AS247

AS247 is a legacy autonomous system number registered under ARIN to the Rome Air Development Center (RADC), the U.S. Air Force's command, control, and communications research facility at Griffiss Air Force Base in Rome, New York. It is one of the earliest entries in the ARIN registry, with an autnum top-level registration event of 1988-10-27 and a last-change date of 1991-01-10 — placing it firmly in the ARPANET-to-Internet transition era when military research sites were among the first networks to receive ASNs. The registrant organization has since been renamed and reorganized: RADC was redesignated Rome Laboratory in 1990–1991 and then folded into the Air Force Research Laboratory's Information Directorate (AFRL/RI) in 1997, which still operates at the Rome site. The key triage point for AS247 is that it is completely dormant in BGP today: every routing source consulted (RIPEstat, CAIDA AS Rank, IPinfo) agrees it announces zero IPv4 and zero IPv6 prefixes, is seen by zero RIS peers (0/327 v4, 0/324 v6), has zero observed neighbours, and a customer cone that is a singleton (the ASN itself, 0 prefixes, 0 addresses). Its CAIDA AS rank of 79,459 sits near the bottom of the global ranking, reflecting total routing inactivity. RPKI posture cannot be assessed because there are no active originations and therefore no ROAs. The ARIN abuse contact resolves to a placeholder (nobody@example.com) with no known POC. The one notable historical association is that AS247/ROMENET-AS was the VICTIM — not the perpetrator — of the landmark 1994 Rome Laboratory intrusion, in which attackers "Datastream Cowboy" and "Kuji" conducted over 150 intrusions over roughly 26 days, installed sniffers, and exfiltrated air-tasking-order research; the case became a foundational DoD cybersecurity study. No notable abuse-origination signal was found as of June 2026 — consistent with a clean, inactive ASN held by a U.S. government research operator.

Operator

Rome Air Development Center (RADC), Griffiss Air Force Base, Rome, NY; ARIN org handle RADC-2 [Confirmed] — ARIN RDAP autnum top-level registrant entity

Country / RIR

US, ARIN [Confirmed] — ARIN RDAP; RIPEstat abuse-contact-finder (authoritative_rir: arin)

Allocated

1988-10-27 (ARIN registry date — autnum top-level registration event, a first-party RIR fact, NOT an IEEE date); last changed 1991-01-10 [Confirmed] — ARIN RDAP autnum top-level events

IANA block

1–1876, assigned by ARIN (IANA 16-bit AS Numbers Registry) [Confirmed] — RIPEstat as-overview

Org status

registrant org (RADC) reorganized into AFRL/RI; the AS247 registration itself has not been updated since 1991 and carries no active allocations or BGP routing [Confirmed] — ARIN RDAP, en.wikipedia.org/wiki/Rome_Laboratory

Contacts

abuse contact is an ARIN placeholder (nobody@example.com) — "no known POC"; RDAP notes the POC has been unvalidated since 2025-02-08 [Confirmed] — ARIN RDAP, RIPEstat abuse-contact-finder

Security/abuse context (NEUTRAL, DATED)

no notable abuse-origination signal found as of 2026-06-20 — not in Spamhaus, CleanTalk, AbuseIPDB, GreyNoise, or NANOG archives; ASN is inactive in BGP and cannot originate traffic [Likely; absence-of-signal could not be confirmed via live tool queries]. Historically, AS247 was the VICTIM of the 1994 Rome Laboratory intrusion (Datastream Cowboy / Kuji, 150+ intrusions over ~26 days) — a landmark DoD case

Network & routing

Network type

U.S. military/government research network; legacy/inactive — withdrawn from BGP [Confirmed] — ipinfo.io/AS247, peeringdb.com/asn/247

Size

dormant — 0 IPv4 prefixes / 0 IPv4 addresses and 0 IPv6 prefixes; customer cone = 1 ASN (itself), 0 prefixes, 0 addresses [Confirmed] — RIPEstat routing-status / CAIDA AS Rank (2026-06)

Routing/peering

NOT announced — 0 RIS peers seeing it (0/327 v4, 0/324 v6); 0 observed neighbours; CAIDA degree total 0 (customer 0, peer 0, provider 0); no upstreams or peers visible in any source [Confirmed]. PeeringDB lists only a placeholder "General Policy" with no IXPs or facilities; no active peering documented [Confirmed]

RPKI

not assessable — AS247 announces no prefixes, so there are no ROAs to validate (rpki-validation skipped, no prefix supplied) [Confirmed] — RIPEstat

Notable usage / history

AS247 (ROMENET-AS) was an early military research-network ASN registered to RADC at Griffiss AFB; the facility was the U.S. Air Force's premier C3I research center and an early Internet-era node [Confirmed] — en.wikipedia.org/wiki/Rome_Laboratory, ARIN RDAP

Related ASNs

AS211 also associated with Rome Air Development Center / Rome Laboratory; also inactive [Likely] — peeringdb.com/asn/211, ipinfo.io/AS211

Successor org

redesignated Rome Laboratory (1990–1991), then absorbed into Air Force Research Laboratory Information Directorate (AFRL/RI) in 1997; AFRL/RI still active at Rome, NY [Confirmed] — en.wikipedia.org/wiki/Rome_Laboratory, afrl.af.mil/RI

Analyst note

Encountered as a dormant legacy military ASN registered to RADC/AFRL; clean, inactive ASN. The only security association is as a 1994 intrusion VICTIM, not as an abuse source. Entity-level events nested under entities[] (org RADC-2 registration 1988-01-04, contact events) were ignored as decoys — the autnum top-level registration 1988-10-27 is the authoritative allocated_date.