2a01:5b0:5::/48 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS50611 Knipp Medien und Kommunikation GmbH RPKI valid 35 380012047350611 2026-09-18 2026-11-06
AS48519 Knipp Medien und Kommunikation GmbH RPKI valid 1 5805717448519 2026-09-30 2026-11-06

RPKI

5 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
2a01:5b0:5::/48 /48 AS20546 ripe wrong origin
2a01:5b0:5::/48 /48 AS48519 ripe wrong origin
2a01:5b0:5::/48 /48 AS50611 ripe authorises it
2a01:5b0:4::/46 /48 AS20546 ripe wrong origin
2a01:5b0::/32 /48 AS8391 ripe wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
2a01:5b0::/32
RIR
RIPENCC
Country
🇩🇪 DE
Status
allocated
Allocated
2007-11-06

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
2a01:5b0::/32 v6 AS8391 Knipp Medien und Kommunikation GmbH RPKI valid 33 3454988818391 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-11-06 12:49:46Z origin change AS48519 → AS50611 2162858280676229142047350611
2026-11-06 12:49:45Z origin change AS50611 → AS48519 21628582801744851948519
2026-11-06 05:48:39Z origin change AS48519 → AS50611 2162858280676212992047350611
2026-11-06 05:48:37Z origin change AS50611 → AS48519 21628582801744851948519
2026-10-25 15:36:54Z origin change AS48519 → AS50611 3480029632646174732047350611
2026-10-24 14:01:41Z origin change AS50611 → AS48519 580571744851948519