Managing Your RIPE LIR Account
Once you've become a RIPE NCC member and established your Local Internet Registry (LIR) account, effective day-to-day management becomes crucial for maintaining compliance, efficiently handling resource requests, and maximizing the value of your membership. This comprehensive guide covers all aspects of LIR account management, from using the LIR Portal to maintaining database accuracy.
Understanding Your LIR Account
Your LIR account represents your organization's relationship with RIPE NCC and serves as the foundation for all IP resource management activities.
Key Components
1. LIR Account Number
- Unique identifier for your organization (e.g.,
org-ABC123-RIPE) - Used in all RIPE Database objects
- Referenced in all communications with RIPE NCC
- Cannot be changed or transferred
2. Member Services
- Access to RIPE NCC services and support
- Right to request IP resources and ASNs
- Participation in RIPE community activities
- Training and educational resources
3. Associated Resources
- IP address allocations and assignments
- Autonomous System Numbers (ASNs)
- Reverse DNS delegations
- Sponsored PI resources
4. Billing and Financial Account
- Annual membership fees
- Per-resource charges
- Payment methods and invoicing
- Financial history
The LIR Portal: Your Primary Interface
The LIR Portal (https://lirportal.ripe.net/) is your main communication and management interface with RIPE NCC.
Accessing the LIR Portal
Initial Setup: During the membership application process, you nominate one RIPE NCC Access account to receive administrator privileges for the LIR Portal. This person becomes your initial Portal administrator.
Authentication:
- Uses RIPE NCC Access accounts (single sign-on)
- Two-factor authentication available (highly recommended)
- Secure encrypted communication for all data
- Session timeout for security
Access Levels:
- Administrator: Full access to all LIR Portal functions
- Regular User: Limited access based on permissions
- Billing Contact: Access to financial information
- Multiple administrators can be assigned
LIR Portal Dashboard
When you log in, the dashboard provides an overview of:
- Current resource allocations and assignments
- Pending requests and tickets
- Account status and compliance notifications
- Recent activity and changes
- Upcoming renewals and deadlines
- Training opportunities and announcements
Key Portal Functions
1. Resource Requests
Requesting IPv4 Addresses: For RIPE NCC, new LIRs receive a one-time /24 (256 addresses) allocation from the final /8 pool (185.0.0.0/8). Additional IPv4 space must be acquired through transfers.
Process:
- Navigate to "Request Resources" section
- Select "IPv4 Allocation"
- Provide justification (if required)
- Submit request
- Wait for evaluation (typically 1-2 business days)
- Receive allocation confirmation
Requesting IPv6 Addresses: LIRs can request IPv6 allocations based on their addressing plans and justified needs.
Process:
- Prepare addressing plan showing:
- Current infrastructure
- Projected growth
- Assignment plans for the next 2 years
- Submit request through Portal
- Provide technical justification
- RIPE NCC evaluates (typically 3-5 business days)
- Receive allocation (commonly /32, can be larger)
Requesting Additional IPv6 Space: When your existing allocation is 50% utilized or you can justify immediate need, you can request additional space:
- Demonstrate usage of current allocation
- Provide updated addressing plan
- Show specific need for expansion
- Typically results in doubling of allocation size
Requesting ASNs: LIRs can request Autonomous System Numbers for BGP routing.
Requirements:
- Demonstrate need for unique routing policy
- Show at least one operational BGP peering
- Provide routing policy documentation
- Pay annual ASN fee (€50 as of 2025)
Process:
- Submit ASN request through Portal
- Provide BGP peering details
- Document routing policy
- RIPE NCC evaluates technical justification
- Receive ASN assignment
2. Contact Management
Types of Contacts:
Admin Contact:
- Primary administrative contact for the LIR
- Receives important notifications
- Responsible for account management
- Can have multiple admin contacts
Tech Contact:
- Technical personnel for resource management
- Handles database and routing issues
- Receives technical notifications
Billing Contact:
- Financial and invoicing communications
- Payment processing
- Fee notifications and reminders
Abuse Contact:
- Mandatory for all LIR allocations
- Receives abuse reports and complaints
- Must be reachable and responsive
- Validated by RIPE NCC periodically
Managing Contacts:
- Navigate to "Contacts" section in Portal
- Add, edit, or remove contact persons
- Assign appropriate roles to each contact
- Ensure all contact information is current
- Update immediately when personnel changes occur
Best Practice: Maintain at least two people for each critical contact role to ensure continuity during vacations or staff turnover.
3. Account Information Management
Organization Details:
- Legal name and registration information
- Physical address
- Correspondence preferences
- Language settings
Updating Organization Information:
- Requires supporting documentation for legal name changes
- Address changes must reflect actual location
- Changes may trigger verification process
- Keep information current to maintain compliance
Membership Status:
- View current membership status
- Check payment status
- Review compliance standing
- Access membership history
4. Billing and Payments
Invoicing:
- Annual membership invoices
- Per-resource fee invoices
- Invoice history and archives
- Download invoices in PDF format
Payment Methods:
- Bank transfer (most common)
- Credit card (for some services)
- Direct debit (available in some countries)
- SEPA transfers for European members
Payment Terms:
- Payment due within 30 days of invoice date
- Late payment may result in service suspension
- Automatic reminders before due dates
- Payment confirmation in Portal
Managing Billing:
- Set up payment method preferences
- Ensure billing contact receives invoices
- Schedule payments to avoid late fees
- Keep payment information current
- Review charges for accuracy
5. Training and Certification
Available Training:
- LIR Training Courses (free for members)
- IPv6 deployment workshops
- RIPE Database training
- Security and routing courses
- Online webinars and tutorials
Booking Training:
- Browse available courses in Portal
- Register for in-person or online sessions
- Receive confirmation and materials
- Complete courses and assessments
- Obtain certificates
RIPE NCC Certified Professionals:
- Professional certification program
- Free certification vouchers for members
- Demonstrates expertise to customers
- Continuing education requirements
Value: Take full advantage of free training – commercial equivalents cost €500-1,500 per course.
6. Tickets and Support
Creating Support Tickets:
- Technical questions about resources
- Account management issues
- Policy interpretation
- Database problems
- General membership inquiries
Ticket Management:
- Submit ticket through Portal
- Provide detailed description
- Attach relevant documentation
- Track ticket status
- Receive responses via email and Portal
- Close ticket when resolved
Response Times:
- Routine queries: 1-3 business days
- Urgent technical issues: Same business day
- Resource requests: According to published SLAs
- Billing questions: 1-2 business days
Managing the RIPE Database
The RIPE Database is the public registry of Internet number resources in the RIPE NCC service region. As an LIR, you're responsible for maintaining accurate information about your resources.
Understanding Database Objects
Key Object Types:
inetnum (IPv4) / inet6num (IPv6):
- Represents IP address ranges
- Contains allocation or assignment information
- Includes status, usage details, and contacts
aut-num:
- Represents ASN assignments
- Contains routing policy information
- Includes peering details
organisation:
- Your LIR organization record
- Legal and contact information
- Links to all your resources
person / role:
- Contact information for individuals or roles
- Used for admin, tech, and abuse contacts
- Must be kept current
mntner (Maintainer):
- Authentication object for database modifications
- Controls who can update your objects
- Critical for security
Database Maintenance Tasks
Creating New Objects
When creating assignments to customers:
-
Prepare assignment information:
- Customer organization details
- IP address range being assigned
- Purpose and justification
- Contact information
-
Create organization object (if new customer):
organisation: ORG-ABC1-RIPE org-name: Customer Organization Name org-type: OTHER address: Customer Address admin-c: ABC1-RIPE tech-c: ABC1-RIPE mnt-ref: YOUR-LIR-MNT mnt-by: YOUR-LIR-MNT -
Create inetnum or inet6num object:
inetnum: 192.0.2.0 - 192.0.2.255 netname: CUSTOMER-NETWORK descr: Customer Network Description country: NL admin-c: ABC1-RIPE tech-c: ABC1-RIPE status: ASSIGNED PA mnt-by: YOUR-LIR-MNT org: ORG-ABC1-RIPE -
Submit through webupdates or email
Updating Existing Objects
Common updates:
- Contact information changes
- Organization details
- Network descriptions
- Abuse contact updates
Update process:
- Query existing object to get current version
- Make necessary modifications
- Include proper authentication (password or key)
- Submit update via webupdates, email, or API
- Verify update was successful
Authentication Methods:
- Password authentication (maintainer password)
- PGP key signatures (more secure)
- Single Sign-On through Portal
Deleting Objects
When to delete:
- Returning IP space to your pool
- Customer termination
- Organizational changes
- Resource transfers
Process:
- Ensure resource is no longer in use
- Remove any dependent objects first
- Submit deletion with proper authentication
- Verify deletion completed
- Update internal records
Database Best Practices
1. Accuracy is Critical:
- Keep all information current
- Update within reasonable time of changes (days, not months)
- Inaccurate data can lead to compliance issues
2. Abuse Contact Maintenance:
- Ensure abuse contact is monitored
- Respond to abuse reports promptly
- RIPE NCC validates abuse contacts regularly
- Unresponsive abuse contacts trigger audits
3. Security:
- Use strong maintainer passwords
- Consider PGP key authentication
- Limit access to authorized personnel
- Regular security audits of your objects
4. Documentation:
- Document your database management procedures
- Train multiple staff on database updates
- Keep internal records matching RIPE Database
- Maintain history of changes
5. Automation:
- Use RIPE Database API for bulk operations
- Implement IP address management (IPAM) tools
- Automate routine updates where possible
- Ensure automated systems maintain accuracy
Resource Management Workflows
Assigning IP Addresses to Customers
Step 1: Verify Available Space
- Check your allocation for available addresses
- Ensure sufficient space for the request
- Plan for efficient utilization
Step 2: Document Justification
- Record customer's need for IP addresses
- Keep justification documentation
- May be requested during audits
Step 3: Create Assignment
- Create database objects
- Set appropriate status (ASSIGNED PA)
- Include all required fields
- Link to customer organization
Step 4: Update Internal Records
- Record assignment in your IPAM system
- Update capacity planning
- Track utilization rates
Step 5: Configure Routing
- Implement routing for the assigned space
- Update reverse DNS if applicable
- Verify connectivity
Processing PI Resource Sponsorship Requests
As an LIR, you can sponsor PI resource requests for organizations that aren't LIRs.
Step 1: Receive PI Request
- Customer provides their requirements
- Explain PI resource implications
- Gather necessary documentation
Step 2: Prepare Application
- Complete PI request form in LIR Portal
- Provide customer's justification
- Include supporting documentation
- Submit to RIPE NCC
Step 3: RIPE NCC Evaluation
- RIPE NCC reviews request (3-10 business days)
- May request additional information
- Approval or rejection notification
Step 4: PI Resource Assignment
- RIPE NCC makes assignment
- Create database objects
- Set up billing for annual fee (€75/year)
Step 5: Ongoing Sponsorship
- Maintain sponsorship relationship
- Handle database updates for customer
- Process annual fees
- Coordinate with RIPE NCC as needed
Handling ASN Requests
Step 1: Verify BGP Requirement
- Confirm customer needs ASN
- Verify multi-homing or unique routing policy
- Ensure technical capability
Step 2: Submit Request
- Complete ASN request form
- Provide routing policy details
- Document BGP peering arrangements
- Submit through LIR Portal
Step 3: Create aut-num Object After approval:
- Create aut-num object in database
- Document routing policy
- Set up BGP configurations
Step 4: Annual Fee Management
- Track ASN annual fee (€50/year)
- Include in customer billing if applicable
- Maintain active ASN status
Compliance and Auditing
Understanding RIPE NCC Audits
RIPE NCC conducts audits to ensure:
- Resource usage complies with policies
- Database information is accurate
- LIRs fulfill their obligations
- Resources are used as justified
Types of Audits:
1. Registration Data Accuracy:
- Verify database information is current
- Check contact reachability
- Validate organization details
- Confirm resource usage
2. Resource Utilization:
- Review how allocated resources are used
- Verify assignments match justifications
- Check for unused or warehoused space
- Ensure proper documentation
3. Abuse Contact Validation:
- Test abuse contact responsiveness
- Verify abuse handling processes
- Check compliance with abuse handling requirements
4. Random Compliance Checks:
- Periodic sampling of LIR compliance
- Cross-check internal records with database
- Verify proper resource management
Responding to Audits
Step 1: Receive Audit Notification
- RIPE NCC sends audit request via email and Portal
- Includes specific information requested
- Provides deadline for response (typically 2-4 weeks)
Step 2: Gather Required Information
- Collect documentation for all requested items
- Review database accuracy
- Prepare explanations for any discrepancies
- Compile evidence of resource usage
Step 3: Submit Response
- Respond through LIR Portal or email
- Provide all requested documentation
- Explain any issues clearly
- Submit before deadline
Step 4: Address Findings
- Review RIPE NCC's audit results
- Correct any identified issues
- Update database if needed
- Implement preventive measures
Step 5: Follow-Up
- Complete any required corrective actions
- Confirm resolution with RIPE NCC
- Update internal processes to prevent recurrence
Maintaining Compliance
Proactive Measures:
1. Regular Database Reviews:
- Monthly review of all your database objects
- Verify contact information is current
- Check for outdated or incorrect data
- Update as needed
2. Documentation:
- Maintain justification records for all resource requests
- Keep customer assignment documentation
- Document internal IP addressing policies
- Preserve audit trail of changes
3. Abuse Handling:
- Monitor abuse contact mailbox daily
- Respond to abuse reports within 24 hours
- Maintain abuse handling procedures
- Document abuse case resolutions
4. Staff Training:
- Ensure staff understand RIPE policies
- Train on database management
- Review compliance requirements regularly
- Stay updated on policy changes
5. Internal Audits:
- Conduct self-audits quarterly or semi-annually
- Check own compliance before RIPE NCC does
- Identify and correct issues proactively
- Document audit findings and corrections
Advanced LIR Management
Managing Multiple LIR Accounts
Some organizations operate multiple LIR accounts for:
- Separate business units
- Different geographical regions
- Distinct service offerings
- Organizational structure
Coordination Strategies:
- Centralize oversight and management
- Implement consistent policies across accounts
- Share best practices between teams
- Consolidate training and documentation
- Coordinate with RIPE NCC efficiently
Resource Transfer Management
Transferring Resources: LIRs can participate in IPv4 transfer markets:
As Transferor (Selling):
- Identify space available for transfer
- Find buyer or use broker
- Submit transfer request through Portal
- Provide required documentation
- RIPE NCC evaluates and approves
- Resources transfer to buyer
As Transferee (Buying):
- Identify needed resources
- Find seller or use broker
- Submit transfer request
- Demonstrate need and approved usage
- Complete due diligence
- Receive transferred resources
Transfer Restrictions:
- New allocations: 2-year hold before transfer
- Policy compliance required
- Both parties must be in good standing
- Fees may apply
Implementing Automation
API Integration: RIPE NCC provides APIs for:
- Database queries and updates
- Resource request automation
- Monitoring and reporting
- Bulk operations
Benefits:
- Reduce manual data entry
- Improve accuracy
- Scale operations efficiently
- Integrate with internal systems
Common Automation:
- IPAM system integration
- Automated database object creation
- Reverse DNS management
- Reporting and analytics
Disaster Recovery and Business Continuity
Critical Considerations:
1. Access Management:
- Maintain multiple administrators
- Document access credentials securely
- Plan for staff turnover or unavailability
- Test access periodically
2. Documentation:
- Keep offline copies of critical information
- Document all processes and procedures
- Maintain organizational knowledge
- Store securely with appropriate access
3. Contact Information:
- Ensure multiple contact points
- Use role-based addresses (not individual emails)
- Maintain current phone numbers
- Plan for personnel changes
4. Resource Records:
- Maintain internal inventory of resources
- Document all assignments and allocations
- Keep justification records
- Regular backups of data
Best Practices Summary
Daily Operations
- Monitor abuse contact mailbox
- Check Portal notifications
- Review new support tickets
- Address urgent issues promptly
Weekly Tasks
- Review pending resource requests
- Update database for any changes
- Check billing and payment status
- Coordinate with team on ongoing issues
Monthly Activities
- Conduct database accuracy review
- Review resource utilization
- Update contact information as needed
- Review training opportunities
- Analyze resource usage trends
Quarterly Reviews
- Comprehensive compliance self-audit
- Review and update documentation
- Assess resource needs and planning
- Team training and knowledge updates
- Process improvement evaluation
Annual Planning
- Budget for membership and resource fees
- Capacity planning for IP resources
- Staff training and certification plans
- Policy and procedure updates
- Strategic resource management planning
Getting Help
RIPE NCC Support Resources
LIR Portal Help:
- Built-in documentation and guides
- FAQ sections
- Video tutorials
- Getting Started resources
RIPE NCC Support:
- Email support: lir-help@ripe.net
- Ticketing system through Portal
- Phone support for urgent issues
- Online chat (during business hours)
Community Resources:
- RIPE mailing lists
- RIPE Labs articles
- Community documentation
- Peer support and discussions
Professional LIR Management Services
For organizations that need additional support, Via-Registry offers:
- Managed LIR services
- Database management
- Compliance assistance
- Resource request handling
- Training and consultation
Whether you need occasional help or full outsourced management, expert assistance is available.
For comprehensive information about establishing your LIR membership, see our guide: Becoming a RIPE LIR: Setup & Management.
Conclusion
Effective LIR account management requires attention to detail, ongoing compliance efforts, and proactive administration. By understanding the LIR Portal, maintaining database accuracy, properly handling resource requests, and staying compliant with RIPE NCC requirements, you can maximize the value of your membership while avoiding issues.
Key success factors:
- Regular database maintenance and accuracy checks
- Prompt response to audits and compliance requests
- Effective abuse handling procedures
- Comprehensive documentation
- Trained staff and clear processes
- Proactive rather than reactive management
With proper management practices, your LIR account becomes a valuable asset that enables your organization's network operations and business objectives.
Sources:
- RIPE NCC LIR Portal: https://lirportal.ripe.net/
- LIR Portal Getting Started: https://lirportal.ripe.net/getting_started
- RIPE NCC LIR Basics: https://www.ripe.net/membership/member-support/lir-basics/
- Requesting Resources through the LIR Portal: https://www.ripe.net/manage-ips-and-asns/resource-management/requesting-resources-through-the-lir-portal/
Last updated: [Date will be set automatically]