207.231.240.0/20 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS101 University of Washington RPKI valid 42 24482101 2026-09-18 2026-09-24
AS39941 Pacific Wave RPKI valid 2 460875752153215239941 2026-09-18 2026-09-24

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
207.231.240.0/20 /24 AS101 arin authorises it
207.231.240.0/20 /24 AS39941 arin wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
207.231.240.0/20
RIR
ARIN
Country
πŸ‡ΊπŸ‡Έ US
Status
allocated
Allocated
2004-08-18

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

1 announced prefixes inside this one

Prefix Origin RPKI Peers First seen
207.231.255.0/24 v4 AS39941 Pacific Wave RPKI valid 43 2026-09-18

Recorded changes

WhenChangeOriginPath
2026-09-22 06:56:15Z origin change AS39941 β†’ AS101 49673123893491101
2026-09-22 06:46:48Z origin change AS101 β†’ AS39941 460875752153215239941
2026-09-22 06:20:41Z origin change AS39941 β†’ AS101 328840327727174101101
2026-09-22 06:13:00Z origin change AS101 β†’ AS39941 460875752153215239941
2026-09-22 00:05:32Z origin change AS39941 β†’ AS101 328840327727174101101
2026-09-21 05:48:37Z origin change AS101 β†’ AS39941 3822923855766029072153215239941
2026-09-18 07:14:37Z origin change AS39941 β†’ AS101 573815030412993356101101