197.211.5.0/24 no ROA MOAS
Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.
This prefix is announced by more than one AS. Compare how many collector
peers see each origin below: a hijack is usually visible as a second
origin seen by far fewer peers than the legitimate one.
Origins
| Origin AS | RPKI | Peers seeing it | Sample path | First seen | Last seen |
|---|---|---|---|---|---|
| AS15399 Wananchi Group (Kenya) Limited | no ROA | 48 | 34549376623702715399 | 2026-09-18 | 2026-10-12 |
| AS37027 Simbanet (T) Limited | no ROA | 1 | 3289771539937027 | 2026-09-28 | 2026-10-12 |
RPKI
No ROA covers this prefix
No ROA covers this prefix, so origin validation returns "unknown". That is not a fault; most of the table is still unsigned.
Registry
Who this address space is delegated to, regardless of whether it is routed
- Delegated block
- 197.211.0.0/19
- RIR
- AFRINIC
- Country
- 🇰🇪 KE
- Status
- allocated
- Allocated
- 2013-01-21
Less specific routes
Announced prefixes that contain this one
| Prefix | Origin | RPKI | Peers | Sample path | First seen |
|---|---|---|---|---|---|
| 197.211.0.0/19 v4 | AS15399 Wananchi Group (Kenya) Limited | no ROA | 49 | 32897715399 | 2026-09-18 |
More specific routes
0 announced prefixes inside this one
Nothing more specific is announced.
Recorded changes
| When | Change | Origin | Path |
|---|---|---|---|
| 2026-10-09 03:30:49Z | origin change | AS37027 → AS15399 | 557203257372711539915399153991539915399 |
| 2026-10-09 00:24:21Z | origin change | AS15399 → AS37027 | 3289771539937027 |
| 2026-10-08 05:16:17Z | origin change | AS37027 → AS15399 | 202365693937662376623702715399 |
| 2026-10-08 03:53:19Z | origin change | AS15399 → AS37027 | 3289771539937027 |
| 2026-10-06 07:52:06Z | origin change | AS37027 → AS15399 | 202365693937662376623702715399 |
| 2026-10-06 07:16:43Z | origin change | AS15399 → AS37027 | 3289771539937027 |