2603:807e:300::/40 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS7843 Spectrum (Charter) RPKI valid 31 149077843 2026-09-18 2026-10-07
AS20115 Spectrum (Charter) RPKI valid 3 2132419002325720115 2026-09-18 2026-10-07

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
2603:807e:300::/40 /40 AS7843 arin authorises it
2603:807e:300::/40 /40 AS20115 arin wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
2603:8000::/24
RIR
ARIN
Country
πŸ‡ΊπŸ‡Έ US
Status
allocated
Allocated
2017-03-20

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-05 06:51:16Z origin change AS20115 β†’ AS7843 494322155103154369397843
2026-10-04 06:03:32Z origin change AS7843 β†’ AS20115 34800296329002325720115
2026-09-27 00:19:17Z origin change AS20115 β†’ AS7843 69397843
2026-09-26 23:04:54Z origin change AS7843 β†’ AS20115 34800296329002325720115