87.236.209.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS51026 Dade Pardazi Mobinhost Co LTD RPKI valid 42 20897249666128804233720855551026 2026-10-13 2026-10-13
AS215708 Mobin Arvand Infrastructure Company LTD RPKI valid 2 349271299290494966625184215708 2026-09-18 2026-10-13

RPKI

4 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
87.236.209.0/24 /24 AS51026 ripe authorises it
87.236.209.0/24 /24 AS204544 ripe wrong origin
87.236.209.0/24 /24 AS208555 ripe wrong origin
87.236.209.0/24 /24 AS215708 ripe wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
87.236.208.0/21
RIR
RIPENCC
Country
🇮🇷 IR
Status
allocated
Allocated
2011-08-24

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-13 07:27:21Z origin change AS215708 → AS51026 244822904949666128804233720855551026