2a01:d0:8000::/33 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS42372 Netassist International EOOD	RPKI valid	32	34549 29632 42372	2026-09-18	2026-10-01
AS29632 Netassist International EOOD	RPKI invalid	2	34800 29632	2026-09-18	2026-10-01

RPKI

2 ROAs cover this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
2a01:d0:8000::/33	/33	AS42372	ripe	authorises it
2a01:d0::/29	/48	AS8772	ripe	wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 2a01:d0::/29
RIR: RIPENCC
Country: 🇬🇧 GB
Status: allocated
Allocated: 2006-05-05

Less specific routes

Announced prefixes that contain this one

Prefix	Origin	RPKI	Peers	Sample path	First seen
2a01:d0::/32 v6	AS8772 NetAssist LLC	RPKI valid	34	3333 8772	2026-09-18
2a01:d0::/29 v6	AS8772 NetAssist LLC	RPKI valid	34	37721 8772	2026-09-18

More specific routes

3 announced prefixes inside this one

Prefix	Origin	RPKI	Peers	First seen
2a01:d0:ffff::/48 v6	AS8772 NetAssist LLC	RPKI valid	29	2026-09-18
2a01:d0:ffff::/48 v6	AS29632 Netassist International EOOD	RPKI invalid	2	2026-09-18
2a01:d0:ffff::/48 v6	AS42372 Netassist International EOOD	RPKI valid	3	2026-10-01

Recorded changes

When	Change	Origin	Path
2026-09-27 20:29:17Z	origin change	AS29632 → AS42372	1403 577 6939 29632 42372
2026-09-27 13:11:43Z	origin change	AS42372 → AS29632	61218 29632
2026-09-27 06:42:19Z	origin change	AS29632 → AS42372	216285 8280 6762 9002 8772 42372
2026-09-26 23:04:53Z	origin change	AS42372 → AS29632	34800 29632
2026-09-26 23:02:03Z	origin change	AS29632 → AS42372	58057 34549 29632 42372
2026-09-26 05:29:04Z	origin change	AS42372 → AS29632	61218 29632