Autonomous system detail

AS843

Announced

Operated by F5-XC-NAE - F5, Inc..

Summary

// analyst note
Active, single-prefix ASN now under F5, Inc. following its 2021 acquisition of original registrant Volterra, Inc.; ARIN's registrant field updated 2023-06-20. PeeringDB's self-reported record (Volterra branding, 2 v4/2 v6 prefixes as of 2024-06-26) trails both the corporate rename and current live routing (1 v4 prefix, 0 v6) — treat PeeringDB as stale, not a second live count. The announced block itself (206.130.12.0/24) carries an unreconciled "Capital Works, Inc." net-name association per bgp.he.net and bgp.tools (not present in RDAP/RIPEstat) — likely a legacy SWIP/rwhois delegation label, not evidence of a separate current operator. BGP and NANOG history independently agree the number was previously held by an unrelated 2000-era registrant ("Reptilian Research"), reassigned long before F5/Volterra's 2018-11-30 registration. No AS843-specific abuse signal was found; a 2025 F5 corporate security incident is noted only as unrelated adjacent context.
// security note
NEUTRAL/DATED: no notable public abuse signal found as of 2026-08-08; Spamhaus, Talos Reputation Center, and AbuseIPDB all returned HTTP 403 (coverage gap, not confirmed-clean); VirusTotal inconclusive (JS-rendered SPA); a NANOG/MARC archive search returned only 2 hits, both from a July 2000 dispute involving the ASN's prior, unrelated registrant.
IPv4 prefixes
1
~256 addresses
IPv6 prefixes
0
Peer networks
1
1 up · 0 down
IANA block
1-1876
Assigned by ARIN
[ 01 ] — Context

About this ASN.

Updated  ·  Confidence: High

AS843 is an active, single-prefix ASN now registered to F5, Inc., originally allocated to Volterra, Inc., the edge-networking company F5 acquired in January 2021 for $500 million. It currently announces exactly one IPv4 block, 206.130.12.0/24 (256 addresses), and zero IPv6 — fully visible to all 327 RIPE RIS peers, with a single BGP relationship, AS55002 (also F5, Inc.), serving as both its sole observed upstream and peer.

ARIN RDAP's top-level autnum record places the registration event on 2018-11-30, independently corroborated by bgp.tools; three entity-nested dates (for the registrant org and two POCs) were excluded as decoys. A separate "last changed" event, 2023-06-20, lines up with the registrant field moving from Volterra Inc to F5, Inc. ARIN names the record F5-XC-NAE; PeeringDB still carries the pre-rename label "Volterra Edge Services (VES)," and its listed website, ves.io, now redirects to f5.com/cloud.

The naming points to F5 Distributed Cloud (F5 XC), the SaaS edge platform F5 built from the Volterra acquisition; F5's own site describes its "Global Network" as a private backbone linking Regional Edge nodes, though no first-party page names AS843 specifically as carrying that traffic. PeeringDB self-classifies the network as "Enterprise" and still lists 2 IPv4 / 2 IPv6 prefixes from a 2024-06-26 update — stale against the single live-routed /24 found here.

BGP history adds a wrinkle: RIPEstat's first-seen record shows AS843 originating a different prefix in the same /16, 206.130.240.0/24, back in 2000-08-18 — eighteen years before F5/Volterra's 2018 registration. NANOG mailing-list archives independently confirm why: in July 2000, AS843 was registered to an unrelated party, "Reptilian Research" (contact Jim Mercer), then embroiled in a routing-registry dispute with AS813 (UUNET) over an unrelated block. Both signals agree the number was reassigned long before its current use.

F5, Inc. (NASDAQ: FFIV) is a publicly traded, Seattle-headquartered company; Volterra, Inc. was privately held before the acquisition, and its precise post-acquisition legal status (dissolved vs. dormant subsidiary) was not found in any first-party source as of an August 2026 search. CAIDA's own relationship data reads all zeros for this ASN (cone, degree, "seen: false") — read as a stale snapshot, not a conflicting live fact.

Operator
F5, Inc. (public company, NASDAQ: FFIV; ARIN org handle FINC-1; 801 5th Ave, Seattle, WA 98104) — current registrant of AS843; originally allocated to Volterra, Inc. (acquired by F5 in January 2021 for $500 million); ARIN's registrant field was updated from Volterra Inc to F5, Inc. in a 2023-06-20 "last changed" event
[Confirmed] — rdap.arin.net/registry/autnum/843, en.wikipedia.org/wiki/F5,_Inc.
Country / RIR
US, ARIN [Confirmed] — rdap.arin.net/registry/autnum/843
Allocated
2018-11-30 (ARIN RDAP top-level autnum "registration" event; a separate "last changed" event is 2023-06-20, reflecting the registrant-org rename, not a re-allocation), independently corroborated by bgp.tools ("Registration Date: November 30, 2018") [Confirmed] — rdap.arin.net/registry/autnum/843, bgp.tools/as/843. Note: bgp.he.net separately displays an unreconciled "Created on June 15, 2020" figure that matches neither RDAP event and was not used.
Org status
active (ARIN status: Active); registrant F5, Inc. is a publicly traded company (NASDAQ: FFIV), founded 1996 as F5 Networks, renamed F5, Inc. in 2021, headquartered in Seattle, WA [Confirmed]. Volterra, Inc. (the ASN's original registrant) was privately held before F5's January 2021 acquisition ($500 million); its precise post-acquisition legal status (dissolved vs. dormant subsidiary) was not found in any first-party source as of an August 2026 search
[Unknown] — rdap.arin.net/registry/autnum/843, en.wikipedia.org/wiki/F5,_Inc., sec.gov (FY2024 10-K, CIK 1048695)
Contacts
abuse@f5.com (ARIN POC FABUS-ARIN, "F5 Abuse," vCard kind group, validated, last changed 2025-10-27; matches RIPEstat's abuse-contact-finder exactly); f5-cloud-neteng@f5.com (ARIN POC FCN1-ARIN, administrative/technical/DNS/routing/NOC roles, vCard kind group, validated) — both organizational mailboxes, publishable under this pipeline's contact rule; associated phone numbers withheld
[Confirmed] — rdap.arin.net/registry/autnum/843, stat.ripe.net/data/abuse-contact-finder

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-08-08 across Spamhaus, Talos, and AbuseIPDB (all returned HTTP 403 — coverage gap, not confirmed-clean), VirusTotal (inconclusive, JS-rendered), and a NANOG/MARC archive search (2 hits, both from a July 2000 dispute involving the ASN's prior, unrelated registrant). Adjacent, non-network context: F5, Inc. disclosed a corporate security incident around 2025-10-15 involving its BIG-IP source code — F5 was the breach victim; unrelated to AS843's routed network [Confirmed for what was checked; gap noted] — marc.info/?l=nanog&s=AS843&f=1, en.wikipedia.org/wiki/F5,_Inc.

Network & routing

Network type
SaaS edge/security platform — F5 Distributed Cloud ("F5 XC"), built from F5's 2021 Volterra acquisition; PeeringDB self-classifies the network "Enterprise"; ARIN name F5-XC-NAE, PeeringDB name "Volterra Edge Services (VES)"
[Likely] — peeringdb.com/asn/843, f5.com/cloud, rdap.arin.net/registry/autnum/843
Size
1 IPv4 prefix live-routed (206.130.12.0/24, 256 addresses), 0 IPv6 — confirmed independently by RIPEstat, bgp.he.net, and bgp.tools as of 2026-08-08; PeeringDB's own self-reported record instead shows 2 IPv4 / 2 IPv6 prefixes as of its last update, 2024-06-26 (stale against current live routing). CAIDA's customer cone reads singleton (1 ASN; 0 prefixes; 0 addresses) — inconsistent with the live-routed /24, read as a stale/incomplete CAIDA snapshot, not a conflicting live fact [Confirmed for live routing figures; PeeringDB and CAIDA figures noted as stale] — stat.ripe.net/data/routing-status, bgp.he.net/AS843, bgp.tools/as/843, peeringdb.com/asn/843, api.asrank.caida.org
Routing/peering
single BGP relationship, AS55002 (F5, Inc.), independently identified as both upstream and peer by bgp.he.net and bgp.tools; full v4 visibility (327/327 RIS peers, 0/322 v6 since none is announced), 1 observed neighbour. PeeringDB lists an Open peering policy (no contract or ratio requirement; IRR record ARIN::AS-VOLTERRA) but no route-server/multicast support and no public exchange or interconnection facility. CAIDA's own asnDegree reads all zero (provider/peer/customer) — flagged as a stale/incomplete snapshot, not adopted over the two agreeing live sources [Confirmed for live relationship/visibility; CAIDA figure flagged stale] — bgp.he.net/AS843, bgp.tools/as/843, peeringdb.com/asn/843, stat.ripe.net/data/routing-status, api.asrank.caida.org
RPKI
Unknown / not covered — RIPEstat's rpki-validation check for 206.130.12.0/24 completed successfully (not skipped) and returned an empty validating_roas set; no Route Origin Authorization currently exists for this prefix under any origin ASN [Confirmed] — stat.ripe.net/data/rpki-validation
Notable usage
naming (ARIN name F5-XC-NAE; PeeringDB name "Volterra Edge Services (VES)") points to F5 Distributed Cloud (F5 XC), the SaaS edge platform F5 built from its January 2021 acquisition of Volterra, Inc.; F5 describes a private global backbone linking "Regional Edge" nodes, but no first-party source names AS843 specifically as carrying that traffic [Likely] — f5.com/cloud, rdap.arin.net/registry/autnum/843. BGP history independently shows AS843 originating a different prefix in the same /16 (206.130.240.0/24) as early as 2000-08-18, and NANOG archives show the ASN registered to an unrelated party ("Reptilian Research") in July 2000 — consistent with reassignment long before the 2018-11-30 registration [Confirmed for both underlying facts; reassignment inferred] — stat.ripe.net/data/routing-status, marc.info/?l=nanog&s=AS843&f=1
Related ASNs
AS55002 (F5, Inc.) — this ASN's sole observed upstream/peer, plausibly an intra-F5 relationship (inference; AS55002's own RDAP record was not queried in this research) [Likely]. F5, Inc. also holds a separate corporate ASN, AS35280, with its own distinct PeeringDB network record — not to be conflated with AS843
[Confirmed] — bgp.he.net/AS843, bgp.tools/as/843, peeringdb.com/net/10569
Analyst note
Active, single-prefix ASN now under F5, Inc. following its 2021 acquisition of original registrant Volterra, Inc.; ARIN's registrant field updated 2023-06-20. PeeringDB's self-reported record (Volterra branding, 2 v4/2 v6 prefixes as of 2024-06-26) trails both the corporate rename and current live routing (1 v4 prefix, 0 v6) — treat PeeringDB as stale, not a second live count. The announced block itself (206.130.12.0/24) carries an unreconciled "Capital Works, Inc." net-name association per bgp.he.net and bgp.tools (not present in RDAP/RIPEstat) — likely a legacy SWIP/rwhois delegation label, not evidence of a separate current operator. BGP and NANOG history independently agree the number was previously held by an unrelated 2000-era registrant ("Reptilian Research"), reassigned long before F5/Volterra's 2018-11-30 registration. No AS843-specific abuse signal was found; a 2025 F5 corporate security incident is noted only as unrelated adjacent context.
[ 02 ] — Announced prefixes

What this network routes.

1 prefixes total · RIPEstat data · cached, not real-time
// IPv4 prefixes1
  1. 206.130.12.0/24/24
// IPv6 prefixes0
No IPv6 prefixes announced.
[ 03 ] — Notable peers & upstreams

Who it talks to.

1 observed neighbour
// Notable connectionsTop 1 of 1
ASNOperatorRole
AS55002 DEFENSE-NET - F5, Inc. upstream
Neighbours observed via public BGP collectors; not a complete peering list.