206208 looking glass

37.202.56.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS215336 Hovedkvarteret IT AS RPKI valid 43 50304215336 2026-09-18 2026-10-09
AS64622 RPKI invalid 1 612925030421533664622 2026-09-18 2026-10-09

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
37.202.56.0/24 /24 AS215336 ripe authorises it
37.202.56.0/21 /24 AS50304 ripe wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
37.202.56.0/21
RIR
RIPENCC
Country
🇳🇴 NO
Status
allocated
Allocated
2012-03-23

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
37.202.56.0/21 v4 AS50304 Blix Solutions AS RPKI valid 43 3454950304 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-05 10:14:39Z origin change AS64622 → AS215336 50304215336
2026-10-05 10:14:37Z origin change AS215336 → AS64622 612925030421533664622
2026-10-05 10:13:38Z origin change AS65001 → AS215336 50304215336
2026-10-05 10:13:36Z origin change AS215336 → AS65001 61292503042153366462265001