AS627

AS627 is a U.S. government autonomous system number falling inside the ARIN-registered block DNIC-ASBLK-00616-00665 (ARIN autnum handle AS616, spanning AS616 through AS665), registered to the United States Department of Defense (registrant handle USDDD) and administered day-to-day by the Defense Information Systems Agency's DISA-Columbus facility, which staffs the DoD Network Information Center (DNIC) hostmaster and registration contacts. The ARIN RDAP autnum object's top-level registration event dates this block to 1990-04-19, a first-party registry fact independently corroborated by two third-party ASN lookup aggregators (ipinfo.io, ipregistry.co); the record was last administratively updated 2025-09-12, which is a metadata touch rather than a new allocation event. Operationally, AS627 currently announces six IPv4 prefixes totaling roughly 7,168 addresses and zero IPv6 prefixes. CAIDA's ASRank places it at global rank 19,194 with a singleton customer cone (1 ASN; the same 6 prefixes; 7,168 addresses) — consistent with a stub network. Third-party BGP tooling shows a single observed adjacency to AS27064 (also DoD-operated) and no downstream customers, and it has no PeeringDB listing, consistent with government/military ASNs that do not publish open peering policies. No public abuse, blocklist, or threat-campaign association was found as of 2026-07-17 (re-checked against Spamhaus, Cisco Talos, and NANOG mailing-list archives); the one notable flag is bgp.he.net's automated "announces bogons" routing-hygiene tag, typical of legacy pre-CIDR-era allocations like this one and not an abuse signal.

Operator

United States Department of Defense (DoD) — DoD Network Information Center (DNIC), administered by DISA-Columbus; registrant handle USDDD [Confirmed] — https://rdap.arin.net/registry/autnum/627

Country / RIR

US, ARIN [Confirmed] — https://stat.ripe.net/AS627 (abuse-contact-finder, authoritative_rir: arin)

Allocated

1990-04-19 (ARIN RDAP autnum TOP-LEVEL registration event for the containing block DNIC-ASBLK-00616-00665; NOT an IEEE date, this is a first-party RIR registry fact); last changed 2025-09-12 [Confirmed — corroborated independently by ARIN RDAP, ipinfo.io, and ipregistry.co] — https://rdap.arin.net/registry/autnum/627

Org status

active — ARIN RDAP status for the containing autnum block is "active" [Confirmed] — https://rdap.arin.net/registry/autnum/627

Contacts

abuse/NOC/technical — disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil; registrations — disa.columbus.ns.mbx.arin-registrations@mail.mil; registrant address 3990 E. Broad Street, Columbus, OH 43218; technical/NOC address 300 North James Road, Whitehall, OH 43213

[Confirmed] — https://rdap.arin.net/registry/autnum/627, https://stat.ripe.net/AS627

Security/abuse context (NEUTRAL, DATED)

no listing found in Spamhaus (SBL/XBL/DROP/ASN-DROP/BCL), AbuseIPDB, Cisco Talos, or NANOG mailing-list archives as of 2026-07-17 (re-verified this pass); bgp.he.net's automated "announces bogons" note is a routing-hygiene flag typical of legacy pre-CIDR allocations, not an abuse finding

Network & routing

Network type

government/military network; no dedicated public operator "about"/peering page exists for this ASN, consistent with DoD-operated blocks [Confirmed] — https://bgp.he.net/AS627

Size

6 IPv4 prefixes announced (138.147.0.0/24, 204.34.240.0/24, 204.36.18.0/24, 204.36.19.0/24, 205.69.240.0/21, 205.70.96.0/20) ≈ 7,168 addresses; 0 IPv6 prefixes announced (RIPEstat routing-status announced_space.v6 = 0 prefixes / 0 /48s, visible across the full RIS v6 peer set) [Confirmed] — https://stat.ripe.net/data/announced-prefixes/data.json?resource=AS627, https://stat.ripe.net/data/routing-status/data.json?resource=AS627

AS rank / customer cone

CAIDA ASRank = 19,194 globally (seen: true, cliqueMember: true); customer cone is a singleton — 1 ASN, 6 prefixes, 7,168 addresses — matching the announced IPv4 footprint exactly, i.e. no downstream customer ASNs [Confirmed] — https://api.asrank.caida.org/v2/restful/asns/627

Routing/peering

no PeeringDB record exists for AS627 (verified HTTP 404); third-party BGP tooling and CAIDA's asnDegree (total: 1, provider: 1, customer: 0, peer: 0) both show one observed adjacency, AS27064 (also DoD-operated), and no downstream customers

[Confirmed] — https://bgp.he.net/AS627, https://www.peeringdb.com/asn/627, https://api.asrank.caida.org/v2/restful/asns/627

RPKI

not assessed in this pass — the RIPEstat rpki-validation call requires a specific prefix parameter, which was not supplied to the canonical fetch [Unknown] — https://stat.ripe.net/AS627

Notable usage

government/military address space; mail.mil appears in third-party WHOIS/IP-intel scrapes as a domain resolving within this ASN's ranges, but this is a third-party observation, not an operator-published statement [Likely] — https://ipinfo.io/AS627, https://ipregistry.co/AS627

Related ASNs

part of the ARIN block DNIC-ASBLK-00616-00665 (AS616–AS665); observed adjacency to AS27064 (DoD Network Information Center) [Confirmed for block membership; Confirmed for AS27064 adjacency via CAIDA asnDegree] — https://rdap.arin.net/registry/autnum/627, https://bgp.he.net/AS627, https://api.asrank.caida.org/v2/restful/asns/627

Analyst note

No dedicated public operator website, peering-policy page, or IR page exists for AS627 — typical for DoD/DISA-administered blocks. This cycle resolved the prior pass's three nulled numeric fields against canonical sources: CAIDA ASRank confirms AS rank 19,194 and a singleton customer cone (1 ASN; 6 prefixes; 7,168 addresses), and RIPEstat routing-status confirms 0 IPv6 prefixes announced (not merely "disputed" or "Unknown"). No other fields changed.