2620:116:800d::/48 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS16509 Amazon.com, Inc. RPKI valid 34 3800116509 2026-09-18 2026-10-28
AS27281 Quantcast Corporation RPKI valid 1 29504646127281 2026-10-27 2026-10-28

RPKI

3 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
2620:116:800d::/48 /48 AS14618 arin wrong origin
2620:116:800d::/48 /48 AS16509 arin authorises it
2620:116:800d::/48 /48 AS27281 arin wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
2620:116:8000::/40
RIR
ARIN
Country
πŸ‡ΊπŸ‡Έ US
Status
allocated
Allocated
2013-07-30

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-27 16:46:50Z origin change AS27281 β†’ AS16509 3800116509
2026-10-27 07:57:05Z origin change AS16509 β†’ AS27281 2950464612728127281
2026-10-27 07:54:08Z origin change AS27281 β†’ AS16509 295043939216509
2026-10-27 07:50:09Z origin change AS16509 β†’ AS27281 2950464612728127281
2026-10-27 07:49:20Z origin change AS27281 β†’ AS16509 295043939216509
2026-10-27 07:25:58Z origin change AS16509 β†’ AS27281 2950464612728127281
2026-10-23 06:30:29Z origin change AS27281 β†’ AS16509 295043939216509
2026-10-23 06:30:24Z origin change AS16509 β†’ AS27281 2950464612728127281