141.138.214.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS12552 GlobalConnect (IP-Only) RPKI valid 36 3454912552 2026-09-18 2026-09-20
AS42708 Glesys AB RPKI valid 7 5030442708 2026-09-18 2026-09-20

RPKI

3 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
141.138.208.0/21 /24 AS12552 ripe authorises it
141.138.208.0/21 /24 AS42708 ripe wrong origin
141.138.208.0/21 /24 AS51747 ripe wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
141.138.208.0/21
RIR
RIPENCC
Country
πŸ‡ΈπŸ‡ͺ SE
Status
allocated
Allocated
2011-07-01

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-20 04:37:10Z origin change AS42708 β†’ AS12552 3772112552
2026-09-20 04:37:08Z origin change AS12552 β†’ AS42708 333342708
2026-09-20 04:37:07Z origin change AS42708 β†’ AS12552 2040922076612552
2026-09-20 03:39:28Z origin change AS12552 β†’ AS42708 328840327727174427084270842708
2026-09-19 20:29:56Z origin change AS42708 β†’ AS12552 3772112552
2026-09-19 20:29:54Z origin change AS42708 β†’ AS12552 4818512552
2026-09-19 20:29:54Z origin change AS12552 β†’ AS42708 333342708
2026-09-19 08:43:23Z origin change AS12552 β†’ AS42708 328840327727174427084270842708
2026-09-19 08:30:27Z origin change AS42708 β†’ AS12552 29504159354955912552