You're looking at an older or unpublished version: 2

DRAFT: Initial Certification Policy for Provider Aggregatable Address Space Holders

The RIPE NCC plans to deploy a certification service that can be used to secure uniqueness of resources. This proposal lays out guidelines for how LIRs can receive certificates over their Provider Aggregatable (PA) address space holdings and how these certificates should be maintained.

Abstract

This document describes the RIPE community’s current IPv4 address allocation and assignment policies. They were developed through a bottom-up, consensus driven, open policy development process in the RIPE Address Policy Working Group (AP WG). The RIPE Network Coordination Centre (RIPE NCC) facilitates and supports this process. These policies apply to the RIPE NCC and the Local Internet Registries (LIRs) within the RIPE NCC service region.

Contents

1.0 Certification of Provider Aggregatable (PA) Allocation
2.0 Attribution

1.0 Certification of Provider Aggregatable (PA) Allocation

Following guidelines are to apply only for certification of Provider Aggregatable (PA) address space allocations that are held by the Local Internet Registries (LIRs) within the RIPE NCC service region.

The RIPE NCC will issue certificates upon request for RIPE NCC supplied Provider Aggregatable (PA) address space allocations to the LIR that is the registered holder of that space.

The certificate will be issued via a secure channel.

Certificates will be issued with a validity period of up to 18 months. Certificates will at all times reflect the registration status of the resource in the Registry, as also reflected in the RIPE database.

In practice this means a certificate may be issued to the registered holder of the PA resource at any time that a record of that holding exists in the RIPE database. Withdrawal of the record of that holding from the RIPE database will automatically result in the certificate being revoked.

In the event of revocation due to security breach or similar, new certificates will be issued with a validity period equal to the remaining validity of the revoked certificate.

2.0 Attribution

This document is compiled from policies developed by the RIPE community.

The following people actively contributed by making proposals through the RIPE Policy Development Process: Nigel Titley