ripe.constraints revision 1.4 
1#	$OpenBSD: ripe.constraints,v 1.4 2024/01/30 03:40:01 job Exp $
2
3# From https://www.iana.org/assignments/ipv6-unicast-address-assignments
4allow 2001:600::/23
5allow 2001:800::/22
6allow 2001:1400::/22
7allow 2001:1a00::/23
8allow 2001:1c00::/22
9allow 2001:2000::/19
10allow 2001:4000::/23
11allow 2001:4600::/23
12allow 2001:4a00::/23
13allow 2001:4c00::/23
14allow 2001:5000::/20
15allow 2003::/18
16allow 2a00::/12
17allow 2a10::/12
18
19# LACNIC ASNs cannot be transferred to RIPE NCC
20# From https://www.iana.org/assignments/as-numbers/
21deny 27648 - 28671
22deny 52224 - 53247
23deny 61440 - 61951
24deny 64099 - 64197
25deny 262144 - 273820
26
27# AFRINIC IPv4 resources cannot be transferred to RIPE NCC
28# From https://www.iana.org/assignments/ipv4-address-space/
29deny 41.0.0.0/8
30deny 102.0.0.0/8
31deny 105.0.0.0/8
32deny 154.0.0.0/16
33deny 154.16.0.0/16
34deny 154.65.0.0 - 154.255.255.255
35deny 196.0.0.0 - 196.1.0.255
36deny 196.1.4.0/24
37deny 196.1.7.0 - 196.1.63.255
38deny 196.1.71.0/24
39deny 196.1.74.0 - 196.1.103.255
40deny 196.1.115.0 - 196.1.133.255
41deny 196.1.137.0/24
42deny 196.1.143.0 - 196.1.159.255
43deny 196.1.176.0 - 196.1.255.255
44deny 196.2.2.0/23
45deny 196.2.8.0 - 196.2.255.255
46deny 196.3.14.0/23
47deny 196.3.57.0 - 196.3.64.255
48deny 196.3.90.0/24
49deny 196.3.92.0 - 196.3.94.255
50deny 196.3.96.0/21
51deny 196.3.105.0/24
52deny 196.3.107.0 - 196.3.131.255
53deny 196.3.148.0/22
54deny 196.3.154.0 - 196.3.183.255
55deny 196.3.224.0 - 196.4.45.255
56deny 196.4.71.0 - 196.11.171.255
57deny 196.11.174.0 - 196.11.239.255
58deny 196.11.248.0/21
59deny 196.12.10.0 - 196.12.31.255
60deny 196.12.128.0/19
61deny 196.12.192.0 - 196.15.15.255
62deny 196.15.64.0 - 196.26.255.255
63deny 196.27.64.0 - 196.28.47.255
64deny 196.28.64.0 - 196.29.63.255
65deny 196.29.96.0 - 196.31.255.255
66deny 196.32.8.0 - 196.32.31.255
67deny 196.32.96.0/19
68deny 196.32.160.0 - 196.39.255.255
69deny 196.40.96.0 - 196.41.255.255
70deny 196.42.64.0 - 196.216.0.255
71deny 196.216.2.0 - 197.255.255.255
72
73# AFRINIC ASNs cannot be transferred to RIPE NCC
74# From https://www.iana.org/assignments/as-numbers/
75deny 36864 - 37887
76deny 327680 - 328703
77deny 328704 - 329727
78
79# Private use IPv4 & IPv6 addresses and ASNs
80deny 0.0.0.0/8               # RFC 1122 Local Identification
81deny 10.0.0.0/8              # RFC 1918 private space
82deny 100.64.0.0/10           # RFC 6598 Carrier Grade NAT
83deny 127.0.0.0/8             # RFC 1122 localhost
84deny 169.254.0.0/16          # RFC 3927 link local
85deny 172.16.0.0/12           # RFC 1918 private space
86deny 192.0.2.0/24            # RFC 5737 TEST-NET-1
87deny 192.88.99.0/24          # RFC 7526 6to4 anycast relay
88deny 192.168.0.0/16          # RFC 1918 private space
89deny 198.18.0.0/15           # RFC 2544 benchmarking
90deny 198.51.100.0/24         # RFC 5737 TEST-NET-2
91deny 203.0.113.0/24          # RFC 5737 TEST-NET-3
92deny 224.0.0.0/4             # Multicast
93deny 240.0.0.0/4             # Reserved
94deny 23456                   # RFC 4893 AS_TRANS
95deny 64496 - 64511           # RFC 5398
96deny 64512 - 65534           # RFC 6996
97deny 65535                   # RFC 7300
98deny 65536 - 65551           # RFC 5398
99deny 65552 - 131071          # IANA Reserved
100deny 4200000000 - 4294967294 # RFC 6996
101deny 4294967295              # RFC 7300
102
103# RIPE NCC supports IPv4 and ASN transfers: allow the complement of what is denied
104allow 0.0.0.0/0
105allow 1 - 4199999999
106