Skip to content
BYOIP
Visit BYOIP on GitHub
Set theme to dark (⇧+D)

Verify IRR entries

Verify your Internet Routing Registry (IRR) entries to ensure that the IP prefixes Cloudflare advertises for you match the correct autonomous system numbers (ASNs).

Each IRR entry record must include the following information:

  • Route: each IP prefix that Cloudflare advertises for you.
  • Origin AS: your ASN, or if you do not have your own ASN, the Cloudflare ASN (AS209242).
  • Source: the name of the routing registry—for example, AFRINIC, APNIC, ARIN, RADB, RIPE, or NTT.

Add or update IRR entries when they meet any of these criteria:

  • The entry is missing.
  • The entry is incomplete or inaccurate—for example, when the route object does not show the correct origin.
  • The entry is complete but requires updating—for example, when they correspond to supernets but need to correspond to subnets used in Magic Transit.

IRR entry verification methods

To verify your prefix and ASN route, use the tools and methods outlined in this table:

Data to verifyToolMethodOutput
Subnet prefix IP
for the ASN
IRR ExplorerSearch for the subnet prefix IP, for example, 162.211.156.0/24.List of ASN numbers, source (route registry), and any associated errors.
ASN for the
subnet prefix
IRR ExplorerSearch for the ASN, for example AS209242.List of prefixes, source, and any associated errors.
Your origin ASN
and routing data
WHOIS lookup

In a terminal, use this whois command, substituting your network prefix for network-prefix:

whois -h rr.ntt.net network-prefix

The host rr.ntt.net is the primary server for the Global IP network.

IRR route, origin, and source information.

WHOIS output example

The <IRR entry section> in the WHOIS output shows the correct IRR entry information for the specified network. In this example, the network prefix is 1.1.1.0/24, and the output includes the route, origin ASN, and route registry, which in this example is APNIC:

user@xxt32z conduit-qs-config % whois -h rr.ntt.net 1.1.1.0/24route:          1.1.1.0/24<RPKI section>descr:          RPKI ROA for 1.1.1.0/24remarks:        This route object represents routing data retrieved from the RPKIremarks:        The original data can be found here: https://rpki.gin.ntt.net/r/AS13335/1.1.1.0/24remarks:        This route object is the result of an automated RPKI-to-IRR conversion process.remarks:        maxLength 24origin:         AS13335mnt-by:         MAINT-NTTCOM-RPKIchanged:        job@ntt.net 20200913source:         RPKI  # Trust Anchor: apnic
<IRR entry section>route:          1.1.1.0/24origin:         AS13335descr:          APNIC Research and Development                6 Cordelia Stmnt-by:         MAINT-AU-APNIC-GM85-APlast-modified:  2018-03-16T16:58:06Zsource:         APNIC