BGP AS Lookup

Free BGP AS lookup. Enter an ASN or IP to get the AS holder, RIR, country, abuse contact and every announced IPv4/IPv6 prefix. Live RIPEstat data.

Advertisement

BGP AS Lookup: Find the Autonomous System Behind Any ASN or IP

This free BGP AS lookup tool resolves an autonomous system number to the organisation that operates it, and resolves an IP address to the AS that announces the prefix containing it. Enter AS15169, 15169, or 8.8.8.8 and you get the AS holder name, registering RIR, country, registry last-updated date, abuse and technical contacts, website, IPv4 and IPv6 prefix counts, and the full list of prefixes the AS announces into the global routing table. Data comes live from the RIPEstat API, the public data service run by RIPE NCC, which aggregates routing and registry information from all five regional internet registries — not just RIPE’s own region.

An autonomous system is the unit of routing policy on the internet. Every network that speaks BGP to another network — an ISP, a hosting provider, a CDN, a large enterprise with multiple upstreams — holds an AS number and uses it to announce which IP prefixes it can reach. When you look up an ASN you are asking, in effect, “who runs this chunk of the internet, and what address space do they claim?”

Two Lookup Modes

  • ASN lookup: type an AS number with or without the AS prefix. The tool queries the AS overview and whois records and returns the holder, description, country, RIR, registry date, contact addresses, and prefix counts. If the AS exists in the registry but announces nothing in BGP, you are told that explicitly — a meaningful distinction when investigating dormant or hijacked resources.
  • IP to AS lookup: paste an IPv4 or IPv6 address and the tool resolves the covering prefix and the AS announcing it, then pulls that AS’s details. This is the “whose network is this address on?” question you ask when triaging an abuse report or a suspicious connection.

Input mode is auto-detected, so a string starting with AS or consisting only of digits is treated as an ASN, and a valid IPv4 or IPv6 literal is treated as an address. Recent lookups are kept in your browser so you can jump back to an AS you were just examining, and results export as JSON or CSV for pasting into a report or feeding to a script.

AS Number Ranges and What They Mean

“What is the BGP AS number range?” is one of the most common questions about autonomous systems, and the answer changed materially in 2007 when 32-bit ASNs were introduced. The allocation map today:

RangeTypeNotes
0ReservedMust not appear in an AS path; used to mark “not routed” in some contexts.
1 – 64495Public 16-bitGlobally unique, assigned by RIRs to real networks.
64496 – 64511ReservedSet aside for documentation and sample code.
64512 – 65534Private 16-bitUsable inside an organisation; must be stripped before announcements reach the public internet.
65535ReservedLast 16-bit value, reserved.
23456AS_TRANSPlaceholder used so 32-bit-unaware routers can carry paths containing 32-bit ASNs.
65536 – 4199999999Public 32-bitThe expanded space; RIRs now hand these out routinely. 65536–65551 is reserved for documentation.
4200000000 – 4294967294Private 32-bitThe 32-bit equivalent of the 64512–65534 private block.

The tool accepts any value from 1 to 4294967295, so both classic 16-bit numbers like AS3356 and 32-bit numbers like AS200000 resolve normally. If you see AS23456 in an AS path, that is not a real network — it is AS_TRANS standing in for a 32-bit ASN that an intermediate router could not represent.

How to Use the BGP AS Lookup Tool

  1. Enter your query. An ASN (AS13335, 13335) or an IP address (1.1.1.1, 2606:4700:4700::1111). Mode is detected automatically, and you can override it.
  2. Read the AS summary. Holder name, organisation, country, RIR, and registry date identify who is responsible for the network.
  3. Check the prefix counts. IPv4 and IPv6 prefix counts give an immediate sense of scale — a handful of prefixes suggests a small enterprise or a single-homed customer; thousands suggests a tier-1 transit provider or a large CDN.
  4. Expand the announced prefixes. The full list of prefixes the AS originates is what actually appears in the global routing table, and is the authoritative answer to “does this network own that address?”
  5. Grab the abuse contact. Whois abuse and email contacts are extracted into their own field so you can report a problem to the right party without digging through raw registry output.
  6. Export. Download the result as JSON for tooling or CSV for a spreadsheet.

Built-in examples get you started fast: Google (AS15169), Cloudflare (AS13335), Amazon AWS (AS16509), and Microsoft (AS8075), plus Google DNS (8.8.8.8) and Cloudflare DNS (1.1.1.1) for the IP-to-AS direction.

The Five RIRs and Why the Registry Matters

Every ASN is issued by one of five regional internet registries, and knowing which one issued a number tells you where the resource was registered — which is not always where the network operates:

RIRFull nameRegion
ARINAmerican Registry for Internet NumbersNorth America
RIPE NCCRIPE Network Coordination CentreEurope, Middle East, Central Asia
APNICAsia-Pacific Network Information CentreAsia Pacific
LACNICLatin America and Caribbean Network Information CentreLatin America, Caribbean
AFRINICAfrican Network Information CentreAfrica

A mismatch between the registering RIR, the registered country, and where traffic actually appears to originate is a routine signal in abuse investigations — not proof of anything on its own, but worth noting alongside the announced prefix set.

Practical Uses

  • Abuse and incident response: resolve a hostile IP to its AS, pull the abuse contact, and check what else that AS announces.
  • Routing troubleshooting: confirm which AS originates a prefix when a customer reports unreachability, and check whether an expected prefix is announced at all.
  • Peering and transit research: size up a potential peer by prefix count and address footprint before a conversation.
  • Hijack and leak investigation: compare the AS actually originating a prefix against the AS that should be, which is the core of any BGP hijack analysis.
  • Threat intelligence enrichment: attach ASN and organisation metadata to IP indicators so you can group activity by network operator rather than by individual address.

Related network tooling: use whois lookup for domain and registry records, DNS lookup to resolve names to the addresses you then map to an AS, what is my IP to find your own address and upstream AS, and IP risk checker for reputation context on an address you have just attributed.

Frequently Asked Questions

What is a BGP AS number?

An autonomous system number is a globally unique identifier for a network that operates a single, coherent routing policy. BGP, the internet’s inter-domain routing protocol, uses ASNs to build AS paths — the list of networks a route has traversed — and to prevent loops.

How do I find the AS number for an IP address?

Switch the tool to IP mode (or just paste an IP — it is detected automatically). It resolves the most specific prefix covering that address in the global routing table and reports the AS originating it, along with that AS’s registry details.

What is the range of AS numbers?

Valid ASNs run from 1 to 4294967295. Values 1–65535 are the original 16-bit space, with 64512–65534 reserved for private use; everything above 65535 is 32-bit space, with 4200000000–4294967294 reserved for private use. AS0 and AS65535 are reserved, and AS23456 is the AS_TRANS placeholder.

Where does the data come from?

All lookups query the RIPEstat data API, which aggregates BGP routing observations and registry (whois) data covering all five RIRs. Results reflect what RIPEstat currently observes in the global routing table.

Is the lookup free, and do I need an account?

It is free with no signup. RIPEstat does apply rate limits to its public API, so rapid repeated queries can return a temporary rate-limit message — wait a moment and retry.

Why does an AS show as not announced?

The ASN exists as a registered resource but is not currently originating any prefixes visible in BGP. That is normal for newly allocated numbers, for organisations that hold an ASN they have not deployed, and for networks that have been shut down.

What is the difference between an ASN lookup and a whois lookup?

Whois answers registry questions — who registered a resource and how to contact them. An AS lookup answers routing questions — what this network actually announces to the internet right now. This tool combines both: registry metadata plus live announced-prefix data.

Can I see every prefix an AS announces?

Yes. Expand the prefixes section to get the full IPv4 and IPv6 announced-prefix lists, and export them as JSON or CSV if you need them in a firewall rule, an allowlist, or an analysis script.

Does it support IPv6?

Yes, in both directions. IPv6 addresses resolve to their originating AS, and every AS result reports its IPv6 prefix count and full IPv6 prefix list alongside IPv4.

What Is BGP AS Lookup

BGP (Border Gateway Protocol) is the routing protocol that holds the Internet together. It enables autonomous systems (AS) — independently operated networks such as ISPs, cloud providers, enterprises, and content delivery networks — to exchange routing information and establish paths for traffic to flow between them. Every organization with its own IP address space and Internet connectivity is assigned an Autonomous System Number (ASN).

AS lookup retrieves information about an autonomous system: its assigned IP prefixes, peering relationships, geographic presence, and organizational ownership. This data is essential for network engineering, threat intelligence, incident response, and Internet research.

What an AS Lookup Reveals

FieldDescriptionExample
ASNAutonomous System NumberAS13335
OrganizationEntity operating the ASCloudflare, Inc.
Announced PrefixesIP address blocks routed via this AS104.16.0.0/13, 172.64.0.0/13
Upstream ProvidersTransit providers carrying trafficAS174 (Cogent), AS3356 (Lumen)
PeersNetworks exchanging traffic directlyAS6939 (Hurricane Electric)
IXP PresenceInternet Exchange Points where the AS connectsAMS-IX, DE-CIX, LINX
CountryRegistration countryUnited States
RIRRegional Internet Registry (allocating body)ARIN, RIPE, APNIC

Common Use Cases

  • Threat intelligence: Identify the network hosting malicious infrastructure by looking up the ASN for attacker IP addresses. Some ASNs are known for hosting bulletproof services.
  • Network troubleshooting: Diagnose routing issues by understanding the AS path between your network and a destination, identifying where traffic may be dropping or taking suboptimal routes
  • DDoS mitigation: Identify the source ASNs of attack traffic to coordinate mitigation with upstream providers or implement AS-path filtering
  • Peering decisions: Evaluate potential peering partners by analyzing their prefix announcements, upstream connectivity, and IXP presence
  • IP reputation assessment: Determine the reputation and legitimacy of IP addresses by examining their AS registration, age, and historical behavior

Best Practices

  1. Cross-reference multiple data sources — AS information comes from WHOIS, IRR databases, BGP routing tables, and PeeringDB. Cross-reference for accuracy since individual sources may be outdated.
  2. Track ASN changes over time — AS assignments and prefix announcements change. Monitor BGP routing changes for your own prefixes and critical upstream providers using tools like BGPStream or RIPE RIS.
  3. Use AS data for network security policies — Implement AS-path filtering to accept only expected routes from peers and providers. This prevents BGP hijacking and route leaks.
  4. Understand RIR jurisdictions — ARIN (North America), RIPE NCC (Europe/Middle East), APNIC (Asia-Pacific), LACNIC (Latin America), and AFRINIC (Africa) each manage AS and IP allocations in their regions.
  5. Investigate suspicious ASNs — ASNs with high concentrations of malicious traffic, frequent prefix hijacking, or bulletproof hosting reputations should be flagged in your threat intelligence processes.

Frequently Asked Questions

What is an Autonomous System (AS) number?+

An Autonomous System (AS) number is a unique identifier assigned to a network or group of networks that operate under a single administrative policy. AS numbers are essential for BGP (Border Gateway Protocol) routing, which allows different networks on the internet to exchange routing information. Large organizations like Google (AS15169), Cloudflare (AS13335), and Amazon AWS (AS16509) each have their own AS numbers.

How can I find which AS an IP address belongs to?+

Use the IP to AS Lookup mode in this tool by entering any valid IPv4 or IPv6 address. The tool will query BGP routing tables to identify the AS that announces the route for that IP, along with the specific prefix (CIDR block) it belongs to. This is useful for identifying the network operator responsible for an IP address or investigating network connectivity.

What are Regional Internet Registries (RIRs)?+

Regional Internet Registries are organizations that manage the allocation and registration of IP addresses and AS numbers within specific geographic regions. There are five RIRs: ARIN (North America), RIPE NCC (Europe, Middle East, Central Asia), APNIC (Asia Pacific), LACNIC (Latin America and Caribbean), and AFRINIC (Africa). This tool displays which RIR allocated each AS number.

What are IPv4 and IPv6 prefixes?+

Prefixes are blocks of IP addresses that an AS advertises via BGP to the internet. IPv4 prefixes use the format like 8.8.8.0/24 (announcing 256 addresses), while IPv6 prefixes are longer, like 2001:4860::/32. This tool shows how many IPv4 and IPv6 prefixes each AS announces, giving insight into the size and scope of a network operator.

How do I report network abuse to an AS owner?+

The tool displays abuse contact email addresses when available for each AS. These contacts are registered with the RIR and should be used to report network abuse, spam, security incidents, or other issues originating from that network. Copy the abuse contact email directly from the results to submit your report.

Can I export the BGP lookup results?+

Yes, you can export AS information in either JSON or CSV format. The export includes the AS number, name, description, country, RIR allocation, prefix counts, and contact information. This is useful for documentation, network analysis reports, or integrating the data into other tools and databases.

This tool is provided for informational and educational purposes only. All processing happens in your browser — no data is sent to or stored on our servers. While we strive for accuracy, we make no warranties about the completeness or reliability of results.