On 18 Nov 2025, at 09:43, Edward Shryane <eshryane@ripe.net> wrote: [..] Here is an example for the RIPE NCC itself, adding a reg-nr: attribute :
organisation: ORG-RIEN1-RIPE org-name: Reseaux IP Europeens Network Coordination Centre (RIPE NCC) country: NL org-type: LIR descr: RIPE NCC Operations address: P.O. Box 10096 address: 1001 EB address: Amsterdam address: NETHERLANDS reg-nr: 40539632 # added registration number
[..] The country: code is NL, so the registry is the KvK : Go to https://www.kvk.nl/en/search/ and enter "40539632".
TLDR of below: - reg-nr needs a reg-location with details of where that number belongs to - reg-nr might be 'natural person' to indicate that situation - then no 'reg-nr' indicates an unmaintained/not-updated object - next to reg-nr - even with those details shady "companies" will remain shady as long as it is acceptable to register them as such. But, that requires one knowing that the "KVK" is the commercial registry, if you are not Dutch one will not know this. Without the context of the registry URL that number is pretty futile to list similar to having: 8<---- organisation: ORG-PLI2-RIPE org-name: Private Layer INC country: PA org-type: LIR address: Panama City address: 00000 address: Panama address: PANAMA ---->8 Which as a good old example used to be a Swiss POBox, for a "Panamanian" company; right... such useless information for an entity that operates worldwide but likely has nothing in that postal office building. Read: if law enforcement has to serve a court order, one cannot, and the real people behind it stay shielded, likely far away from Panama themselves. And what is the point of having information if it is futile except for finding accidental coincidences when multiple things register at the same email/location etc etc. Noting that the front page of https://privatelayer.com/ still reads "Secure Swiss Hosting".... not Panama... it is only the other side of the world ;) And of course, as the NCC is very well aware, PA, SC and such countries are a lot of fun. Apparently totally and completely following the rules though. Then again dummy and shell corporations are the joy of anything shady. At least IPv4 space has run out much faster with the help of those constructions. But there are GOOD things in this proposal, as legit companies do not have to hide and would have valid public details. And for those it can be beneficial to list their details, it also makes it easy to see they are more legit. As Gert is in this thread (CC'd also just in case), I'll use another example for SpaceNet AG, fortunately Germany requires an Impressum page (https://www.space.net/impressum/) thus easy to find and is public. For their case, including just "reg-nr: 136055" would be almost useless information, without the context of knowing that one has to look at the "Amtsgericht München", though that is not the business registry, it is the Gewerbeamt: https://stadt.muenchen.de/service/en-GB/info/gewerbeamt/10423771/ As such, IMHO, one really has to include extra information about the context of such number. thus either: 8<------ reg-nr: 136055 reg-country: DE reg-url: https://stadt.muenchen.de/service/en-GB/info/gewerbeamt/10423771/ ------>8 Which still would give you the phone number to contact for information at least. Though URLs change, thus maybe "reg-org: Germany, Munchen, Gewerbeamt" or similar might be a better format. also, for individuals/persons, and to indicate that the information is not just missing, but is established, possibly have a 'reg-nr: natural person' option? That makes it clear that the NCC indicates this is a natural person, not an organisation of which the object is not updated yet. In the end, as the above shows though, as long as RIPE NCC allows LIR registrations in 'funny' countries, it all does not matter, and organisations can be as intransparent as one can be. At least, one can then score that as "LIR is registered in a fun country, we only see bad traffic, lets rate limit or just drop that" and other such techniques... The reg-* info will thus be another indicator for that. Just really sucks for the business that really exist in those countries that fall into the same holes :( Regards, Jeroen