2a03:9d40:1300::/40 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS41095 IPTP LTD RPKI valid 34 2448241095 2026-09-18 2026-09-25
AS140951 IPTP Networks RPKI valid 1 38001140951 2026-09-18 2026-09-25

RPKI

3 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
2a03:9d40::/32 /48 AS41095 ripe authorises it
2a03:9d40::/32 /48 AS51601 ripe wrong origin
2a03:9d40::/32 /48 AS140951 ripe wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
2a03:9d40::/31
RIR
RIPENCC
Country
🇬🇧 GB
Status
allocated
Allocated
2012-12-13

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-18 05:35:37Z origin change AS140951 → AS41095 49432483629002349141095