38.253.71.0/24 no ROA MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS18229 CtrlS	no ROA	1	24482 18229	2026-09-24	2026-10-01
AS134177 Rural Broadband Pvt. Ltd	no ROA	1	204092 20766 29169 35280 134177	2026-09-18	2026-10-01

RPKI

No ROA covers this prefix

No ROA covers this prefix, so origin validation returns "unknown". That is not a fault; most of the table is still unsigned.

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 38.0.0.0/8
RIR: ARIN
Country: 🇺🇸 US
Status: allocated
Allocated: 1991-04-16

Less specific routes

Announced prefixes that contain this one

Prefix	Origin	RPKI	Peers	Sample path	First seen
38.253.70.0/23 v4	AS134177 Rural Broadband Pvt. Ltd	no ROA	42	34549 9498 18229 134177	2026-09-18
38.0.0.0/8 v4	AS174 Cogent Communications, LLC	no ROA	42	34549 174	2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-09-26 15:35:59Z	origin change	AS18229 → AS134177	204092 20766 29169 35280 134177
2026-09-26 15:34:59Z	origin change	AS134177 → AS18229	24482 18229 18229
2026-09-24 10:08:24Z	origin change	AS18229 → AS134177	204092 20766 29169 35280 134177
2026-09-24 10:06:24Z	origin change	AS134177 → AS18229	204092 20766 29169 35280 18229
2026-09-24 10:03:37Z	origin change	AS18229 → AS134177	204092 20766 29169 35280 134177
2026-09-24 09:56:45Z	origin change	AS134177 → AS18229	204092 34019 29169 35280 18229
2026-09-24 09:56:45Z	origin change	AS18229 → AS134177	204092 20766 29169 35280 18229 134177 134177 134177 134177 134177
2026-09-24 09:56:44Z	origin change	AS134177 → AS18229	24482 18229