What do the type values mean?

isp, hosting, education, government or business: the kind of network the AS runs. business is also the default when no signal says otherwise.

What does rpki_status say?

valid when a published ROA authorizes the origin AS at that length, invalid:origin when ROAs cover the prefix but none authorizes this AS, invalid:length when the announcement is more specific than a ROA allows, and not_found when no ROA covers it.

Which prefix is used when several cover an address?

The most specific one, which is the one routers choose.

How is it different from BGP Route?

IP ASN answers which AS an address belongs to, one row per range. BGP Route is the routing table itself: one row per announced prefix and origin, multi-origin prefixes included, with how widely each is seen.

Open

Announced address space, by origin AS.

Every IPv4 and IPv6 range in the global routing table, attributed to the AS that originates it, with that network's name, domain and type, and whether RPKI validates the route.

In the lookup API: asn on every plan, and asn.country and asn.rpki_status on a paid plan.

Real rows, with what each column means.

See documentation →

The schema and metadata are in the docs. It is published as CSVGZ and MMDB.

start_ip	end_ip	prefix	asn	name	domain	type	country	rpki_status
1.1.1.0	1.1.1.255	1.1.1.0/24	13335	Cloudflare, Inc.	cloudflare.com	hosting	US	valid
13.35.201.0	13.35.201.255	13.35.201.0/24	16509	Amazon.com, Inc.	amazon.com	hosting	US	valid
37.99.10.0	37.99.10.255	37.99.10.0/24	21299	Kar-Tel LLC	beeline.kz	isp	KZ	not_found
102.135.34.0	102.135.34.255	102.135.34.0/24	9009	M247 Europe SRL	m247global.com	hosting	RO	invalid:origin
2a01:4f8::	2a01:4f8:ffff:ffff:ffff:ffff:ffff:ffff	2a01:4f8::/32	24940	Hetzner Online GmbH	hetzner.com	hosting	DE	valid

ip_asn_v1

Entries

1,501,755

Refresh

Daily

CSVGZ

20.42 MB

MMDB

78.23 MB

Download it from your code in one call.

Database API reference →

Every official client fetches the current IP ASN build to disk, as a link for your own runner or into memory, and checks it against its published checksums.

download()

Streams the current build to a file, which lands only once the whole transfer has arrived, so a failed one never leaves a truncated file behind.

downloadUrl()

The time-limited link the API redirects to, for your own downloader, a job runner or a CDN pull.

downloadBytes()

The build in memory, for a small database or a pipeline that never touches a filesystem.

metadata()

Row count, file sizes and when the build last updated. Poll it and fetch only when a new one has landed.

checksums()

The md5, sha1, sha256 and sha512 digests of one file, to verify it once it lands.

import os
from internetdata import InternetData
 
client = InternetData(os.environ["INTERNETDATA_API_KEY"])
 
# what is in today's build, without moving the file
meta = client.database.metadata("ip_asn_v1")
 
client.database.download("ip_asn_v1", "mmdb", "./ip_asn_v1.mmdb")
sums = client.database.checksums("ip_asn_v1", "mmdb")
print(meta.updated, meta.entries, sums["sha256"])

load.pypip install internetdata

Also available for .NET, Ruby, Rust, Swift, Erlang, Perl and Zig. See all on GitHub →

Put it to work in your own systems.

Free with an account, and the file is yours: teams join IP ASN against the traffic, logs and routing data they already hold, inside their own infrastructure.

Traffic attribution

Group requests, flows and logs by the network they come from, down to the announced prefix.

Route security

Flag traffic from a range whose announcement RPKI marks invalid, the mark of a misconfiguration or a hijack.

Free with an account

Checksums published per file: md5, sha1, sha256 and sha512.

The ID fixes the schema, so a new build never changes the columns your parser reads.

Call the API in your language, with an official client.

All SDKs on GitHub →

Thirteen official clients, one for each language you ship in and one for the browser, plus middleware for fifteen web frameworks. Each answers private addresses without a request, caches what it looks up and splits big batches for you.

Node.js Web Python Go Java .NET PHP Ruby Rust Swift Erlang Perl Zig Express Fastify Next.js Django Flask FastAPI Laravel Symfony Rails Spring Boot ASP.NET Core net/http Gin axum Cowboy

Common questions

Read the docs →API reference →Email support →

On this page

What does a row tell us?

One range of announced space, the prefix that covers it, the AS originating it with that network's name, domain, type and country, and the route's RPKI status.

00 · Unlimited

Unlimited lookups, no sign-up.

Paste it into a terminal. Any address answers with its country, network, company and hostname, with no key and no daily or monthly cap. ASes and domains answer too.

curl https://api.internetdata.io/8.8.8.8

{
  "ip": "8.8.8.8",
  "is_tor": false,
  "is_anycast": true,
  "is_dns_resolver": true,
  "location": {
    "country": "US", ...
  },
  "asn": { "asn": 15169, ... },
  "hostname": "dns.google"
}

01 · Every field

All of the data on a paid plan.

VPN, proxy, hosting and CDN flags, each naming the operator.

Location to the city, with coordinates and an accuracy radius.

WHOIS records, the whole abuse contact and the services an address runs.

Up to 1,000 addresses, ASes and domains in one request.

A free API key answers every field for its first 100 lookups each day, with no card.

See pricing Get a free API key