Skip to content

ASNMetaData

Serg edited this page Jun 12, 2026 · 2 revisions

ASN Metadata

The ASN Metadata module provides intelligence gathering for Autonomous System Numbers (ASNs) by querying the RIPEstat API. It is designed to extract organizational details, routing information, abuse contacts, and upstream transit peers.

Important

Data Attribution: All organizational details, routing prefixes, abuse contacts, and upstream peers, etc., extracted by this module are exclusively provided by RIPEstat.

Note

This module relies on the RIPEstat API and does not require any API credentials. Its behavior, including retry logic, recursion depth, and timeout boundaries, is governed by the global network and resolver settings. For comprehensive instructions on adjusting network-level settings, refer to the Network Configuration page.

Data Source: https://stat.ripe.net/

Capabilities

The module accepts ASNs as input and offers multiple specialized functions to gather different types of intelligence.

Abuse Contacts

Queries the RIPEstat abuse-contact-finder endpoint to retrieve dedicated abuse reporting contacts for the ASN.

  • Email: Extracts abuse contact email addresses (automatically marked as Out Of Scope (see Scope Boundaries) since they are associated with the infrastructure provider, not the direct target).

ASN Information

Queries the RIPEstat as-overview endpoint to retrieve general registration information about the ASN.

  • Organization: The registered Holder or maintaining organization of the ASN (automatically marked as Out of Scope).

Announced Prefixes

Queries the RIPEstat announced-prefixes endpoint to retrieve all IP ranges currently announced by the target ASN.

  • ASN: The originally queried target ASN (Context: Origin AS).
  • CIDR: The IP prefixes (IPv4 and IPv6) announced by the ASN (Context: Announced Prefix).

Upstream Peers

Queries the RIPEstat asn-neighbours endpoint to build a transit chain by recursively resolving the largest upstream neighbor (right-side peers) up to a defined recursion depth.

  • ASN: The originally queried target ASN (Context: Origin AS).
  • Peers Chain: A string representation of the upstream transit path (e.g., AS1234 <- AS5678 <- AS9012). If the chain traversal encounters an error or reaches the maximum limit during recursion, it appends [TOO_MANY_PEERS] to the chain output.

Clone this wiki locally