Skip to main content

AuthDNS

Our Authoritative DNS (AuthDNS) cluster announces 193.0.9.0/24 and 2001:67c:e0::/48 from AS 197000. The service hosts reverse DNS delegation zones, ripe.net, and provides secondary service for various ccTLDs. The cluster is composed of four core instances located in Amsterdam, London, Stockholm and Tokyo.

At each of these sites, a router distributes the DNS queries across multiple servers, running a mix of BIND, Knot DNS and NSD. The capacity of these core sites is supplemented by Hosted DNS instances. These single-server instances run in ISP networks or are connected to Internet Exchanges. If you would like to host such a server, please send us your application.

Here are all the zones served by the AuthDNS cluster:

  • in-addr.arpa and ip6.arpa, and their related zones
  • ripe.net, as well as the zones of all the other Regional Internet Registries (RIRs)
  • Zones of organisations supported by RIPE NCC, such as MENOG (menog.org) and the NRO (nro.org)
  • Reverse DNS delegation zones corresponding to the IP address space allocated to the RIPE NCC
  • Reverse DNS delegation zones corresponding to the IP address space allocated to the other RIRs
  • Zones of some smaller Country Code Top Level Domains (ccTLDs)
  • Infrastructure zones, such as as112.net and root-servers.org

ccTLD

The RIPE NCC offers a best-effort secondary name service to the other Regional Internet Registries (RIRs) and some country code top-level domain (ccTLD) operators who are in the start-up phase of their operations.

List of ccTLDs for which RIPE NCC provides secondary services (dated 1 August 2026)

bi

jm

ne

sn

cu

jo

np

sy

cw

xn--mgbayh7gpa

ps

xn--ogbpf8fl

dz

kg

xn--ygbi2ammx

sz

er

mc

sd

tj

gp

mw

xn--mgbpl2fh

tt

gu

nc

sm

ug

Read more

Reverse DNS

Reverse DNS delegations allow applications to map to a domain name from an IP address.

Read more

Host an AuthDNS node

Anyone may apply to host AuthDNS node. Get details on the expansion plan and application process.

AuthDNS

Peering with AuthDNS

K-root originates all our prefixes from AS197000. We operate a generally open peering policy, subject to certain operational policies.

Read More