104.253.130.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS9009 M247 Europe SRL	RPKI valid	39	34549 9009	2026-09-18	2026-10-28
AS3561 Lumen (ex. Savvis)	RPKI valid	4	3549 3356 3561	2026-10-08	2026-10-28

RPKI

3 ROAs cover this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
104.253.130.0/24	/24	AS3561	arin	wrong origin
104.253.130.0/24	/24	AS9009	arin	authorises it
104.253.130.0/24	/24	AS18779	arin	wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 104.252.0.0/15
RIR: ARIN
Country: 🇺🇸 US
Status: allocated
Allocated: 2014-12-05

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-10-24 01:41:07Z	origin change	AS3561 → AS9009	50300 3257 9009
2026-10-24 01:08:17Z	origin change	AS9009 → AS3561	50300 3356 3561
2026-10-22 23:34:32Z	origin change	AS3561 → AS9009	55720 6939 9009
2026-10-22 23:34:30Z	origin change	AS9009 → AS3561	48185 3356 3561
2026-10-22 14:45:56Z	origin change	AS3561 → AS9009	204092 34019 9009
2026-10-22 12:52:06Z	origin change	AS9009 → AS3561	1403 577 3356 3561
2026-10-22 12:51:55Z	origin change	AS3561 → AS9009	37989 56300 132132 4657 174 9009
2026-10-22 10:45:09Z	origin change	AS9009 → AS3561	3549 3356 3561
2026-10-21 12:18:47Z	origin change	AS3561 → AS9009	17639 9009
2026-10-21 05:23:31Z	origin change	AS9009 → AS3561	14907 3356 3561
2026-10-21 05:23:30Z	origin change	AS3561 → AS9009	37989 56300 132132 4657 174 9009
2026-10-21 01:20:33Z	origin change	AS9009 → AS3561	7018 3356 3561
2026-10-21 00:39:51Z	origin change	AS3561 → AS9009	7018 174 9009
2026-10-20 21:10:58Z	origin change	AS9009 → AS3561	1403 577 3356 3561
2026-10-20 08:44:47Z	origin change	AS3561 → AS9009	49432 48362 1764 9009
2026-10-20 06:39:36Z	origin change	AS9009 → AS3561	3549 3356 3561
2026-10-20 06:39:15Z	origin change	AS3561 → AS9009	37989 56300 132132 4657 174 9009
2026-10-20 00:29:59Z	origin change	AS9009 → AS3561	37989 56300 132132 4657 3356 209 3561
2026-10-16 02:46:06Z	origin change	AS3561 → AS9009	328840 327727 174 9009
2026-10-16 00:32:21Z	origin change	AS9009 → AS3561	328840 327727 174 3356 3561
2026-10-15 22:05:43Z	origin change	AS3561 → AS9009	57381 42708 1299 9009 9009
2026-10-15 21:40:14Z	origin change	AS9009 → AS3561	50628 3356 3561
2026-10-15 21:05:33Z	origin change	AS3561 → AS9009	34927 1299 9009 9009
2026-10-15 21:05:01Z	origin change	AS9009 → AS3561	1403 577 3356 3561
2026-10-15 09:20:51Z	origin change	AS3561 → AS9009	216285 8280 6762 174 9009
2026-10-15 08:03:27Z	origin change	AS9009 → AS3561	3549 3356 3561