2a00:1c3e:96::/47 RPKI valid MOAS

Announced by 3 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS50611 Knipp Medien und Kommunikation GmbH RPKI valid 22 580572047350611 2026-09-18 2026-09-19
AS48519 Knipp Medien und Kommunikation GmbH RPKI valid 9 3454948519 2026-09-18 2026-09-19
AS8561 Knipp Medien und Kommunikation GmbH RPKI valid 7 38001362368561 2026-09-18 2026-09-19

RPKI

3 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
2a00:1c3e:96::/47 /48 AS8561 ripe wrong origin
2a00:1c3e:96::/47 /48 AS48519 ripe wrong origin
2a00:1c3e:96::/47 /48 AS50611 ripe authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
2a00:1c38::/29
RIR
RIPENCC
Country
🇩🇪 DE
Status
allocated
Allocated
2010-03-01

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-19 15:51:06Z origin change AS8561 → AS50611 6939463712212047350611
2026-09-19 08:28:19Z origin change AS50611 → AS8561 295043939233891362368561
2026-09-19 08:28:16Z origin change AS48519 → AS50611 295046939463712212047350611
2026-09-19 02:26:02Z origin change AS50611 → AS48519 49432483624851948519
2026-09-19 02:25:22Z origin change AS48519 → AS50611 49432215510581156939463712212047350611
2026-09-19 01:26:38Z origin change AS50611 → AS48519 49432483624851948519
2026-09-18 07:11:03Z origin change AS48519 → AS50611 57381427086939463712212047350611
2026-09-18 06:41:39Z origin change AS50611 → AS48519 49432483624851948519