147.189.42.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS13335 Cloudflare, Inc. RPKI valid 46 3454913335 2026-09-18 2026-10-30
AS4749 WiseTechGlobal Pty Ltd RPKI valid 1 57821125863257381954749 2026-10-23 2026-10-30

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
147.189.42.0/24 /24 AS4749 ripe wrong origin
147.189.42.0/24 /24 AS13335 ripe authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
147.189.32.0/19
RIR
RIPENCC
Country
🇩🇪 DE
Status
assigned
Allocated
1991-07-08

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-25 12:35:06Z origin change AS4749 → AS13335 443936407313335
2026-10-25 12:30:28Z origin change AS13335 → AS4749 578211258632573819547494749474947494749
2026-10-23 09:33:33Z origin change AS4749 → AS13335 443936407313335
2026-10-23 09:21:50Z origin change AS13335 → AS4749 578211258632573819547494749474947494749
2026-10-22 02:53:35Z origin change AS4749 → AS13335 2064993454913335
2026-10-22 02:22:57Z origin change AS13335 → AS4749 578211258632573819547494749474947494749
2026-10-22 02:19:00Z origin change AS4749 → AS13335 5991913335
2026-10-22 02:16:36Z origin change AS13335 → AS4749 578211258632573819547494749474947494749
2026-10-20 11:06:42Z origin change AS4749 → AS13335 379895630013213213335
2026-10-20 11:06:31Z origin change AS13335 → AS4749 379893819547494749474947494749