47.87.72.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS134963 Alibaba Cloud (Singapore) Private Limited RPKI valid 41 3454917984134963 2026-09-18 2026-09-19
AS45102 Alibaba (US) Technology Co., Ltd. RPKI valid 1 244822185945102 2026-09-18 2026-09-19

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
47.87.0.0/16 /24 AS45102 arin wrong origin
47.87.0.0/16 /24 AS134963 arin authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
47.80.0.0/13
RIR
ARIN
Country
🇺🇸 US
Status
allocated
Allocated
2016-03-17

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
47.87.64.0/19 v4 AS45102 Alibaba (US) Technology Co., Ltd. RPKI valid 44 3800145102 2026-09-18
47.87.64.0/18 v4 AS45102 Alibaba (US) Technology Co., Ltd. RPKI valid 42 37721645345102 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.