45.149.104.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS39351 31173 Services AB	RPKI valid	36	50304 39351	2026-09-18	2026-09-24
AS57138 Mullvad DNS (LOCIX LIMITED)	RPKI valid	5	17639 9009 57138	2026-09-18	2026-09-24

RPKI

3 ROAs cover this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
45.149.104.0/24	/24	AS9009	ripe	wrong origin
45.149.104.0/24	/24	AS39351	ripe	authorises it
45.149.104.0/24	/24	AS57138	ripe	wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 45.149.104.0/22
RIR: RIPENCC
Country: 🇳🇱 NL
Status: allocated
Allocated: 2019-09-04

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-09-24 12:14:41Z	origin change	AS39351 → AS57138	4608 7575 9009 57138
2026-09-23 01:31:26Z	origin change	AS57138 → AS39351	59919 9002 1299 39351
2026-09-22 22:44:30Z	origin change	AS39351 → AS57138	24482 9009 57138
2026-09-22 22:43:11Z	origin change	AS57138 → AS39351	24482 2914 1299 39351
2026-09-22 22:43:09Z	origin change	AS57138 → AS39351	57821 12586 3257 1299 39351
2026-09-22 22:43:09Z	origin change	AS39351 → AS57138	24482 2914 9009 57138
2026-09-22 19:31:52Z	origin change	AS39351 → AS57138	17639 9009 57138
2026-09-22 19:31:52Z	origin change	AS39351 → AS57138	57821 12586 3257 9009 57138
2026-09-22 19:31:46Z	origin change	AS57138 → AS39351	4608 1221 4637 1299 39351
2026-09-22 19:29:56Z	origin change	AS57138 → AS39351	24482 2914 1299 39351
2026-09-22 19:29:54Z	origin change	AS57138 → AS39351	57821 12586 3257 1299 39351
2026-09-22 19:29:53Z	origin change	AS39351 → AS57138	24482 2914 9009 57138
2026-09-22 19:18:01Z	origin change	AS39351 → AS57138	24482 9009 57138
2026-09-22 19:16:55Z	origin change	AS57138 → AS39351	57821 12586 3257 1299 39351
2026-09-22 16:19:09Z	origin change	AS39351 → AS57138	17639 9009 57138
2026-09-22 16:18:04Z	origin change	AS57138 → AS39351	24482 2914 1299 39351
2026-09-22 16:18:02Z	origin change	AS39351 → AS57138	24482 2914 9009 57138
2026-09-22 16:01:51Z	origin change	AS57138 → AS39351	216285 8280 6762 1299 39351
2026-09-22 15:54:58Z	origin change	AS39351 → AS57138	17639 9009 57138
2026-09-22 15:52:29Z	origin change	AS57138 → AS39351	24482 2914 1299 39351
2026-09-22 15:52:28Z	origin change	AS57138 → AS39351	57821 12586 3257 1299 39351
2026-09-22 15:52:28Z	origin change	AS39351 → AS57138	57821 12586 3257 2914 9009 57138
2026-09-22 15:33:04Z	origin change	AS39351 → AS57138	57821 12586 3257 9009 57138
2026-09-22 15:31:40Z	origin change	AS57138 → AS39351	24482 2914 1299 39351
2026-09-22 14:21:54Z	origin change	AS39351 → AS57138	17639 9009 57138
2026-09-22 14:20:01Z	origin change	AS57138 → AS39351	24482 2914 1299 39351
2026-09-22 14:20:00Z	origin change	AS39351 → AS57138	24482 2914 9009 57138
2026-09-22 10:41:42Z	origin change	AS57138 → AS39351	328840 327727 174 39351
2026-09-22 10:40:38Z	origin change	AS39351 → AS57138	57821 12586 3257 9009 57138
2026-09-22 10:33:50Z	origin change	AS57138 → AS39351	852 1299 39351
2026-09-22 10:24:52Z	origin change	AS39351 → AS57138	57821 12586 3257 9009 57138
2026-09-18 07:14:25Z	origin change	AS57138 → AS39351	57381 50304 39351