Your IPv4 Block Stays Yours: How Leasing Actually Works

Talking with IPv4 owners about leasing, I keep hearing the same thing in different forms. "I just want to be sure my blocks stay mine." Or: "I don't want to lease because I'm afraid of losing my addresses."

These are reasonable things to say. The question behind them deserves a structural answer, not a sales pitch.

IPv4 leasing risks are among the most common topics when LIRs and enterprises consider monetization for the first time – and most of those conversations mix up two things that operate on completely separate levels: ownership and routing. Understanding how each works, and how each is governed, is what makes the concern resolvable.

That's what this article covers: what your RIR registration actually means, what an IPv4 lease does and does not transfer, and what tools exist to protect your block throughout its time in a lessee's hands.

What IPv4 Ownership Actually Means

IPv4 addresses are not property in the traditional legal sense – they are resources allocated by Regional Internet Registries (RIRs) under specific policies. In the RIPE region, RIPE NCC maintains the authoritative record of which organization holds each address block. ARIN and APNIC maintain equivalent registries for their respective regions.

When you hold an IPv4 block, you hold a registration: your organization is listed in the WHOIS database as the resource holder. This registration is what conveys the right to use, route, or lease IPv4 space. It does not transfer when you lease IPv4. It does not change when a lessee announces the block via BGP. The WHOIS record continues to show your organization as the responsible party.

This distinction matters because RIR registration is the root of control. If a dispute arises, the registered holder has standing. If a lessee defaults, the registered holder has the right to revoke routing permissions. The IPv4 lease itself is built on top of that registration – it does not replace it.

IPv4 address ownership vs IP leasing therefore comes down to this: ownership is a registry relationship between you and your RIR. IP leasing is an operational arrangement between you and a third party. The two layers run in parallel and do not interfere with each other.

What a Lease Transfers – and What It Does Not

When you lease an IPv4 block, you get one thing: routing authority. Specifically, the lessee receives the right to announce the address block via Border Gateway Protocol (BGP) for the duration of the lease, and to originate traffic from those addresses.

When you lease an IPv4 block, you do not transfer:

• The RIR registration (WHOIS continues to show the lessor)

• The right to sublease without authorization

• Ownership of the address block in any legal or RIR sense

• The ability to hold the block past lease expiry

RIR policy reinforces this. Under RIPE, ARIN, and APNIC frameworks, leasing is classified as a utilization arrangement, not a transfer event. A transfer — which would change the registered holder – requires a separate, formal process involving the RIR directly and, in most cases, payment of a transfer fee and compliance review. A lease bypasses none of those steps because it is not a transfer.

The practical implication: your block cannot be "taken" through a lease. The lessee routes it; they do not own it.

Clean IPv4, ready to deploy

Lease Clean IPv4 Fast With Zero Platform Fees

Start leasing

How IP Leasing Works Step by Step

Understanding the mechanics of IP leasing in sequence helps both owners and lessees know what to expect at each stage.

Step 1 - Agreement and LOA issuance

The owner and lessee sign a lease agreement defining the block, term, acceptable use, and commercial terms. The owner then issues a Letter of Authorization (LOA) granting the lessee permission to announce the prefix. Without a valid LOA, upstream providers will not accept BGP announcements from the lessee.

Step 2 - RPKI and ROA configuration

The owner (or platform acting on their behalf) creates or updates a Route Origin Authorization (ROA) in the RPKI system, authorizing the lessee's ASN to originate the prefix. This is the cryptographic layer that prevents unauthorized announcement.

Step 3 - IRR route object updates

Route objects in Internet Routing Registry (IRR) databases are updated to reflect the lessee's ASN as the permitted originator. Transit providers use these objects to filter BGP announcements.

Step 4 - BGP announcement

The lessee configures their router to announce the prefix and their upstream propagates it globally. The owner can verify this through BGP looking glass tools or monitoring services.

Step 5 - Active lease period

The lessee operates the block under the terms of the agreement. The owner monitors reputation and retains the right to intervene if the AUP is breached.

Step 6 - End of lease

The LOA expires or is revoked, the ROA is updated to remove the lessee's ASN, and the upstream withdraws the BGP announcement. The block returns to the owner's operational control within two to five business days.

When you lease an IPv4 block through a platform like IPbnb, steps 2 through 6 are handled automatically - reducing the administrative burden on both sides and ensuring the process follows RIR-compliant procedures throughout.

Legal and Technical Protections for Block Owners

IPv4 block security is maintained through a combination of contractual, technical, and policy mechanisms. Understanding all three is useful when evaluating whether a specific lease structure adequately protects your interests.

Letter of Authorization (LOA)

Before a lessee can route your space, they require a Letter of Authorization – a document signed by the registered holder (you) granting them permission to announce the block. The LOA specifies which prefixes are covered, what the permitted use is, and for how long. Without a current, valid LOA, upstream providers and Internet Exchange Points will not accept the lessee's BGP announcements. Withdrawing or expiring the LOA terminates routing authority without any further action from the lessee.

RPKI and Route Origin Authorizations (ROAs)

Resource Public Key Infrastructure (RPKI) allows registered IP holders to cryptographically sign routing announcements. A Route Origin Authorization (ROA) specifies which Autonomous System Number (ASN) is permitted to originate a given prefix. If a lessee's AS number changes, or if an IPv4 lease ends, you can revoke or update the ROA, which will cause RPKI-validating routers to reject unauthorized announcements.

RPKI lease IPv4 protection is increasingly relevant: major networks and IXPs now enforce RPKI validation, meaning an unauthorized announcement of your block by a former lessee would fail at scale. This is a structural control, not just a contractual one.

IPv4 owner protection through contract terms

A professionally drafted lease agreement should include: clearly defined lease scope (specific prefixes), the lease term with start and end dates, return conditions and process, lessee obligations regarding acceptable use, the owner's right to inspect or audit utilization, and remedies for breach including early termination rights. Platform-based leases, such as those structured through IPbnb, incorporate these provisions by default into their standard agreements.

Abuse Risk and Reputation Management

IPv4 owner protection extends beyond routing rights into the operational question of what happens if a lessee misuses the space. This is not a trivial concern: blacklisted addresses reduce market value and create operational friction when the block is returned.

Several mechanisms address this directly.

Contractual obligations

A well-structured IPv4 lease assigns explicit acceptable use obligations to the lessee. Spam, scanning, DDoS amplification, and fraudulent traffic should each be enumerated as prohibited use cases. Breach of these provisions creates a contractual right of termination, separate from any technical reclaim mechanism.

Monitoring during the lease

Owners can and should monitor their leased space for reputation issues throughout the lease term. Tools such as Spamhaus, Cisco Talos, and IPQS provide prefix-level blacklist lookup. IPbnb's platform integrates IP reputation monitoring so owners receive alerts if a block associated with their account appears on major blacklists – allowing intervention before damage compounds.

Remediation responsibility

A professionally structured IPv4 lease should specify which party is responsible for blacklist removal. Industry practice assigns this obligation to the lessee for blacklistings that occur during their tenancy. The lessor retains the right to take over remediation if the lessee fails to act within a defined window.

IP leasing safety at the reputation level is therefore a contractual and monitoring question, not simply a technical one. Owners who select lessees through a vetted marketplace and include proper acceptable-use provisions are substantially better protected than those arranging informal leases without written terms.

End-of-Lease Mechanics – Reclaiming Your Block

The end-of-lease process is where ownership rights become most concrete. Understanding the sequence removes ambiguity about what reclaiming the block actually looks like.

Step 1: LOA expiry or revocation

At lease end, the LOA is either allowed to expire (if time-limited) or actively revoked by the owner. Without a valid LOA, the lessee's upstream provider will withdraw the BGP announcement. This typically takes effect within 24 to 72 hours of LOA withdrawal, depending on the upstream provider's update cycle.

Step 2: ROA update

The owner updates or removes the ROA in the RPKI system to reflect that the prior lessee's ASN is no longer authorized. This is completed through the RIR's portal (RIPE NCC's RPKI dashboard, for example) and propagates across the routing table within hours.

Step 3: Routing confirmation

The owner can verify that the block is no longer being announced by the lessee using standard looking glass tools or BGP monitoring services. Once de-announced, the block is effectively dormant – it cannot be routed by anyone without a new LOA from the owner.

Step 4: Block re-evaluation

Before leasing again or returning the block to production use, the owner should run a reputation check across major blacklists. If blacklistings exist from the previous tenancy, the owner can initiate removal through standard delisting processes, referencing the end of the prior lease and their status as the registered holder.

The full sequence – from LOA revocation to confirmed de-announcement – typically completes within two to five business days. Registered holders retain full control of the block throughout and at the conclusion of this process.

Choosing an IPv4 Lease Provider

Not all IPv4 lease providers operate to the same standard. When you lease IPv4 address blocks through a platform or broker, the provider's processes directly determine how well your ownership interests are protected during and after the lease.

Key questions to ask any IPv4 lease provider:

• Do they issue LOAs automatically, or is it a manual process? Automated LOA issuance on a defined SLA (ideally within hours) reduces deployment delays and ensures the document is correctly scoped.

• Do they manage RPKI and ROA creation as part of the service? A provider that handles ROA setup protects both parties from routing errors and unauthorized announcements.

• How do they screen lessees? Vetting processes reduce the risk of reputation damage during the lease term. Ask specifically whether they check for prior abuse history and verify the lessee's ASN.

• What monitoring runs during the lease? Continuous blacklist monitoring with owner alerts is the standard on reputable platforms. Providers that only check reputation at onboarding leave you exposed for the duration of the lease.

• What does end-of-lease look like? A defined reclaim process - LOA revocation, ROA update, BGP withdrawal confirmation - should be documented and contractually guaranteed, not left to informal coordination.

• What are the contract terms on acceptable use? The AUP should explicitly enumerate prohibited activities, define the lessee's remediation obligations, and give the owner clear termination rights for breach.

For a full 10-point evaluation framework covering pricing, SLAs, regional coverage, and company stability, see our guide on how to choose the best IPv4 leasing provider →

Is Renting IPv4 the Same as Leasing?

Yes. "Rent IPv4" and "lease IPv4 address blocks" refer to the same arrangement. The terms are used interchangeably across the industry. "Lease" is more common in formal contracts and platform documentation because it better reflects the fixed-term, documented nature of the agreement - but whether you're looking to rent IPv4 for a short project or lease IPv4 addresses for stable production infrastructure, the underlying mechanics are identical: the owner retains RIR registration, the lessee receives routing authority for the term, and ownership never transfers.

Leasing as a Capital Efficiency Decision

Leasing is not a risk event. I want to be direct about that. It is a capital efficiency decision – one that leaves your ownership registration untouched, your routing rights recoverable, and the value of your block working rather than dormant.

The protections described in this article are not aspirational. LOA-scoped routing authority, RPKI enforcement, contractual acceptable-use terms, blacklist monitoring with defined remediation responsibility – this is what a properly structured lease looks like in practice.

IPbnb is built around that structure by default. Owners who lease IPv4 space through the platform get a signed LOA, RPKI-compliant routing setup, standard AUP terms, and active reputation monitoring without having to negotiate each element individually. End-of-lease return follows a defined process. The controls are in the agreement and in the platform – not dependent on lessee goodwill.

If you've been hesitant to lease IPv4 address blocks from your holdings, I'd encourage you to request a lease evaluation. The question is no longer whether safe IPv4 leasing is possible. It's whether your specific block is ready to start generating a return.