5.231.240.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS209866 Piotr Macha trading as Vort Cloud RPKI valid 41 345496206209866 2026-09-18 2026-10-02
AS19318 Interserver, Inc RPKI invalid 1 2265219318 2026-09-18 2026-10-02

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
5.231.240.0/24 /24 AS209866 ripe authorises it
5.230.0.0/15 /32 AS12586 ripe wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
5.230.0.0/15
RIR
RIPENCC
Country
🇩🇪 DE
Status
allocated
Allocated
2012-09-11

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
5.230.0.0/15 v4 AS12586 GHOSTnet GmbH RPKI valid 44 3480012586 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-01 10:26:10Z origin change AS19318 → AS209866 85229146206209866
2026-10-01 10:25:39Z origin change AS209866 → AS19318 2265219318