160.0.104.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS1288 Packet Clearing House, Inc. RPKI valid 38 34549158301288 2026-09-18 2026-09-29
AS42 WoodyNet, Inc. RPKI valid 5 55720693942 2026-09-18 2026-09-29

RPKI

4 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
160.0.64.0/18 /24 AS1288 afrinic authorises it
160.0.0.0/17 /24 AS42 afrinic wrong origin
160.0.0.0/17 /24 AS715 afrinic wrong origin
160.0.0.0/17 /24 AS19281 afrinic wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
160.0.0.0/17
RIR
AFRINIC
Country
🇲🇺 MU
Status
assigned
Allocated
2016-11-30

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
160.0.0.0/17 v4 AS715 WoodyNet, Inc. RPKI valid 42 345492914715 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-29 18:03:42Z origin change AS42 → AS1288 8521299158301288
2026-09-29 17:09:17Z origin change AS1288 → AS42 55720693942
2026-09-29 03:49:32Z origin change AS42 → AS1288 8521299158301288
2026-09-28 21:22:45Z origin change AS1288 → AS42 55720693942
2026-09-22 11:37:30Z origin change AS42 → AS1288 8521299158301288
2026-09-22 11:30:15Z origin change AS1288 → AS42 55720693942