AS225

AS225 is a legacy autonomous system number registered under ARIN to the University of Virginia, the public research university in Charlottesville chartered in 1819 and founded by Thomas Jefferson. The ASN serves as the institution's campus network — a classic academic eyeball network with a pronounced day/night traffic rhythm — and also routes address space associated with the National Radio Astronomy Observatory (NRAO) in Charlottesville. AS225 is a pure IPv4 stub: every routing source consulted (RIPEstat RIS, bgp.he.net, bgp.tools) agrees it originates 21 IPv4 prefixes (roughly 198,144 addresses, ~774 /24 equivalents) and announces zero IPv6. Its CAIDA AS rank is 12815, and CAIDA's asnDegree resolves to provider=2 / peer=0 / customer=0, consistent with an upstream-only stub. The headline blocks are the legacy /16s 128.143.0.0/16 and 137.54.0.0/16, plus the large 199.111.0.0/16, alongside NRAO-associated /24s such as 192.33.115.0/24 and 192.33.117.0/24. Connectivity is upstream-only: it has no observed downstream customers (RIPEstat observed_neighbours = 2), reaching the wider Internet through AS3356 (Lumen/Level 3) and AS40220 (Virginia Tech). Routing hygiene shows two legacy gaps — bgp.he.net flags bogon announcements and the network has deployed no RPKI ROAs (prefixes rely on unauthenticated IRR records only), both typical of an early-vintage university ASN and neither an abuse signal. No notable public abuse signal was found as of June 2026 (Spamhaus, NANOG archives, AbuseIPDB, threat-actor ASN lists). The May 2026 Instructure/Canvas LMS breach that touched UVA was a third-party SaaS vendor incident, not a compromise of the AS225 network layer.

Operator

University of Virginia (public research university; ARIN org handle UVA, Charlottesville, VA) [Confirmed] — ARIN RDAP autnum/225, virginia.edu

Country / RIR

US, ARIN [Confirmed] — ARIN RDAP (objectClassName autnum, port43 whois.arin.net)

Allocated

1988-08-31 (ARIN autnum top-level registration event — a first-party RIR fact, NOT an IEEE date); last changed 2013-04-22 [Confirmed] — ARIN RDAP autnum top-level events[]

Org status

active public research university, chartered by the Virginia General Assembly in 1819; RDAP status active [Confirmed] — ARIN RDAP, britannica.com/topic/University-of-Virginia

Contacts

networks@virginia.edu (NOC/technical, +1-434-924-0632); abuse@virginia.edu (abuse, +1-434-243-8707); registrant University of Virginia ITC, P.O. Box 400324, Charlottesville, VA 22904-4324 [Confirmed] — ARIN RDAP entities

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal as of 2026-06-19 — no ASN-level Spamhaus/AbuseIPDB listing, no NANOG abuse threads, no threat-actor attribution. May 2026 Canvas/Instructure LMS breach affecting UVA was a third-party SaaS vendor incident, not a network-layer compromise of AS225. Isolated BitTorrent/VPN per-IP tags on IPinfo reflect expected large-academic-network activity

Network & routing

Network type

academic/education campus eyeball network (stub/enterprise AS); also routes NRAO Charlottesville address space [Confirmed] — bgp.tools/as/225, ipinfo.io/AS225

Size

21 IPv4 prefixes / ~198,144 IPv4 addresses (~774 /24 equivalents); 0 IPv6 prefixes [Confirmed] — RIPEstat routing-status, bgp.he.net, bgp.tools (2026-06)

AS rank

12815 (CAIDA AS Rank, source ARIN); asnDegree provider=2, peer=0, customer=0 [Confirmed] — CAIDA AS Rank API (asns/225)

Routing/peering

upstreams AS3356 (Lumen/Level 3) and AS40220 (Virginia Tech); RIPEstat observed_neighbours = 2; no downstream customers observed (singleton cone); no peers observed (CAIDA peer=0) [Confirmed for upstreams; Likely for cone]. v4 RIS visibility 327/327 peers; v6 0/324. PeeringDB record exists but minimal — no public IXP presence documented

[Confirmed] — bgp.he.net/AS225, peeringdb.com/asn/225

RPKI

no ROAs deployed (0 RPKI-valid origins); prefixes carry IRR records only; bgp.he.net also flags bogon announcements [Confirmed] — bgp.he.net/AS225

Notable usage

UVA campus connectivity; notable blocks 128.143.0.0/16, 137.54.0.0/16, 199.111.0.0/16 (UVA) and 192.33.115.0/24, 192.33.117.0/24 (NRAO) [Confirmed] — RIPEstat announced-prefixes, bgp.he.net/AS225

Analyst note

Allocation date 1988-08-31 read from the autnum TOP-LEVEL events[]; the org entity (handle UVA, registered 1987-12-14) and POC entity ITS31-ARIN (2012-02-28) are entity-level dates and were correctly ignored. as_rank 12815 from CAIDA (corrected from a prior null — AS225 is active and CAIDA canonically returns a value). peers_sample corrected to remove the uncorroborated AS1000; CAIDA asnDegree provider=2/peer=0/customer=0 confirms only AS3356 and AS40220 as canonical neighbours. Active IPv4 stub for UVA; clean public profile with minor legacy routing-hygiene gaps.