2602:801:c00a::/48 RPKI valid MOAS
Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.
This prefix is announced by more than one AS. Compare how many collector
peers see each origin below: a hijack is usually visible as a second
origin seen by far fewer peers than the legitimate one.
Origins
| Origin AS | RPKI | Peers seeing it | Sample path | First seen | Last seen |
|---|---|---|---|---|---|
| AS397849 ZOHO | RPKI valid | 35 | 24482397849 | 2026-09-18 | 2026-11-08 |
| AS139006 Zoho Corporation PTY LTD | RPKI valid | 1 | 14907482615830139006 | 2026-09-18 | 2026-11-08 |
RPKI
4 ROAs cover this prefix
Registry
Who this address space is delegated to, regardless of whether it is routed
- Delegated block
- 2602:801:c000::/44
- RIR
- ARIN
- Country
- 🇺🇸 US
- Status
- allocated
- Allocated
- 2019-10-10
Less specific routes
Announced prefixes that contain this one
Nothing less specific is announced.
More specific routes
0 announced prefixes inside this one
Nothing more specific is announced.
Recorded changes
| When | Change | Origin | Path |
|---|---|---|---|
| 2026-10-29 23:26:48Z | origin change | AS139006 → AS397849 | 5666220473174397849 |
| 2026-10-29 23:20:59Z | origin change | AS397849 → AS139006 | 443936407315830139006 |
| 2026-10-27 15:37:54Z | origin change | AS139006 → AS397849 | 44393394256397849 |
| 2026-10-27 15:36:25Z | origin change | AS397849 → AS139006 | 443936407315830139006 |
| 2026-10-27 15:25:33Z | origin change | AS139006 → AS397849 | 44393394256397849 |
| 2026-10-27 15:24:04Z | origin change | AS397849 → AS139006 | 443936407315830139006 |