66.167.166.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS3257 GTT Communications Inc. RPKI valid 37 345493257 2026-09-18 2026-09-25
AS9541 Cyber Internet Services (Pvt) Ltd. RPKI invalid 4 349279541 2026-09-18 2026-09-25

RPKI

1 ROA covers this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
66.167.166.0/24 /24 AS3257 arin authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
66.166.0.0/15
RIR
ARIN
Country
πŸ‡ΊπŸ‡Έ US
Status
allocated
Allocated
2001-09-10

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
66.166.0.0/15 v4 AS3257 GTT Communications Inc. no ROA 42 345493257 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-23 16:26:44Z origin change AS9541 β†’ AS3257 3288403277271743257
2026-09-23 11:02:47Z origin change AS3257 β†’ AS9541 44393580579541
2026-09-19 08:43:24Z origin change AS9541 β†’ AS3257 3288403277271743257
2026-09-19 08:30:27Z origin change AS3257 β†’ AS9541 29504574639541
2026-09-18 14:02:36Z origin change AS9541 β†’ AS3257 3288403277271743257
2026-09-18 08:56:43Z origin change AS3257 β†’ AS9541 443934017539541
2026-09-18 07:14:22Z origin change AS9541 β†’ AS3257 573815030412993257