23.141.168.0/24 RPKI valid MOAS
Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.
This prefix is announced by more than one AS. Compare how many collector
peers see each origin below: a hijack is usually visible as a second
origin seen by far fewer peers than the legitimate one.
Origins
| Origin AS | RPKI | Peers seeing it | Sample path | First seen | Last seen |
|---|---|---|---|---|---|
| AS209242 Cloudflare BYOIP Customers | RPKI valid | 44 | 3454913335209242 | 2026-10-08 | 2026-10-11 |
| AS14618 Amazon.com, Inc. | RPKI valid | 4 | 226521650914618 | 2026-09-18 | 2026-10-11 |
RPKI
6 ROAs cover this prefix
| ROA prefix | Max length | Authorised origin | Trust anchor | Result for this route |
|---|---|---|---|---|
| 23.141.168.0/24 | /24 | AS12202 | arin | wrong origin |
| 23.141.168.0/24 | /24 | AS14618 | arin | wrong origin |
| 23.141.168.0/24 | /24 | AS16509 | arin | wrong origin |
| 23.141.168.0/24 | /24 | AS20473 | arin | wrong origin |
| 23.141.168.0/24 | /24 | AS209242 | arin | authorises it |
| 23.141.168.0/24 | /24 | AS396982 | arin | wrong origin |
Registry
Who this address space is delegated to, regardless of whether it is routed
- Delegated block
- 23.141.168.0/24
- RIR
- ARIN
- Country
- 🇨🇦 CA
- Status
- allocated
- Allocated
- 2022-09-26
Less specific routes
Announced prefixes that contain this one
Nothing less specific is announced.
More specific routes
0 announced prefixes inside this one
Nothing more specific is announced.
Recorded changes
| When | Change | Origin | Path |
|---|---|---|---|
| 2026-10-10 17:34:04Z | origin change | AS14618 → AS209242 | 20236513335209242 |
| 2026-10-10 16:34:42Z | origin change | AS209242 → AS14618 | 202051650914618 |
| 2026-10-08 22:33:41Z | origin change | AS14618 → AS209242 | 3492713335209242 |
| 2026-10-08 22:33:40Z | origin change | AS209242 → AS14618 | 226521650914618 |
| 2026-10-08 15:02:18Z | origin change | AS14618 → AS209242 | 1383097113335209242 |