AS843

AS843 is an active, single-prefix ASN now registered to F5, Inc., originally allocated to Volterra, Inc., the edge-networking company F5 acquired in January 2021 for $500 million. It currently announces exactly one IPv4 block, 206.130.12.0/24 (256 addresses), and zero IPv6 — fully visible to all 327 RIPE RIS peers, with a single BGP relationship, AS55002 (also F5, Inc.), serving as both its sole observed upstream and peer.

ARIN RDAP's top-level autnum record places the registration event on 2018-11-30, independently corroborated by bgp.tools; three entity-nested dates (for the registrant org and two POCs) were excluded as decoys. A separate "last changed" event, 2023-06-20, lines up with the registrant field moving from Volterra Inc to F5, Inc. ARIN names the record F5-XC-NAE; PeeringDB still carries the pre-rename label "Volterra Edge Services (VES)," and its listed website, ves.io, now redirects to f5.com/cloud.

The naming points to F5 Distributed Cloud (F5 XC), the SaaS edge platform F5 built from the Volterra acquisition; F5's own site describes its "Global Network" as a private backbone linking Regional Edge nodes, though no first-party page names AS843 specifically as carrying that traffic. PeeringDB self-classifies the network as "Enterprise" and still lists 2 IPv4 / 2 IPv6 prefixes from a 2024-06-26 update — stale against the single live-routed /24 found here.

BGP history adds a wrinkle: RIPEstat's first-seen record shows AS843 originating a different prefix in the same /16, 206.130.240.0/24, back in 2000-08-18 — eighteen years before F5/Volterra's 2018 registration. NANOG mailing-list archives independently confirm why: in July 2000, AS843 was registered to an unrelated party, "Reptilian Research" (contact Jim Mercer), then embroiled in a routing-registry dispute with AS813 (UUNET) over an unrelated block. Both signals agree the number was reassigned long before its current use.

F5, Inc. (NASDAQ: FFIV) is a publicly traded, Seattle-headquartered company; Volterra, Inc. was privately held before the acquisition, and its precise post-acquisition legal status (dissolved vs. dormant subsidiary) was not found in any first-party source as of an August 2026 search. CAIDA's own relationship data reads all zeros for this ASN (cone, degree, "seen: false") — read as a stale snapshot, not a conflicting live fact.

Exposure

Single announced /24 (206.130.12.0/24) behind one BGP relationship, AS55002 (also F5, Inc.), acting as both sole upstream and peer — a small, single-homed edge/origin footprint typical of a SaaS platform ASN rather than a transit network.

Abuse signal

No notable public abuse signal tying AS843, F5, or Volterra to malware, botnet, spam, phishing, BGP hijack, or route-leak activity found as of an August 2026 search, including targeted NANOG/MARC archive queries.

Coverage gap

Spamhaus, the Talos Reputation Center, and AbuseIPDB all returned HTTP 403 to automated lookup and could not be queried directly; VirusTotal's report page is a JS-rendered SPA with no reachable server-side data — absence here is a coverage gap, not a confirmed-clean result.

RPKI

Unknown / not covered — RIPEstat's rpki-validation check for 206.130.12.0/24 completed successfully and returned an empty ROA set, meaning no Route Origin Authorization currently exists for this prefix under any origin ASN.

Adjacent corporate context

F5, Inc. (AS843's registrant) publicly disclosed a security incident around 2025-10-15 involving unauthorized access to its BIG-IP product-development environment and source code — reported as F5 being the breach victim, unrelated to AS843's own routed network or to any AS843-specific abuse finding, and included here only as clearly-labeled adjacent context.

Operator

F5, Inc. (public company, NASDAQ: FFIV; ARIN org handle FINC-1; 801 5th Ave, Seattle, WA 98104) — current registrant of AS843; originally allocated to Volterra, Inc. (acquired by F5 in January 2021 for $500 million); ARIN's registrant field was updated from Volterra Inc to F5, Inc. in a 2023-06-20 "last changed" event

[Confirmed] — rdap.arin.net/registry/autnum/843, en.wikipedia.org/wiki/F5,_Inc.

Country / RIR

US, ARIN [Confirmed] — rdap.arin.net/registry/autnum/843

Allocated

2018-11-30 (ARIN RDAP top-level autnum "registration" event; a separate "last changed" event is 2023-06-20, reflecting the registrant-org rename, not a re-allocation), independently corroborated by bgp.tools ("Registration Date: November 30, 2018") [Confirmed] — rdap.arin.net/registry/autnum/843, bgp.tools/as/843. Note: bgp.he.net separately displays an unreconciled "Created on June 15, 2020" figure that matches neither RDAP event and was not used.

Org status

active (ARIN status: Active); registrant F5, Inc. is a publicly traded company (NASDAQ: FFIV), founded 1996 as F5 Networks, renamed F5, Inc. in 2021, headquartered in Seattle, WA [Confirmed]. Volterra, Inc. (the ASN's original registrant) was privately held before F5's January 2021 acquisition ($500 million); its precise post-acquisition legal status (dissolved vs. dormant subsidiary) was not found in any first-party source as of an August 2026 search

[Unknown] — rdap.arin.net/registry/autnum/843, en.wikipedia.org/wiki/F5,_Inc., sec.gov (FY2024 10-K, CIK 1048695)

Contacts

abuse@f5.com (ARIN POC FABUS-ARIN, "F5 Abuse," vCard kind group, validated, last changed 2025-10-27; matches RIPEstat's abuse-contact-finder exactly); f5-cloud-neteng@f5.com (ARIN POC FCN1-ARIN, administrative/technical/DNS/routing/NOC roles, vCard kind group, validated) — both organizational mailboxes, publishable under this pipeline's contact rule; associated phone numbers withheld

[Confirmed] — rdap.arin.net/registry/autnum/843, stat.ripe.net/data/abuse-contact-finder

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-08-08 across Spamhaus, Talos, and AbuseIPDB (all returned HTTP 403 — coverage gap, not confirmed-clean), VirusTotal (inconclusive, JS-rendered), and a NANOG/MARC archive search (2 hits, both from a July 2000 dispute involving the ASN's prior, unrelated registrant). Adjacent, non-network context: F5, Inc. disclosed a corporate security incident around 2025-10-15 involving its BIG-IP source code — F5 was the breach victim; unrelated to AS843's routed network [Confirmed for what was checked; gap noted] — marc.info/?l=nanog&s=AS843&f=1, en.wikipedia.org/wiki/F5,_Inc.

Network & routing

Network type

SaaS edge/security platform — F5 Distributed Cloud ("F5 XC"), built from F5's 2021 Volterra acquisition; PeeringDB self-classifies the network "Enterprise"; ARIN name F5-XC-NAE, PeeringDB name "Volterra Edge Services (VES)"

[Likely] — peeringdb.com/asn/843, f5.com/cloud, rdap.arin.net/registry/autnum/843

Size

1 IPv4 prefix live-routed (206.130.12.0/24, 256 addresses), 0 IPv6 — confirmed independently by RIPEstat, bgp.he.net, and bgp.tools as of 2026-08-08; PeeringDB's own self-reported record instead shows 2 IPv4 / 2 IPv6 prefixes as of its last update, 2024-06-26 (stale against current live routing). CAIDA's customer cone reads singleton (1 ASN; 0 prefixes; 0 addresses) — inconsistent with the live-routed /24, read as a stale/incomplete CAIDA snapshot, not a conflicting live fact [Confirmed for live routing figures; PeeringDB and CAIDA figures noted as stale] — stat.ripe.net/data/routing-status, bgp.he.net/AS843, bgp.tools/as/843, peeringdb.com/asn/843, api.asrank.caida.org

Routing/peering

single BGP relationship, AS55002 (F5, Inc.), independently identified as both upstream and peer by bgp.he.net and bgp.tools; full v4 visibility (327/327 RIS peers, 0/322 v6 since none is announced), 1 observed neighbour. PeeringDB lists an Open peering policy (no contract or ratio requirement; IRR record ARIN::AS-VOLTERRA) but no route-server/multicast support and no public exchange or interconnection facility. CAIDA's own asnDegree reads all zero (provider/peer/customer) — flagged as a stale/incomplete snapshot, not adopted over the two agreeing live sources [Confirmed for live relationship/visibility; CAIDA figure flagged stale] — bgp.he.net/AS843, bgp.tools/as/843, peeringdb.com/asn/843, stat.ripe.net/data/routing-status, api.asrank.caida.org

RPKI

Unknown / not covered — RIPEstat's rpki-validation check for 206.130.12.0/24 completed successfully (not skipped) and returned an empty validating_roas set; no Route Origin Authorization currently exists for this prefix under any origin ASN [Confirmed] — stat.ripe.net/data/rpki-validation

Notable usage

naming (ARIN name F5-XC-NAE; PeeringDB name "Volterra Edge Services (VES)") points to F5 Distributed Cloud (F5 XC), the SaaS edge platform F5 built from its January 2021 acquisition of Volterra, Inc.; F5 describes a private global backbone linking "Regional Edge" nodes, but no first-party source names AS843 specifically as carrying that traffic [Likely] — f5.com/cloud, rdap.arin.net/registry/autnum/843. BGP history independently shows AS843 originating a different prefix in the same /16 (206.130.240.0/24) as early as 2000-08-18, and NANOG archives show the ASN registered to an unrelated party ("Reptilian Research") in July 2000 — consistent with reassignment long before the 2018-11-30 registration [Confirmed for both underlying facts; reassignment inferred] — stat.ripe.net/data/routing-status, marc.info/?l=nanog&s=AS843&f=1

Related ASNs

AS55002 (F5, Inc.) — this ASN's sole observed upstream/peer, plausibly an intra-F5 relationship (inference; AS55002's own RDAP record was not queried in this research) [Likely]. F5, Inc. also holds a separate corporate ASN, AS35280, with its own distinct PeeringDB network record — not to be conflated with AS843

[Confirmed] — bgp.he.net/AS843, bgp.tools/as/843, peeringdb.com/net/10569

Analyst note

Active, single-prefix ASN now under F5, Inc. following its 2021 acquisition of original registrant Volterra, Inc.; ARIN's registrant field updated 2023-06-20. PeeringDB's self-reported record (Volterra branding, 2 v4/2 v6 prefixes as of 2024-06-26) trails both the corporate rename and current live routing (1 v4 prefix, 0 v6) — treat PeeringDB as stale, not a second live count. The announced block itself (206.130.12.0/24) carries an unreconciled "Capital Works, Inc." net-name association per bgp.he.net and bgp.tools (not present in RDAP/RIPEstat) — likely a legacy SWIP/rwhois delegation label, not evidence of a separate current operator. BGP and NANOG history independently agree the number was previously held by an unrelated 2000-era registrant ("Reptilian Research"), reassigned long before F5/Volterra's 2018-11-30 registration. No AS843-specific abuse signal was found; a 2025 F5 corporate security incident is noted only as unrelated adjacent context.