Le 18/10/2024 à 13:52, Kessler,
Emmanuel a écrit :
Hi Kessler, and all,
Hope this email finds you in health!
[...]
1) With the addition of the nibble boundary, how do we ensure
that the policy complies with the “Registration goal”, which is
essential for Internet troubleshooting and avoiding abuse?
Thanks for you email, brother!
...maybe this should be answered by RIPE NCC :-/
Are PIs required to register End Site information ?
You may want to read [1] the "Contractual Requirements
for Provider Independent Resource Holders in the
RIPE NCC Service Region — RIPE Network Coordination Centre"
__
[1]: https://www.ripe.net/publications/docs/ripe-637/
What type of information is recorded by PI and how is this
information made accessible to a requesting Authority?
...while waiting for a more authoritative answer,
please, feel free: look at the following references.
Ref#1| Information for Law Enforcement Agencies —
RIPE Network Coordination Centre
https://www.ripe.net/about-us/legal/information-for-law-enforcement-agencies/
Ref#2| RIPE NCC Report: Law Enforcement Agency Requests —
RIPE Network Coordination Centre
https://www.ripe.net/publications/lea-documents/
What type of information is recorded by the End User, for
example about his End-Sites? How they provide information when
requested by an Authority, ensuring that they comply with
“Registration goal”?
...below are references containing authoritative
information regarding the Structure of the RIPE
Database.
Ref#3| Primary and Secondary Objects | Docs
https://docs.db.ripe.net/RIPE-Database-Structure/Primary-and-Secondary-Objects/
Ref#4| Database Objects | Docs
https://docs.db.ripe.net/RIPE-Database-Structure/Database-Object/
...i'm leaving other parts of your question to
other WG participants including RIPE NCC ;-)
How to ensure that an IP range is used by a single party and not
more?
...imho! it's one of the objectives of RIR
delegations:.
...btw, don't forget that it's perfectly fine to
have a scenario where the same IP prefix is
being announced from different ASNs.
That's where you need to create appropriate
ROA (Route Origin Authorisations) certificates
within the right RPKI CA. So that, a multi-origin
routed IP prefix works more securely.
...maybe i didn't understood what you meant :-/
Please, let me know.
Thanks.
Shalom,
--sb.
[...]