156.154.128.0/24 RPKI valid MOAS
Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.
This prefix is announced by more than one AS. Compare how many collector
peers see each origin below: a hijack is usually visible as a second
origin seen by far fewer peers than the legitimate one.
Origins
| Origin AS | RPKI | Peers seeing it | Sample path | First seen | Last seen |
|---|---|---|---|---|---|
| AS12008 Vercara (f.k.a Neustar) | RPKI valid | 38 | 380011655212008 | 2026-09-18 | 2026-09-19 |
| AS397215 Vercara, LLC | RPKI valid | 5 | 3454916552397215 | 2026-09-18 | 2026-09-19 |
RPKI
33 ROAs cover this prefix
| ROA prefix | Max length | Authorised origin | Trust anchor | Result for this route |
|---|---|---|---|---|
| 156.154.128.0/24 | /24 | AS12008 | arin | authorises it |
| 156.154.128.0/24 | /24 | AS19905 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397213 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397214 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397215 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397216 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397217 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397218 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397219 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397220 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397221 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397222 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397223 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397224 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397225 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397226 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397227 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397228 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397229 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397230 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397231 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397232 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397233 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397234 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397235 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397236 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397237 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397238 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397239 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397240 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397241 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397242 | arin | wrong origin |
| 156.154.128.0/24 | /24 | AS397243 | arin | wrong origin |
Registry
Who this address space is delegated to, regardless of whether it is routed
- Delegated block
- 156.154.128.0/22
- RIR
- ARIN
- Country
- 🇺🇸 US
- Status
- allocated
- Allocated
- 2003-12-18
Less specific routes
Announced prefixes that contain this one
Nothing less specific is announced.
More specific routes
0 announced prefixes inside this one
Nothing more specific is announced.
Recorded changes
| When | Change | Origin | Path |
|---|---|---|---|
| 2026-09-19 08:44:21Z | origin change | AS12008 → AS397215 | 328840327727174325716552397215 |
| 2026-09-19 08:30:27Z | origin change | AS397215 → AS12008 | 295041593549559165521655212008 |
| 2026-09-18 14:03:26Z | origin change | AS12008 → AS397215 | 328840327727174325716552397215 |
| 2026-09-18 07:14:24Z | origin change | AS397215 → AS12008 | 573815030412991655212008 |