185.54.92.0/23 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS203993 S.J.M. Steffann RPKI valid 44 202365203993 2026-09-18 2026-10-12
AS8038 6connect, Inc. RPKI valid 1 377218038 2026-10-08 2026-10-12

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
185.54.92.0/23 /23 AS8038 ripe wrong origin
185.54.92.0/23 /23 AS203993 ripe authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
185.54.92.0/22
RIR
RIPENCC
Country
🇳🇱 NL
Status
allocated
Allocated
2014-04-17

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-08 11:54:27Z origin change AS8038 → AS203993 354933563389150673203993
2026-10-08 11:37:15Z origin change AS203993 → AS8038 377218038
2026-10-07 17:55:13Z origin change AS8038 → AS203993 49134533566939203993
2026-10-07 16:46:07Z origin change AS203993 → AS8038 377218038
2026-10-07 14:43:02Z origin change AS8038 → AS203993 14907129912414203993
2026-10-07 14:00:27Z origin change AS203993 → AS8038 377218038
2026-10-03 17:40:45Z origin change AS8038 → AS203993 226523389150673203993
2026-10-03 09:15:29Z origin change AS203993 → AS8038 377218038
2026-09-30 12:13:31Z origin change AS8038 → AS203993 8523389150673203993
2026-09-30 11:47:07Z origin change AS203993 → AS8038 377218038
2026-09-29 16:24:17Z origin change AS8038 → AS203993 8523389150673203993
2026-09-29 13:45:16Z origin change AS203993 → AS8038 377218038