191.96.209.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS199741 TransitX Ltd RPKI valid 36 3454935200199741 2026-09-18 2026-10-01
AS42831 UK Dedicated Servers Limited RPKI valid 6 55720693942831 2026-09-18 2026-10-01

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
191.96.209.0/24 /24 AS42831 ripe wrong origin
191.96.209.0/24 /24 AS199741 ripe authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
191.96.0.0/16
RIR
RIPENCC
Country
🇦🇪 AE
Status
allocated
Allocated
2014-03-13

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-01 08:33:37Z origin change AS42831 → AS199741 852291435200199741
2026-10-01 08:00:20Z origin change AS199741 → AS42831 55720693942831
2026-09-29 18:03:50Z origin change AS42831 → AS199741 852291435200199741
2026-09-29 17:09:09Z origin change AS199741 → AS42831 55720693942831
2026-09-29 03:49:36Z origin change AS42831 → AS199741 852291435200199741
2026-09-28 21:22:41Z origin change AS199741 → AS42831 55720693942831
2026-09-22 11:37:38Z origin change AS42831 → AS199741 852291435200199741
2026-09-22 11:30:11Z origin change AS199741 → AS42831 55720693942831