cuandu ipasn-geo
================

A small, self-contained database that maps a public IP address to its origin
network - the announcing autonomous system (AS) number, that AS's name, and a
country. The country is the registry allocation country, which is coarse - not
precise geolocation.


Files
-----
  ipasn-geo.db.gz             gzip-compressed, SQLite database
  SHA256                      checksum of the above (OpenBSD sha256(1) format)
  SHA256.sig                  signify(1) signature over SHA256
  cuandu-ipasn-geo-2026.pub   signify(1) signing public key


Verify before use
-----------------
Every release is signed with signify(1). The signing public key is provided in
this directory as cuandu-ipasn-geo-2026.pub:

    untrusted comment: cuandu ipasn-geo release 2026 public key
    RWQXTNMggwTdDlLP38k6GD9PjBZQd1U+rgoR/+WxTRE+nNsvNhQo74Bz

For strong assurance, verify against a copy of this key pinned out of band - a
key served from the same host as the data is only as trustworthy as the host.
Verify the signature and the file's checksum in one step, then decompress:

    signify -C -p cuandu-ipasn-geo-2026.pub -x SHA256.sig ipasn-geo.db.gz
    gunzip ipasn-geo.db.gz


Schema
------
  asns(asn, name, cc)             AS number -> holder name, registered country
  prefixes(ip_start, ip_end, asn) IP range  -> announcing AS
  ranges(ip_start, ip_end, cc)    IP range  -> allocation country

ip_start/ip_end are 16-byte big-endian keys (IPv4 in IPv4-mapped form), so v4
and v6 share one ordered space. A lookup is the most-specific prefix that
contains the address; the country prefers the IP's own allocation country
(ranges), falling back to the AS's registered country (asns).


Data sources & credits
----------------------
Built entirely from public data - all credit to the upstreams:

  * AS names: the RIPE NCC "asnames" file
        https://ftp.ripe.net/ripe/asnames/asn.txt
  * IP -> country: the NRO combined delegated-extended statistics, i.e. the
    five Regional Internet Registries - AFRINIC, APNIC, ARIN, LACNIC, RIPE NCC
        https://ftp.ripe.net/pub/stats/ripencc/nro-stats/latest/nro-delegated-stats
  * prefix -> AS: BGP routing data observed by cuandu's own route collector


Terms
-----
Provided as-is, without warranty, as a convenience. The underlying registry
data remains subject to the respective RIRs' and the NRO's terms of use.

Contact: angelo@cuandu.ch