189.127.64.0/18 no ROA MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS22381 SAMM (Megatelecom) no ROA 40 377213746822381 2026-09-18 2026-09-20
AS262589 SAMM (Internexa) no ROA 1 24482262589 2026-09-18 2026-09-20

RPKI

No ROA covers this prefix

No ROA covers this prefix, so origin validation returns "unknown". That is not a fault; most of the table is still unsigned.

Registry

Who this address space is delegated to, regardless of whether it is routed

No delegation record covers this prefix.

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

5 announced prefixes inside this one

Prefix Origin RPKI Peers First seen
189.127.64.0/19 v4 AS262589 SAMM (Internexa) no ROA 42 2026-09-18
189.127.68.0/24 v4 AS262589 SAMM (Internexa) no ROA 42 2026-09-18
189.127.80.0/24 v4 AS22381 SAMM (Megatelecom) no ROA 40 2026-09-18
189.127.80.0/24 v4 AS262589 SAMM (Internexa) no ROA 1 2026-09-18
189.127.90.0/23 v4 AS262589 SAMM (Internexa) no ROA 42 2026-09-18

Recorded changes

WhenChangeOriginPath
2026-09-18 07:14:31Z origin change AS262589AS22381 573815030412991295622381