2a0a:1f40::/29 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS6079 Astound (fka. RCN) RPKI valid 35 345496079 2026-09-18 2026-09-23
AS3257 GTT Communications Inc. RPKI invalid 1 503003257 2026-09-18 2026-09-23

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
2a0a:1f40::/29 /29 AS6079 ripe authorises it
2a0a:1f40::/29 /29 AS397651 ripe wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
2a0a:1f40::/29
RIR
RIPENCC
Country
🇩🇪 DE
Status
allocated
Allocated
2017-02-27

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-21 11:14:46Z origin change AS3257 → AS6079 20236569396079
2026-09-21 11:10:20Z origin change AS6079 → AS3257 503003257