195.18.27.0/24 RPKI valid MOAS
Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.
This prefix is announced by more than one AS. Compare how many collector
peers see each origin below: a hijack is usually visible as a second
origin seen by far fewer peers than the legitimate one.
Origins
| Origin AS | RPKI | Peers seeing it | Sample path | First seen | Last seen |
|---|---|---|---|---|---|
| AS214833 Aleksandr Shmalko trading as PR Obrada Podataka Castles Novi Sad | RPKI valid | 25 | 38001199524214833 | 2026-09-18 | 2026-09-19 |
| AS43278 Castles LLC | RPKI valid | 18 | 2448243278 | 2026-09-18 | 2026-09-19 |
RPKI
2 ROAs cover this prefix
Registry
Who this address space is delegated to, regardless of whether it is routed
- Delegated block
- 195.18.27.0/24
- RIR
- RIPENCC
- Country
- 🇦🇪 AE
- Status
- allocated
- Allocated
- 2021-07-22
Less specific routes
Announced prefixes that contain this one
Nothing less specific is announced.
More specific routes
0 announced prefixes inside this one
Nothing more specific is announced.
Recorded changes
| When | Change | Origin | Path |
|---|---|---|---|
| 2026-09-19 08:43:28Z | origin change | AS43278 → AS214833 | 328840327727174199524214833 |
| 2026-09-19 08:30:27Z | origin change | AS214833 → AS43278 | 2950415935338915979643278 |
| 2026-09-19 07:44:20Z | origin change | AS43278 → AS214833 | 328840327727174199524214833 |
| 2026-09-19 00:47:03Z | origin change | AS214833 → AS43278 | 208972597965979643278 |
| 2026-09-18 20:58:43Z | origin change | AS43278 → AS214833 | 328840327727174199524214833 |
| 2026-09-18 16:06:38Z | origin change | AS214833 → AS43278 | 20236550673900243278 |
| 2026-09-18 16:06:11Z | origin change | AS43278 → AS214833 | 20236550673174199524214833 |
| 2026-09-18 16:05:17Z | origin change | AS214833 → AS43278 | 208972597965979643278 |