2a01:a980::/29 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS197524 Leonet GmbH	RPKI valid	35	34549 197524	2026-09-18	2026-09-22
AS212443 Leonet GmbH	RPKI valid	2	50304 1299 212443	2026-09-18	2026-09-22

RPKI

2 ROAs cover this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
2a01:a980::/29	/29	AS197524	ripe	authorises it
2a01:a980::/29	/48	AS212443	ripe	wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 2a01:a980::/29
RIR: RIPENCC
Country: 🇩🇪 DE
Status: allocated
Allocated: 2011-07-04

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

1 announced prefixes inside this one

Prefix	Origin	RPKI	Peers	First seen
2a01:a980:6::/48 v6	AS212443 Leonet GmbH	RPKI valid	35	2026-09-18

Recorded changes

When	Change	Origin	Path
2026-09-18 04:44:46Z	origin change	AS212443 → AS197524	6939 197524