1#	$OpenBSD: afrinic.constraints,v 1.3 2023/12/19 08:10:19 job Exp $
2
3# From https://www.iana.org/assignments/ipv4-address-space/
4allow 41.0.0.0/8
5allow 102.0.0.0/8
6allow 105.0.0.0/8
7
8allow 154.0.0.0/16
9allow 154.16.0.0/16
10allow 154.65.0.0 - 154.255.255.255
11allow 196.0.0.0 - 196.1.0.255
12allow 196.1.4.0/24
13allow 196.1.7.0 - 196.1.63.255
14allow 196.1.71.0/24
15allow 196.1.74.0 - 196.1.103.255
16allow 196.1.115.0 - 196.1.133.255
17allow 196.1.137.0/24
18allow 196.1.143.0 - 196.1.159.255
19allow 196.1.176.0 - 196.1.255.255
20allow 196.2.2.0/23
21allow 196.2.8.0 - 196.2.255.255
22allow 196.3.14.0/23
23allow 196.3.57.0 - 196.3.64.255
24allow 196.3.90.0/24
25allow 196.3.92.0 - 196.3.94.255
26allow 196.3.96.0/21
27allow 196.3.105.0/24
28allow 196.3.107.0 - 196.3.131.255
29allow 196.3.148.0/22
30allow 196.3.154.0 - 196.3.183.255
31allow 196.3.224.0 - 196.4.45.255
32allow 196.4.71.0 - 196.11.171.255
33allow 196.11.174.0 - 196.11.239.255
34allow 196.11.248.0/21
35allow 196.12.10.0 - 196.12.31.255
36allow 196.12.128.0/19
37allow 196.12.192.0 - 196.15.15.255
38allow 196.15.64.0 - 196.26.255.255
39allow 196.27.64.0 - 196.28.47.255
40allow 196.28.64.0 - 196.29.63.255
41allow 196.29.96.0 - 196.31.255.255
42allow 196.32.8.0 - 196.32.31.255
43allow 196.32.96.0/19
44allow 196.32.160.0 - 196.39.255.255
45allow 196.40.96.0 - 196.41.255.255
46allow 196.42.64.0 - 196.216.0.255
47allow 196.216.2.0 - 197.255.255.255
48
49# From https://www.iana.org/assignments/ipv6-address-space/
50allow 2001:4200::/23
51allow 2c00::/12
52
53# From https://www.iana.org/assignments/as-numbers/
54allow 36864 - 37887
55allow 327680 - 328703
56allow 328704 - 329727
57
58# From https://www.iana.org/assignments/ipv4-recovered-address-space
59allow 45.96.0.0 - 45.111.255.255
60allow 45.192.0.0 - 45.222.255.255
61allow 45.240.0.0 - 45.247.255.255
62allow 66.251.128.0 - 66.251.191.255
63allow 139.26.0.0 - 139.26.255.255
64allow 146.196.128.0 - 146.196.255.255
65# 154.16.0.0 - 154.16.255.255 # already contained within 154/8
66allow 160.19.36.0 - 160.19.39.255
67allow 160.19.60.0 - 160.19.63.255
68allow 160.19.96.0 - 160.19.103.255
69allow 160.19.112.0  -  160.19.143.255
70allow 160.19.152.0 - 160.19.155.255
71allow 160.19.188.0 - 160.19.191.255
72allow 160.19.192.0 - 160.19.199.255
73allow 160.19.232.0 - 160.19.239.255
74allow 160.20.24.0 - 160.20.31.255
75allow 160.20.112.0 - 160.20.115.255
76allow 160.20.213.0 - 160.20.213.255
77allow 160.20.217.0 - 160.20.217.255
78allow 160.20.221.0 - 160.20.221.255
79allow 160.20.226.0 - 160.20.227.255
80allow 160.20.252.0 - 160.20.255.255
81allow 160.238.11.0 - 160.238.11.255
82allow 160.238.48.0 - 160.238.49.255
83allow 160.238.50.0 - 160.238.50.255
84allow 160.238.57.0 - 160.238.57.255
85allow 160.238.101.0 - 160.238.101.255
86allow 161.123.0.0 - 161.123.255.255
87allow 164.160.0.0 - 164.160.255.255
88allow 192.12.110.0 - 192.12.111.255
89allow 192.12.116.0 - 192.12.117.255
90allow 192.47.36.0 - 192.47.36.255
91allow 192.51.240.0 - 192.51.240.255
92allow 192.70.200.0 - 192.70.201.255
93allow 192.75.236.0 - 192.75.236.255
94allow 192.83.208.0 - 192.83.215.255
95allow 192.91.200.0 - 192.91.200.255
96allow 192.142.0.0 - 192.143.255.255
97allow 192.145.128.0 - 192.145.191.255
98allow 192.145.230.0 - 192.145.230.255
99allow 204.8.204.0 - 204.8.207.255
100allow 208.85.156.0 - 208.85.159.255
101
102# From https://web.archive.org/web/20131120040037/http://www.ripe.net/lir-services/resource-management/erx/transferred-resources
103# From https://afrinic.net/fr/library/policies/220-erx-transfer
104allow 2561
105allow 3208
106allow 5536
107allow 6127
108allow 6713
109allow 6879
110allow 8524
111allow 8770
112allow 9129
113allow 11380
114allow 12455
115allow 12556
116allow 13224
117allow 15399
118allow 13569
119allow 15475
120allow 15706
121allow 15804
122allow 15825
123allow 15834
124allow 15964
125allow 16058
126allow 16214
127allow 16284
128allow 16853
129allow 16907
130allow 17652
131allow 19676
132allow 20294
133allow 20484
134allow 20858
135allow 20928
136allow 21003
137allow 21152
138allow 21242
139allow 21271
140allow 21278
141allow 21280
142allow 21391
143allow 21452
144allow 23549
145allow 23889
146allow 24736
147allow 24757
148allow 24788
149allow 24801
150allow 24835
151allow 24863
152allow 24878
153allow 24987
154allow 25163
155allow 25250
156allow 25362
157allow 25364
158allow 25543
159allow 25568
160allow 25576
161allow 28683
162allow 28698
163allow 28913
164allow 29091
165allow 29338
166allow 29340
167allow 29428
168allow 29495
169allow 29544
170allow 29571
171allow 29614
172allow 29674
173allow 30896
174allow 31065
175allow 31245
176allow 31619
177allow 83.143.24.0 - 83.143.31.255
178allow 84.205.96.0 - 84.205.127.255
179allow 131.176.0.0 - 131.176.255.255
180allow 163.121.0.0 - 163.121.255.255
181allow 165.231.0.0 - 165.231.255.255
182allow 192.52.232.0 - 192.52.232.255
183allow 193.17.215.0 - 193.17.215.255
184allow 193.19.232.0 - 193.19.235.255
185allow 193.41.146.0 - 193.41.147.255
186allow 193.108.23.0 - 193.108.23.255
187allow 193.108.28.0 - 193.108.28.255
188allow 193.109.66.0 - 193.109.67.255
189allow 193.110.104.0 - 193.110.105.255
190allow 193.194.128.0 - 193.194.128.255
191allow 193.227.128.0 - 193.227.128.255
192allow 194.9.64.0 - 194.9.65.255
193allow 194.9.82.0 - 194.9.83.255
194allow 195.24.80.0 - 195.24.87.255
195allow 195.39.218.0 - 195.39.219.255
196allow 195.234.120.0 - 195.234.123.255
197allow 195.234.168.0 - 195.234.168.255
198allow 195.234.185.0 - 195.234.185.255
199allow 195.234.252.0 - 195.234.255.255
200
201# From https://www.ripe.net/participate/internet-governance/internet-technical-community/the-rir-system/afrinic/ripe-ncc-to-afrinic-transition
202allow 30980
203allow 30982 - 30999
204
205# From https://afrinic.net/ast/pdf/afrinic-whois-audit-report-full-20210121.pdf
206# 12.3 Appendix A3
207allow 193.188.7.0/24
208allow 193.189.0.0/18
209allow 193.189.128.0/24
210allow 193.194.160.0/19
211allow 193.221.218.0/24
212
213# From https://ftp.arin.net/afrinic/afrinic-transfers-by-resource.txt
214# Feb 21, 2005
215allow 1228 - 1232
216allow 2018
217allow 2905
218allow 3067
219allow 3068
220allow 3741
221allow 4178
222allow 4571
223allow 5713
224allow 5734
225allow 6083
226allow 6089
227allow 6149
228allow 6180
229allow 6187
230allow 6351
231allow 6529
232allow 6560
233allow 6968
234allow 7020
235allow 7154
236allow 7231
237allow 7390
238allow 7420
239allow 7460
240allow 7971
241allow 7972
242allow 8094
243allow 10247
244allow 10262
245allow 10331
246allow 10393
247allow 10474
248allow 10505
249allow 10540
250allow 10575
251allow 10798
252allow 10803
253allow 10898
254allow 10922
255allow 11125
256allow 11157
257allow 11201
258allow 11259
259allow 11265
260allow 11569
261allow 11645
262allow 11744
263allow 11845
264allow 11909
265allow 12091
266allow 12143
267allow 12258
268allow 13402
269allow 13519
270allow 13854
271allow 14029
272allow 14115
273allow 14331
274allow 14360
275allow 14429
276allow 14516
277allow 14988
278allow 15022
279allow 15159
280allow 16416
281allow 16547
282allow 16630
283allow 16637
284allow 16800
285allow 17148
286allow 17220
287allow 17260
288allow 17312
289allow 17400
290allow 18775
291allow 18922
292allow 18931
293allow 19136
294allow 19232
295allow 19711
296allow 19832
297allow 19847
298allow 20011
299allow 20086
300allow 20095
301allow 20180
302allow 20459
303allow 21739
304allow 21819
305allow 22354
306allow 22355
307allow 22386
308allow 22572
309allow 22690
310allow 22735
311allow 22750
312allow 22939
313allow 23058
314allow 25695
315allow 25726
316allow 25793
317allow 25818
318allow 26106
319allow 26130
320allow 26422
321allow 26625
322allow 26754
323allow 27576
324allow 27598
325allow 29918
326allow 29975
327allow 30073
328allow 30306
329allow 30429
330allow 30619
331allow 31810
332allow 31856
333allow 31960
334allow 32017
335allow 32279
336allow 32398
337allow 32437
338allow 32653
339allow 32714
340allow 32717
341allow 32842
342allow 32860
343allow 33567
344allow 33579
345allow 33762 - 33791
346allow 64.57.112.0 - 64.57.127.255
347allow 66.8.0.0 - 66.8.127.255
348allow 66.18.64.0 - 66.18.95.255
349allow 69.63.64.0 - 69.63.79.255
350allow 69.67.32.0 - 69.67.47.255
351allow 137.158.0.0 - 137.158.255.255
352allow 137.214.0.0 - 137.214.255.255
353allow 137.215.0.0 - 137.215.255.255
354allow 139.53.0.0 - 139.53.255.255
355allow 143.128.0.0 - 143.128.255.255
356allow 143.160.0.0 - 143.160.255.255
357allow 146.64.0.0 - 146.64.255.255
358allow 146.141.0.0 - 146.141.255.255
359allow 146.182.0.0 - 146.182.255.255
360allow 146.230.0.0 - 146.230.255.255
361allow 146.231.0.0 - 146.231.255.255
362allow 146.232.0.0 - 146.232.255.255
363allow 147.110.0.0 - 147.110.255.255
364allow 152.106.0.0 - 152.106.255.255
365allow 152.107.0.0 - 152.107.255.255
366allow 152.108.0.0 - 152.108.255.255
367allow 152.109.0.0 - 152.109.255.255
368allow 152.110.0.0 - 152.110.255.255
369allow 152.111.0.0 - 152.111.255.255
370allow 152.112.0.0 - 152.112.255.255
371allow 155.159.0.0 - 155.159.255.255
372allow 155.232.0.0 - 155.232.255.255
373allow 155.233.0.0 - 155.233.255.255
374allow 155.234.0.0 - 155.234.255.255
375allow 155.235.0.0 - 155.235.255.255
376allow 155.236.0.0 - 155.236.255.255
377allow 155.237.0.0 - 155.237.255.255
378allow 155.238.0.0 - 155.238.255.255
379allow 155.239.0.0 - 155.239.255.255
380allow 155.240.0.0 - 155.240.255.255
381allow 156.8.0.0 - 156.8.255.255
382allow 160.115.0.0 - 160.115.255.255
383allow 160.116.0.0 - 160.116.255.255
384allow 160.117.0.0 - 160.117.255.255
385allow 160.118.0.0 - 160.118.255.255
386allow 160.119.0.0 - 160.119.255.255
387allow 160.120.0.0 - 160.120.255.255
388allow 160.121.0.0 - 160.121.255.255
389allow 160.122.0.0 - 160.122.255.255
390allow 160.123.0.0 - 160.123.255.255
391allow 160.124.0.0 - 160.124.255.255
392allow 163.195.0.0 - 163.195.255.255
393allow 163.196.0.0 - 163.196.255.255
394allow 163.197.0.0 - 163.197.255.255
395allow 163.198.0.0 - 163.198.255.255
396allow 163.199.0.0 - 163.199.255.255
397allow 163.200.0.0 - 163.200.255.255
398allow 163.201.0.0 - 163.201.255.255
399allow 163.202.0.0 - 163.202.255.255
400allow 163.203.0.0 - 163.203.255.255
401allow 164.88.0.0 - 164.88.255.255
402allow 164.146.0.0 - 164.151.255.255
403allow 164.155.0.0 - 164.155.255.255
404allow 165.3.0.0 - 165.5.255.255
405allow 165.8.0.0 - 165.11.255.255
406allow 165.25.0.0 - 165.25.255.255
407allow 165.143.0.0 - 165.149.255.255
408allow 165.165.0.0 - 165.165.255.255
409allow 165.180.0.0 - 165.180.255.255
410allow 165.233.0.0 - 165.233.255.255
411allow 166.85.0.0 - 166.85.255.255
412allow 168.76.0.0 - 168.76.255.255
413allow 168.80.0.0 - 168.81.255.255
414allow 168.89.0.0 - 168.89.255.255
415allow 168.128.0.0 - 168.128.255.255
416allow 168.142.0.0 - 168.142.255.255
417allow 168.155.0.0 - 168.155.255.255
418allow 168.164.0.0 - 168.164.255.255
419allow 168.167.0.0 - 168.167.255.255
420allow 168.172.0.0 - 168.172.255.255
421allow 168.206.0.0 - 168.206.255.255
422allow 168.209.0.0 - 168.210.255.255
423allow 169.129.0.0 - 169.129.255.255
424allow 169.202.0.0 - 169.202.255.255
425allow 192.33.10.0 - 192.33.10.255
426allow 192.42.99.0 - 192.42.99.255
427allow 192.48.253.0 - 192.48.253.255
428allow 192.68.138.0 - 192.68.138.255
429allow 192.70.237.0 - 192.70.237.255
430allow 192.82.142.0 - 192.82.142.255
431allow 192.84.244.0 - 192.84.244.255
432allow 192.94.61.0 - 192.94.61.255
433allow 192.94.210.0 - 192.94.210.255
434allow 192.94.240.0 - 192.94.240.255
435allow 192.94.241.0 - 192.94.241.255
436allow 192.94.246.0 - 192.94.246.255
437allow 192.96.0.0 - 192.96.255.255
438allow 192.100.1.0 - 192.100.1.255
439allow 192.101.142.0 - 192.101.142.255
440allow 192.102.9.0 - 192.102.9.255
441allow 192.133.250.0 - 192.133.250.255
442allow 192.136.55.0 - 192.136.55.255
443allow 192.136.56.0 - 192.136.56.255
444allow 192.136.57.0 - 192.136.57.255
445allow 192.157.190.0 - 192.157.190.255
446allow 192.188.164.0 - 192.188.167.255
447allow 192.189.75.0 - 192.189.75.255
448allow 192.189.139.0 - 192.189.140.255
449allow 192.231.237.0 - 192.231.237.255
450allow 192.231.254.0 - 192.231.254.255
451allow 192.245.148.0 - 192.245.148.255
452allow 192.251.202.0 - 192.251.202.255
453allow 198.54.0.0 - 198.54.255.255
454allow 200.16.8.0 - 200.16.15.255
455allow 204.12.128.0 - 204.12.143.255
456allow 204.87.179.0 - 204.87.179.255
457allow 204.152.14.0 - 204.152.15.255
458allow 204.235.32.0 - 204.235.43.255
459allow 205.159.79.0 - 205.159.79.255
460allow 206.223.136.0 - 206.223.136.255
461allow 209.203.0.0 - 209.203.63.255
462allow 209.212.96.0 - 209.212.127.255
463allow 216.236.176.0 - 216.236.191.255
464
465# From rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
466# CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
467# Not Before: Mar 30 14:17:08 2020 GMT / Not After : Mar 30 00:00:00 2025 GMT
468# SHA256:B6w5P1mkoNyJtM99GfGLaaKkGfSkQ6+4eC4tPijBLyM=
469allow 202.123.0.0/19
470
471# From rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
472# CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
473# Not Before: Mar 30 14:17:12 2020 GMT / Not After : Mar 30 00:00:00 2025 GMT
474# SHA256:64eh2w7qQrFQVPaQrRJ4kA83gUgE3EDvm0D0AWHCXHM=
475allow 62.8.64.0/19
476allow 62.12.96.0/19
477allow 62.24.96.0/19
478allow 62.61.192.0/18
479allow 62.68.32.0/19
480allow 62.68.224.0/19
481allow 62.114.0.0/16
482allow 62.117.32.0/19
483allow 62.135.0.0/17
484allow 62.139.0.0/16
485allow 62.140.64.0/18
486allow 62.173.32.0/19
487allow 62.193.64.0/18
488allow 62.193.160.0/19
489allow 62.240.32.0/19
490allow 62.240.96.0/19
491allow 62.241.128.0/19
492allow 62.251.128.0/17
493allow 77.220.0.0/19
494allow 80.67.128.0/20
495allow 80.72.96.0/20
496allow 80.75.160.0/19
497allow 80.87.64.0/19
498allow 80.88.0.0/20
499allow 80.95.0.0/20
500allow 80.240.192.0/20
501allow 80.246.0.0/20
502allow 80.248.0.0/20
503allow 80.248.64.0/20
504allow 80.249.64.0/20
505allow 80.250.32.0/20
506allow 81.4.0.0/18
507allow 81.10.0.0/17
508allow 81.21.96.0/20
509allow 81.22.64.0/19
510allow 81.26.64.0/20
511allow 81.29.96.0/20
512allow 81.91.224.0/20
513allow 81.192.0.0/16
514allow 82.101.128.0/18
515allow 82.128.0.0/17
516allow 82.129.128.0/17
517allow 82.151.64.0/19
518allow 82.201.128.0/17
519allow 84.36.0.0/16
520allow 84.233.0.0/17
521allow 87.255.96.0/19
522allow 193.95.0.0/17
523allow 193.108.214.0/24
524allow 193.108.252.0/22
525allow 193.189.64.0 - 193.189.65.255
526allow 193.194.1.0 - 193.194.5.255
527allow 193.194.32.0 - 193.194.95.255
528allow 193.227.0.0/18
529allow 194.6.224.0/24
530allow 194.79.96.0/19
531allow 194.204.192.0/18
532allow 195.24.192.0/19
533allow 195.43.0.0/19
534allow 195.166.224.0/19
535allow 195.202.64.0/19
536allow 195.246.32.0/19
537allow 212.0.128.0/19
538allow 212.12.224.0/19
539allow 212.22.160.0/19
540allow 212.49.64.0/19
541allow 212.52.128.0/19
542allow 212.60.64.0/19
543allow 212.85.192.0/19
544allow 212.88.96.0/19
545allow 212.96.0.0/19
546allow 212.100.64.0/19
547allow 212.103.160.0/19
548allow 212.122.224.0/19
549allow 212.217.0.0/17
550allow 213.55.64.0/18
551allow 213.131.64.0/19
552allow 213.136.96.0/19
553allow 213.147.64.0/19
554allow 213.150.96.0/19
555allow 213.150.160.0 - 213.150.223.255
556allow 213.152.64.0/19
557allow 213.154.32.0 - 213.154.95.255
558allow 213.158.160.0/19
559allow 213.172.128.0/19
560allow 213.179.160.0/19
561allow 213.181.224.0/19
562allow 213.193.32.0/19
563allow 213.212.192.0/18
564allow 213.247.0.0/19
565allow 213.255.128.0/19
566allow 217.14.80.0/20
567allow 217.20.224.0/20
568allow 217.21.112.0/20
569allow 217.29.128.0/20
570allow 217.29.208.0/20
571allow 217.52.0.0/14
572allow 217.64.96.0/20
573allow 217.77.64.0/20
574allow 217.78.64.0/20
575allow 217.117.0.0/20
576allow 217.139.0.0/16
577allow 217.170.144.0/20
578allow 217.199.144.0/20
579
580# From rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
581# CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
582# Not Before: Mar 30 14:17:09 2020 GMT / Not After : Mar 30 00:00:00 2025 GMT
583# SHA256:wmJV3qcwiPcLtEMLBcvvyjs4V1Lz690bK3b8cv5v8F8=
584allow 129.0.0.0/16
585allow 129.18.0.0/16
586allow 129.45.0.0/16
587allow 129.56.0.0/16
588allow 129.122.0.0/16
589allow 129.140.0.0/16
590allow 129.205.0.0/16
591allow 129.232.0.0/16
592allow 137.63.0.0 - 137.64.255.255
593allow 137.115.0.0/16
594allow 137.171.0.0/16
595allow 137.196.0.0/16
596allow 137.255.0.0/16
597allow 155.0.0.0/16
598allow 155.11.0.0 - 155.12.255.255
599allow 155.89.0.0/16
600allow 155.93.0.0/16
601allow 155.196.0.0/16
602allow 155.251.0.0/16
603allow 155.255.0.0 - 156.0.255.255
604allow 156.38.0.0/16
605allow 156.155.0.0 - 156.255.255.255
606allow 160.0.0.0/16
607allow 160.77.0.0/16
608allow 160.89.0.0 - 160.90.255.255
609allow 160.105.0.0/16
610allow 160.113.0.0/16
611allow 160.152.0.0/16
612allow 160.154.0.0 - 160.179.255.255
613allow 160.181.0.0 - 160.184.255.255
614allow 160.224.0.0 - 160.226.255.255
615allow 160.242.0.0/16
616allow 160.255.0.0/16
617allow 165.0.0.0/16
618allow 165.16.0.0/16
619allow 165.49.0.0 - 165.63.255.255
620allow 165.73.0.0/16
621allow 165.90.0.0/16
622allow 165.169.0.0/16
623allow 165.210.0.0/15
624allow 165.255.0.0/16
625allow 168.211.0.0 - 168.211.255.255
626allow 168.253.0.0/16
627allow 169.0.0.0/15
628allow 169.159.0.0/16
629allow 169.239.0.0/16
630allow 169.255.0.0/16
631allow 192.109.242.0/24
632