212.103.45.0/24 RPKI invalid MOAS
Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.
This prefix is announced by more than one AS. Compare how many collector
peers see each origin below: a hijack is usually visible as a second
origin seen by far fewer peers than the legitimate one.
Origins
| Origin AS | RPKI | Peers seeing it | Sample path | First seen | Last seen |
|---|---|---|---|---|---|
| AS8075 Microsoft Corporation | RPKI invalid | 25 | 345498075 | 2026-09-18 | 2026-09-20 |
| AS202280 NBI SIA | RPKI valid | 16 | 377211257858269202280 | 2026-09-18 | 2026-09-20 |
RPKI
1 ROA covers this prefix
| ROA prefix | Max length | Authorised origin | Trust anchor | Result for this route |
|---|---|---|---|---|
| 212.103.45.0/24 | /24 | AS202280 | ripe | wrong origin |
Registry
Who this address space is delegated to, regardless of whether it is routed
- Delegated block
- 212.103.44.0/22
- RIR
- RIPENCC
- Country
- 🇱🇻 LV
- Status
- allocated
- Allocated
- 2018-11-02
Less specific routes
Announced prefixes that contain this one
Nothing less specific is announced.
More specific routes
0 announced prefixes inside this one
Nothing more specific is announced.
Recorded changes
| When | Change | Origin | Path |
|---|---|---|---|
| 2026-09-19 15:56:17Z | origin change | AS8075 → AS202280 | 3288403277271741257858269202280 |
| 2026-09-19 13:47:39Z | origin change | AS202280 → AS8075 | 295048075 |
| 2026-09-18 14:02:37Z | origin change | AS8075 → AS202280 | 3288403277271741257858269202280 |
| 2026-09-18 07:14:37Z | origin change | AS202280 → AS8075 | 57381427088075 |