AS19527

AS19527 is an autonomous system number registered under ARIN to Google LLC (org handle GOOGL-2), and it serves a specific, narrow role inside Google's network: it carries IP prefixes that are in use by Google Cloud customers, not Google's own internet-facing services. ARIN's WHOIS remarks make this explicit — "The IP addresses under this Org-ID are in use by Google Cloud customers" — which distinguishes AS19527 from AS15169, Google's primary edge/peering ASN. The practical consequence shows up at PeeringDB, which states plainly that it is not possible to peer with AS19527 and redirects anyone unexpectedly receiving its traffic to request peering with AS15169 instead; the record lists zero advertised peering prefixes and an empty public-peering footprint. Routing-table snapshots tell a different story from the peering desk: live BGP data shows AS19527 actively originating roughly 183–264 IPv4 prefixes and 38–58 IPv6 prefixes (the spread reflects snapshot timing and aggregation differences between bgp.tools and bgp.he.net), sitting behind a deep set of ~19 transit upstreams including Arelion (AS1299), Tata (AS4755), Cogent (AS174), and Lumen/Level 3 (AS3356). Its customer cone is minimal — about two ASNs — consistent with an in-house infrastructure ASN rather than a transit provider. RPKI posture is strong: both bgp.he.net and bgp.tools show ROA-valid origins with no invalids. No notable public abuse signal was found for AS19527 as a network-level entity as of 2026-06-25 — not in Spamhaus, UCEPROTECT, CleanTalk, ThreatFox, or NANOG archives — though documented tenant-layer misuse of Google Cloud's application layer (e.g. December 2025 phishing via Google Cloud Storage and Application Integration) exists at the platform level and is not attributable to this ASN's routing identity.

Operator

Google LLC (subsidiary of Alphabet Inc.; ARIN org handle GOOGL-2) [Confirmed] — ARIN RDAP autnum/19527, peeringdb.com/asn/19527

Country / RIR

US, ARIN (IANA 16-bit AS block 18432–20479, assigned by ARIN) [Confirmed] — RIPEstat as-overview / abuse-contact-finder (authoritative_rir: arin)

AS name

GOOGLE-2 (ARIN as-name; IRR route-set RADB::AS19527:AS-GOOGLE-CLOUD-TRANSIT) [Confirmed] — ARIN RDAP, peeringdb.com/asn/19527

Allocated

2007-08-17 (ARIN RDAP autnum TOP-LEVEL registration event, 2007-08-17T14:51:42-04:00 — NOT the GOOGL-2 org date of 2006-09-29 nor the GCABU-ARIN POC date of 2011-03-30, which are entity-level decoys); last changed 2018-01-10 [Confirmed] — ARIN RDAP autnum top-level events

Org status

active US-incorporated private company (Google LLC, Alphabet Inc. subsidiary); ARIN org handle GOOGL-2, status active [Confirmed] — ARIN RDAP

Contacts

abuse google-cloud-compliance@google.com (ARIN handle GCABU-ARIN); admin/tech arin-contact@google.com (ZG39-ARIN); +1-650-253-0000; HQ 1600 Amphitheatre Parkway, Mountain View, CA 94043; GCE abuse form support.google.com/code/go/gce_abuse_report [Confirmed] — ARIN RDAP

Security/abuse context (NEUTRAL, DATED)

no AS-level abuse signal found as of 2026-06-25 — not in Spamhaus, UCEPROTECT L3, CleanTalk, SpamCop, ThreatFox, or NANOG/SecLists archives; documented Google Cloud platform misuse (Dec 2025 phishing via GCS / Application Integration) is tenant-layer and not attributable to this ASN's routing identity [Likely for the AS-level null; Confirmed for the platform-incident context] — threatfox.abuse.ch/asn/19527, thehackernews.com/2026/01/cybercriminals-abuse-google-cloud-email.html, seclists.org/nanog

Network & routing

Network type

Content / cloud infrastructure — carries Google Cloud customer IP space; distinct from Google's primary edge ASN AS15169 [Confirmed] — ARIN RDAP remarks, peeringdb.com/asn/19527, bgp.tools/as/19527

Size / routing

~183–264 IPv4 prefixes and ~38–58 IPv6 prefixes announced (bgp.tools vs bgp.he.net snapshot/aggregation spread); ~7,116 /24-equivalents and ~131,072 /48-equivalents per bgp.tools [Likely] — bgp.he.net/AS19527, bgp.tools/as/19527

Customer cone / upstreams

minimal cone (~2 ASNs, 1 direct downstream); ~19 transit upstreams incl. Arelion (AS1299), Tata (AS4755), Cogent (AS174), Lumen/Level 3 (AS3356) [Likely] — bgp.tools/as/19527, bgp.he.net/AS19527

Peering policy

not peerable directly — PeeringDB states "It is not possible to peer with AS19527"; partners are redirected to AS15169 via peering.google.com/iwantpeering; zero advertised peering prefixes, no public IXP presence under this ASN [Confirmed] — peeringdb.com/asn/19527, peering.google.com

RPKI

strong — all announced prefixes show ROA-valid origins with no invalids on both bgp.he.net and bgp.tools (prefix-level RIPEstat validation skipped, no --prefix supplied) [Likely] — bgp.he.net/AS19527, bgp.tools/as/19527

Geo footprint

United States (primary), with prefixes spanning Asia-Pacific (e.g. South Korea, Singapore, Australia) reflecting Google Cloud's multi-continent infrastructure [Likely] — bgp.tools/as/19527

Notable usage

Google's dedicated ASN for Google Cloud customer-facing IP space (Compute Engine and related workloads); distinct from AS15169 (edge/peering) and AS396982 (GCP) [Confirmed] — ARIN RDAP remarks, bgp.tools/as/19527

Related ASNs

AS15169 (Google's primary edge/peering ASN), AS396982 (Google Cloud) [Confirmed] — ARIN RDAP, bgp.tools/as/19527

Status

active; announced (true) [Confirmed] — ARIN RDAP status, RIPEstat as-overview

Analyst note

Encountered as Google's Google-Cloud-customer ASN. The peering desk treats it as non-peerable (redirect to AS15169) while the live routing table shows it actively originating a large multi-continent prefix set — both facts are correct and reflect its in-house-infrastructure role. PeeringDB last updated 2025-02-20.