192.173.89.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS55095 Netflix Inc	RPKI valid	30	34549 174 55095	2026-09-18	2026-09-23
AS2906 Netflix Streaming Services Inc.	RPKI valid	13	38001 2906	2026-09-18	2026-09-23

RPKI

2 ROAs cover this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
192.173.64.0/18	/24	AS2906	arin	wrong origin
192.173.64.0/18	/24	AS55095	arin	authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 192.173.64.0/18
RIR: ARIN
Country: 🇺🇸 US
Status: allocated
Allocated: 2013-02-20

Less specific routes

Announced prefixes that contain this one

Prefix	Origin	RPKI	Peers	Sample path	First seen
192.173.64.0/18 v4	AS2906 Netflix Streaming Services Inc.	RPKI valid	43	37721 3356 2906	2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-09-22 14:04:15Z	origin change	AS2906 → AS55095	852 174 55095
2026-09-22 11:42:26Z	origin change	AS55095 → AS2906	38855 15412 9304 2906
2026-09-22 11:39:10Z	origin change	AS2906 → AS55095	852 174 55095
2026-09-22 10:48:34Z	origin change	AS55095 → AS2906	38855 15412 9304 2906
2026-09-22 10:43:39Z	origin change	AS2906 → AS55095	57821 12586 3257 6762 55095
2026-09-22 10:42:08Z	origin change	AS55095 → AS2906	38855 15412 9304 2906
2026-09-22 10:41:52Z	origin change	AS2906 → AS55095	328840 327727 174 55095
2026-09-22 10:37:20Z	origin change	AS55095 → AS2906	38855 15412 9304 2906
2026-09-22 10:37:02Z	origin change	AS2906 → AS55095	852 174 55095
2026-09-22 10:32:43Z	origin change	AS55095 → AS2906	38855 15412 9304 2906