66.22.96.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS198949 Radware RPKI valid 26 37721198949 2026-09-18 2026-09-26
AS48851 Radware Ltd RPKI valid 16 34549129919894948851 2026-09-18 2026-09-26

RPKI

3 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
66.22.0.0/17 /24 AS25773 arin wrong origin
66.22.0.0/17 /24 AS48851 arin wrong origin
66.22.0.0/17 /24 AS198949 arin authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
66.22.0.0/17
RIR
ARIN
Country
πŸ‡ΊπŸ‡Έ US
Status
allocated
Allocated
2020-04-13

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-26 02:35:19Z origin change AS48851 β†’ AS198949 3288403277271743491198949
2026-09-26 01:27:04Z origin change AS198949 β†’ AS48851 48185335619894948851
2026-09-24 04:13:27Z origin change AS48851 β†’ AS198949 49673204853491198949
2026-09-23 18:37:31Z origin change AS198949 β†’ AS48851 14907335619894948851
2026-09-23 16:27:07Z origin change AS48851 β†’ AS198949 3288403277271743491198949
2026-09-23 11:03:22Z origin change AS198949 β†’ AS48851 48185335619894948851
2026-09-21 11:23:59Z origin change AS48851 β†’ AS198949 5030032573491198949
2026-09-21 11:02:57Z origin change AS198949 β†’ AS48851 50300335619894948851
2026-09-18 14:03:14Z origin change AS48851 β†’ AS198949 3288403277271743491198949
2026-09-18 07:14:27Z origin change AS198949 β†’ AS48851 5738150304129919894948851