Express VPN
ExpressVPN
Cluster stats
| Netblocks | 5 |
| All fragments | 43 blocks across 5 clusters |
| Cluster ID | 193145955 |
| Registry | AFRINIC |
| Customers | find customers using this network → |
Evidence & provenance ?
| Attribution | unresolved |
| Shared handles | clustered on 10 shared RIR contact/maintainer handles |
| Registry names | 2 distinct registrant names across these blocks |
| full provenance (JSON) → · how attribution works | |
IP Ranges (5)
⬇ export CSV| CIDR | Org name | Registry | Status | Confidence |
|---|---|---|---|---|
| 78.153.204.48/28 | ExpressVPN | RIPE | SUB-ALLOCATED PA | ● high |
| 80.67.7.64/26 | ExpressVPN | RIPE | ASSIGNED PA | ● high |
| 79.124.7.184/29 | ExpressVPN | RIPE | ASSIGNED PA | ● low |
| 82.118.227.112/29 | ExpressVPN | RIPE | ASSIGNED PA | ● low |
| 102.165.41.0/24 | ExpressVPN | AFRINIC | ASSIGNED PA | ● low |
Network trust
what's this?
RPKI hygiene: A
how networks compare →
100.0%
of checked blocks have valid RPKI ROA coverage
(5 of 5)
Possible discrepancies (1)
These blocks are registered to ExpressVPN but cryptographically authorized for a different, unrelated network (1 distinct holder) — often M&A history, multi-homing, or outsourced/managed hosting, occasionally worth a closer look.
| 102.165.41.0/24 /24 | authorized for AS834 — IPXO LLC |
NIC Handles
DAL1-MNT
DUMY-RIPE
DUMY-RIPE
EA6284-RIPE
GLESYS-MNT
IIT8
IIT8
MNT-BLACKNIGHT
MNT-LIR-BG
dagroup