152.89.199.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS214833 Aleksandr Shmalko trading as PR Obrada Podataka Castles Novi Sad RPKI valid 38 3492730823214833 2026-09-18 2026-10-07
AS43278 Castles LLC RPKI valid 4 49673123895749443278 2026-09-18 2026-10-07

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
152.89.199.0/24 /24 AS43278 ripe wrong origin
152.89.199.0/24 /24 AS214833 ripe authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
152.89.199.0/24
RIR
RIPENCC
Country
πŸ‡ΈπŸ‡¨ SC
Status
allocated
Allocated
2022-01-25

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-24 10:14:04Z origin change AS43278 β†’ AS214833 852291430823214833
2026-09-24 04:13:35Z origin change AS214833 β†’ AS43278 49673123895749443278