185.148.14.0/23 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS41378 Kirino LLC RPKI valid 38 244823623641378 2026-09-18 2026-09-19
AS210110 Kvmcloud Network CO., LIMITED RPKI valid 1 443933571010099210110 2026-09-18 2026-09-19

RPKI

3 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
185.148.12.0/22 /24 AS41378 ripe authorises it
185.148.12.0/22 /24 AS60024 ripe wrong origin
185.148.12.0/22 /24 AS210110 ripe wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
185.148.12.0/22
RIR
RIPENCC
Country
🇦🇺 AU
Status
allocated
Allocated
2016-04-18

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
185.148.12.0/22 v4 AS60024 HK CEDOC LIMITED RPKI valid 39 244824137860024 2026-09-18

More specific routes

4 announced prefixes inside this one

Prefix Origin RPKI Peers First seen
185.148.14.0/24 v4 AS41378 Kirino LLC RPKI valid 38 2026-09-18
185.148.14.0/24 v4 AS210110 Kvmcloud Network CO., LIMITED RPKI valid 1 2026-09-18
185.148.15.0/24 v4 AS41378 Kirino LLC RPKI valid 38 2026-09-18
185.148.15.0/24 v4 AS210110 Kvmcloud Network CO., LIMITED RPKI valid 1 2026-09-18

Recorded changes

WhenChangeOriginPath
2026-09-18 07:14:24Z origin change AS210110 → AS41378 5738150304129936236413784137841378