RIR (Regional Internet Registry)
Definition
One of five organisations that allocate IP address blocks by region: ARIN (Americas), RIPE NCC (Europe, Middle East, Central Asia), APNIC (Asia-Pacific), LACNIC (Latin America and Caribbean), and AFRINIC (Africa). RIR databases are the authoritative source for address-to-organisation mapping queries via WHOIS or RDAP.
- Count
- Five regional registries
- Regions
- ARIN, RIPE NCC, APNIC, LACNIC, AFRINIC
- Lookup method
- WHOIS or RDAP query
- Provides
- Address-to-organisation mapping
Common questions
Why do investigators query RIR databases during an IP-based investigation?+
A WHOIS or RDAP query against the relevant RIR reveals which organisation or internet service provider was allocated a given IP address block, which is typically the starting point for a subpoena or legal request to identify the underlying subscriber.
Can an RIR database identify the individual user of an IP address?+
No, RIR records identify the organisation the address block was allocated to, usually an ISP or hosting provider, not the individual subscriber; identifying a specific user requires a further legal request to that organisation.
Related terms
- Autonomous System (AS)
- A collection of IP networks operated under a single routing policy and identified by a unique Autonomous System Number (ASN). ISPs, large...
- BGP (Border Gateway Protocol)
- The routing protocol that autonomous systems use to advertise the IP address ranges they control to one another. BGP is the mechanism...
- CIDR (Classless Inter-Domain Routing)
- A compact notation for IP address ranges that appends a prefix length to the address, such as 192.168.1.0/24. The prefix length states...
- IPv6 Privacy Extensions (RFC 8981)
- A mechanism defined in RFC 8981 (formerly RFC 4941) by which IPv6 hosts generate temporary randomised addresses for outbound connections, rotating them...
- NAT (Network Address Translation)
- A mechanism by which a router replaces private source IP addresses with a single public IP address before forwarding packets to the...