Dear colleagues,
Also, it might lead to deaggs (Markus' case) where a /14 that was originally "in one LIR" would be "3x /16, plus some smaller fragments in the LIR" and "lots of /24 PI managed by the NCC" now - so the /14 won't get a ROA, and he'll have to announce more-specifics. lemme see if i get this. to have the owner registration correct, some address space will have to be broken up and owned by multiple IRs, thus fragmenting routing? i like correct registration, but the commons has become pretty polluted.
The main issue that we (the WG and the RIPE NCC) are trying to resolve is the lack of clarity around the status and rights of these assignments. It’s not necessarily the case that the End User registration is incorrect. In many cases LIRs have put a lot of effort into keeping this information up to date. If there is a /16 “ALLOCATED UNSPECIFIED” block that contains "real" Provider Independent assignments, that /16 would indeed be split in order to carve out that assignment. The LIR would end up with multiple PA allocations instead of one /16. The PI resource holder would be able to decide who their sponsoring LIR should be. It is possible that they would remain with that same LIR, or they could move to another sponsoring LIR and take their PI assignment with them. If the resource holder is an LIR themselves, the PI assignment could be registered under their own LIR account. This means that route and domain objects would need to be updated. It’s also relevant to mention that several LIRs already allow for more specific routes for the assignments. The LIRs will be able to request a new ROA for their remaining blocks. The sponsoring LIR can request a ROA on behalf of the PI resource holder, or the PI holder can do that themselves if they wish. I hope this answers your questions. Ingrid Wijte RIPE NCC
I leave the definite answer to Ingrid to answer.
My understanding of "normal" NCC<->LIR stockkeeping is that PI is never living inside blocks that "belong" to a given LIR. So, the LIR would never be able to get a ROA covering PI space.
For some of these "old" blocks, there is a /16 which covers regular LIR/PA space, and "not real PI" space, and the LIR can get a ROA that covers their PA space, and also these "not real PI" blocks (because according to the NCC records, the /16 "belongs" to the LIR).
From an aggregation PoV, this is ok-ish - but from a routing security PoV, I wonder if that's what we want (the "not real PI" block might be routed totally elsewhere now).
So, to answer your question: for those "swampy PI", it would alter their rights (contracts according to 2007-01), costs (50 EUR/year) whoops. that's gonna cause unhappiness. Dunno. We (the RIPE community and the NCC) rolled out 2007-01 to all the other PI holders, and the amount of unhappiness was not very big.
Those cases that I was involved with my "LIR admin-c" hat on, PI holders seemed to be happy to have a clear contract with a known entity (us), and the assurance that this would ensure that nobody else could make claims to their address space.
Gert Doering -- assorted hats