149.18.3.0/24 no ROA MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS64160 NimblyNet Limited	no ROA	32	34549 1299 64160	2026-09-18	2026-09-26
AS58349 Elna Paulette Valentin trading as INNETRA PC	no ROA	11	37721 58349	2026-09-18	2026-09-26

RPKI

No ROA covers this prefix

No ROA covers this prefix, so origin validation returns "unknown". That is not a fault; most of the table is still unsigned.

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 149.18.0.0/16
RIR: ARIN
Country: 🇺🇸 US
Status: allocated
Allocated: 1992-01-28

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-09-24 08:33:09Z	origin change	AS58349 → AS64160	3549 3356 58349 64160
2026-09-24 04:13:27Z	origin change	AS64160 → AS58349	49673 58349
2026-09-23 16:27:00Z	origin change	AS58349 → AS64160	328840 327727 174 1299 64160
2026-09-23 08:16:11Z	origin change	AS64160 → AS58349	208972 58349
2026-09-22 12:47:32Z	origin change	AS58349 → AS64160	204092 20766 58349 64160
2026-09-22 12:47:30Z	origin change	AS64160 → AS58349	204092 34019 8218 58349
2026-09-22 12:46:38Z	origin change	AS58349 → AS64160	204092 20766 1299 64160
2026-09-22 12:46:37Z	origin change	AS64160 → AS58349	204092 34019 8218 58349
2026-09-22 11:38:27Z	origin change	AS58349 → AS64160	852 1299 64160
2026-09-22 11:29:13Z	origin change	AS64160 → AS58349	55720 6939 58349
2026-09-22 07:29:57Z	origin change	AS58349 → AS64160	852 1299 64160
2026-09-22 06:21:14Z	origin change	AS64160 → AS58349	37721 58349