2a00:4961::/32 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS6797 GlobalConnect AB	RPKI valid	31	34549 6797	2026-09-18	2026-10-04
AS31027 GlobalConnect A/S	RPKI valid	2	3333 31027	2026-09-18	2026-10-04

RPKI

2 ROAs cover this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
2a00:4961::/32	/32	AS6797	ripe	authorises it
2a00:4961::/32	/32	AS31027	ripe	wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 2a00:4960::/29
RIR: RIPENCC
Country: 🇩🇪 DE
Status: allocated
Allocated: 2013-02-25

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-10-04 13:04:11Z	origin change	AS31027 → AS6797	38001 12552 6797
2026-10-04 12:03:46Z	origin change	AS6797 → AS31027	38001 9002 31027
2026-10-01 07:20:14Z	origin change	AS31027 → AS6797	204092 34019 6797
2026-10-01 03:49:55Z	origin change	AS6797 → AS31027	58057 6939 31027
2026-10-01 03:39:02Z	origin change	AS31027 → AS6797	34800 29632 31027 6797
2026-10-01 03:39:01Z	origin change	AS6797 → AS31027	34800 29632 9002 31027
2026-09-29 03:40:45Z	origin change	AS31027 → AS6797	34800 29632 31027 6797
2026-09-29 03:40:23Z	origin change	AS6797 → AS31027	34800 29632 9002 31027
2026-09-28 20:10:09Z	origin change	AS31027 → AS6797	34800 29632 31027 6797
2026-09-28 20:09:37Z	origin change	AS6797 → AS31027	34800 29632 9002 31027
2026-09-25 05:34:48Z	origin change	AS31027 → AS6797	38001 12552 31027 6797
2026-09-25 03:48:49Z	origin change	AS6797 → AS31027	38001 9002 31027