94.190.132.0/22 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS51582 Cifrova Kabelna Korporacia EOOD	RPKI valid	43	37721 31287 51582	2026-10-20	2026-10-27
AS12796 Cifrova Kabelna Korporacia EOOD	RPKI valid	1	213241 9002 6461 47872 51582 12796	2026-09-18	2026-10-27

RPKI

2 ROAs cover this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
94.190.128.0/20	/24	AS12796	ripe	wrong origin
94.190.128.0/20	/24	AS51582	ripe	authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 94.190.128.0/20
RIR: RIPENCC
Country: 🇧🇬 BG
Status: allocated
Allocated: 2008-08-26

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-10-19 23:31:49Z	origin change	AS12796 → AS51582	4608 1221 4637 3356 47872 51582
2026-10-19 23:31:43Z	origin change	AS51582 → AS12796	202365 50673 174 47872 51582 12796
2026-10-19 23:31:10Z	origin change	AS51582 → AS12796	49432 48362 1764 5405 51582 12796
2026-10-19 23:31:10Z	origin change	AS12796 → AS51582	208972 31287 51582
2026-10-19 23:31:10Z	origin change	AS12796 → AS51582	49432 48362 1764 5405 31287 51582