AS836

AS836 is an active, single-homed enterprise stub ASN registered to White Plains Hospital, a 292-bed nonprofit hospital in Westchester County, New York and a Montefiore Health System affiliate. It originates exactly one IPv4 prefix and zero IPv6, and it is not a network operator in the transit sense. ARIN RDAP records the autnum's top-level registration event on 2022-06-16, corroborated independently by bgp.tools.

The routed footprint is small and stable: 24.38.40.0/24 (256 addresses), first seen routed 2023-01-20 and visible to all 327 of 327 RIPE RIS peers for IPv4 (0 of 321 for IPv6) as of the query date, with one observed neighbour. CAIDA's AS-degree data show provider:1, peer:0, customer:0 — a single upstream adjacency, though CAIDA's aggregate count doesn't name the neighbor.

Collector data from bgp.he.net and bgp.tools independently identify that upstream as AS32787 (Akamai Technologies / Prolexic), consistent with a hospital buying transit or DDoS-scrubbing service rather than peering directly. CAIDA ranks AS836 67,700th globally, near the low-visibility end typical of enterprise stub networks. No PeeringDB network record exists for AS836 (404 on lookup), so no public peering policy is available.

RPKI validation is valid and ROA-covered: RIPEstat's rpki-validation query for 24.38.40.0/24 returns status valid, with a governing ROA of origin AS836, prefix 24.38.40.0/24, max length 24. A second ROA in the same response — origin AS6128, prefix 24.38.0.0/17, invalid_asn — is the Cablevision/Altice covering aggregate that 24.38.40.0/24 falls within, not an AS836 defect.

White Plains Hospital operates as an active nonprofit corporation — IRS-recognized as a 501(c)(3) since September 1941 (EIN 13-1740130) and a current NYS Department of Health-licensed facility. Its own website returned HTTP 403 to automated fetch in the prior cycle and a DNS timeout as of 2026-08-07.

Identity was corroborated via the ARIN RDAP registrant record (org handle WPH-31, 41 East Post Rd, White Plains, NY), Wikipedia, and these two regulatory sources rather than the hospital's own about page. No related ASNs under the same operator were identified.

Operator

White Plains Hospital (nonprofit hospital; ARIN org handle WPH-31; Montefiore Health System affiliate), White Plains, NY [Confirmed] — rdap.arin.net/registry/autnum/836, en.wikipedia.org/wiki/White_Plains_Hospital

Country / RIR

US, ARIN [Confirmed] — rdap.arin.net/registry/autnum/836

Allocated

2022-06-16 (ARIN RDAP top-level autnum registration event; last changed the same instant, 2022-06-16T07:05:43), corroborated by bgp.tools ("registered on June 16, 2022") [Confirmed] — rdap.arin.net/registry/autnum/836, bgp.tools/as/836

Org status

active nonprofit corporation (White Plains Hospital), Montefiore Health System affiliate; IRS-recognized 501(c)(3) since September 1941 (EIN 13-1740130, FY2024 Form 990 filed); current NYS Dept of Health-licensed facility [Confirmed] — rdap.arin.net/registry/autnum/836, projects.propublica.org/nonprofits/organizations/131740130, profiles.health.ny.gov/hospital/view/103064

Contacts

abuse contact wph-dlnetworkengineering@wphospital.org (RIPEstat abuse-contact-finder, authoritative RIR ARIN; resolves to ARIN POC handle WPH5-ARIN, vCard kind "group" — an organizational distribution list, not an individual, so it publishes under this pipeline's contact rule); registrant address 41 East Post Rd, White Plains, NY (ARIN org handle WPH-31, kind "org")

[Confirmed] — rdap.arin.net/registry/autnum/836, rdap.arin.net/registry/entity/WPH5-ARIN

Security/abuse context (NEUTRAL, DATED)

no results tying AS836 or White Plains Hospital to abuse, malware, spam, BGP hijack, or phishing as of an August 2026 search across a direct Spamhaus check, Talos Intelligence search, and a NANOG/MARC archive search (zero hits for "as836"); AbuseIPDB, Talos Reputation Center, and check.spamhaus.org returned HTTP 403 (coverage gap, not confirmed-clean); VirusTotal inconclusive [Confirmed for what was checked; gap noted] — spamhaus.org/blocklists/spamhaus-blocklist, marc.info/?l=nanog&s=AS836&f=1

Network & routing

Network type

enterprise/end-user stub network (hospital IT infrastructure); not an ISP or transit provider; single upstream identified as AS32787/Akamai by collector data (bgp.he.net, bgp.tools), not named directly by RDAP or CAIDA [Confirmed] — ipinfo.io/AS836, bgp.he.net/AS836

Size

1 IPv4 prefix (24.38.40.0/24, 256 addresses), 0 IPv6 prefixes; customer cone = 1 ASN (itself), 1 prefix, 256 addresses [Confirmed] — bgp.he.net/AS836, bgp.tools/as/836, asrank.caida.org

Routing/peering

single BGP adjacency; CAIDA degree provider:1, peer:0, customer:0 (aggregate only — CAIDA does not name the neighbor); visible to 327/327 RIPE RIS peers for IPv4 and 0/321 for IPv6, 1 observed neighbour, first routed 2023-01-20 [Confirmed]. No PeeringDB network record exists (404 on net?asn=836 lookup), so peering policy is unpublished

[Confirmed absence] — bgp.he.net/AS836, peeringdb.com/api/net?asn=836, asrank.caida.org, stat.ripe.net/data/routing-status

RPKI

Valid, ROA-covered — RIPEstat rpki-validation for prefix 24.38.40.0/24 returns status valid, governing ROA origin AS836/24.38.40.0/24 maxLength 24; a second ROA in the same response (origin AS6128, 24.38.0.0/17, invalid_asn) is the unrelated Cablevision/Altice covering aggregate, not an AS836 defect

[Confirmed] — stat.ripe.net/data/rpki-validation

Notable usage

hospital network infrastructure for White Plains Hospital (292-bed nonprofit hospital, Montefiore Health System affiliate); bgp.he.net independently flags "announces bogons" as an unexplained automated observation, not a confirmed abuse finding [Likely] — bgp.he.net/AS836, ipinfo.io/AS836

Related ASNs

none identified under this operator as of an August 2026 search of ARIN/registry sources [Unknown] — rdap.arin.net/registry/autnum/836, bgp.he.net/AS836

Analyst note

Small single-homed enterprise stub ASN behind Akamai; not a routing/transit operator. wphospital.org returned HTTP 403 to automated fetch in the prior research cycle and a DNS timeout as of 2026-08-07, so identity was corroborated via ARIN RDAP, Wikipedia, and IRS/ProPublica Nonprofit Explorer rather than the operator's own site. The WPH5-ARIN POC vCard spells the organization "White Plains Hosptail" (a registry typo, distinct from the correctly-spelled WPH-31 registrant record this entry uses for operator and title).