Data sources & methodology

OrgIndex resolves IP netblocks to their registrant organisation by clustering on stable RIR handles (mnt-by, org handle, admin-c/tech-c/abuse-c) rather than fuzzy org-name text matching, then rolls clusters up to their ultimate corporate parent via GLEIF Legal Entity Identifiers where available. This page shows exactly what data feeds the graph and how fresh it is.
Data as of 2026-11-01 (the last full pipeline run) — 815,708 more netblocks ingested since then, awaiting the next clustering run.

9,900,223
Netblocks indexed
5,246,134
Org clusters
95.05%
Org attribution coverage
33,241
LEI-identified clusters
123,848
ASNs indexed
1,090,026
RPKI ROAs

Attribution quality

Every netblock's org attribution comes from one of several tiers, in descending confidence. "GLEIF-matched" means the cluster resolved to a verified Legal Entity Identifier; "BGP-inherited" means a sub-allocation's identity isn't independently known and it inherits its announcing carrier's attribution — a lower-confidence but still useful signal.

GLEIF-matched (Legal Entity Identifier)
5,423,939 (54.79%)
BGP-inherited (from announcing carrier)
2,351,527 (23.75%)
BGP-direct (org from announcing ASN)
887,189 (8.96%)
Registry (RIR/RDAP data)
555,398 (5.61%)
Unresolved
490,305 (4.95%)
Handle (IRR handle name only)
191,865 (1.94%)

Data sources

Netblock counts by registry / routing source.

5,866,361
ripe
1,524,532
bgp
1,429,723
apnic
531,435
lacnic
212,457
afrinic
124,791
arin
122,710
peeringdb
73,495
microsoft
11,883
aws
1,300
google
1,120
oracle
399
github
25
fastly
22
cloudflare

Global coverage

How much of the world's delegated address space this index attributes, weighted by addresses (not object counts). The denominator is every allocation and assignment all five RIRs have ever published in their delegated-extended stats. Registrant-grade = verified legal entity (GLEIF) or registry records; carrier-inferred = attributed to the announcing/parent carrier — useful, but an inference; unresolved = indexed but not attributed; not indexed = delegated space we hold no object for yet. Computed 2026-11-01.

IPv4

Registry Delegated addresses Registrant-grade Carrier-inferred Unresolved Not indexed
ARIN 1.64B 47.4% 52.6% 0.0% 0.0%
APNIC 888.9M 35.8% 64.1% 0.0% 0.0%
RIPE 856.1M 56.2% 43.8% 0.0% 0.0%
LACNIC 181.9M 36.8% 44.8% 18.4% 0.0%
AFRINIC 116.2M 28.6% 71.4% 0.0% 0.0%
All RIRs 3.69B 45.5% 53.5% 0.9% 0.0%

IPv6

Registry Delegations Registrant-grade Carrier-inferred Unresolved Not indexed
RIPE 26,878 21.5% 78.5% 0.0% 0.0%
ARIN 11,579 57.1% 17.1% 0.0% 25.8%
APNIC 17,301 34.6% 65.4% 0.0% 0.0%
LACNIC 13,602 0.2% 74.9% 24.9% 0.0%
AFRINIC 1,693 5.8% 94.2% 0.0% 0.0%
All RIRs 71,053 34.5% 57.1% 0.9% 7.5%

Ingestion recall — self-published ranges (recall only, not precision)

These blocks are ingested from each provider's own published list, then checked that our clustering still attributes them to a cluster carrying that provider's name — this measures recall against a source we already hold, not precision, and it is self-corroborating rather than independent ground truth. It covers only these seven providers; see "Attribution quality" above and the accuracy page's registrant-grade figure for the honest picture across the whole dataset. Recomputed every pipeline run; a drop here is a clustering-regression alarm — 100% is partly guaranteed by how the check is built, not proof of overall accuracy.

Provider Self-published blocks Still correctly attributed
microsoft 73,495 100.0%
aws 11,883 100.0%
google 1,300 100.0%
oracle 1,120 100.0%
github 399 100.0%
fastly 25 100.0%
cloudflare 22 100.0%

Pipeline freshness

When each ingestion/enrichment step last completed successfully. The full pipeline runs weekly, with a scheduled watchdog that flags failures and anomalous row-count deviations.

StepLast runAge
arin-org-sweep 2026-11-06 07:21 22h ago
ARIN RDAP sweep 2026-11-07 05:45 20m ago
Accuracy benchmark 2026-11-01 07:11 5d ago
BGP routing table 2026-11-01 04:01 6d ago
BGP carrier org inheritance 2026-11-01 06:25 5d ago
BGP parent org inheritance 2026-11-01 06:11 5d ago
build-entities 2026-11-01 07:13 5d ago
RIR bulk dumps (RIPE, APNIC, LACNIC, AFRINIC) 2026-11-01 02:57 6d ago
CAIDA ASN → org mapping 2026-11-01 02:58 6d ago
Entity resolution clustering 2026-11-01 06:05 6d ago
Global coverage report 2026-11-01 07:20 5d ago
RIR delegated stats (coverage denominator) 2026-11-01 04:03 6d ago
Domains-in-network resolve 2026-11-06 12:14 17h ago
GLEIF golden copy (legal entities) 2026-11-01 04:52 6d ago
GLEIF rematch pass 2026-11-01 07:08 5d ago
GLEIF entity rollup 2026-11-01 07:08 5d ago unusual row count
GLEIF relationship records (parent/child) 2026-11-01 04:52 6d ago
Handle-name fallback attribution 2026-11-01 06:26 5d ago
history 2026-11-01 07:16 5d ago
RIR containment org resolution 2026-11-01 06:11 5d ago
IRR handle enrichment 2026-11-01 04:09 6d ago unusual row count
IRR route objects 2026-11-01 04:09 6d ago
jurisdiction 2026-11-01 07:13 5d ago
LACNIC RDAP sweep 2026-11-06 09:41 20h ago
leaderboard 2026-11-01 07:11 5d ago
leaderboard-names 2026-11-01 07:12 5d ago
lei-confirmation 2026-11-01 07:11 5d ago unusual row count
org-handles 2026-11-01 06:27 5d ago
org-slugs 2026-11-01 07:12 5d ago
PeeringDB IX peering IPs 2026-11-01 04:02 6d ago
Cloud provider self-published ranges 2026-11-01 02:58 6d ago
RDAP seed data 2026-11-01 04:13 6d ago
LEI propagation to sibling clusters 2026-11-01 07:09 5d ago
GLEIF + RDAP org batch matching 2026-11-01 06:20 5d ago unusual row count
RDAP sweep (UNKNOWN blocks) 2026-11-01 04:46 6d ago
Reverse-DNS domain/role sweep 2026-11-06 11:30 18h ago
Provider-published corroboration 2026-11-01 07:20 5d ago
record-changes 2026-11-01 07:13 5d ago
ASN holder RDAP enrichment 2026-11-01 04:13 6d ago
ROA-based org enrichment 2026-11-01 04:10 6d ago
RPKI ROAs 2026-11-01 04:10 6d ago
stats-summary 2026-11-01 07:18 5d ago
traffic-prune 2026-11-01 07:16 5d ago unusual row count
trust-summaries 2026-11-01 07:18 5d ago
watch-alerts 2026-11-01 07:16 5d ago

Full breakdown via the REST API.