141.8.134.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS208398 Edge Technology Plus (Yandex) RPKI valid 31 345491299208398 2026-10-28 2026-10-28
AS13238 YANDEX LLC RPKI valid 11 3772113238 2026-10-27 2026-10-28

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
141.8.128.0/18 /24 AS13238 ripe wrong origin
141.8.128.0/18 /24 AS208398 ripe authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
141.8.128.0/18
RIR
RIPENCC
Country
🇷🇺 RU
Status
allocated
Allocated
2011-06-21

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
141.8.128.0/18 v4 AS13238 YANDEX LLC RPKI valid 12 3772113238 2026-09-18
141.8.128.0/18 v4 AS208398 Edge Technology Plus (Yandex) RPKI valid 31 345491299208398 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-29 03:09:40Z origin change AS208398 → AS13238 2448213238
2026-10-28 10:16:08Z origin change AS13238 → AS208398 33336762208398
2026-10-28 10:15:26Z origin change AS208398 → AS13238 2448213238
2026-10-28 10:11:19Z origin change AS13238 → AS208398 29504393921299174208398
2026-10-27 12:43:19Z new prefix AS13238 YANDEX LLC 17639930474739002573045730413238