[{"id":"0000-224","severity":"Medium","category":"Some announcements not covered","asn":224,"name":"Sikt - Kunnskapssektorens Tjenesteleverandor","count":5,"objects":"129.240.0.0/15, 185.76.84.0/22, 192.146.238.0/23, 128.39.0.0/16, 151.157.0.0/16","detail":"5 of 19 announcements from AS224 have no covering ROA (NotFound).","v4_24s":4105},{"id":"0001-224","severity":"Low","category":"ROA for unannounced space","asn":224,"name":"Sikt - Kunnskapssektorens Tjenesteleverandor","count":5,"objects":"109.105.125.64/26-26, 109.105.127.128/26-26, 2001:948:61:1::/64-64, 2001:948:62:3::/64-64, 2001:948:62:4::/64-64","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":4105},{"id":"0002-2116","severity":"Medium","category":"Some announcements not covered","asn":2116,"name":"GLOBALCONNECT AS","count":58,"objects":"139.98.0.0/16, 132.150.0.0/16, 139.164.192.0/18, 212.89.60.0/24, 212.89.51.0/24, 139.98.2.0/24, 185.59.212.0/22, 212.89.55.0/24 (+50 more)","detail":"58 of 190 announcements from AS2116 have no covering ROA (NotFound).","v4_24s":7065},{"id":"0003-2116","severity":"Medium","category":"Loose maxLength (IPv4)","asn":2116,"name":"GLOBALCONNECT AS","count":1,"objects":"62.176.192.0/19→/21 (2 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":7065},{"id":"0004-2116","severity":"Low","category":"Loose maxLength (IPv6)","asn":2116,"name":"GLOBALCONNECT AS","count":1,"objects":"2a13:6200::/29→/48 (9 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":7065},{"id":"0005-2116","severity":"Medium","category":"ROA for space another AS originates","asn":2116,"name":"GLOBALCONNECT AS","count":5,"objects":"37.18.64.0/21-24 (now AS206260), 46.227.192.0/21-24 (now AS206260), 77.241.96.0/20-20 (now AS8896), 185.137.4.0/22-24 (now AS206260), 185.246.80.0/22-22 (now AS25400)","detail":"ROAs authorise AS2116 for space that another Norwegian AS announces — a typical leftover after a migration. AS2116, or anyone forging it, stays valid there.","v4_24s":7065},{"id":"0006-2116","severity":"Low","category":"ROA for unannounced space","asn":2116,"name":"GLOBALCONNECT AS","count":3,"objects":"77.223.160.0/24-24, 185.105.9.0/24-24, 2001:67c:2dc::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":7065},{"id":"0007-2119","severity":"Medium","category":"Some announcements not covered","asn":2119,"name":"Telenor Norge AS","count":33,"objects":"78.31.80.0/21, 137.93.0.0/16, 157.237.0.0/16, 91.208.24.0/24, 171.25.160.0/22, 150.106.0.0/16, 195.69.0.0/18, 185.208.92.0/22 (+25 more)","detail":"33 of 112 announcements from AS2119 have no covering ROA (NotFound).","v4_24s":16591},{"id":"0008-2119","severity":"Medium","category":"Loose maxLength (IPv4)","asn":2119,"name":"Telenor Norge AS","count":1,"objects":"185.136.128.0/22→/24 (1 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":16591},{"id":"0009-2119","severity":"Low","category":"Loose maxLength (IPv6)","asn":2119,"name":"Telenor Norge AS","count":1,"objects":"2a03:a4e0::/32→/48 (1 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":16591},{"id":"0010-2119","severity":"Medium","category":"ROA for space another AS originates","asn":2119,"name":"Telenor Norge AS","count":1,"objects":"193.161.208.0/22-22 (now AS29695)","detail":"ROAs authorise AS2119 for space that another Norwegian AS announces — a typical leftover after a migration. AS2119, or anyone forging it, stays valid there.","v4_24s":16591},{"id":"0011-2119","severity":"Low","category":"ROA for unannounced space","asn":2119,"name":"Telenor Norge AS","count":16,"objects":"80.89.160.0/20-20, 80.94.208.0/20-20, 82.193.160.0/19-19, 88.83.128.0/19-19, 185.102.32.0/22-22, 192.121.21.0/24-24, 192.165.86.0/24-24, 193.241.241.0/24-24 (+8 more)","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":16591},{"id":"0012-5377","severity":"High","category":"Wide maxLength (IPv4)","asn":5377,"name":"Marlink AS","count":1,"objects":"193.220.240.0/20→/24 (0 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS5377 validates and wins on longest match (RFC 9319).","v4_24s":451},{"id":"0013-5377","severity":"Medium","category":"Loose maxLength (IPv4)","asn":5377,"name":"Marlink AS","count":5,"objects":"77.70.176.0/22→/24 (0 announced), 77.70.184.0/21→/24 (0 announced), 77.70.252.0/23→/24 (1 announced), 193.220.174.0/23→/24 (0 announced), 216.9.228.0/22→/24 (1 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":451},{"id":"0014-5377","severity":"Medium","category":"ROA for space another AS originates","asn":5377,"name":"Marlink AS","count":1,"objects":"204.8.41.0/24-24 (now AS44431)","detail":"ROAs authorise AS5377 for space that another Norwegian AS announces — a typical leftover after a migration. AS5377, or anyone forging it, stays valid there.","v4_24s":451},{"id":"0015-5619","severity":"Medium","category":"ROA for space another AS originates","asn":5619,"name":"Tieto Norway AS","count":1,"objects":"2a00:97c0::/32-32 (now AS13243)","detail":"ROAs authorise AS5619 for space that another Norwegian AS announces — a typical leftover after a migration. AS5619, or anyone forging it, stays valid there.","v4_24s":4812},{"id":"0016-5619","severity":"Low","category":"ROA for unannounced space","asn":5619,"name":"Tieto Norway AS","count":2,"objects":"90.182.87.0/24-24, 90.182.220.0/24-24","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":4812},{"id":"0017-5619","severity":"Low","category":"Observed neighbour not in ASPA","asn":5619,"name":"Tieto Norway AS","count":1,"objects":"AS6939 (seen by 106 RIS peers)","detail":"RIS sees these ASNs directly upstream-side of this AS but they are not in its ASPA. Fine if they are peers; if any is a transit provider, add it or routes via it will fail ASPA checks.","v4_24s":4812},{"id":"0018-6829","severity":"Medium","category":"Routed with no ROA","asn":6829,"name":"Vestland Fylkeskommune","count":3,"objects":"93.94.15.0/24, 2a03:3260::/32, 93.94.8.0/21","detail":"All 3 announcements from AS6829 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":8},{"id":"0019-8542","severity":"Medium","category":"Some announcements not covered","asn":8542,"name":"Eviny Fiber AS","count":5,"objects":"193.161.64.0/20, 193.161.80.0/22, 185.136.48.0/22, 192.190.190.0/24, 192.190.192.0/24","detail":"5 of 13 announcements from AS8542 have no covering ROA (NotFound).","v4_24s":514},{"id":"0020-8542","severity":"Medium","category":"ROA for space another AS originates","asn":8542,"name":"Eviny Fiber AS","count":3,"objects":"185.81.12.0/22-22 (now AS57829), 193.28.236.0/24-24 (now AS30950), 2001:67c:324::/48-48 (now AS30950)","detail":"ROAs authorise AS8542 for space that another Norwegian AS announces — a typical leftover after a migration. AS8542, or anyone forging it, stays valid there.","v4_24s":514},{"id":"0021-8542","severity":"Low","category":"ROA for unannounced space","asn":8542,"name":"Eviny Fiber AS","count":1,"objects":"2a00:ce60::/32-32","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":514},{"id":"0022-8542","severity":"Info","category":"ASPA provider not observed","asn":8542,"name":"Eviny Fiber AS","count":1,"objects":"AS8075","detail":"Listed as a provider but not seen as a neighbour in RIS today. Fine for backup links; otherwise remove stale entries.","v4_24s":514},{"id":"0023-8786","severity":"Low","category":"ROA for unannounced space","asn":8786,"name":"Telenor Norge AS","count":4,"objects":"154.84.32.0/21-24, 154.84.40.0/21-24, 154.84.48.0/21-24, 154.84.56.0/21-24","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0024-8896","severity":"Medium","category":"Some announcements not covered","asn":8896,"name":"GLOBALCONNECT AS","count":4,"objects":"185.156.112.0/24, 45.90.36.0/24, 185.156.114.0/24, 45.90.37.0/24","detail":"4 of 25 announcements from AS8896 have no covering ROA (NotFound).","v4_24s":107},{"id":"0025-8896","severity":"Low","category":"ROA for unannounced space","asn":8896,"name":"GLOBALCONNECT AS","count":1,"objects":"91.223.85.0/24-24","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":107},{"id":"0026-9207","severity":"Medium","category":"ROA for space another AS originates","asn":9207,"name":"Marlink AS","count":1,"objects":"193.220.128.0/24-32 (now AS5377)","detail":"ROAs authorise AS9207 for space that another Norwegian AS announces — a typical leftover after a migration. AS9207, or anyone forging it, stays valid there.","v4_24s":0},{"id":"0027-12929","severity":"Medium","category":"ROA for space another AS originates","asn":12929,"name":"Telia Norge AS","count":1,"objects":"2001:2020::/31-32 (now AS25400)","detail":"ROAs authorise AS12929 for space that another Norwegian AS announces — a typical leftover after a migration. AS12929, or anyone forging it, stays valid there.","v4_24s":0},{"id":"0028-12996","severity":"Medium","category":"Loose maxLength (IPv4)","asn":12996,"name":"Domeneshop AS","count":3,"objects":"151.249.120.0/21→/24 (7 announced), 185.201.124.0/22→/24 (1 announced), 194.63.248.0/21→/24 (9 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":27},{"id":"0029-12996","severity":"Low","category":"Loose maxLength (IPv6)","asn":12996,"name":"Domeneshop AS","count":1,"objects":"2a01:5b40::/32→/48 (6 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":27},{"id":"0030-13243","severity":"Low","category":"ROA for unannounced space","asn":13243,"name":"Tieto Norway AS","count":1,"objects":"185.226.100.0/22-22","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":218},{"id":"0031-16185","severity":"Medium","category":"Routed with no ROA","asn":16185,"name":"MODUM KABEL-TV AS","count":3,"objects":"185.166.44.0/22, 217.31.96.0/20, 82.146.64.0/19","detail":"All 3 announcements from AS16185 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":52},{"id":"0032-16186","severity":"Low","category":"Observed neighbour not in ASPA","asn":16186,"name":"IP Group AS","count":5,"objects":"AS6939 (seen by 90 RIS peers), AS33891 (seen by 13 RIS peers), AS39351 (seen by 2 RIS peers), AS42708 (seen by 2 RIS peers), AS56655 (seen by 2 RIS peers)","detail":"RIS sees these ASNs directly upstream-side of this AS but they are not in its ASPA. Fine if they are peers; if any is a transit provider, add it or routes via it will fail ASPA checks.","v4_24s":61},{"id":"0033-16186","severity":"Info","category":"ASPA provider not observed","asn":16186,"name":"IP Group AS","count":1,"objects":"AS50304","detail":"Listed as a provider but not seen as a neighbour in RIS today. Fine for backup links; otherwise remove stale entries.","v4_24s":61},{"id":"0034-20741","severity":"Medium","category":"Routed with no ROA","asn":20741,"name":"Administrator Systems AS","count":4,"objects":"2a02:27d8::/32, 46.17.16.0/21, 185.190.168.0/22, 185.11.180.0/24","detail":"All 4 announcements from AS20741 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":13},{"id":"0035-21067","severity":"Low","category":"ROA for unannounced space","asn":21067,"name":"KANDU","count":2,"objects":"185.110.148.0/22-24, 2a06:5840::/29-32","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0036-21119","severity":"High","category":"Wide maxLength (IPv4)","asn":21119,"name":"iteam Braathe AS","count":6,"objects":"80.86.128.0/20→/24 (0 announced), 82.117.32.0/20→/24 (0 announced), 82.117.32.0/19→/24 (1 announced), 89.105.32.0/20→/24 (0 announced), 213.179.48.0/20→/24 (0 announced), 217.65.224.0/20→/24 (0 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS21119 validates and wins on longest match (RFC 9319).","v4_24s":136},{"id":"0037-21119","severity":"Medium","category":"Loose maxLength (IPv4)","asn":21119,"name":"iteam Braathe AS","count":7,"objects":"5.226.160.0/21→/24 (0 announced), 46.16.48.0/21→/24 (0 announced), 89.233.96.0/21→/24 (0 announced), 93.187.80.0/21→/24 (0 announced), 185.36.28.0/22→/24 (0 announced), 193.169.42.0/23→/24 (0 announced), 193.201.74.0/23→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":136},{"id":"0038-21119","severity":"Low","category":"Loose maxLength (IPv6)","asn":21119,"name":"iteam Braathe AS","count":3,"objects":"2001:a90::/32→/64 (0 announced), 2a01:b8c0::/32→/64 (0 announced), 2a03:6240::/32→/64 (0 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":136},{"id":"0039-21171","severity":"Low","category":"ROA for unannounced space","asn":21171,"name":"Schibsted Media AS","count":2,"objects":"185.227.124.0/22-22, 2a01:9900::/32-32","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":272},{"id":"0040-21293","severity":"Medium","category":"Loose maxLength (IPv4)","asn":21293,"name":"Norsk Rikskringkasting AS","count":5,"objects":"160.67.196.0/22→/24 (0 announced), 160.67.200.0/21→/24 (0 announced), 160.67.208.0/21→/24 (0 announced), 160.67.248.0/22→/24 (0 announced), 185.97.188.0/22→/24 (2 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":516},{"id":"0041-21293","severity":"Low","category":"Loose maxLength (IPv6)","asn":21293,"name":"Norsk Rikskringkasting AS","count":1,"objects":"2a00:f980::/32→/48 (3 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":516},{"id":"0042-21331","severity":"Medium","category":"Routed with no ROA","asn":21331,"name":"Oslo kommune Digitaliseringsetaten","count":3,"objects":"171.23.0.0/16, 2a0c:a680::/29, 171.23.128.0/17","detail":"All 3 announcements from AS21331 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":256},{"id":"0043-24039","severity":"Medium","category":"Loose maxLength (IPv4)","asn":24039,"name":"Marlink AS","count":1,"objects":"103.193.208.0/22→/24 (1 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":5},{"id":"0044-24039","severity":"Info","category":"ASPA provider not observed","asn":24039,"name":"Marlink AS","count":2,"objects":"AS2764, AS7606","detail":"Listed as a provider but not seen as a neighbour in RIS today. Fine for backup links; otherwise remove stale entries.","v4_24s":5},{"id":"0045-25148","severity":"Medium","category":"Some announcements not covered","asn":25148,"name":"Orange Business Digital Norway AS","count":1,"objects":"195.189.116.0/22","detail":"1 of 10 announcements from AS25148 have no covering ROA (NotFound).","v4_24s":94},{"id":"0046-25148","severity":"Low","category":"ROA for unannounced space","asn":25148,"name":"Orange Business Digital Norway AS","count":1,"objects":"195.28.172.0/23-23","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":94},{"id":"0047-25225","severity":"Medium","category":"Routed with no ROA","asn":25225,"name":"CGI Norge AS","count":4,"objects":"2a13:5900::/29, 194.150.212.0/23, 193.0.252.0/24, 178.248.120.0/21","detail":"All 4 announcements from AS25225 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":11},{"id":"0048-25400","severity":"Medium","category":"Some announcements not covered","asn":25400,"name":"Telia Norge AS","count":48,"objects":"159.171.250.0/23, 137.217.224.0/24, 159.130.8.0/22, 144.177.61.0/24, 159.171.64.0/21, 163.174.114.0/24, 159.171.160.0/20, 159.171.240.0/21 (+40 more)","detail":"48 of 131 announcements from AS25400 have no covering ROA (NotFound).","v4_24s":6124},{"id":"0049-25400","severity":"High","category":"Wide maxLength (IPv4)","asn":25400,"name":"Telia Norge AS","count":2,"objects":"78.156.0.0/19→/24 (0 announced), 84.208.0.0/13→/17 (20 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS25400 validates and wins on longest match (RFC 9319).","v4_24s":6124},{"id":"0050-25400","severity":"Medium","category":"ROA for space another AS originates","asn":25400,"name":"Telia Norge AS","count":8,"objects":"46.249.224.0/19-19 (now AS49455), 82.194.192.0/19-19 (now AS49455), 109.108.192.0/19-19 (now AS49455), 158.58.152.0/23-23 (now AS198309), 158.58.152.0/21-21 (now AS198309), 185.81.14.0/23-23 (now AS57829), 188.113.64.0/18-18 (now AS49455), 2a00:a540::/32-32 (now AS198309)","detail":"ROAs authorise AS25400 for space that another Norwegian AS announces — a typical leftover after a migration. AS25400, or anyone forging it, stays valid there.","v4_24s":6124},{"id":"0051-25400","severity":"Low","category":"ROA for unannounced space","asn":25400,"name":"Telia Norge AS","count":2,"objects":"176.74.208.0/21-21, 185.97.84.0/22-22","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":6124},{"id":"0052-25400","severity":"Low","category":"Observed neighbour not in ASPA","asn":25400,"name":"Telia Norge AS","count":3,"objects":"AS6939 (seen by 976 RIS peers), AS42708 (seen by 31 RIS peers), AS50304 (seen by 24 RIS peers)","detail":"RIS sees these ASNs directly upstream-side of this AS but they are not in its ASPA. Fine if they are peers; if any is a transit provider, add it or routes via it will fail ASPA checks.","v4_24s":6124},{"id":"0053-25400","severity":"Info","category":"ASPA provider not observed","asn":25400,"name":"Telia Norge AS","count":1,"objects":"AS544","detail":"Listed as a provider but not seen as a neighbour in RIS today. Fine for backup links; otherwise remove stale entries.","v4_24s":6124},{"id":"0054-28795","severity":"Low","category":"ROA for unannounced space","asn":28795,"name":"ELKEM AS","count":1,"objects":"194.247.180.0/23-24","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":256},{"id":"0055-28824","severity":"High","category":"Wide maxLength (IPv4)","asn":28824,"name":"EMP SECURE AS","count":2,"objects":"46.250.192.0/19→/24 (0 announced), 213.162.224.0/19→/24 (0 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS28824 validates and wins on longest match (RFC 9319).","v4_24s":68},{"id":"0056-28824","severity":"Medium","category":"Loose maxLength (IPv4)","asn":28824,"name":"EMP SECURE AS","count":1,"objects":"185.115.244.0/22→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":68},{"id":"0057-28824","severity":"Low","category":"Loose maxLength (IPv6)","asn":28824,"name":"EMP SECURE AS","count":1,"objects":"2001:4da8::/32→/48 (0 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":68},{"id":"0058-29300","severity":"Low","category":"ROA for unannounced space","asn":29300,"name":"BAHNHOF AS","count":1,"objects":"2a02:2828::/32-32","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":33},{"id":"0059-29300","severity":"Info","category":"ASPA provider not observed","asn":29300,"name":"BAHNHOF AS","count":1,"objects":"AS49788","detail":"Listed as a provider but not seen as a neighbour in RIS today. Fine for backup links; otherwise remove stale entries.","v4_24s":33},{"id":"0060-29479","severity":"Medium","category":"Some announcements not covered","asn":29479,"name":"Transdata AS","count":2,"objects":"193.105.77.0/24, 195.95.236.0/24","detail":"2 of 15 announcements from AS29479 have no covering ROA (NotFound).","v4_24s":16},{"id":"0061-29479","severity":"Low","category":"ROA for unannounced space","asn":29479,"name":"Transdata AS","count":1,"objects":"2a01:8dc0:110::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":16},{"id":"0062-29486","severity":"Medium","category":"ROA for space another AS originates","asn":29486,"name":"Webhuset AS","count":3,"objects":"31.24.128.0/21-21 (now AS39783), 81.27.32.0/20-20 (now AS39783), 178.21.128.0/21-21 (now AS39783)","detail":"ROAs authorise AS29486 for space that another Norwegian AS announces — a typical leftover after a migration. AS29486, or anyone forging it, stays valid there.","v4_24s":0},{"id":"0063-29486","severity":"Low","category":"ROA for unannounced space","asn":29486,"name":"Webhuset AS","count":1,"objects":"2a00:1c90::/32-32","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0064-29492","severity":"Medium","category":"Some announcements not covered","asn":29492,"name":"EIDSIVA DIGITAL AS","count":1,"objects":"46.226.24.0/21","detail":"1 of 11 announcements from AS29492 have no covering ROA (NotFound).","v4_24s":232},{"id":"0065-29607","severity":"Medium","category":"Some announcements not covered","asn":29607,"name":"Henning Solberg","count":1,"objects":"193.201.220.0/22","detail":"1 of 2 announcements from AS29607 have no covering ROA (NotFound).","v4_24s":4},{"id":"0066-29695","severity":"Medium","category":"Some announcements not covered","asn":29695,"name":"Lyse Tele AS","count":34,"objects":"152.93.0.0/16, 159.253.8.0/22, 185.222.84.0/22, 159.253.12.0/24, 193.161.216.0/22, 193.36.150.0/24, 2a00:dec0::/32, 159.171.77.0/24 (+26 more)","detail":"34 of 76 announcements from AS29695 have no covering ROA (NotFound).","v4_24s":4287},{"id":"0067-29695","severity":"High","category":"Wide maxLength (IPv4)","asn":29695,"name":"Lyse Tele AS","count":5,"objects":"79.160.0.0/15→/24 (2 announced), 81.166.0.0/15→/24 (2 announced), 84.234.128.0/17→/24 (2 announced), 92.220.0.0/15→/21 (1 announced), 109.247.0.0/16→/21 (1 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS29695 validates and wins on longest match (RFC 9319).","v4_24s":4287},{"id":"0068-29695","severity":"Low","category":"ROA for unannounced space","asn":29695,"name":"Lyse Tele AS","count":4,"objects":"185.10.28.0/22-22, 185.65.152.0/22-22, 185.131.200.0/24-24, 194.182.224.0/21-21","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":4287},{"id":"0069-30737","severity":"Medium","category":"Routed with no ROA","asn":30737,"name":"Safety Computing AS","count":1,"objects":"82.199.0.0/19","detail":"All 1 announcements from AS30737 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":32},{"id":"0070-31020","severity":"Low","category":"ROA for unannounced space","asn":31020,"name":"NTE TELEKOM AS","count":1,"objects":"31.186.88.0/21-21","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0071-31096","severity":"Medium","category":"Routed with no ROA","asn":31096,"name":"Bandit Holding AS","count":1,"objects":"193.22.250.0/24","detail":"All 1 announcements from AS31096 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0072-31169","severity":"Medium","category":"Some announcements not covered","asn":31169,"name":"Sognenett AS","count":1,"objects":"78.41.44.0/22","detail":"1 of 23 announcements from AS31169 have no covering ROA (NotFound).","v4_24s":68},{"id":"0073-31264","severity":"Medium","category":"Routed with no ROA","asn":31264,"name":"ADVANIA NORGE AS","count":12,"objects":"2a02:2838::/32, 176.221.89.0/24, 185.7.138.0/23, 95.128.104.0/21, 185.120.100.0/22, 185.80.60.0/22, 176.221.88.0/21, 2a06:9900::/29 (+4 more)","detail":"All 12 announcements from AS31264 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":49},{"id":"0074-31726","severity":"Medium","category":"Some announcements not covered","asn":31726,"name":"Telefiber AS","count":2,"objects":"185.155.212.0/22, 185.149.16.0/22","detail":"2 of 20 announcements from AS31726 have no covering ROA (NotFound).","v4_24s":124},{"id":"0075-34100","severity":"Medium","category":"Routed with no ROA","asn":34100,"name":"Stortinget","count":2,"objects":"2a00:ed80::/32, 85.88.64.0/19","detail":"All 2 announcements from AS34100 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":32},{"id":"0076-34822","severity":"Medium","category":"Routed with no ROA","asn":34822,"name":"NEP Norway AS","count":3,"objects":"2a05:6dc0::/29, 193.58.241.0/24, 185.78.228.0/22","detail":"All 3 announcements from AS34822 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":5},{"id":"0077-34989","severity":"Medium","category":"Some announcements not covered","asn":34989,"name":"ServeTheWorld AS","count":2,"objects":"185.126.36.0/22, 185.117.97.0/24","detail":"2 of 32 announcements from AS34989 have no covering ROA (NotFound).","v4_24s":74},{"id":"0078-34989","severity":"Low","category":"ROA for unannounced space","asn":34989,"name":"ServeTheWorld AS","count":11,"objects":"2.27.117.0/24-24, 31.56.239.0/24-24, 31.77.249.0/24-24, 82.152.122.0/24-24, 85.31.46.0/24-24, 87.192.48.0/23-23, 104.145.209.0/24-24, 143.20.11.0/24-24 (+3 more)","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":74},{"id":"0079-35120","severity":"Low","category":"ROA for unannounced space","asn":35120,"name":"WORKING GROUP TWO AS","count":1,"objects":"45.8.8.0/24-24","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":4},{"id":"0080-38990","severity":"Medium","category":"Routed with no ROA","asn":38990,"name":"Agnitio AS","count":4,"objects":"2a06:500::/29, 194.88.144.0/23, 185.157.56.0/22, 2001:678:138::/48","detail":"All 4 announcements from AS38990 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":6},{"id":"0081-39029","severity":"Low","category":"Observed neighbour not in ASPA","asn":39029,"name":"Redpill Linpro AS","count":4,"objects":"AS33891 (seen by 4 RIS peers), AS50304 (seen by 2 RIS peers), AS39351 (seen by 1 RIS peers), AS56655 (seen by 1 RIS peers)","detail":"RIS sees these ASNs directly upstream-side of this AS but they are not in its ASPA. Fine if they are peers; if any is a transit provider, add it or routes via it will fail ASPA checks.","v4_24s":37},{"id":"0082-39236","severity":"Medium","category":"Routed with no ROA","asn":39236,"name":"Nedre Romerike vann- og avlopsselskap IKS","count":2,"objects":"77.74.220.0/24, 2001:678:7cc::/48","detail":"All 2 announcements from AS39236 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0083-39832","severity":"High","category":"Wide maxLength (IPv4)","asn":39832,"name":"Opera Norway AS","count":1,"objects":"82.145.208.0/20→/24 (6 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS39832 validates and wins on longest match (RFC 9319).","v4_24s":40},{"id":"0084-39832","severity":"Medium","category":"Loose maxLength (IPv4)","asn":39832,"name":"Opera Norway AS","count":4,"objects":"37.228.104.0/21→/24 (0 announced), 91.203.96.0/22→/24 (3 announced), 141.0.8.0/21→/24 (3 announced), 185.26.180.0/22→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":40},{"id":"0085-39832","severity":"Low","category":"Loose maxLength (IPv6)","asn":39832,"name":"Opera Norway AS","count":1,"objects":"2001:4c28::/32→/48 (5 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":40},{"id":"0086-41049","severity":"Medium","category":"Routed with no ROA","asn":41049,"name":"Xait AS","count":3,"objects":"185.15.153.0/24, 185.15.152.0/24, 185.15.154.0/23","detail":"All 3 announcements from AS41049 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0087-41164","severity":"Medium","category":"ROA for space another AS originates","asn":41164,"name":"Telia Norge AS","count":1,"objects":"109.108.216.0/21-21 (now AS49455)","detail":"ROAs authorise AS41164 for space that another Norwegian AS announces — a typical leftover after a migration. AS41164, or anyone forging it, stays valid there.","v4_24s":0},{"id":"0088-41729","severity":"Medium","category":"Some announcements not covered","asn":41729,"name":"Atea AS","count":4,"objects":"193.161.233.0/24, 193.32.133.0/24, 193.161.235.0/24, 193.161.234.0/24","detail":"4 of 12 announcements from AS41729 have no covering ROA (NotFound).","v4_24s":67},{"id":"0089-41869","severity":"Medium","category":"Loose maxLength (IPv4)","asn":41869,"name":"Blix Group AS","count":2,"objects":"217.197.164.0/22→/24 (0 announced), 217.197.166.0/23→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":7},{"id":"0090-42029","severity":"Medium","category":"Routed with no ROA","asn":42029,"name":"SECTOR ALARM TECH AS","count":1,"objects":"31.129.114.0/24","detail":"All 1 announcements from AS42029 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0091-42175","severity":"Medium","category":"Routed with no ROA","asn":42175,"name":"Equinor ASA","count":3,"objects":"136.164.0.0/16, 2001:67c:228::/48, 143.97.0.0/16","detail":"All 3 announcements from AS42175 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":512},{"id":"0092-43516","severity":"Medium","category":"Routed with no ROA","asn":43516,"name":"Felleskjopet Agri SA","count":4,"objects":"193.161.120.0/21, 2001:67c:1640::/44, 185.190.172.0/22, 193.160.48.0/21","detail":"All 4 announcements from AS43516 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":20},{"id":"0093-43568","severity":"Medium","category":"Some announcements not covered","asn":43568,"name":"VEV Romerike AS","count":1,"objects":"185.78.68.0/22","detail":"1 of 5 announcements from AS43568 have no covering ROA (NotFound).","v4_24s":36},{"id":"0094-43568","severity":"Medium","category":"Loose maxLength (IPv4)","asn":43568,"name":"VEV Romerike AS","count":1,"objects":"77.247.144.0/20→/21 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":36},{"id":"0095-43905","severity":"Medium","category":"Some announcements not covered","asn":43905,"name":"SPACE NORWAY SATCOM AS","count":5,"objects":"5.22.239.0/24, 24.142.99.0/24, 5.22.237.0/24, 5.22.238.0/24, 5.22.236.0/24","detail":"5 of 15 announcements from AS43905 have no covering ROA (NotFound).","v4_24s":89},{"id":"0096-43905","severity":"Low","category":"ROA for unannounced space","asn":43905,"name":"SPACE NORWAY SATCOM AS","count":4,"objects":"80.79.153.0/24-24, 185.127.180.0/24-24, 185.127.181.0/24-24, 185.127.183.0/24-24","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":89},{"id":"0097-44381","severity":"Medium","category":"Some announcements not covered","asn":44381,"name":"ITsjefen AS","count":1,"objects":"44.31.78.0/24","detail":"1 of 9 announcements from AS44381 have no covering ROA (NotFound).","v4_24s":60},{"id":"0098-44381","severity":"Low","category":"Loose maxLength (IPv6)","asn":44381,"name":"ITsjefen AS","count":1,"objects":"2a02:2c8::/32→/48 (0 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":60},{"id":"0099-44381","severity":"Medium","category":"ROA for space another AS originates","asn":44381,"name":"ITsjefen AS","count":1,"objects":"195.191.30.0/23-24 (now AS214761)","detail":"ROAs authorise AS44381 for space that another Norwegian AS announces — a typical leftover after a migration. AS44381, or anyone forging it, stays valid there.","v4_24s":60},{"id":"0100-44381","severity":"Low","category":"ROA for unannounced space","asn":44381,"name":"ITsjefen AS","count":1,"objects":"45.154.235.0/24-24","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":60},{"id":"0101-44431","severity":"Medium","category":"Some announcements not covered","asn":44431,"name":"Marlink AS","count":3,"objects":"154.62.77.0/24, 38.105.15.0/24, 154.58.196.0/24","detail":"3 of 13 announcements from AS44431 have no covering ROA (NotFound).","v4_24s":45},{"id":"0102-44431","severity":"High","category":"Wide maxLength (IPv4)","asn":44431,"name":"Marlink AS","count":1,"objects":"193.220.224.0/20→/24 (1 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS44431 validates and wins on longest match (RFC 9319).","v4_24s":45},{"id":"0103-44431","severity":"Medium","category":"Loose maxLength (IPv4)","asn":44431,"name":"Marlink AS","count":3,"objects":"77.70.176.0/22→/24 (0 announced), 77.70.184.0/21→/24 (0 announced), 216.9.228.0/23→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":45},{"id":"0104-44431","severity":"Medium","category":"ROA for space another AS originates","asn":44431,"name":"Marlink AS","count":1,"objects":"193.220.160.0/24-24 (now AS5377, AS209980)","detail":"ROAs authorise AS44431 for space that another Norwegian AS announces — a typical leftover after a migration. AS44431, or anyone forging it, stays valid there.","v4_24s":45},{"id":"0105-44431","severity":"Low","category":"ROA for unannounced space","asn":44431,"name":"Marlink AS","count":1,"objects":"2001:470:1a0::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":45},{"id":"0106-44457","severity":"Medium","category":"Routed with no ROA","asn":44457,"name":"MAXBO AS","count":2,"objects":"193.160.24.0/22, 193.160.104.0/21","detail":"All 2 announcements from AS44457 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":12},{"id":"0107-44511","severity":"Medium","category":"Routed with no ROA","asn":44511,"name":"PE SLAEN SYGARD","count":1,"objects":"91.213.127.0/24","detail":"All 1 announcements from AS44511 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0108-44511","severity":"Medium","category":"ROA for space another AS originates","asn":44511,"name":"PE SLAEN SYGARD","count":1,"objects":"2a02:20c8:1241::/48-48 (now AS50304)","detail":"ROAs authorise AS44511 for space that another Norwegian AS announces — a typical leftover after a migration. AS44511, or anyone forging it, stays valid there.","v4_24s":1},{"id":"0109-44654","severity":"Medium","category":"Loose maxLength (IPv4)","asn":44654,"name":"VIXLY AS","count":1,"objects":"109.205.8.0/21→/24 (3 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":5},{"id":"0110-44654","severity":"Low","category":"Loose maxLength (IPv6)","asn":44654,"name":"VIXLY AS","count":1,"objects":"2a02:d8::/32→/48 (2 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":5},{"id":"0111-44654","severity":"Low","category":"ROA for unannounced space","asn":44654,"name":"VIXLY AS","count":12,"objects":"37.252.208.0/24-24, 37.252.208.0/23-23, 37.252.209.0/24-24, 37.252.212.0/24-24, 37.252.212.0/23-23, 37.252.213.0/24-24, 37.252.215.0/24-24, 93.93.96.0/21-21 (+4 more)","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":5},{"id":"0112-44763","severity":"Medium","category":"Loose maxLength (IPv4)","asn":44763,"name":"NATIONAL OILWELL NORWAY AS","count":1,"objects":"176.241.232.0/21→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":16},{"id":"0113-44763","severity":"Low","category":"ROA for unannounced space","asn":44763,"name":"NATIONAL OILWELL NORWAY AS","count":3,"objects":"185.79.84.0/24-24, 185.79.85.0/24-24, 2a00:1548::/32-32","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":16},{"id":"0114-44808","severity":"Low","category":"ROA for unannounced space","asn":44808,"name":"EG Norge AS","count":2,"objects":"185.175.96.0/22-22, 2a0b:e300::/32-32","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0115-44933","severity":"High","category":"Wide maxLength (IPv4)","asn":44933,"name":"Marlink AS","count":1,"objects":"193.220.192.0/20→/24 (0 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS44933 validates and wins on longest match (RFC 9319).","v4_24s":26},{"id":"0116-44933","severity":"Medium","category":"ROA for space another AS originates","asn":44933,"name":"Marlink AS","count":1,"objects":"2a02:6600:2003::/48-48 (now AS5377)","detail":"ROAs authorise AS44933 for space that another Norwegian AS announces — a typical leftover after a migration. AS44933, or anyone forging it, stays valid there.","v4_24s":26},{"id":"0117-47753","severity":"Medium","category":"Some announcements not covered","asn":47753,"name":"ONIT AS","count":1,"objects":"185.235.229.0/24","detail":"1 of 8 announcements from AS47753 have no covering ROA (NotFound).","v4_24s":5},{"id":"0118-47753","severity":"Low","category":"ROA for unannounced space","asn":47753,"name":"ONIT AS","count":2,"objects":"212.52.22.0/24-24, 2a11:c0::/29-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":5},{"id":"0119-47853","severity":"Info","category":"ASPA declares no providers (AS0)","asn":47853,"name":"Telia Norge AS","count":1,"objects":"AS0","detail":"ASPA lists only AS0 (no upstreams). Good hygiene for an unused ASN.","v4_24s":0},{"id":"0120-48144","severity":"Medium","category":"Some announcements not covered","asn":48144,"name":"Network Technology Harald Firing Karlsen","count":1,"objects":"2001:67c:1c00::/40","detail":"1 of 3 announcements from AS48144 have no covering ROA (NotFound).","v4_24s":1},{"id":"0121-48335","severity":"Medium","category":"Routed with no ROA","asn":48335,"name":"Thales Norway AS","count":1,"objects":"77.74.223.0/24","detail":"All 1 announcements from AS48335 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0122-48680","severity":"Medium","category":"Routed with no ROA","asn":48680,"name":"Netpower IT Solutions AS","count":2,"objects":"46.255.16.0/21, 2a04:d0c0::/29","detail":"All 2 announcements from AS48680 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":8},{"id":"0123-48908","severity":"Medium","category":"Routed with no ROA","asn":48908,"name":"Steinar H. Gunderson","count":1,"objects":"2001:67c:a4::/48","detail":"All 1 announcements from AS48908 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":0},{"id":"0124-49193","severity":"Medium","category":"Routed with no ROA","asn":49193,"name":"Unifon AS","count":3,"objects":"194.6.238.0/24, 91.207.100.0/24, 193.36.178.0/24","detail":"All 3 announcements from AS49193 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":3},{"id":"0125-49219","severity":"Medium","category":"ROA for space another AS originates","asn":49219,"name":"AVUR AS","count":1,"objects":"185.155.142.0/24-24 (now AS50272)","detail":"ROAs authorise AS49219 for space that another Norwegian AS announces — a typical leftover after a migration. AS49219, or anyone forging it, stays valid there.","v4_24s":0},{"id":"0126-49409","severity":"High","category":"Wide maxLength (IPv4)","asn":49409,"name":"IVER NORGE AS","count":1,"objects":"95.141.80.0/20→/24 (0 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS49409 validates and wins on longest match (RFC 9319).","v4_24s":20},{"id":"0127-49409","severity":"Medium","category":"Loose maxLength (IPv4)","asn":49409,"name":"IVER NORGE AS","count":1,"objects":"185.134.124.0/22→/24 (2 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":20},{"id":"0128-49409","severity":"Low","category":"Loose maxLength (IPv6)","asn":49409,"name":"IVER NORGE AS","count":1,"objects":"2a02:f58::/29→/48 (3 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":20},{"id":"0129-49409","severity":"Medium","category":"ROA for space another AS originates","asn":49409,"name":"IVER NORGE AS","count":2,"objects":"178.22.96.0/21-21 (now AS57829), 185.81.14.0/23-23 (now AS57829)","detail":"ROAs authorise AS49409 for space that another Norwegian AS announces — a typical leftover after a migration. AS49409, or anyone forging it, stays valid there.","v4_24s":20},{"id":"0130-49409","severity":"Low","category":"ROA for unannounced space","asn":49409,"name":"IVER NORGE AS","count":1,"objects":"103.183.58.0/23-23","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":20},{"id":"0131-49574","severity":"Medium","category":"Routed with no ROA","asn":49574,"name":"ECIT SOLUTIONS AS","count":2,"objects":"188.92.80.0/21, 185.176.36.0/22","detail":"All 2 announcements from AS49574 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":12},{"id":"0132-49788","severity":"Medium","category":"Some announcements not covered","asn":49788,"name":"Nexthop AS","count":6,"objects":"185.102.108.0/22, 217.170.128.0/20, 2a06:6dc0::/29, 64.239.19.0/24, 185.114.56.0/22, 2a06:2400::/29","detail":"6 of 31 announcements from AS49788 have no covering ROA (NotFound).","v4_24s":153},{"id":"0133-49788","severity":"High","category":"Wide maxLength (IPv4)","asn":49788,"name":"Nexthop AS","count":1,"objects":"84.243.128.0/18→/24 (1 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS49788 validates and wins on longest match (RFC 9319).","v4_24s":153},{"id":"0134-49788","severity":"Medium","category":"Loose maxLength (IPv4)","asn":49788,"name":"Nexthop AS","count":4,"objects":"91.193.0.0/22→/24 (0 announced), 91.242.200.0/21→/24 (0 announced), 151.252.8.0/21→/24 (0 announced), 185.80.180.0/22→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":153},{"id":"0135-49788","severity":"Medium","category":"ROA for space another AS originates","asn":49788,"name":"Nexthop AS","count":8,"objects":"91.209.212.0/24-24 (now AS35120), 91.223.100.0/24-24 (now AS35120), 176.111.206.0/23-23 (now AS60717), 185.13.92.0/22-22 (now AS60717), 185.30.224.0/22-22 (now AS60717), 185.55.104.0/22-22 (now AS60717), 2a02:f480::/29-29 (now AS60717), 2a04:d340::/29-29 (now AS60717)","detail":"ROAs authorise AS49788 for space that another Norwegian AS announces — a typical leftover after a migration. AS49788, or anyone forging it, stays valid there.","v4_24s":153},{"id":"0136-49788","severity":"Low","category":"ROA for unannounced space","asn":49788,"name":"Nexthop AS","count":3,"objects":"91.240.204.0/24-24, 2a02:6060::/32-32, 2a04:45c0::/29-29","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":153},{"id":"0137-49952","severity":"Low","category":"ROA for unannounced space","asn":49952,"name":"Bluestone AS","count":1,"objects":"2a00:e4a0:100::/40-40","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":3},{"id":"0138-50033","severity":"Low","category":"ROA for unannounced space","asn":50033,"name":"EG Norge AS","count":3,"objects":"185.60.162.0/24-24, 185.161.124.0/22-22, 185.211.52.0/22-22","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0139-50217","severity":"Medium","category":"Routed with no ROA","asn":50217,"name":"Vestland Fylkeskommune","count":2,"objects":"109.70.80.0/21, 2a02:20a0::/32","detail":"All 2 announcements from AS50217 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":8},{"id":"0140-50229","severity":"Medium","category":"Routed with no ROA","asn":50229,"name":"Rignet AS","count":2,"objects":"83.142.96.0/21, 178.20.104.0/22","detail":"All 2 announcements from AS50229 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":12},{"id":"0141-50270","severity":"Medium","category":"Loose maxLength (IPv4)","asn":50270,"name":"Nasjonal kommunikasjonsmyndighet","count":1,"objects":"109.233.0.0/21→/24 (2 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":8},{"id":"0142-50270","severity":"Low","category":"Loose maxLength (IPv6)","asn":50270,"name":"Nasjonal kommunikasjonsmyndighet","count":1,"objects":"2a02:2368::/32→/48 (2 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":8},{"id":"0143-50272","severity":"Medium","category":"Some announcements not covered","asn":50272,"name":"AVUR AS","count":2,"objects":"2a01:bf80::/32, 185.7.140.0/22","detail":"2 of 16 announcements from AS50272 have no covering ROA (NotFound).","v4_24s":49},{"id":"0144-50272","severity":"High","category":"Wide maxLength (IPv4)","asn":50272,"name":"AVUR AS","count":2,"objects":"62.24.32.0/20→/24 (0 announced), 62.24.48.0/20→/24 (0 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS50272 validates and wins on longest match (RFC 9319).","v4_24s":49},{"id":"0145-50272","severity":"Medium","category":"Loose maxLength (IPv4)","asn":50272,"name":"AVUR AS","count":2,"objects":"185.41.64.0/22→/24 (3 announced), 185.155.140.0/22→/24 (2 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":49},{"id":"0146-50304","severity":"Medium","category":"Some announcements not covered","asn":50304,"name":"Blix Solutions AS","count":19,"objects":"195.35.109.0/24, 154.36.85.0/24, 185.226.150.0/23, 89.221.246.0/24, 2a0c:5a00::/29, 91.247.228.0/22, 89.221.242.0/24, 89.221.244.0/23 (+11 more)","detail":"19 of 105 announcements from AS50304 have no covering ROA (NotFound).","v4_24s":158},{"id":"0147-50304","severity":"High","category":"Wide maxLength (IPv4)","asn":50304,"name":"Blix Solutions AS","count":3,"objects":"31.169.48.0/21→/32 (0 announced), 134.90.144.0/21→/32 (2 announced), 178.255.144.0/21→/32 (0 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS50304 validates and wins on longest match (RFC 9319).","v4_24s":158},{"id":"0148-50304","severity":"Medium","category":"Loose maxLength (IPv4)","asn":50304,"name":"Blix Solutions AS","count":10,"objects":"37.202.56.0/21→/24 (0 announced), 91.90.40.0/21→/24 (0 announced), 91.227.248.0/22→/24 (0 announced), 185.12.56.0/22→/24 (0 announced), 185.12.72.0/22→/24 (0 announced), 185.35.200.0/22→/24 (2 announced), 185.41.240.0/22→/24 (2 announced), 185.91.64.0/22→/24 (0 announced) (+2 more)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":158},{"id":"0149-50304","severity":"Low","category":"Loose maxLength (IPv6)","asn":50304,"name":"Blix Solutions AS","count":3,"objects":"2a02:20c8::/32→/48 (1 announced), 2a02:e340::/29→/48 (1 announced), 2a05:e880::/29→/48 (5 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":158},{"id":"0150-50304","severity":"Medium","category":"ROA for space another AS originates","asn":50304,"name":"Blix Solutions AS","count":9,"objects":"62.176.216.0/21-24 (now AS203650), 185.136.128.0/22-24 (now AS2119, AS208512), 193.28.7.0/24-24 (now AS41869), 194.35.228.0/22-24 (now AS213043), 194.99.40.0/22-24 (now AS213043), 217.197.164.0/24-24 (now AS41869), 217.197.164.0/22-24 (now AS41869), 2a03:a4e0::/32-48 (now AS2119, AS208512) (+1 more)","detail":"ROAs authorise AS50304 for space that another Norwegian AS announces — a typical leftover after a migration. AS50304, or anyone forging it, stays valid there.","v4_24s":158},{"id":"0151-50304","severity":"Low","category":"ROA for unannounced space","asn":50304,"name":"Blix Solutions AS","count":4,"objects":"185.37.0.0/24-24, 185.37.1.0/24-24, 185.101.144.0/24-24, 185.101.145.0/24-24","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":158},{"id":"0152-50531","severity":"Medium","category":"Some announcements not covered","asn":50531,"name":"ABAX as","count":2,"objects":"2a03:8220::/32, 185.89.92.0/22","detail":"2 of 3 announcements from AS50531 have no covering ROA (NotFound).","v4_24s":5},{"id":"0153-50562","severity":"Medium","category":"Routed with no ROA","asn":50562,"name":"IT PAYS AS","count":1,"objects":"193.107.28.0/22","detail":"All 1 announcements from AS50562 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0154-50582","severity":"Medium","category":"Some announcements not covered","asn":50582,"name":"Bent Oystein Bostad","count":1,"objects":"193.105.112.0/24","detail":"1 of 3 announcements from AS50582 have no covering ROA (NotFound).","v4_24s":1},{"id":"0155-51135","severity":"Info","category":"ASPA declares no providers (AS0)","asn":51135,"name":"Telia Norge AS","count":1,"objects":"AS0","detail":"ASPA lists only AS0 (no upstreams). Good hygiene for an unused ASN.","v4_24s":0},{"id":"0156-51850","severity":"Medium","category":"Routed with no ROA","asn":51850,"name":"NAME UNIT LIMITED","count":1,"objects":"91.220.143.0/24","detail":"All 1 announcements from AS51850 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0157-52157","severity":"Medium","category":"ROA for space another AS originates","asn":52157,"name":"NEAS ENERGI TELEKOM AS","count":3,"objects":"2a03:ba00::/32-32 (now AS61275), 2a03:ba01::/32-32 (now AS61275), 2a03:ba02::/32-32 (now AS61275)","detail":"ROAs authorise AS52157 for space that another Norwegian AS announces — a typical leftover after a migration. AS52157, or anyone forging it, stays valid there.","v4_24s":32},{"id":"0158-55784","severity":"Medium","category":"Loose maxLength (IPv4)","asn":55784,"name":"Marlink AS","count":2,"objects":"182.50.184.0/23→/24 (0 announced), 182.50.188.0/22→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":9},{"id":"0159-55784","severity":"Low","category":"ROA for unannounced space","asn":55784,"name":"Marlink AS","count":2,"objects":"2402:d00::/48-48, 2402:d00::/32-32","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":9},{"id":"0160-56334","severity":"Low","category":"ROA for unannounced space","asn":56334,"name":"ManpowerGroup AS","count":4,"objects":"185.136.20.0/24-24, 185.136.21.0/24-24, 185.136.22.0/24-24, 2a06:f800::/29-29","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0161-56538","severity":"Medium","category":"Routed with no ROA","asn":56538,"name":"Blix Group AS","count":3,"objects":"163.174.121.0/24, 163.174.32.0/23, 77.74.216.0/22","detail":"All 3 announcements from AS56538 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":7},{"id":"0162-56655","severity":"Medium","category":"Some announcements not covered","asn":56655,"name":"Gigahost AS","count":3,"objects":"91.149.252.0/24, 2a07:a342:7000::/36, 91.149.224.0/24","detail":"3 of 35 announcements from AS56655 have no covering ROA (NotFound).","v4_24s":37},{"id":"0163-56655","severity":"Medium","category":"Loose maxLength (IPv4)","asn":56655,"name":"Gigahost AS","count":1,"objects":"151.242.168.0/23→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":37},{"id":"0164-56655","severity":"Low","category":"Loose maxLength (IPv6)","asn":56655,"name":"Gigahost AS","count":1,"objects":"2a03:94e3::/32→/48 (0 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":37},{"id":"0165-56655","severity":"Low","category":"ROA for unannounced space","asn":56655,"name":"Gigahost AS","count":2,"objects":"31.56.216.0/24-24, 2a0f:85c1:270::/44-44","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":37},{"id":"0166-56867","severity":"Medium","category":"ROA for space another AS originates","asn":56867,"name":"Upheads AS","count":1,"objects":"2a02:20c8:1421::/48-48 (now AS50304)","detail":"ROAs authorise AS56867 for space that another Norwegian AS announces — a typical leftover after a migration. AS56867, or anyone forging it, stays valid there.","v4_24s":0},{"id":"0167-57280","severity":"Low","category":"ROA for unannounced space","asn":57280,"name":"Lindbak IT AS","count":2,"objects":"2a03:5580::/30-30, 2a03:5584::/30-30","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":1},{"id":"0168-57381","severity":"Low","category":"ROA for unannounced space","asn":57381,"name":"Daniel Husand","count":1,"objects":"2001:67c:2a00::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":2},{"id":"0169-57423","severity":"Medium","category":"Routed with no ROA","asn":57423,"name":"Sigterm AS","count":2,"objects":"2001:67c:24fc::/48, 193.150.121.0/24","detail":"All 2 announcements from AS57423 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0170-57506","severity":"Medium","category":"Some announcements not covered","asn":57506,"name":"POLITIETS IT-ENHET","count":4,"objects":"163.174.64.0/19, 163.174.128.0/18, 163.174.96.0/20, 163.174.0.0/19","detail":"4 of 5 announcements from AS57506 have no covering ROA (NotFound).","v4_24s":144},{"id":"0171-57506","severity":"Low","category":"ROA for unannounced space","asn":57506,"name":"POLITIETS IT-ENHET","count":1,"objects":"2a00:c540::/36-36","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":144},{"id":"0172-57660","severity":"Medium","category":"Routed with no ROA","asn":57660,"name":"Com4 AS","count":6,"objects":"185.242.144.0/22, 212.67.48.0/20, 2a00:67c0::/32, 37.26.208.0/20, 193.27.94.0/23, 185.67.16.0/22","detail":"All 6 announcements from AS57660 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":42},{"id":"0173-57829","severity":"Medium","category":"Some announcements not covered","asn":57829,"name":"IVER NORGE AS","count":22,"objects":"193.17.211.0/24, 194.71.21.0/24, 194.14.32.0/24, 193.183.159.0/24, 192.36.204.0/24, 194.71.30.0/24, 194.68.222.0/24, 193.183.160.0/24 (+14 more)","detail":"22 of 66 announcements from AS57829 have no covering ROA (NotFound).","v4_24s":141},{"id":"0174-57829","severity":"High","category":"Wide maxLength (IPv4)","asn":57829,"name":"IVER NORGE AS","count":3,"objects":"81.201.208.0/20→/24 (0 announced), 95.141.80.0/20→/24 (1 announced), 217.16.192.0/20→/24 (0 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS57829 validates and wins on longest match (RFC 9319).","v4_24s":141},{"id":"0175-57829","severity":"Medium","category":"Loose maxLength (IPv4)","asn":57829,"name":"IVER NORGE AS","count":16,"objects":"31.25.64.0/22→/24 (0 announced), 31.25.64.0/21→/24 (0 announced), 31.25.68.0/22→/24 (0 announced), 45.93.140.0/22→/24 (0 announced), 45.137.208.0/22→/24 (0 announced), 91.192.252.0/22→/24 (0 announced), 91.196.240.0/23→/24 (0 announced), 91.196.240.0/22→/24 (0 announced) (+8 more)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":141},{"id":"0176-57829","severity":"Low","category":"Loose maxLength (IPv6)","asn":57829,"name":"IVER NORGE AS","count":4,"objects":"2a00:e900::/29→/48 (0 announced), 2a01:4400::/32→/48 (0 announced), 2a02:5120::/32→/48 (0 announced), 2a0b:fd82::/32→/48 (0 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":141},{"id":"0177-57829","severity":"Medium","category":"ROA for space another AS originates","asn":57829,"name":"IVER NORGE AS","count":4,"objects":"185.134.124.0/22-24 (now AS49409), 185.179.246.0/24-24 (now AS49409), 2a02:f58::/29-48 (now AS49409), 2a10:4d40::/29-32 (now AS49409)","detail":"ROAs authorise AS57829 for space that another Norwegian AS announces — a typical leftover after a migration. AS57829, or anyone forging it, stays valid there.","v4_24s":141},{"id":"0178-57829","severity":"Low","category":"ROA for unannounced space","asn":57829,"name":"IVER NORGE AS","count":12,"objects":"62.181.223.0/24-24, 84.19.128.0/20-24, 84.19.144.0/21-24, 185.56.212.0/22-24, 185.224.56.0/22-24, 193.234.1.0/24-24, 2a00:ce60::/32-32, 2a01:280:3e8::/48-48 (+4 more)","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":141},{"id":"0179-57997","severity":"Medium","category":"ROA for space another AS originates","asn":57997,"name":"Nexthop AS","count":2,"objects":"176.110.116.0/23-23 (now AS61227), 2001:67c:1070::/47-47 (now AS61227)","detail":"ROAs authorise AS57997 for space that another Norwegian AS announces — a typical leftover after a migration. AS57997, or anyone forging it, stays valid there.","v4_24s":0},{"id":"0180-58264","severity":"Medium","category":"Some announcements not covered","asn":58264,"name":"Austevoll Kraftlag BA","count":4,"objects":"94.127.122.0/23, 94.127.124.0/23, 94.127.126.0/23, 94.127.120.0/23","detail":"4 of 7 announcements from AS58264 have no covering ROA (NotFound).","v4_24s":20},{"id":"0181-58298","severity":"Medium","category":"Routed with no ROA","asn":58298,"name":"Cisco Systems Norway AS","count":3,"objects":"91.239.252.0/24, 2001:67c:29ec::/48, 91.239.253.0/24","detail":"All 3 announcements from AS58298 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":2},{"id":"0182-58302","severity":"Medium","category":"Some announcements not covered","asn":58302,"name":"Studentersamfundet i Trondhjem","count":2,"objects":"44.141.132.0/24, 44.31.76.0/24","detail":"2 of 4 announcements from AS58302 have no covering ROA (NotFound).","v4_24s":6},{"id":"0183-59438","severity":"Medium","category":"Loose maxLength (IPv4)","asn":59438,"name":"99X INCREO AS","count":1,"objects":"5.145.152.0/21→/24 (2 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":2},{"id":"0184-59720","severity":"Medium","category":"Some announcements not covered","asn":59720,"name":"Bofiber AS","count":1,"objects":"2a02:cd00::/29","detail":"1 of 3 announcements from AS59720 have no covering ROA (NotFound).","v4_24s":6},{"id":"0185-59720","severity":"Medium","category":"Loose maxLength (IPv4)","asn":59720,"name":"Bofiber AS","count":1,"objects":"185.5.232.0/22→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":6},{"id":"0186-59863","severity":"Medium","category":"Routed with no ROA","asn":59863,"name":"Norsk Regnesentral STI","count":1,"objects":"156.116.0.0/16","detail":"All 1 announcements from AS59863 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":256},{"id":"0187-60130","severity":"Medium","category":"Loose maxLength (IPv4)","asn":60130,"name":"Nexthop AS","count":1,"objects":"185.56.184.0/22→/24 (3 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":4},{"id":"0188-60270","severity":"Medium","category":"Routed with no ROA","asn":60270,"name":"Justis- og beredskapsdepartementet","count":1,"objects":"163.174.48.0/24","detail":"All 1 announcements from AS60270 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0189-60586","severity":"Medium","category":"Routed with no ROA","asn":60586,"name":"Securitas AS","count":2,"objects":"193.235.30.0/24, 194.14.168.0/24","detail":"All 2 announcements from AS60586 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":2},{"id":"0190-60717","severity":"Medium","category":"Some announcements not covered","asn":60717,"name":"Nexthop AS","count":8,"objects":"62.89.32.0/19, 185.195.208.0/22, 176.111.204.0/23, 193.160.20.0/24, 91.237.34.0/23, 176.111.192.0/21, 176.111.200.0/22, 62.89.41.0/24","detail":"8 of 15 announcements from AS60717 have no covering ROA (NotFound).","v4_24s":68},{"id":"0191-60717","severity":"Low","category":"ROA for unannounced space","asn":60717,"name":"Nexthop AS","count":1,"objects":"2a04:45c0::/29-29","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":68},{"id":"0192-60908","severity":"Medium","category":"Some announcements not covered","asn":60908,"name":"Sucom AS","count":1,"objects":"2a0b:d840::/29","detail":"1 of 15 announcements from AS60908 have no covering ROA (NotFound).","v4_24s":28},{"id":"0193-60908","severity":"High","category":"Wide maxLength (IPv4)","asn":60908,"name":"Sucom AS","count":1,"objects":"88.84.48.0/20→/24 (3 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS60908 validates and wins on longest match (RFC 9319).","v4_24s":28},{"id":"0194-60908","severity":"Medium","category":"Loose maxLength (IPv4)","asn":60908,"name":"Sucom AS","count":2,"objects":"91.135.60.0/22→/24 (2 announced), 185.251.192.0/22→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":28},{"id":"0195-61006","severity":"Medium","category":"Some announcements not covered","asn":61006,"name":"Bredbandsfylket AS","count":4,"objects":"193.161.88.0/21, 194.187.0.0/20, 193.161.248.0/22, 188.92.4.0/24","detail":"4 of 10 announcements from AS61006 have no covering ROA (NotFound).","v4_24s":53},{"id":"0196-61213","severity":"Medium","category":"Some announcements not covered","asn":61213,"name":"Visma Software International AS","count":9,"objects":"194.68.15.0/24, 193.181.186.0/24, 91.123.56.0/24, 91.123.50.0/23, 91.123.57.0/24, 91.123.52.0/22, 91.123.49.0/24, 91.123.60.0/22 (+1 more)","detail":"9 of 14 announcements from AS61213 have no covering ROA (NotFound).","v4_24s":21},{"id":"0197-61275","severity":"Medium","category":"ROA for space another AS originates","asn":61275,"name":"NEAS ENERGI TELEKOM AS","count":10,"objects":"5.100.188.0/22-22 (now AS52157), 91.135.58.0/24-24 (now AS60908), 91.135.58.0/23-23 (now AS60908), 91.135.59.0/24-24 (now AS60908), 91.135.60.0/22-22 (now AS60908), 93.89.112.0/20-20 (now AS52157), 185.193.92.0/22-22 (now AS52157), 185.209.224.0/22-22 (now AS52157) (+2 more)","detail":"ROAs authorise AS61275 for space that another Norwegian AS announces — a typical leftover after a migration. AS61275, or anyone forging it, stays valid there.","v4_24s":109},{"id":"0198-61292","severity":"Low","category":"Loose maxLength (IPv6)","asn":61292,"name":"Blix Group AS","count":1,"objects":"2a02:ed03::/32→/48 (0 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":1},{"id":"0199-61292","severity":"Medium","category":"ROA for space another AS originates","asn":61292,"name":"Blix Group AS","count":1,"objects":"185.12.56.0/24-24 (now AS50304)","detail":"ROAs authorise AS61292 for space that another Norwegian AS announces — a typical leftover after a migration. AS61292, or anyone forging it, stays valid there.","v4_24s":1},{"id":"0200-62002","severity":"Low","category":"ROA for unannounced space","asn":62002,"name":"Rissa Kraftlag SA","count":1,"objects":"2a01:a520::/32-32","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":4},{"id":"0201-62186","severity":"Medium","category":"Routed with no ROA","asn":62186,"name":"Gjovik Kommune","count":2,"objects":"185.44.96.0/22, 2a04:9bc0::/29","detail":"All 2 announcements from AS62186 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0202-64401","severity":"Medium","category":"Routed with no ROA","asn":64401,"name":"Rignet AS","count":5,"objects":"89.251.208.0/20, 2a04:4900::/29, 109.71.144.0/21, 2a00:ed20::/32, 178.20.108.0/22","detail":"All 5 announcements from AS64401 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":28},{"id":"0203-64401","severity":"Low","category":"ROA for unannounced space","asn":64401,"name":"Rignet AS","count":1,"objects":"2001:470:2b2::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":28},{"id":"0204-64424","severity":"Medium","category":"Some announcements not covered","asn":64424,"name":"NETSECURITY AS","count":1,"objects":"185.97.192.0/24","detail":"1 of 2 announcements from AS64424 have no covering ROA (NotFound).","v4_24s":1},{"id":"0205-64440","severity":"Medium","category":"Routed with no ROA","asn":64440,"name":"Kongsberg Aviation Maintenance Services AS","count":1,"objects":"185.97.193.0/24","detail":"All 1 announcements from AS64440 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0206-197212","severity":"Medium","category":"Routed with no ROA","asn":197212,"name":"Ardalsnett AS","count":5,"objects":"89.35.36.0/23, 2a04:7f40::/29, 185.210.4.0/22, 178.23.96.0/21, 185.39.212.0/22","detail":"All 5 announcements from AS197212 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":18},{"id":"0207-197463","severity":"Low","category":"ROA for unannounced space","asn":197463,"name":"Aneo AS","count":1,"objects":"2a06:6040::/32-32","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":1},{"id":"0208-197475","severity":"Medium","category":"Routed with no ROA","asn":197475,"name":"Petabit AS","count":1,"objects":"46.183.168.0/21","detail":"All 1 announcements from AS197475 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":8},{"id":"0209-197519","severity":"Medium","category":"Routed with no ROA","asn":197519,"name":"ADVANIA NORGE AS","count":2,"objects":"2a00:1f19::/32, 185.51.232.0/22","detail":"All 2 announcements from AS197519 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0210-198309","severity":"Low","category":"ROA for unannounced space","asn":198309,"name":"Telia Norge AS","count":1,"objects":"185.97.84.0/22-22","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":8},{"id":"0211-198368","severity":"Medium","category":"Routed with no ROA","asn":198368,"name":"EPROVIDER AS","count":5,"objects":"37.28.128.0/21, 37.28.130.0/24, 37.28.131.0/24, 37.28.135.0/24, 37.28.128.0/24","detail":"All 5 announcements from AS198368 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":8},{"id":"0212-198931","severity":"Medium","category":"Routed with no ROA","asn":198931,"name":"ADVANIA NORGE AS","count":1,"objects":"185.11.0.0/22","detail":"All 1 announcements from AS198931 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0213-198992","severity":"Medium","category":"Routed with no ROA","asn":198992,"name":"Opera Software International AS","count":2,"objects":"91.241.2.0/24, 2001:67c:2f74::/48","detail":"All 2 announcements from AS198992 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0214-199169","severity":"Medium","category":"Routed with no ROA","asn":199169,"name":"SECTOR ALARM TECH AS","count":1,"objects":"31.129.116.0/24","detail":"All 1 announcements from AS199169 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0215-199339","severity":"Medium","category":"Routed with no ROA","asn":199339,"name":"Bulk Infrastructure Holding AS","count":1,"objects":"185.17.94.0/24","detail":"All 1 announcements from AS199339 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0216-199672","severity":"Medium","category":"Routed with no ROA","asn":199672,"name":"Eidsiva Energi AS","count":1,"objects":"2a03:12c0::/32","detail":"All 1 announcements from AS199672 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":0},{"id":"0217-199900","severity":"Medium","category":"Some announcements not covered","asn":199900,"name":"Bedriftssystemer AS","count":1,"objects":"91.207.226.0/23","detail":"1 of 4 announcements from AS199900 have no covering ROA (NotFound).","v4_24s":6},{"id":"0218-199900","severity":"Medium","category":"Loose maxLength (IPv4)","asn":199900,"name":"Bedriftssystemer AS","count":1,"objects":"185.41.16.0/22→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":6},{"id":"0219-199935","severity":"Low","category":"ROA for unannounced space","asn":199935,"name":"Haakon Solbjoerg","count":1,"objects":"2a01:ffc7:302::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0220-199990","severity":"Medium","category":"Routed with no ROA","asn":199990,"name":"LOCALHOST AS","count":3,"objects":"5.158.192.0/21, 2a01:6060::/29, 2a01:6060::/32","detail":"All 3 announcements from AS199990 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":8},{"id":"0221-200037","severity":"Medium","category":"Routed with no ROA","asn":200037,"name":"Globetech AS","count":4,"objects":"185.38.236.0/23, 193.142.221.0/24, 185.38.239.0/24, 185.38.238.0/24","detail":"All 4 announcements from AS200037 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":5},{"id":"0222-200139","severity":"Medium","category":"Routed with no ROA","asn":200139,"name":"Statens Vegvesen","count":3,"objects":"185.36.48.0/22, 146.2.0.0/16, 2a02:ae80::/29","detail":"All 3 announcements from AS200139 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":260},{"id":"0223-200163","severity":"Medium","category":"Routed with no ROA","asn":200163,"name":"Move AS","count":4,"objects":"93.190.80.0/21, 193.19.64.0/23, 2a02:7e0::/32, 193.30.0.0/24","detail":"All 4 announcements from AS200163 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":11},{"id":"0224-200168","severity":"Medium","category":"Loose maxLength (IPv4)","asn":200168,"name":"Telenor Norge AS","count":1,"objects":"185.35.212.0/22→/24 (4 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":6},{"id":"0225-200168","severity":"Low","category":"ROA for unannounced space","asn":200168,"name":"Telenor Norge AS","count":2,"objects":"2a04:6541::/32-32, 2a04:6542::/32-32","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":6},{"id":"0226-200665","severity":"Medium","category":"Loose maxLength (IPv4)","asn":200665,"name":"Hammerfest Energi Bredbaand AS","count":1,"objects":"141.195.8.0/21→/23 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":35},{"id":"0227-200693","severity":"Medium","category":"Routed with no ROA","asn":200693,"name":"Kongsberg Satellite Services AS","count":1,"objects":"192.111.33.0/24","detail":"All 1 announcements from AS200693 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0228-200781","severity":"Low","category":"Loose maxLength (IPv6)","asn":200781,"name":"Tampnet AS","count":1,"objects":"2a03:fd83::/32→/48 (0 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":8},{"id":"0229-200782","severity":"Low","category":"ROA for unannounced space","asn":200782,"name":"Yinson Production AS","count":1,"objects":"2a0a:6040:ce00::/40-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":1},{"id":"0230-201322","severity":"Medium","category":"ROA for space another AS originates","asn":201322,"name":"Helse Sor-Ost RHF","count":3,"objects":"91.186.68.0/23-23 (now AS56828), 91.186.70.0/24-24 (now AS56828), 91.186.71.0/24-24 (now AS56828)","detail":"ROAs authorise AS201322 for space that another Norwegian AS announces — a typical leftover after a migration. AS201322, or anyone forging it, stays valid there.","v4_24s":0},{"id":"0231-201439","severity":"Info","category":"ASPA provider not observed","asn":201439,"name":"Hans Christian Haaland","count":2,"objects":"AS209022, AS209533","detail":"Listed as a provider but not seen as a neighbour in RIS today. Fine for backup links; otherwise remove stale entries.","v4_24s":0},{"id":"0232-201577","severity":"Medium","category":"Routed with no ROA","asn":201577,"name":"Monsternett AS","count":4,"objects":"185.20.168.0/22, 217.171.192.0/20, 2a00:15a0::/32, 160.5.224.0/20","detail":"All 4 announcements from AS201577 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":36},{"id":"0233-201596","severity":"High","category":"Wide maxLength (IPv4)","asn":201596,"name":"3NET AS","count":1,"objects":"141.195.32.0/19→/23 (5 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS201596 validates and wins on longest match (RFC 9319).","v4_24s":40},{"id":"0234-201596","severity":"Medium","category":"Loose maxLength (IPv4)","asn":201596,"name":"3NET AS","count":2,"objects":"185.47.248.0/22→/24 (0 announced), 185.58.136.0/22→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":40},{"id":"0235-201627","severity":"Low","category":"ROA for unannounced space","asn":201627,"name":"DNB BANK ASA","count":2,"objects":"64.239.56.0/23-23, 2a05:1980::/29-29","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":12},{"id":"0236-201656","severity":"Medium","category":"Routed with no ROA","asn":201656,"name":"Helgeland Kraft AS","count":2,"objects":"2a03:25a0::/32, 185.72.220.0/22","detail":"All 2 announcements from AS201656 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0237-201888","severity":"Medium","category":"Routed with no ROA","asn":201888,"name":"Cegal AS","count":3,"objects":"185.62.142.0/24, 2a03:4a0::/32, 185.62.140.0/22","detail":"All 3 announcements from AS201888 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0238-201895","severity":"Low","category":"ROA for unannounced space","asn":201895,"name":"EG Norge AS","count":3,"objects":"185.60.160.0/24-24, 185.60.161.0/24-24, 185.60.163.0/24-24","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0239-202008","severity":"Low","category":"ROA for unannounced space","asn":202008,"name":"DATEK INSTALLASJON AS","count":1,"objects":"2a02:4060::/29-29","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":3},{"id":"0240-202057","severity":"Medium","category":"Routed with no ROA","asn":202057,"name":"Moelven Modus AS","count":1,"objects":"193.160.120.0/22","detail":"All 1 announcements from AS202057 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0241-202068","severity":"Low","category":"ROA for unannounced space","asn":202068,"name":"ROY SINDRE NORANGSHOL","count":1,"objects":"2001:67c:550::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0242-202174","severity":"Medium","category":"Routed with no ROA","asn":202174,"name":"FLOW RETAIL AS","count":1,"objects":"185.49.4.0/22","detail":"All 1 announcements from AS202174 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0243-202204","severity":"High","category":"Wide maxLength (IPv4)","asn":202204,"name":"TENEO DIGITAL AS","count":3,"objects":"78.26.0.0/18→/23 (13 announced), 109.72.160.0/20→/24 (2 announced), 152.228.64.0/19→/23 (2 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS202204 validates and wins on longest match (RFC 9319).","v4_24s":158},{"id":"0244-202204","severity":"Medium","category":"Loose maxLength (IPv4)","asn":202204,"name":"TENEO DIGITAL AS","count":3,"objects":"2.58.24.0/22→/24 (1 announced), 85.113.72.0/21→/24 (1 announced), 141.195.16.0/20→/23 (1 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":158},{"id":"0245-202204","severity":"Low","category":"Loose maxLength (IPv6)","asn":202204,"name":"TENEO DIGITAL AS","count":2,"objects":"2a00:ea0::/29→/48 (3 announced), 2a09:5c0::/29→/48 (0 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":158},{"id":"0246-202230","severity":"Medium","category":"Some announcements not covered","asn":202230,"name":"Norsk Tipping AS","count":1,"objects":"185.32.88.0/22","detail":"1 of 4 announcements from AS202230 have no covering ROA (NotFound).","v4_24s":4},{"id":"0247-202311","severity":"Low","category":"ROA for unannounced space","asn":202311,"name":"Noki Eiendom AS","count":1,"objects":"2a07:f680::/29-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":3},{"id":"0248-202923","severity":"Low","category":"ROA for unannounced space","asn":202923,"name":"ServeTheWorld AS","count":1,"objects":"2001:470:296::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0249-203238","severity":"Medium","category":"Routed with no ROA","asn":203238,"name":"Viken Fiber AS","count":1,"objects":"193.93.128.0/22","detail":"All 1 announcements from AS203238 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0250-203343","severity":"Medium","category":"Loose maxLength (IPv4)","asn":203343,"name":"StormGeo AS","count":1,"objects":"185.120.24.0/22→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":4},{"id":"0251-203343","severity":"Low","category":"Loose maxLength (IPv6)","asn":203343,"name":"StormGeo AS","count":1,"objects":"2a0f:a5c0::/32→/48 (0 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":4},{"id":"0252-203415","severity":"Low","category":"ROA for unannounced space","asn":203415,"name":"Jorgen Sovik","count":1,"objects":"2a06:a005:5ac::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0253-203415","severity":"Info","category":"ASPA provider not observed","asn":203415,"name":"Jorgen Sovik","count":1,"objects":"AS34927","detail":"Listed as a provider but not seen as a neighbour in RIS today. Fine for backup links; otherwise remove stale entries.","v4_24s":0},{"id":"0254-203424","severity":"Medium","category":"Some announcements not covered","asn":203424,"name":"TUSSA IKT AS","count":2,"objects":"2a00:51e0::/32, 185.22.120.0/22","detail":"2 of 9 announcements from AS203424 have no covering ROA (NotFound).","v4_24s":136},{"id":"0255-203430","severity":"Low","category":"ROA for unannounced space","asn":203430,"name":"BS TRADING & MEV AS","count":1,"objects":"2001:678:1160::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0256-203580","severity":"Medium","category":"Routed with no ROA","asn":203580,"name":"NORDLAND FYLKESKOMMUNE","count":2,"objects":"2a06:d8c0::/29, 185.130.68.0/22","detail":"All 2 announcements from AS203580 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0257-203650","severity":"Medium","category":"Loose maxLength (IPv4)","asn":203650,"name":"ITEAM NORGE AS","count":1,"objects":"62.176.216.0/21→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":8},{"id":"0258-203659","severity":"Medium","category":"Routed with no ROA","asn":203659,"name":"Provendo AS","count":2,"objects":"2a06:cc80::/29, 185.127.252.0/22","detail":"All 2 announcements from AS203659 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0259-203733","severity":"Medium","category":"Routed with no ROA","asn":203733,"name":"BINERO TROMSO AS","count":3,"objects":"185.125.161.0/24, 185.125.160.0/24, 185.125.162.0/24","detail":"All 3 announcements from AS203733 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":3},{"id":"0260-203779","severity":"Medium","category":"Loose maxLength (IPv4)","asn":203779,"name":"NORDFIBER AS","count":1,"objects":"185.124.52.0/22→/24 (2 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":6},{"id":"0261-203995","severity":"Medium","category":"Loose maxLength (IPv4)","asn":203995,"name":"Lyse Tele AS","count":2,"objects":"46.46.192.0/18→/20 (1 announced), 93.179.0.0/19→/20 (1 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":212},{"id":"0262-204503","severity":"Medium","category":"Routed with no ROA","asn":204503,"name":"INFRANORD SA","count":1,"objects":"185.143.216.0/22","detail":"All 1 announcements from AS204503 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0263-204511","severity":"Medium","category":"ROA for space another AS originates","asn":204511,"name":"Upheads AS","count":1,"objects":"2a05:3f06::/32-32 (now AS201454)","detail":"ROAs authorise AS204511 for space that another Norwegian AS announces — a typical leftover after a migration. AS204511, or anyone forging it, stays valid there.","v4_24s":1},{"id":"0264-204511","severity":"Low","category":"ROA for unannounced space","asn":204511,"name":"Upheads AS","count":1,"objects":"185.197.116.0/24-24","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":1},{"id":"0265-204712","severity":"Medium","category":"Some announcements not covered","asn":204712,"name":"Duett AS","count":1,"objects":"2a05:9ac0::/29","detail":"1 of 2 announcements from AS204712 have no covering ROA (NotFound).","v4_24s":4},{"id":"0266-204785","severity":"Medium","category":"Some announcements not covered","asn":204785,"name":"Raul Ghita trading as 'Ghita Telekom'","count":1,"objects":"2a0f:85c1:d92::/48","detail":"1 of 27 announcements from AS204785 have no covering ROA (NotFound).","v4_24s":26},{"id":"0267-204785","severity":"Low","category":"ROA for unannounced space","asn":204785,"name":"Raul Ghita trading as 'Ghita Telekom'","count":1,"objects":"89.144.61.0/24-24","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":26},{"id":"0268-204901","severity":"Medium","category":"ROA for space another AS originates","asn":204901,"name":"Christoffer Aasum Unes","count":1,"objects":"2a0a:3e45:be00::/40-48 (now AS210152)","detail":"ROAs authorise AS204901 for space that another Norwegian AS announces — a typical leftover after a migration. AS204901, or anyone forging it, stays valid there.","v4_24s":0},{"id":"0269-204901","severity":"Low","category":"ROA for unannounced space","asn":204901,"name":"Christoffer Aasum Unes","count":9,"objects":"2a01:ffc6:8000::/34-48, 2a06:a005:1690::/44-48, 2a06:a005:1c20::/44-48, 2a06:a005:2600::/44-48, 2a06:a005:2830::/44-48, 2a06:a005:2840::/44-48, 2a07:54c2:b00b::/48-48, 2a10:a642:aa00::/48-48 (+1 more)","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0270-204996","severity":"Medium","category":"Loose maxLength (IPv4)","asn":204996,"name":"Telemix AS","count":1,"objects":"185.170.248.0/22→/24 (4 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":12},{"id":"0271-205101","severity":"Medium","category":"Routed with no ROA","asn":205101,"name":"STAVANGER KOMMUNE","count":1,"objects":"2a13:a680::/29","detail":"All 1 announcements from AS205101 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":0},{"id":"0272-205190","severity":"Medium","category":"Routed with no ROA","asn":205190,"name":"AKSA HJEM AS","count":2,"objects":"185.226.200.0/22, 2a0c:7600::/29","detail":"All 2 announcements from AS205190 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0273-205238","severity":"Medium","category":"Routed with no ROA","asn":205238,"name":"TIMEIT AS","count":1,"objects":"185.221.52.0/22","detail":"All 1 announcements from AS205238 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0274-205851","severity":"Medium","category":"Routed with no ROA","asn":205851,"name":"Inventum Ost AS","count":2,"objects":"185.198.92.0/22, 2a0a:8740::/29","detail":"All 2 announcements from AS205851 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0275-205945","severity":"Medium","category":"Loose maxLength (IPv4)","asn":205945,"name":"BASIS.NO AS","count":1,"objects":"185.201.92.0/22→/25 (5 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":4},{"id":"0276-205945","severity":"Medium","category":"ROA for space another AS originates","asn":205945,"name":"BASIS.NO AS","count":3,"objects":"91.203.116.0/22-25 (now AS2116), 195.5.174.0/24-25 (now AS2116), 195.5.174.128/25-25 (now AS2116)","detail":"ROAs authorise AS205945 for space that another Norwegian AS announces — a typical leftover after a migration. AS205945, or anyone forging it, stays valid there.","v4_24s":4},{"id":"0277-205976","severity":"Medium","category":"Routed with no ROA","asn":205976,"name":"Arribatec Cloud AS","count":2,"objects":"2a0a:5c40::/29, 185.195.140.0/22","detail":"All 2 announcements from AS205976 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0278-206133","severity":"Medium","category":"Routed with no ROA","asn":206133,"name":"Circle K AS","count":1,"objects":"185.192.232.0/24","detail":"All 1 announcements from AS206133 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0279-206145","severity":"Medium","category":"Routed with no ROA","asn":206145,"name":"Sunndal kommune","count":1,"objects":"185.186.44.0/22","detail":"All 1 announcements from AS206145 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0280-206260","severity":"High","category":"Wide maxLength (IPv4)","asn":206260,"name":"Svorka AS","count":3,"objects":"83.223.208.0/20→/24 (1 announced), 141.0.128.0/20→/24 (0 announced), 143.110.96.0/19→/24 (0 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS206260 validates and wins on longest match (RFC 9319).","v4_24s":110},{"id":"0281-206260","severity":"Medium","category":"Loose maxLength (IPv4)","asn":206260,"name":"Svorka AS","count":5,"objects":"37.18.64.0/21→/24 (0 announced), 46.227.192.0/21→/24 (0 announced), 83.223.216.0/22→/24 (0 announced), 185.13.124.0/22→/24 (0 announced), 185.137.4.0/22→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":110},{"id":"0282-206260","severity":"Low","category":"Loose maxLength (IPv6)","asn":206260,"name":"Svorka AS","count":1,"objects":"2a02:f300::/29→/48 (0 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":110},{"id":"0283-206260","severity":"Low","category":"Observed neighbour not in ASPA","asn":206260,"name":"Svorka AS","count":2,"objects":"AS33891 (seen by 8 RIS peers), AS39351 (seen by 2 RIS peers)","detail":"RIS sees these ASNs directly upstream-side of this AS but they are not in its ASPA. Fine if they are peers; if any is a transit provider, add it or routes via it will fail ASPA checks.","v4_24s":110},{"id":"0284-206557","severity":"High","category":"Wide maxLength (IPv4)","asn":206557,"name":"Eltele AS","count":4,"objects":"77.222.160.0/19→/24 (0 announced), 81.93.96.0/20→/24 (0 announced), 85.113.160.0/19→/24 (1 announced), 213.161.160.0/19→/24 (0 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS206557 validates and wins on longest match (RFC 9319).","v4_24s":112},{"id":"0285-206667","severity":"Medium","category":"Routed with no ROA","asn":206667,"name":"JOTTA GROUP AS","count":7,"objects":"185.179.131.0/24, 185.179.128.0/23, 185.179.128.0/24, 193.30.119.0/24, 2a0a:cc80:1::/48, 185.179.129.0/24, 2a0a:cc80::/48","detail":"All 7 announcements from AS206667 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0286-206897","severity":"Medium","category":"Routed with no ROA","asn":206897,"name":"SOPRA STERIA AS","count":9,"objects":"185.48.152.0/22, 185.52.40.0/22, 2a00:75e0::/32, 194.60.75.0/24, 2001:67c:598::/48, 91.198.201.0/24, 2a0a:1ac0::/29, 195.88.106.0/23 (+1 more)","detail":"All 9 announcements from AS206897 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":16},{"id":"0287-206993","severity":"Medium","category":"ROA for space another AS originates","asn":206993,"name":"A ENERGI AS","count":1,"objects":"185.169.174.0/24-24 (now AS25400)","detail":"ROAs authorise AS206993 for space that another Norwegian AS announces — a typical leftover after a migration. AS206993, or anyone forging it, stays valid there.","v4_24s":7},{"id":"0288-206993","severity":"Low","category":"ROA for unannounced space","asn":206993,"name":"A ENERGI AS","count":1,"objects":"185.169.175.0/24-24","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":7},{"id":"0289-207031","severity":"Medium","category":"ROA for space another AS originates","asn":207031,"name":"Nexthop AS","count":2,"objects":"185.168.72.0/22-22 (now AS49788), 2a0b:f200::/32-32 (now AS49788)","detail":"ROAs authorise AS207031 for space that another Norwegian AS announces — a typical leftover after a migration. AS207031, or anyone forging it, stays valid there.","v4_24s":0},{"id":"0290-207189","severity":"Medium","category":"Routed with no ROA","asn":207189,"name":"SANDEFJORD LUFTHAVN DRIFT AS","count":1,"objects":"159.253.122.0/24","detail":"All 1 announcements from AS207189 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0291-207346","severity":"Low","category":"ROA for unannounced space","asn":207346,"name":"Dustin Norway AS","count":1,"objects":"5.180.140.0/22-22","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":1},{"id":"0292-207441","severity":"Medium","category":"Routed with no ROA","asn":207441,"name":"Norsk Hydro ASA","count":2,"objects":"163.34.0.0/16, 149.209.0.0/16","detail":"All 2 announcements from AS207441 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":512},{"id":"0293-207464","severity":"High","category":"Wide maxLength (IPv4)","asn":207464,"name":"Varanger KraftFiber AS","count":1,"objects":"109.72.160.0/20→/24 (1 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS207464 validates and wins on longest match (RFC 9319).","v4_24s":26},{"id":"0294-207464","severity":"Medium","category":"Loose maxLength (IPv4)","asn":207464,"name":"Varanger KraftFiber AS","count":4,"objects":"62.241.32.0/20→/22 (0 announced), 85.113.72.0/21→/24 (1 announced), 147.161.16.0/22→/23 (0 announced), 185.36.212.0/22→/23 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":26},{"id":"0295-207464","severity":"Medium","category":"ROA for space another AS originates","asn":207464,"name":"Varanger KraftFiber AS","count":2,"objects":"185.135.134.0/23-23 (now AS200665), 185.154.16.0/22-23 (now AS200665)","detail":"ROAs authorise AS207464 for space that another Norwegian AS announces — a typical leftover after a migration. AS207464, or anyone forging it, stays valid there.","v4_24s":26},{"id":"0296-207464","severity":"Low","category":"ROA for unannounced space","asn":207464,"name":"Varanger KraftFiber AS","count":1,"objects":"2a00:f0a0::/29-32","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":26},{"id":"0297-207564","severity":"Medium","category":"ROA for space another AS originates","asn":207564,"name":"Anders Hansen","count":2,"objects":"185.115.247.0/24-24 (now AS28824), 2001:4da8:c010::/44-48 (now AS28824)","detail":"ROAs authorise AS207564 for space that another Norwegian AS announces — a typical leftover after a migration. AS207564, or anyone forging it, stays valid there.","v4_24s":0},{"id":"0298-207851","severity":"Low","category":"Loose maxLength (IPv6)","asn":207851,"name":"Fara AS","count":1,"objects":"2a0f:8b40::/29→/48 (4 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":4},{"id":"0299-208086","severity":"Low","category":"ROA for unannounced space","asn":208086,"name":"Digitaliseringsdirektoratet","count":1,"objects":"2a06:11c0:4::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":1},{"id":"0300-208512","severity":"Medium","category":"Loose maxLength (IPv4)","asn":208512,"name":"RF Nett AS","count":1,"objects":"185.136.128.0/22→/24 (1 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":2},{"id":"0301-208512","severity":"Low","category":"Loose maxLength (IPv6)","asn":208512,"name":"RF Nett AS","count":1,"objects":"2a03:a4e0::/32→/48 (1 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":2},{"id":"0302-208835","severity":"Medium","category":"Routed with no ROA","asn":208835,"name":"InfraNord Fiber AS","count":1,"objects":"185.139.188.0/22","detail":"All 1 announcements from AS208835 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0303-208869","severity":"Low","category":"Loose maxLength (IPv6)","asn":208869,"name":"sharptech DA","count":1,"objects":"2a12:6bc0::/29→/48 (1 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":1},{"id":"0304-208966","severity":"Medium","category":"Routed with no ROA","asn":208966,"name":"Sortland Elektro AS","count":2,"objects":"5.45.152.0/21, 2a01:42c0::/32","detail":"All 2 announcements from AS208966 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":8},{"id":"0305-209404","severity":"Medium","category":"Routed with no ROA","asn":209404,"name":"Cyberon Security AS","count":1,"objects":"5.252.244.0/22","detail":"All 1 announcements from AS209404 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0306-209512","severity":"Low","category":"ROA for unannounced space","asn":209512,"name":"Alex Thomassen","count":1,"objects":"2a05:dfc1:c600::/40-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0307-209861","severity":"Medium","category":"ROA for space another AS originates","asn":209861,"name":"Christoffer Aasum Unes","count":1,"objects":"2a0a:3e45:be00::/40-48 (now AS210152)","detail":"ROAs authorise AS209861 for space that another Norwegian AS announces — a typical leftover after a migration. AS209861, or anyone forging it, stays valid there.","v4_24s":0},{"id":"0308-209861","severity":"Low","category":"ROA for unannounced space","asn":209861,"name":"Christoffer Aasum Unes","count":8,"objects":"143.20.75.0/24-24, 2602:fafd:f03::/48-48, 2a01:ffc6:8000::/34-48, 2a07:54c2:b00b::/48-48, 2a10:a642:aa00::/48-48, 2a10:a642:aa00::/40-48, 2a10:a642:ad00::/40-40, 2a13:9500:66::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0309-209903","severity":"Medium","category":"Routed with no ROA","asn":209903,"name":"Conscia Norge AS","count":2,"objects":"193.3.243.0/24, 2a10:5a40::/30","detail":"All 2 announcements from AS209903 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0310-209980","severity":"Medium","category":"ROA for space another AS originates","asn":209980,"name":"Marlink AS","count":1,"objects":"92.43.224.0/21-21 (now AS44431)","detail":"ROAs authorise AS209980 for space that another Norwegian AS announces — a typical leftover after a migration. AS209980, or anyone forging it, stays valid there.","v4_24s":3},{"id":"0311-210152","severity":"Low","category":"ROA for unannounced space","asn":210152,"name":"Jon Vanvik trading as Vanvik Internet","count":6,"objects":"2a06:a005:1290::/44-48, 2a06:a005:17f0::/44-48, 2a07:54c1:3700::/40-48, 2a07:54c2:b00b::/48-48, 2a0a:6040:e000::/40-48, 2a0f:85c1:8a0::/44-44","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":1},{"id":"0312-210307","severity":"Medium","category":"Routed with no ROA","asn":210307,"name":"NAGRAVISION AS","count":2,"objects":"2a04:5c85:f002::/48, 89.255.192.0/21","detail":"All 2 announcements from AS210307 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":8},{"id":"0313-210475","severity":"Medium","category":"ROA for space another AS originates","asn":210475,"name":"Jon Vanvik trading as Vanvik Internet","count":2,"objects":"2a01:ffc6:4000::/34-48 (now AS210152), 2a0a:3e42::/32-32 (now AS210152)","detail":"ROAs authorise AS210475 for space that another Norwegian AS announces — a typical leftover after a migration. AS210475, or anyone forging it, stays valid there.","v4_24s":0},{"id":"0314-210475","severity":"Low","category":"ROA for unannounced space","asn":210475,"name":"Jon Vanvik trading as Vanvik Internet","count":2,"objects":"2a05:dfc1:7700::/40-48, 2a07:54c1:3700::/40-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0315-210475","severity":"Info","category":"ASPA provider not observed","asn":210475,"name":"Jon Vanvik trading as Vanvik Internet","count":2,"objects":"AS56655, AS210152","detail":"Listed as a provider but not seen as a neighbour in RIS today. Fine for backup links; otherwise remove stale entries.","v4_24s":0},{"id":"0316-210615","severity":"Low","category":"ROA for unannounced space","asn":210615,"name":"Alta kommune","count":1,"objects":"2a14:9a80::/29-29","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":1},{"id":"0317-210942","severity":"Medium","category":"Routed with no ROA","asn":210942,"name":"SECTOR ALARM TECH AS","count":1,"objects":"31.129.115.0/24","detail":"All 1 announcements from AS210942 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0318-211309","severity":"High","category":"Wide maxLength (IPv4)","asn":211309,"name":"Obos Nett AS","count":2,"objects":"84.48.64.0/18→/24 (0 announced), 212.89.96.0/19→/24 (0 announced)","detail":"ROA maxLength 4+ bits past the prefix while most more-specifics are not announced: a forged-origin more-specific with AS211309 validates and wins on longest match (RFC 9319).","v4_24s":195},{"id":"0319-211309","severity":"Medium","category":"ROA for space another AS originates","asn":211309,"name":"Obos Nett AS","count":1,"objects":"195.64.118.0/24-24 (now AS50304)","detail":"ROAs authorise AS211309 for space that another Norwegian AS announces — a typical leftover after a migration. AS211309, or anyone forging it, stays valid there.","v4_24s":195},{"id":"0320-211383","severity":"Low","category":"ROA for unannounced space","asn":211383,"name":"Bykle Breiband AS","count":1,"objects":"2a10:7640::/29-29","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0321-211474","severity":"Low","category":"Loose maxLength (IPv6)","asn":211474,"name":"Safey AS","count":1,"objects":"2a05:a840::/29→/48 (0 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":0},{"id":"0322-211684","severity":"Low","category":"ROA for unannounced space","asn":211684,"name":"Cermaq Norway AS","count":1,"objects":"2a0f:5707:b100::/44-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0323-211767","severity":"Low","category":"ROA for unannounced space","asn":211767,"name":"Haavard Ose Nordstrand","count":1,"objects":"2a10:a642::/40-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0324-212064","severity":"Medium","category":"Routed with no ROA","asn":212064,"name":"Tolletaten ORGL","count":2,"objects":"2a05:6140::/32, 188.240.90.0/23","detail":"All 2 announcements from AS212064 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":2},{"id":"0325-212106","severity":"Low","category":"ROA for unannounced space","asn":212106,"name":"Departementenes Digitaliseringsorganisasjon (DIO)","count":2,"objects":"2a10:4646:11::/48-48, 2a10:4646:60::/44-44","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0326-212252","severity":"Low","category":"ROA for unannounced space","asn":212252,"name":"VIDAR TESSEM trading as VT KONSULENT TESSEM","count":1,"objects":"2a06:a005:2430::/44-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0327-212334","severity":"Low","category":"ROA for unannounced space","asn":212334,"name":"JIIT AS","count":1,"objects":"2a01:ffc7:300::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0328-212449","severity":"Medium","category":"Routed with no ROA","asn":212449,"name":"Erate AS","count":11,"objects":"2a09:480::/29, 193.32.134.0/24, 149.7.164.0/22, 149.7.163.0/24, 2a09:480:1::/48, 2a09:480:2::/48, 149.7.162.0/24, 193.32.135.0/24 (+3 more)","detail":"All 11 announcements from AS212449 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":8},{"id":"0329-212500","severity":"Low","category":"Loose maxLength (IPv6)","asn":212500,"name":"Surfnett AS","count":1,"objects":"2a14:9c80::/29→/48 (0 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":2},{"id":"0330-212514","severity":"Low","category":"Loose maxLength (IPv6)","asn":212514,"name":"SpanningNetworks AS","count":1,"objects":"2a01:ffc0::/32→/48 (0 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":2},{"id":"0331-212514","severity":"Info","category":"ASPA provider not observed","asn":212514,"name":"SpanningNetworks AS","count":2,"objects":"AS50272, AS210152","detail":"Listed as a provider but not seen as a neighbour in RIS today. Fine for backup links; otherwise remove stale entries.","v4_24s":2},{"id":"0332-212642","severity":"High","category":"RPKI-invalid announcement","asn":212642,"name":"Runnane Jon Tungland","count":1,"objects":"2a00:1e18:800::/48 (ROA: AS8896 2a00:1e18::/29-29, AS8896 2a00:1e18::/32-32)","detail":"AS212642 announces 2a00:1e18:800::/48, which validates INVALID (origin AS not in any covering ROA). Networks doing ROV drop it — fix the ROA or the announcement.","v4_24s":1},{"id":"0333-212665","severity":"Low","category":"Loose maxLength (IPv6)","asn":212665,"name":"Sandefjord Fiber AS","count":1,"objects":"2a14:9980::/29→/48 (3 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":3},{"id":"0334-213148","severity":"Medium","category":"Routed with no ROA","asn":213148,"name":"Harbour Energy Norge AS","count":1,"objects":"88.135.71.0/24","detail":"All 1 announcements from AS213148 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0335-213158","severity":"Low","category":"Loose maxLength (IPv6)","asn":213158,"name":"Nittedal Kommune","count":1,"objects":"2a0b:6640::/29→/48 (1 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":1},{"id":"0336-213158","severity":"Info","category":"ASPA provider not observed","asn":213158,"name":"Nittedal Kommune","count":1,"objects":"AS41164","detail":"Listed as a provider but not seen as a neighbour in RIS today. Fine for backup links; otherwise remove stale entries.","v4_24s":1},{"id":"0337-213469","severity":"Medium","category":"Routed with no ROA","asn":213469,"name":"Asker Kommune","count":1,"objects":"185.56.163.0/24","detail":"All 1 announcements from AS213469 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":1},{"id":"0338-213919","severity":"Low","category":"ROA for unannounced space","asn":213919,"name":"Robert Lund","count":1,"objects":"2a0c:9a40:8a50::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0339-213957","severity":"Medium","category":"Routed with no ROA","asn":213957,"name":"LILLESTROM KOMMUNE ORGANISASJON OG NYSKAPING","count":3,"objects":"185.88.43.0/24, 2a05:c940::/29, 185.88.42.0/24","detail":"All 3 announcements from AS213957 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":2},{"id":"0340-214486","severity":"Low","category":"ROA for unannounced space","asn":214486,"name":"Jo Christian Skrede Buvarp","count":1,"objects":"2a0f:85c1:83d::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0341-214615","severity":"Low","category":"Loose maxLength (IPv6)","asn":214615,"name":"TECHHEDGE LABS ANS","count":1,"objects":"2a05:a00::/32→/48 (0 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":0},{"id":"0342-214659","severity":"Medium","category":"Some announcements not covered","asn":214659,"name":"Nscale Glomfjord AS","count":1,"objects":"46.148.113.0/24","detail":"1 of 3 announcements from AS214659 have no covering ROA (NotFound).","v4_24s":3},{"id":"0343-214710","severity":"Info","category":"ASPA provider not observed","asn":214710,"name":"nLogic AS","count":2,"objects":"AS8478, AS41164","detail":"Listed as a provider but not seen as a neighbour in RIS today. Fine for backup links; otherwise remove stale entries.","v4_24s":1},{"id":"0344-214761","severity":"Medium","category":"Loose maxLength (IPv4)","asn":214761,"name":"Foreach AS","count":1,"objects":"195.191.30.0/23→/24 (0 announced)","detail":"maxLength 1–3 bits past the prefix with unannounced more-specifics in range; tighten to what is announced (RFC 9319).","v4_24s":2},{"id":"0345-214909","severity":"Info","category":"ASPA provider not observed","asn":214909,"name":"Sverre Sognnaes","count":5,"objects":"AS47272, AS207841, AS209533, AS209735, AS212514","detail":"Listed as a provider but not seen as a neighbour in RIS today. Fine for backup links; otherwise remove stale entries.","v4_24s":0},{"id":"0346-214917","severity":"Low","category":"Loose maxLength (IPv6)","asn":214917,"name":"Zeroize","count":1,"objects":"2a12:ff00::/29→/48 (2 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":1},{"id":"0347-215382","severity":"Low","category":"ROA for unannounced space","asn":215382,"name":"Rokas Pettersen","count":1,"objects":"2a0f:85c1:395::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0348-215542","severity":"Low","category":"ROA for unannounced space","asn":215542,"name":"NOVA SPEKTRUM AS","count":1,"objects":"2001:678:1060::/48-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":1},{"id":"0349-215574","severity":"Low","category":"ROA for unannounced space","asn":215574,"name":"Kjetil Pettersen","count":1,"objects":"2a0c:9a40:88c0::/44-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0350-215682","severity":"Medium","category":"Some announcements not covered","asn":215682,"name":"Nscale Glomfjord AS","count":3,"objects":"46.148.114.0/24, 46.148.116.0/24, 46.148.115.0/24","detail":"3 of 6 announcements from AS215682 have no covering ROA (NotFound).","v4_24s":5},{"id":"0351-215682","severity":"Low","category":"ROA for unannounced space","asn":215682,"name":"Nscale Glomfjord AS","count":1,"objects":"46.148.117.0/24-24","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":5},{"id":"0352-216091","severity":"Medium","category":"Some announcements not covered","asn":216091,"name":"eth0 AS","count":2,"objects":"44.32.207.0/24, 44.30.56.0/24","detail":"2 of 9 announcements from AS216091 have no covering ROA (NotFound).","v4_24s":2},{"id":"0353-216091","severity":"Low","category":"Loose maxLength (IPv6)","asn":216091,"name":"eth0 AS","count":1,"objects":"2a0a:cd83::/32→/48 (5 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":2},{"id":"0354-216352","severity":"Low","category":"ROA for unannounced space","asn":216352,"name":"Casual Gaming","count":2,"objects":"2001:67c:c4::/48-48, 2a10:a642:100::/40-48","detail":"ROAs cover space nobody in Norway announces. Fine for backup/DDoS-scrubbing; otherwise an AS0 ROA or removal is safer.","v4_24s":0},{"id":"0355-216374","severity":"Medium","category":"Routed with no ROA","asn":216374,"name":"Hardanger Breiband AS","count":6,"objects":"83.242.0.0/19, 2a02:cc40::/29, 84.205.32.0/19, 91.123.32.0/20, 185.221.0.0/22, 185.83.16.0/22","detail":"All 6 announcements from AS216374 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":88},{"id":"0356-216448","severity":"Medium","category":"Routed with no ROA","asn":216448,"name":"BANE NOR SF","count":1,"objects":"185.27.24.0/22","detail":"All 1 announcements from AS216448 are RPKI NotFound: route-origin validation gives them no hijack protection.","v4_24s":4},{"id":"0357-218358","severity":"Low","category":"Loose maxLength (IPv6)","asn":218358,"name":"HAITECH AS","count":1,"objects":"2a0c:b641:f20::/44→/128 (0 announced)","detail":"IPv6 maxLength 16+ bits past the prefix (e.g. /32→/48) with most more-specifics unannounced.","v4_24s":0}]