Summary
- IPv4 brokers are not inherently illegitimate. In a depleted address market, they reduce search costs, surface dormant supply, locate urgent demand and coordinate the evidence that lets private deals become registry-recognised transfers.
- The same brokerage layer creates governance risk because the seller knows title history, the buyer knows operational urgency, the broker sees pieces of both sides, and RIPE NCC sees only the evidence submitted to the ledger.
- Broker-market governance is therefore a transaction-cost problem: hidden supply, private price signals, seller authority, abuse reputation, routing history, reverse DNS, RPKI state, sanctions exposure and banking evidence all become costly diligence variables.
- Mandate conflicts matter. Exclusive listings, success fees, repeat-client bias, confidentiality, quote anchoring and informal reputation channels can turn a broker from a search-cost reducer into a private gatekeeper.
- RIPE NCC should not certify brokers as market judges or price arbiters. Its better role is to reduce blind spots through predictable transfer evidence, public aggregate statistics, clear post-transfer hygiene expectations and disciplined separation between ledger checks and market approval.
- KYC, sanctions and banking review are necessary safeguards, but they can become private permission power if the evidence burden is opaque, uneven or delegated to brokers without clear registry-facing limits.
- Leasing, suballocation and routed-use arrangements create a grey edge where sale, lease, operational control and responsibility can blur; the registry's challenge is to keep the record reliable without pretending to supervise every private service contract.
- A healthier RIPE-region broker market would use standard evidence checklists, provenance summaries, conflict disclosures, escrow coordination, abuse and reputation disclosure, RPKI and reverse-DNS handover routines, and price-transparency aggregates without turning RIPE NCC into a price controller.
A broker call in a scarce market
The first move in a brokered IPv4 deal is rarely a public auction. It is more often a call, a quiet message, or an introduction that sounds operational rather than dramatic. A seller has a block that is not fully used, or can be renumbered out of over time, or belongs to a corporate group that has learned that unused IPv4 space now carries real value. A buyer has a launch date, a customer migration, a cloud bring-your-own-address plan, a hosting expansion, or a continuity problem that cannot wait for IPv6 adoption to become perfect. The broker sits between them with partial knowledge. The seller knows the block's internal history. The buyer knows the urgency. The broker knows more than either side about recent market tone, possible alternatives and who may close quickly, but less than a court, less than a registry and less than a full forensic audit.
That asymmetry is the market. It is not an incidental defect. The RIPE NCC service region covers Europe, the Middle East and parts of Central Asia, a zone with mature incumbents, small access networks, hosting companies, cloud platforms, public bodies, universities, legacy holders, sanctioned exposure, post-merger estates and networks whose address plans were formed before scarcity turned IPv4 into a tradable input. Many possible sellers do not advertise. Many buyers do not want their address shortage known. A public request for space can signal weakness to customers or competitors. A public sale can alert internal rivals, creditors, tax advisers, banks or regulators. Silence is commercially rational. The broker's business exists because silence is expensive.
RIPE NCC's factual setting makes this call economically important. IPv4 free-pool exhaustion in the RIPE NCC region was not a single market transaction; it was a change in the institutional meaning of the registry record. Once newly available IPv4 allocations disappeared except for narrow recovered-space mechanisms, address expansion moved toward transfers, leasing-like service deals, address sharing, acquisitions, renumbering, carrier-grade NAT, and uneven IPv6 deployment. The RIPE Database, reverse DNS, RPKI services, transfer records and member-facing procedures became not only administrative tools but evidence around which private capital could move.
The broker call therefore does two things at once. It lowers search costs by bringing possible counterparties together. It also creates a private information layer around a public ledger. The seller may not disclose all historical encumbrances, past routing use, abuse reports or internal authority limits at the first meeting. The buyer may not disclose how dependent its launch is on a particular netblock size or clean reputation. The broker may be tempted to describe demand as deeper, supply as thinner, closing risk as smaller or rival bids as firmer than the evidence supports. The registry, when a transfer request finally arrives, sees the submitted file rather than every conversation that shaped it.
That is why broker-market governance matters. The question is not whether brokers should exist. In a scarce market, forbidding intermediation would not remove the demand for addresses; it would make the market darker and more relational. The better question is what kind of evidence, disclosure, routine and boundary keep brokers useful without letting them become gatekeepers over a scarce network input. RIPE NCC should not run the market. But if the private matching layer becomes too opaque, the registry ledger will carry risk that neither the buyer nor the seller has fully priced.
What brokers actually make cheaper
The case for brokers begins with search-cost economics. A buyer seeking IPv4 addresses is not simply shopping for a commodity. It needs a usable quantity, a prefix size that matches routing and platform constraints, a seller whose registered status can support a transfer, a block whose reputation is not fatal for email, hosting, payments or platform onboarding, a timeline compatible with network plans, and a closing process acceptable to banks, counsel and the registry. A seller, meanwhile, may need a buyer with funds, a buyer whose jurisdiction and sanctions profile will not create banking delays, and a buyer that can handle the technical handover without blaming the seller for post-transfer problems.
A broker reduces the cost of finding such a match. In ordinary markets, exchanges, public prices and standard contracts reduce search costs. IPv4 has only pieces of that infrastructure. There are published transfer statistics, broker websites, informal price reports, community memory and occasional public commentary. There is not a single open order book that reliably reveals the quantity, quality, authority status and urgency of every available block. Supply is hidden because some holders are unaware of value, some fear operational risk, some are constrained by internal approvals and some prefer not to signal that they have surplus resources. Demand is hidden because buyers do not want to reveal shortage, growth plans or budget.
Brokers also reduce matching costs across geography and legal culture. A Western European seller may be comfortable with one escrow provider, a Middle Eastern buyer with another, and a Central Asian operator may need documentation in a form that satisfies local banking or company-law expectations. A broker who has seen many closings can translate those frictions into a checklist: corporate authority, registry access, letterhead, identity evidence, beneficial-owner checks, purchase agreement language, payment timing, transfer request sequencing, RPKI state, reverse DNS, route-origin expectations and post-transfer route reputation work. None of this proves that the broker is neutral. It does explain why the service is valuable.
The strongest version of the broker's role is discovery. Dormant supply often stays dormant because no one inside the holder has the right incentive to act. A university, industrial company, hosting group or acquired business may have legacy holdings whose operational and accounting status is unclear. The internal network team may know the addresses are underused but not control asset disposal. The finance team may not understand market value. Legal may fear that selling a number resource is unfamiliar. A broker can locate the decision-maker, explain the registry path, identify buyers and make the internal case for review. Hidden demand works similarly. A buyer may know it needs space but not know which sellers can close, which blocks have clean history, or which prefix sizes are realistic.
Search-cost reduction is not a trivial public benefit. Scarce IPv4 held by an entity that no longer needs it has opportunity cost. If a network that does need the space can buy it and the record can be updated safely, the market reallocates a fixed technical input toward current use. The registry should not romanticise hoarding merely because the holder is old. Nor should it treat every sale as speculation. Many transactions are about continuity: keeping services reachable, allowing customer migration, supporting managed hosting, preserving enterprise addressing plans or giving a smaller provider a chance to operate without becoming wholly dependent on a larger network.
The problem is that the same broker who lowers search costs can also raise switching costs. If a broker has the only credible introduction to a seller, controls the information room, demands exclusivity, shapes the evidence file, steers escrow, frames the price anchor and tells each side what RIPE NCC will likely accept, the broker has moved beyond search. The broker has become a private interpreter of a public ledger. The governance task is to preserve the good part of intermediation while reducing the private choke points that scarcity creates.
The asymmetry brokers cannot remove
Brokerage does not abolish information asymmetry; it rearranges it. The seller knows how the block was acquired, who inside the company has authority, whether any creditor has been promised comfort, whether the addresses have been routed by customers, whether reputation problems are known, whether a previous sale failed and whether any internal manager is likely to resist. The buyer knows how badly it needs the space, whether its alternatives are real, whether it can wait for a cleaner block, whether its bank will approve the payment quickly and whether its intended use is more sensitive than it admits. The broker sees parts of both stories but may not have verified either at the depth a prudent buyer would want.
This is not only a private problem. The RIPE NCC ledger records current registration and later records a recognised change, but it cannot show all economically relevant history. A clean registry entry does not by itself answer whether the seller's signatory has board authority, whether a business sale left a side letter, whether a corporate restructuring created a disputed claim, whether a block was routed by a customer under a service agreement, or whether email reputation will impair the buyer after closing. The registry should not be expected to solve every issue. Yet when these issues surface late, they can turn into registry-facing delays or post-closing conflict.
Reputation is especially difficult. A block can look available in the registry and still be commercially hard to use. It may have been associated with spam, botnet traffic, bulletproof hosting, sanctioned customers, questionable VPN services or long periods of inconsistent routing. Some of that history is visible in public telemetry, blocklists, routing archives and reverse-DNS traces. Some is known through private security circles. Some is outdated but sticky. The buyer may be able to clean it over time, but the cost is real. A broker who knows a block's reputation history has power over price and disclosure. A buyer that does not ask the right questions can pay a clean-block price for a dirty-block problem.
Technical state adds another layer. RPKI route-origin authorisations may need to be withdrawn, created or revised. Reverse DNS may need to move without breaking customer expectations. Routing announcements may need careful timing to avoid hijack suspicion or reachability gaps. The RIPE Database may contain contact data that is stale, sparse or unhelpful for operational handover. None of these details is the whole deal, but each can become a closing condition. A broker who treats technical handover as afterthought creates hidden cost; a broker who controls it without clear disclosure creates dependency.
Authority is the hardest asymmetry because it can invalidate everything else. Sellers are often corporate groups rather than single natural persons. A listed seller may be an operating subsidiary, holding company, historic registrant, dissolved entity, successor, administrator, liquidator or business unit whose internal authority is not obvious. A signed agreement is useful only if the signer has power to bind the right holder. A broker may know that a file is thin but describe it as routine. A buyer may accept that because delay is costly. The registry may later ask for evidence that should have been collected before price was agreed.
Good broker-market governance therefore begins before the transfer request. It asks the market to make asymmetry legible early. Who is the registered holder? Who controls the registry account? Who will sign? What corporate record supports that authority? Has the block been pledged, sold before, leased, routed by third parties or placed inside a merger file? What is known about abuse history, reverse DNS, RPKI, past announcements and reputation? What sanctions or banking evidence will be needed? A broker who cannot or will not produce such a summary is not merely selling speed. It is selling uncertainty to the party least able to price it.
Authority is the first due-diligence problem
In a scarce IPv4 transaction, seller authority is not a paperwork footnote. It is the first economic question. The buyer is not acquiring a newly minted allocation from a public pool. It is relying on a chain of recognition: the address block is registered to a holder; the holder has the practical and legal ability to dispose of it; the person negotiating has authority; no superior corporate, court, insolvency or contractual constraint defeats the transfer; and RIPE NCC can accept the evidence without becoming a judge of hidden private disputes.
This chain is easy to describe and difficult to prove. Many older address holdings were assigned in a different commercial era. Companies changed names, merged, sold divisions, outsourced networks, moved headquarters, entered insolvency, spun out infrastructure units or allowed third parties to route blocks for years. Internal memory disappeared. A finance team may now see valuable inventory where the network team sees risk. A legacy administrator may be listed in old records but no longer employed. A parent company may believe it owns everything a subsidiary uses. A creditor may believe a security package covers the address estate. A buyer that discovers these conflicts after agreement faces a choice between delay, price renegotiation or litigation.
Brokers can help by forcing the authority question to the front. A competent broker should not simply ask for a signature. It should ask for the current registry holder, corporate-registration evidence, proof of name changes or mergers, signatory authority, board or officer approval where relevant, any insolvency or creditor limitations, and confirmation that no prior sale or exclusive mandate conflicts with the proposed transaction. The broker need not become a law firm. It should, however, know when an authority file is thin and say so plainly. The market cannot price risk that is hidden under phrases such as "seller represented" or "documentation to follow."
Authority uncertainty also affects sellers. A legitimate holder may lose value if buyers fear that the file will not satisfy RIPE NCC or banks. The seller may need to spend money reconstructing corporate history before receiving serious bids. If that evidence is strong, the seller deserves a better price than a holder whose authority story is incomplete. In this sense, evidence quality should be part of price formation. Blocks are not identical if one can close cleanly and another requires six weeks of legal archaeology.
RIPE NCC's proper role is bounded. It can require evidence sufficient for a registry act; it should not turn every transfer into a general corporate-title trial. But the registry can shape the market by publishing predictable evidence expectations and by being clear about what it will not infer from broker assurances. If the market knows that unsupported authority claims will not pass, brokers have less incentive to move weak files into escrow and more incentive to prepare files properly before soliciting buyers. Predictability reduces failed closings.
The danger is mandate laundering. A seller may use a broker's brand to make a weak authority position look stronger. A buyer may treat the broker's reputation as a substitute for evidence. A bank may rely on a closing memo that describes the broker as experienced without examining the holder chain. RIPE NCC may receive a neat transfer file after private pressure has already committed both sides. The broker's mandate then launders uncertainty into apparent market readiness. The cure is not broker certification by the registry. It is a culture of evidence that separates introduction, representation and verification.
Mandates, exclusivity and the laundering of urgency
Broker mandates create incentives. A seller-side mandate rewards the broker for finding a buyer and closing at an acceptable price. A buyer-side mandate rewards the broker for locating supply quickly. A dual role may be convenient but is inherently sensitive. Success fees reward completion. Exclusive listings reward control. Repeat-client relationships reward long memory and future business. Confidentiality protects negotiations but can also hide conflicts. None of these features is automatically improper. Together they explain why broker-market governance cannot rely on trust alone.
Exclusivity is the clearest example. A seller may grant a broker exclusive authority to market a block because it wants one channel, one evidence room and one negotiating strategy. That can reduce noise. It can also give the broker power to ration information. Buyers may be told there are competing offers without seeing proof. A seller may be told the market is soft by a broker whose repeat buyer wants a discount. A broker with an exclusive listing may resist direct questions that would expose authority weakness, abuse history or closing uncertainty. The seller thinks it has hired market access; the buyer experiences a toll booth.
Buyer mandates carry their own risk. An urgent buyer may ask a broker to find space at any price below a board-approved ceiling. The broker then has knowledge of the buyer's maximum willingness to pay and may use it to anchor quotes. If the broker also has relationships with sellers, the incentive to reveal urgency is high. The buyer may receive a block that closes quickly but carries reputation or operational risks that a slower search would have avoided. The buyer's dependency becomes part of the price.
Confidentiality can be both necessary and corrosive. Some sellers will not engage unless their identity is protected until late in the process. Some buyers cannot reveal expansion plans. Some counterparties fear political, regulatory or competitive consequences. A broker can provide a trusted buffer. But confidentiality also prevents price comparison, weakens independent diligence and enables selective disclosure. A market with too much secrecy rewards those with private channels over those with better evidence.
Mandate conflicts are not solved by asking whether a broker is honest. Institutional economics treats incentives as structural. Even an honest broker faces pressure to close, to satisfy repeat clients, to protect inventory access, to keep pricing opaque and to maintain reputation in a narrow market. A broker may sincerely believe that speed is in both sides' interest and still understate uncertainty. It may sincerely believe that a rival buyer is unreliable and still bias the market toward a familiar buyer. Disclosure exists because good intentions are not enough.
The minimum standard should be plain conflict disclosure: who retained the broker, who pays the fee, whether the broker has an exclusive mandate, whether it has a prior relationship with the other side, whether it will receive any spread, referral payment or post-closing service revenue, and whether any introduced party is linked to the broker. RIPE NCC does not need to police every private fee. But the parties should not confuse a broker's operational knowledge with neutrality. A broker can be useful and conflicted at the same time.
Urgency is the most easily laundered mandate signal. Buyers often have deadlines. Sellers often have internal approval windows. Banks, escrow providers and registry review introduce timing risk. A broker can translate all of this into a simple message: close now or lose the deal. Sometimes that is true. Sometimes it is pressure. A market that treats urgency as evidence becomes fragile. Better governance would make routine evidence earlier, so urgency is about commercial choice rather than late discovery of missing proof.
Price discovery without public prices
IPv4 broker markets produce prices, but not always price discovery in the public sense. A transaction can clear at a real price while leaving outsiders with little knowledge of the block's reputation, size, closing risk, payment terms, jurisdictional complications, escrow conditions, leaseback provisions, related service agreements or buyer urgency. Published transfer statistics show movement, not necessarily economic terms. Informal reports and broker quotes reveal tone, but often without enough detail to compare like with like. The market is real, yet its signals are private.
Price opacity is not simply unfairness. It changes behaviour. Sellers may hold out because they hear peak quotes from unrelated deals. Buyers may overpay because they see only scarce supply. Brokers may anchor prices by citing unattributed "market" levels. Clean blocks may subsidise the reputation risk of dirty blocks if quality is not disclosed. Small buyers may face a higher search premium than large repeat buyers because they lack access to recent private comparables. Banks and auditors may apply cautious discounts because they cannot verify liquidity and closing timelines.
There are good reasons not to force every transaction price into public view. Some deals contain commercially sensitive terms. Some involve distressed sellers, sanctioned-risk review, internal restructuring or strategic buyers. Public price disclosure can discourage legitimate sales or create speculative behaviour. RIPE NCC should not become a price-control agency and should not imply that an address block has an official price. The registry's job is not to make IPv4 look like a listed security.
But there is a middle ground between secrecy and price control. Aggregate statistics can reveal useful market contours without exposing individual bargains. Median and range estimates by prefix size, transfer type, broad region, time period and completed status would reduce information rents if designed carefully and sourced from voluntary or anonymised market reporting. Even more useful would be quality-adjusted disclosure norms: whether the block had recent abuse-listing issues, whether RPKI and reverse-DNS handover were routine, whether authority evidence was complete at signing, and whether closing required unusual delay. Price without quality misleads. Quality without price can still improve diligence.
Brokers sometimes resist transparency by arguing that every deal is unique. They are right and wrong. Every deal does have different authority, timing, reputation, tax, banking and operational features. That is exactly why opacity is costly. If uniqueness prevents comparison, the broker's interpretation becomes the market. The goal is not to make every block identical. The goal is to make the dimensions of difference visible enough that buyers and sellers can decide whether a price premium reflects scarcity, quality, urgency, risk or salesmanship.
For RIPE NCC, price opacity matters because it can spill into legitimacy. When registry procedures are slow or unclear, brokers can attribute price changes to registry uncertainty. When evidence requirements are predictable, the market can separate registry risk from private risk. A seller cannot credibly demand a higher price merely because "RIPE may be difficult" if everyone knows what evidence will be reviewed. A buyer cannot demand a discount for vague closing fear if the file is complete and the transfer path is routine. Predictable registry evidence is therefore a form of indirect price transparency: it removes one variable brokers can use as a private information lever.
Ledger, not market judge
The central institutional boundary is simple but hard to maintain: RIPE NCC should be a ledger, not a broker regulator in disguise. It should verify the conditions needed for registry recognition, maintain accurate records, support security services, record transfers, preserve the RIPE Database, handle reverse DNS and RPKI-related state, and publish useful aggregate data. It should not certify that a broker is fair, that a price is reasonable, that a buyer is economically deserving, or that a seller chose the best commercial route.
This boundary protects both the registry and the market. If RIPE NCC certifies brokers, it imports private-market risk into public registry legitimacy. A certified broker's failed closing, hidden conflict, weak diligence or misleading quote would become a registry problem. If RIPE NCC judges prices, it invites every disappointed buyer or seller to treat the registry as a competition authority. If RIPE NCC approves a broker's mandate quality, it becomes entangled in private representation. The registry should not expand into roles for which it lacks tools, statutory authority and market accountability.
The opposite error is passivity. A ledger that says "private market issues are not our concern" while accepting thin evidence creates its own gatekeeping problem. Because registry recognition is economically decisive, the transfer file cannot be treated as a clerical afterthought. RIPE NCC can and should define what evidence it needs to recognise a transfer, what records it expects to be updated, how it treats temporary transfers, how it handles sanctions hits, how RPKI and reverse-DNS continuity should be managed, and how disputed authority claims affect registry action. That is not market judging. It is ledger protection.
The distinction is between evidence standards and market approval. Evidence standards ask: is the current holder properly identified, is the receiving side eligible for the registry act, have required documents been provided, are sanctions and legal restrictions addressed, and can the record be changed without creating duplicate or misleading registration? Market approval asks: was the price fair, was the broker neutral, did the buyer deserve the resource more than another buyer, or should the seller have disclosed more than the registry requires? The first belongs near RIPE NCC. The second belongs to private contract, courts, competition authorities, auditors, banks and market reputation.
This separation is especially important in the RIPE NCC region because legal systems and commercial norms vary widely. A registry that tries to judge private market fairness across more than seventy economies will fail or become arbitrary. A registry that keeps to evidence compatibility can be strict without being imperial. It can require proof of identity and authority while refusing to adjudicate every side claim. It can publish transfer statistics without setting official prices. It can accept that brokers exist while refusing to bless them as market judges.
Brokers may prefer the aura of registry approval. A phrase such as "RIPE-compliant" can be useful and legitimate when it means the file follows published transfer requirements. It becomes dangerous when it is heard as "RIPE NCC has endorsed this deal" or "RIPE NCC has approved this broker." The market should be careful with such language. Compliance with registry evidence is not certification of commercial fairness. A clean ledger act is not a warranty that the buyer made a good bargain.
The best registry posture is narrow confidence. RIPE NCC can reduce uncertainty by making its own review predictable, not by absorbing the market's uncertainty. The broker market can then compete on evidence quality, disclosure, speed and post-transfer support rather than on privileged interpretation of registry moods.
Compliance checks and private permission power
KYC, sanctions and banking evidence are unavoidable in a cross-border IPv4 market. The RIPE NCC region includes jurisdictions subject to European Union, United Nations, national and bank-specific compliance regimes, and many transactions require payment rails that apply their own risk rules. A buyer may be lawful from the registry's point of view but difficult for a bank. A seller may have a clear registry record but an ownership chain that needs beneficial-owner review. An escrow provider may require more evidence than RIPE NCC. A broker may refuse a party because the closing risk is too high, even if no public rule forbids the transaction.
These checks are not merely bureaucracy. They protect the market from fraud, sanctioned dealings, stolen authority, money-laundering risk and payment reversal. An IPv4 block can be valuable enough to attract forged documents, compromised accounts, shell companies and distressed sellers under pressure. A registry that ignores compliance reality would damage its own record. A broker that ignores it would put buyers and sellers at risk. Banks and escrow providers are not wrong to ask hard questions.
The governance problem is that necessary checks can become private permission power. If brokers are the only actors who understand which bank will accept which documents, which buyer profile will alarm escrow, which sanctions screen is likely to delay a file, or which seller jurisdiction will trigger enhanced review, then compliance becomes a market gate. A buyer may be rejected without knowing whether the issue is law, bank policy, broker preference or a rival's pressure. A seller may discount a block because the broker says "compliance will be hard" but cannot separate real risk from negotiating strategy.
Capital-control risk adds a further layer. Some transactions involve jurisdictions where cross-border payments are monitored, delayed or restricted. A seller may prefer payment into one jurisdiction while the buyer's bank insists on another. Currency controls, foreign-exchange paperwork, tax reporting and beneficial-owner evidence can influence the deal as much as registry timing. Brokers who know these channels can provide valuable coordination. They can also steer parties toward familiar escrow paths that favour repeat clients or exclude smaller buyers.
RIPE NCC should not become a bank. It should not promise that a transfer is payable, that an escrow provider is safe, or that a transaction satisfies every sanctions regime. But it can reduce confusion by being clear about its own compliance layer. What identity and authority evidence does the registry need? What happens when sanctions screening raises a match? How are parties notified? Which parts of the file are registry requirements and which belong to banks or private counsel? Predictable separation makes it harder for brokers to attribute private gatekeeping to the registry.
The market should also distinguish compliance evidence from commercial preference. A broker may choose not to work with a party for risk reasons. That is a private choice. It should not be presented as an official registry conclusion unless RIPE NCC has actually taken a registry decision. Likewise, a bank's refusal is not the same as a finding that a party lacks registry eligibility. Clear language matters because scarce markets amplify signals. A vague phrase such as "cannot pass compliance" can destroy negotiating leverage. A disciplined phrase such as "our escrow provider requires additional beneficial-owner evidence" is narrower and more useful.
The proper aim is not lighter compliance but visible compliance boundaries. Fraud and sanctions checks should remain serious. They should not become a fog through which private gatekeepers control access to scarce resources.
Leasing, routed use and the grey edge of transfers
The cleanest IPv4 transaction is a sale-like transfer in which the registry-recognised holder changes, payment settles and operational control moves. Much of the real market is less clean. A company may lease addresses while retaining registered holdership. A provider may route space for customers under service contracts. A buyer may want immediate use before transfer completion. A seller may want a leaseback. A broker may present a leasing arrangement as a lower-friction alternative to purchase. The line between commercial use, operational control and registry recognition can blur.
Leasing is attractive because it lowers upfront cost and can match short-term demand. A hosting company may need a block for a customer project. A network may want addresses while planning IPv6 migration. A business may prefer operating expense to capital purchase. Sellers may retain long-term optionality while monetising underused space. Brokers can match such needs quickly. In a scarce market, leasing can keep dormant resources in productive use without forcing every holder to sell permanently.
The risk is responsibility. If a block remains registered to one holder but is routed, used and monetised by another party, who handles abuse reports, sanctions exposure, reverse DNS, RPKI, contact data, customer screening and law-enforcement inquiry? The registry record may show one entity, the route may show another network, the customer may be elsewhere, and the broker may have arranged the match without remaining accountable after handover. This creates a gap between ledger truth and operational reality. It is not always fraud. It is often contract complexity. But for outsiders, complexity and opacity can look the same.
Leasing-versus-transfer ambiguity also affects price. A buyer considering purchase may be told that leasing is cheaper and faster. A seller may prefer leasing because it preserves future sale value. A broker may prefer leasing because it creates recurring revenue or repeat touchpoints. Yet leasing can create hidden dependence for the user. If the holder terminates the lease, loses registry status, falls under sanctions, fails to maintain RPKI or becomes involved in a dispute, the user may have little protection. A transfer gives clearer registry recognition; a lease gives speed and flexibility but less certainty.
RIPE NCC cannot supervise every routed-use contract in the region. Nor should it. But the registry can make the limits of registration more legible. It can require that the registered holder maintain accurate contact and responsibility data. It can publish guidance distinguishing transfer recognition from routed-use arrangements. It can encourage RPKI and reverse-DNS practices that avoid misleading reliance. It can treat persistent misalignment between registered holder and real operational control as a risk signal when a transfer, dispute or abuse investigation later arises. The goal is not to ban leasing; it is to prevent leasing from becoming a shadow transfer market with weaker evidence.
Brokers have a duty here because they often shape the transaction form. If a broker presents leasing as merely "like ownership without paperwork," it is creating false certainty. If it explains the difference between registered holdership, routed use, operational responsibility, abuse handling, RPKI authority and exit risk, it reduces transaction costs. The most dangerous broker is not the one that arranges leases. It is the one that sells a lease with the confidence language of a transfer.
The grey edge matters because registry blind spots accumulate. A single lease may be manageable. A market in which many blocks are privately controlled by users who do not appear as holders can weaken public reliance on the RIPE Database. Scarcity encourages creative contracting. Governance requires that creative contracting not erase accountability.
Escrow is plumbing, not governance
Escrow is useful because transfer and payment do not happen at exactly the same moment. The buyer wants assurance that funds will not be released unless the registry-recognised change occurs. The seller wants assurance that the buyer has money and cannot use registry delay as an excuse. The broker wants a closing sequence that reduces failed deals. Banks and counsel want a payment path that can be documented. Escrow coordinates these fears.
But escrow is plumbing, not governance. It can hold funds, sequence release conditions, verify certain documents and create comfort around payment. It cannot by itself prove seller authority, cleanse abuse reputation, resolve sanctions risk, guarantee RIPE NCC action, settle a dispute over internal corporate power or decide whether a lease has been misdescribed as a transfer. A well-run escrow reduces settlement risk; it does not replace diligence.
This distinction is often blurred in brokered markets. A party may hear that funds are in escrow and infer that the deal is safe. A seller may think a buyer's deposit proves seriousness. A buyer may think an escrow provider's involvement proves that the block is clean. A broker may use escrow opening as a psychological commitment device: now that money is parked, objections appear costly. In truth, escrow is only as good as the conditions attached to release. If those conditions are vague, escrow can trap both sides in a fight rather than prevent one.
The registry angle is narrow. RIPE NCC should not be expected to design escrow terms. It should not become a payment supervisor. It should, however, avoid allowing private escrow language to imply registry endorsement. A transfer is recognised when registry requirements are satisfied, not when an escrow provider or broker says the deal is ready. Conversely, registry recognition should not automatically release funds unless the parties have chosen that trigger and understand what it covers. A buyer may still have post-transfer technical issues. A seller may still face private claims. Escrow conditions should align with the actual risk being managed.
Brokers can add value by translating registry milestones into escrow language accurately. For example, a purchase agreement may distinguish submission of a transfer request, RIPE NCC approval, update of registration, withdrawal or creation of RPKI records, reverse-DNS handover, and a post-transfer period for reputation or routing cooperation. Not every deal needs every step. But naming the steps prevents a simple phrase such as "transfer completed" from carrying more meaning than it should.
Escrow also interacts with sanctions and capital controls. Funds may be acceptable to the escrow provider at opening but face questions at release. A beneficial-owner issue may arise after the registry file has progressed. Currency movement may take longer than expected. If the broker has not prepared both sides, a registry-ready transfer can stall because money cannot move. That is not RIPE NCC's failure. It is transaction design failure.
The lesson is modest. Escrow belongs in the broker-market toolkit, but it should not be allowed to launder weak diligence into apparent safety. The parties need to know what escrow proves, what it does not prove and where registry recognition sits within the payment sequence.
Reputation channels outside the ledger
Every scarce market develops informal memory. IPv4 brokerage is no different. People remember which brokers closed cleanly, which sellers delayed, which buyers retraded, which blocks carried abuse issues, which escrow providers were cautious, which banks asked for more evidence, and which registry files became difficult. Much of this knowledge circulates outside the RIPE Database, outside public transfer statistics and outside formal policy discussion. It moves through chats, calls, private lists, conferences, counsel networks, security teams and repeat-client relationships.
Off-ledger reputation has value. A buyer can avoid a costly mistake because someone has seen the block before. A seller can avoid a buyer known to use delay as leverage. A broker can steer a party away from an escrow provider that cannot handle a certain jurisdiction. Security researchers can warn that a block's past use may create deliverability or abuse-handling problems. Informal memory lowers transaction costs when formal records are incomplete.
It also creates insider advantage. New entrants, small providers and firms outside established circles may not know which names carry trust or risk. They may pay more, close slower or accept weaker terms because they lack reputation data. A broker can monetise private memory by selling confidence without disclosing the underlying evidence. A repeat buyer may receive warnings that a one-time buyer never sees. A seller may be quietly blacklisted based on a misunderstood past dispute. Private reputation can become private regulation.
This is where the ledger-versus-gatekeeper distinction reappears. RIPE NCC cannot and should not absorb every reputation channel. It should not publish gossip, rank brokers or maintain a market blacklist. Yet the registry can reduce the amount of reputation that must remain private by improving public and semi-public evidence around transfer mechanics. Aggregate transfer timing, common evidence deficiencies, anonymised dispute categories, post-transfer hygiene guidance, and clearer status descriptions would make the market less dependent on whispers.
Abuse reputation deserves special care. A block's past association with bad traffic may be commercially relevant, but abuse data can be noisy, outdated or unfairly sticky. A buyer should know enough to price cleanup work. A seller should not be permanently punished for ancient misuse if the block has been rehabilitated. A broker should not selectively weaponise reputation against one side. Better practice would distinguish current listings, historical listings, routing context, remediation evidence and expected cleanup effort. Reputation should be evidence, not innuendo.
Routing history is similar. A block that has moved through multiple networks may be perfectly legitimate, or it may signal unstable control. Past route-origin records, RPKI status, reverse-DNS patterns and observed announcements can help a buyer understand operational history. But a technical trace is not self-explanatory. It needs context. Brokers who provide that context reduce uncertainty. Brokers who present fragments as proof create new asymmetry.
The healthiest market would have both public ledger reliability and private expertise. Public evidence should cover what can be standardised without exposing sensitive deal terms. Private expertise should interpret quality, urgency and commercial fit. When the private layer becomes the only place where risk is known, brokers become gatekeepers. When the public layer provides enough baseline evidence, brokers compete on service rather than information capture.
Registry blind spots and the cost of thin files
A registry sees what its procedures ask for and what parties submit. It does not sit inside the seller's boardroom, the buyer's launch plan, the broker's message history, the escrow provider's risk committee, or the bank's sanctions team. That is not a criticism. It is an institutional fact. The danger is pretending that a registry act reflects more knowledge than it does.
Thin files create market cost. If RIPE NCC receives only enough evidence to process a narrow transfer, the market may still infer that the deal is broadly clean. If a later dispute reveals weak seller authority or undisclosed operational use, parties may blame the registry even when the issue belonged to private diligence. Conversely, if RIPE NCC demands broad evidence without clear limits, parties may treat the registry as an unpredictable gatekeeper and price that risk into every deal. Both outcomes are inefficient.
The solution is proportional evidence. The registry should ask for what it needs to maintain a reliable record and comply with law. The market should ask for what it needs to price the asset, execute payment and manage operational transition. These two evidence sets overlap but are not identical. Seller authority belongs in both. Abuse reputation may matter more to the buyer than to the registry. Payment rails matter more to banks than to the registry. RPKI and reverse DNS matter to both, but in different ways. A clear division of responsibility lets each actor do its job.
Predictability matters more than severity. A severe evidence demand can be priced if it is known in advance. An unpredictable demand creates optionality for delay and strategic behaviour. Sellers may delay collecting evidence until they know a buyer is committed. Buyers may use late evidence gaps to renegotiate. Brokers may frame uncertainty to favour whichever side pays them. RIPE NCC can reduce these games by making common transfer evidence expectations as clear as possible, including edge cases such as legacy resources, corporate restructurings, temporary transfers, name changes and sanctioned exposure.
Public statistics are another tool. Transfer volume, processing-time bands, common reasons for additional information, temporary-transfer usage, dispute-related pauses and post-transfer cleanup patterns could help the market understand registry friction without exposing private files. If the market knows that certain deficiencies routinely delay transactions, brokers and counsel will prepare earlier. If the market knows that most complete files close within a predictable band, vague fear loses value.
Blind spots are most dangerous when they are monetised. A broker who says "I know how RIPE NCC will treat this" may be selling genuine experience or private mystique. Experience is useful; mystique is a rent. The registry can weaken mystique by publishing enough process clarity that brokers cannot pose as gatekeepers to hidden institutional knowledge. Good brokers will still be valuable because execution is hard. Bad brokers will lose the ability to sell uncertainty as access.
The public should also resist a false binary. A thin file is not always suspicious, and a thick file is not always safe. Some simple transfers are simple because the holder chain is clean and the buyer is routine. Some large evidence packets are thick because the underlying story is messy. The point is not paperwork volume. The point is whether the evidence answers the questions that matter for registry recognition and market diligence.
A better broker market without price control
The strongest reforms are boring. They do not require RIPE NCC to set prices, license brokers or become a market court. They require better evidence habits around the private market and better public clarity around the registry ledger. Boring reforms work because the broker market's worst failures are usually not spectacular frauds. They are small ambiguities that compound: unclear authority, undisclosed conflicts, vague compliance language, weak technical handover, hidden reputation issues and late evidence surprises.
The first improvement is a standard evidence checklist. It should separate registry-facing evidence from buyer-facing diligence and payment-facing evidence. Registry-facing items would include holder identity, signatory authority, transfer eligibility, required forms, sanctions-related representations where required, and RIPE Database update steps. Buyer-facing diligence would include routing history, abuse reputation, RPKI state, reverse DNS, current use, third-party routed use, prior failed sale attempts, known claims, and expected handover tasks. Payment-facing evidence would include beneficial-owner materials, bank requirements, escrow conditions, tax documents and currency-control constraints. A checklist does not guarantee truth, but it makes omissions visible.
The second improvement is a provenance summary. Every brokered deal should have a concise narrative of how the holder chain has been established: current registered holder, corporate history, merger or name-change evidence, decision authority, internal approvals and any known constraints. This summary should not be marketing copy. It should be a diligence aid that lets the buyer, counsel, escrow and registry-facing team see where confidence is strong and where reliance is limited.
The third improvement is conflict disclosure. Brokers should state who retained them, how they are paid, whether the listing is exclusive, whether they represent the buyer, seller or both, whether they have repeat-client relationships relevant to the deal, and whether they receive any spread, referral fee or post-closing service revenue. The point is not to ban conflicted roles. In a narrow market, many roles will overlap. The point is to prevent a conflicted role from being mistaken for neutral market knowledge.
The fourth improvement is technical handover discipline. A transfer is not complete in the operational sense merely because a registry entry changes. RPKI route-origin authorisations, reverse DNS, route announcements, abuse contacts, customer notices, upstream acceptance, geolocation records and blocklist cleanup may all matter. A broker who sells "transfer support" should define whether that includes these tasks or only paperwork. A buyer should not discover after closing that the block is registry-clean but operationally painful.
The fifth improvement is aggregate price transparency without price control. RIPE NCC should not set values. Brokers should not be forced to publish every transaction. But the market would benefit from anonymised ranges, prefix-size bands, time trends and quality indicators published by credible third parties or through voluntary reporting. If official registry statistics are used, they should be limited to what the registry actually knows. Price transparency must not imply official valuation.
The sixth improvement is dispute and delay taxonomy. Market actors need to know why transfers slow down. Was the delay seller authority, sanctions screening, missing corporate evidence, escrow payment, buyer eligibility, temporary-transfer conditions, legacy-resource ambiguity, registry contact mismatch, or private dispute? An anonymised taxonomy would turn private frustration into market learning. It would also prevent brokers from using generic delay stories to protect weak files.
None of these improvements requires hostility toward brokers. On the contrary, the best brokers should welcome them. A market with clearer evidence rewards competence. It punishes those who profit from opacity.
Why institutional legitimacy depends on boring evidence
RIPE NCC's legitimacy in the brokered IPv4 market will not be determined by slogans about community, scarcity or neutrality. It will be determined by whether the registry can remain a trustworthy ledger while private actors trade, lease, route, finance and dispute resources around it. That requires a disciplined humility. The registry must know what it can verify and what it cannot. Brokers must know when they are reducing costs and when they are manufacturing dependency. Buyers and sellers must know that registry recognition is necessary but not sufficient for commercial certainty.
The institutional stakes are larger than any single transfer. IPv4 scarcity creates a market in which a private address block can support customer continuity, cloud migration, hosting revenue, public-service reachability and enterprise planning. When brokers reduce search costs, they help move unused resources toward use. When they conceal conflicts, inflate urgency or control private evidence, they increase the risk premium attached to every deal. That risk premium is paid by networks that need addresses, by sellers who have legitimate holdings, and eventually by customers whose services depend on stable numbering.
RIPE NCC should resist pressure from two directions. One side will want the registry to certify more: trusted brokers, fair prices, clean blocks, market legitimacy and perhaps even preferred practices. That would turn a private association into a market judge and expose it to failures it cannot control. The other side will want the registry to care less: accept private assurances, process transfers quickly, and leave all problems to contract. That would let private gatekeepers use the ledger's authority while keeping the ledger blind. Neither path is stable.
The better path is narrow, public, repeatable evidence. Make the registry evidence boundary clearer. Publish aggregate statistics that reduce uncertainty without revealing private bargains. Encourage market checklists without turning them into price regulation. Treat KYC and sanctions as necessary controls with visible limits. Distinguish transfer recognition from leasing and routed-use arrangements. Encourage post-transfer hygiene so that registry changes do not leave technical debris. Keep broker reputation separate from registry endorsement.
This is institutional legitimacy in the mundane sense: fewer surprises, fewer myths, fewer private choke points and fewer claims that a broker "knows what RIPE will do" because the public process is too opaque to challenge. Markets do not need perfect information to function. They need enough shared information that private expertise competes with other private expertise rather than becoming a toll on ignorance.
The opening broker call will not disappear. Scarce supply will remain quiet. Urgent demand will remain careful. Sellers will still know more about title history. Buyers will still know more about their dependency. Brokers will still know more about market tone than first-time counterparties. That is why the broker exists. The governance question is whether this private knowledge lowers the cost of reallocating IPv4 or becomes a second gate beside the registry.
RIPE NCC cannot eliminate scarcity, and it should not try to run the market that scarcity produced. Its job is more modest and more important: maintain a ledger that private markets can rely on without mistaking it for a commercial blessing. A broker market built around clear evidence, disclosed incentives, realistic compliance boundaries, disciplined escrow language, honest leasing distinctions and useful aggregate statistics would still be imperfect. It would, however, be cheaper to trust. In a market where every hidden risk becomes a price premium, that is the real governance gain.