<?xml version="1.0" encoding="UTF-8"?>
  <?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
  <!-- generated by https://github.com/cabo/kramdown-rfc version 1.7.39 (Ruby 3.3.8) -->


<!DOCTYPE rfc  [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">

]>


<rfc ipr="trust200902" docName="draft-yang-rtgwg-grc-based-routing-01" category="info" submissionType="IETF" xml:lang="en">
  <front>
    <title abbrev="GRC Based Routing">Geographic Based Dynamic Routing in LEO Satellite Networks</title>

    <author initials="F." surname="Yang" fullname="Feng Yang">
      <organization>China Mobile</organization>
      <address>
        <postal>
          <country>CN</country>
        </postal>
        <email>yangfeng@chinamobile.com</email>
      </address>
    </author>
    <author initials="P." surname="Du" fullname="Ping Du">
      <organization>China Satellite Network Group</organization>
      <address>
        <postal>
          <country>CN</country>
        </postal>
        <email>pingdu@ustc.edu</email>
      </address>
    </author>
    <author initials="M." surname="Xiao" fullname="Min Xiao">
      <organization>ZTE</organization>
      <address>
        <postal>
          <country>CN</country>
        </postal>
        <email>xiao.min2@zte.com.cn</email>
      </address>
    </author>

    <date year="2026" month="June" day="27"/>

    <area>RTG</area>
    <workgroup>rtgwg</workgroup>
    <keyword>LEO, satellite, routing, geographic coding, H3, dynamic topology, ephemeris, IP addressing</keyword>

    <abstract>


<?line 58?>

<t>This document proposes a dynamic routing mechanism for Low Earth Orbit(LEO) satellite networks based on geographic region coding. By decoupling IP addressing from physical location, the mechanism uses hierarchical geographic grid codes (inspired by Uber's H3 spatial index) as temporary IP addresses for satellites. Routing decisions are made based on the relative geographic position encoded in the destination address, rather than traditional prefix-based IP routing. Satellite ephemeris data is leveraged to pre-compute routing tables for discrete time slices, eliminating the need for real-time link-state flooding and enabling stable, predictable routing in highly dynamic satellite topologies.</t>



    </abstract>



  </front>

  <middle>


<?line 62?>

<section anchor="introduction"><name>Introduction</name>

<section anchor="background"><name>Background</name>

<t>Low Earth Orbit (LEO) satellite constellations, exemplified by Starlink <xref target="LEO"/> and OneWeb, are rapidly transforming global Internet access. Compared to traditional Geostationary Earth Orbit (GEO) satellites, LEO satellites offer significantly lower transmission delay (20-50 ms), higher bandwidth efficiency, and lower launch costs.</t>

<t>However, LEO satellite networks present unique technical challenges, most notably the highly dynamic nature of network topology. Satellites in LEO constellations travel at orbital velocities of approximately 7.5-7.8 km/s, completing an orbit in roughly 90 minutes. Each satellite typically maintains four inter-satellite links (ISLs): two intra-plane links (forward and backward along the same orbital plane) and two inter-plane links (left and right to adjacent orbital planes). Intra-plane ISLs remain relatively stable due to minimal relative motion between co-orbital satellites. In contrast, inter-plane ISLs face continuous topology changes because adjacent orbital planes are non-parallel, and satellites can only maintain stable inter-plane connections with co-directional neighboring satellites for limited time periods.</t>

</section>
<section anchor="problem-statement"><name>Problem Statement</name>

<t>The extreme dynamics of LEO satellite networks renders traditional routing protocols fundamentally unsuitable:</t>

<t><list style="numbers" type="1">
  <t>Topology Dynamicity Breaks Traditional Routing  <vspace blankLines='1'/>
Traditional routing protocols such as OSPF <xref target="RFC2328"/>, IS-IS <xref target="RFC1195"/>, and BGP <xref target="RFC4271"/> were designed for static or low-dynamicity terrestrial networks. Their operational model relies on periodic or event-triggered synchronization of routing information across the entire network. In LEO satellite networks, this approach fails catastrophically:  <list style="symbols">
      <t>Massive state synchronization overhead: Frequent topology changes trigger continuous link-state flooding, consuming enormous bandwidth and processing resources.</t>
      <t>Convergence failure: With handovers occurring every 11-15 seconds and network scales reaching tens of thousands of satellites, traditional protocols cannot converge within the interval between topology changes. The network remains in a perpetual state of re-convergence.</t>
      <t>Routing loops and black holes: Rapid topology changes cause routing inconsistencies, leading to transient loops and packet loss.</t>
      <t>Resource exhaustion: Satellites have limited computational power, memory, and bandwidth. Processing hundreds of thousands of terrestrial routes while simultaneously managing constant topology updates exhausts these scarce resources.</t>
    </list></t>
  <t>Fixed IP Addressing Conflicts with Dynamic Topology  <vspace blankLines='1'/>
Traditional IP addressing binds prefixes to geographic regions. In LEO networks, the same geographic area is served by different satellites at different times. Using fixed IP prefixes would require updating prefix bindings across the entire network every 15 seconds, which is operationally infeasible.</t>
  <t>Predictable Motion Is Underutilized  <vspace blankLines='1'/>
Although satellite topology is highly dynamic, satellite motion follows entirely predictable orbital mechanics. Existing routing approaches fail to exploit this determinism, instead using stochastic methods designed for uncertain environments.</t>
  <t>Terrestrial Route Injection Overwhelms Satellites  <vspace blankLines='1'/>
The terrestrial Internet contains hundreds of thousands of BGP prefixes. Injecting these into the satellite network would cause each satellite to maintain massive routing tables, consume bandwidth for route synchronization, and exhaust onboard resources. Satellites would spend more resources learning routes than forwarding traffic.</t>
</list></t>

</section>
<section anchor="objectives"><name>Objectives</name>

<t>The proposed mechanism aims to:</t>

<t><list style="numbers" type="1">
  <t>Decouple addressing from physical location to hide satellite mobility from the routing system.</t>
  <t>Eliminate the need for network-wide routing state synchronization.</t>
  <t>Reduce onboard computational and memory requirements.</t>
  <t>Leverage predictable satellite ephemeris for pre-computed, time-sliced routing tables.</t>
  <t>Enable seamless integration between the dynamic satellite segment and the static terrestrial Internet.</t>
</list></t>

</section>
<section anchor="requirements-language"><name>Requirements Language</name>

<t>The key words "<bcp14>MUST</bcp14>", "<bcp14>MUST NOT</bcp14>", "<bcp14>REQUIRED</bcp14>", "<bcp14>SHALL</bcp14>", "<bcp14>SHALL
NOT</bcp14>", "<bcp14>SHOULD</bcp14>", "<bcp14>SHOULD NOT</bcp14>", "<bcp14>RECOMMENDED</bcp14>", "<bcp14>NOT RECOMMENDED</bcp14>",
"<bcp14>MAY</bcp14>", and "<bcp14>OPTIONAL</bcp14>" in this document are to be interpreted as
described in BCP 14 <xref target="RFC2119"/> <xref target="RFC8174"/> when, and only when, they
appear in all capitals, as shown here.</t>

<?line -18?>

</section>
</section>
<section anchor="terminology"><name>Terminology</name>

<t>This document uses the following additional terms:</t>

<t><list style="symbols">
  <t>DEV (Device): The user devices (e.g., laptop).</t>
  <t>Ephemeris: Precise orbital parameters that define a satellite's position as a function of time.</t>
  <t>GNSS: Global Navigation Satellite System.</t>
  <t>GRC (Geographic Region Code): A hierarchical spatial index code representing a geographic area on Earth's surface.</t>
  <t>GS (Ground Station): The satellite operator receiver.</t>
  <t>WR (Wifi Router):</t>
  <t>Intra-plane ISL: ISL between satellites in the same orbital plane.</t>
  <t>Inter-plane ISL: ISL between satellites in adjacent orbital planes.</t>
  <t>ISL (Inter-satellite link):</t>
  <t>PoP (Point of Presence):</t>
  <t>Segmented Longest Match: A modified longest prefix matching algorithm that operates on fixed-length segments rather than arbitrary prefix lengths.</t>
  <t>Time Slice: A discrete time interval during which the satellite topology is considered stable for routing purposes.</t>
  <t>UT (User Terminal): The user satellite receiver (e.g., Starlink terminal UT).</t>
</list></t>

</section>
<section anchor="architecture-overview"><name>Architecture Overview</name>

<section anchor="network-segmentation"><name>Network Segmentation</name>

<t>The overall architecture includes UT, user WR, UT, inter-satellite links, GS and PoP that connect satellite networks to the terrestrial Internet. Due to the high relative velocity between satellites and ground infrastructure, frequent handovers are required. For example, Starlink performs beam switching approximately every 15 seconds.</t>

<figure anchor="arch" title="Reference architecture"><artwork align="center" type="ascii-art" name="Architecture"><![CDATA[
+---+   +---+   +--+   +---+     +---+   +--+   +---+   +----+
|DEV|<->|WR |<->|UT|<->|LEO|<--->|LEO|<->|GS|<->|PoP|<->|INET|
|   |   |   |   |  |   |Sat|     |Sat|   |  |   |   |   |    |
+---+   +---+   +--+   +---+     +---+   +--+   +---+   +----+
  ^               ^                        ^               ^
  |<-Terrestrial->|<----- Satellite -----> |<-Terrestrial->|
  |    Segment    |        Segment         |    Segment    |

- INET: Internet
]]></artwork></figure>

<t>The end-to-end network is logically divided into two segments:</t>

<t>Terrestrial Segment: From the DEV to the UT, and from the GS to the PoP and beyond. This segment uses traditional IP prefix-based routing (IPv4 <xref target="RFC791"/> or IPv6 <xref target="RFC8200"/>).</t>

<t>Satellite Segment: From the UT through the inter-satellite network to the GS. This segment uses geographic region coding for IP address, decoupling the destination address from the current physical location of the serving satellite. It is assumed the user traffic will be encapsulated in a tunnel in this proposal.</t>

</section>
<section anchor="key-design-principles"><name>Key Design Principles</name>

<t><list style="numbers" type="1">
  <t>Address-Satellite Decoupling: the address of satellite is not fixed, but periodically changed per geographic region coding.</t>
  <t>Predictive Routing: Routing tables are pre-computed using satellite ephemeris data for each time slice, eliminating runtime route computation and flooding.</t>
  <t>Localized State: Each satellite only needs to know connectivity information for its own and adjacent orbital planes, not the entire network topology.</t>
  <t>Directional Forwarding: Routing decisions resolve to one of six directions: North, South, East, West, Down (to ground), or Up (to upper level shell).</t>
  <t>Centralized Route Computation: A ground control unit centrally computes time-sliced routing tables using global constellation ephemeris and distributes validated routing tables to satellites, reducing onboard computation and ensuring routing consistency.</t>
</list></t>

</section>
</section>
<section anchor="geographic-region-coding"><name>Geographic Region Coding</name>

<section anchor="hierarchical-grid-partitioning"><name>Hierarchical Grid Partitioning</name>

<t>The Earth's surface is partitioned into a hierarchical grid system. This document uses the H3 spatial index <xref target="H3"/> as a reference model, but other hierarchical geospatial indexing systems <bcp14>MAY</bcp14> be used.</t>

<t>The H3 system partitions the globe into 122 base (Level-0) hexagonal cells. Each Level-0 cell is subdivided into 7 Level-1 cells, each Level-1 cell into 7 Level-2 cells, and so on. This yields:</t>

<t><list style="symbols">
  <t>Level 0:                     122 regions</t>
  <t>Level 1: 122 x 7 =           854 regions</t>
  <t>Level 2: 122 x 7^2 =       5,978 regions</t>
  <t>Level 3: 122 x 7^3 =      41,846 regions</t>
  <t>Level 4: 122 x 7^4 =     292,922 regions</t>
  <t>Level 5: 122 x 7^5 =   2,050,454 regions</t>
  <t>Level 6: 122 x 7^6 =  14,353,178 regions</t>
</list></t>

<t>At Level 6, the smallest region has an area of 36 square kilometer, providing sufficient granularity for LEO satellite routing. In practice, the finest granularity is achieved when each cell contains exactly one satellite. According to this address allocation schema, the satellite will have dynamic address and UT/GS will have fixed address.</t>

</section>
<section anchor="geographic-region-code-grc-format"><name>Geographic Region Code (GRC) Format</name>

<t>The GRC is encoded as a 32-bit value compatible with IPv4 addressing, enabling reuse of existing IPv4 forwarding hardware and software with minimal modifications. In case of IPv6, it can also be easily fit into 128 bits address.</t>

<figure anchor="region" title="Geographic Region Code"><artwork align="center" type="ascii-art" name="region"><![CDATA[
 0               1               2               3
 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Shell |   Level 0   |  L1 |  L2 |  L3 |  L4 |  L5 |  L6 |  IF |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

The 32-bit structure is organized as follows:

- Bits 0-3 (4 bits): Satellite shell index (0-15).
- Bits 4-10 (7 bits): Level-0 region index (0-121).
- Bits 11-13 (3 bits): Level-1 region index (0-6).
- Bits 14-16 (3 bits): Level-2 region index (0-6).
- Bits 17-19 (3 bits): Level-3 region index (0-6).
- Bits 20-22 (3 bits): Level-4 region index (0-6).
- Bits 23-25 (3 bits): Level-5 region index (0-6).
- Bits 26-28 (3 bits): Level-6 region index (0-6).
- Bits 29-31 (3 bits): Interface index (0-5) supports 6 directions.

**Note**: The encoding above is illustrative. Implementations MAY
          use alternative bit allocations that preserve the 
          hierarchical property while fitting within 32 bits.
]]></artwork></figure>

</section>
<section anchor="segmented-longest-match"><name>Segmented Longest Match</name>

<t>Traditional IP routing uses longest prefix match with arbitrary prefix lengths (0-32 bits for IPv4). For GRC-based routing, a segmented longest match algorithm is used:</t>

<t><list style="symbols">
  <t>Match boundaries are fixed at specific bit positions corresponding to hierarchy levels: 11, 14, 17, 20, 23, 26, 29, and 32 bits.</t>
  <t>A routing table lookup attempts to match the destination GRC at each of these fixed lengths, starting from the longest (most specific) and falling back to shorter (less specific) matches.</t>
  <t>This approach is compatible with existing trie-based or TCAM-based forwarding hardware without modifications.</t>
</list></t>

</section>
</section>
<section anchor="satellite-address-binding"><name>Satellite Address Binding</name>

<section anchor="dynamic-address-assignment"><name>Dynamic Address Assignment</name>

<t>Satellites dynamically bind GRCs to their interfaces based on their current orbital position:</t>

<t><list style="numbers" type="1">
  <t>A satellite continuously determines its coordinates using onboard GNSS or ephemeris-based position calculation.</t>
  <t>The geographic coding module converts the satellite's coordinates into the corresponding GRC at the appropriate hierarchy level.</t>
  <t>When a satellite enters a new geographic region, it updates its interface addresses to reflect the new GRC.</t>
  <t>A satellite <bcp14>MAY</bcp14> bind multiple GRCs simultaneously (analogous to multiple IP addresses on a single interface), representing the multiple geographic regions it currently covers.</t>
</list></t>

</section>
<section anchor="interface-direction-mapping"><name>Interface Direction Mapping</name>

<t>Each satellite maintains 6 logical interfaces corresponding to directional ISLs:</t>

<t><list style="symbols">
  <t>North: Intra-plane link to the satellite ahead in the orbital direction.</t>
  <t>South: Intra-plane link to the satellite behind in the orbital direction.</t>
  <t>East: Inter-plane link to the satellite in the adjacent orbital plane to the east.</t>
  <t>West: Inter-plane link to the satellite in the adjacent orbital plane to the west.</t>
  <t>Down: Link to ground (UT or GS) or lower level shell.</t>
  <t>Up: Link from ground to satellite or upper level shell.</t>
</list></t>

<t>All interfaces are bound with a GRC-based address, and the routing table determine the egress direction based on the destination GRC.</t>

</section>
</section>
<section anchor="time-sliced-routing"><name>Time-Sliced Routing</name>

<section anchor="ephemeris-based-pre-computation"><name>Ephemeris-Based Pre-computation</name>

<t>Satellite ephemeris data provides precise orbital parameters, enabling the prediction of each satellite's position at any future time. The routing system leverages this predictability as follows:</t>

<t><list style="numbers" type="1">
  <t>The orbital period is divided into discrete time slices. The duration of each time slice is a configuration parameter, typically set to be shorter than the minimum handover interval (range from seconds to minutes).</t>
  <t>A ground control unit computes the predicted positions and connectivity of all satellites for each time slice using constellation ephemeris.</t>
  <t>Based on these positions, the coverage area of each satellite is determined, and the set of GRCs served by each satellite is identified.</t>
  <t>For each satellite and each time slice, a routing table is centrally computed that maps destination GRCs to egress directions (North, South, East, West, Down, Up).</t>
  <t>The computed routing tables are validated and distributed to satellites prior to the corresponding time slice.</t>
  <t>Satellites locally store and activate the downloaded routing tables at time-slice boundaries.</t>
</list></t>

</section>
<section anchor="routing-table-structure"><name>Routing Table Structure</name>

<t>The routing table for each time slice <bcp14>MUST</bcp14> support multi-path and multi-source reachability, containing entries of the form:</t>

<texttable align="center" title="GRC Routing Table with Multi-Path Support">
      <ttcol align='left'>Destination GRC (prefix)</ttcol>
      <ttcol align='left'>Egress Paths (Directions)</ttcol>
      <ttcol align='left'>Path Attributes (Priority/Weight/Next-Hop)</ttcol>
      <c>GRC-A/14</c>
      <c>Path 1: East Path 2: North</c>
      <c>Primary (Weight: 50) Backup  (Weight: 50)</c>
      <c>GRC-B/17</c>
      <c>Path 1: Down</c>
      <c>Local Ground Station</c>
</texttable>

<t>The egress direction is one of: North, South, East, West, Down, or Up. The next-hop field is optional and <bcp14>MAY</bcp14> be used for explicit next-hop specification in complex topologies.</t>

<t>To preserve the multi-source characteristics inherited from terrestrial protocols (e.g., BGP multi-homing), a single destination GRC prefix <bcp14>MAY</bcp14> resolve to multiple egress directions. The forwarding engine can execute Equal-Cost Multi-Path (ECMP), Unequal-Cost Multi-Path (UCMP), or Active-Standby switches based on the path attributes.</t>

</section>
<section anchor="routing-table-refresh"><name>Routing Table Refresh</name>

<t>At each time slice boundary:</t>

<t><list style="numbers" type="1">
  <t>The time-varying routing module retrieves the pre-computed routing table for the new time slice from the routing database.</t>
  <t>The module updates the forwarding information base (FIB) with the new routing table.</t>
  <t>The old routing table is retained briefly (e.g., for one additional time slice) to handle packets in flight that were forwarded based on
the previous table.</t>
  <t>The local GRC bindings are updated to reflect the satellite's new position.</t>
</list></t>

<t>This periodic refresh replaces the event-driven link-state updates of traditional routing protocols, providing deterministic and bounded routing updates.</t>

</section>
</section>
<section anchor="packet-forwarding"><name>Packet Forwarding</name>

<section anchor="encapsulation-and-tunneling"><name>Encapsulation and Tunneling</name>

<t>User traffic enters the satellite network at the UT and exits at a GS. The end-to-end flow is:</t>

<figure><artwork><![CDATA[
DEV->WR->UT->[Satellite Network]->GS->PoP->Internet
]]></artwork></figure>

<t>Step 1: The DEV sends an IPv4/IPv6 packet destined for a remote content server. The packet traverses the user's local network to the UT.</t>

<t>Step 2: The UT queries the Routing Database with the destination terrestrial IP. To preserve multi-source characteristics, the database <bcp14>MAY</bcp14> return a list of multiple candidate PoPs and their corresponding GS GRCs. The UT applies a multi-source selection policy (e.g., spatial proximity, load balancing, or a primary/backup policy) to select one or more target GS GRCs, and encapsulates the user traffic into a tunnel.</t>

<t>Step 3: The encapsulated packet traverses the inter-satellite network. At each satellite hop, the forwarding engine extracts the destination GRC from the outer header, performs a segmented longest match lookup in the current time-slice routing table, and forwards the packet in the appropriate direction (North, South, East, West, Down or Up).</t>

<t>Step 4: The GS receives the encapsulated packet, terminates the tunnel, and forwards the inner packet to the PoP using standard IP routing.</t>

<t>Step 5: The PoP performs NAT (if required) and injects the packet into the terrestrial Internet.</t>

<t>Step 6: Return traffic follows the reverse path through the same GS, satellite network, and UT.</t>

</section>
<section anchor="forwarding-algorithm"><name>Forwarding Algorithm</name>

<t>The forwarding algorithm at each satellite is:</t>

<figure><artwork><![CDATA[
1. Receive packet from ingress interface.
2. Extract destination GRC from packet header.
3. Perform segmented longest match on destination GRC using 
   current time-slice routing table.
4. If match found:
     a. If egress direction is "Down":
        - Forward packet to ground link (GS or UT).
     b. Otherwise:
        - Forward packet to the corresponding ISL interface.
5. If no match found:
     - Drop packet and optionally generate an ICMP unreachable 
       message.
6. Update packet TTL/hop limit.
]]></artwork></figure>

</section>
<section anchor="handling-local-traffic"><name>Handling Local Traffic</name>

<t>If the destination GRC matches one of the GRCs currently bound to the local satellite, the packet is delivered to upper layer protocol.</t>

</section>
</section>
<section anchor="system-components"><name>System Components</name>

<section anchor="geographic-coding-module"><name>Geographic Coding Module</name>

<t>The geographic coding module is responsible for:</t>

<t><list style="symbols">
  <t>Converting satellite coordinates (latitude, longitude, altitude) into the corresponding GRC.</t>
  <t>Determining the set of GRCs covered by the satellite's footprint at the current position.</t>
  <t>Updating interface address bindings when the satellite enters new geographic regions.</t>
</list></t>

<t>The module <bcp14>MUST</bcp14> support real-time coordinate updates at a rate sufficient to track satellite motion (e.g., at least 1 Hz).</t>

</section>
<section anchor="time-varying-routing-module"><name>Time-Varying Routing Module</name>

<t>The time-varying routing module is responsible for:</t>

<t><list style="symbols">
  <t>Loading the pre-computed routing table for the current time slice from the routing database.</t>
  <t>Managing the transition between time slices, including FIB updates and table retention policies.</t>
  <t>Synchronizing with the satellite's onboard clock to ensure accurate time slice alignment.</t>
</list></t>

<t>The module <bcp14>SHOULD</bcp14> support graceful transitions that do not disrupt packets in flight.</t>

</section>
<section anchor="data-forwarding-module"><name>Data Forwarding Module</name>

<t>The data forwarding module is responsible for:</t>

<t><list style="symbols">
  <t>Receiving packets from ingress interfaces.</t>
  <t>Extracting destination GRCs and performing routing table lookups.</t>
  <t>Forwarding packets to the appropriate egress interfaces.</t>
  <t>Maintaining packet ordering within flows.</t>
</list></t>

<t>The module <bcp14>MUST</bcp14> support the segmented longest match algorithm and <bcp14>SHOULD</bcp14> leverage existing hardware forwarding engines (e.g., TCAMs) where available.</t>

</section>
<section anchor="routing-database"><name>Routing Database</name>

<t>The routing database stores:</t>

<t><list style="symbols">
  <t>Pre-computed routing tables for all time slices in the satellite's orbital period.</t>
  <t>Ephemeris data for all satellites in the constellation.</t>
  <t>Mapping between GRCs and geographic coordinates.</t>
  <t>Terrestrial-to-GRC Multi-Source Mapping Table: Maps a standard terrestrial IP prefix (IPv4/IPv6) to a set of candidate GRCs representing multiple terrestrial injection/egress points (PoPs/GSs).</t>
</list></t>

<t>The database is populated prior to satellite launch and <bcp14>MAY</bcp14> be updated via ground control uploads when constellation parameters change.</t>

</section>
</section>
<section anchor="integration-with-terrestrial-networks"><name>Integration with Terrestrial Networks</name>

<section anchor="border-gateway-function"><name>Border Gateway Function</name>

<t>The GS and PoP serve as the border between the satellite segment (GRC-based routing) and the terrestrial segment (IP prefix-based routing). The border gateway performs the following functions:</t>

<t><list style="numbers" type="1">
  <t>Ingress (Satellite to Terrestrial):
  <list style="symbols">
      <t>Terminates satellite tunnel encapsulation.</t>
      <t>Extracts the inner IP packet.</t>
      <t>Performs standard IP routing lookup using the destination IP address.</t>
      <t>Applies NAT if the satellite segment uses private addressing.</t>
    </list></t>
  <t>Egress (Terrestrial to Satellite):
  <list style="symbols">
      <t>Receives IP packets destined for satellite network users.</t>
      <t>Determines the target UT GRC. If the user network is multi-homed  (connected via multiple UTs for multi-source reliability), the gateway selects the optimal UT GRC list based on BGP metrics or geographic policies.</t>
      <t>Selects the ingress GS and encapsulates the packet into a satellite tunnel with GRC-based outer addressing.</t>
    </list></t>
</list></t>

</section>
<section anchor="dns-and-address-resolution"><name>DNS and Address Resolution</name>

<t>The DNS resolution process is unchanged from standard IP networks:</t>

<t><list style="numbers" type="1">
  <t>The DEV queries a DNS resolver for the content server's domain name.</t>
  <t>The resolver returns the server's IP address.</t>
  <t>The DEV sends packets to this IP address.</t>
  <t>The UT intercepts the packet and initiates the satellite routing process based on the destination's geographic region.</t>
</list></t>

<t>The GRC-based addressing is transparent to end hosts and applications.</t>

</section>
</section>
<section anchor="security-considerations"><name>Security Considerations</name>

<section anchor="spoofing-and-injection"><name>Spoofing and Injection</name>

<t>Because GRCs are derived from geographic coordinates rather than administratively assigned prefixes, an attacker could potentially inject false routing information if they gain control of a satellite or GS. Mitigations include:</t>

<t><list style="symbols">
  <t>Cryptographic authentication: Routing table updates and ephemeris data <bcp14>SHOULD</bcp14> be cryptographically signed by the constellation operator.</t>
  <t>Access control: Only authorized ground control stations <bcp14>SHOULD</bcp14> be able to modify routing databases.</t>
  <t>Anomaly detection: Satellites <bcp14>SHOULD</bcp14> monitor for anomalous routing behavior (e.g., sudden changes in forwarding patterns) and report to ground control.</t>
</list></t>

</section>
<section anchor="routing-database-integrity"><name>Routing Database Integrity</name>

<t>The pre-computed routing tables are critical to correct network operation. Compromise of the routing database could cause widespread black holes or loops. Protections include:</t>

<t><list style="symbols">
  <t>Secure storage: Routing databases <bcp14>SHOULD</bcp14> be stored in tamper-resistant hardware on satellites.</t>
  <t>Integrity verification: Checksums or digital signatures <bcp14>SHOULD</bcp14> be used to verify routing table integrity at load time.</t>
</list></t>

</section>
<section anchor="privacy-considerations"><name>Privacy Considerations</name>

<t>GRC-based routing encodes geographic information in packet headers. While this does not expose precise user locations (GRCs represent regions, not individual devices), traffic analysis could infer user coarse location. Operators <bcp14>SHOULD</bcp14> consider:</t>

<t><list style="symbols">
  <t>Encryption: IPsec or TLS <bcp14>SHOULD</bcp14> be used to protect user traffic content, though GRC headers remain visible for routing.</t>
  <t>Logging minimization: Forwarding devices <bcp14>SHOULD</bcp14> minimize logging of GRC-based forwarding decisions to reduce metadata exposure.</t>
</list></t>

</section>
</section>
<section anchor="iana-considerations"><name>IANA Considerations</name>

<t>This document has no IANA actions.</t>

</section>


  </middle>

  <back>


<references title='References' anchor="sec-combined-references">

    <references title='Normative References' anchor="sec-normative-references">



<reference anchor="RFC791">
  <front>
    <title>Internet Protocol</title>
    <author fullname="J. Postel" initials="J." surname="Postel"/>
    <date month="September" year="1981"/>
  </front>
  <seriesInfo name="STD" value="5"/>
  <seriesInfo name="RFC" value="791"/>
  <seriesInfo name="DOI" value="10.17487/RFC0791"/>
</reference>
<reference anchor="RFC8200">
  <front>
    <title>Internet Protocol, Version 6 (IPv6) Specification</title>
    <author fullname="S. Deering" initials="S." surname="Deering"/>
    <author fullname="R. Hinden" initials="R." surname="Hinden"/>
    <date month="July" year="2017"/>
    <abstract>
      <t>This document specifies version 6 of the Internet Protocol (IPv6). It obsoletes RFC 2460.</t>
    </abstract>
  </front>
  <seriesInfo name="STD" value="86"/>
  <seriesInfo name="RFC" value="8200"/>
  <seriesInfo name="DOI" value="10.17487/RFC8200"/>
</reference>
<reference anchor="RFC2328">
  <front>
    <title>OSPF Version 2</title>
    <author fullname="J. Moy" initials="J." surname="Moy"/>
    <date month="April" year="1998"/>
    <abstract>
      <t>This memo documents version 2 of the OSPF protocol. OSPF is a link- state routing protocol. [STANDARDS-TRACK]</t>
    </abstract>
  </front>
  <seriesInfo name="STD" value="54"/>
  <seriesInfo name="RFC" value="2328"/>
  <seriesInfo name="DOI" value="10.17487/RFC2328"/>
</reference>
<reference anchor="RFC4271">
  <front>
    <title>A Border Gateway Protocol 4 (BGP-4)</title>
    <author fullname="Y. Rekhter" initials="Y." role="editor" surname="Rekhter"/>
    <author fullname="T. Li" initials="T." role="editor" surname="Li"/>
    <author fullname="S. Hares" initials="S." role="editor" surname="Hares"/>
    <date month="January" year="2006"/>
    <abstract>
      <t>This document discusses the Border Gateway Protocol (BGP), which is an inter-Autonomous System routing protocol.</t>
      <t>The primary function of a BGP speaking system is to exchange network reachability information with other BGP systems. This network reachability information includes information on the list of Autonomous Systems (ASes) that reachability information traverses. This information is sufficient for constructing a graph of AS connectivity for this reachability from which routing loops may be pruned, and, at the AS level, some policy decisions may be enforced.</t>
      <t>BGP-4 provides a set of mechanisms for supporting Classless Inter-Domain Routing (CIDR). These mechanisms include support for advertising a set of destinations as an IP prefix, and eliminating the concept of network "class" within BGP. BGP-4 also introduces mechanisms that allow aggregation of routes, including aggregation of AS paths.</t>
      <t>This document obsoletes RFC 1771. [STANDARDS-TRACK]</t>
    </abstract>
  </front>
  <seriesInfo name="RFC" value="4271"/>
  <seriesInfo name="DOI" value="10.17487/RFC4271"/>
</reference>
<reference anchor="RFC1195">
  <front>
    <title>Use of OSI IS-IS for routing in TCP/IP and dual environments</title>
    <author fullname="R. Callon" initials="R." surname="Callon"/>
    <date month="December" year="1990"/>
    <abstract>
      <t>This memo specifies an integrated routing protocol, based on the OSI Intra-Domain IS-IS Routing Protocol, which may be used as an interior gateway protocol (IGP) to support TCP/IP as well as OSI. This allows a single routing protocol to be used to support pure IP environments, pure OSI environments, and dual environments. This specification was developed by the IS-IS working group of the Internet Engineering Task Force. [STANDARDS-TRACK]</t>
    </abstract>
  </front>
  <seriesInfo name="RFC" value="1195"/>
  <seriesInfo name="DOI" value="10.17487/RFC1195"/>
</reference>
<reference anchor="RFC2119">
  <front>
    <title>Key words for use in RFCs to Indicate Requirement Levels</title>
    <author fullname="S. Bradner" initials="S." surname="Bradner"/>
    <date month="March" year="1997"/>
    <abstract>
      <t>In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements.</t>
    </abstract>
  </front>
  <seriesInfo name="BCP" value="14"/>
  <seriesInfo name="RFC" value="2119"/>
  <seriesInfo name="DOI" value="10.17487/RFC2119"/>
</reference>
<reference anchor="RFC8174">
  <front>
    <title>Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words</title>
    <author fullname="B. Leiba" initials="B." surname="Leiba"/>
    <date month="May" year="2017"/>
    <abstract>
      <t>RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings.</t>
    </abstract>
  </front>
  <seriesInfo name="BCP" value="14"/>
  <seriesInfo name="RFC" value="8174"/>
  <seriesInfo name="DOI" value="10.17487/RFC8174"/>
</reference>



    </references>

    <references title='Informative References' anchor="sec-informative-references">

<reference anchor="LEO" target="https://ieeexplore.ieee.org/document/10294034">
  <front>
    <title>Measuring a Low-Earth-Orbit Satellite Network</title>
    <author initials="J." surname="Pan, J Zhao and L Cai">
      <organization></organization>
    </author>
    <date year="2023"/>
  </front>
</reference>
<reference anchor="H3" target="https://h3geo.org/">
  <front>
    <title>H3: Uber's Hexagonal Hierarchical Spatial Index</title>
    <author initials="" surname="Uber Technologies">
      <organization></organization>
    </author>
    <date year="2023"/>
  </front>
</reference>


    </references>

</references>


<?line 445?>

<section anchor="acknowledgments"><name>Acknowledgments</name>

<t>The authors would like to thank the IETF Routing Area working group for their valuable feedback on this work.</t>

</section>


  </back>

<!-- ##markdown-source:
H4sIAAAAAAAAA61d63bbyJH+z6foVX4MOSFoURdfeDJOZEmWlZVsrUjFm+Qk
e0CgSSIGAQ4ASuLEzrPss+yT7VdV3Y0GSMnZk50cSyLY1+q6flWNBEHQKasw
i/8rTPNMj1RVrHUnWRX8V1kd7O+/2T/oRGE1Ukk2yzvlerpMyjLJs2qzQvvL
88n7TljocKRuJxedh/lIFdX8Yd75ojcPeRGP1NX5p74qw0qnaVLpvirydZVk
876a63xehKtFEqkoj/nRh8O+ijdZuMSzKl/laT7f9JVeLfRSF0nZV5c3Kozj
QmMF2bzTifMIjbGMuAhnVbAJs3nA0wfzIgqmYanjwMwX7A87nSqpUrS+qGd+
R23UmZnzVtpiq7RsNbarVh91hd18KTvhdFroewxxe2r6mj6dFJOPlM46nXBd
LfJi1Ak6CiOVI/V+oP6Ib/FRVvteYw7zJC/Q63SRZKG6zqdJqvEsytdZVWzw
/CM+6WWYpCNFm5uh4+8iarzktoMoX3Y6gbIT3QzU2dpNc0Nb4c/eJFt7Uheg
0OqpWVcYI17/DqwQDXS89ua6HvxnEuZusmvQzDzg2f40OX9qzEc0GyyT7OB3
v1S8hUEEqmV5sQyr5F6P0PL2/emrN0Pz12twofnz4PDgtfnz6OCVbTAcvjke
dTrEoN4YOEH6pZQ59b1rHZbrgogSqqv8ITgPi2oRfCqmSbVNlj3uao9S8X+B
7Pz3A3UTZn36/adFmCuIj7oaqNMw4XYxhhqpg/2DQ5k9LOYa4rOoqlU5evEi
0Vo/rtK80AP6cwBqvQAfr5c6q14M9w/eHO0fHqHnh8Pm6vFZ3U118UOpPujH
cJ5nYao+JLoIC3BEhA/jFfaO35dZrB+fWT+NoiY6WmQkYIku/5llLw4hr7xY
MFwQqHBaVkUYVZ3OZJGUyu5ArQrIbalL0NhKspFAtcSUYZaUS4VzohNQfAKK
T6CL4+rVekJlRuIUS7HKM19fFHoODWTUxkC926hYg9VWKU3T0BFqVuRLtVps
SiZRmkOVoWtfVQvtLWhNK174xPRmmxdJTHOhSRcEXCUFFjTduNM4VKWhfEKU
76mwVJVernKMtvGWg/60cbfHcuAUDpafkFIF2QqsK4x1vW9aaaFT5mt/WSBz
QnuBzqHFxaS1qC3WiTF5m3ZmaN0QXxX4PkSjIoy5J1a8KvQseRRVSUs1ZzXw
BMKpX2KRUOF3qu9BqTl6VDmNEECGV2s0tSddhdPU7DZOyqjQ+K5KllqVaRJp
LEenyZLXSI0XdNoYjJrDkqQBN8VZfglgm9B1luZ80ixpOsPg9KHkWfq0gDiJ
+INbAEixSOaLdOOYsOYsY1jA9wNh5WUSx9C7nV9Bcqoij9cREQeffwUVH32Z
Y9As7nRaDKvaHBvh+Ohvpjzt8RE8kCazRLhlDImiPam//x0dv33jzXzK9Gc9
7fOp41iTGCvG8WQlaTLayDzNpyzSlS4gEiqMQD8wzikoHhZyAv55wrQRzegD
eK+x3IvGcrFAMnH1Z5XPZuCQMplnWHMUZhXWkuYPxDW0ImP2wV5puFHdg/3g
eF8ty16fKY1WU2zoIYkxoZ5hgARsCeNNu5RR0nCdRQuQqayI8h/wEGzUWkYt
9zjWkhTKOkt+XuPUSF+xZEJm0xSGkLawxGAqy+nwN8xIrVMHi61B2nxmx3Vu
hcfhpbX3zROkbd/rVIUVLBooiKnxMY9AaqaWCldQdo/JksbZqFeD4+DV4LX6
snyBhZFEpLoSppX+NAtYidf3BqRLsjXrgPMQVPHYc7OibaIRrGVW4R8J0rpA
d/BAUDckZoJGuhxflT24aw85tSjCYAVPxH0LPnoIi5iPYQpmlg/w9UTuSthu
tzvu2OOmZjTM1xgt1bOKvy9A5op4L4z/FkZ0TI1Byt6AZckuhtYI0aYNOVWG
DYoEq5iONyeCgJZpreuWOeuwKU5Oa9L2gZ3EV6GX9A3NVVb9xpp50hlWx9+D
2vm6dMdPXEQshNGjENr/qY2wZGZ5FkDaiO1S4WhPbCI638w7Lrstfy1YQaYj
YauHpCIpCGLYkciIbaZB0GnOzok3NmlE0pQVCTopxRX0cB6T+EA53RQ55lmS
ZoG5wdrJFkNfP1YgtbYywKz6hIwVGgarKBsaxKpQ8HaVR3mKVUD9hTQ+c+U6
K9cJ7xAu13CgJpaixolOqo16BzWO4SfesNZNJudi8ux05RryABP6aXzzHsrS
eH3fvsH7HweXY3lELh89osN4d3EjD8klhGKFsmErCE1mrAqrxEgRNeH3xfVC
cUJQM1WR8BkIVbClhU4KlYPYoVnlEgaWOZNFPzPnIENCi2VVgDHmc00audxA
zRV5lvwiNhjkr82S8VDJNEdFXpYsheifFO5YmKV3Hxi5LbC/rHhIa8zgTxMH
VmB++F0LURwjJnKgrkNobMiRGNGtZUH5LnSICO19oaFhs2pbOMymfAHaYZb7
rDjXbK80ufHUrrYGdERYb2QcMtAb2iwi68urPM0zrGQOa6F5P9DXI/WZZASL
iGmVoHgUrQsWDjIZGzUcBsNjVcLny+KSJ7DqvQQFNDF2SGESlJzOWADgBq/L
kFrjg28Em86Q5UEINawK7YvXxjJr3CsW63u0tnqpTTXmH7cg0XpsYkJim5Wu
1qTBmILEGuQ9OQoYmli3EAReyf6mKZS3WuTYHCJt8hS2T0sUWc1rdCoJDFoG
W4ydpjhsJkkuBj2hI69nWGECTQ9KezK35qSgURYYmog08q3mAubRqSdxAa28
rMjiwzzrZV4YJ8AxxIAUl+WGBXQLhGb7jHzJpC1hvocFQl44KMt1WkGpojFr
3Syc00hsvEOfi9crimlKu3yWNRAILEKb8viwczBQ75NH8YBP6tgBrDmDw1oZ
nW1RAqvxtnRZM/KYJrQVcbBJlvLtCKZ0su5LuDHLXmsCWMjxLsF54k3GCXlr
dIKeuYCnUj8ne4Hx7yQKsrtzy3nI1ynsOCSfVA+TStQwfc9rx8fyaS1lJdGJ
YZ/OBzoJy/Q0J04ISg+BdwKDAUof0unX/vq1mPjLUt2RJQLnpskvOmbKnqTE
EPPFtuu+oUmanp4HMVm/YZan0PalWTea+oGCtfImBIzID3tMSqaBlSCrZskQ
QzHRCXLkDleO1XCMsIa8dASQ5HlA0sIYkaTEJjnGLcnoLDW2EZdNgwRPWBfs
LOjsPoFWJvNKnHgE7eFxPikCeDLZ38RTUJ9A9IeFTpelJ4jChwvdkBkXMZDu
Zg30pKiR/bR8MbCTiYNYsr7LDVO2zJHhIVE7uuXF5rU/tDR2qBkdWquhPVPB
ESBvuWWtRIUYQYYBnubkx9Yi7KslWVW5gm8DVig8SScVWGT2iEkmKRw2LjKv
rAgpdBH36tOUCXFPBCbqGmQj9mCDMFmSYIsjdCYQhP4++kDUWSSxbvDsFKwP
j4R7cMhvqFVuwFjLAemocxM162bMbI4jeKAhXbddRn9A8nerEeFqR8Sm4iYy
i9a2usFwJhjzyoT9DUGqt1DjBLQoDxaI+6yMAg7+4xYbDDrH2FgmY+lwiUcl
29i5qJDazC70jmC+1HOGnThoWWjr6e2SBDnVW29X6gqGc40dyQF/0RtFmHWp
9q7vxpO9vvxWHz/x37fn/3F3eXt+Rn+PP5xcXbk/OqbF+MOnu6uz+q+65+mn
6+vzj2fSGU9V41Fn7/rkj3vC43ufbiaXnz6eXO0JnuNjaxSLgHWmxglZEa6C
aK7sQLdERTIVDOjd6c3//PfwCC7xv5HvDE8ZPrF8eD18dUQO8kIbieLART6C
epsOVB5EhJ2VFJE2/AwoSYgq3PFykT9kCoE+qfEf/0yU+ctI/WYarYZHb80D
2nDjoaVZ4yHTbPvJVmch4o5HO6Zx1Gw8b1G6ud6TPzY+W7p7D3/zW3i7WgXD
17992yF8aML63hj/Ju7JCCJxoJgdth+x8wzIUJQjgurPzv+gumf6HqKAqJ3Y
Dj0LWAd6ghBbD+YD+GrhCrauN0CHcytWI7KcUVJ6ATti0iUZIdZkMP7Q4Vhv
WMvHD2UNE4aEySKWi2xUQkJJM1x8HI9H6kKQpo/hfTIXyashwLHRQQHnPbpe
/uRWkNhTxEfYzkkTQ23AooygQqkYXEdg+LaPg6EYs/qBwsCCgneedIw5GYXj
WBcTGtLVekBcDgYQIw2dXVC/z7eq+zmZJWJGi94Iz1qwxIh+OB3j+VLG298G
SAYyiA8zPDfIE7gCj4JO3csdqA4v9Ca/Ud2bPKGuMzr6kgIE/mosSg/ifpWT
518h1KuiBdEfgaogjqn5xjh0S2rANE/neQFvdiksI3SToJadxICgNZhio1jL
BnIc0h4Y1TbDSmPezYTwiTGpeFpHE/Z1MVMs+RfxFJtOhe/bceQSSzQtZsZ6
BuyjrgtOMdCsdxPVvSs5n0GiGaa+UNWDW66w8uXA2Mp0w0A9MhDqhJi3guEn
3JDcrftEP7DlsPkyQ/1QQGKajIJU0peh3xfxV7qmnMHdpC/L+Xzb5w87gbw+
cTmpZDp3PhqDGe3CbYxHttPKqTOB0ywaWuNpBr3c7OJUmlmAbvLXCUwr1ryP
PjwSAw/U8TjD1WJIY4ROBII8hgR4epQFYxHYQQhbuFQlIijDgA3UtB1F4Az+
PsL44tGEKVzmn/ZIfnSxh0VGi7z4aY/ovOcaUSIaz8ooSQI825OM2U97t5oj
Ibg6/rnU/Shv+dOef9573zr/+Mc/Or8OguDXcKm93/7HJ7+g38GvO1+h4r/+
Jnj7FeqHf99N+BfCPPwO3F9vv16M+RdOnH9ffjyffO18xUitf/wL2vgrz27/
+rrVDj/+1cUr9VfV/K/9+ckv/orO2IcXvmBPtOEg8EwJf3673bBjdmCkS9kd
tZ4p94XfkAwrUW/kxIAPUuDQLA6qPNAeSEQprHxuUPY4uU8ke0ZC85A7zQdz
7YdiZj6Cy4yHTqbcCBqJNYmQ894hzOYrkmfGP/QGDE7gEAfyc89raEIIjZSc
1Xndy5v7I0E5X70hkBMyh0cv5RFlyL99IwXm2eyt9UJXVgvOQNRAVrAd1Zl1
X4x3rfWpJCwr6Br/6PsJ2SeSkjWxCNzj3PFWoMShqmbcowGNI0yt6BgRWcL9
EtefdayJ4NRDkhJCR7nRcFWuoQHFOQ5VtYZaTZ1zLVFdmEp08O8IAc44UIfF
hQZPoNNKju4MLBTUBD5zOxzx/HZbPsBIayQgkU1rX03XlYOOmfkEuovp4dP5
bQr9DGhCatyAgyOHEppsKyllP+qyUMRTiVw6MY7a68xsMzFbrDP+SiJyL04U
VjfoL8eUVzgwRm4kGTFqJ7U4zqCAlW3Xlyx/cCmRe7JIPjBO60rgeFC4QRM9
4UH1mbA7gCmX4aOY9cxLsrx3gf5oR+KdUIL0nk1nnjE0W8LBcUkauN8fc3im
sHDoil/nnHD6rOnnGa21Swgfm9Ben8TzbsWP1is6XEqZwyFegB49DnlPNTmi
QjNBeU5rApMHZawx57bylNKgcAmkEzGOHHL5TGRtzt9kkBu5TY8ViMJw1qDj
pjwevLQkZmlpjYat+Lh5QSgCfb0DRzB5elNsY8ep4egNe1o7owhOEUEQG4Ut
F1SAcQO7zVqSm5Bmb0UKJGsr28gq9LBV1UEjGURFPRHAtes5oGI/HFK+nuKn
wjkVnBISkc7ZQ26XjzQGqZGcUiHyJNWECeOB7ISm5C/rDcha6PAMBDc8OOCa
ENUlHCYN9nsIxm0dUIRzsalk8zU/Y9B4PW3YuFemxVB69UUJ+M+a7Q5sO058
knQY0m0SncYS1XJLtT/a6SjQyg3e7ZoOR/z4EbP85DV9fXy01fTANf3rgWt8
3H/z6vVW08O66aFtejTsvz56udX0qG56ZJoevDnov9mx1uO66TE3PejvH+/3
j3as9WXd9CU1HR71D48P+0NvrZ2TyjY2YP+SEssI1YzWXxCjZSYenqnDl6r8
eU3K/UuS5hzuU81LjhNlplqbYosKzB1msHQFw4hUYdXIIbrKnssM3UMoNdL3
jFgkGU3vdyfFAE7WlG0geEh4hHnD4clgvohqREhbeob5JIrywiWaOF1pDCO2
ae16GUH/hP1WCMhGm7NKFuhzXcF6d5MX8KrqNpLTMC3EfO8GJlT34va0R+of
FkYEjmCMpHSVUyzahwcBVWlAAa7F2mGpFHpy7ofdrxrY7ddlSIUm+BsHpW3+
gNt6qPICvx/oAEWAZhV/4GFtzYOE7UIcU9MQyqjk5CFkrLjOIExLhv8onwLK
z7iohHXDazUlm1lT4/tRlLDb9+Oo3URtx1FmNImg1H5bBbQ+H7Q+H1KXIR4f
qiN1rF5CLbxWb/4vzxD4/Iv/Q+Q1JvvM4YVRaBJsXA355wH/POSfR/zzmH++
pJ+X7zn4+lfXwNxpONHF4JxTK+Zhxt5CWNrUFqved3Tu+8Gh6h4xD/S8HK04
HMaMdfeD4TFDitzlKBjuq+4r28daDaOE6i4Hw7oP5d0x0WGz03Cr00uvC+Z5
udXl4Nkur4Lhm60uh891OdgPoHbbXY6e7XIYHBxvdTl+tsvLAILW7vLy2S5v
gsOh14XjU/FWbOvjHpT4agXnsgRD1w4nwew/fswr/eOPgmmxtmIIZZrfM1NA
F66pDJfiAmgNQmAcNMV+RqcWMS5ySik6FjSIOKzWyAZBZnC2uJcEk9e54dtQ
yKSLamMS8tBCrPZMjcThAe91IBE4lPITaCVYvRn3Wj+RHbFd8KWozKcwSCKl
mdsEo/dHPQGnoO2b4XSfMHK3LDuXTFIDpEnJPhpLGS9ZTcklh4U00ZaxQBUl
GyPS30xUC7gTjEnwwSrPrDm0ZNxIPICYYjjsk5MAnu+DifHvEP+g8A/eiL/l
qBkgJGh45FS68WW9wvRUa1yVknKtDK7qx9tk7LBINuESUJd27YZ2fYJZi8pl
LGkES5Uu11jaHUp54AyMwyUOVJRCgQEMSkXoKmfv6ra8HgFqJ43CJcZ4mxbW
mU+EItocF85ucnpybT7tMqnUFVRpGVAKL2olaEJ3CGTm4gtby2G/Oykp6Jci
Oi+XbPwQDrmoJoJoaeHXxJRkkjSXjXJtfGMhDRezGqaQVPFJs2zY1FYRGGVK
Cih3UBGN2JVigF6iORttUc6Gi89sIGdo5LI9WHO0Tk3W90BqkrZu3BDZ1qk2
dU5SIdNIHvkLcIUATbY23MUICB3vqkgo89xidUYJPpMnGfqIRMbJqxCx+8M2
/sFujy3iIXI4cnsV9VgT1EBKQLkkxR9oRRz7+1TmmIsOkIqHCNWRk2wVE3VD
6KJ8LoWiddNGCX/OW8DObYknLajXb2a2+HaB7b5d9sP+nHAIx/IEqosHW9sH
h1xA96xWzLctUKWuD35p8UyfI7e0j19wSsWxrNgY1Bg10mKSGGkXfYRULGjT
Ypat3ZAk4gyM/DNDTfUiyZ4fi9CVUSPPtnsoM8ZujMg2h7tccT5Q/z8O+qBl
UMJ+4AqYgQxq072bkHRejHum6LQJAXHmamV6scY1/XyQhXpugUfgkpO0ccyk
BdkuGfPoWTsHxtrqiKYBccpGiDRnRehOoXkBpWVPWMNSxi8YC/TkynvBwy5j
HcgNuRsHSpqc2ZN3SySs1Vw190Sm24u8qoUrRTFYcbMIqZH8phIRRExr9qc5
880qsVll4262lBYcNoUuUpvT8LyHMoBbIcO6ZNgaYMuu6y/SMV4XYWPddQsO
v0kpz5K5beUo0PduCJS6MgUh1gLLBR/SPhRZrpcuaVfnYLsFYc7CdraEVsrv
CQDssbV4An50oGNNec/mSJjewHXplkTq1+vvQp2NaXsCoWTL8c7jRbCFm7Fv
DJIpTLKYSasYzavVIxTe1QppTq2LIXCVldt9cZrQ6pRVZ7Py3u7A042Ed7ah
9LAlbuTztPHbWNzuZbgq2yLGh9IWSni5z6PQfegVAZgnC13PUmynCmqgtwkB
N5UQyUCCDe80/fVuB52XjRo8CiuYQavc4B4EON3b0rUYK03zMN6xsspDtD1/
2xRvmcYTJujYxscSNTepvYvPuETJxFpingO4oFKhLh9NwTOXjxup71vES8rb
q8Lc/pFan2JJ1fYEtjRBFoudwDlqLpqV9DVPdkNzj2U5e986na+Uemp47V0J
cXqEQpwLK1AncIHzDkr+koc6qRyK372hU8PqX3ymmyXVi4/6sQo+5Ksep0u/
joLGf+3P2w/a/1GemgzNyYvhkU3K8iKGI+ZJ+XBgkib8bZEsKWrryopG6ni/
x/frEMM0H8oSefh3L4av2sNzsoUecNJJNQuDPEzpq8n/tu0agSmc4PleRsdk
cWw9Pwi4yFcInHQaS5WzVzPpYfrCeo+rlK6Y1P1sVCTLTDJzReyxeR9xkjdj
8AZbgicJuCWtWNHFniRb4G8SWYnavGx1fZXBVLxQka8MtsjppkavX7ux7WDR
BNa0Jy8r5vzZLaUkFPLCM0SV5FYQZKkfdUTZrfOf12EanFIs6XF/9/z0+gZL
ucv07u/v5HtQ9ISzn8GY3lYANS0FJa3AS4k4OznYpTVu9QzLXzAO31YQRt9s
avPOyugej/xMlomaYNcLgsidPQx261tmCBuceLNtlfqSD0TbcQGbmcjGQFWT
yn7SVDJD7y/f9UTD2OkaC2FTyk5L2l5iQglQ0nJkBLGrGUVDwjm0ehIYv5zR
baLHsAaOJNXmBglXvc1SuSBIxo2vY5ll0+jmvDqGaPcJh1uyviNZXyqSDVas
LyLYWwpioPyYz3f4aM/WOxiYGk13WauQo6dQLWXfmf1evr4VF2CuzL/dZIlO
qv65+2p+Mqa+EUBFyFz1QRzlMYQZlf3nG7lxU6elxXt2FQs2kzrhigX+/s6v
cTDR8+7afBOSIw6RynnODlQUHowHqlUXM4NLCw4A1xNmd3b+h+Dt59vg7d0k
ePvnrRcj/CV4ezEO3t7kN8HbZrXNuNIrUtATUxuDYJhvZzEU94KrVcwlI1E4
RlVSUnWZGySEb7SQ9itklaYDX8UtbIaWKj1+ME5Gu2zlbjIwKzmQlYACP681
W2363iqDMyNrtbj4WrBRWXdDlxxrtfycShZ/1Mqx0aBwUQgzSJOS/U2nR6Ee
Y3bBqEaotG4pgUdNgGXM7uDA7iZcrfgaYthcSalTY+BgTpLIia9NQ0vVHTs0
5HpBDhHNRgyG8iGsxD6/mIpJlkFYvGVkMZqFXKmQt0PYpZnbGXWpTX1MjllN
Nl6qb+wRHTpguy7S2XniT9QqIVCp2r44bG2/rSmNPaKbsWFkYK620XPamGuF
FaEdnGm1ZYxPI8YGiDWogUX+PDe2oWpNoZgszpgO2bKFHTwUrfZavuP3i6vS
s4Q9EsLifEzlq73CtUXovi2BtacmJ7RjlQmeF+546uI2e+MpJNPZeImEWcyx
LIbaOmp+PJmobjJzVaSCKyd896hFlOeKXc0ML0cw6yxmlt3s5S82r5o5SZwD
vwKOi7svxv1t9dk3GWdxIGoNrU5sdkCcS4/H6rxBuMWTTrcO6foNH4jdH7Md
+hf23oupeqfrPsKuuznVdBc2ZcN+I7R9kk353Q3NkeToKM/zPa5l03w5M0PN
yKqZt8qE/HyXl71HjLk3cmmkwBLSYyIDMzAO171gSJsrsbnDdKA+UWnNQ1Lq
54fZjk2puN4j5zGvMst3bCBQZ5A3Oxjfilm5y4tznXGBPJsx+KJqnZngMK0T
ZEtsPZxLEHzHBt6ONplcvSDnn2/J1imxD+Qw0SolhJkI03Y6l7OdqsmkUWxd
WrUw6HUNIU8telg578l75ZYvToQzpFQKL36UARjDDYm2cWkkfSKAGBWlYdqs
KtsFFlKspa7ZRRVpeDK/wN4lHQ1fAyWpYexZrn5XzSpFP+XQJS+oWse6z7xs
/gxTedh7JiXByKz1xuzLLjy8hyEjAXzaLuQszyuoX7pvVTXLU51fGcgxixPe
yknULisXzjS9M+Oy7Ux3lKYYzNCsAVbUr8WpyeM8VHbrmEm9YiC55R192b4X
a/wC9EoJGFdD9eGXnig6RnT/YKId6yn5J/xcOPTEIV/l5tr5Pxcj+Yro+3ES
JWbN/W+2EXyvvXlt0H/tkNzJoNaIlGr6kejI64M0OaDOh0okdTl2lyhtmnuL
Z1wRJGSPXVGuftT0up41n4y3HUaKSEM3z9tcbbMnDt6I9Gydenuyt7xyrnyN
k7JYr6rtqEuOkvxb33D5p2jLf+13zx+gGCyOecxUu20W08rYLAmGWngmv2VA
jJTPPn42m8fwVm1nNGLuu0Z61/TXJiVW94VFgYH06hMo2HlO1ERTfK82gPZi
TszmDOoMtstOb7mgDo6htHbZIxVBXHIfJqlYWR+vsCFKE950wQVjq5LEu3lS
rgRwJwzeE4T6cpvHwY08RuPiYV0u3sLyrcfrA/dyCpywdDLoTr9hIJya5/IA
7zIIolKyegIDjSW6sUMyhjOij+yRW6ezGa9ZAKvrAk+OY0JrAerAi1fWyNy6
6MwfMrEX8F8YrlvRvTyCWRG4vbgYU9bESRYfDsEO+cp62hZC9+58ycuwfOjQ
gBv3SbiVfFlRxGYMSjNN4l0BlbsEA/MeM3d/mvWVf5HFvcuSX3DG4qEuMPVD
uFHvzfVQUyVZ30iT0DcUh3oqnfyb2ds3srtbVTc9l3nxaevaP3H1pSeBr5lz
bhbqAgmJ9OyVW3u91SToLo2O6tYoBk7BI0ZvJK86mdQxkHcjUW6KaB+QMa9G
OfcjSQmMaPmscUyTG7vCHZGRDRnF/267fHW5gRnqxET8FDQlsyfozWVT4DRO
stSVqvJ2E5M86Pp8AEo4slg63Npo0e2mbII120ATRfl2oWd1+Qofs6AEdxP2
yJTxbhkW8K5iOVQaU6iuSR8aQXDSeDcRTdZK06SJydL0xMu17CGQhayCvPkl
3/BkZ5phGAcaMyxOOC69J6tovl7RegC8tbE3ojV9Rj62gA8/dA23GYolspYO
wRsaJ0b2+6MMbguU6GU86bqWTfq+cM/sC5a4Zi2zt4okxeuxn71AWuPbhNNZ
eCysB6WEsfPIGrDcD3Rlgl/kRnW/Dql2vQTuKt21Le7hc/ThoAUQNmx80mx8
5FAvtvORXjXRAQEN4B052m8VvDvSPFXP8MOOW20DVybeLKVgj78Un4zevyiO
NmGoC3qtoWQ6SVoblWgaTiBlw0/NtWb5ToojV3k+Y/gAPd17Xjqdd+a1dGI6
+X1mhFCbM91tR5tXtWPBoQv7sr2wNO+fsa966fMtg6oiShLmSG9NWeXsAJv3
9tBqqNav8VapOucgqggxcphkzlZRxr9Zw0KA8zWOaG4KTc3FaIkAi82qql8B
sMZ4mD4yl6AaF9wa7nqrbsR4YrCikT+gpKBl1ybQa1pP+9YALq/kN2vafYzU
J7qyJu/P5bLrlk0ubZVtPTevkhJlVIu42XLYpIgzg/CYQr9o641aZqwlYg16
lwG7XNyBUiR2vKlehPfkUFiAdx3H5BeYt4AljTfarKg8tKAsMb+2UYuLm7d2
s9vvNG4EONe+AOdpL5NYNEJTLkLD+ByQR5XT8+6VUPLqUjBxUjowY8u1jbwX
C9FbbUpMHTZegiZlVTkCBnqbWGWrI3zeYrETNxneuXflz56Hd3TsS0tFWrjE
UgMIeyKvE3POfO5fmLdvgWDyKGg5l9qlF23r6Eu5XvIi42Qur6wEG/LLSP1p
OV0ManH/TTsl54anUJ0ge3lhh7z6EXY+2tYoWz6XueLSUHENGc6aSGJJVZpU
1W3ePKPl/qp+pDcuuLIsNuF16Xi36UZbPENuaBIacp/E9NI785KTXt/BtFRv
uSm5GphOnF4VVsjoEeLpUrtJBuqTkVVHP/uSCD7s84wln+l/eVNqfjPj5Gq8
g9gr4ZdmesIYOfIiGB4mT8FQxL649D5xcXF9mYoBjjkDEFxxZV60NPKDWPtu
Fyvd0o72Jh0Fk9oucq7vpnLCk9/aBF8lZJXHJ7IujL9/8vFkixea1xvpVlmW
S8vQpu3l/ceU8eFXX0R0MTfVsdx/F6EXDWjfqpUmX0wBZEj1jvie/g8AnGid
UP0VyTt9IBWzsl5EUvDFKoF6tI65cjw3d7A5ldP5X3e+hw6MYAAA

-->

</rfc>

