Autonomous system detail  ·  US flag US

AS9

Announced

Operated by Carnegie Mellon University, US flag US.

Summary

// analyst note
Actively-routed university ASN with deep security-history significance (CERT/CC, the original Internet incident-response center). Encountered in academic traffic and via Pittsburgh Supercomputing Center upstream (AS5050).
// security note
NEUTRAL/DATED: no notable public abuse signal found as of 2026-06-07; clean academic network.
IPv4 prefixes
8
~133.6K addresses
IPv6 prefixes
1
announced
Peer networks
5
5 up · 0 down
IANA block
1-1876
Assigned by ARIN
[ 01 ] — Context

About this ASN.

Updated  ·  Confidence: High  ·  3 sources  ·  How this page is checked

AS9 is a legacy single-digit allocation registered under ARIN to Carnegie Mellon University, a campus central to early Internet and computing history. CMU was home to the Andrew Project (the distributed computing environment started in 1982 with IBM, origin of the Andrew File System) and to the CERT Coordination Center (CERT/CC), created at CMU's Software Engineering Institute in November 1988 at DARPA's direction in response to the Morris Worm — the original Internet incident-response center. That heritage is historical; the current holder is CMU production campus networking, and AS9 actively announces about nine IPv4 prefixes and one IPv6 prefix (2607:fb28::/32, ~134,000 IPv4 addresses), with four upstreams including AS5050 (Pittsburgh Supercomputing Center), Zayo, Crown Castle Fiber, and Lumen. For triage this is a clean academic network encountered in CMU traffic and via the Pittsburgh Supercomputing Center upstream; bgp.tools tags it "Academic / Tranco 10k / Host Tor services," where the Tor tag is a routine academic observation rather than an abuse signal. The ARIN ASN RegDate of 1984-04-17 is among the earliest (org RegDate 2009-12-01 is a later refresh). No notable public abuse signal was found as of June 2026.

Operator
Carnegie Mellon University (ARIN OrgId CARNEG-Z, Pittsburgh, PA) [Confirmed] — ARIN RDAP
Country / RIR
US, ARIN [Confirmed]
Allocated
ARIN ASN RegDate 1984-04-17 (among the earliest; org RegDate 2009-12-01 later refresh) [Confirmed]
Org status
active — cmu.edu / andrew.cmu.edu

Security/abuse context (NEUTRAL, DATED)

no notable public abuse signal found as of 2026-06-07; clean academic network (bgp.tools "Host Tor services" tag is a routine academic observation, not abuse) — bgpview.io

Network & routing

Network type
research / education [Confirmed]
Size
9 IPv4 prefixes, 1 IPv6 (2607:fb28::/32; ~133,888 IPv4 addrs) — bgp.tools (2026-06)
Routing/peering
4 upstreams (AS5050 Pittsburgh Supercomputing Center, Zayo, Crown Castle Fiber, Lumen), 8 peers; actively announcing; RPKI unknown (HE stats not retrieved this cycle) — bgp.tools
Notable usage
[historical] CMU — Andrew Project (1982, with IBM; origin of Andrew File System); CERT/CC created at CMU SEI Nov 1988 (response to Morris Worm). [current] CMU production campus ASN; bgp.tools website andrew.cmu.edu — cmu.edu
Related ASNs
AS5050 (Pittsburgh Supercomputing Center, jointly CMU/Pitt — upstream/related); CMU operates additional ASNs [Likely]
Analyst note
Actively-routed university ASN with deep security-history significance (CERT/CC, the original Internet incident-response center). Encountered in academic traffic and via Pittsburgh Supercomputing Center upstream (AS5050).
[ 02 ] — Announced prefixes

What this network routes.

9 prefixes total · as observed by RouteViews at 2026-09-20 · one collector view, not a global census
// IPv4 prefixes8
  1. 128.2.0.0/16/16
  2. 128.237.0.0/16/16
  3. 204.194.28.0/22/22
  4. 209.129.244.0/23/23
  5. 192.12.32.0/24/24
  6. 192.5.146.0/24/24
  7. 192.58.107.0/24/24
  8. 192.80.210.0/24/24
// IPv6 prefixes1
  1. 2607:fb28::/32/32
[ 03 ] — Notable peers & upstreams

Who it talks to.

5 observed neighbours
// Notable connections5 of 5 observed

Neighbours observed by RouteViews at 2026-09-20, lowest ASN first. Relationships are inferences from the CAIDA AS Relationships Dataset, 2026-08-01, and establish no commercial arrangement; a dash means the inference did not resolve.

ASNOperatorRole
AS2153 — upstream
AS3356 Level 3 Parent, LLC (Lumen Technologies) upstream
AS5050 — upstream
AS6461 — upstream
AS399855 — upstream
Neighbours observed via public BGP collectors; not a complete peering list.