---
title: "List IP restrictions"
source_url: https://dev.digicert.com/certcentral-apis/services-api/ip-restrictions/list-ip-restrictions.html
api_method: GET
api_endpoint: "/services/v2/container/{{container_id}}/ip/rules"
api_url: "https://www.digicert.com/services/v2/container/{{container_id}}/ip/rules"
---

**GET** `https://www.digicert.com/services/v2/container/{{container_id}}/ip/rules`

Use this endpoint to get a list of existing IP rules in your CertCentral account.

## Example requests and responses

## cURL

```bash
curl --request GET 'https://www.digicert.com/services/v2/container/{{container_id}}/ip/rules' \
--header 'X-DC-DEVKEY: {{api_key}}' \
--header 'Content-Type: application/json'
```

## 200 OK

```json
{
  "ip_rules": [
    {
      "id": 1233,
      "date_created": "2023-08-17T18:13:44+00:00",
      "account_id": "1234",
      "container_id": 1234,
      "user_id": 0,
      "ip_address": "192.0.2.0",
      "ip_address_end": "192.0.2.5"
    },
    {
      "id": 1234,
      "date_created": "2023-08-17T18:14:44+00:00",
      "account_id": "1234",
      "container_id": 1234,
      "user_id": 0,
      "api_key_id": 1234,
      "ip_address": "192.0.2.29",
      "ip_address_end": "192.0.2.29"
    }
  ]
}
```

## Path parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>container_id</td>
<td>integer</td>
<td>ID of the top-level account container (division).<br>To get the ID of the top-level container in your account, use the <a href="https://dev.digicert.com/md/certcentral-apis/services-api/containers/list-containers.md">List containers</a> API endpoint. The top-level container is the container with a <code>parent_id</code> value of <code>0</code>.</td>
</tr>
</tbody>
</table>

## Response parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
<tr>
<th>ip_rules</th>
<th>array of objects</th>
<th>List of IP rule objects.</th>
</tr>
<tr>
<th>.. id</th>
<th>integer</th>
<th>IP rule ID. Use this ID to delete an IP rule.</th>
</tr>
<tr>
<th>.. date_created</th>
<th>string</th>
<th>Date and time the rule was created. UTC timezone, ISO-8601 format.</th>
</tr>
<tr>
<th>.. account_id</th>
<th>string</th>
<th>ID of account the rule belongs to.</th>
</tr>
<tr>
<th>.. container_id</th>
<th>integer</th>
<th>ID of container the rule belongs to.</th>
</tr>
<tr>
<th>.. user_id</th>
<th>integer</th>
<th>ID of user the rule is for. Returns 0 if the rule does not apply to a specific user (for example, if it applies account wide or to an API key).</th>
</tr>
<tr>
<th>.. api_key_id</th>
<th>integer</th>
<th>ID of API key the rule is for. Not present if the rule does not apply to an API key.</th>
</tr>
</thead>
<tbody>
<tr>
<td>.. ip_address</td>
<td>string</td>
<td>Starting IP address in allowed address range.</td>
</tr>
<tr>
<td>.. ip_address_end</td>
<td>string</td>
<td>Ending IP address in allowed address range. Alternately, if the rule restricts access to a single address, both <code>ip_address</code> and <code>ip_address_end</code> contain the same value (the allowed address).</td>
</tr>
<tr>
<td>.. description</td>
<td>string</td>
<td>Custom rule description.</td>
</tr>
</tbody>
</table>