188.3.24.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS15924 Vodafone Turkey	RPKI valid	42	37721 1273 15924	2026-09-18	2026-09-23
AS64639	RPKI invalid	1	208972 15924 64639	2026-09-18	2026-09-23

RPKI

2 ROAs cover this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
188.3.24.0/24	/24	AS15924	ripe	authorises it
188.3.24.0/23	/23	AS8386	ripe	wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 188.3.0.0/16
RIR: RIPENCC
Country: 🇹🇷 TR
Status: allocated
Allocated: 2009-02-13

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-09-23 16:26:40Z	origin change	AS64639 → AS15924	328840 327727 174 1273 15924
2026-09-23 14:31:37Z	origin change	AS15924 → AS64639	208972 15924 64639
2026-09-18 07:14:23Z	origin change	AS64639 → AS15924	57381 50304 1299 1273 15924