192.64.15.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS11983 Tiktok U.S. Data Security Inc. RPKI valid 24 701811983 2026-09-18 2026-09-21
AS396986 Bytedance, Inc. (TikTok) RPKI valid 17 377213356396986 2026-09-18 2026-09-21

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
192.64.15.0/24 /24 AS11983 arin authorises it
192.64.14.0/23 /32 AS396986 arin wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
192.64.14.0/23
RIR
ARIN
Country
πŸ‡ΊπŸ‡Έ US
Status
allocated
Allocated
2019-06-07

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-20 03:40:16Z origin change AS396986 β†’ AS11983 32884032772717411983
2026-09-19 21:35:21Z origin change AS11983 β†’ AS396986 5572029143356396986
2026-09-19 08:44:28Z origin change AS396986 β†’ AS11983 32884032772717411983
2026-09-19 08:30:33Z origin change AS11983 β†’ AS396986 2950415935174396986
2026-09-18 20:59:45Z origin change AS396986 β†’ AS11983 32884032772717411983
2026-09-18 19:05:31Z origin change AS11983 β†’ AS396986 35493356396986
2026-09-18 18:03:36Z origin change AS396986 β†’ AS11983 32884032772717411983
2026-09-18 14:02:36Z origin change AS11983 β†’ AS396986 328840327727174396986
2026-09-18 07:14:27Z origin change AS396986 β†’ AS11983 5738150304129911983