141.11.158.0/24 RPKI invalid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS205489 CODE ASSET LTD	RPKI invalid	2	202365 50673 62255 49592 205489	2026-09-22	2026-09-23
AS138156 CSNE Co., Ltd.	RPKI invalid	2	38001 7473 58453 45629 138156	2026-09-18	2026-09-23

RPKI

1 ROA covers this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
141.11.158.0/23	/24	AS834	ripe	wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 141.11.0.0/16
RIR: RIPENCC
Country: 🇫🇷 FR
Status: allocated
Allocated: 1992-05-26

Less specific routes

Announced prefixes that contain this one

Prefix	Origin	RPKI	Peers	Sample path	First seen
141.11.156.0/22 v4	AS138156 CSNE Co., Ltd.	no ROA	41	38001 45629 138156	2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-09-23 08:50:34Z	origin change	AS205489 → AS138156	49673 20485 58453 45629 45629 45629 138156 138156 138156 138156 138156 138156