154.89.131.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS17561 LARUS Limited RPKI valid 29 345491741749717561 2026-10-20 2026-10-31
AS218568 Shabalov Grigoriy Pavlovich RPKI valid 12 17639174401322218568 2026-10-29 2026-10-31

RPKI

3 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
154.89.131.0/24 /24 AS17561 afrinic authorises it
154.89.131.0/24 /24 AS218568 afrinic wrong origin
154.89.0.0/16 /24 AS17561 afrinic authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
154.80.0.0/12
RIR
AFRINIC
Country
πŸ‡ΈπŸ‡¨ SC
Status
allocated
Allocated
2013-07-24

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-31 00:23:29Z origin change AS17561 β†’ AS218568 37989563001321324657174401322218568
2026-10-30 08:13:34Z origin change AS218568 β†’ AS17561 29504393921741749717561
2026-10-30 07:28:12Z origin change AS17561 β†’ AS218568 17639174401322218568
2026-10-30 04:00:15Z origin change AS218568 β†’ AS17561 2448264531741749717561
2026-10-30 03:20:52Z origin change AS17561 β†’ AS218568 44393394256174401322218568
2026-10-29 22:53:07Z origin change AS218568 β†’ AS17561 3288403277271741749717561
2026-10-29 14:45:09Z origin change AS17561 β†’ AS218568 6121869391299174401322218568
2026-10-20 01:29:26Z new prefix AS17561 LARUS Limited 580573454912991741749717561