196.207.164.0/23 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS15399 Wananchi Group (Kenya) Limited RPKI valid 42 345493727115399 2026-09-18 2026-10-22
AS37027 Simbanet (T) Limited RPKI invalid 1 50304376621539937027 2026-09-21 2026-10-22

RPKI

5 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
196.207.128.0/18 /24 AS15399 afrinic authorises it
196.207.128.0/18 /22 AS15399 afrinic too specific
196.207.128.0/18 /18 AS15399 afrinic too specific
196.207.128.0/18 /23 AS15399 afrinic authorises it
196.207.128.0/18 /21 AS15399 afrinic too specific

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
196.207.128.0/18
RIR
AFRINIC
Country
🇰🇪 KE
Status
allocated
Allocated
2015-10-01

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
196.207.128.0/18 v4 AS15399 Wananchi Group (Kenya) Limited RPKI valid 49 32897715399 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-23 00:01:34Z origin change AS37027 → AS15399 57381427083727115399
2026-10-22 22:10:27Z origin change AS15399 → AS37027 5738150304376621539937027