[ncc-services-wg] Implementation of Resource Certification (RPKI) for PI End User Resources

On 22/10/2013 16:12, Alex Band wrote:
> The issue is: A PI End user must prove to the RIPE NCC that they truly
> are the legitimate holder of the resources they would like to have a
> certificate for. What proof do they need to give to the RIPE NCC before
> we grant them access to the system?

there's no way of necessarily knowing that the contact info in the ripe
database is correct, even if the resources are correctly registered to the
legal person described in the organisation object.  This means that the
RIPE NCC has no real way of knowing if J. Random end user is the correct
contact for the PI resource, which means that it needs to devolve the
initial stage of this authorisation to the sponsoring LIR.  This probably
sucks.

Nick