38.103.94.0/24 no ROA MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS174 Cogent Communications, LLC	no ROA	39	34549 174	2026-09-18	2026-10-15
AS53355 Concordia University Wisconsin	no ROA	2	61218 6939 18683 53355	2026-09-30	2026-10-15

RPKI

No ROA covers this prefix

No ROA covers this prefix, so origin validation returns "unknown". That is not a fault; most of the table is still unsigned.

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 38.0.0.0/8
RIR: ARIN
Country: 🇺🇸 US
Status: allocated
Allocated: 1991-04-16

Less specific routes

Announced prefixes that contain this one

Prefix	Origin	RPKI	Peers	Sample path	First seen
38.0.0.0/8 v4	AS174 Cogent Communications, LLC	no ROA	42	34549 174	2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-10-08 22:33:57Z	origin change	AS53355 → AS174	13830 971 174
2026-10-08 17:55:16Z	origin change	AS174 → AS53355	61218 6939 18683 53355 53355 53355
2026-10-03 05:55:57Z	origin change	AS53355 → AS174	55720 3257 174
2026-10-03 05:54:22Z	origin change	AS174 → AS53355	55720 2914 18683 53355 53355 53355
2026-10-03 05:53:22Z	origin change	AS53355 → AS174	55720 3257 174
2026-10-03 05:52:05Z	origin change	AS174 → AS53355	55720 2914 18683 53355 53355 53355
2026-10-03 05:17:38Z	origin change	AS53355 → AS174	55720 3257 174
2026-10-03 05:15:53Z	origin change	AS174 → AS53355	55720 2914 18683 53355 53355 53355
2026-10-02 23:07:15Z	origin change	AS53355 → AS174	55720 3257 174
2026-10-02 23:07:07Z	origin change	AS174 → AS53355	61218 6939 18683 53355 53355 53355