156.228.204.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS152606 LINK4 COMMUNICATION RPKI valid 41 3454942292975262610152606 2026-11-06 2026-11-06
AS17561 LARUS Limited RPKI valid 1 333312571741749717561 2026-09-18 2026-11-06

RPKI

6 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
156.228.204.0/24 /24 AS17561 afrinic wrong origin
156.228.204.0/24 /24 AS43094 afrinic wrong origin
156.228.204.0/24 /24 AS152606 afrinic authorises it
156.228.204.0/24 /24 AS219075 afrinic wrong origin
156.228.192.0/18 /24 AS17561 afrinic wrong origin
156.228.0.0/16 /24 AS17561 afrinic wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
156.224.0.0/11
RIR
AFRINIC
Country
πŸ‡ΈπŸ‡¨ SC
Status
allocated
Allocated
2015-12-22

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-11-06 11:22:38Z origin change AS219075 β†’ AS152606 599195746342292975262610152606
2026-11-05 14:43:03Z origin change AS43094 β†’ AS219075 29504393921299174401322219075
2026-11-05 02:20:47Z origin change AS17561 β†’ AS43094 5782112586325717440132243094