38.246.248.0/24 no ROA MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS979 NetLab Global	no ROA	15	34549 6453 979	2026-09-18	2026-10-15
AS1014 NetLab Global	no ROA	5	38001 2914 1014	2026-10-15	2026-10-15

RPKI

No ROA covers this prefix

No ROA covers this prefix, so origin validation returns "unknown". That is not a fault; most of the table is still unsigned.

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 38.0.0.0/8
RIR: ARIN
Country: 🇺🇸 US
Status: allocated
Allocated: 1991-04-16

Less specific routes

Announced prefixes that contain this one

Prefix	Origin	RPKI	Peers	Sample path	First seen
38.246.248.0/22 v4	AS979 NetLab Global	no ROA	2	49673 31500 31133 23764 216458 979	2026-09-18
38.246.248.0/21 v4	AS979 NetLab Global	no ROA	42	34549 2914 979	2026-09-18
38.0.0.0/8 v4	AS174 Cogent Communications, LLC	no ROA	43	34549 174	2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-10-15 08:02:22Z	origin change	AS979 → AS1014	4608 7575 2914 1014
2026-10-14 18:06:50Z	origin change	AS1014 → AS979	55720 4635 979
2026-10-14 16:14:07Z	origin change	AS979 → AS1014	55720 2914 1014
2026-10-14 16:08:49Z	origin change	AS1014 → AS979	202365 50673 6453 979 979 979 979
2026-10-14 16:08:29Z	origin change	AS979 → AS1014	55720 2914 1014
2026-10-14 16:08:23Z	origin change	AS979 → AS1014	37989 56300 132132 4657 2914 1014
2026-10-14 16:08:23Z	origin change	AS1014 → AS979	3333 1136 2914 979 979