From db-news at ripe.net Sun Apr 1 07:00:02 2007 From: db-news at ripe.net (DB Role Account) Date: Sun, 1 Apr 2007 07:00:02 +0200 Subject: FAQ table of contents Message-ID: <200704010500.l31502Ya014776@cat.ripe.net> FREQUENTLY ASKED QUESTIONS ABOUT THE RIPE DATABASE ================================================== The answer to these questions can be found at the RIPE website: http://www.ripe.net/info/faq/db/main.html http://www.ripe.net/info/faq/db/security.html http://www.ripe.net/info/faq/db/lir-partitioned.html http://www.ripe.net/info/faq/db/abuse.html RIPE Whois Database FAQ http://www.ripe.net/info/faq/db/main.html 1. What is the RIPE Database? 2. What is acceptable use of the RIPE Database? 3. What is a netname? 4. What is a nic-hdl? 5. Can I use a nic-handle from another Regional Internet Registry in the RIPE Database? 6. What is a tech-c and what is an admin-c? 7. Can I register a domain in the RIPE Database? 8. How do I register a person/role object in the RIPE Database ? 9. Someone has created a person object with my name, address, telephone number, etc. in the RIPE Database. Why did they do this? 10. My information in the database is not correct, can you please update my object(s)? 11. How do I delete an object from the RIPE Database? 12. My update failed. Please explain why it failed. 13. What are the authorisation rules for route object creation? 14. Which date should be used as "changed-date" in a whois database-object? 15. I received a message with the subject "Notification of RIPE Database changes", but I didn't do anything and don't understand the message. What is it? 16. Why does my phone number appear in the RIPE Database? 17. Can I download the RIPE Database software? 18. Can I download the RIPE Database? 19. I cannot find any information about a network in the RIPE Database. Can I look somewhere else? 20. When one uses the RIPE NCC whois client, is it necessary to specify"-h whois.ripe.net" or is that pre-set by default? 21. How do I register reverse-delegations in the RIPE Database? 22. I want to have an IP->country conversion table; from where can I get it? 23. I want to peer with an AS. How do I do this? 24. Can I enter several contacts in one Database object? 25. How do I update an object in the RIPE Whois Database? 26. I cannot create a route object because the origin AS refers to an aut-num object that does not exist 27. Is the "changed" line updated automtically? 28. Can I use a nic-handle from another database? 29. Where can I find more information about the RIPE Whois Database? RIPE Whois Database Security FAQ http://www.ripe.net/info/faq/db/security.html 1. I have objects in the RIPE Whois Database. How can I protect them ? 2. How do I create a maintainer (mntner) object in the RIPE Whois Database ? 3. I have only one person object in the RIPE Whois Database. Can I create a mntner object to protect it? 4. We lost the password of our mntner. Can you please change it to xxxx? 5. My mntner password does not work. Why not ? 6. How can I encrypt a password for my mntner using CRYPT-PW? 7. What encryption algorithm should be used for the crypted password in the "auth:" attribute of a mntner object ? 8. How to use the MD5-PW auth scheme in my mntner ? 9. Why is the crypted-password published in the RIPE Whois Database ? Why not keep it secret ? 10. What software do I need to use PGP? 11. How can I use PGP with my mail software? 12. Getting started with PGP in RIPE Whois Database 13. What is a key-cert object, and how can I create it? 14. How should I modify my maintainer to use PGP? 15. How can I sign my update with PGP and send it? 16. How can I put two or more signatures in a message? 17. Can I create a maintainer with only PGP authentication? 18. What is the size of PGP key that can be used in a key-cert object in the RIPE Whois Database? LIR-PARTITIONED: The New "Status:" Attribute Value FAQ http://www.ripe.net/info/faq/db/lir-partitioned.html 1. What is "LIR-PARTITIONED"? 2. When would the LIR-PARTITIONED "status:" value be used? 3. How is such an object created in the RIPE Whois Database? 4. How can I protect an LIR-PARTITIONED object? 5. Do I have to seek approval from the RIPE NCC before entering an LIR-PARTITIONED object into the RIPE Whois Database? 6. Can I request reverse delegation for an LIR-PARTITIONED inetnum object? 7. Can I use the LIR-PARTITIONED "status:" value in an inet6num object? From fw at deneb.enyo.de Thu Apr 5 14:55:04 2007 From: fw at deneb.enyo.de (Florian Weimer) Date: Thu, 05 Apr 2007 14:55:04 +0200 Subject: Obtaining the address of a LIR for an object Message-ID: <87hcrvdlqv.fsf@mid.deneb.enyo.de> Hi, how can I obtain the physical address of the LIR which created a database object (or which created the entity that created an object, recursively)? Thanks, Florian From ms at uakom.sk Thu Apr 5 15:49:52 2007 From: ms at uakom.sk (Martin Stanislav) Date: Thu, 5 Apr 2007 15:49:52 +0200 Subject: Obtaining the address of a LIR for an object In-Reply-To: <87hcrvdlqv.fsf@mid.deneb.enyo.de> References: <87hcrvdlqv.fsf@mid.deneb.enyo.de> Message-ID: <20070405134952.GA22383@moon.uakom.sk> Hi Florian, except for the well known whois DB, here you have LIRs listed by country: http://www.ripe.net/membership/indices/index.html Address/phone/fax info seems to be available with each LIR on the list. Cheers, Martin On Thu, Apr 05, 2007 at 02:55:04PM +0200, Florian Weimer wrote: > Hi, > > how can I obtain the physical address of the LIR which created a > database object (or which created the entity that created an object, > recursively)? > > Thanks, > Florian > From fw at deneb.enyo.de Thu Apr 5 16:41:23 2007 From: fw at deneb.enyo.de (Florian Weimer) Date: Thu, 05 Apr 2007 16:41:23 +0200 Subject: Obtaining the address of a LIR for an object In-Reply-To: <20070405134952.GA22383@moon.uakom.sk> (Martin Stanislav's message of "Thu, 5 Apr 2007 15:49:52 +0200") References: <87hcrvdlqv.fsf@mid.deneb.enyo.de> <20070405134952.GA22383@moon.uakom.sk> Message-ID: <87tzvudgto.fsf@mid.deneb.enyo.de> * Martin Stanislav: > except for the well known whois DB, here you have > LIRs listed by country: > > http://www.ripe.net/membership/indices/index.html > > Address/phone/fax info seems to be available with > each LIR on the list. Thanks. But what shall I do when the name in the mnt-by: object doesn't match any of the listed companies? From ms at uakom.sk Thu Apr 5 17:45:57 2007 From: ms at uakom.sk (Martin Stanislav) Date: Thu, 5 Apr 2007 17:45:57 +0200 Subject: Obtaining the address of a LIR for an object In-Reply-To: <87tzvudgto.fsf@mid.deneb.enyo.de> References: <87hcrvdlqv.fsf@mid.deneb.enyo.de> <20070405134952.GA22383@moon.uakom.sk> <87tzvudgto.fsf@mid.deneb.enyo.de> Message-ID: <20070405154557.GB22383@moon.uakom.sk> On Thu, Apr 05, 2007 at 04:41:23PM +0200, Florian Weimer wrote: > * Martin Stanislav: > > > except for the well known whois DB, here you have > > LIRs listed by country: > > > > http://www.ripe.net/membership/indices/index.html > > > > Address/phone/fax info seems to be available with > > each LIR on the list. > > Thanks. But what shall I do when the name in the mnt-by: object > doesn't match any of the listed companies? True, that's hard to correlate. I'd try to find an object connected to an IP resource (inetnum, inet6num, route, route6, aut-num) holding the same mnt-by value with help of an inverse query. whois -h whois.ripe.net '-T inetnum -r -i mnt-by MAINTAINER' whois -h whois.ripe.net '-T aut-num -r -i mnt-by MAINTAINER' Though, there is a possibility a particular maintainer object has been introduced into whois DB be a non-LIR entity. Martin From ms at uakom.sk Thu Apr 5 18:06:02 2007 From: ms at uakom.sk (Martin Stanislav) Date: Thu, 5 Apr 2007 18:06:02 +0200 Subject: Obtaining the address of a LIR for an object In-Reply-To: <20070405154557.GB22383@moon.uakom.sk> References: <87hcrvdlqv.fsf@mid.deneb.enyo.de> <20070405134952.GA22383@moon.uakom.sk> <87tzvudgto.fsf@mid.deneb.enyo.de> <20070405154557.GB22383@moon.uakom.sk> Message-ID: <20070405160602.GA1662@moon.uakom.sk> On Thu, Apr 05, 2007 at 05:45:57PM +0200, Martin Stanislav wrote: > On Thu, Apr 05, 2007 at 04:41:23PM +0200, Florian Weimer wrote: > > * Martin Stanislav: > > > > > except for the well known whois DB, here you have > > > LIRs listed by country: > > > > > > http://www.ripe.net/membership/indices/index.html > > > > > > Address/phone/fax info seems to be available with > > > each LIR on the list. > > > > Thanks. But what shall I do when the name in the mnt-by: object > > doesn't match any of the listed companies? > > True, that's hard to correlate. I'd try to find an object > connected to an IP resource (inetnum, inet6num, route, route6, > aut-num) holding the same mnt-by value with help of an inverse > query. and (if one is lucky) getting also an org atribute in response. Martin PS pardon me the self-from-to db-help list contribution From fw at deneb.enyo.de Thu Apr 5 19:10:29 2007 From: fw at deneb.enyo.de (Florian Weimer) Date: Thu, 05 Apr 2007 19:10:29 +0200 Subject: Obtaining the address of a LIR for an object In-Reply-To: <20070405154557.GB22383@moon.uakom.sk> (Martin Stanislav's message of "Thu, 5 Apr 2007 17:45:57 +0200") References: <87hcrvdlqv.fsf@mid.deneb.enyo.de> <20070405134952.GA22383@moon.uakom.sk> <87tzvudgto.fsf@mid.deneb.enyo.de> <20070405154557.GB22383@moon.uakom.sk> Message-ID: <87ps6ibvcq.fsf@mid.deneb.enyo.de> * Martin Stanislav: > Though, there is a possibility a particular maintainer object > has been introduced into whois DB be a non-LIR entity. But then there would be a suitable changed: line, wouldn't it? Does RIPE NCC provide the data upon formal request from the relevant authorities? From ms at uakom.sk Thu Apr 5 19:45:15 2007 From: ms at uakom.sk (Martin Stanislav) Date: Thu, 5 Apr 2007 19:45:15 +0200 Subject: Obtaining the address of a LIR for an object In-Reply-To: <87ps6ibvcq.fsf@mid.deneb.enyo.de> References: <87hcrvdlqv.fsf@mid.deneb.enyo.de> <20070405134952.GA22383@moon.uakom.sk> <87tzvudgto.fsf@mid.deneb.enyo.de> <20070405154557.GB22383@moon.uakom.sk> <87ps6ibvcq.fsf@mid.deneb.enyo.de> Message-ID: <20070405174515.GA2063@moon.uakom.sk> On Thu, Apr 05, 2007 at 07:10:29PM +0200, Florian Weimer wrote: > * Martin Stanislav: > > > Though, there is a possibility a particular maintainer object > > has been introduced into whois DB be a non-LIR entity. > > But then there would be a suitable changed: line, wouldn't it? Well, changed attribute is manadatory so there should be at least one for every maintainer object returned. Nowadays, one has to use '-B' whois switch to get back the changed atribute: # whois -h whois.ripe.net '-h' ... % -B Disables the filtering of "notify:", "changed:" and "e-mail:" % attributes. ... AFAIK it's technically possible to replace the original changed atribute provided you are able to pass one of the objects' mnt-by maintainer check (password/signature). This is something one shouldn't do - original changed atribute value should be kept. > > Does RIPE NCC provide the data upon formal request from the relevant > authorities? > Don't have any experience so can't comment on this. I expect archive whould contain at least the original submission requesting the maintainer object creation and also the subsequent modifications. Martin From fw at deneb.enyo.de Thu Apr 5 19:52:27 2007 From: fw at deneb.enyo.de (Florian Weimer) Date: Thu, 05 Apr 2007 19:52:27 +0200 Subject: Obtaining the address of a LIR for an object In-Reply-To: <20070405174515.GA2063@moon.uakom.sk> (Martin Stanislav's message of "Thu, 5 Apr 2007 19:45:15 +0200") References: <87hcrvdlqv.fsf@mid.deneb.enyo.de> <20070405134952.GA22383@moon.uakom.sk> <87tzvudgto.fsf@mid.deneb.enyo.de> <20070405154557.GB22383@moon.uakom.sk> <87ps6ibvcq.fsf@mid.deneb.enyo.de> <20070405174515.GA2063@moon.uakom.sk> Message-ID: <87odm2aeuc.fsf@mid.deneb.enyo.de> * Martin Stanislav: > AFAIK it's technically possible to replace the original changed > atribute provided you are able to pass one of the objects' mnt-by > maintainer check (password/signature). This is something one > shouldn't do - original changed atribute value should be kept. Yeah, but if you want to put bogus data into the database, you can apparently use this feature to cover your tracks. *sigh*