Both of your custom domains are missing the TXT ownership-verification records, which is why they are stuck on "validating ownership." For your root domain, add a TXT record with host _railway-verify and value railway-verify=06c7c3c2fcd9b63844aeb40ee726eaf9eabc027dc0c613860eba64bcd8d286c9. For your www subdomain, add a TXT record with host _railway-verify.www and value railway-verify=40e70effda433a81a5a57b26bcbbadb5f4af56d30ac9aaace00a3f28c16805dc. Additionally, your root domain needs a CNAME (or CNAME-flattened) record pointing to b9kbplfm.up.railway.app. Once all three records are published and propagated, verification and certificate issuance will resume automatically.