codynet

RDAP

IP Registration Lookup

Look up IP network allocation and registration data with RDAP.

Query IP RDAP

Validate an IP address and fetch its registration data from RDAP.

Results come from deterministic DNS APIs or HTTPS RDAP endpoints.

Results

Run a lookup to see structured results here.

Practical guide

How to use the IP Registration tool

IP RDAP is the modern way to ask 'who owns this IP block?' This page resolves the right Regional Internet Registry for the address, queries it over HTTPS, and parses the JSON response for you.

What this tool checks

Given an IPv4 or IPv6 address, the tool uses the IANA bootstrap registry to find the right RIR (ARIN, RIPE NCC, APNIC, LACNIC, or AFRINIC) and queries that RIR's RDAP endpoint. The response describes the network block the address belongs to, the organization holding the allocation, the relevant dates, status codes, and abuse contact.

When to use it

Use this when you need to know which organization is responsible for a block of address space — investigating abusive traffic, identifying an ISP, confirming a cloud provider's range, or tracing where a connection actually terminates. It is also the standard way to find an abuse contact for reporting attacks or scraping.

How to read the result

handle is the RIR's identifier for the network block. startAddress and endAddress (or cidr0_cidrs) tell you the boundary of the allocation. name is a short label the holder gave the block. events shows registration and last-changed dates. The entities array contains the organization that holds the block plus an abuse contact role you can use for reporting.

Common errors and what they mean

An empty or 404 response usually means the address is in reserved or unallocated space (RFC 1918 private ranges, link-local, loopback, etc.) — those have no RDAP record because no one owns them. An unexpectedly broad block (a /8 or /16) is common for direct RIR assignments to large organizations or sub-allocated ISPs. If the abuse contact is missing, fall back to the organization's published abuse policy.

Example RDAP query for an IPv4 address

Example input
8.8.8.8
Example result
{
  "handle": "NET-8-8-8-0-1",
  "startAddress": "8.8.8.0",
  "endAddress": "8.8.8.255",
  "name": "LVLT-GOGL-8-8-8",
  "events": [
    { "eventAction": "registration", "eventDate": "2014-03-14T00:00:00Z" }
  ],
  "entities": [
    { "handle": "GOGL", "roles": ["registrant"] }
  ]
}

ARIN returns this for 8.8.8.8 because it is in ARIN's region. The block (8.8.8.0/24) and the registrant (Google) are the two pieces of data you usually came here to find.

Related tools

Domain Whois / RDAP

Same RDAP protocol, but for domain names instead of IP blocks.

Open tool

Reverse DNS (PTR)

Get the hostname the IP claims, then cross-check against the RIR's holder.

Open tool

DNS Lookup

Look up A or AAAA records for a hostname to start an IP investigation.

Open tool

Related guides

RDAP vs WHOIS

How IP allocation data flows through RDAP from the regional internet registries, and how to read the JSON.

Read guide

FAQ

What is an RIR and why does it matter for IP RDAP?
The five Regional Internet Registries (ARIN, RIPE NCC, APNIC, LACNIC, AFRINIC) hold the authoritative records for IP allocations in their regions. IP RDAP routes your query — via the IANA bootstrap registry — to the right RIR for the address you asked about. That is why a 8.8.8.8 lookup hits ARIN and a 81.2.69.142 lookup hits RIPE: the bootstrap registry sends them to different servers.
How is this different from a domain RDAP lookup?
Domain RDAP answers 'who registered this name?' and goes to a TLD registry. IP RDAP answers 'who has this address space allocated?' and goes to a regional internet registry. The JSON shape is similar (events, status, entities, network) but the entities you get back describe the organization that holds the network block, not a domain registrant.
What is the difference between the network block and the ASN?
The network block (CIDR range) is the actual IP space the organization holds — for example 8.8.8.0/24. The ASN (Autonomous System Number) is the routing identity used to announce that block on the global internet. One organization usually owns multiple network blocks and announces them under one or more ASNs. Use the ASN to find peering and routing info; use the CIDR to find the boundary of who owns this specific address.
Does IP RDAP work for IPv6?
Yes. The same bootstrap-and-query flow applies to IPv6 addresses — you submit something like 2606:4700:4700::1111 and the tool routes you to the right RIR. Most large allocations are documented and the responses look essentially identical to the IPv4 case.
Why does my IP show a different organization than I expected?
RIR data describes who holds the allocation, not who is using the address today. ISPs and cloud providers re-delegate large blocks to customers, and reverse DNS or the network name may reflect a customer rather than the holder of record. For end-user assignments you usually only see the ISP that owns the block.

Last reviewed: 2026-05-19.