109.196.96.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS196695 NetOne Rus JSC	RPKI valid	47	37721 196695	2026-10-30	2026-11-02
AS215314 Helou LLC	RPKI invalid	1	213241 9002 29226 215314	2026-09-18	2026-11-02

RPKI

2 ROAs cover this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
109.196.96.0/24	/24	AS29226	ripe	wrong origin
109.196.96.0/24	/24	AS196695	ripe	authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 109.196.96.0/24
RIR: RIPENCC
Country: 🇦🇪 AE
Status: allocated
Allocated: 2009-12-16

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-11-01 20:48:11Z	origin change	AS215314 → AS196695	34549 57304 196695
2026-11-01 20:05:01Z	origin change	AS215314 → AS196695	202365 6939 50509 196695
2026-10-30 10:47:44Z	origin change	AS215314 → AS196695	49134 53356 6939 196695