A top exec at AFRINIC, one of the world's five regional internet registries, resigned after accusations he sold IPv4 addresses worth $50M+ on the black market
A top executive at the nonprofit entity responsible for doling out chunks of Internet addresses to businesses and other organizations … Tweets: @akanygren and @wxcafe Tweets: Erik / @akanygren : Story by @briankrebs on a “heist” of $50M worth of IPv4 from the AFRINIC region: https://krebsonsecurity.com/ ... As pressure on depleted IPv4 increases along with address prices, I suspect associated IPv4 black market embezzlement will show up more and more. Technopagan / @wxcafe : Honestly surprised this type of neo-colonialism hasn't happened more than that. As internet numbers ("natural" ressources) deplete in Europe and the US, they will obviously move to the only way they know how to deal with that: stealing from Africa, Asia, and South America. https://twitter.com/...
Context & Ripple Effects
The resignation lands three weeks after RIPE declared its IPv4 pool exhausted, following ARIN running dry back in 2015 — meaning every one of the five regional registries now allocates a scarce, appreciating asset rather than a free-flowing resource. Scarcity is exactly what makes an insider able to move $50M worth of addresses off the books.
The alleged scheme also foreshadows what the region became: years later, reporting showed [[a:893149|a single entrepreneur amassing 10M+ IPv4 addresses, mostly from Africa, and leasing them outside the continent]] while local ISPs struggled to expand. The Krebs story is the first documented crack in AFRINIC's stewardship of that same resource.
First-order effects
- AFRINIC loses a top executive mid-crisis, and its member ISPs — the organizations depending on it for address space — face immediate questions about which past allocations were legitimate.
- Every block the accused executive allegedly sold sits with buyers who obtained it outside policy, so AFRINIC inherits a reconciliation problem across its own registry data.
Second-order effects
- The other four registries come under pressure to audit insider access and transfer records, because the accusation implies any registry staffed by humans sitting on a valuable queue is exposed to the same temptation.
- Address brokers and lease markets gain pricing power: if official channels are distrusted, holders of clean legacy blocks can charge more for provably legitimate space.
Third-order effects
- If insider leakage proves systemic, RIR governance itself becomes the bottleneck resource — expect pressure for independent audits, transparent transfer logs, and possibly external oversight of the nonprofit registry model.
- Combined with the later African-address-lease pattern, the episode points toward IPv4 hardening into a speculative asset class whose value flows away from the regions that hold it, accelerating the case for IPv6 adoption that RIPE was already urging.
The trend: As IPv4 exhaustion turns regional registries into gatekeepers of a scarce, appreciating asset, their internal governance becomes the next battleground between public-interest allocation and gray-market extraction.