46.184.44.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS19905 Arbor Cloud RPKI valid 23 38001291419905 2026-09-18 2026-09-20
AS47794 Etihad GO Company For communications RPKI valid 20 3454947794 2026-09-18 2026-09-20

RPKI

5 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
46.184.44.0/24 /24 AS47794 ripe wrong origin
46.184.44.0/24 /24 AS48695 ripe wrong origin
46.184.40.0/21 /21 AS47794 ripe wrong origin
46.184.0.0/17 /24 AS19905 ripe authorises it
46.184.0.0/17 /24 AS47794 ripe wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
46.184.0.0/17
RIR
RIPENCC
Country
πŸ‡ΈπŸ‡¦ SA
Status
allocated
Allocated
2010-11-04

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
46.184.0.0/17 v4 AS47794 Etihad GO Company For communications RPKI valid 47 3454947794 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-18 14:02:37Z origin change AS19905 β†’ AS47794 3288403277271744779447794
2026-09-18 09:58:44Z origin change AS47794 β†’ AS19905 3492752025325719905