194.149.70.0/23 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS12389 Rostelecom PJSC RPKI valid 35 2448212389 2026-09-18 2026-09-20
AS3267 National Research Computer Network of Russia RPKI valid 9 377213267 2026-09-18 2026-09-20

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
194.149.70.0/23 /24 AS3267 ripe wrong origin
194.149.70.0/23 /24 AS12389 ripe authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
194.149.64.0/21
RIR
RIPENCC
Country
🇷🇺 RU
Status
allocated
Allocated
1999-02-23

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-19 15:56:20Z origin change AS3267 → AS12389 32884032772717412389
2026-09-19 15:03:39Z origin change AS12389 → AS3267 202365315003267
2026-09-18 14:56:18Z origin change AS3267 → AS12389 202365693912389
2026-09-18 14:40:37Z origin change AS12389 → AS3267 35493356315003267
2026-09-18 14:02:38Z origin change AS3267 → AS12389 32884032772717412389
2026-09-18 12:54:06Z origin change AS12389 → AS3267 44393401753315003267
2026-09-18 12:54:01Z origin change AS3267 → AS12389 4439358057693912389
2026-09-18 12:53:45Z origin change AS12389 → AS3267 44393401753315003267
2026-09-18 12:04:25Z origin change AS3267 → AS12389 202365693912389
2026-09-18 08:42:37Z origin change AS12389 → AS3267 44393401753315003267
2026-09-18 06:44:10Z origin change AS3267 → AS12389 4439358057693912389
2026-09-18 06:43:55Z origin change AS12389 → AS3267 44393401753315003267