38.60.242.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS138915 Kaopu Cloud HK Limited RPKI valid 33 345497195138915 2026-09-18 2026-09-18
AS154177 LIGHT NODE LIMITED RPKI valid 8 24482138915154177 2026-09-18 2026-09-18

RPKI

4 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
38.60.128.0/17 /24 AS63139 arin wrong origin
38.60.128.0/17 /24 AS138915 arin authorises it
38.60.128.0/17 /24 AS140666 arin wrong origin
38.60.128.0/17 /24 AS154177 arin wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
38.0.0.0/8
RIR
ARIN
Country
πŸ‡ΊπŸ‡Έ US
Status
allocated
Allocated
1991-04-16

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
38.0.0.0/8 v4 AS174 Cogent Communications, LLC no ROA 42 34549174 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-18 15:45:52Z origin change AS138915 β†’ AS154177 14035773356138915154177154177154177154177
2026-09-18 07:14:24Z origin change AS154177 β†’ AS138915 573815030412997195138915138915138915138915