185.126.143.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS210524 Federico De Rossi as trading as TRASMINET SAS. RPKI valid 41 59919214443210524 2026-11-05 2026-11-06
AS34758 Axera SpA RPKI valid 1 333334758 2026-09-29 2026-11-06

RPKI

3 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
185.126.143.0/24 /24 AS34758 ripe wrong origin
185.126.143.0/24 /24 AS210524 ripe authorises it
185.126.140.0/22 /22 AS34758 ripe wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
185.126.140.0/22
RIR
RIPENCC
Country
🇮🇹 IT
Status
allocated
Allocated
2015-11-16

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-11-05 13:33:30Z origin change AS34758 → AS210524 49673204856762214443210524
2026-11-05 13:33:30Z origin change AS210524 → AS34758 49673315004132734758
2026-11-05 13:33:01Z origin change AS34758 → AS210524 295043939212996762214443210524
2026-11-05 13:33:00Z origin change AS210524 → AS34758 496734132734758
2026-11-05 13:10:30Z origin change AS34758 → AS210524 573814270812996762214443210524
2026-11-05 13:10:30Z origin change AS210524 → AS34758 1403577645334914132734758
2026-11-05 13:10:16Z origin change AS34758 → AS210524 58057345493257900247217214443210524