38.143.41.0/24 no ROA MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS174 Cogent Communications, LLC	no ROA	33	34549 174	2026-09-24	2026-10-28
AS21859 Zenlayer Inc	no ROA	7	55720 2914 21859	2026-09-18	2026-10-28

RPKI

No ROA covers this prefix

No ROA covers this prefix, so origin validation returns "unknown". That is not a fault; most of the table is still unsigned.

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 38.0.0.0/8
RIR: ARIN
Country: 🇺🇸 US
Status: allocated
Allocated: 1991-04-16

Less specific routes

Announced prefixes that contain this one

Prefix	Origin	RPKI	Peers	Sample path	First seen
38.0.0.0/8 v4	AS174 Cogent Communications, LLC	no ROA	41	34549 174	2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-10-28 02:46:19Z	origin change	AS21859 → AS174	49432 48362 1299 174
2026-10-27 14:45:28Z	origin change	AS174 → AS21859	55720 2914 21859
2026-10-24 13:09:21Z	origin change	AS21859 → AS174	17639 174
2026-10-23 20:05:26Z	origin change	AS174 → AS21859	24482 4229 21859
2026-10-21 17:22:37Z	origin change	AS21859 → AS174	49134 53356 6424 6461 174
2026-10-21 16:11:01Z	origin change	AS174 → AS21859	61218 6939 4229 21859
2026-10-15 18:23:26Z	origin change	AS21859 → AS174	37989 56300 132132 4657 174
2026-10-15 17:56:41Z	origin change	AS174 → AS21859	55720 2914 21859
2026-10-15 00:10:01Z	origin change	AS21859 → AS174	328840 327727 174