2a0f:4240::/29 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS52000 MIRhosting B.V. RPKI valid 25 3772152000 2026-09-18 2026-09-21
AS48729 ServerKing B.V. RPKI valid 9 3454990025704348729 2026-09-18 2026-09-21

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
2a0f:4240::/29 /29 AS48729 ripe wrong origin
2a0f:4240::/29 /29 AS52000 ripe authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
2a0f:4240::/29
RIR
RIPENCC
Country
🇷🇺 RU
Status
allocated
Allocated
2019-10-31

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-21 12:11:53Z origin change AS52000 → AS48729 216285828067629002570434872948729
2026-09-21 11:03:00Z origin change AS48729 → AS52000 503002914325752000
2026-09-21 05:32:37Z origin change AS52000 → AS48729 49432215510581159002570434872948729
2026-09-21 05:08:26Z origin change AS48729 → AS52000 21628582806762325752000
2026-09-20 04:45:13Z origin change AS52000 → AS48729 34800296329002570434872948729
2026-09-19 08:28:21Z origin change AS48729 → AS52000 29504693952000
2026-09-19 02:25:23Z origin change AS52000 → AS48729 49432215510581159002570434872948729
2026-09-18 07:11:02Z origin change AS48729 → AS52000 573814270842708129952000
2026-09-18 06:41:30Z origin change AS52000 → AS48729 49432215510581159002570434872948729