---
title: "RIPE Database registry whois (global via GRS)"
method: GET
path: "/api/v1/network/whois/{resource}"
tags: ["Sugra NetAtlas"]
---

# RIPE Database registry whois (global via GRS)

`GET /api/v1/network/whois/{resource}`

Raw RPSL registry objects for an IP, prefix, ASN, organisation-id, or free-text handle/name, straight from the RIPE Database (rest.db.ripe.net) - the authoritative registry, not the RIPEstat aggregate. Defaults to source=global, which fans one query across all five RIRs via the GRS mirrors (plus the live RIPE source and ripe-nonauth) so a resource in any region resolves; narrow to a single source (ripe, ripe-nonauth, arin-grs, apnic-grs, lacnic-grs, afrinic-grs, ripe-grs, radb-grs, jpirr-grs) when you want one registry's view. Object type is inferred from the resource (ASN->aut-num, ORG-id->organisation, IP/prefix->inet[6]num).

## Path parameters

- `resource` string, required — IP / prefix / ASN / ORG-id / handle.

## Query parameters

- `source` string — Upstream registry: 'global' (all RIRs, default) | ripe | ripe-nonauth | <rir>-grs.
- `limit` integer — Max objects returned.
- `prefer` string — Serving preference for the W7 local graph: 'local' (serve local for RIPE-region-scoped queries with live fallback, default) | 'live' (force the live RIPE Database). See _meta.served_from. Only by-key lookups in the v1 graph set (aut-num, organisation) scoped to source=ripe/ripe-nonauth serve local; global/GRS queries and IP/prefix covering-object lookups stay live in v1 (the graph is RIPE-region-only).

## Response `200`

Successful Response

- NetworkWhoisResourceData
  - `resource` string, nullable
  - `resource_kind` string, nullable
  - `source` string, nullable
  - `query` string, nullable
  - `count` union
    - integer
    - number
  - `objects` Object[], nullable
    - `type` string, nullable
    - `primary_key` string, nullable
    - `source` string, nullable
    - `attributes` Attribute[], nullable
      - `name` string, nullable
      - `value` string, nullable
  - `_meta` AtlasMeta
    - `product` string, required — Always 'Sugra NetAtlas'.
    - `atlas_built_at` string, nullable — UTC ISO-8601 build time of the atlas snapshot that answered; null only when no connector can vouch for one.
    - `privacy_signal_version` string, required — Version of the privacy/default-route signal set.
    - `confidence` string, required — Confidence of the privacy/default-route signal: high, medium or low.
    - `accuracy` string, required — Accuracy class of the answer (e.g. public, city, country, unknown).
    - `sources` string[], required — Sugra-branded upstream families that contributed.
    - `data_time` string, nullable — When the DATA is from (UTC ISO-8601); null when nothing can vouch for it.
    - `response_time` string, required — When Sugra answered (UTC ISO-8601).
    - `partial` boolean, required — True when at least one upstream failed and the answer is incomplete.
    - `geo_confidence` string, nullable — IP-geo responses only: how trustworthy the resolved city/country is (downgrades for anycast/CDN).
    - `served_from` string, nullable — Where the answer came from (local atlas, live proxy, cache).
    - `fallback_reason` string, nullable — Why a fallback path served the answer, when one did.
    - `sources_coverage` unknown
    - `cached` boolean, nullable — True when the answer was served from the response cache (routes that cache whole answers).
    - `atlas_sha256` string, nullable — SHA-256 of the atlas snapshot (sources/coverage).
    - `endpoint_version` string, nullable — Endpoint contract version where a route declares one (sources/coverage: v1).

## Other responses

- `401` — Missing or invalid `x-api-key` header. JSON body with a stable `code` distinguishing `missing_api_key` (no header sent) from `invalid_api_key` (header sent, key not accepted); any other 401 source carries the generic `unauthorized` with its detail as `reason`. Plus `hint`. `plan` is always null on 401 - an unauthenticated request has no plan; quota exhaustion is 429, not 401.
- `422` — Validation Error
- `429` — Daily rate limit exceeded. Check `X-RateLimit-Reset` for the next window.
- `503` — Upstream source is temporarily unavailable. Retry after a short delay.

---

[API](https://skmtc.net/sugra/apis/sugra-api.md) · [All operations](https://skmtc.net/sugra/apis/sugra-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/sugra/sugra-api/revisions/914af3d38c7c/schema)