185.251.113.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS54528 Richie Software USA, Inc. RPKI valid 37 34549129954528 2026-09-18 2026-10-23
AS60354 Richie Ltd RPKI valid 6 50304129960354 2026-09-18 2026-10-23

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
185.251.113.0/24 /32 AS54528 ripe authorises it
185.251.113.0/24 /32 AS60354 ripe wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
185.251.112.0/22
RIR
RIPENCC
Country
🇫🇮 FI
Status
allocated
Allocated
2018-03-23

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-23 05:45:24Z origin change AS60354 → AS54528 46087575129954528
2026-10-22 22:10:00Z origin change AS54528 → AS60354 5738150304129960354
2026-10-20 13:14:12Z origin change AS60354 → AS54528 46087575129954528
2026-10-20 11:56:48Z origin change AS54528 → AS60354 33331257129960354
2026-10-10 19:34:11Z origin change AS60354 → AS54528 48185129954528
2026-10-10 14:34:00Z origin change AS54528 → AS60354 3492756655129960354