89.19.222.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS202799 SYSECT D.O.O. RPKI valid 34 37721202799 2026-09-18 2026-10-02
AS201097 KVANTA LLC RPKI valid 9 380012076435000201097 2026-10-02 2026-10-02

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
89.19.222.0/24 /24 AS201097 ripe wrong origin
89.19.222.0/24 /24 AS202799 ripe authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
89.19.208.0/20
RIR
RIPENCC
Country
🇷🇺 RU
Status
allocated
Allocated
2006-08-25

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-02 11:36:56Z origin change AS201097 → AS202799 46081221463731500202799
2026-10-02 11:11:31Z origin change AS202799 → AS201097 2950415935900235000201097