178.72.115.0/24 no ROA MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS48541 MTS PJSC no ROA 33 345491299835948541 2026-09-18 2026-10-02
AS65000 no ROA 5 333383594854165000 2026-10-01 2026-10-02

RPKI

No ROA covers this prefix

No ROA covers this prefix, so origin validation returns "unknown". That is not a fault; most of the table is still unsigned.

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
178.72.64.0/18
RIR
RIPENCC
Country
🇷🇺 RU
Status
allocated
Allocated
2010-02-19

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
178.72.112.0/20 v4 AS48541 MTS PJSC no ROA 41 345498359288843092248541 2026-09-18
178.72.64.0/18 v4 AS8359 MTS PJSC no ROA 42 345498359 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-01 08:20:13Z origin change AS65000 → AS48541 503041299835948541
2026-10-01 08:20:10Z origin change AS48541 → AS65000 5572083594854165000
2026-10-01 08:20:10Z origin change AS65000 → AS48541 5991990021299835948541
2026-10-01 08:20:07Z origin change AS48541 → AS65000 55720693983594854165000
2026-10-01 08:19:53Z origin change AS48541 → AS65000 349275665583594854165000
2026-10-01 08:19:53Z origin change AS65000 → AS48541 22652835983598359835948541
2026-10-01 08:19:49Z origin change AS48541 → AS65000 2448283594854165000
2026-10-01 08:19:49Z origin change AS65000 → AS48541 4967320485835948541
2026-10-01 08:19:49Z origin change AS48541 → AS65000 333383594854165000
2026-10-01 08:19:48Z origin change AS65000 → AS48541 2023655067333891835948541