138.122.204.0/23 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS266224 ULTRA TELECOMUNICACOES LTDA RPKI valid 43 37721270664265137266224 2026-10-26 2026-10-28
AS264326 Ativa Networks RPKI invalid 1 213241900213786267613270664265137264326 2026-09-18 2026-10-28

RPKI

1 ROA covers this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
138.122.204.0/22 /24 AS266224 lacnic authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
138.122.204.0/22
RIR
LACNIC
Country
🇧🇷 BR
Status
allocated
Allocated
2015-06-24

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
138.122.204.0/22 v4 AS264326 Ativa Networks RPKI invalid 1 213241900213786267613270664265137264326 2026-09-18
138.122.204.0/22 v4 AS266224 ULTRA TELECOMUNICACOES LTDA RPKI valid 43 37721270664265137266224 2026-10-26

More specific routes

4 announced prefixes inside this one

Prefix Origin RPKI Peers First seen
138.122.204.0/24 v4 AS264326 Ativa Networks RPKI invalid 1 2026-09-18
138.122.204.0/24 v4 AS266224 ULTRA TELECOMUNICACOES LTDA RPKI valid 43 2026-10-26
138.122.205.0/24 v4 AS264326 Ativa Networks RPKI invalid 1 2026-09-18
138.122.205.0/24 v4 AS266224 ULTRA TELECOMUNICACOES LTDA RPKI valid 43 2026-10-26

Recorded changes

WhenChangeOriginPath
2026-10-26 03:26:37Z origin change AS264326 → AS266224 58057183612996762267613270664265137266224