Summary

  • A company register identifies legal entities and records specified changes. It supports public reliance without certifying that every transaction, product, forecast or business decision is sound.
  • Incorporation and a statement of lawful purpose do not grant a universal business licence. Sector regulators, tax authorities, competition bodies, courts, creditors, shareholders and directors retain distinct responsibilities.
  • The United Kingdom's recent register reforms strengthen accuracy, identity verification, querying, annotation and anti-abuse powers. The new powers remain tied to statutory objectives and review rather than general authority over commercial strategy.
  • Singapore, New Zealand and the European Union likewise organise company information around identity, officers, ownership, filings and cross-border status. Interconnection transports authoritative records; it does not create a supranational manager for each company.
  • Internet number registration should make exact claims about unique ranges, recognised holders, authorised changes, service relationships, history and disputes. Routing, customer selection, prices, facilities and lawful deployment belong outside that record.
  • A thin register must still be accountable: authenticate filers, preserve event history, correct error, protect sensitive data, explain adverse decisions, permit independent review and support portability between qualified registration providers.

The company number answers an identity question

Incorporation gives a company a legal identity distinct from the people who own or manage it. The public register makes that identity discoverable. A searcher can distinguish two businesses with similar trading names, connect a filing to the right corporation and determine whether the entity remains active, dissolved or subject to another recorded status. The company number is valuable precisely because it is stable while officers, addresses and activities may change.

Companies House explains in its current incorporation guidance that a business cannot operate as a limited company until incorporation under the Companies Act 2006. The resulting entity has a separate identity from its owners or managers. Directors then have recurring duties to file accounts, confirmation statements and notices of specified changes.

The certificate and number do not answer every question about the business. They do not prove that a supplier will perform, that a product is safe, that accounts show tomorrow's solvency, that a director had authority for a particular unusual contract or that a company has every sector-specific licence. A careful counterparty uses the register as one source of legally significant identity and history, then examines the evidence relevant to the transaction.

Internet numbers need the same disciplined semantics. A registration can identify the organisation currently recognised for a prefix and the service responsible for maintaining that record. It can show a transfer date, predecessor, public contact and dispute status. It should not be read as a guarantee that routes will be accepted worldwide, that every address is active, that an operator is financially sound or that all downstream activity is lawful.

Confidence grows when the register states less than omniscience and delivers that bounded statement reliably. The company number does not become weak because it fails to describe the enterprise's entire life. Its strength is that people know the identity proposition it is meant to support.

Registration creates legal capacity, not a universal licence

A limited company can enter contracts, own assets, incur liabilities and continue despite changes in membership. Incorporation supplies a legal form. It does not exempt the company from laws governing the activity it later chooses. A bank needs financial authorisation. An airline needs safety and operating approvals. A restaurant must meet food and local requirements. A telecommunications provider may need sector permissions. The company registrar does not issue all of those approvals through the act of incorporation.

The distinction is essential when public register status is used in argument. "Registered company" means that the entity exists on the register under the applicable companies legislation. It does not mean "government-approved business model." Conversely, the registrar's acceptance of a filing does not prevent another competent body from investigating fraud, competition, tax, employment, sanctions, environmental or consumer breaches.

This division allocates expertise. Company registrars specialise in incorporation, filings, public records and corporate status. Sector authorities examine risks particular to banking, aviation, health, communications or other regulated activity. Courts resolve legal disputes. Directors manage the company's business. Shareholders exercise rights under company law and the constitution. Creditors negotiate protection or invoke insolvency law.

Number registration should avoid the same category error. Recognition of a holder supports uniqueness and accountable change. It is not a global licence for every packet or service. Applicable authorities can investigate unlawful conduct, and networks can enforce contracts and routing policies. But those separate powers do not turn the number registrar into the universal regulator of everything an address may reach.

A registrar that conditions recognition on an open-ended review of business desirability combines several offices without the law, evidence standards or appeal structures that normally accompany them. The better rule is attribution: the recordkeeper maintains the record; the competent authority regulates the activity; the operator runs the network.

Commercial purpose belongs to directors and members within law

Company law can require a statement that an entity will act for lawful purposes. It can restrict misleading names, prohibit fraudulent filings and impose duties on directors. Those controls establish a legal perimeter. They do not require the registrar to approve a detailed commercial plan before every change in product, customer or market.

The Economic Crime and Corporate Transparency Act 2023 explanatory material describes the United Kingdom's new lawful-purpose statements at incorporation and in confirmation statements. The reform responds to abuse of corporate forms. Its focus is legality and integrity, not selection of an economically preferred purpose.

This boundary matters because commercial purpose is dynamic. A software company may become an infrastructure provider. A manufacturer may license intellectual property. A holding company may acquire an operating subsidiary. A dormant entity may resume trade. Directors make those choices subject to duties, shareholder powers, contract, financing and applicable regulation. Requiring the company registrar to adjudicate each strategic change would slow ordinary commerce and make the register inaccurate whenever real activity moved faster than administrative approval.

IPv4 holders also change use. A range may support access customers, hosted systems, enterprise services, security mitigation, migration, leasing or reserve capacity at different times. Corporate restructuring may move operation without immediately changing legal holdership, or transfer may move holdership before every route changes. These variations can be lawful and commercially rational.

The number record should capture facts needed for uniqueness, authority and contact. If a transfer rule lawfully requires a recipient to state intended operational use, the registrar can verify the required evidence within that rule. It should not transform the statement into permanent authority over business evolution. A lawful-purpose boundary is not a mandate to choose the purpose.

A register is a history of specified legal changes

The value of a company register lies not only in the current page but in the sequence of filings. Incorporation, name change, registered-office move, director appointment, share-capital event, charge, annual accounts, confirmation statement, insolvency step and dissolution can each affect how outsiders understand the entity. Dates and document types let a searcher reconstruct what the register showed when a decision was made.

The company remains responsible for many underlying records and acts. A board resolves to appoint an officer; the legally required notice then updates the public record. Shareholders agree or approve a change; the filing records the resulting event. The registrar is not present at every meeting and does not negotiate every transaction. It receives, checks and publishes the material that legislation makes registrable.

That separation supports a useful evidential vocabulary. "Filed" means delivered to the registrar. "Registered" may give the document or event a specified legal effect. "Verified identity" means the person satisfied the applicable identity check. None necessarily means that the registrar independently audited every factual assertion in the company's business.

Number history should use equally precise states. Original allocation, succession, transfer, split, combination, correction, service move, dispute notation and release should be durable events. The record should say whether an event was asserted by a holder, verified by the registrar, directed by a court or matched with another registration service.

Silent replacement weakens both kinds of register. If a false director appointment disappears without history, a counterparty cannot understand a prior search. If an IPv4 holder changes without a predecessor event, later buyers cannot evaluate authority. Additive correction preserves reliance: the current state becomes accurate while the earlier record and reason for change remain available under appropriate access rules.

Public reliance needs bounded claims

Company registers are public because outsiders cannot efficiently ask every company for the same foundational information. A common record lowers the cost of identifying counterparties, officers and formal status. It also allows journalists, researchers, creditors, customers and authorities to compare filings over time.

Public availability creates a temptation to overread. A filed account is historical and prepared under rules that vary with company size and type. A registered office is an official contact address, not necessarily the factory, shop or centre of management. An industry description may be broad. A director entry records an appointment, not personal approval of every transaction. The register supports inquiry; it does not end it.

The United Kingdom's current personal-information guidance illustrates deliberate boundaries. Some officer and control information is public, while residential addresses and full dates of birth receive protection in ordinary access. The public interest in identification is balanced against fraud and safety risk.

Internet registration needs a similar public/private design. Public data may include the prefix, recognised organisation, service provider, broad status, transfer date and workable abuse or technical contact. Identity documents, board resolutions, private agreements, residential details, security evidence and protected dispute material can remain restricted while the register records that the relevant check occurred.

The strongest public statement is one users can interpret correctly. "Current recognised holder" is useful. "Owner of every activity using these addresses" is usually not. "Public abuse contact" is useful. "Person legally responsible for every packet" may be false. Bounded labels reduce both privacy exposure and institutional overclaim.

Accuracy does not require the registrar to know everything

Historically, Companies House was often described as a recipient and publisher of information with limited power to test its integrity. Abuse exposed the cost of that model: false appointments, unauthorised registered-office changes and misleading filings could remain visible until a cumbersome correction was completed. The response has been stronger powers, not abandonment of institutional scope.

The government factsheet on the role and powers of the Registrar of Companies explains the change. The registrar's traditional role was to register company information and make it available for public inspection. The 2023 Act added objectives aimed at accurate and complete registers, preventing false or misleading impressions and reducing unlawful use of companies.

Accuracy in that context is relational. The register should contain what legislation requires and should not present known falsehood as reliable. The registrar can query inconsistency, demand additional information in stated circumstances, reject defective delivery, annotate material and use removal powers subject to legal limits. It can share information with enforcement bodies.

None of this makes the registrar an auditor of every invoice, customer or management forecast. The reform materials expressly contemplate cooperation with, and appropriate deference to, law enforcement. Powers are tied to statutory objectives and documents delivered to the register.

A number registrar should be neither a passive noticeboard nor an omniscient supervisor. It can authenticate the holder, question contradictory transfer evidence, detect overlapping claims, annotate a dispute and correct an unauthorised change. It can refer suspected crime. It does not need continuous visibility into traffic, customer contracts and facility operations to keep the registration state accurate.

Thin scope and active verification are compatible. The institution knows exactly which facts it must get right and invests its authority there.

The registrar's objectives constrain as well as empower

Section 1081A of the amended Companies Act gives the United Kingdom registrars four objectives: proper delivery of required documents; accurate and complete register information; avoidance of false or misleading public impressions; and prevention of companies or others carrying out or facilitating unlawful activities. Companies House's rules and powers guidance explains how those objectives guide functions and resources.

The fourth objective is broad enough to matter and narrow enough to require discipline. It does not say that the registrar should maximise growth, select industries, approve prices or manage each enterprise. Action still needs a statutory power. An objective cannot create a free-standing power where legislation supplies none. Evidence and proportionality remain relevant, especially when removal of material can affect the interests of the company and third parties who relied on the register.

This relationship between objective and power is vital for number governance. Registration institutions often have broad mission language about conservation, stewardship, community benefit or Internet stability. Such language can guide exercise of actual functions. It should not be treated as authority to take any action plausibly connected to the Internet.

If a registrar wants to freeze a transfer, it should identify the rule, contradictory evidence, affected range, duration and review path. If it wants more information, it should explain which registrable fact the information verifies. If it claims a security emergency, it should state which registration-controlled service is at risk. General institutional purpose is not enough.

Accountability becomes possible when users can map decision to power. Courts and reviewers can test whether the registrar pursued a statutory objective through a permitted means. Members can debate whether rules remain appropriate. Operators can comply without guessing which commercial choices staff will favour. A bounded objective is therefore not administrative weakness; it is the condition of legitimate strength.

Identity verification improves the record without transferring management

False corporate appointments exploit the gap between a name on a form and the person behind it. The United Kingdom has responded with identity-verification requirements for directors, people with significant control and those filing information, phased under the 2023 reforms. Companies House can use government identity services or authorised corporate service providers, and supporting identity material is not ordinarily published on the company register.

Identity verification answers a focused question: is the person who claims a registrable role or filing authority the person they say they are? It can deter fabricated directors and improve attribution. It does not prove that every board decision is wise, that the person has no conflicts, or that a specific transaction complies with every duty.

Number systems need the same layered treatment. An account login proves access to a credential. Identity verification connects the user to a person. Corporate authority connects that person to an organisation and a particular act. Holdership connects the organisation to the prefix. Operational control may belong to another authorised party. Each fact requires its own evidence.

Collapsing the layers creates predictable error. A former employee may retain credentials but lack authority. A genuine director may need board approval for a major disposition. A managed-service provider may originate routes without holding the resource. A broker may possess transaction documents without power to change the record.

Registration services should authenticate all material instructions, require stronger corporate evidence for high-impact changes and preserve who approved what. They should also minimise sensitive retention and publish only the status necessary for reliance. Good identity practice makes the registrar better at recognising the authorised actor. It does not make that registrar the actor's manager.

Query, annotation and correction are better than secret suspicion

When information appears inconsistent, a public registrar needs options between unquestioning acceptance and permanent deletion. A query can pause or seek clarification. An annotation can warn searchers that material is contested or under review. Correction can replace the current state while preserving why it changed. Removal may be appropriate for false, unauthorised or unlawfully exposed material under stated powers.

Visible states protect several interests. The company can respond to a concrete issue. A third party can see that reliance requires caution. The registrar can investigate without pretending it has already proved fraud. A later reviewer can determine whether the final action followed the evidence.

Number registries often need the same intermediate vocabulary. A transfer can be pending identity evidence, matched, held by a legal restraint, disputed as to authority, approved or final. A prefix can remain in its last verified state while a challenge is examined. A public note can state the scope of a dispute without exposing private allegations.

The scope must be exact. A complaint about one sub-range should not stain an entire corporate portfolio. A payment dispute may not affect registration at all if both parties agree that the transfer completed. A route hijack can justify urgent security coordination while the holder record remains unchanged. An old address mismatch may need correction rather than suspension.

Secret suspicion is dangerous because it has no natural end. Staff may delay a request without a formal decision, leaving the holder unable to appeal. A visible query needs an issue, owner and time limit. An annotation needs criteria for removal. A correction needs a reason and effective date. Procedural states turn caution into something the institution can defend.

Legal effect and factual truth are not identical

Some company filings have legal consequences when registered. Others give public notice of an act that occurred elsewhere. The distinction depends on the statute and document. A certificate may be conclusive for a specified proposition without proving every underlying fact in the company's affairs.

This difference matters during correction. Removing a false address is not always the same as reversing an incorporation. Correcting a director's service address is not the same as deciding whether the director breached duty. Rectifying an unauthorised filing may affect a third party who relied on the public record, so the law can require notice or a balancing of interests.

Internet number records also combine administrative and evidential effects. A transfer entry can determine which organisation the registrar recognises for services. That recognition can influence RPKI access, reverse DNS and counterparties. It may be strong evidence in a private dispute. It does not necessarily settle property characterisation under every national law.

Honest institutions say which effect they control. The registrar can commit that only the recognised holder may instruct specified services. It can certify that a transfer event occurred in its record at a stated time. It cannot guarantee that no creditor, court, contractual claimant or public authority has a relevant claim beyond the register.

Thin registration is therefore not a low-value directory. Its bounded acts can have substantial consequence. That is why correction, notice, reason and remedy matter. The narrower the asserted legal effect, the easier it is for operators and courts to combine the record with other evidence without treating one administrative entry as universal truth.

Singapore separates business registration from business operation

Singapore's Accounting and Corporate Regulatory Authority is a national regulator of business registration, financial reporting, public accountants and corporate service providers. Its remit is broader than a filing office, but its public company records remain organised around entity identity, officers, shareholders and controllers rather than day-to-day management.

ACRA's current business-registration guidance explains why registration matters: customers and suppliers can check who owns a business, and a registered entity can transact through its chosen legal form. The same guidance tells foreign founders to consult the authority responsible for their immigration or work status. Registration and permission to work are distinct.

The company-register requirements require accurate, timely records of directors, members and other key persons. Some controller and nominee information receives restricted treatment even while public registers support transaction checks. Corporate service providers face their own registration and anti-abuse duties.

This is a useful answer to the claim that a narrow register must be naive. Singapore combines accessible entity information, rapid updates, beneficial-control measures, regulated intermediaries and sectoral government. The company still decides whether to sell software, operate a shop or build infrastructure, subject to the law governing that activity.

A number registrar can use the same institutional pattern. Verify the entity and representative. Regulate intermediaries where a legal framework supports it. Keep protected ownership evidence secure. Publish the minimum record needed for counterparties and network operators. Refer sector conduct to the body that has jurisdiction. Strong gates around identity and change do not require a gate around every lawful operational decision.

New Zealand shows the difference between management and reporting

The New Zealand Companies Register lets users search companies and maintain addresses, directors and shareholders. Companies confirm information through annual returns. The Companies Office guidance for directors says directors manage the company's business and affairs, make policy and bind the company in contracts. It separately lists their responsibility to maintain records and report required information to the Companies Office.

That separation is unusually clear. Directors manage; the register records. A company's own share register and corporate records remain important even where selected shareholder information is also filed publicly. An annual return confirms specified details and continuing operation; the guidance warns that it is not a financial statement.

The model also shows how registrar power can be consequential without becoming managerial. Failure to file an annual return can lead to removal from the register. Director and shareholder consents support authentic formation. The office can request additional identity information in stated circumstances. These are compliance controls tied to the legal form.

For Internet numbers, the equivalent annual discipline might confirm holder existence, authoritative contacts and exact holdings. Failure should first produce notice, correction assistance and a visible compliance state. If an organisation has dissolved, chain research can identify a successor or a genuinely unclaimed range. The review should not require the registrar to approve each network service.

The New Zealand example also cautions against overloaded labels. An annual return is not proof of financial health. A route announcement is not proof of holdership. A registration-services agreement is not proof of universal ownership. Each document should be used for the question it was designed to answer.

European interconnection moves records without centralising management

The European Business Registers Interconnection System, or BRIS, connects national business registers through the European e-Justice Portal. Users can search by company or registration number and obtain available national information such as constitutional documents, accounts, subscribed capital and legal representatives. Registers also exchange information about cross-border operations and branches.

The European Commission's company-law overview describes BRIS as operating since 2017. The e-Justice explanation states that information is gathered in real time from Member State registers. Interconnection does not replace those national sources with a single European manager for every company.

This is a useful model for global number registration. Several qualified services can maintain accountable relationships with holders while exchanging enough authenticated information to preserve one current state. A user should be able to find the responsible service, current holder and event history without accepting one institution's authority over every region and operation.

Interconnection requires common identifiers, message formats, provenance and rules for cross-border events. A corporate merger or branch change must be attributed to the competent national record. An IPv4 transfer or service move needs matched release and receipt, exact prefix identity, effective time and reconciliation. The shared layer transports authoritative statements; it should not expand them.

Federation fails if conflicting current records persist or if each service can invent a different meaning for holder. Centralisation fails if one office uses technical interconnection to claim managerial power. BRIS demonstrates the institutional middle: national legal responsibility, shared discovery and cross-border notification. Number governance can pursue the same combination of unity in record and plurality in administration.

Dissolution records status; it does not decide every asset

When a company dissolves, the register records a major legal change. Insolvency practitioners, courts, creditors, public authorities and property law may then determine what happens to assets and liabilities. The registrar's status entry is important but does not by itself adjudicate every contested transfer that preceded dissolution or identify every successor.

The distinction is especially important for historic IPv4 holdings. An old registered organisation may have disappeared through merger, liquidation, reorganisation or simple administrative dissolution. A stale company name does not automatically mean that the addresses are ownerless. The network business or relevant rights may have passed under an agreement or operation of law. Conversely, a former technical contact does not acquire authority merely because nobody updated the record.

A number registrar should treat corporate status as evidence that triggers a defined inquiry. It can seek merger documents, asset dispositions, court orders, public filings and proof of representation. It should preserve the last verified state while evaluating competing claims. If no successor can be established after proportionate notice and time, an applicable recovery rule may address the range.

Company registers improve this inquiry because they provide stable identity, dates and filed changes. They do not eliminate the need to interpret transaction documents under relevant law. The number registrar can verify that evidence sufficient for its service standard exists without pretending to issue a universal judgment about every asset in the insolvency estate.

This is another reason to keep the number record thin. A service that claims authority only over recognition and technical registration can pause, verify and update. A service that claims to own all unresponsive ranges has an incentive to convert uncertainty into forfeiture. Accurate status should begin investigation, not predetermine confiscation.

Routing is to the number register what trading is to the company register

A company may be incorporated but dormant, actively trading under several brands, operating through agents, or holding assets while a subsidiary serves customers. The public register does not continuously measure sales to decide whether the company still exists. Trading activity can inform enforcement or dissolution questions, but it is not identical to legal identity.

Routing has the same relationship to an IPv4 record. A prefix may be announced by the holder, an upstream, a mitigation provider or another authorised operator. It may be withdrawn temporarily or used privately. A hijacker may create a visible route without acquiring the right to change registration. Multiple origins or more-specific announcements can reflect legitimate engineering or abuse depending on authority and context.

RFC 7020 provides the crucial boundary: registration accuracy ensures uniqueness and useful allocation information, while whether addresses are announced and how they are advertised are operational considerations outside the registry system. The registrar and operator can exchange evidence without collapsing their roles.

Route data is still valuable. An unexpected origin can trigger contact with the holder. Long absence combined with dissolved status and failed notice may support an abandonment inquiry. A transfer plan may coordinate RPKI and reverse-DNS changes. But the evidence must be interpreted against the proposition being tested.

The company analogy prevents a simple mistake. A registrar would not normally transfer a company to whoever generated the most sales under its name. A number registrar should not transfer a prefix to whoever produced the most visible traffic. Identity and authority come from the legal and registration chain; operations are evidence of use, not self-proving title.

Commercial overreach makes the record less accurate

When a registrar asks only for information tied to identity, authority and required status, holders have a reason to keep the record current. When every update opens an inquiry into customers, prices, facilities and strategy, accurate reporting becomes costly and risky. Holders delay changes, minimise disclosure or preserve outdated arrangements to avoid discretionary review.

Overreach therefore harms the goal used to justify it. A number service that wants accurate transfers should make clean transfer easy. A service that wants current contacts should not treat a contact update as an opportunity to reopen the legitimacy of a decades-old allocation. A service that wants notice of leasing should define what public fact must change and protect private commercial terms.

Company registers generally rely on event-triggered and periodic filings. The company reports a director appointment, office move or annual confirmation because legislation identifies the event. It does not submit every customer contract. Enforcement bodies can demand more information under their own powers when evidence justifies it.

Number registration should follow this data-minimisation logic. Collect the exact range, holder identity, representative authority, published contact points, predecessor, event type, time and applicable service status. Keep sensitive evidence only as long as necessary under a published retention rule. Seek additional material when a contradiction, dispute or legal requirement makes it relevant.

The result is not deregulation. It is better information. The registrar can detect unauthorised change because authority records are strong. Operators can reach a responsible contact. Buyers can reconstruct the chain. Reviewers can see why a hold occurred. The absence of irrelevant business data reduces privacy and security risk while making each collected field more trustworthy.

Membership does not erase the need for review

Some number registries are membership organisations. Members can vote, propose policy, attend meetings and influence budgets. Those mechanisms can support legitimacy, but they do not answer every question raised by an individual record decision. A holder may participate fully and still face a mistaken transfer refusal, unexplained delay or overbroad suspension.

Company registrars illustrate the difference between general accountability and case review. Legislatures define powers, ministers or public bodies oversee performance, public guidance explains practice and courts can examine legal error. The affected company also needs notice and a route to challenge the specific act. Consultation on general policy does not substitute for a remedy in the case.

Number institutions need both. Members should see audited finances, service performance, conflict rules and policy records. Holders should receive reasons, decisive evidence, a time limit and an independent forum for review. Non-members with legacy holdings or indirect service relationships should not lose basic procedural protection simply because they lack a vote.

Review should respect expertise without becoming deference to secrecy. The registrar may know technical details, but it must identify the registration proposition at stake. A reviewer can ask whether the organisation existed, whether the representative was authorised, whether the prefix matched, whether the rule applied and whether the response was proportionate.

The distinction protects members as well as outsiders. If majority preference can determine individual holdership without evidence, a coalition can redistribute value through governance. If staff can cite community purpose without a reviewable rule, membership becomes theatre. Institutional legitimacy requires that broad participation and individual due process reinforce rather than replace each other.

A thin number register has a demanding specification

Thin registration begins with exact resource identity. Each prefix has one current registration state, with explicit parent-child links after division or combination. Conflicting records are treated as integrity failures.

It records the recognised holder as a real legal person or organisation, not merely a route origin, trade name, email address or portal user. It distinguishes the holder from an operational user, sponsoring service, broker and technical contact.

It preserves authority evidence. The public need not see private board documents or identity material, but the event should state the kind of verification performed, the responsible service and effective time.

It maintains event history. Allocation, succession, transfer, correction, service move, restriction and release are additive. The current state can be read without erasing how it arose.

It publishes bounded status. Users can tell whether a transfer is pending or final, whether a dispute affects the range and which service is current. Labels state what they do not certify.

It separates adjacent operations. Routing, RPKI, reverse DNS, Internet Routing Registry entries, geolocation, reputation and customer assignment may be linked or coordinated, but none silently substitutes for holdership.

It includes correction, notice and review. Error has an owner, time limit and remedy. Affected parties can challenge adverse action before delay becomes a hidden final decision.

It supports portability and continuity. A qualified service can receive the record through authenticated, matched events. Failure of the current provider does not erase the last valid state.

This is a narrow remit with high engineering, legal and governance demands. Calling it thin describes the boundary of claims, not the quality of the institution.

Four hard cases test the boundary

First, a forged director files a transfer of an IPv4 range. Strong identity and corporate-authority checks should stop or reverse the instruction. The public record shows a scoped dispute while the last verified holder remains current. The registrar does not need access to every customer contract to solve the authority problem.

Second, a legitimate holder changes from access services to cloud infrastructure. The company remains the same, contacts remain current and the range stays unique. Unless a published legal condition says otherwise, the commercial change is not a registration event. Operators and sector authorities address the activity within their own powers.

Third, the holder dissolves after selling its network business but before updating the number record. Company filings identify the legal dates; transaction documents and successor evidence establish whether the range passed. The registrar records the supported succession. It does not award the range to the most active route origin or reclaim it solely because the old name is inactive.

Fourth, two registration services each claim to be current after a portability request. Authenticated release, receipt and event-time rules determine whether the move completed. Reconciliation restores one state and records the correction. The dispute is about registration finality, not about which service prefers the holder's business.

These cases show why scope is a security control. An institution that tries to decide every operational question has more data, more discretion and more ways to fail. An institution that knows its decisive facts can demand stronger evidence for them and provide a usable remedy when they are wrong.

The institution should be measured on what it controls

Company registrars can report incorporation time, filing availability, query resolution, correction age, false-information action, identity-verification performance and service outages. They should not claim credit for every job created by registered companies or blame every corporate failure on the existence of the register.

Number registrars should publish equivalent measures: accuracy checks completed, stale contacts resolved, transfers processed, authority disputes, duplicate-record incidents, corrections, portability completion and service availability. Refusal and delay categories should be visible. Decisions reversed on review should inform improvement rather than disappear.

Metrics should also expose overreach. How often was information requested beyond the published rule? How many holds exceeded their time limit? How often did a whole portfolio suffer because one sub-range was disputed? Did a service outage prevent a holder from updating security data? Could another qualified provider restore the current state?

Routing outcomes should be reported separately. A clean registration may coexist with poor reachability because networks make independent choices. A widely accepted route may coexist with an inaccurate holder record. Mixing the measures would let the registrar claim operational successes it did not produce and avoid responsibility for record failures it did.

This attribution is the practical benefit of thin scope. Users can tell whether the registrar performed. The institution cannot answer an inaccurate transfer by pointing to community meetings, general Internet growth or route-security campaigns. Its central obligations remain exact identity, unique state, authorised change, usable contact, correction and continuity.

Conclusion: the strongest register knows where its authority ends

Company registries are not weak because they do not run companies. Their restraint is part of their value. They give the public a stable identity, preserve specified changes, support legally significant acts and expose information that counterparties would otherwise collect repeatedly. Modern anti-abuse reforms strengthen the record through identity verification, queries, annotation, correction and cooperation with competent authorities.

Those powers do not make the registrar a board of directors. A statement of lawful purpose does not invite officials to choose products or customers. Incorporation does not replace sector licensing. A public filing does not certify every fact about an enterprise. Directors manage, shareholders exercise their rights, courts decide disputes and regulators act within their mandates.

Internet number governance needs the same clarity. A high-quality register should know the exact prefix, recognised holder, authorised representative, predecessor, effective event, current service and scoped dispute. It should make that information accurate, secure, portable and reviewable. It should coordinate changes in related technical services without claiming that registration is routing.

It should not decide where a lawful network may operate, which customers deserve service, how much a transfer should cost or whether one commercial deployment is socially superior to another. Those questions may be addressed by contract, markets, operators, legislatures, regulators and courts. Moving all of them into the registration office would create concentrated power without matching expertise or remedies.

Thin registration is therefore a demanding constitutional choice. It asks the institution to be exact about a few consequential claims and candid about everything those claims do not establish. It protects public reliance through correction rather than inflated authority. It treats identity evidence as a basis for attribution, not permission to manage. It makes portability possible because the record has a common, limited meaning.

The company number does not tell a company what to make. The IPv4 record should not tell a network what lawful service to provide. In both systems, legitimacy comes from maintaining the identity and change record so well that nobody needs the registrar to become the operator.

Sources