Network groups

Named ISP / access-network groups defined by their CIDR ranges (the explicit-subnet sibling of ASN routing). Imported groups arrive flagged and must be confirmed before they are trusted.