AS9
Operated by CMU-ROUTER - Carnegie Mellon University.
Summary
- // analyst note
- Actively-routed university ASN with deep security-history significance (CERT/CC, the original Internet incident-response center). Encountered in academic traffic and via Pittsburgh Supercomputing Center upstream (AS5050).
- // security note
- NEUTRAL/DATED: no notable public abuse signal found as of 2026-06-07; clean academic network.
About this ASN.
AS9 is a legacy single-digit allocation registered under ARIN to Carnegie Mellon University, a campus central to early Internet and computing history. CMU was home to the Andrew Project (the distributed computing environment started in 1982 with IBM, origin of the Andrew File System) and to the CERT Coordination Center (CERT/CC), created at CMU's Software Engineering Institute in November 1988 at DARPA's direction in response to the Morris Worm — the original Internet incident-response center. That heritage is historical; the current holder is CMU production campus networking, and AS9 actively announces about nine IPv4 prefixes and one IPv6 prefix (2607:fb28::/32, ~134,000 IPv4 addresses), with four upstreams including AS5050 (Pittsburgh Supercomputing Center), Zayo, Crown Castle Fiber, and Lumen. For triage this is a clean academic network encountered in CMU traffic and via the Pittsburgh Supercomputing Center upstream; bgp.tools tags it "Academic / Tranco 10k / Host Tor services," where the Tor tag is a routine academic observation rather than an abuse signal. The ARIN ASN RegDate of 1984-04-17 is among the earliest (org RegDate 2009-12-01 is a later refresh). No notable public abuse signal was found as of June 2026.
- Operator
- Carnegie Mellon University (ARIN OrgId CARNEG-Z, Pittsburgh, PA) [Confirmed] — ARIN RDAP
- Country / RIR
- US, ARIN [Confirmed]
- Allocated
- ARIN ASN RegDate 1984-04-17 (among the earliest; org RegDate 2009-12-01 later refresh) [Confirmed]
- Org status
- active — cmu.edu / andrew.cmu.edu
Security/abuse context (NEUTRAL, DATED)
no notable public abuse signal found as of 2026-06-07; clean academic network (bgp.tools "Host Tor services" tag is a routine academic observation, not abuse) — bgpview.io
Network & routing
- Network type
- research / education [Confirmed]
- Size
- 9 IPv4 prefixes, 1 IPv6 (2607:fb28::/32; ~133,888 IPv4 addrs) — bgp.tools (2026-06)
- Routing/peering
- 4 upstreams (AS5050 Pittsburgh Supercomputing Center, Zayo, Crown Castle Fiber, Lumen), 8 peers; actively announcing; RPKI unknown (HE stats not retrieved this cycle) — bgp.tools
- Notable usage
- [historical] CMU — Andrew Project (1982, with IBM; origin of Andrew File System); CERT/CC created at CMU SEI Nov 1988 (response to Morris Worm). [current] CMU production campus ASN; bgp.tools website andrew.cmu.edu — cmu.edu
- Related ASNs
- AS5050 (Pittsburgh Supercomputing Center, jointly CMU/Pitt — upstream/related); CMU operates additional ASNs [Likely]
- Analyst note
- Actively-routed university ASN with deep security-history significance (CERT/CC, the original Internet incident-response center). Encountered in academic traffic and via Pittsburgh Supercomputing Center upstream (AS5050).
What this network routes.
- 128.2.0.0/16
- 128.237.0.0/16
- 204.194.28.0/22
- 147.72.252.0/22
- 209.129.244.0/23
- 192.58.107.0/24
- 192.5.146.0/24
- 192.12.32.0/24
- 192.80.210.0/24
- 2607:fb28::/32
Who it talks to.
| ASN | Operator | Role |
|---|---|---|
| AS3356 | LEVEL3 - Level 3 Parent, LLC | upstream |
| AS6461 | ZAYO-6461 - Zayo Bandwidth | upstream |
| AS399855 | KEYSTONEREN - Keystone REN, LLC | upstream |
| AS5050 | PSC-EXT - Pittsburgh Supercomputing Center | upstream |
| AS46887 | CROWNCASTLE-AS46887 - Crown Castle Fiber LLC | upstream |
| AS2153 | CENIC-2153 - CENIC | upstream |