2804:3f8::/32 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS22381 SAMM (Megatelecom) RPKI valid 30 70181295622381 2026-09-18 2026-11-09
AS262589 SAMM (Internexa) RPKI valid 1 37721262589 2026-10-28 2026-11-09

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
2804:3f8::/32 /128 AS22381 lacnic authorises it
2804:3f8::/32 /128 AS262589 lacnic wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
2804:3f8::/32
RIR
LACNIC
Country
🇧🇷 BR
Status
allocated
Allocated
2011-02-24

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-28 11:48:30Z origin change AS262589 → AS22381 2040921989781741295622381
2026-10-28 08:03:09Z origin change AS22381 → AS262589 37721262589262589262589262589