Home / Setup guide

Use lists and scripts without guesswork

Choose one access method. Both work for IPv4 and IPv6 lists, MikroTik scripts, Cisco and FortiGate files, and the sample IP APIs.

Fixed public IP

Best for an office, server, or router with a stable internet IP. Requests work without a token.

  1. Sign in to your account.
  2. Under Allow a fixed IP, use the IP detected for this connection, or enter the router/server's public IP.
  3. Press Add IP access. Download files or run scripts from that network.

One IP can be allowed on multiple accounts. Requests from it are recorded in each matching account.

Changing public IP

Use a token when your provider changes your public IP or you cannot allowlist the router's IP.

  1. Sign in or create an account; a token is created automatically.
  2. For MikroTik, press Copy my MikroTik script. The result offers a one-line command for Terminal and a separate script for Scheduler.
  3. For curl or another client, send Authorization: Bearer YOUR_TOKEN.

Keep the token private. Usage appears in your account.

Manual downloads and activity

Sign in, then click any file download on the site. The download is recorded automatically with its service, time, and your public IP. If you use a token or an allowed IP, automated requests are recorded too. See Recent requests and IP addresses in your account.

Simple IPv4 and IPv6 text lists

For manual use, open the list page and download the text file. From an allowed IP:

curl -fL https://ipxpert.ir/simple/ipv4.txt -o iran-ipv4.txt
curl -fL https://ipxpert.ir/simple/ipv6.txt -o iran-ipv6.txt

Changing IP? Copy a complete token request:

curl -fL -H "Authorization: Bearer YOUR_TOKEN" https://ipxpert.ir/simple/ipv4.txt -o iran-ipv4.txt

MikroTik RouterOS v7

Open MikroTik and download the IPv4, IPv6, or combined updater while signed in. A fixed-IP download has no token header; a token download includes your token in the request line. Paste the IPv4 or combined updater into System → Scheduler → On Event, set its interval (for example, 1d), and enable the ftp, read, write, and test policies on that scheduler.

To install the separate Daily Update, upload its file and run /import file-name=update-ir-daily.rsc once in the RouterOS terminal. It creates its own script and scheduler with the required permissions. Do not paste this installer into On Event.

If you use a changing IP, get the personalized script from your account. If you use a fixed IP, add the router's public egress IP in your account first. HTTPS certificate checking is enabled. If Fetch reports unable to get local issuer certificate, check /certificate/settings/print; allow Fetch to use the built-in trust store with /certificate/settings/set builtin-trust-store=fetch, and update RouterOS if that setting or the current CA roots are missing.

Cisco

The Cisco ACL file is available here. Download it manually, or fetch it from an allowed IP:

curl -fL https://ipxpert.ir/cisco/ACL-Iran-IPs.txt -o ACL-Iran-IPs.txt

Changing IP? Use this complete token request:

curl -fL -H "Authorization: Bearer YOUR_TOKEN" https://ipxpert.ir/cisco/ACL-Iran-IPs.txt -o ACL-Iran-IPs.txt

FortiGate

Choose IPv4, IPv6, or combined configuration from FortiGate. Example for an allowed IP:

curl -fL https://ipxpert.ir/fortigate/iran-v4.conf -o iran-v4.conf

Changing IP? Use this complete token request:

curl -fL -H "Authorization: Bearer YOUR_TOKEN" https://ipxpert.ir/fortigate/iran-v4.conf -o iran-v4.conf

Review the configuration and import it using your normal FortiGate process.

Sample IP and network APIs

These examples check your connection IP, look up a sample address, or validate a prefix. IP allowlisting is useful when requests come from a fixed server; tokens work from changing IPs.

curl -fL https://ipxpert.ir/api/connection.py
curl -fL https://ipxpert.ir/site/client-ip
curl -fL 'https://ipxpert.ir/site/bgp-route?resource=1.1.1.1'
curl -fL 'https://ipxpert.ir/site/rpki-validation?resource=13335&prefix=1.1.1.0%2F24'

To associate API usage from a changing IP with your account, add the token header. Copy this example:

curl -fL -H "Authorization: Bearer YOUR_TOKEN" 'https://ipxpert.ir/site/bgp-route?resource=1.1.1.1'

Requests from an allowed IP are also logged to every account that allows that IP.

See or remove an allowed IP

Go to Account. The site shows the public IP it detects for you, allowed IPs, request counts, recent request IPs, and a remove button. Adding an IP on another account is allowed and does not replace the first account's permission.