ripe.net/manage-ips-and-asns/db/support/documentation/terms/","summary":{"Name":"SAT-TRAKT-AS","Handle":"AS41897","Range":"AS41897","Status":"active","Registered":"2006-11-10T13:57:38Z","Last changed":"2025-11-28T09:25:57Z","Abuse contact":"abuse@sattrakt.net"},"entities":[{"roles":["registrant"],"kind":"org","name":"Sat-Trakt D.O.O.","email":null},{"roles":["registrant"],"kind":"individual","name":"RIPE-NCC-END-MNT","email":null},{"roles":["registrant"],"kind":"individual","name":"SAT-TRAKT-MNT","email":null},{"roles":["abuse"],"kind":"group","name":"ABUSE SATTRAKT","email":"abuse@sattrakt.net"}],"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"RS","country":"Serbia","date":"2006-11-10","status":"allocated","range":"AS41897","opaque_id":"90c59993-a2a1-47e8-a3d5-a1d8cccdf743","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS41897"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}},"peering":{"status":"warn","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":41897,"name":"Sat-Trakt"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Open"},"detail":"Peers with anyone at a shared location, usually without a contract."},{"level":"info","title":"No internet exchange ports are listed.","params":[]},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."},{"level":"info","title":"The record was last updated :date.","params":{"date":"2023-06-01"},"detail":"Peers rely on it for max-prefix limits and contacts; check it is still right."}],"data":{"asn":41897,"net":{"id":31520,"name":"Sat-Trakt","aka":"","website":"http://www.sattrakt.com","looking_glass":"","route_server":"","irr_as_set":"","info_type":"","info_prefixes4":0,"info_prefixes6":0,"info_traffic":"","info_ratio":"Not Disclosed","info_scope":"Not Disclosed","info_unicast":false,"info_ipv6":false,"info_never_via_route_servers":false,"ix_count":0,"fac_count":1,"policy_url":"","policy_general":"Open","policy_locations":"Not Required","policy_ratio":false,"policy_contracts":"Not Required","updated":"2023-06-01T11:20:26Z"},"ix_count":0,"capacity":0,"ix":[],"ix_total":0,"fac":[],"fac_total":1,"poc":[],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"41897"},"summary":{"level":"warn","title":"No IRR as-set is listed.","params":[]}}},"fixes":[{"tool":["rpki",{"prefix":"45.158.17.0/24","asn":"41897"}],"guide":"create-rpki-roas","level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":2,"total":134,"list":"45.158.17.0/24, 95.85.183.0/24"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes.","section":"routing"},{"tool":["rpki",{"prefix":"185.50.184.0/22","asn":"41897"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":1,"total":134,"list":"185.50.184.0/22","asn":41897},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"185.50.184.0/22 AS41897 max-length /22","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":4,"total":134,"list":"2a00:ad07:3000::/36, 46.40.16.0/23, 46.40.43.0/24, 2a00:ad00:2010::/44","asn":41897},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2a00:ad07:3000::/36\norigin: AS41897\n\nroute: 46.40.16.0/23\norigin: AS41897\n\nroute: 46.40.43.0/24\norigin: AS41897","section":"routing"},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record.","section":"peering"},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS41897"}