asn.dev

Autonomous system

AS46997 NATOLAB

Unclassified ARIN

IPv4 addresses 2.82K 7 prefixes
IPv6 prefixes 17 counted as prefixes, not addresses
Countries 1 mostly US
Exchanges 6 recorded by PCH
Upstreams 13 3 downstream
Flagged prefixes 0 none

Summary

Black Mesa Corporation

United States of America · AI-generated

business transit us

NATOLAB is operated by Black Mesa Corporation.

What it's used for

  • The address space carries mixed registrants, including NET-NATO-1, NET-NATO-2, and NET-NATO-3 for Black Mesa Corporation, alongside CSRHF-CN for Cixi Sanbei Rongxin Hardware Factory, NRAMCL-CN for Ningbo Rongxin Ansheng Machinery Co Ltd, AMPRNET for Amateur Radio Digital Communications, and GJITCL-JP for AperNet Administrators.
  • The AS announces 2816 IPv4 addresses across 7 prefixes and 17 IPv6 prefixes, with 34 observed neighbours. This ratio of address space to peering partners indicates a transit or interconnection role rather than a large access network.
  • Traffic from this AS includes corporate endpoints for Black Mesa Corporation and leased or allocated space for various hardware manufacturers and amateur radio entities.

Notable

  • Registrants for the largest prefixes include Black Mesa Corporation, Cixi Sanbei Rongxin Hardware Factory, Ningbo Rongxin Ansheng Machinery Co Ltd, Amateur Radio Digital Communications, and AperNet Administrators, showing a diverse set of entities within the announced space.
  • The address inventory is subdivided into multiple /23 and /24 blocks, with netnames indicating specific organizational assignments such as NET-NATO and CSRHF-CN.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

Recorded at 6 exchanges in 3 countries, largest first.

ExchangeLocationTheir address
KleyReX Internet ExchangeFrankfurt, Germany193.189.82.230
Seattle Internet ExchangeSeattle, United States206.81.81.174
Local Internet Exchange FrankfurtFrankfurt, Germany185.1.166.227
Fremont Cabal Internet ExchangeFremont, United States206.80.238.112
UNMETERED ExchangeVancouver, Canada192.34.27.15
San Francisco Metropolitan Internet ExchangeSan Francisco, United States206.197.187.100

Transit providers

13 upstream, 3 downstream and 25 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS6939Hurricane Electric LLC1,256
AS38008Aperture Science Limited307
AS20473The Constant Company, LLC47
AS206499LOCIX LIMITED34
AS50131Spartan Host Ltd28
AS24482SG.GS4
AS9002RETN Limited3
AS394256Tech Futures Interactive Inc.3

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-11, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 7 prefixes · 2.82K addresses IPv6 17 prefixes

CountryNamePrefixes
USUnited States of America24

Registry

Allocation record

ARIN · via Atlas (registry + RDAP)
Registry
ARIN
Handle
AS46997
Registry name
NATOLAB
Registrant
Black Mesa Corporation
Abuse contact
noc@nat.moe
Registered
2020-05-04
Last changed
2020-09-19
Allocation
assigned

Routing security

RPKI and IRR

Full detail
RPKI
61% valid · 22 valid, 14 with no ROA
ROAs
25 authorising AS46997
ASPA
no ASPA record
IRR
94% registered · 34 of 36 announcements 2 other origin
Route objects
52 naming AS46997

Reputation

Classification and threat

Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 432 networks and 1,768 prefixes, as published 2026-10-12. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

No IC3 indicators Nothing from the FBI IC3 feed.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check