. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )
;; Response received from [198.97.190.53] 864 octets ;; HEADER SECTION ;; id = 37850 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240512000000 20240421000000 20326 . chrbIYUGGLqwnTPAoPqkezDjL8sO2WS6icjHEvOp7RFmEXqfmadcW71mI3bFaZy/wcCo5DElwFYz AY+1hFstrlD3rZHh7GLYf2NFotdlq5dSHYOgAAdnZBz/pXhUKOsOCEUSm7jIGdr5eMfD6BGQShNy Dm+1BRNwYXp8A0K7ulYtd3QY+n5nA0QGsUbYtVWMLK5cnHruWD7DynxHYffu8QXToX132qIsbQZd /cctNgwhppBCWHyO7Y5XzNG4z/ZvEVF8OUezro+7dvGQdsF0yj11zjnTUdtTten9naNzMwPgxK4O QImcChmYbKk25IrSSl8Rpvo/y1vzaa1plaxQlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613
. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326
. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240512000000 20240421000000 20326 . chrbIYUGGLqwnTPAoPqkezDjL8sO2WS6icjHEvOp7RFmEXqfmadcW71mI3bFaZy/wcCo5DElwFYz AY+1hFstrlD3rZHh7GLYf2NFotdlq5dSHYOgAAdnZBz/pXhUKOsOCEUSm7jIGdr5eMfD6BGQShNy Dm+1BRNwYXp8A0K7ulYtd3QY+n5nA0QGsUbYtVWMLK5cnHruWD7DynxHYffu8QXToX132qIsbQZd /cctNgwhppBCWHyO7Y5XzNG4z/ZvEVF8OUezro+7dvGQdsF0yj11zjnTUdtTten9naNzMwPgxK4O QImcChmYbKk25IrSSl8Rpvo/y1vzaa1plaxQlQ== )
;; Response received from [192.5.5.241] 684 octets ;; HEADER SECTION ;; id = 24726 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dotsu.su. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) su. 172800 IN NS a.dns.ripn.net. su. 172800 IN NS b.dns.ripn.net. su. 172800 IN NS d.dns.ripn.net. su. 172800 IN NS e.dns.ripn.net. su. 172800 IN NS f.dns.ripn.net. su. 86400 IN DS ( 2074 8 2 9982cacc6de539a854c63d5657960120d4367845cc64be2999013bc28463c9f2 ) su. 86400 IN RRSIG ( DS 8 1 86400 20240509050000 20240426040000 5613 . CAQfiOvIZd4QUvB8AatmxTJDDjgei1nCQihqHQCLkVxdF0zshlF9hBXjiVcJrmc9SFizD+sXrB+U LGb60KfKWNEfhU/fFnjP3WFoQBNYtn6QapSc1/KlH7Yo9O+o0gDrdOWxOfjXhDOvlpuakcwwsnwm Eu1yNAcdJKpzhb1uT06jYbwYHkxjzx1O9uIah1RbFKkq9izi52SVH+tvjlhfEM6JDQafANDSnOIY MSetYengh6qWSKd8EAFugPDMtRz6IlTpOZDQcNzeXGKgRqSZWnkKH1WiVP0smKJptMoOJ0jP6Q7q 25Yxcss+ek5ArWgbt4Y1NKUK1YhMeRvWyv/Nsg== ) ;; ADDITIONAL SECTION (11 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN A 194.85.252.62 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 d.dns.ripn.net. 172800 IN A 194.190.124.17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN A 193.232.142.17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN A 193.232.156.17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; { "EDNS-VERSION": 0 }
;; Response received from [192.112.36.4] 678 octets ;; HEADER SECTION ;; id = 30339 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; su. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) su. 172800 IN NS d.dns.ripn.net. su. 172800 IN NS b.dns.ripn.net. su. 172800 IN NS f.dns.ripn.net. su. 172800 IN NS e.dns.ripn.net. su. 172800 IN NS a.dns.ripn.net. su. 86400 IN DS ( 2074 8 2 9982cacc6de539a854c63d5657960120d4367845cc64be2999013bc28463c9f2 ) su. 86400 IN RRSIG ( DS 8 1 86400 20240509050000 20240426040000 5613 . CAQfiOvIZd4QUvB8AatmxTJDDjgei1nCQihqHQCLkVxdF0zshlF9hBXjiVcJrmc9SFizD+sXrB+U LGb60KfKWNEfhU/fFnjP3WFoQBNYtn6QapSc1/KlH7Yo9O+o0gDrdOWxOfjXhDOvlpuakcwwsnwm Eu1yNAcdJKpzhb1uT06jYbwYHkxjzx1O9uIah1RbFKkq9izi52SVH+tvjlhfEM6JDQafANDSnOIY MSetYengh6qWSKd8EAFugPDMtRz6IlTpOZDQcNzeXGKgRqSZWnkKH1WiVP0smKJptMoOJ0jP6Q7q 25Yxcss+ek5ArWgbt4Y1NKUK1YhMeRvWyv/Nsg== ) ;; ADDITIONAL SECTION (11 records) f.dns.ripn.net. 172800 IN A 193.232.156.17 e.dns.ripn.net. 172800 IN A 193.232.142.17 d.dns.ripn.net. 172800 IN A 194.190.124.17 b.dns.ripn.net. 172800 IN A 194.85.252.62 a.dns.ripn.net. 172800 IN A 193.232.128.6 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 ;; { "EDNS-VERSION": 0 }
;; Response received from [198.97.190.53] 366 octets ;; HEADER SECTION ;; id = 5320 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; su. IN DS ;; ANSWER SECTION (2 records) su. 86400 IN DS ( 2074 8 2 9982cacc6de539a854c63d5657960120d4367845cc64be2999013bc28463c9f2 ) su. 86400 IN RRSIG ( DS 8 1 86400 20240509050000 20240426040000 5613 . CAQfiOvIZd4QUvB8AatmxTJDDjgei1nCQihqHQCLkVxdF0zshlF9hBXjiVcJrmc9SFizD+sXrB+U LGb60KfKWNEfhU/fFnjP3WFoQBNYtn6QapSc1/KlH7Yo9O+o0gDrdOWxOfjXhDOvlpuakcwwsnwm Eu1yNAcdJKpzhb1uT06jYbwYHkxjzx1O9uIah1RbFKkq9izi52SVH+tvjlhfEM6JDQafANDSnOIY MSetYengh6qWSKd8EAFugPDMtRz6IlTpOZDQcNzeXGKgRqSZWnkKH1WiVP0smKJptMoOJ0jP6Q7q 25Yxcss+ek5ArWgbt4Y1NKUK1YhMeRvWyv/Nsg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
su. 86400 IN RRSIG ( DS 8 1 86400 20240509050000 20240426040000 5613 . CAQfiOvIZd4QUvB8AatmxTJDDjgei1nCQihqHQCLkVxdF0zshlF9hBXjiVcJrmc9SFizD+sXrB+U LGb60KfKWNEfhU/fFnjP3WFoQBNYtn6QapSc1/KlH7Yo9O+o0gDrdOWxOfjXhDOvlpuakcwwsnwm Eu1yNAcdJKpzhb1uT06jYbwYHkxjzx1O9uIah1RbFKkq9izi52SVH+tvjlhfEM6JDQafANDSnOIY MSetYengh6qWSKd8EAFugPDMtRz6IlTpOZDQcNzeXGKgRqSZWnkKH1WiVP0smKJptMoOJ0jP6Q7q 25Yxcss+ek5ArWgbt4Y1NKUK1YhMeRvWyv/Nsg== )
su. 86400 IN DS ( 2074 8 2 9982cacc6de539a854c63d5657960120d4367845cc64be2999013bc28463c9f2 )
;; Response received from [194.85.252.62] 745 octets ;; HEADER SECTION ;; id = 63486 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; su. IN DNSKEY ;; ANSWER SECTION (3 records) su. 345600 IN DNSKEY ( 256 3 8 AwEAAdRJPBsl6aSeAWydAEpc2/nCxWwwXpyrycYHEms/RZeYhcQdXsSUQAAvkJiAgmbqsbdxrGJJ vZsQS9kAThhm70veE/t+Sz9QHAk5mbZQ19OWCogWq69P66ZKrGQUuXK5g7R3WGISrWFO/AiKGGaf rk/jcG9VQJkfuQaAXlsVyTsZ ) ; Key ID = 42924 su. 345600 IN DNSKEY ( 257 3 8 AwEAAbewtVhCMF/4e+gstXD5dAJI3IOqJELum5XS+GdjCbGCyDCLa32GVoa580+7P+9ZxqLrsQrG 7nxzxkRXCJ2soHlu1sxFnaadjzo/YSe3fvE4oJMzcKqFEwzSk6O8NCVL04chMKebf41PA0IU+qc5 RR0Hhv92OhSSFAu5l++xXbFAgQvlz3QLWR1vEsvCf+JUBSbCxFpPIRAmfV3T945rSesNyM7Yxqq3 nMt7p3z9AhMvDS2Tc5ghwGEeRe+a3m1zlpoZeumokyU4z5rhgwupXDqM8vR80mwXxLSIRK2Q8Whf MKgaUGO989MSC5UBPUzyzQJJibcl/CqhN++nmRAPlYs= ) ; Key ID = 2074 su. 345600 IN RRSIG ( DNSKEY 8 1 345600 20240514010000 20240424010000 2074 su. kuXBWMakeS7eZ9TZTVP5AfVZ8ZdNJ0lx96ykIhMXdimx/uM9HeKgU+D1d/ywnEGcFvY/JXKc9DTr 1yoLfNLQZyZ17fPWv0knVkrOwuixa9hJ5/yW5T2eLfoTex4AUCnvPp0S/BGu8TQqt0ifRnrFDPJe sO2fmjgfEghYvIDfkADPdRr2Dg5C1beHJZbQSO8+Q91HqY7AgaS3p1P/q+YLnxV2uVRS2quByTP+ M+G+pSd58+188DKIRihqyTw0znbFZl94n2WAoIzq5VQjRhXUNMlNmbZU1babmvL4L4bNnTInnT2I Iljqs7ADn6cjp8St1n1XisYVEbypPBX/UcmZgA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
su. 345600 IN DNSKEY ( 256 3 8 AwEAAdRJPBsl6aSeAWydAEpc2/nCxWwwXpyrycYHEms/RZeYhcQdXsSUQAAvkJiAgmbqsbdxrGJJ vZsQS9kAThhm70veE/t+Sz9QHAk5mbZQ19OWCogWq69P66ZKrGQUuXK5g7R3WGISrWFO/AiKGGaf rk/jcG9VQJkfuQaAXlsVyTsZ ) ; Key ID = 42924
su. 345600 IN DNSKEY ( 257 3 8 AwEAAbewtVhCMF/4e+gstXD5dAJI3IOqJELum5XS+GdjCbGCyDCLa32GVoa580+7P+9ZxqLrsQrG 7nxzxkRXCJ2soHlu1sxFnaadjzo/YSe3fvE4oJMzcKqFEwzSk6O8NCVL04chMKebf41PA0IU+qc5 RR0Hhv92OhSSFAu5l++xXbFAgQvlz3QLWR1vEsvCf+JUBSbCxFpPIRAmfV3T945rSesNyM7Yxqq3 nMt7p3z9AhMvDS2Tc5ghwGEeRe+a3m1zlpoZeumokyU4z5rhgwupXDqM8vR80mwXxLSIRK2Q8Whf MKgaUGO989MSC5UBPUzyzQJJibcl/CqhN++nmRAPlYs= ) ; Key ID = 2074
su. 345600 IN RRSIG ( DNSKEY 8 1 345600 20240514010000 20240424010000 2074 su. kuXBWMakeS7eZ9TZTVP5AfVZ8ZdNJ0lx96ykIhMXdimx/uM9HeKgU+D1d/ywnEGcFvY/JXKc9DTr 1yoLfNLQZyZ17fPWv0knVkrOwuixa9hJ5/yW5T2eLfoTex4AUCnvPp0S/BGu8TQqt0ifRnrFDPJe sO2fmjgfEghYvIDfkADPdRr2Dg5C1beHJZbQSO8+Q91HqY7AgaS3p1P/q+YLnxV2uVRS2quByTP+ M+G+pSd58+188DKIRihqyTw0znbFZl94n2WAoIzq5VQjRhXUNMlNmbZU1babmvL4L4bNnTInnT2I Iljqs7ADn6cjp8St1n1XisYVEbypPBX/UcmZgA== )
;; Response received from [193.232.156.17] 984 octets ;; HEADER SECTION ;; id = 40103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NXDOMAIN ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dotsu.su. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) 9657mu00t7hl96p8gbopue4b8ms773bi.su. 3600 IN NSEC3 ( 1 1 0 - 98p061mgq0ugurhgm261ore3qe0qcoup NS DS RRSIG ) 9657mu00t7hl96p8gbopue4b8ms773bi.su. 3600 IN RRSIG ( NSEC3 8 2 3600 20240528095638 20240422235528 42924 su. FQEpXLQ+ppo5sYuUJS4XD7MZniOeBf0aWNqWh9gXiNp6hGUoEqnNmDIVzvz6vpuXjBPaTqUC0fxk Ihr+00zUWgewg0va0c2c9Z4ypQOKsuVlxmc6Ul9GzoOmDQLeyl5SAZOHGKa8yCYs5hD9wsdwFez/ YoshwZXZwuPFNKa0/WA= ) vaqo3mgsg8t6bm42k1dg137h5ur02qv7.su. 3600 IN NSEC3 ( 1 1 0 - vg0ojl7bcr6d19jrknjemsrmnscflh39 NS SOA RRSIG DNSKEY NSEC3PARAM ) vaqo3mgsg8t6bm42k1dg137h5ur02qv7.su. 3600 IN RRSIG ( NSEC3 8 2 3600 20240605074226 20240423015528 42924 su. ZZYMte9wy4Px6nbfaN6fFQZ/rURFIxIG8tzsnLJVcjpJBp4zNRwGyXRtjaExzYwR0byP7vMsBeuK clwxmPD+Xpa4vdoMBD6O57LxSCPxy7FhiG0sWoniXjUJHFPcJ1NaZ0LvGc66CsClTc9U4eBc6+cs WTNUPMiUqxJ523AS6do= ) 0qdafbpm7re53adt5v4873ab1sma7ah2.su. 3600 IN NSEC3 ( 1 1 0 - 0r9lmvj8cbkc97o6mmpdjtqfu25cvd30 NS DS RRSIG ) 0qdafbpm7re53adt5v4873ab1sma7ah2.su. 3600 IN RRSIG ( NSEC3 8 2 3600 20240510163626 20240403075544 42924 su. MkirtiBUcVd9wiJ5CCdZqIwQzrR0HLTARP7VMQ2mAqJVt0w4/Dx6n54kkZa+/3gtPNh3wGXNZkFr 2OcAxfbHjFgYhzNsLZjjgvRpZjUNb+7cqHM7E4KqFvROJS5n5sJwNEsT/qINZ2DxRXLD6xEA54m3 MycyM7jt7td+AwvoKbg= ) su. 3600 IN SOA ( a.dns.ripn.net. hostmaster.ripn.net. 650200129 ;serial 86400 ;refresh 14400 ;retry 2592000 ;expire 3600 ;minimum ) su. 3600 IN RRSIG ( SOA 8 1 345600 20240601024408 20240426115542 42924 su. KgB99wEcBWsrhE0LjD3QK+eOYcUQ/6pzcppq1Lcg7yy7sO1C7IavISe/bfag/0Q6VE4WJ9JpIn+N PN6pkRLkp/J7Lui4Iw8Nx7OZsWxSIf9bL8X24f08ls+uOkkjASOfM4E2M+sMB+8Igae0sFUvHRwt cG2TMF+FTi8rGBjeugU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
Move your mouse over any or symbols for remediation hints.
Want a second opinion? Test dotsu.su at dnsviz.net.
↓ Advanced options ↑ Advanced options
Paste a DS or DNSKEY record into the field above to use a Trust Anchor that is not published in the DNS. Validation will begin at the owner name of the DS/DNSKEY record.
You may also supply alternative starting name servers, separated by whitespace or commas. The given name servers must be authoritative for the same zone as the Trust Anchor.