[ncc-services-wg] Finding previous user of IP addresses

Hi Roland,  

>     Thus, if law enforcement turned up and asked "about this /22 IP range, 
>    which we know has been in the hands of a beleaguered UK ISP the previous 
>    few months, but who was responsible for it, say, a year ago", you'd say 
>    "it's in the database, but you can't access it, because we don't have a 
>    query for it"?

I have a tool that is going back into 2013 with snapshots of the RIPE DB information for each other day (somewhat) ... that provides details about the registrant of the IP space and if it was in BGP at the time.  

If you have 1 specific question (prefix) I would be more than willing to see if I can assist you .  . . 
If this is going to be a duck hunt .. I would have to see if we want to go there.  

Let me know if needed,  

Erik Bais 

On 10/12/2019, 15:55, "ncc-services-wg on behalf of Roland Perry" <ncc-services-wg-bounces at ripe.net on behalf of roland at internetpolicyagency.com> wrote:

    In message <1689008734.428292.1575985321858 at mail.yahoo.com>, at 13:42:01 
    on Tue, 10 Dec 2019, "ripedenis at yahoo.co.uk" <ripedenis at yahoo.co.uk> 
    writes
    >Hi guys
    >
    >Historical queries to the RIPE Database only go back as far as the
    >'most recent' creation. So you can see changes made to the currently
    >existing INETNUM object. If the object has been deleted and re-created
    >it is not possible to query for the previous incarnation of the object.
    >This was an arbitrary decision made when the historical query feature
    >was introduced. The data is still available in the RIPE Database for
    >all previous incarnations of an object.
    >
    >It has been suggested in the past that this service be extended to show
    >all previous history (excluding personal data). If there is sufficient
    >interest, maybe someone would like to propose such a change and it can
    >be looked into in more detail.
    
    Thus, if law enforcement turned up and asked "about this /22 IP range, 
    which we know has been in the hands of a beleaguered UK ISP the previous 
    few months, but who was responsible for it, say, a year ago", you'd say 
    "it's in the database, but you can't access it, because we don't have a 
    query for it"?
    -- 
    Roland Perry