2a0a:1f40::/29 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS6079 Astound (fka. RCN)	RPKI valid	33	34549 6079	2026-09-18	2026-11-08
AS3257 GTT Communications Inc.	RPKI invalid	1	50300 3257	2026-11-04	2026-11-08

RPKI

2 ROAs cover this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
2a0a:1f40::/29	/29	AS6079	ripe	authorises it
2a0a:1f40::/29	/29	AS397651	ripe	wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 2a0a:1f40::/29
RIR: RIPENCC
Country: 🇩🇪 DE
Status: allocated
Allocated: 2017-02-27

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-11-04 06:01:03Z	origin change	AS3257 → AS6079	14907 6939 6079
2026-11-04 02:18:22Z	origin change	AS6079 → AS3257	50300 3257
2026-11-03 06:36:22Z	origin change	AS3257 → AS6079	14907 6939 6079
2026-11-03 02:40:05Z	origin change	AS6079 → AS3257	50300 3257
2026-10-30 00:16:39Z	origin change	AS3257 → AS6079	38001 9002 6079
2026-10-30 00:14:37Z	origin change	AS6079 → AS3257	38001 3491 3257
2026-10-28 21:13:03Z	origin change	AS3257 → AS6079	49432 215510 31543 6939 6079
2026-10-28 19:06:17Z	origin change	AS6079 → AS3257	50300 3257