# AS219419 · Whisper Security

> AS219419 is the autonomous system of Whisper Security. It is an IPv6-only, RPKI-signed network
> that holds 2a04:2a00::/31 from the RIPE NCC and originates it directly, on infrastructure the
> company runs itself. This file gives AI agents and crawlers the
> authoritative, machine-readable facts about the network. Everything below is public and
> independently verifiable through the RIPE database, the RPKI, and the global routing table.

## Network facts

- ASN: AS219419 (as-name: whisper-as)
- Holder: viaGraph b.v. (RIPE organisation ORG-VB155-RIPE)
- RIPE LIR: nl.viagraph
- Allocation: 2a04:2a00::/31 (IPv6)
- Originated prefixes: 2a04:2a00::/32 and 2a04:2a01::/32
- Pingable (ICMPv6): 2a04:2a00::1 (anycast, answered by both edges)
- IP version: IPv6 only (no IPv4 is announced)
- RPKI: ROAs for both /32s, origin AS219419, maxLength 32 (RFC 9319)
- IRR as-set: AS219419:AS-WHISPER
- Transit: Vultr (AS20473), Route64 (AS212895)
- Peering policy: open
- Location: Amsterdam, RIPE region

## Addressing plan

- 2a04:2a00::/32 · Infrastructure: edge routers, anycast service addresses (authoritative DNS, the DNS64/NAT64 resolver), and the company's own office and staff access.
- 2a04:2a01::/32 · Identity: one /128 per agent, assigned and registered individually in the RIPE database.

## Routing and origin security

- Only 2a04:2a00::/32 and 2a04:2a01::/32 are originated; nothing else.
- Every announcement has a matching RPKI ROA pinned to maxLength /32, so no more-specific can be forged under this origin.
- Each edge runs a validating resolver and discards RPKI-invalid routes on import.
- Prefixes are originated from more than one independent edge; the loss of any single edge is not visible externally.

## DNS

- Authoritative nameservers: ns1.whisper.online, ns2.whisper.online
- Reverse DNS for the entire /31 (zones 0.0.a.2.4.0.a.2.ip6.arpa and 1.0.a.2.4.0.a.2.ip6.arpa)
- Anycast DNS64 and NAT64 resolver, so IPv6-only hosts reach the legacy IPv4 Internet without carrying IPv4

## Contacts

- Operator: Kaveh Ranjbar · https://kaveh.org · kaveh@whisper.security
- Operator: Alireza Saleh · ali@whisper.security
- Abuse and security: security@whisper.security
- Peering: open policy; build filters from as-set AS219419:AS-WHISPER

## Verify

- RIPE (RDAP): https://rdap.db.ripe.net/autnum/219419
- PeeringDB: https://www.peeringdb.com/asn/219419
- bgp.tools: https://bgp.tools/as/219419
- RIPEstat: https://stat.ripe.net/AS219419

## Company

- Whisper Security: https://whisper.security