Article LIR

Managing Your RIPE LIR Account

A practical guide to day-to-day management of your RIPE NCC LIR account, covering the LIR Portal, RIPE Database, resource requests, contact management, and best practices for efficient operations.

Managing Your RIPE LIR Account

Once you've become a RIPE NCC member and established your Local Internet Registry (LIR) account, effective day-to-day management becomes crucial for maintaining compliance, efficiently handling resource requests, and maximizing the value of your membership. This comprehensive guide covers all aspects of LIR account management, from using the LIR Portal to maintaining database accuracy.

Understanding Your LIR Account

Your LIR account represents your organization's relationship with RIPE NCC and serves as the foundation for all IP resource management activities.

Key Components

1. LIR Account Number

  • Unique identifier for your organization (e.g., org-ABC123-RIPE)
  • Used in all RIPE Database objects
  • Referenced in all communications with RIPE NCC
  • Cannot be changed or transferred

2. Member Services

  • Access to RIPE NCC services and support
  • Right to request IP resources and ASNs
  • Participation in RIPE community activities
  • Training and educational resources

3. Associated Resources

  • IP address allocations and assignments
  • Autonomous System Numbers (ASNs)
  • Reverse DNS delegations
  • Sponsored PI resources

4. Billing and Financial Account

  • Annual membership fees
  • Per-resource charges
  • Payment methods and invoicing
  • Financial history

The LIR Portal: Your Primary Interface

The LIR Portal (https://lirportal.ripe.net/) is your main communication and management interface with RIPE NCC.

Accessing the LIR Portal

Initial Setup: During the membership application process, you nominate one RIPE NCC Access account to receive administrator privileges for the LIR Portal. This person becomes your initial Portal administrator.

Authentication:

  • Uses RIPE NCC Access accounts (single sign-on)
  • Two-factor authentication available (highly recommended)
  • Secure encrypted communication for all data
  • Session timeout for security

Access Levels:

  • Administrator: Full access to all LIR Portal functions
  • Regular User: Limited access based on permissions
  • Billing Contact: Access to financial information
  • Multiple administrators can be assigned

LIR Portal Dashboard

When you log in, the dashboard provides an overview of:

  • Current resource allocations and assignments
  • Pending requests and tickets
  • Account status and compliance notifications
  • Recent activity and changes
  • Upcoming renewals and deadlines
  • Training opportunities and announcements

Key Portal Functions

1. Resource Requests

Requesting IPv4 Addresses: For RIPE NCC, new LIRs receive a one-time /24 (256 addresses) allocation from the final /8 pool (185.0.0.0/8). Additional IPv4 space must be acquired through transfers.

Process:

  1. Navigate to "Request Resources" section
  2. Select "IPv4 Allocation"
  3. Provide justification (if required)
  4. Submit request
  5. Wait for evaluation (typically 1-2 business days)
  6. Receive allocation confirmation

Requesting IPv6 Addresses: LIRs can request IPv6 allocations based on their addressing plans and justified needs.

Process:

  1. Prepare addressing plan showing:
    • Current infrastructure
    • Projected growth
    • Assignment plans for the next 2 years
  2. Submit request through Portal
  3. Provide technical justification
  4. RIPE NCC evaluates (typically 3-5 business days)
  5. Receive allocation (commonly /32, can be larger)

Requesting Additional IPv6 Space: When your existing allocation is 50% utilized or you can justify immediate need, you can request additional space:

  • Demonstrate usage of current allocation
  • Provide updated addressing plan
  • Show specific need for expansion
  • Typically results in doubling of allocation size

Requesting ASNs: LIRs can request Autonomous System Numbers for BGP routing.

Requirements:

  • Demonstrate need for unique routing policy
  • Show at least one operational BGP peering
  • Provide routing policy documentation
  • Pay annual ASN fee (€50 as of 2025)

Process:

  1. Submit ASN request through Portal
  2. Provide BGP peering details
  3. Document routing policy
  4. RIPE NCC evaluates technical justification
  5. Receive ASN assignment

2. Contact Management

Types of Contacts:

Admin Contact:

  • Primary administrative contact for the LIR
  • Receives important notifications
  • Responsible for account management
  • Can have multiple admin contacts

Tech Contact:

  • Technical personnel for resource management
  • Handles database and routing issues
  • Receives technical notifications

Billing Contact:

  • Financial and invoicing communications
  • Payment processing
  • Fee notifications and reminders

Abuse Contact:

  • Mandatory for all LIR allocations
  • Receives abuse reports and complaints
  • Must be reachable and responsive
  • Validated by RIPE NCC periodically

Managing Contacts:

  1. Navigate to "Contacts" section in Portal
  2. Add, edit, or remove contact persons
  3. Assign appropriate roles to each contact
  4. Ensure all contact information is current
  5. Update immediately when personnel changes occur

Best Practice: Maintain at least two people for each critical contact role to ensure continuity during vacations or staff turnover.

3. Account Information Management

Organization Details:

  • Legal name and registration information
  • Physical address
  • Correspondence preferences
  • Language settings

Updating Organization Information:

  • Requires supporting documentation for legal name changes
  • Address changes must reflect actual location
  • Changes may trigger verification process
  • Keep information current to maintain compliance

Membership Status:

  • View current membership status
  • Check payment status
  • Review compliance standing
  • Access membership history

4. Billing and Payments

Invoicing:

  • Annual membership invoices
  • Per-resource fee invoices
  • Invoice history and archives
  • Download invoices in PDF format

Payment Methods:

  • Bank transfer (most common)
  • Credit card (for some services)
  • Direct debit (available in some countries)
  • SEPA transfers for European members

Payment Terms:

  • Payment due within 30 days of invoice date
  • Late payment may result in service suspension
  • Automatic reminders before due dates
  • Payment confirmation in Portal

Managing Billing:

  1. Set up payment method preferences
  2. Ensure billing contact receives invoices
  3. Schedule payments to avoid late fees
  4. Keep payment information current
  5. Review charges for accuracy

5. Training and Certification

Available Training:

  • LIR Training Courses (free for members)
  • IPv6 deployment workshops
  • RIPE Database training
  • Security and routing courses
  • Online webinars and tutorials

Booking Training:

  1. Browse available courses in Portal
  2. Register for in-person or online sessions
  3. Receive confirmation and materials
  4. Complete courses and assessments
  5. Obtain certificates

RIPE NCC Certified Professionals:

  • Professional certification program
  • Free certification vouchers for members
  • Demonstrates expertise to customers
  • Continuing education requirements

Value: Take full advantage of free training – commercial equivalents cost €500-1,500 per course.

6. Tickets and Support

Creating Support Tickets:

  • Technical questions about resources
  • Account management issues
  • Policy interpretation
  • Database problems
  • General membership inquiries

Ticket Management:

  1. Submit ticket through Portal
  2. Provide detailed description
  3. Attach relevant documentation
  4. Track ticket status
  5. Receive responses via email and Portal
  6. Close ticket when resolved

Response Times:

  • Routine queries: 1-3 business days
  • Urgent technical issues: Same business day
  • Resource requests: According to published SLAs
  • Billing questions: 1-2 business days

Managing the RIPE Database

The RIPE Database is the public registry of Internet number resources in the RIPE NCC service region. As an LIR, you're responsible for maintaining accurate information about your resources.

Understanding Database Objects

Key Object Types:

inetnum (IPv4) / inet6num (IPv6):

  • Represents IP address ranges
  • Contains allocation or assignment information
  • Includes status, usage details, and contacts

aut-num:

  • Represents ASN assignments
  • Contains routing policy information
  • Includes peering details

organisation:

  • Your LIR organization record
  • Legal and contact information
  • Links to all your resources

person / role:

  • Contact information for individuals or roles
  • Used for admin, tech, and abuse contacts
  • Must be kept current

mntner (Maintainer):

  • Authentication object for database modifications
  • Controls who can update your objects
  • Critical for security

Database Maintenance Tasks

Creating New Objects

When creating assignments to customers:

  1. Prepare assignment information:

    • Customer organization details
    • IP address range being assigned
    • Purpose and justification
    • Contact information
  2. Create organization object (if new customer):

    organisation: ORG-ABC1-RIPE
    org-name: Customer Organization Name
    org-type: OTHER
    address: Customer Address
    admin-c: ABC1-RIPE
    tech-c: ABC1-RIPE
    mnt-ref: YOUR-LIR-MNT
    mnt-by: YOUR-LIR-MNT
  3. Create inetnum or inet6num object:

    inetnum: 192.0.2.0 - 192.0.2.255
    netname: CUSTOMER-NETWORK
    descr: Customer Network Description
    country: NL
    admin-c: ABC1-RIPE
    tech-c: ABC1-RIPE
    status: ASSIGNED PA
    mnt-by: YOUR-LIR-MNT
    org: ORG-ABC1-RIPE
  4. Submit through webupdates or email

Updating Existing Objects

Common updates:

  • Contact information changes
  • Organization details
  • Network descriptions
  • Abuse contact updates

Update process:

  1. Query existing object to get current version
  2. Make necessary modifications
  3. Include proper authentication (password or key)
  4. Submit update via webupdates, email, or API
  5. Verify update was successful

Authentication Methods:

  • Password authentication (maintainer password)
  • PGP key signatures (more secure)
  • Single Sign-On through Portal

Deleting Objects

When to delete:

  • Returning IP space to your pool
  • Customer termination
  • Organizational changes
  • Resource transfers

Process:

  1. Ensure resource is no longer in use
  2. Remove any dependent objects first
  3. Submit deletion with proper authentication
  4. Verify deletion completed
  5. Update internal records

Database Best Practices

1. Accuracy is Critical:

  • Keep all information current
  • Update within reasonable time of changes (days, not months)
  • Inaccurate data can lead to compliance issues

2. Abuse Contact Maintenance:

  • Ensure abuse contact is monitored
  • Respond to abuse reports promptly
  • RIPE NCC validates abuse contacts regularly
  • Unresponsive abuse contacts trigger audits

3. Security:

  • Use strong maintainer passwords
  • Consider PGP key authentication
  • Limit access to authorized personnel
  • Regular security audits of your objects

4. Documentation:

  • Document your database management procedures
  • Train multiple staff on database updates
  • Keep internal records matching RIPE Database
  • Maintain history of changes

5. Automation:

  • Use RIPE Database API for bulk operations
  • Implement IP address management (IPAM) tools
  • Automate routine updates where possible
  • Ensure automated systems maintain accuracy

Resource Management Workflows

Assigning IP Addresses to Customers

Step 1: Verify Available Space

  • Check your allocation for available addresses
  • Ensure sufficient space for the request
  • Plan for efficient utilization

Step 2: Document Justification

  • Record customer's need for IP addresses
  • Keep justification documentation
  • May be requested during audits

Step 3: Create Assignment

  • Create database objects
  • Set appropriate status (ASSIGNED PA)
  • Include all required fields
  • Link to customer organization

Step 4: Update Internal Records

  • Record assignment in your IPAM system
  • Update capacity planning
  • Track utilization rates

Step 5: Configure Routing

  • Implement routing for the assigned space
  • Update reverse DNS if applicable
  • Verify connectivity

Processing PI Resource Sponsorship Requests

As an LIR, you can sponsor PI resource requests for organizations that aren't LIRs.

Step 1: Receive PI Request

  • Customer provides their requirements
  • Explain PI resource implications
  • Gather necessary documentation

Step 2: Prepare Application

  • Complete PI request form in LIR Portal
  • Provide customer's justification
  • Include supporting documentation
  • Submit to RIPE NCC

Step 3: RIPE NCC Evaluation

  • RIPE NCC reviews request (3-10 business days)
  • May request additional information
  • Approval or rejection notification

Step 4: PI Resource Assignment

  • RIPE NCC makes assignment
  • Create database objects
  • Set up billing for annual fee (€75/year)

Step 5: Ongoing Sponsorship

  • Maintain sponsorship relationship
  • Handle database updates for customer
  • Process annual fees
  • Coordinate with RIPE NCC as needed

Handling ASN Requests

Step 1: Verify BGP Requirement

  • Confirm customer needs ASN
  • Verify multi-homing or unique routing policy
  • Ensure technical capability

Step 2: Submit Request

  • Complete ASN request form
  • Provide routing policy details
  • Document BGP peering arrangements
  • Submit through LIR Portal

Step 3: Create aut-num Object After approval:

  • Create aut-num object in database
  • Document routing policy
  • Set up BGP configurations

Step 4: Annual Fee Management

  • Track ASN annual fee (€50/year)
  • Include in customer billing if applicable
  • Maintain active ASN status

Compliance and Auditing

Understanding RIPE NCC Audits

RIPE NCC conducts audits to ensure:

  • Resource usage complies with policies
  • Database information is accurate
  • LIRs fulfill their obligations
  • Resources are used as justified

Types of Audits:

1. Registration Data Accuracy:

  • Verify database information is current
  • Check contact reachability
  • Validate organization details
  • Confirm resource usage

2. Resource Utilization:

  • Review how allocated resources are used
  • Verify assignments match justifications
  • Check for unused or warehoused space
  • Ensure proper documentation

3. Abuse Contact Validation:

  • Test abuse contact responsiveness
  • Verify abuse handling processes
  • Check compliance with abuse handling requirements

4. Random Compliance Checks:

  • Periodic sampling of LIR compliance
  • Cross-check internal records with database
  • Verify proper resource management

Responding to Audits

Step 1: Receive Audit Notification

  • RIPE NCC sends audit request via email and Portal
  • Includes specific information requested
  • Provides deadline for response (typically 2-4 weeks)

Step 2: Gather Required Information

  • Collect documentation for all requested items
  • Review database accuracy
  • Prepare explanations for any discrepancies
  • Compile evidence of resource usage

Step 3: Submit Response

  • Respond through LIR Portal or email
  • Provide all requested documentation
  • Explain any issues clearly
  • Submit before deadline

Step 4: Address Findings

  • Review RIPE NCC's audit results
  • Correct any identified issues
  • Update database if needed
  • Implement preventive measures

Step 5: Follow-Up

  • Complete any required corrective actions
  • Confirm resolution with RIPE NCC
  • Update internal processes to prevent recurrence

Maintaining Compliance

Proactive Measures:

1. Regular Database Reviews:

  • Monthly review of all your database objects
  • Verify contact information is current
  • Check for outdated or incorrect data
  • Update as needed

2. Documentation:

  • Maintain justification records for all resource requests
  • Keep customer assignment documentation
  • Document internal IP addressing policies
  • Preserve audit trail of changes

3. Abuse Handling:

  • Monitor abuse contact mailbox daily
  • Respond to abuse reports within 24 hours
  • Maintain abuse handling procedures
  • Document abuse case resolutions

4. Staff Training:

  • Ensure staff understand RIPE policies
  • Train on database management
  • Review compliance requirements regularly
  • Stay updated on policy changes

5. Internal Audits:

  • Conduct self-audits quarterly or semi-annually
  • Check own compliance before RIPE NCC does
  • Identify and correct issues proactively
  • Document audit findings and corrections

Advanced LIR Management

Managing Multiple LIR Accounts

Some organizations operate multiple LIR accounts for:

  • Separate business units
  • Different geographical regions
  • Distinct service offerings
  • Organizational structure

Coordination Strategies:

  • Centralize oversight and management
  • Implement consistent policies across accounts
  • Share best practices between teams
  • Consolidate training and documentation
  • Coordinate with RIPE NCC efficiently

Resource Transfer Management

Transferring Resources: LIRs can participate in IPv4 transfer markets:

As Transferor (Selling):

  1. Identify space available for transfer
  2. Find buyer or use broker
  3. Submit transfer request through Portal
  4. Provide required documentation
  5. RIPE NCC evaluates and approves
  6. Resources transfer to buyer

As Transferee (Buying):

  1. Identify needed resources
  2. Find seller or use broker
  3. Submit transfer request
  4. Demonstrate need and approved usage
  5. Complete due diligence
  6. Receive transferred resources

Transfer Restrictions:

  • New allocations: 2-year hold before transfer
  • Policy compliance required
  • Both parties must be in good standing
  • Fees may apply

Implementing Automation

API Integration: RIPE NCC provides APIs for:

  • Database queries and updates
  • Resource request automation
  • Monitoring and reporting
  • Bulk operations

Benefits:

  • Reduce manual data entry
  • Improve accuracy
  • Scale operations efficiently
  • Integrate with internal systems

Common Automation:

  • IPAM system integration
  • Automated database object creation
  • Reverse DNS management
  • Reporting and analytics

Disaster Recovery and Business Continuity

Critical Considerations:

1. Access Management:

  • Maintain multiple administrators
  • Document access credentials securely
  • Plan for staff turnover or unavailability
  • Test access periodically

2. Documentation:

  • Keep offline copies of critical information
  • Document all processes and procedures
  • Maintain organizational knowledge
  • Store securely with appropriate access

3. Contact Information:

  • Ensure multiple contact points
  • Use role-based addresses (not individual emails)
  • Maintain current phone numbers
  • Plan for personnel changes

4. Resource Records:

  • Maintain internal inventory of resources
  • Document all assignments and allocations
  • Keep justification records
  • Regular backups of data

Best Practices Summary

Daily Operations

  • Monitor abuse contact mailbox
  • Check Portal notifications
  • Review new support tickets
  • Address urgent issues promptly

Weekly Tasks

  • Review pending resource requests
  • Update database for any changes
  • Check billing and payment status
  • Coordinate with team on ongoing issues

Monthly Activities

  • Conduct database accuracy review
  • Review resource utilization
  • Update contact information as needed
  • Review training opportunities
  • Analyze resource usage trends

Quarterly Reviews

  • Comprehensive compliance self-audit
  • Review and update documentation
  • Assess resource needs and planning
  • Team training and knowledge updates
  • Process improvement evaluation

Annual Planning

  • Budget for membership and resource fees
  • Capacity planning for IP resources
  • Staff training and certification plans
  • Policy and procedure updates
  • Strategic resource management planning

Getting Help

RIPE NCC Support Resources

LIR Portal Help:

  • Built-in documentation and guides
  • FAQ sections
  • Video tutorials
  • Getting Started resources

RIPE NCC Support:

  • Email support: lir-help@ripe.net
  • Ticketing system through Portal
  • Phone support for urgent issues
  • Online chat (during business hours)

Community Resources:

  • RIPE mailing lists
  • RIPE Labs articles
  • Community documentation
  • Peer support and discussions

Professional LIR Management Services

For organizations that need additional support, Via-Registry offers:

  • Managed LIR services
  • Database management
  • Compliance assistance
  • Resource request handling
  • Training and consultation

Whether you need occasional help or full outsourced management, expert assistance is available.

For comprehensive information about establishing your LIR membership, see our guide: Becoming a RIPE LIR: Setup & Management.

Conclusion

Effective LIR account management requires attention to detail, ongoing compliance efforts, and proactive administration. By understanding the LIR Portal, maintaining database accuracy, properly handling resource requests, and staying compliant with RIPE NCC requirements, you can maximize the value of your membership while avoiding issues.

Key success factors:

  • Regular database maintenance and accuracy checks
  • Prompt response to audits and compliance requests
  • Effective abuse handling procedures
  • Comprehensive documentation
  • Trained staff and clear processes
  • Proactive rather than reactive management

With proper management practices, your LIR account becomes a valuable asset that enables your organization's network operations and business objectives.


Sources:

Last updated: [Date will be set automatically]