38.76.176.0/21 no ROA MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS401701 cognetcloud INC no ROA 41 17639930440779401701 2026-09-18 2026-09-29
AS401696 cognetcloud INC no ROA 1 2448240779401696 2026-09-18 2026-09-29

RPKI

No ROA covers this prefix

No ROA covers this prefix, so origin validation returns "unknown". That is not a fault; most of the table is still unsigned.

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
38.0.0.0/8
RIR
ARIN
Country
🇺🇸 US
Status
allocated
Allocated
1991-04-16

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
38.0.0.0/8 v4 AS174 Cogent Communications, LLC no ROA 42 34549174 2026-09-18

More specific routes

3 announced prefixes inside this one

Prefix Origin RPKI Peers First seen
38.76.176.0/22 v4 AS401701 cognetcloud INC no ROA 9 2026-09-18
38.76.177.0/24 v4 AS401696 cognetcloud INC no ROA 42 2026-09-18
38.76.180.0/22 v4 AS401701 cognetcloud INC no ROA 9 2026-09-18