- The document describes various flags and arguments that can be used in queries to the RIPE Whois database to filter and customize search results.
- Flags like -i, -T, -r, and -K allow narrowing searches to specific object types, sources, or attributes. Flags like -a, -B, and -G broaden searches or control output formatting.
- The RIPE Whois database can be queried through its web interface at ripe.net/whois or via the whois client software available for download on the RIPE website, with this reference card listing the most commonly used query flags and their effects.
- The document describes various flags and arguments that can be used in queries to the RIPE Whois database to filter and customize search results.
- Flags like -i, -T, -r, and -K allow narrowing searches to specific object types, sources, or attributes. Flags like -a, -B, and -G broaden searches or control output formatting.
- The RIPE Whois database can be queried through its web interface at ripe.net/whois or via the whois client software available for download on the RIPE website, with this reference card listing the most commonly used query flags and their effects.
Inverse Lookups: Objects returned by Flag Argument Effect Flag Argument query Specifies sources and in which Objects with matching -i person Nic-handle -s Source(s) order to look up when performing a query. Maintainer admin-c, tech-c, zone-c or author. Objects with a matching mnt- RIPE Whois Database -i mnt-by Switches off referrals for domain lookups. Query will only return an name by. Queries Reference Card -R Narrowing Down or Broadening Search: object in the local database that matches the lookup key. Flag Argument Effect Only the primary keys of an object Switches off recursion for contact are returned. The exceptions are -r information after retrieving the set objects where the member’s objects that match the lookup key. This reference card lists query options available -K attributes will also be returned. This for the RIPE Whois Database: flag does not apply to person Object Restricts the type of objects to -T and role objects. type(s) lookup in the query. • Queries using primary and lookup keys Server Specifies that the server • Inverse queries -h Specifies a query of another server. should perform lookups in all address -a • IP address lookups available sources. See also “-q • Miscellaneous queries Requests a persistent connection. sources” query. A client may issue multiple queries • Database help Optional -k normal on the same connection. The • List of commonly used flags query server will not close the connec- Database help tion until it receives a -k without an Note: most e-mail addresses are hidden in the whois argument (after the first one). Example: whois -h whois.ripe.net -q sources query results unless -B flag is used when making a query. Switches off default e-mail filter- Flag Argument Returns -B ing behaviour. Shows entire object Template for the specified The flags in this reference card work on both the RIPE including all e-mail addresses. -t Object type Whois web interface and the whois client. The web object type. Turns off logical grouping of objects interface is available at: Verbose template for the speci- http://www.ripe.net/whois -G in query results and lists objects -v Object type according to type. fied object type. List of query options available in Whois client software is available to download at: Mirroring Request an NRMT stream from the “help” ftp://ftp.ripe.net/tools/ripe-whois-latest.tar.gz -g the database. request server. Current set of sources along RIPE Database User Manual: Getting Started is available at: Brief output mode. Only shows -q “sources” with the information required http://www.ripe.net/ripe/docs/db-start.html -b primary key (address range) and for mirroring. abuse mailboxes. RIPE Database User Manual can be found at: -q “version” Current version of the server. http://www.ripe.net/ripe/docs/databaseref-manual.html Produce output using shorthand -F -q “types” A list of all available object types. notation for attribute names. -V Sends information about the <client tag> client to the server. For more information about the RIPE The RIPE Whois Database Queries reference Whois Database, see: card can also be found online at: RIPE Network Coordination Centre http://www.ripe.net/db/support/whois-refcard.pdf P.O. Box 10096 1001 EB Amsterdam http://www.ripe.net/db/ the Netherlands www.ripe.net Flag Alternative Queries using primary and lookup keys Inverse queries Lookup Objects returned flag key by query Example: whois -h whois.ripe.net 193.0.1.17 irt objects with a This always returns referenced contact objects (person/role) Example: whois -h whois.ripe.net -i person RD132-RIPE -i iy -i irt-nfy e-mail matching irt-nfy. Lookup key Objects returned by query Alterna- Lookup Objects returned by inetnum and Flag -i mi -i mnt-irt IRT name inet6num objects tive flag key query Address prefix IPv4 - Most specific inetnum and/or route. with a matching mnt-irt. or range IPv6 - Most specific inet6num and/or route6. Nic-handle or Objects with a -i ac -i admin-c inet-rtr and person name matching admin-c. IPv4 - Most specific inetnum and/or -i la -i local-as AS Number inet6num objects Nic-handle or Objects with a with a matching local-as. Single address route and inet-rtr containing the address. IPv6 - Most specific inet6num and/or -i tc -i tech-c person name matching tech-c. route6 and inet-rtr containing the address. Set objects (as-set, Nic-handle or Objects with a -i mr -i mbrs-by-ref Maintainer route-set and -i zc -i zone-c name rtr-set) with a All inetnum and inet6num objects person name matching zone-c. Network matching mbrs-by-ref. with a netname containing the name Nic-handle or Objects name specified in the query. with a match- -i pn -i person ing admin-c, tech-c, Objects with a match- person name zone-c or author. ing member-of, provided All person and role objects with a per- Person son or role attribute containing the name -i mo -i member-of Set name that their membership specified in the query. Maintainer Objects with a claim is validated by the -i mb -i mnt-by name mbrs-by-ref of the set. matching mnt-by. Nic-handle person or role with a matching nic-hdl. -i mnt- Maintainer Objects with a route and route6 Organisation All organisation objects with an org-name -i ml name -i or -i origin AS Number objects with a lower matching mnt-lower. name containing the name specified in the query. matching origin. -i mu -iroutes mnt- Maintainer Objects with a Organisation organisation with a matching primary key. name matching mnt-routes. -i am -ibox abuse-mail- e-mail Objects with a match- ing abuse-mailbox. ID Maintainer Objects with a -i mz -i mnt-ref name matching mnt-ref. Domain domain object with Maintainer name mntner with a matching primary key. -i sd Sub-dom name matching sub-dom attribute. -i md -imains mnt-do- Maintainer Objects with a IRT name irt with a matching primary key. name matching mnt-domains. aut-num object with a matching aut- mntner objects with AS Number -i dt -i upd-to e-mail a matching upd-to. num and associated as-block. IP address lookups mntner objects AS Number - as-block whose primary key matches -i mn -i mnt-nfy e-mail with a matching mnt-nfy. Example: whois -h whois.ripe.net -L 193.0.1.17 AS Number or fully contains the query range. Objects with a Flag Objects returned by query -i ny -i notify e-mail as-set, filter-set, peering-set, matching notify. Only an exact match on a prefix will be performed. Set name route-set or rtr-set with a matching -x If no exact match is found, no objects are returned. Domain domain objects primary key. -i ns -i nserver name or single address with a matching nserver. All more specific inetnum, inet6num, route domain or inet-rtr with a matching -M Domain or route6 objects, excluding exact matches. primary key. Mntner objects where the auth First level more specific inetnum, inet6num, Exact match or less specific route and -i at -i auth Key-cert ID -m Route matches the specified route or route6 objects, excluding exact matches. exact match or less specific inetnum. key-cert object. All less specific inetnum, inet6num, route Exact match or less specific route6 and -L Route6 key-cert objects with or route6 objects, including exact matches. exact match or less specific inet6num. -i fp -i fingerpr Fngerprint a matching fingerpr. First level less specific inetnum, inet6num, person, role and organisation -l E-mail objects with a matching e-mail. route or route6 objects, excluding matches. Objects with a -i rn -i ref-nfy e-mail Key-cert key-cert with a matching primary key. matching ref-nfy. Enables use of the -m, -M, -l and -L flags for -d lookups on reverse delegation domain objects. Router inet-rtr with an ifaddr containing the Organisation Objects with a The most specific inetnum or inet6num interface -i og -i org -c address IPv4 or IPv6 address specified in the query. name matching org. object containing the reference to an irt object. Last updated: March, 2006