No limit, however you should use a strong server.
Each rule should have about up to 200 records, that may be CIDR ranges themselves.
Try not to place more than a few x.x.x.x/16 ranges on each rule.
In total I have about 8-10 Million IPs blockes.
I block all CIDR ranges for ISP of VPS used by...