Autonomous system detail

AS558

Announced

Operated by VEGANEXT - NV Next LLC.

Summary

// analyst note
Legacy ASN (1989 ARIN registration) held today by NV Next LLC (org record from 2017), a small single-homed stub network (3 IPv4 /24s, one upstream, no downstream customers). Registry identity (NSP) and current commercial branding (AI-native MSP/MSSP) diverge — flagged, not resolved, since the operator's own site could not be crawled beyond page titles (JS SPA).
// security note
NEUTRAL/DATED 2026-07-11: no confirmed public abuse-feed listing or hijack/route-leak history found (absence of evidence only).
IPv4 prefixes
3
~768 addresses
IPv6 prefixes
0
Peer networks
1
1 up · 0 down
IANA block
1-1876
Assigned by ARIN
[ 01 ] — Context

About this ASN.

Updated  ·  Confidence: Medium-High

AS558 is a legacy ARIN-registered autonomous system, first registered on 1989-12-13, long before its current registrant took control of it. The ASN today belongs to NV Next LLC, a private company (ARIN org handle NNL-32, registered 2017-03-27) headquartered in El Segundo, California, and doing business publicly as VegaNext. There is a notable gap between the two identities: the ASN registry name "VEGANEXT" and PeeringDB classify the network as an NSP (Network Service Provider) with an open peering policy, while VegaNext's current live website markets the company as an "AI-Native MSP for Enterprise Cybersecurity & AI" — a managed-IT/managed-security business, not a network-transit brand. That gap most plausibly reflects a legacy ASN acquired or inherited by a company that later pivoted its commercial focus, though no operator-official history page could be retrieved to confirm the transition directly (the site is a JavaScript SPA that only exposed page titles to automated fetch). Operationally, AS558 is a small, single-homed stub network: it announces exactly three IPv4 /24 blocks (768 addresses total, no IPv6), sits behind a single upstream provider, and has no downstream customers. One routing-registry hygiene flag (an IRR/origin mismatch on one announced block) and a VPN classification tag from a commercial IP-intelligence vendor are recorded neutrally below; neither is a confirmed abuse incident.

Operator
NV Next LLC, d/b/a VegaNext (org handle NNL-32), 400 Continental Blvd, 6th Floor, El Segundo, CA 90245, US [Confirmed] — https://rdap.arin.net/registry/entity/NNL-32
Country / RIR
US, ARIN [Confirmed] — https://rdap.arin.net/registry/autnum/558
Allocated date
1989-12-13 — read from the RDAP autnum top-level events[] (eventAction "registration"). This is the ASN's own first-party ARIN allocation date and is distinct from the nested entity records: org NNL-32 registered 2017-03-27 (last changed 2024-11-25), and abuse/admin/tech POC ADMIN6412-ARIN registered 2017-03-09 (last changed 2025-01-28) — those are contact/org record dates, not the ASN's allocation date, and are not used here
[Confirmed] — https://rdap.arin.net/registry/autnum/558
Org status
ARIN org NNL-32 (NV Next LLC) active, registered 2017-03-27, last changed 2024-11-25; the ARIN admin/abuse/technical POC (ADMIN6412-ARIN) is currently flagged by ARIN as unvalidated since no response since 2026-01-28 — a registry data-quality flag, not an operating-status claim
[Confirmed] — https://rdap.arin.net/registry/entity/NNL-32
Website
https://www.veganext.com [Confirmed] — https://www.veganext.com

Security/abuse context (neutral, dated 2026-07-11)

no public abuse-feed listing or hijack/route-leak history found for AS558 (absence of evidence, not a confirmed clean bill — the Spamhaus programmatic ASN-report endpoint 404'd rather than returning a substantive answer) [Likely] — https://ipinfo.io/AS558; one routing-registry hygiene flag exists: bgp.he.net shows an "IRR Invalid - Parent Route Origin Mismatch" on announced block 69.89.65.0/24 (sub-allocation labelled "SpinTrack") [Confirmed] — https://bgp.he.net/AS558; IPinfo also applies a "VPN" classification tag to the ASN (network-type tag, not an abuse verdict)

[Confirmed] — https://ipinfo.io/AS558

Abuse contact

arinadmin@veganext.com, POC ADMIN6412-ARIN, +1-310-935-3110

[Confirmed] — https://rdap.arin.net/registry/entity/ADMIN6412-ARIN

Network & routing

Network type
PeeringDB classifies AS558 as an NSP with an Open peering policy; VegaNext's current public website instead markets the company as an AI-native MSP/MSSP (managed IT + managed security), a live discrepancy likely reflecting a business pivot on a legacy ASN
[Likely] — https://www.peeringdb.com/net/525, https://www.veganext.com/
Routing history
first RIS-observed origination 2004-09-03 (prefix 206.132.205.0/24); most recent 2026-07-11 (69.89.65.0/24) — routing-history dates are distinct from the 1989 registry allocation date [Confirmed] — https://stat.ripe.net/data/routing-status/data.json?resource=558
CAIDA AS rank
46745; customer cone = 1 ASN (itself only), 3 prefixes, 768 addresses — a stub network with no downstream customers [Confirmed] — https://api.asrank.caida.org/v2/restful/asns/558
Peering policy
Open per PeeringDB (no contract, no traffic-ratio, no multiple-location requirement); record last updated 2025-08-07 [Confirmed] — https://www.peeringdb.com/net/525
RPKI posture
Unknown — RIPEstat's rpki-validation check is per-prefix and was not run against a specific announced prefix in this pass, so no AS-level posture is asserted [Unknown] — https://stat.ripe.net/data/rpki-validation/data.json
Geo footprint
United States only; CAIDA geolocates the ASN near Los Angeles/El Segundo, consistent with the registrant address; no IXP membership recorded [Confirmed] — https://api.asrank.caida.org/v2/restful/asns/558
Notable usage
Unknown — no notable/high-profile deployment could be verified from operator-official or corroborating sources within this research pass [Unknown]
ASN / name
AS558 / VEGANEXT [Confirmed] — https://rdap.arin.net/registry/autnum/558
Registry last-changed
2024-01-29 (autnum top-level "last changed" event) [Confirmed] — https://rdap.arin.net/registry/autnum/558
Status
active [Confirmed] — https://rdap.arin.net/registry/autnum/558
Announced prefixes
3 IPv4 /24s — 69.89.64.0/24, 69.89.65.0/24, 154.19.42.0/24 (768 addresses total); 0 IPv6 prefixes; corroborated by two independent routing sources [Confirmed] — https://stat.ripe.net/data/announced-prefixes/data.json?resource=558, https://bgp.he.net/AS558
RIS peer visibility
v4 327/327 RIS peers see the announcement; v6 0/322 (no IPv6 announced) [Confirmed] — https://stat.ripe.net/data/routing-status/data.json?resource=558
AS degree / upstream
total degree 1 (0 customers, 0 peers, 1 provider) per CAIDA; the provider is identified by a corroborating source as AS174 Cogent Communications [Likely] — https://api.asrank.caida.org/v2/restful/asns/558, https://bgp.he.net/AS558
[ 02 ] — Announced prefixes

What this network routes.

3 prefixes total · RIPEstat data · cached, not real-time
// IPv4 prefixes3
  1. 154.19.42.0/24/24
  2. 69.89.64.0/24/24
  3. 69.89.65.0/24/24
// IPv6 prefixes0
No IPv6 prefixes announced.
[ 03 ] — Notable peers & upstreams

Who it talks to.

1 observed neighbour
// Notable connectionsTop 1 of 1
ASNOperatorRole
AS174 COGENT-174 - Cogent Communications, LLC upstream
Neighbours observed via public BGP collectors; not a complete peering list.