2602:801:c00a::/48 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS397849 ZOHO RPKI valid 37 24482397849 2026-09-18 2026-09-21
AS139006 Zoho Corporation PTY LTD RPKI valid 1 14907482615830139006 2026-09-18 2026-09-21

RPKI

4 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
2602:801:c00a::/48 /64 AS56201 arin wrong origin
2602:801:c00a::/48 /64 AS139006 arin wrong origin
2602:801:c00a::/48 /64 AS205111 arin wrong origin
2602:801:c00a::/48 /64 AS397849 arin authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
2602:801:c000::/44
RIR
ARIN
Country
πŸ‡ΊπŸ‡Έ US
Status
allocated
Allocated
2019-10-10

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-21 04:01:49Z origin change AS139006 β†’ AS397849 2023656939949856201397849
2026-09-21 04:00:26Z origin change AS397849 β†’ AS139006 14907482615830139006
2026-09-20 04:00:43Z origin change AS139006 β†’ AS397849 2023656939949856201397849
2026-09-20 04:00:32Z origin change AS397849 β†’ AS139006 14907482615830139006