2801:1a:c800::/48 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS262589 SAMM (Internexa) RPKI valid 35 58057174262589 2026-09-18 2026-09-21
AS18678 INTERNEXA S.A. E.S.P RPKI valid 3 37721676226258918678 2026-09-18 2026-09-21

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
2801:1a:c800::/48 /64 AS18678 lacnic wrong origin
2801:1a:c800::/48 /64 AS262589 lacnic authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
2801:1a:c800::/48
RIR
LACNIC
Country
🇨🇴 CO
Status
assigned
Allocated
2019-12-26

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-21 12:19:12Z origin change AS18678 → AS262589 349275665518678262589
2026-09-21 12:18:47Z origin change AS262589 → AS18678 2162858280676226258918678
2026-09-21 11:09:40Z origin change AS262589 → AS18678 503003356676226258918678
2026-09-21 11:09:40Z origin change AS18678 → AS262589 50300174262589262589
2026-09-21 05:12:06Z origin change AS18678 → AS262589 202365693918678262589
2026-09-21 05:08:23Z origin change AS262589 → AS18678 2162858280676226258918678
2026-09-21 05:02:52Z origin change AS18678 → AS262589 202365693918678262589
2026-09-21 05:00:42Z origin change AS262589 → AS18678 2162858280676226258918678