156.154.103.0/24 RPKI valid MOAS
Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.
This prefix is announced by more than one AS. Compare how many collector
peers see each origin below: a hijack is usually visible as a second
origin seen by far fewer peers than the legitimate one.
Origins
| Origin AS | RPKI | Peers seeing it | Sample path | First seen | Last seen |
|---|---|---|---|---|---|
| AS12008 Vercara (f.k.a Neustar) | RPKI valid | 38 | 377211655212008 | 2026-09-27 | 2026-09-27 |
| AS397215 Vercara, LLC | RPKI valid | 4 | 3454916552397215 | 2026-09-27 | 2026-09-27 |
RPKI
33 ROAs cover this prefix
| ROA prefix | Max length | Authorised origin | Trust anchor | Result for this route |
|---|---|---|---|---|
| 156.154.103.0/24 | /24 | AS12008 | arin | authorises it |
| 156.154.103.0/24 | /24 | AS19905 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397213 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397214 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397215 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397216 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397217 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397218 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397219 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397220 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397221 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397222 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397223 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397224 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397225 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397226 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397227 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397228 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397229 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397230 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397231 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397232 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397233 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397234 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397235 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397236 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397237 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397238 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397239 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397240 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397241 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397242 | arin | wrong origin |
| 156.154.103.0/24 | /24 | AS397243 | arin | wrong origin |
Registry
Who this address space is delegated to, regardless of whether it is routed
- Delegated block
- 156.154.96.0/20
- RIR
- ARIN
- Country
- 🇺🇸 US
- Status
- allocated
- Allocated
- 2003-12-18
Less specific routes
Announced prefixes that contain this one
Nothing less specific is announced.
More specific routes
0 announced prefixes inside this one
Nothing more specific is announced.
Recorded changes
| When | Change | Origin | Path |
|---|---|---|---|
| 2026-09-27 05:40:52Z | origin change | AS397215 → AS12008 | 852165521655212008 |
| 2026-09-27 05:32:22Z | origin change | AS12008 → AS397215 | 328840327727174325716552397215 |
| 2026-09-27 02:32:47Z | origin change | AS397215 → AS12008 | 852165521655212008 |
| 2026-09-27 02:26:20Z | origin change | AS12008 → AS397215 | 328840327727174325716552397215 |
| 2026-09-27 00:45:27Z | origin change | AS397215 → AS12008 | 1763912991655212008 |
| 2026-09-27 00:43:39Z | origin change | AS12008 → AS397215 | 328840327727174325716552397215 |
| 2026-09-27 00:42:28Z | origin change | AS12008 → AS19905 | 2950415935174325719905 |
| 2026-09-27 00:42:28Z | origin change | AS19905 → AS12008 | 295041593549559165521655212008 |
| 2026-09-27 00:40:55Z | origin change | AS19905 → AS12008 | 3549335612991655212008 |
| 2026-09-27 00:40:24Z | origin change | AS12008 → AS19905 | 35493356291419905 |
| 2026-09-27 00:39:56Z | origin change | AS19905 → AS12008 | 3549335612991655212008 |
| 2026-09-27 00:39:27Z | origin change | AS12008 → AS19905 | 35493356291419905 |
| 2026-09-27 00:39:09Z | origin change | AS19905 → AS12008 | 2162858280676212991655212008 |
| 2026-09-27 00:39:08Z | origin change | AS12008 → AS19905 | 1403577291419905 |
| 2026-09-27 00:39:06Z | origin change | AS19905 → AS12008 | 59919900232571655212008 |
| 2026-09-27 00:35:33Z | origin change | AS12008 → AS19905 | 55720291419905 |
| 2026-09-27 00:34:56Z | origin change | AS19905 → AS12008 | 2051412991655212008 |
| 2026-09-27 00:34:54Z | origin change | AS12008 → AS19905 | 35493356291419905 |
| 2026-09-27 00:34:47Z | origin change | AS397215 → AS12008 | 3492712991655212008 |
| 2026-09-27 00:34:46Z | origin change | AS12008 → AS397215 | 50304129916552397215 |
| 2026-09-27 00:34:43Z | origin change | AS397215 → AS12008 | 24482165521655212008 |
| 2026-09-27 00:34:37Z | origin change | AS19905 → AS397215 | 244821655216552397215 |
| 2026-09-27 00:34:36Z | origin change | AS397215 → AS19905 | 24482291419905 |
| 2026-09-27 00:34:34Z | origin change | AS19905 → AS397215 | 34927129916552397215 |
| 2026-09-26 21:30:36Z | origin change | AS12008 → AS19905 | 24482291419905 |
| 2026-09-26 21:30:35Z | origin change | AS19905 → AS12008 | 3492712991655212008 |
| 2026-09-26 21:30:26Z | origin change | AS12008 → AS19905 | 450496696291419905 |
| 2026-09-26 21:30:21Z | origin change | AS19905 → AS12008 | 24482165521655212008 |
| 2026-09-26 21:30:20Z | origin change | AS12008 → AS19905 | 22652325719905 |
| 2026-09-26 21:30:20Z | origin change | AS19905 → AS12008 | 2265212991655212008 |
| 2026-09-26 21:30:20Z | origin change | AS12008 → AS19905 | 24482291419905 |
| 2026-09-26 21:30:20Z | origin change | AS19905 → AS12008 | 24482165521655212008 |
| 2026-09-26 21:30:10Z | origin change | AS12008 → AS19905 | 55720291419905 |
| 2026-09-26 21:30:08Z | origin change | AS19905 → AS12008 | 573815030412991655212008 |
| 2026-09-26 21:30:07Z | origin change | AS12008 → AS19905 | 34927566556939645319905 |
| 2026-09-26 21:30:06Z | origin change | AS19905 → AS12008 | 3772116552165521655212008 |
| 2026-09-26 21:30:06Z | origin change | AS12008 → AS19905 | 48185291419905 |
| 2026-09-26 21:30:04Z | origin change | AS19905 → AS12008 | 3772130844165521655212008 |
| 2026-09-26 21:30:03Z | origin change | AS19905 → AS12008 | 2265216552165521655212008 |
| 2026-09-26 21:30:02Z | origin change | AS12008 → AS19905 | 14907291419905 |
| 2026-09-26 21:30:02Z | origin change | AS12008 → AS19905 | 22652325719905 |
| 2026-09-26 21:30:01Z | origin change | AS19905 → AS12008 | 4818516552165521655212008 |
| 2026-09-26 21:30:01Z | origin change | AS19905 → AS12008 | 2265212991655212008 |
| 2026-09-26 21:30:00Z | origin change | AS12008 → AS19905 | 2040922076629169325719905 |
| 2026-09-26 21:30:00Z | origin change | AS19905 → AS12008 | 20409234019165521655212008 |
| 2026-09-26 21:30:00Z | origin change | AS12008 → AS19905 | 204092340193303291419905 |
| 2026-09-26 21:29:58Z | origin change | AS12008 → AS19905 | 58057174645319905 |
| 2026-09-26 21:29:54Z | origin change | AS19905 → AS12008 | 2064993454916552165521655212008 |
| 2026-09-26 21:29:54Z | origin change | AS12008 → AS19905 | 7018645319905 |
| 2026-09-26 21:29:50Z | origin change | AS19905 → AS12008 | 3454916552165521655212008 |