163.253.63.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS396955 Internet2 RPKI valid 44 377213356396955 2026-09-18 2026-10-29
AS11537 Internet2 RPKI valid 1 382292449011537 2026-09-18 2026-10-29

RPKI

4 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
163.253.63.0/24 /24 AS1125 arin wrong origin
163.253.63.0/24 /24 AS11537 arin wrong origin
163.253.63.0/24 /24 AS396955 arin authorises it
163.253.0.0/16 /16 AS11537 arin wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
163.253.0.0/16
RIR
ARIN
Country
πŸ‡ΊπŸ‡Έ US
Status
allocated
Allocated
1992-10-21

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-29 06:34:14Z origin change AS11537 β†’ AS396955 14035773356396955
2026-10-29 01:16:07Z origin change AS396955 β†’ AS11537 38229244901153711537115371153711537
2026-10-22 10:42:35Z origin change AS11537 β†’ AS396955 580573454929143356396955
2026-10-22 08:24:24Z origin change AS396955 β†’ AS11537 38229244902428776601153711537115371153711537
2026-10-17 07:23:33Z origin change AS11537 β†’ AS396955 3288403277271743356396955
2026-10-16 16:11:57Z origin change AS396955 β†’ AS11537 38229244901153711537115371153711537
2026-10-16 16:09:50Z origin change AS11537 β†’ AS396955 2064993454929143356396955
2026-10-16 15:29:00Z origin change AS396955 β†’ AS11537 38229244902428776601153711537115371153711537