How this lookup works
The check asks RIPEstat, the RIPE NCC's routing data service, which prefix covers the IP address in the global routing table and which autonomous system (AS) announces it. RIPEstat builds this from BGP data collected by route collectors around the world, so it shows what the internet as a whole sees, not one provider's view.
How to read the results
- Announced prefix is the most specific block in the routing table that contains the address, such as
203.0.113.0/24. Traffic to the address follows the route for this prefix. - Origin AS is the network that announces the prefix: usually the ISP, cloud provider or hosting company that operates the address.
- AS name and holder come from the AS's registration record.
- Not announced means no route for the address was seen. Unannounced space can't receive traffic from the internet. It's common for newly allocated or reserved blocks.
When it's useful
Finding who runs an address. The origin AS is the network actually routing it today, which can differ from the organisation in IP Whois when space is leased or reassigned.
Checking a new announcement. After you start announcing a prefix, confirm that collectors see it with the right origin AS. If the AS is wrong, check your route origin authorisation (ROA) and your provider's filters.
Investigating abuse. Report to the abuse contact of the origin AS when the registered owner doesn't respond. The IP Whois guide covers writing an effective abuse report.
Updated 26 October 2026