2607:fb10:5012::/48 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS2906 Netflix Streaming Services Inc. RPKI valid 26 380012906 2026-09-18 2026-09-22
AS55095 Netflix Inc RPKI valid 8 17639335655095 2026-09-18 2026-09-22

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
2607:fb10::/32 /48 AS2906 arin authorises it
2607:fb10::/32 /48 AS55095 arin wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
2607:fb10::/32
RIR
ARIN
Country
πŸ‡ΊπŸ‡Έ US
Status
allocated
Allocated
2009-06-15

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
2607:fb10::/32 v6 AS2906 Netflix Streaming Services Inc. RPKI valid 35 3772133562906 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-22 00:55:46Z origin change AS55095 β†’ AS2906 494322155103154369392906
2026-09-21 13:29:15Z origin change AS2906 β†’ AS55095 21628582806762335655095
2026-09-21 11:10:26Z origin change AS55095 β†’ AS2906 503002906
2026-09-21 11:02:56Z origin change AS2906 β†’ AS55095 50300335655095
2026-09-21 05:32:35Z origin change AS55095 β†’ AS2906 494322155103154369392906
2026-09-21 05:08:23Z origin change AS2906 β†’ AS55095 21628582806762335655095
2026-09-18 05:35:31Z origin change AS55095 β†’ AS2906 494324836290022906