<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Denis,<br class=""><br class="">The RIPE NCC considers an object "co-maintained" if it has both a user maintainer and a RIPE NCC maintainer.<br class=""><br class="">This is how we determine whether an object has "managed" attributes, which are highlighted in blue in the web application query response.<br class=""><br class="">If an ORGANISATION object is co-maintained with the RIPE NCC, the user is not able to change the highlighted values (e.g. “name:”) or remove the object from any RIPE NCC-allocated resources it is associated with. The user is also not able to add/remove the RIPE NCC maintainer from objects.<br class=""><br class="">More information on the highlighted values is available here:<br class=""><a href="https://www.ripe.net/manage-ips-and-asns/db/support/highlighted-values-in-the-ripe-database" class="">https://www.ripe.net/manage-ips-and-asns/db/support/highlighted-values-in-the-ripe-database</a><div class=""><br class=""></div><div class="">Kind regards, </div><div class="">Thiago da Cruz</div><div class=""><br class=""></div><div class=""><br class=""></div><div><br class=""><blockquote type="cite" class=""><div class="">On 1 Aug 2019, at 04:34, ripedenis--- via db-wg <<a href="mailto:db-wg@ripe.net" class="">db-wg@ripe.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class=""><div class="ydpbe227140yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div class=""></div>
<div dir="ltr" data-setdir="false" class="">Hi Jacob</div><div dir="ltr" data-setdir="false" class=""><br class=""></div><div dir="ltr" data-setdir="false" class="">Yes you are right. The RIPE NCC can correct me if I am not entirely correct here :) I believe, if an ORGANISATION object is referenced by a resource object (even if it is "org-type: OTHER") then some attributes in the ORGANISATION object will be locked. These, including the "org-name:", cannot be changed by the resource holder. This can be seen if you query the object in Webupdates, but I am not sure if there is a programatic way of checking this.</div><div dir="ltr" data-setdir="false" class=""><br class=""></div><div dir="ltr" data-setdir="false" class="">Or you could do an inverse query on an ORGANISATION object and if any resource objects are returned (allocations, ASSIGNED PI or ASNs) then you know this ORGANISATION object was subject to due diligence. Again not easy but programatically doable.</div><div dir="ltr" data-setdir="false" class=""><br class=""></div><div dir="ltr" data-setdir="false" class="">cheers</div><div dir="ltr" data-setdir="false" class="">denis</div><div dir="ltr" data-setdir="false" class=""><br class=""></div><div dir="ltr" data-setdir="false" class="">co-chair DB-WG</div><div class=""><br class=""></div>
</div><div id="ydp7349a30fyahoo_quoted_5296247090" class="ydp7349a30fyahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;" class="">
<div class="">
On Thursday, 1 August 2019, 03:37:23 CEST, Jacob Slater <<a href="mailto:jacob@rezero.org" class="">jacob@rezero.org</a>> wrote:
</div>
<div class=""><br class=""></div>
<div class=""><br class=""></div>
<div class=""><div id="ydp7349a30fyiv1629454764" class=""><div class=""><div dir="ltr" class=""><blockquote class="ydp7349a30fyiv1629454764gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex;"> it is type 'OTHER' it was not created by the RIPE NCC and will not have
been subjected to any due diligence checks by the RIPE NCC.</blockquote><div class="">'OTHER' objects which receive direct assignments from the NCC (PI IP space or ASNs) are still subjected to due diligence checks (though only at the time of assignment). <br clear="none" class=""></div><div class="">I'd still argue the flag exists - search for 'ASSIGNED PI' (on IP space) or 'ASSIGNED (on ASNs) with the associated ORG object to see if any exist. Not exactly (currently) straight forward but it is still definitely doable.</div><div class=""><br clear="none" class=""></div><div class="">Jacob Slater<br clear="none" class=""></div></div><br clear="none" class=""><div class="ydp7349a30fyiv1629454764yqt5458224380" id="ydp7349a30fyiv1629454764yqt70712"><div class="ydp7349a30fyiv1629454764gmail_quote"><div class="ydp7349a30fyiv1629454764gmail_attr" dir="ltr">On Wed, Jul 31, 2019 at 6:31 PM ripedenis--- via db-wg <<a shape="rect" href="mailto:db-wg@ripe.net" rel="nofollow" target="_blank" class="">db-wg@ripe.net</a>> wrote:<br clear="none" class=""></div><blockquote class="ydp7349a30fyiv1629454764gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex;"><div class=""><div class="ydp7349a30fyiv1629454764gmail-m_7385208784431022ydp4a8c29b3yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div class=""></div>
<div dir="ltr" class="">HI Nick</div><div dir="ltr" class=""><br clear="none" class=""></div><div dir="ltr" class="">The ORGANISATION object has an "org-type:" attribute. Most ORGANISATION objects have a value of either 'LIR' or 'OTHER'. If it is 'LIR' that ORGANISATION object was created by the RIPE NCC for a resource holder and has been through the due diligence process. If it is type 'OTHER' it was not created by the RIPE NCC and will not have been subjected to any due diligence checks by the RIPE NCC. So I think the 'binary flag' you suggested already exists.</div><div dir="ltr" class=""><br clear="none" class=""></div><div dir="ltr" class="">cheers</div><div dir="ltr" class="">denis</div><div dir="ltr" class=""><br clear="none" class=""></div><div dir="ltr" class="">co-chair DB-WG</div><div dir="ltr" class=""><br clear="none" class=""></div><div class=""><br clear="none" class=""></div>
</div><div class="ydp7349a30fyiv1629454764gmail-m_7385208784431022ydpe60b6bd1yahoo_quoted" id="ydp7349a30fyiv1629454764gmail-m_7385208784431022ydpe60b6bd1yahoo_quoted_4888404803">
<div class="">
<div class="">
On Monday, 29 July 2019, 19:40:47 CEST, Nick Hilliard via db-wg <<a shape="rect" href="mailto:db-wg@ripe.net" rel="nofollow" target="_blank" class="">db-wg@ripe.net</a>> wrote:
</div>
<div class=""><br clear="none" class=""></div>
<div class=""><br clear="none" class=""></div>
<div class=""><div dir="ltr" class=""><div class="ydp7349a30fyiv1629454764gmail-m_7385208784431022ydpe60b6bd1yqt6248895962" id="ydp7349a30fyiv1629454764gmail-m_7385208784431022ydpe60b6bd1yqtfd29095">>> There are ways of flagging whether this process was carried out. One<br clear="none" class="">>> option would be to use a binary flag. Another would be to implement a<br clear="none" class="">>> datestamp for the last due diligence process carried out if it's not<br clear="none" class="">>> been set by the NCC. Lack of data could be flagged by either the<br clear="none" class="">>> absence of the parameter or else use 0000-00-00T00:00:00Z.<br clear="none" class=""> ><br clear="none" class="">> less sure here. i can see wanting to differentiate between the two<br clear="none" class="">> classes of objects. not sure i care when they were last separated.<br clear="none" class="">> unless you expect things to change in time.</div><br clear="none" class=""><br clear="none" class="">if you have a better suggestion, go for it. My concern is mainly about <br clear="none" class="">having a deterministic way of figuring out which org objects have been <br clear="none" class="">subjected to due diligence and which haven't.<br clear="none" class=""><br clear="none" class="">Nick<div class="ydp7349a30fyiv1629454764gmail-m_7385208784431022ydpe60b6bd1yqt6248895962" id="ydp7349a30fyiv1629454764gmail-m_7385208784431022ydpe60b6bd1yqtfd99875"><br clear="none" class=""><br clear="none" class=""></div></div></div>
</div>
</div></div></blockquote></div></div></div></div></div>
</div>
</div></div></div></blockquote></div><br class=""></body></html>