Autonomous system detail  ·  US flag US

AS801

Announced

Operated by Amazon Technologies Inc., US flag US.

Summary

// analyst note
Live, actively-routed ASN (114 prefixes), not dormant. ARIN RDAP autnum 801 returns a single unambiguous registry name, AMAZON-LEO. Network-type / satellite-gateway role is Confirmed: the abuse POC vCard is itself named "Leo Kuiper Trust and Safety" (handle LKTS-ARIN), first-party registry evidence corroborated by the geofeed domain and Amazon-only peer set. No PeeringDB entry exists (confirmed live, empty API result).
// security note
NEUTRAL/DATED: no notable public abuse signal found as of 2026-08-01; not on Spamhaus ASN-DROP, no NANOG archive mentions, no AS801-specific threat-intel hits.
IPv4 prefixes
76
~104.4K addresses
IPv6 prefixes
59
announced
Peer networks
2
2 up · 0 down
IANA block
1-1876
Assigned by ARIN
[ 01 ] — Context

About this ASN.

Updated  ·  Confidence: High  ·  12 sources  ·  How this page is checked

AS801 is an active ARIN-registered ASN held by Amazon Technologies Inc. (handle AT-9066) that today announces a live routing footprint of 114 prefixes, making it a real, in-use network rather than a dormant or legacy holding.

The registration itself is not new: ARIN RDAP's top-level autnum registration event for AS801 dates to 2021-10-01, with the record last changed 2025-11-20. The registrant entity ties AS801 to the same Amazon Technologies Inc. corporate holder that also controls AS699.

AS801 functions as a ground/gateway-side ASN for Amazon Leo — Amazon's low-earth-orbit satellite broadband service (formerly Project Kuiper, rebranded November 2025) — rather than as one of AWS's public transit/CDN backbone ASNs such as AS16509. That link is registry-sourced, not merely inferred: ARIN RDAP names the AS801 abuse point of contact itself "Leo Kuiper Trust and Safety" (handle LKTS-ARIN), corroborated by a geofeed hosted at a leo.amazon.com subdomain and by AS801's BGP peer set, which consists exclusively of other Amazon-owned ASNs.

On the wire, AS801 originates 62 IPv4 and 52 IPv6 prefixes (roughly 78,848 IPv4 addresses), sits at CAIDA AS rank 15,203, and carries a small customer cone of just itself (37 prefixes, 29,440 addresses). It has two upstream providers — AS16509 and AS14618, both Amazon.com, Inc. — and zero visible peers or customers, consistent with an internal, gateway-style role rather than a network selling transit.

Abuse signal
No notable public abuse signal found for AS801 as of 2026-08-01; not present on the live Spamhaus ASN-DROP list, and no NANOG archive or general web-search results tie AS801 specifically to spam, hijacks, botnets, or phishing campaigns.
Brand-abuse caveat
Publicized 2025–2026 Amazon-brand phishing and outage coverage refers to Amazon's much larger AS16509/AS14618 networks or to Amazon-brand spoofing generally — none of it attributes incidents to AS801 by ASN.
RPKI hygiene
All 114 originated prefixes show valid RPKI ROA coverage with 0 RPKI-invalid origins; a subset is flagged "IRR Parent Invalid" on bgp.he.net, a routing-registry housekeeping artifact, not an RPKI or abuse issue.
Exposure
No PeeringDB net record exists for AS801 (confirmed via a live, empty API query), and it peers only with sibling Amazon ASNs, limiting third-party visibility into its role.
Operator
Amazon Technologies Inc. (ARIN handle AT-9066), 410 Terry Ave. N, Seattle, WA 98109 [Confirmed] — ARIN RDAP entity AT-9066
Country / RIR
US, ARIN [Confirmed] — ARIN RDAP autnum 801
Allocated
2021-10-01 (ARIN RDAP autnum top-level registration event); last changed 2025-11-20 [Confirmed] — ARIN RDAP autnum 801 top-level events
Org status
active; registrant entity AT-9066 also holds AS699 [Confirmed] — ARIN RDAP entity AT-9066
Contacts
routing — aws-rpki-routing-poc@amazon.com, aws-routing-poc@amazon.com; technical/NOC — amzn-noc-contact@amazon.com; abuse — amazon-leo-trust-and-safety@amazon.com (ARIN handle LKTS-ARIN, "Leo Kuiper Trust and Safety", vCard kind group)
[Confirmed] — ARIN RDAP autnum 801, RIPEstat abuse-contact-finder

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-08-01 — not on Spamhaus ASN-DROP, no NANOG archive mentions, no AS801-specific threat-intel hits; general Amazon-brand phishing/outage coverage refers to other Amazon ASNs, not AS801

[Confirmed] — spamhaus.org/drop/asndrop.json

Network & routing

Our research recorded 62 IPv4 prefixes; RouteViews currently observes 76.
Network type
ground/gateway ASN for Amazon Leo (LEO satellite broadband, formerly Project Kuiper, rebranded Nov 2025); distinct from AWS's public transit ASNs (e.g. AS16509) [Confirmed — registry-sourced via the abuse-POC vCard name "Leo Kuiper Trust and Safety" (handle LKTS-ARIN), corroborated by the geofeed domain and peer set] — ARIN RDAP autnum 801 (abuse POC), geo-ip.leo.amazon.com/geo-ip-feed.csv, bgp.he.net/AS801
Size
114 announced prefixes (62 IPv4 / 52 IPv6, ~78,848 IPv4 addresses); IPv6 address total Unknown; CAIDA AS rank 15,203; customer cone = 1 ASN, 37 prefixes, 29,440 addresses [Confirmed] — RIPEstat routing-status, asrank.caida.org/asns/801
Routing/peering
2 upstream providers (AS16509, AS14618, both Amazon.com, Inc.), 0 peers, 0 customers; observed BGP sessions are with Amazon's own ASNs only; no PeeringDB entry exists (verified live, empty API result) [Confirmed] — bgp.he.net/AS801, peeringdb.com/api/net?asn__in=801
RPKI
all 114 originated prefixes RPKI-valid, 0 invalid; a subset shows an IRR-parent-mismatch flag (registry housekeeping, not an RPKI/abuse issue) [Confirmed] — bgp.he.net/AS801
Notable usage
geofeed at geo-ip.leo.amazon.com/geo-ip-feed.csv (325 records, checked 2026-07-31) maps AS801 address space to city-level US and Germany (Frankfurt) locations, consistent with satellite ground-station/gateway points of presence for Amazon Leo [Confirmed] — geo-ip.leo.amazon.com/geo-ip-feed.csv
Related ASNs
AS16509, AS14618 (upstreams, both Amazon.com, Inc.); AS699 (same registrant entity AT-9066) [Confirmed]
Registry name
AMAZON-LEO [Confirmed] — https://rdap.arin.net/registry/autnum/801 (name field, the only name on the object)
Analyst note
ARIN RDAP autnum 801 returns a single unambiguous registry name, AMAZON-LEO — no conflicting reads exist in the record. The abuse POC vCard is itself named "Leo Kuiper Trust and Safety" (handle LKTS-ARIN), which upgrades the Amazon Leo satellite-gateway attribution from an inferred read of the geofeed/peer set to a registry-sourced fact. Peering policy is Unknown; no dedicated AS801 policy page exists and its only BGP sessions are with sibling Amazon ASNs.
[ 02 ] — Announced prefixes

What this network routes.

135 prefixes total · as observed by RouteViews at 2026-09-20 · one collector view, not a global census
// IPv4 prefixes76
  1. 35.97.160.0/21/21
  2. 35.97.168.0/21/21
  3. 35.97.176.0/21/21
  4. 35.97.184.0/21/21
  5. 35.97.208.0/21/21
  6. 35.97.216.0/21/21
  7. 35.97.224.0/21/21
  8. 35.97.232.0/21/21
  9. 35.97.240.0/21/21
  10. 35.97.248.0/21/21
  11. 35.98.0.0/21/21
  12. 35.98.104.0/21/21
  13. 35.98.112.0/21/21
  14. 35.98.120.0/21/21
  15. 35.98.128.0/21/21
  16. 35.98.136.0/21/21
  17. 35.98.144.0/21/21
  18. 35.98.152.0/21/21
  19. 35.98.16.0/21/21
  20. 35.98.160.0/21/21
  21. 35.98.168.0/21/21
  22. 35.98.176.0/21/21
  23. 35.98.184.0/21/21
  24. 35.98.224.0/21/21
  25. 35.98.232.0/21/21
  26. 35.98.24.0/21/21
  27. 35.98.240.0/21/21
  28. 35.98.248.0/21/21
  29. 35.98.32.0/21/21
  30. 35.98.40.0/21/21
  31. 35.98.48.0/21/21
  32. 35.98.56.0/21/21
  33. 35.98.8.0/21/21
  34. 35.98.80.0/21/21
  35. 35.98.88.0/21/21
  36. 35.98.96.0/21/21
  37. 35.99.0.0/21/21
  38. 35.99.104.0/21/21
  39. 35.99.16.0/21/21
  40. 35.99.24.0/21/21
  41. 35.99.32.0/21/21
  42. 35.99.40.0/21/21
  43. 35.99.8.0/21/21
  44. 35.99.80.0/21/21
  45. 35.99.88.0/21/21
  46. 35.99.96.0/21/21
  47. 35.96.24.0/23/23
  48. 35.96.26.0/23/23
  49. 35.96.48.0/23/23
  50. 35.96.50.0/23/23
  51. 35.96.52.0/23/23
  52. 35.96.54.0/23/23
  53. 35.96.58.0/23/23
  54. 35.96.60.0/23/23
  55. 35.97.132.0/23/23
  56. 35.97.134.0/23/23
  57. 35.96.244.0/24/24
  58. 35.96.32.0/24/24
  59. 35.96.33.0/24/24
  60. 35.96.34.0/24/24
  61. 35.96.35.0/24/24
  62. 35.96.36.0/24/24
  63. 35.96.38.0/24/24
  64. 35.96.39.0/24/24
  65. 35.96.40.0/24/24
  66. 35.96.43.0/24/24
  67. 35.96.44.0/24/24
  68. 35.96.45.0/24/24
  69. 35.96.46.0/24/24
  70. 35.96.47.0/24/24
  71. 35.96.5.0/24/24
  72. 35.96.56.0/24/24
  73. 35.97.128.0/24/24
  74. 35.97.129.0/24/24
  75. 35.97.130.0/24/24
  76. 35.97.194.0/24/24
// IPv6 prefixes59
  1. 2631:0:1000::/40/40
  2. 2631:0:1100::/40/40
  3. 2631:0:1200::/40/40
  4. 2631:0:1300::/40/40
  5. 2631:0:1400::/40/40
  6. 2631:0:1500::/40/40
  7. 2631:0:2000::/40/40
  8. 2631:0:200::/40/40
  9. 2631:0:2100::/40/40
  10. 2631:0:2200::/40/40
  11. 2631:0:2300::/40/40
  12. 2631:0:2400::/40/40
  13. 2631:0:2500::/40/40
  14. 2631:0:2600::/40/40
  15. 2631:0:2700::/40/40
  16. 2631:0:2800::/40/40
  17. 2631:0:2900::/40/40
  18. 2631:0:2a00::/40/40
  19. 2631:0:2b00::/40/40
  20. 2631:0:3000::/40/40
  21. 2631:0:300::/40/40
  22. 2631:0:3100::/40/40
  23. 2631:0:3200::/40/40
  24. 2631:0:3300::/40/40
  25. 2631:0:3400::/40/40
  26. 2631:0:3500::/40/40
  27. 2631:0:3600::/40/40
  28. 2631:0:3700::/40/40
  29. 2631:0:3800::/40/40
  30. 2631:0:3900::/40/40
  31. 2631:0:3e00::/40/40
  32. 2631:0:3f00::/40/40
  33. 2631:0:4000::/40/40
  34. 2631:0:400::/40/40
  35. 2631:0:4100::/40/40
  36. 2631:0:4200::/40/40
  37. 2631:0:4300::/40/40
  38. 2631:0:500::/40/40
  39. 2631:0:600::/40/40
  40. 2631:0:700::/40/40
  41. 2631:0:800::/40/40
  42. 2631:0:900::/40/40
  43. 2631:0:a00::/40/40
  44. 2631:0:b00::/40/40
  45. 2631:0:e00::/40/40
  46. 2631:0:f00::/40/40
  47. 2606:7b40:1b15::/48/48
  48. 2606:7b40:1b17::/48/48
  49. 2606:7b40:1b18::/48/48
  50. 2606:7b40:1b19::/48/48
  51. 2606:7b40:1b1d::/48/48
  52. 2606:7b40:1b21::/48/48
  53. 2606:7b40:1b23::/48/48
  54. 2631:0:1800::/48/48
  55. 2631:0:1::/48/48
  56. 2631:0:2::/48/48
  57. 2631:0:3::/48/48
  58. 2631:0:4::/48/48
  59. 2631:0:a::/48/48
[ 03 ] — Notable peers & upstreams

Who it talks to.

2 observed neighbours
// Notable connections2 of 2 observed

Neighbours observed by RouteViews at 2026-09-20, lowest ASN first. Relationships are inferences from the CAIDA AS Relationships Dataset, 2026-08-01, and establish no commercial arrangement; a dash means the inference did not resolve.

ASNOperatorRole
AS14618 Amazon.com, Inc. upstream
AS16509 Amazon.com, Inc. upstream
Neighbours observed via public BGP collectors; not a complete peering list.