2600:1902:120::/44 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS15169 Google LLC	RPKI valid	25	34549 15169	2026-09-18	2026-10-06
AS43515 Google Ireland Limited	RPKI valid	8	58057 174 43515	2026-09-18	2026-10-06

RPKI

8 ROAs cover this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
2600:1902:120::/44	/44	AS15169	arin	authorises it
2600:1902:120::/44	/44	AS19527	arin	wrong origin
2600:1902:120::/44	/44	AS43515	arin	wrong origin
2600:1902:120::/44	/44	AS396982	arin	wrong origin
2600:1902::/31	/31	AS15169	arin	too specific
2600:1902::/31	/31	AS19527	arin	wrong origin
2600:1902::/31	/31	AS43515	arin	wrong origin
2600:1902::/31	/31	AS396982	arin	wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 2600:1900::/28
RIR: ARIN
Country: 🇺🇸 US
Status: allocated
Allocated: 2014-05-28

Less specific routes

Announced prefixes that contain this one

Prefix	Origin	RPKI	Peers	Sample path	First seen
2600:1902::/31 v6	AS15169 Google LLC	RPKI valid	30	38001 15169	2026-09-18
2600:1902::/31 v6	AS19527 Google LLC (Google Cloud)	RPKI valid	8	6939 19527	2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-10-05 15:32:33Z	origin change	AS43515 → AS15169	57381 50304 15169
2026-10-05 14:06:57Z	origin change	AS15169 → AS43515	204092 198978 174 43515
2026-09-24 18:22:16Z	origin change	AS43515 → AS15169	56662 25091 15169
2026-09-24 18:20:57Z	origin change	AS15169 → AS43515	56662 20473 3257 43515