About and API
How the figures on this site are built, what they leave out, and how to read the same data as JSON, CSV or Atom.
Sources and schedule
The pipeline runs every 4 hours. It reads the transfer logs and the extended delegated statistics files of AFRINIC, APNIC, ARIN, LACNIC and RIPE NCC, resolves holders through RDAP and whois (and through the JPNIC and KRNIC whois for national-registry members), and dates past reclaims with RIPEstat allocation history.
Holder lookups do not follow the 4-hour cycle. A background worker queries RDAP when a delegation is new or has changed, and re-checks resources whose registry publishes no organization at growing intervals of up to a month. A registry with nothing queued has no recent lookup run; Data status marks it idle rather than late, and lists the last run and the number of lookups waiting for each registry.
API answers are cached for 5 minutes at the edge and 1 minute in the browser. Edge copies are keyed to the deployment and to the sync that produced the data, so a page trails a new sync by at most about 90 seconds.
Definitions
- Transfer
- Registered space that moved from one holder to another under a registry transfer policy, as listed in the RIR transfer logs. Transfers →
- Merger or acquisition
- Space that changed holder because one organization merged with or acquired another. Registries log these apart from market transfers. Mergers →
- Allocation
- Space a registry issued from its free pool to a member, usually an ISP or LIR that assigns it onward to its customers. Allocations →
- Assignment
- Space a registry issued directly to an end user for its own network, not for onward assignment. Assignments →
- Reclaim
- Space that left its holder and is back in the registry’s free pool: returned, revoked or deregistered. Reclaims →
- Deal
- Transfer or merger records on the same day between the same two organizations. Registries often list one deal as many ranges, so the site leads with deals and addresses rather than record counts.
- Deal size
- IPv4 addresses per IPv4 deal. The overview shows the median, with the mean beside it: one deal of several million addresses moves the mean and leaves the median where it is.
- Last 12 months
- The 365 days up to the export, compared with the 365 days before. Rankings and the largest deals use the same window.
- Month to date
- The latest month in the monthly charts is still filling; its bar is hatched.
- Registry history
- Allocations, assignments and reclaims before daily observation began are rebuilt from the registration dates in the delegated files and from RIPEstat. The history stops where daily observation starts, so the two never count the same record.
- National registries
- APNIC lists members of JPNIC, CNNIC, TWNIC, KRNIC, IDNIC, VNNIC and IRINN as “registry/member”. The site shows the member name with the national registry as a badge.
- Countries
- Country codes are the registration countries in the registry data, not where a network is used.
What to keep in mind
- Inferred records
- Most allocations, assignments and reclaims are not observed events. Before daily observation began, an allocation or assignment is a current delegation dated by the registration date in the delegated file, and a reclaim is the day a delegation ended according to RIPEstat allocation history. The kind pages state how many records of the last 12 months are of this sort. In the last 12 months (since 2025-11-15): 7,860 of 12,121 allocations (65%), 2,363 of 2,884 assignments (82%), 3,877 of 6,007 reclaims (65%).
- Handover
- History is derived only for days before daily observation of a resource family began, and a record the monitor observed is never rebuilt from history, so no day and no record is counted from both sources. IP ranges: history to 2026-08-04, observed from 2026-08-05; AS numbers: history to 2026-07-26, observed from 2026-07-27.
- Reclaims across the handover
- History knows a reclaim only while the space is still in a free pool, so it misses space that was returned and reissued since. Daily observation sees every return. A year-on-year change in reclaims that spans the handover is therefore overstated.
- Country coverage
- Cross-border figures count only transfers whose log names a country on both sides. In the last 12 months, 6,627 of 8,715 transfers (76%) name a country on both sides. Codes such as SC, BZ and VG often mark where a holder is incorporated rather than where the network runs.
- Holders without an organization
- Some delegations have no organization in their registry’s RDAP or whois: sub-allocations and assignments registered under a maintainer or a person. The site then shows the holder of the covering block and never substitutes a person or a contact for an organization.
- National-registry members
- For members of JPNIC and KRNIC the member is resolved through the national registry’s whois; members of the other national registries appear under the national registry’s name.
API
/api/overviewHeadline figures, monthly series by registry, rankings, largest deals, deal and block sizes, flows and free-pool totals.–/api/eventsEvents newest first, ranges of one deal grouped.rir, kind, type, before (YYYY-MM-DD), limit (up to 100), cursor/api/events.atomThe same feed as Atom, 50 entries; entries carry the detection time where known.rir, kind, type, org (organization id), resource (prefix or AS number)/api/changesLifecycle changes in the delegated files, newest first. CSV at /api/changes.csv.rir, kind, type, before, limit, cursor/api/lookupEverything about a prefix, address or AS number: delegation, holders, events, waiting periods. Atom at /api/lookup.atom.q/api/poolsFree-pool ranges of one registry, largest first.rir, type, status (available or reserved), limit, cursor/api/org/{id}An organization: names, holdings and transfers. Atom at /api/org/{id}.atom.–/api/org/{id}/holdingsAll current holdings of an organization, paged.cursor/api/org/{id}/transfersAll transfers of an organization, paged.cursor/api/account/{registry}/{id}Resources a registry lists under one opaque account id.cursorrir matches a transfer on either side, the sending or the receiving registry, so an inter-registry transfer appears in both registries’ feeds. kind is one of transfer, merger, allocation, assignment, reclaim; type one of ipv4, ipv6, asn.
Paged answers return next: pass it back as cursor. Every answer reports its D1 cost in x-d1-rows-read. Please keep automated polling to once per sync.
Fields
Events (events, lookup, org transfers, top_deals)
- d
- Date, YYYY-MM-DD.
- k
- Kind: transfer, merger, allocation, assignment or reclaim.
- rt
- Resource type: ipv4, ipv6 or asn.
- r
- The resource (a CIDR block, a range or an AS number); in a deal, its first range.
- n
- Ranges in the deal; absent for one.
- rs, rm
- Further ranges of the deal, and how many more there are beyond those listed.
- u
- Size: IPv4 addresses, IPv6 /48s or AS numbers.
- fr, tr
- Registry the space came from and went to.
- fo, to
- Organization on each side; fi, ti its organization id (0 when unresolved).
- fc, tc
- Registration country on each side.
- sf
- Source: log (transfer log), delegated (delegated-file diff) or history.
- sg, sgb, sgs
- Both parties are one corporate group: the group (or shared name stem), the basis (list: curated with sgs as its source; same: one name on both sides; stem: a shared distinctive name stem, a name match rather than verified ownership) and the source. Absent otherwise.
- hb
- Basis of a history record: rd (registration date in the delegated file) or rs (RIPEstat allocation history).
- fs
- When the monitor first saw the event; only for events seen soon after their date.
- raw
- The registry’s own record.
Rankings (top_recipients, top_senders, kind_detail.to and .from)
- o, n
- Organization id and name.
- units, count
- IPv4 addresses and records in the window.
- cp, cpu, cpn
- Main counterparty: name, addresses and records with it.
Overview series (stats)
- deal_sizes[kind].y1, y0
- IPv4 deals in the last 12 months and the 12 before: n, median and mean addresses per deal.
- block_sizes
- IPv4 transfer and merger records per year by block class: 24 (a /24 or smaller), 22 (/23–/22), 20 (/21–/20), 17 (/19–/17), 16 (a /16), big (larger). counts are records, units addresses.
- registry_flows[].f, t, n, u
- Transfers from one registry to another in the last 12 months: records and IPv4 addresses.
- country_flows
- Transfers with both countries known, how many cross a border, and the top country pairs.
Organization profile (org)
- n, h, g, cc, q
- Name, registry handle, registry, country and the evidence the identity rests on.
- am
- Current holdings: as (AS numbers), v4 (IPv4 addresses), v6 (IPv6 /48s), overlaps counted once.
- tx
- Transfers all time: v4r, v4s (IPv4 addresses received and sent), asr, ass (AS numbers), nr, ns (records in and out).
- ty[year]
- IPv4 addresses [received, sent] by transfer in that year.
- cp
- Top counterparties: [id, name, transfers].
- lk, lt
- Records with the same name and registry, and the family’s combined holdings and transfers.
Delegations (lookup, account)
- r, g, cc, rt, d, st
- Range, registry, country, type, registration date and status of the delegated-extended line; w is the line itself.
- id
- The registry’s opaque id: one holder’s resources share it; an counts them.
- hh
- Which history records exist for it: a (allocation or assignment on the registration date), r (reclaim).
- ss, ps, ro
- Since when the status holds, the previous status, and the day a pool range was reclaimed.
Holders (lookup)
- r, rt, o, n, g
- Range, type, organization id and name, registry.
- ek, c
- Evidence kind (RDAP entity, whois organisation, transfer log, …) and confidence.
- f, u, s
- First and last observed, and the source URL.
Free pools (pools)
- r, cc, d, u, ss
- Range, country, date, size, and since when it has been in the pool.
- lu, ls, lb
- When the last delegation ended, its status and the registry that held it.
- ph, pb
- Previous holder and the basis for naming it.
- oa, on, ou
- Last AS number that announced the range in BGP, its name, and until when.
Lifecycle changes (changes)
- d, ck, g, rt, r
- Date, change kind, registry, type and range.
- os, ns, od, nd, oc, nc
- Old and new status, date and country.
- ho
- Holder at the time.
Status (status)
- feeds[].g, stream, ok, checked, records
- Registry, source (delegated or transfer), last success, last check, records read.
- rdap_registries[g]
- Lookups per registry: last_run, waiting, no_org, complete.
- quality[].m, g, at, v
- Metric of the latest lookup run, registry, run time, value.