DNSSEC Debugger

Domain Name:

Time: 2024-05-13 03:51:31 UTC

Analyzing DNSSEC problems for gov.ru

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 864 octets ;; HEADER SECTION ;; id = 65272 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to f.root-servers.net for gov.ru/A
	Received 682 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 682 octets ;; HEADER SECTION ;; id = 12020 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 43786 8 2 3c59747544090bc74419d5f69e32d8c9b18ea48cbdaa33c09435619120ced431 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . fny/zZSfrEi0SCpObX10XyvrRvNbXE/542V+7UK3Wu39gCP2SSq5ZzI3MjHQATHEEHymSu4vZIwk x6fBZW6UoVlRPMqmZ5+hlDAS6XfK/syZUa4l2Bcp3yIUxgGEsUjbViZGWmQY+9BMEt9y95TGnCLv hEkYm2kz7RKKMeFF6uzQITYhXhRMxLblR/6ymmD0VnOF6KNRwUtoct82drM79n8FFkrd2o1xSbkk LwVU/lVuFWxQFWGSuBg8Pej9ZUnsZ8gw7Tom0pOryfIyf2WZOtR7MzSbKsHwVMXHU34STQG/iL7L Cshw7sq+6I/bHW+RACWtqtncUHfPLm3XIGvxPw== ) ;; ADDITIONAL SECTION (11 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN A 194.85.252.62 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 d.dns.ripn.net. 172800 IN A 194.190.124.17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN A 193.232.142.17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN A 193.232.156.17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for ru/DNSKEY
	Received 678 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 678 octets ;; HEADER SECTION ;; id = 62577 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 43786 8 2 3c59747544090bc74419d5f69e32d8c9b18ea48cbdaa33c09435619120ced431 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . fny/zZSfrEi0SCpObX10XyvrRvNbXE/542V+7UK3Wu39gCP2SSq5ZzI3MjHQATHEEHymSu4vZIwk x6fBZW6UoVlRPMqmZ5+hlDAS6XfK/syZUa4l2Bcp3yIUxgGEsUjbViZGWmQY+9BMEt9y95TGnCLv hEkYm2kz7RKKMeFF6uzQITYhXhRMxLblR/6ymmD0VnOF6KNRwUtoct82drM79n8FFkrd2o1xSbkk LwVU/lVuFWxQFWGSuBg8Pej9ZUnsZ8gw7Tom0pOryfIyf2WZOtR7MzSbKsHwVMXHU34STQG/iL7L Cshw7sq+6I/bHW+RACWtqtncUHfPLm3XIGvxPw== ) ;; ADDITIONAL SECTION (11 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN A 194.85.252.62 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 d.dns.ripn.net. 172800 IN A 194.190.124.17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN A 193.232.142.17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN A 193.232.156.17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; { "EDNS-VERSION": 0 }
	Found child zone ru

	Checking DS between . and ru
	Query to k.root-servers.net for ru/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 366 octets ;; HEADER SECTION ;; id = 32610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DS ;; ANSWER SECTION (2 records) ru. 86400 IN DS ( 43786 8 2 3c59747544090bc74419d5f69e32d8c9b18ea48cbdaa33c09435619120ced431 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . fny/zZSfrEi0SCpObX10XyvrRvNbXE/542V+7UK3Wu39gCP2SSq5ZzI3MjHQATHEEHymSu4vZIwk x6fBZW6UoVlRPMqmZ5+hlDAS6XfK/syZUa4l2Bcp3yIUxgGEsUjbViZGWmQY+9BMEt9y95TGnCLv hEkYm2kz7RKKMeFF6uzQITYhXhRMxLblR/6ymmD0VnOF6KNRwUtoct82drM79n8FFkrd2o1xSbkk LwVU/lVuFWxQFWGSuBg8Pej9ZUnsZ8gw7Tom0pOryfIyf2WZOtR7MzSbKsHwVMXHU34STQG/iL7L Cshw7sq+6I/bHW+RACWtqtncUHfPLm3XIGvxPw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ru in the . zone
	DS=43786/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ru. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . fny/zZSfrEi0SCpObX10XyvrRvNbXE/542V+7UK3Wu39gCP2SSq5ZzI3MjHQATHEEHymSu4vZIwk x6fBZW6UoVlRPMqmZ5+hlDAS6XfK/syZUa4l2Bcp3yIUxgGEsUjbViZGWmQY+9BMEt9y95TGnCLv hEkYm2kz7RKKMeFF6uzQITYhXhRMxLblR/6ymmD0VnOF6KNRwUtoct82drM79n8FFkrd2o1xSbkk LwVU/lVuFWxQFWGSuBg8Pej9ZUnsZ8gw7Tom0pOryfIyf2WZOtR7MzSbKsHwVMXHU34STQG/iL7L Cshw7sq+6I/bHW+RACWtqtncUHfPLm3XIGvxPw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=43786/SHA-256 is now in the chain-of-trust
	`ru. 86400 IN DS ( 43786 8 2 3c59747544090bc74419d5f69e32d8c9b18ea48cbdaa33c09435619120ced431 )`
	Query to e.dns.ripn.net for ru/DNSKEY
	Received 745 bytes from 193.232.142.17
	;; Response received from [193.232.142.17] 745 octets ;; HEADER SECTION ;; id = 62514 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (3 records) ru. 345600 IN DNSKEY ( 256 3 8 AwEAAbeVTo9Uiz/qUecTEKKWn7Nvt9gLx1NdGLNye9BvjmAqOXwK+2rWKj2Mz/M6VSRha3T3ZDZF GOkrzDvghe7VtzOClugZ/UkPr4AWYPYBHPPsjUlFkrg6G2D1adoCyXG5+xWD4WDfmd6NwkWNzp1O SUwhgyKBZhbAZBvQCdtr43bT ) ; Key ID = 50208 ru. 345600 IN DNSKEY ( 257 3 8 AwEAAfcMZekGvFYkmt18Q8KIS+XX/7UBbpmIJ4hK3FNzErkJmiNPxq+sbM00NYJwY725QxoDwHPe K0JIybKW6s+U2+I7aBGJus/bvDklw0CMTDsG7HoJG+4sjq/jRPUQNwkOA/cNoiYjroqw7/GnB8DE AGE03gyxdZcxxU3BJKPZfds8DJYPBaDUO35g9I6+dLPXxHK6LFUFprkBtpqj13tJ/ptLyMSaivvi 3xrvJMqu/FWN6piMzu7uYmrSdv6s01y+0x6229sZ7ufSQ6E66gdTmXebDx8S8q70B4BmMZosrsHl f3uXVMMY72LnrQzbere2ecd95q+1VDMDXcXB/pT1/C0= ) ; Key ID = 43786 ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20240530000000 20240510000000 43786 ru. djUKlV9AkPOCyWXTsHmeHJnzDN6QGRvqG6qwxOhHN37U7TdFAzL2k85EYPCIdgsiky5k3R4VRkoY 2QKQa2f6HLjjqYAv3FRvynZY9AzHf9O6LRKy2zo+F2eR5E+Joypt2aNR0n8wlMHOzkVMXyrgLp41 RR1/ALm/hYVbfy3/PLMTMCjBIXBKL8LSpCmuM/OlCReIHmyvulW17kSGaz5QVHh3JQAXWA8VE5+k OHajwSNTKu/7FlAWRRQ7u3sRhajNveVkQeVYu9rAneYKBzOB7MX1QV8b/JxMjOaNixj+SDsBQ8nI +Laz5qpQ4e0KwI8+/JSNMFKpMSqW60zTANML1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ru
	`ru. 345600 IN DNSKEY ( 256 3 8 AwEAAbeVTo9Uiz/qUecTEKKWn7Nvt9gLx1NdGLNye9BvjmAqOXwK+2rWKj2Mz/M6VSRha3T3ZDZF GOkrzDvghe7VtzOClugZ/UkPr4AWYPYBHPPsjUlFkrg6G2D1adoCyXG5+xWD4WDfmd6NwkWNzp1O SUwhgyKBZhbAZBvQCdtr43bT ) ; Key ID = 50208`
	`ru. 345600 IN DNSKEY ( 257 3 8 AwEAAfcMZekGvFYkmt18Q8KIS+XX/7UBbpmIJ4hK3FNzErkJmiNPxq+sbM00NYJwY725QxoDwHPe K0JIybKW6s+U2+I7aBGJus/bvDklw0CMTDsG7HoJG+4sjq/jRPUQNwkOA/cNoiYjroqw7/GnB8DE AGE03gyxdZcxxU3BJKPZfds8DJYPBaDUO35g9I6+dLPXxHK6LFUFprkBtpqj13tJ/ptLyMSaivvi 3xrvJMqu/FWN6piMzu7uYmrSdv6s01y+0x6229sZ7ufSQ6E66gdTmXebDx8S8q70B4BmMZosrsHl f3uXVMMY72LnrQzbere2ecd95q+1VDMDXcXB/pT1/C0= ) ; Key ID = 43786`
	DNSKEY=43786/SEP is now in the chain-of-trust
	DS=43786/SHA-256 verifies DNSKEY=43786/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20240530000000 20240510000000 43786 ru. djUKlV9AkPOCyWXTsHmeHJnzDN6QGRvqG6qwxOhHN37U7TdFAzL2k85EYPCIdgsiky5k3R4VRkoY 2QKQa2f6HLjjqYAv3FRvynZY9AzHf9O6LRKy2zo+F2eR5E+Joypt2aNR0n8wlMHOzkVMXyrgLp41 RR1/ALm/hYVbfy3/PLMTMCjBIXBKL8LSpCmuM/OlCReIHmyvulW17kSGaz5QVHh3JQAXWA8VE5+k OHajwSNTKu/7FlAWRRQ7u3sRhajNveVkQeVYu9rAneYKBzOB7MX1QV8b/JxMjOaNixj+SDsBQ8nI +Laz5qpQ4e0KwI8+/JSNMFKpMSqW60zTANML1Q== )`
	RRSIG=43786 and DNSKEY=43786/SEP verifies the DNSKEY RRset
	DNSKEY=50208 is now in the chain-of-trust
	Query to a.dns.ripn.net for gov.ru/A
	Received 390 bytes from 193.232.128.6
	;; Response received from [193.232.128.6] 390 octets ;; HEADER SECTION ;; id = 55961 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV.RU. 345600 IN NS acl.dns.ripn.net. GOV.RU. 345600 IN NS ns.gov.RU. GOV.RU. 345600 IN NS bcl.dns.ripn.net. GOV.RU. 345600 IN NS ccl.dns.ripn.net. GOV.RU. 345600 IN NS ns2.gov.RU. GOV.RU. 345600 IN DS ( 28029 13 2 d5194a16ba2eed6dd0c231c56e6e0df944ffaa35715f2b2e7fdd0582dc74ad73 ) gov.ru. 345600 IN RRSIG ( DS 8 2 345600 20240522035200 20240417081859 50208 ru. oQlqMqoaL35UJwXkiMMxo8IMo6ui6GdO6whUoxwH+JAuzJQAFwoxu0TtppfQWrrVmqGH7mEdTqTu pJa/fM8jSJE70CIneyki/GQzS05URB5LclmbNbbCjAPSAmIWCZ1qa/YosXL/Tc0ic4HYSRyqYufB FuGLDeyrtyWSENDzxtk= ) ;; ADDITIONAL SECTION (3 records) ns2.gov.RU. 345600 IN A 95.173.128.80 ns.gov.RU. 345600 IN A 95.173.128.77 ;; { "EDNS-VERSION": 0 }
	Query to e.dns.ripn.net for gov.ru/DNSKEY
	Received 397 bytes from 193.232.142.17
	;; Response received from [193.232.142.17] 397 octets ;; HEADER SECTION ;; id = 31295 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV.RU. 345600 IN NS ccl.dns.ripn.net. GOV.RU. 345600 IN NS ns2.gov.RU. GOV.RU. 345600 IN NS ns.gov.RU. GOV.RU. 345600 IN NS acl.dns.ripn.net. GOV.RU. 345600 IN NS bcl.dns.ripn.net. GOV.RU. 345600 IN DS ( 28029 13 2 d5194a16ba2eed6dd0c231c56e6e0df944ffaa35715f2b2e7fdd0582dc74ad73 ) gov.ru. 345600 IN RRSIG ( DS 8 2 345600 20240522035200 20240417081859 50208 ru. oQlqMqoaL35UJwXkiMMxo8IMo6ui6GdO6whUoxwH+JAuzJQAFwoxu0TtppfQWrrVmqGH7mEdTqTu pJa/fM8jSJE70CIneyki/GQzS05URB5LclmbNbbCjAPSAmIWCZ1qa/YosXL/Tc0ic4HYSRyqYufB FuGLDeyrtyWSENDzxtk= ) ;; ADDITIONAL SECTION (3 records) ns2.GOV.RU. 345600 IN A 95.173.128.80 ns.GOV.RU. 345600 IN A 95.173.128.77 ;; { "EDNS-VERSION": 0 }
	Found child zone gov.ru

gov.ru

	Checking DS between ru and gov.ru
	Query to e.dns.ripn.net for gov.ru/DS
	Received 251 bytes from 193.232.142.17
	;; Response received from [193.232.142.17] 251 octets ;; HEADER SECTION ;; id = 12584 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN DS ;; ANSWER SECTION (2 records) GOV.RU. 345600 IN DS ( 28029 13 2 d5194a16ba2eed6dd0c231c56e6e0df944ffaa35715f2b2e7fdd0582dc74ad73 ) gov.ru. 345600 IN RRSIG ( DS 8 2 345600 20240522035200 20240417081859 50208 ru. oQlqMqoaL35UJwXkiMMxo8IMo6ui6GdO6whUoxwH+JAuzJQAFwoxu0TtppfQWrrVmqGH7mEdTqTu pJa/fM8jSJE70CIneyki/GQzS05URB5LclmbNbbCjAPSAmIWCZ1qa/YosXL/Tc0ic4HYSRyqYufB FuGLDeyrtyWSENDzxtk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov.ru in the ru zone
	DS=28029/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov.ru. 345600 IN RRSIG ( DS 8 2 345600 20240522035200 20240417081859 50208 ru. oQlqMqoaL35UJwXkiMMxo8IMo6ui6GdO6whUoxwH+JAuzJQAFwoxu0TtppfQWrrVmqGH7mEdTqTu pJa/fM8jSJE70CIneyki/GQzS05URB5LclmbNbbCjAPSAmIWCZ1qa/YosXL/Tc0ic4HYSRyqYufB FuGLDeyrtyWSENDzxtk= )`
	RRSIG=50208 and DNSKEY=50208 verifies the DS RRset
	DS=28029/SHA-256 is now in the chain-of-trust
	`GOV.RU. 345600 IN DS ( 28029 13 2 d5194a16ba2eed6dd0c231c56e6e0df944ffaa35715f2b2e7fdd0582dc74ad73 )`
	Query to ns.gov.RU for gov.ru/DNSKEY
	Received 479 bytes from 95.173.128.77
	;; Response received from [95.173.128.77] 479 octets ;; HEADER SECTION ;; id = 19431 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN DNSKEY ;; ANSWER SECTION (5 records) gov.ru. 7200 IN DNSKEY ( 256 3 13 39zm7CAVswlCCyj21wGL+S3Oe4YzGv8raEDlkF5P0eJIZ71l6BaUnjPzCkZFXv/o3qcoZntDJiFo 2QTXWhIy5g== ) ; Key ID = 28335 gov.ru. 7200 IN DNSKEY ( 256 3 13 8wQV7HBDBTH/KXsmr3v7GrjLjLxhCqwHNVOwE/FqgXiQ2+zj/0AMDAEIOpfJ0v8Bvhqc/eRxSjC5 d363MXnGRA== ) ; Key ID = 39270 gov.ru. 7200 IN DNSKEY ( 257 3 13 QIzS5hpp7BeojUPq+hWfESiOsaeLtYhE0RKGosuzybWaU7e9BXDFfOfd4aMAX1as4widOxtFtp1d zNTz3mtNrg== ) ; Key ID = 28029 gov.ru. 7200 IN RRSIG ( DNSKEY 13 2 7200 20240611194000 20240512194000 28029 gov.ru. l0muJiHa1Phs64BxuY7b+US0BQz5gbsNpWFglVo/AiyqVLqU5W+9GUFEINVn2GFq68/GLxzs5ckY 6xq3YtfT8g== ) gov.ru. 7200 IN RRSIG ( DNSKEY 13 2 7200 20240611194000 20240512194000 28335 gov.ru. DE/tj3k+5dOWGphu9B42o4qY6TCZPumSZxSr/p3N0BY2wqnPb4GmRbiQlkno39UaNtRGIUyNWcRV 30v7GMIy4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for gov.ru
	`gov.ru. 7200 IN DNSKEY ( 256 3 13 39zm7CAVswlCCyj21wGL+S3Oe4YzGv8raEDlkF5P0eJIZ71l6BaUnjPzCkZFXv/o3qcoZntDJiFo 2QTXWhIy5g== ) ; Key ID = 28335`
	`gov.ru. 7200 IN DNSKEY ( 256 3 13 8wQV7HBDBTH/KXsmr3v7GrjLjLxhCqwHNVOwE/FqgXiQ2+zj/0AMDAEIOpfJ0v8Bvhqc/eRxSjC5 d363MXnGRA== ) ; Key ID = 39270`
	`gov.ru. 7200 IN DNSKEY ( 257 3 13 QIzS5hpp7BeojUPq+hWfESiOsaeLtYhE0RKGosuzybWaU7e9BXDFfOfd4aMAX1as4widOxtFtp1d zNTz3mtNrg== ) ; Key ID = 28029`
	DNSKEY=28029/SEP is now in the chain-of-trust
	DS=28029/SHA-256 verifies DNSKEY=28029/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`gov.ru. 7200 IN RRSIG ( DNSKEY 13 2 7200 20240611194000 20240512194000 28029 gov.ru. l0muJiHa1Phs64BxuY7b+US0BQz5gbsNpWFglVo/AiyqVLqU5W+9GUFEINVn2GFq68/GLxzs5ckY 6xq3YtfT8g== )`
	`gov.ru. 7200 IN RRSIG ( DNSKEY 13 2 7200 20240611194000 20240512194000 28335 gov.ru. DE/tj3k+5dOWGphu9B42o4qY6TCZPumSZxSr/p3N0BY2wqnPb4GmRbiQlkno39UaNtRGIUyNWcRV 30v7GMIy4A== )`
	RRSIG=28029 and DNSKEY=28029/SEP verifies the DNSKEY RRset
	RRSIG=28335 and DNSKEY=28335 verifies the DNSKEY RRset
	DNSKEY=28335 is now in the chain-of-trust
	DNSKEY=39270 is now in the chain-of-trust
	Query to acl.dns.ripn.net for gov.ru/A
	Received 608 bytes from 193.232.66.15
	;; Response received from [193.232.66.15] 608 octets ;; HEADER SECTION ;; id = 44272 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20240611194000 20240512194000 28335 gov.ru. 1vtTZDhOgRsM4ksiRTDXN4FvAYkOHBKrrXrpuQ/3Ga4qoQB6rFbB7XTLfDkbciHAjp8mHhxQhXBl +rV/ZZ5JFQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20240611194000 20240512194000 28335 gov.ru. KdYz2vgq9OhnWQESzek+KWUutkfw/p4jvQWa/gP7H7vmLVv8wyihofHJVgMPNggxooYCoDrcrlRy RAvqkWk7sg== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. zAmSOeOILbBMw88wVob43IiqWN5uHBUoreXxxI9qecp7qD4R5XDYKncf6QdR7aEZa1QwLfnNoGaR t4w8htH+2Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. sEi11EW/Lrvv5B3ZGmvYUoT7xNXGTpnuvupln16w+N/HNXq7Z2Sdsr2s6wRJ3Gao+YhgL1ql4Q2p 06Nk7kgeoQ== ) ;; { "EDNS-VERSION": 0 }
	acl.dns.ripn.net is authoritative for gov.ru
	Found RRSIG signed by gov.ru zone
	Query to ccl.dns.ripn.net for gov.ru/SOA
	Received 616 bytes from 193.232.82.15
	;; Response received from [193.232.82.15] 616 octets ;; HEADER SECTION ;; id = 44845 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN SOA ;; ANSWER SECTION (2 records) gov.ru. 1800 IN SOA ( ns.gov.ru. ncc.gov.ru. 4024050312 ;serial 2400 ;refresh 1200 ;retry 2592000 ;expire 1800 ;minimum ) gov.ru. 1800 IN RRSIG ( SOA 13 2 1800 20240611194000 20240512194000 28335 gov.ru. /KGuMqpRzvHyTDFvjiVeajeQBnRfS/zOuWF9tRamn1dbtnrXzZ+IpopJvbcofQbqzCXf56kjYkHY C72Zj5/zmQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20240611194000 20240512194000 28335 gov.ru. KdYz2vgq9OhnWQESzek+KWUutkfw/p4jvQWa/gP7H7vmLVv8wyihofHJVgMPNggxooYCoDrcrlRy RAvqkWk7sg== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. zAmSOeOILbBMw88wVob43IiqWN5uHBUoreXxxI9qecp7qD4R5XDYKncf6QdR7aEZa1QwLfnNoGaR t4w8htH+2Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. sEi11EW/Lrvv5B3ZGmvYUoT7xNXGTpnuvupln16w+N/HNXq7Z2Sdsr2s6wRJ3Gao+YhgL1ql4Q2p 06Nk7kgeoQ== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.gov.ru for gov.ru/SOA
	Received 616 bytes from 95.173.128.80
	;; Response received from [95.173.128.80] 616 octets ;; HEADER SECTION ;; id = 42178 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN SOA ;; ANSWER SECTION (2 records) gov.ru. 1800 IN SOA ( ns.gov.ru. ncc.gov.ru. 4024050312 ;serial 2400 ;refresh 1200 ;retry 2592000 ;expire 1800 ;minimum ) gov.ru. 1800 IN RRSIG ( SOA 13 2 1800 20240611194000 20240512194000 28335 gov.ru. /KGuMqpRzvHyTDFvjiVeajeQBnRfS/zOuWF9tRamn1dbtnrXzZ+IpopJvbcofQbqzCXf56kjYkHY C72Zj5/zmQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20240611194000 20240512194000 28335 gov.ru. KdYz2vgq9OhnWQESzek+KWUutkfw/p4jvQWa/gP7H7vmLVv8wyihofHJVgMPNggxooYCoDrcrlRy RAvqkWk7sg== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. zAmSOeOILbBMw88wVob43IiqWN5uHBUoreXxxI9qecp7qD4R5XDYKncf6QdR7aEZa1QwLfnNoGaR t4w8htH+2Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. sEi11EW/Lrvv5B3ZGmvYUoT7xNXGTpnuvupln16w+N/HNXq7Z2Sdsr2s6wRJ3Gao+YhgL1ql4Q2p 06Nk7kgeoQ== ) ;; { "EDNS-VERSION": 0 }
	Query to ns.gov.ru for gov.ru/SOA
	Received 616 bytes from 95.173.128.77
	;; Response received from [95.173.128.77] 616 octets ;; HEADER SECTION ;; id = 41798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN SOA ;; ANSWER SECTION (2 records) gov.ru. 1800 IN SOA ( ns.gov.ru. ncc.gov.ru. 4024050312 ;serial 2400 ;refresh 1200 ;retry 2592000 ;expire 1800 ;minimum ) gov.ru. 1800 IN RRSIG ( SOA 13 2 1800 20240611194000 20240512194000 28335 gov.ru. /KGuMqpRzvHyTDFvjiVeajeQBnRfS/zOuWF9tRamn1dbtnrXzZ+IpopJvbcofQbqzCXf56kjYkHY C72Zj5/zmQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20240611194000 20240512194000 28335 gov.ru. KdYz2vgq9OhnWQESzek+KWUutkfw/p4jvQWa/gP7H7vmLVv8wyihofHJVgMPNggxooYCoDrcrlRy RAvqkWk7sg== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. zAmSOeOILbBMw88wVob43IiqWN5uHBUoreXxxI9qecp7qD4R5XDYKncf6QdR7aEZa1QwLfnNoGaR t4w8htH+2Q== ) ns2.gov.ru. 1800 IN A 95.173.128.80 ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. sEi11EW/Lrvv5B3ZGmvYUoT7xNXGTpnuvupln16w+N/HNXq7Z2Sdsr2s6wRJ3Gao+YhgL1ql4Q2p 06Nk7kgeoQ== ) ;; { "EDNS-VERSION": 0 }
	Query to bcl.dns.ripn.net for gov.ru/SOA
	Received 616 bytes from 194.85.84.15
	;; Response received from [194.85.84.15] 616 octets ;; HEADER SECTION ;; id = 15166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN SOA ;; ANSWER SECTION (2 records) gov.ru. 1800 IN SOA ( ns.gov.ru. ncc.gov.ru. 4024050312 ;serial 2400 ;refresh 1200 ;retry 2592000 ;expire 1800 ;minimum ) gov.ru. 1800 IN RRSIG ( SOA 13 2 1800 20240611194000 20240512194000 28335 gov.ru. /KGuMqpRzvHyTDFvjiVeajeQBnRfS/zOuWF9tRamn1dbtnrXzZ+IpopJvbcofQbqzCXf56kjYkHY C72Zj5/zmQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20240611194000 20240512194000 28335 gov.ru. KdYz2vgq9OhnWQESzek+KWUutkfw/p4jvQWa/gP7H7vmLVv8wyihofHJVgMPNggxooYCoDrcrlRy RAvqkWk7sg== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. zAmSOeOILbBMw88wVob43IiqWN5uHBUoreXxxI9qecp7qD4R5XDYKncf6QdR7aEZa1QwLfnNoGaR t4w8htH+2Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. sEi11EW/Lrvv5B3ZGmvYUoT7xNXGTpnuvupln16w+N/HNXq7Z2Sdsr2s6wRJ3Gao+YhgL1ql4Q2p 06Nk7kgeoQ== ) ;; { "EDNS-VERSION": 0 }
	Query to acl.dns.ripn.net for gov.ru/A
	Received 608 bytes from 193.232.66.15
	;; Response received from [193.232.66.15] 608 octets ;; HEADER SECTION ;; id = 18051 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20240611194000 20240512194000 28335 gov.ru. 1vtTZDhOgRsM4ksiRTDXN4FvAYkOHBKrrXrpuQ/3Ga4qoQB6rFbB7XTLfDkbciHAjp8mHhxQhXBl +rV/ZZ5JFQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20240611194000 20240512194000 28335 gov.ru. KdYz2vgq9OhnWQESzek+KWUutkfw/p4jvQWa/gP7H7vmLVv8wyihofHJVgMPNggxooYCoDrcrlRy RAvqkWk7sg== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. zAmSOeOILbBMw88wVob43IiqWN5uHBUoreXxxI9qecp7qD4R5XDYKncf6QdR7aEZa1QwLfnNoGaR t4w8htH+2Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. sEi11EW/Lrvv5B3ZGmvYUoT7xNXGTpnuvupln16w+N/HNXq7Z2Sdsr2s6wRJ3Gao+YhgL1ql4Q2p 06Nk7kgeoQ== ) ;; { "EDNS-VERSION": 0 }
	gov.ru A RR has value 95.173.128.90
	gov.ru A RR has value 95.173.128.89
	Found 1 RRSIGs over A RRset
	`gov.ru. 1800 IN RRSIG ( A 13 2 1800 20240611194000 20240512194000 28335 gov.ru. 1vtTZDhOgRsM4ksiRTDXN4FvAYkOHBKrrXrpuQ/3Ga4qoQB6rFbB7XTLfDkbciHAjp8mHhxQhXBl +rV/ZZ5JFQ== )`
	RRSIG=28335 and DNSKEY=28335 verifies the A RRset

gov.ru

	Query to ns.gov.ru for gov.ru/A
	Received 608 bytes from 95.173.128.77
	;; Response received from [95.173.128.77] 608 octets ;; HEADER SECTION ;; id = 30507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20240611194000 20240512194000 28335 gov.ru. 1vtTZDhOgRsM4ksiRTDXN4FvAYkOHBKrrXrpuQ/3Ga4qoQB6rFbB7XTLfDkbciHAjp8mHhxQhXBl +rV/ZZ5JFQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20240611194000 20240512194000 28335 gov.ru. KdYz2vgq9OhnWQESzek+KWUutkfw/p4jvQWa/gP7H7vmLVv8wyihofHJVgMPNggxooYCoDrcrlRy RAvqkWk7sg== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. zAmSOeOILbBMw88wVob43IiqWN5uHBUoreXxxI9qecp7qD4R5XDYKncf6QdR7aEZa1QwLfnNoGaR t4w8htH+2Q== ) ns2.gov.ru. 1800 IN A 95.173.128.80 ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. sEi11EW/Lrvv5B3ZGmvYUoT7xNXGTpnuvupln16w+N/HNXq7Z2Sdsr2s6wRJ3Gao+YhgL1ql4Q2p 06Nk7kgeoQ== ) ;; { "EDNS-VERSION": 0 }
	ns.gov.ru is authoritative for gov.ru
	Found RRSIG signed by gov.ru zone
	Query to ns.gov.ru for gov.ru/A
	Received 608 bytes from 95.173.128.77
	;; Response received from [95.173.128.77] 608 octets ;; HEADER SECTION ;; id = 39184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20240611194000 20240512194000 28335 gov.ru. 1vtTZDhOgRsM4ksiRTDXN4FvAYkOHBKrrXrpuQ/3Ga4qoQB6rFbB7XTLfDkbciHAjp8mHhxQhXBl +rV/ZZ5JFQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20240611194000 20240512194000 28335 gov.ru. KdYz2vgq9OhnWQESzek+KWUutkfw/p4jvQWa/gP7H7vmLVv8wyihofHJVgMPNggxooYCoDrcrlRy RAvqkWk7sg== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. zAmSOeOILbBMw88wVob43IiqWN5uHBUoreXxxI9qecp7qD4R5XDYKncf6QdR7aEZa1QwLfnNoGaR t4w8htH+2Q== ) ns2.gov.ru. 1800 IN A 95.173.128.80 ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. sEi11EW/Lrvv5B3ZGmvYUoT7xNXGTpnuvupln16w+N/HNXq7Z2Sdsr2s6wRJ3Gao+YhgL1ql4Q2p 06Nk7kgeoQ== ) ;; { "EDNS-VERSION": 0 }
	gov.ru A RR has value 95.173.128.89
	gov.ru A RR has value 95.173.128.90
	Found 1 RRSIGs over A RRset
	`gov.ru. 1800 IN RRSIG ( A 13 2 1800 20240611194000 20240512194000 28335 gov.ru. 1vtTZDhOgRsM4ksiRTDXN4FvAYkOHBKrrXrpuQ/3Ga4qoQB6rFbB7XTLfDkbciHAjp8mHhxQhXBl +rV/ZZ5JFQ== )`
	RRSIG=28335 and DNSKEY=28335 verifies the A RRset

gov.ru

	Query to ns2.gov.ru for gov.ru/A
	Received 608 bytes from 95.173.128.80
	;; Response received from [95.173.128.80] 608 octets ;; HEADER SECTION ;; id = 37659 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20240611194000 20240512194000 28335 gov.ru. 1vtTZDhOgRsM4ksiRTDXN4FvAYkOHBKrrXrpuQ/3Ga4qoQB6rFbB7XTLfDkbciHAjp8mHhxQhXBl +rV/ZZ5JFQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20240611194000 20240512194000 28335 gov.ru. KdYz2vgq9OhnWQESzek+KWUutkfw/p4jvQWa/gP7H7vmLVv8wyihofHJVgMPNggxooYCoDrcrlRy RAvqkWk7sg== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. zAmSOeOILbBMw88wVob43IiqWN5uHBUoreXxxI9qecp7qD4R5XDYKncf6QdR7aEZa1QwLfnNoGaR t4w8htH+2Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. sEi11EW/Lrvv5B3ZGmvYUoT7xNXGTpnuvupln16w+N/HNXq7Z2Sdsr2s6wRJ3Gao+YhgL1ql4Q2p 06Nk7kgeoQ== ) ;; { "EDNS-VERSION": 0 }
	ns2.gov.ru is authoritative for gov.ru
	Found RRSIG signed by gov.ru zone
	Query to ns2.gov.ru for gov.ru/A
	Received 608 bytes from 95.173.128.80
	;; Response received from [95.173.128.80] 608 octets ;; HEADER SECTION ;; id = 62947 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20240611194000 20240512194000 28335 gov.ru. 1vtTZDhOgRsM4ksiRTDXN4FvAYkOHBKrrXrpuQ/3Ga4qoQB6rFbB7XTLfDkbciHAjp8mHhxQhXBl +rV/ZZ5JFQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20240611194000 20240512194000 28335 gov.ru. KdYz2vgq9OhnWQESzek+KWUutkfw/p4jvQWa/gP7H7vmLVv8wyihofHJVgMPNggxooYCoDrcrlRy RAvqkWk7sg== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. zAmSOeOILbBMw88wVob43IiqWN5uHBUoreXxxI9qecp7qD4R5XDYKncf6QdR7aEZa1QwLfnNoGaR t4w8htH+2Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. sEi11EW/Lrvv5B3ZGmvYUoT7xNXGTpnuvupln16w+N/HNXq7Z2Sdsr2s6wRJ3Gao+YhgL1ql4Q2p 06Nk7kgeoQ== ) ;; { "EDNS-VERSION": 0 }
	gov.ru A RR has value 95.173.128.90
	gov.ru A RR has value 95.173.128.89
	Found 1 RRSIGs over A RRset
	`gov.ru. 1800 IN RRSIG ( A 13 2 1800 20240611194000 20240512194000 28335 gov.ru. 1vtTZDhOgRsM4ksiRTDXN4FvAYkOHBKrrXrpuQ/3Ga4qoQB6rFbB7XTLfDkbciHAjp8mHhxQhXBl +rV/ZZ5JFQ== )`
	RRSIG=28335 and DNSKEY=28335 verifies the A RRset

gov.ru

	Query to ccl.dns.ripn.net for gov.ru/A
	Received 608 bytes from 193.232.82.15
	;; Response received from [193.232.82.15] 608 octets ;; HEADER SECTION ;; id = 23157 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20240611194000 20240512194000 28335 gov.ru. 1vtTZDhOgRsM4ksiRTDXN4FvAYkOHBKrrXrpuQ/3Ga4qoQB6rFbB7XTLfDkbciHAjp8mHhxQhXBl +rV/ZZ5JFQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20240611194000 20240512194000 28335 gov.ru. KdYz2vgq9OhnWQESzek+KWUutkfw/p4jvQWa/gP7H7vmLVv8wyihofHJVgMPNggxooYCoDrcrlRy RAvqkWk7sg== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. zAmSOeOILbBMw88wVob43IiqWN5uHBUoreXxxI9qecp7qD4R5XDYKncf6QdR7aEZa1QwLfnNoGaR t4w8htH+2Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. sEi11EW/Lrvv5B3ZGmvYUoT7xNXGTpnuvupln16w+N/HNXq7Z2Sdsr2s6wRJ3Gao+YhgL1ql4Q2p 06Nk7kgeoQ== ) ;; { "EDNS-VERSION": 0 }
	ccl.dns.ripn.net is authoritative for gov.ru
	Found RRSIG signed by gov.ru zone
	Query to ccl.dns.ripn.net for gov.ru/A
	Received 608 bytes from 193.232.82.15
	;; Response received from [193.232.82.15] 608 octets ;; HEADER SECTION ;; id = 31362 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20240611194000 20240512194000 28335 gov.ru. 1vtTZDhOgRsM4ksiRTDXN4FvAYkOHBKrrXrpuQ/3Ga4qoQB6rFbB7XTLfDkbciHAjp8mHhxQhXBl +rV/ZZ5JFQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20240611194000 20240512194000 28335 gov.ru. KdYz2vgq9OhnWQESzek+KWUutkfw/p4jvQWa/gP7H7vmLVv8wyihofHJVgMPNggxooYCoDrcrlRy RAvqkWk7sg== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. zAmSOeOILbBMw88wVob43IiqWN5uHBUoreXxxI9qecp7qD4R5XDYKncf6QdR7aEZa1QwLfnNoGaR t4w8htH+2Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. sEi11EW/Lrvv5B3ZGmvYUoT7xNXGTpnuvupln16w+N/HNXq7Z2Sdsr2s6wRJ3Gao+YhgL1ql4Q2p 06Nk7kgeoQ== ) ;; { "EDNS-VERSION": 0 }
	gov.ru A RR has value 95.173.128.90
	gov.ru A RR has value 95.173.128.89
	Found 1 RRSIGs over A RRset
	`gov.ru. 1800 IN RRSIG ( A 13 2 1800 20240611194000 20240512194000 28335 gov.ru. 1vtTZDhOgRsM4ksiRTDXN4FvAYkOHBKrrXrpuQ/3Ga4qoQB6rFbB7XTLfDkbciHAjp8mHhxQhXBl +rV/ZZ5JFQ== )`
	RRSIG=28335 and DNSKEY=28335 verifies the A RRset

gov.ru

	Query to bcl.dns.ripn.net for gov.ru/A
	Received 608 bytes from 194.85.84.15
	;; Response received from [194.85.84.15] 608 octets ;; HEADER SECTION ;; id = 44496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20240611194000 20240512194000 28335 gov.ru. 1vtTZDhOgRsM4ksiRTDXN4FvAYkOHBKrrXrpuQ/3Ga4qoQB6rFbB7XTLfDkbciHAjp8mHhxQhXBl +rV/ZZ5JFQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20240611194000 20240512194000 28335 gov.ru. KdYz2vgq9OhnWQESzek+KWUutkfw/p4jvQWa/gP7H7vmLVv8wyihofHJVgMPNggxooYCoDrcrlRy RAvqkWk7sg== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. zAmSOeOILbBMw88wVob43IiqWN5uHBUoreXxxI9qecp7qD4R5XDYKncf6QdR7aEZa1QwLfnNoGaR t4w8htH+2Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. sEi11EW/Lrvv5B3ZGmvYUoT7xNXGTpnuvupln16w+N/HNXq7Z2Sdsr2s6wRJ3Gao+YhgL1ql4Q2p 06Nk7kgeoQ== ) ;; { "EDNS-VERSION": 0 }
	bcl.dns.ripn.net is authoritative for gov.ru
	Found RRSIG signed by gov.ru zone
	Query to bcl.dns.ripn.net for gov.ru/A
	Received 608 bytes from 194.85.84.15
	;; Response received from [194.85.84.15] 608 octets ;; HEADER SECTION ;; id = 56354 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20240611194000 20240512194000 28335 gov.ru. 1vtTZDhOgRsM4ksiRTDXN4FvAYkOHBKrrXrpuQ/3Ga4qoQB6rFbB7XTLfDkbciHAjp8mHhxQhXBl +rV/ZZ5JFQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20240611194000 20240512194000 28335 gov.ru. KdYz2vgq9OhnWQESzek+KWUutkfw/p4jvQWa/gP7H7vmLVv8wyihofHJVgMPNggxooYCoDrcrlRy RAvqkWk7sg== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. zAmSOeOILbBMw88wVob43IiqWN5uHBUoreXxxI9qecp7qD4R5XDYKncf6QdR7aEZa1QwLfnNoGaR t4w8htH+2Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20240611194000 20240512194000 28335 gov.ru. sEi11EW/Lrvv5B3ZGmvYUoT7xNXGTpnuvupln16w+N/HNXq7Z2Sdsr2s6wRJ3Gao+YhgL1ql4Q2p 06Nk7kgeoQ== ) ;; { "EDNS-VERSION": 0 }
	gov.ru A RR has value 95.173.128.89
	gov.ru A RR has value 95.173.128.90
	Found 1 RRSIGs over A RRset
	`gov.ru. 1800 IN RRSIG ( A 13 2 1800 20240611194000 20240512194000 28335 gov.ru. 1vtTZDhOgRsM4ksiRTDXN4FvAYkOHBKrrXrpuQ/3Ga4qoQB6rFbB7XTLfDkbciHAjp8mHhxQhXBl +rV/ZZ5JFQ== )`
	RRSIG=28335 and DNSKEY=28335 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test gov.ru at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: