diff --git a/pki/ip_util.h b/pki/ip_util.h
index e78b9e6..64ea719 100644
--- a/pki/ip_util.h
+++ b/pki/ip_util.h
@@ -21,9 +21,9 @@
 
 // Returns whether `addr1` and `addr2` are equal under the netmask `mask`.
 OPENSSL_EXPORT bool IPAddressMatchesWithNetmask(der::Input addr1,
-                                                    der::Input addr2,
-                                                    der::Input mask);
+                                                der::Input addr2,
+                                                der::Input mask);
 
-}  // namespace net
+}  // namespace bssl
 
 #endif  // BSSL_PKI_IP_UTIL_H_