Fetching the list programmatically
If you are automating a firewall allowlist, read the addresses from this endpoint rather than copying the block above:updated_at moves only when the addresses themselves change, so you can alert on it instead of diffing the lists.
The response is cached for one hour. A new gateway address is therefore visible within the hour it ships.
The endpoint is authoritative. The list at the top of this page mirrors it for convenience, so if the two ever disagree, trust the endpoint.