RPKI for PI and Legacy End Users

You can request and manage a hosted or delegated RPKI Certification Authority (CA) either directly as an End User or through a Sponsoring LIR. This depends on who maintains the organisation object in the RIPE Database.

Requirements

If you are an End User, you need to meet the following requirements to request a CA:

1. A contractual agreement with the RIPE NCC:

• For PI End Users: A signed End User Assignment Agreement
• For End Users who hold Legacy Resources: A signed and verified Sponsoring LIR Agreement for Legacy Internet Resources

2. You must have a RIPE NCC Access account authorised to maintain the organisation object associated with the resource in the RIPE Database.

If you do not meet the requirements, your Sponsoring LIR should contact the RIPE NCC at lir-help@ripe.net to request a resource certificate.