DNSSEC Debugger - protonmail.ch

Domain Name:

Time: 2024-05-17 05:04:16 UTC

Analyzing DNSSEC problems for protonmail.ch

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 865 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 865 octets ;; HEADER SECTION ;; id = 19137 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to i.root-servers.net for protonmail.ch/A
	Received 683 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 683 octets ;; HEADER SECTION ;; id = 29113 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; protonmail.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 86400 IN DS ( 450 13 2 4994913d9ff4f0df95f08acdf1d66149d873368ff6c1836c64bdface62734fa2 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . a8YXImeyuk3HBYStIldNUncwvcDme2dY2xlKa3DX5sarGIbz5JCfmwi/kWTH9gOoktibJpNuKBE1 2uFY8kgkQisHBXLIa+XlBhW6h4qhBU8GsuDHpdyRLohp1Pyqtdb8N+RxeWnBCrhXeMoM5k4ZoecT OiUPk5QKkLYA7BQVKNIF70DL6DPGymo2kdN4rqz1aO6KhlCzz6t3K/ls6dte3agF8+ELPGCoGzdL mI4oik4DDkHQUcxkRV95/NiXz2jdo0uTUs9SlezdBhNaF/5BsEKDz9+zYAK8TEwFFYeWwWERoqZM Ih82PQ3uB8K0AXV7O3L0poUgiJRA/aettCuH1w== ) ;; ADDITIONAL SECTION (11 records) f.nic.ch. 172800 IN A 194.146.106.10 e.nic.ch. 172800 IN A 194.0.17.1 d.nic.ch. 172800 IN A 194.0.25.39 b.nic.ch. 172800 IN A 130.59.31.43 a.nic.ch. 172800 IN A 130.59.31.41 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 e.nic.ch. 172800 IN AAAA 2001:678:3::1 d.nic.ch. 172800 IN AAAA 2001:678:20::39 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for ch/DNSKEY
	Received 670 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 670 octets ;; HEADER SECTION ;; id = 32022 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 450 13 2 4994913d9ff4f0df95f08acdf1d66149d873368ff6c1836c64bdface62734fa2 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . a8YXImeyuk3HBYStIldNUncwvcDme2dY2xlKa3DX5sarGIbz5JCfmwi/kWTH9gOoktibJpNuKBE1 2uFY8kgkQisHBXLIa+XlBhW6h4qhBU8GsuDHpdyRLohp1Pyqtdb8N+RxeWnBCrhXeMoM5k4ZoecT OiUPk5QKkLYA7BQVKNIF70DL6DPGymo2kdN4rqz1aO6KhlCzz6t3K/ls6dte3agF8+ELPGCoGzdL mI4oik4DDkHQUcxkRV95/NiXz2jdo0uTUs9SlezdBhNaF/5BsEKDz9+zYAK8TEwFFYeWwWERoqZM Ih82PQ3uB8K0AXV7O3L0poUgiJRA/aettCuH1w== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 d.nic.ch. 172800 IN A 194.0.25.39 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; { "EDNS-VERSION": 0 }
	Found child zone ch

	Checking DS between . and ch
	Query to f.root-servers.net for ch/DS
	Received 366 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 366 octets ;; HEADER SECTION ;; id = 42125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 450 13 2 4994913d9ff4f0df95f08acdf1d66149d873368ff6c1836c64bdface62734fa2 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . a8YXImeyuk3HBYStIldNUncwvcDme2dY2xlKa3DX5sarGIbz5JCfmwi/kWTH9gOoktibJpNuKBE1 2uFY8kgkQisHBXLIa+XlBhW6h4qhBU8GsuDHpdyRLohp1Pyqtdb8N+RxeWnBCrhXeMoM5k4ZoecT OiUPk5QKkLYA7BQVKNIF70DL6DPGymo2kdN4rqz1aO6KhlCzz6t3K/ls6dte3agF8+ELPGCoGzdL mI4oik4DDkHQUcxkRV95/NiXz2jdo0uTUs9SlezdBhNaF/5BsEKDz9+zYAK8TEwFFYeWwWERoqZM Ih82PQ3uB8K0AXV7O3L0poUgiJRA/aettCuH1w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ch in the . zone
	DS=450/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . a8YXImeyuk3HBYStIldNUncwvcDme2dY2xlKa3DX5sarGIbz5JCfmwi/kWTH9gOoktibJpNuKBE1 2uFY8kgkQisHBXLIa+XlBhW6h4qhBU8GsuDHpdyRLohp1Pyqtdb8N+RxeWnBCrhXeMoM5k4ZoecT OiUPk5QKkLYA7BQVKNIF70DL6DPGymo2kdN4rqz1aO6KhlCzz6t3K/ls6dte3agF8+ELPGCoGzdL mI4oik4DDkHQUcxkRV95/NiXz2jdo0uTUs9SlezdBhNaF/5BsEKDz9+zYAK8TEwFFYeWwWERoqZM Ih82PQ3uB8K0AXV7O3L0poUgiJRA/aettCuH1w== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=450/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 450 13 2 4994913d9ff4f0df95f08acdf1d66149d873368ff6c1836c64bdface62734fa2 )`
	Query to b.nic.ch for ch/DNSKEY
	Received 369 bytes from 130.59.31.43
	;; Response received from [130.59.31.43] 369 octets ;; HEADER SECTION ;; id = 40652 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 256 3 13 nlsYVmsOCS7wBWxw+r8VkfSLeM+hxzDBTgqtBzfmhe+rvhzx3pUhiiJUU6QzmbCBfwrS3chqArLY oexNeEAOgg== ) ; Key ID = 8233 ch. 86400 IN DNSKEY ( 257 3 13 X9G00h5by86dkmMZE7PD2dVzSCGFyiTDpgVh61isB0sA/tohdssa+399tXmXjfltYa4A2LmltIms rxVENcL7XA== ) ; Key ID = 450 ch. 86400 IN DNSKEY ( 256 3 13 rI5r0MR7ImWX940c4GLeuZ+IdVAA0ommOGbtpA+mgE5/6tm3FYVpagpmIK8s/S2+5lY4VuEGtFm0 1dzeoJh/Sw== ) ; Key ID = 216 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240608100909 20240423090909 450 ch. LkNxcTycjk6Gmm6qbpFdNfPJHjBy4Vpv9IpCAE5mfF2Sjp9N4RRVjJqzmzmt67aovIs+xpId5isV j5/3UdszOw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 256 3 13 nlsYVmsOCS7wBWxw+r8VkfSLeM+hxzDBTgqtBzfmhe+rvhzx3pUhiiJUU6QzmbCBfwrS3chqArLY oexNeEAOgg== ) ; Key ID = 8233`
	`ch. 86400 IN DNSKEY ( 257 3 13 X9G00h5by86dkmMZE7PD2dVzSCGFyiTDpgVh61isB0sA/tohdssa+399tXmXjfltYa4A2LmltIms rxVENcL7XA== ) ; Key ID = 450`
	`ch. 86400 IN DNSKEY ( 256 3 13 rI5r0MR7ImWX940c4GLeuZ+IdVAA0ommOGbtpA+mgE5/6tm3FYVpagpmIK8s/S2+5lY4VuEGtFm0 1dzeoJh/Sw== ) ; Key ID = 216`
	DNSKEY=450/SEP is now in the chain-of-trust
	DS=450/SHA-256 verifies DNSKEY=450/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240608100909 20240423090909 450 ch. LkNxcTycjk6Gmm6qbpFdNfPJHjBy4Vpv9IpCAE5mfF2Sjp9N4RRVjJqzmzmt67aovIs+xpId5isV j5/3UdszOw== )`
	RRSIG=450 and DNSKEY=450/SEP verifies the DNSKEY RRset
	DNSKEY=8233 is now in the chain-of-trust
	DNSKEY=216 is now in the chain-of-trust
	Query to b.nic.ch for protonmail.ch/A
	Received 306 bytes from 130.59.31.43
	;; Response received from [130.59.31.43] 306 octets ;; HEADER SECTION ;; id = 5305 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; protonmail.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) protonmail.ch. 3600 IN NS ns3.protonmail.ch. protonmail.ch. 3600 IN NS ns1.protonmail.ch. protonmail.ch. 3600 IN NS ns2.protonmail.ch. protonmail.ch. 3600 IN DS ( 27196 8 4 e422ee237de2fe29190f1bddc0c0e2469679411f329aab2a7bd8de43575c1c6f ab6b9ffc521996e526f4b5d513798d9e ) protonmail.ch. 3600 IN RRSIG ( DS 13 2 3600 20240607081517 20240508080210 216 ch. 9viRd/19N4ydAHry6J/4yO0JQOoOZsYuRvSkwI2dH1oJr4uPjmSYfoK8XssqjylJreri4mXvZwBz WvyQKg1oVg== ) ;; ADDITIONAL SECTION (4 records) ns3.protonmail.ch. 3600 IN A 205.132.47.1 ns2.protonmail.ch. 3600 IN A 176.119.200.150 ns1.protonmail.ch. 3600 IN A 185.70.42.150 ;; { "EDNS-VERSION": 0 }
	Query to d.nic.ch for protonmail.ch/DNSKEY
	Received 306 bytes from 194.0.25.39
	;; Response received from [194.0.25.39] 306 octets ;; HEADER SECTION ;; id = 62183 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; protonmail.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) protonmail.ch. 3600 IN NS ns1.protonmail.ch. protonmail.ch. 3600 IN NS ns2.protonmail.ch. protonmail.ch. 3600 IN NS ns3.protonmail.ch. protonmail.ch. 3600 IN DS ( 27196 8 4 e422ee237de2fe29190f1bddc0c0e2469679411f329aab2a7bd8de43575c1c6f ab6b9ffc521996e526f4b5d513798d9e ) protonmail.ch. 3600 IN RRSIG ( DS 13 2 3600 20240607081517 20240508080210 216 ch. 9viRd/19N4ydAHry6J/4yO0JQOoOZsYuRvSkwI2dH1oJr4uPjmSYfoK8XssqjylJreri4mXvZwBz WvyQKg1oVg== ) ;; ADDITIONAL SECTION (4 records) ns1.protonmail.ch. 3600 IN A 185.70.42.150 ns2.protonmail.ch. 3600 IN A 176.119.200.150 ns3.protonmail.ch. 3600 IN A 205.132.47.1 ;; { "EDNS-VERSION": 0 }
	Found child zone protonmail.ch

protonmail.ch

	Checking DS between ch and protonmail.ch
	Query to d.nic.ch for protonmail.ch/DS
	Received 204 bytes from 194.0.25.39
	;; Response received from [194.0.25.39] 204 octets ;; HEADER SECTION ;; id = 22455 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; protonmail.ch. IN DS ;; ANSWER SECTION (2 records) protonmail.ch. 3600 IN DS ( 27196 8 4 e422ee237de2fe29190f1bddc0c0e2469679411f329aab2a7bd8de43575c1c6f ab6b9ffc521996e526f4b5d513798d9e ) protonmail.ch. 3600 IN RRSIG ( DS 13 2 3600 20240607081517 20240508080210 216 ch. 9viRd/19N4ydAHry6J/4yO0JQOoOZsYuRvSkwI2dH1oJr4uPjmSYfoK8XssqjylJreri4mXvZwBz WvyQKg1oVg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for protonmail.ch in the ch zone
	DS=27196/SHA-384 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`protonmail.ch. 3600 IN RRSIG ( DS 13 2 3600 20240607081517 20240508080210 216 ch. 9viRd/19N4ydAHry6J/4yO0JQOoOZsYuRvSkwI2dH1oJr4uPjmSYfoK8XssqjylJreri4mXvZwBz WvyQKg1oVg== )`
	RRSIG=216 and DNSKEY=216 verifies the DS RRset
	DS=27196/SHA-384 is now in the chain-of-trust
	`protonmail.ch. 3600 IN DS ( 27196 8 4 e422ee237de2fe29190f1bddc0c0e2469679411f329aab2a7bd8de43575c1c6f ab6b9ffc521996e526f4b5d513798d9e )`
	Query to ns2.protonmail.ch for protonmail.ch/DNSKEY
	Received 1708 bytes from 176.119.200.150
	;; Response received from [176.119.200.150] 1708 octets ;; HEADER SECTION ;; id = 42146 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; protonmail.ch. IN DNSKEY ;; ANSWER SECTION (4 records) protonmail.ch. 1200 IN DNSKEY ( 256 3 8 AwEAAbkQec8erGeyr6RAOEFWOvCDiN1IPb265vqwFEqPRaGh64dVe8mTZ8xFAJm0QKPqfrso2GNF tlM13eZgpYpWgdTVIz3EyafRb+nKvrqC5gLzbzPl96681L8MejLoCr66awxwWaQC4Na6W1XNcUXq tA/yCOfMW5+JyuClL8KP/SWBo0+TdXytqnaKzWfFH0Mg7ucmH/LZx6mR3lLu8kzTIEOL13Z9D1Ay EJ1IlMqR2E3zE6FzsgLP+pJi0Ztw4MrnFyWAJROk54SexNSAcKl/D4uTl+zNMVNfR+Pug0sD4Pjx u9xyRnPRxTlcISgXsO8VYh3AV9x20wekhFYeBn0WHWk= ) ; Key ID = 6753 protonmail.ch. 1200 IN DNSKEY ( 257 3 8 AwEAAd6b3gYWrIsnj3gfzy42lKvoFE59bEC1+5KUScM41cEISCg4cNlPLBGWgpTCI+G8ijzkYWJ8 bmUkBrkYGVuH3P09I8uznwWF5HJNgxqkDUQ9V+v0pxVHJGRmgAAnClSa1pSJm6Rb9n11eflk0ZYT 7flMrd8/ou8tRrIv7YrSl6vmGGQxiBWs6mFEIosVT0+3CRnH/g0K6NJB2LLSH73bVFUhJ0SepihI U8r8rBl1k2xwOC3BZ5ZLWroZFlvUUbDPJzsJsmwWL8VSLVWAwhIbEOnI9v89X6ci1D0W+Prmdbuu FMwglVzgksCRES9YlEwP/uRRCrZldL2iqS1TVBnDAQTMqT9oR9UrE5Fj7g/3ZUrtw+111RbJzQgy 37/0h6KDXAjhr20DZ9X/eCbVGNhwJzWRhAAOtMhxWw4EsjYaIEDJO/rqYRkpiD3GV6RwdYNU+cCC xq6u/xfebzR0kFJTmVl223+t2LNTFG4jH8aa0rs3ve2YJGJ55e61ttdYHOWCG+bsdxrI4EMIRH2R ZX/ExDcduO2ntgfG5oV5o/gTeXk/RnTq2G2taGDcNeRH8bv6ywtsID4szx6ZmIx9O4Zu82RgrVoP lJh+vCJ2CrptGU9rOs3/jqtu7azP0kLgzN+BIsUIHDuBkeH0F1kGOi4htefAuqsvocBObeBaBDji epsv ) ; Key ID = 27196 protonmail.ch. 1200 IN RRSIG ( DNSKEY 8 2 1200 20240605001814 20240505233313 6753 protonmail.ch. s7aeax6dwba1wViPpZatdwUh8Zt7Dp4OO1qfsMjIigwDXXGguwG8OPLI2CfHMlfxiG8NlT+sPU/0 g5bIRjLeFPu0zCFFqfjBZ+SvUITZtLGOm4cwNKxKHuC4aRcmZvVH729fGgI3ql6++fkkdoDl9KKL RI3XYSF9ac51SM5+8E3igW7VmpvHARn4g5j1h4CLtAtCTUUmWG/A4gMUOlQ0YKxXS1kb3fL8a5dC RlAOfba2N1kKgtHrqd3VhQgVtAyMgIigLKPhFCce38yDfnf9ptpaqKHDs9VTzg1tpCjnO3Top9Kh cG7vZClDXuI/oXnlkLLQUkasjeKGqXwTIIpu3A== ) protonmail.ch. 1200 IN RRSIG ( DNSKEY 8 2 1200 20240605001814 20240505233313 27196 protonmail.ch. kGfDlyuUWzjTdu78BKesc/d+FoDN5evlSYRXmcUzSjAFuy6ZRdH5dIrgXXwJqffROPlu5kuU4gis BxqEpU2QGe4kVV5Bn2MfJickJUkkY/q50Xjq4C03gkii/6y0UAFGZr3+RtWwb8sXgPEhs+YjfbOM qTZxFgZE6zmlnqjyPYcTeDKqaEOwf3Lt5y4zYcFu40Lt7sKY8db0zQBAIe+CH262FrfkxhYhJDtl vd+9Hs2VtT0A/zq7OA1lN3/IC6ya74B2fskd4hJJbrqIF8pv9fhJUpDiw37tRU0LBJTfoecfeECn w8u/f5GMqXNZHmfH88XUfqAhhCGO2A7NAcC0MzM0We4HwEgVmqVAeO6gACMLagqCoSsg35BXjGcR 46jMbCDR/uEsqb5LNfKGO3vJ3hdSilCiDEbJnC7e9WBhk54oSHU/f9FdBk/JoOYc12NaXWqZL07u CIGD15DtznhMysoHbZc5lI3C0i+7F/VBoP2hCRaJNvRFl4eV0CHd81KYjDaVovqkuho38geMLWJy 1aNvpTS2iJGymAQ9Oe/vkKdCUxeXwFysZxiIkKSD48AagqIV3Afr0lWYmCuJhRzpvx1sV3Iv8PkY Q8d0N4uZ7xlNhhyCxIl3BxHwMvgp0cEACzwiL+rQNF0qHAA4zK7DUPoY83iIPxtaTt/3vQQQzSI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for protonmail.ch
	`protonmail.ch. 1200 IN DNSKEY ( 256 3 8 AwEAAbkQec8erGeyr6RAOEFWOvCDiN1IPb265vqwFEqPRaGh64dVe8mTZ8xFAJm0QKPqfrso2GNF tlM13eZgpYpWgdTVIz3EyafRb+nKvrqC5gLzbzPl96681L8MejLoCr66awxwWaQC4Na6W1XNcUXq tA/yCOfMW5+JyuClL8KP/SWBo0+TdXytqnaKzWfFH0Mg7ucmH/LZx6mR3lLu8kzTIEOL13Z9D1Ay EJ1IlMqR2E3zE6FzsgLP+pJi0Ztw4MrnFyWAJROk54SexNSAcKl/D4uTl+zNMVNfR+Pug0sD4Pjx u9xyRnPRxTlcISgXsO8VYh3AV9x20wekhFYeBn0WHWk= ) ; Key ID = 6753`
	protonmail.ch. 1200 IN DNSKEY ( 257 3 8 AwEAAd6b3gYWrIsnj3gfzy42lKvoFE59bEC1+5KUScM41cEISCg4cNlPLBGWgpTCI+G8ijzkYWJ8 bmUkBrkYGVuH3P09I8uznwWF5HJNgxqkDUQ9V+v0pxVHJGRmgAAnClSa1pSJm6Rb9n11eflk0ZYT 7flMrd8/ou8tRrIv7YrSl6vmGGQxiBWs6mFEIosVT0+3CRnH/g0K6NJB2LLSH73bVFUhJ0SepihI U8r8rBl1k2xwOC3BZ5ZLWroZFlvUUbDPJzsJsmwWL8VSLVWAwhIbEOnI9v89X6ci1D0W+Prmdbuu FMwglVzgksCRES9YlEwP/uRRCrZldL2iqS1TVBnDAQTMqT9oR9UrE5Fj7g/3ZUrtw+111RbJzQgy 37/0h6KDXAjhr20DZ9X/eCbVGNhwJzWRhAAOtMhxWw4EsjYaIEDJO/rqYRkpiD3GV6RwdYNU+cCC xq6u/xfebzR0kFJTmVl223+t2LNTFG4jH8aa0rs3ve2YJGJ55e61ttdYHOWCG+bsdxrI4EMIRH2R ZX/ExDcduO2ntgfG5oV5o/gTeXk/RnTq2G2taGDcNeRH8bv6ywtsID4szx6ZmIx9O4Zu82RgrVoP lJh+vCJ2CrptGU9rOs3/jqtu7azP0kLgzN+BIsUIHDuBkeH0F1kGOi4htefAuqsvocBObeBaBDji epsv ) ; Key ID = 27196
	DNSKEY=27196/SEP is now in the chain-of-trust
	DS=27196/SHA-384 verifies DNSKEY=27196/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`protonmail.ch. 1200 IN RRSIG ( DNSKEY 8 2 1200 20240605001814 20240505233313 6753 protonmail.ch. s7aeax6dwba1wViPpZatdwUh8Zt7Dp4OO1qfsMjIigwDXXGguwG8OPLI2CfHMlfxiG8NlT+sPU/0 g5bIRjLeFPu0zCFFqfjBZ+SvUITZtLGOm4cwNKxKHuC4aRcmZvVH729fGgI3ql6++fkkdoDl9KKL RI3XYSF9ac51SM5+8E3igW7VmpvHARn4g5j1h4CLtAtCTUUmWG/A4gMUOlQ0YKxXS1kb3fL8a5dC RlAOfba2N1kKgtHrqd3VhQgVtAyMgIigLKPhFCce38yDfnf9ptpaqKHDs9VTzg1tpCjnO3Top9Kh cG7vZClDXuI/oXnlkLLQUkasjeKGqXwTIIpu3A== )`
	protonmail.ch. 1200 IN RRSIG ( DNSKEY 8 2 1200 20240605001814 20240505233313 27196 protonmail.ch. kGfDlyuUWzjTdu78BKesc/d+FoDN5evlSYRXmcUzSjAFuy6ZRdH5dIrgXXwJqffROPlu5kuU4gis BxqEpU2QGe4kVV5Bn2MfJickJUkkY/q50Xjq4C03gkii/6y0UAFGZr3+RtWwb8sXgPEhs+YjfbOM qTZxFgZE6zmlnqjyPYcTeDKqaEOwf3Lt5y4zYcFu40Lt7sKY8db0zQBAIe+CH262FrfkxhYhJDtl vd+9Hs2VtT0A/zq7OA1lN3/IC6ya74B2fskd4hJJbrqIF8pv9fhJUpDiw37tRU0LBJTfoecfeECn w8u/f5GMqXNZHmfH88XUfqAhhCGO2A7NAcC0MzM0We4HwEgVmqVAeO6gACMLagqCoSsg35BXjGcR 46jMbCDR/uEsqb5LNfKGO3vJ3hdSilCiDEbJnC7e9WBhk54oSHU/f9FdBk/JoOYc12NaXWqZL07u CIGD15DtznhMysoHbZc5lI3C0i+7F/VBoP2hCRaJNvRFl4eV0CHd81KYjDaVovqkuho38geMLWJy 1aNvpTS2iJGymAQ9Oe/vkKdCUxeXwFysZxiIkKSD48AagqIV3Afr0lWYmCuJhRzpvx1sV3Iv8PkY Q8d0N4uZ7xlNhhyCxIl3BxHwMvgp0cEACzwiL+rQNF0qHAA4zK7DUPoY83iIPxtaTt/3vQQQzSI= )
	RRSIG=6753 and DNSKEY=6753 verifies the DNSKEY RRset
	RRSIG=27196 and DNSKEY=27196/SEP verifies the DNSKEY RRset
	DNSKEY=6753 is now in the chain-of-trust
	Query to ns1.protonmail.ch for protonmail.ch/A
	Received 1063 bytes from 185.70.42.150
	;; Response received from [185.70.42.150] 1063 octets ;; HEADER SECTION ;; id = 13791 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; protonmail.ch. IN A ;; ANSWER SECTION (2 records) protonmail.ch. 1200 IN A 185.70.42.21 protonmail.ch. 1200 IN RRSIG ( A 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. ZjG8uzxIlp66fbfoFYJhtrSnRVv64TtfVv57Go+jn45S4JzQXtE2FLx2oHdS0wh9Ni8CbwodybhP SQ8JWOQ/+yS1FMqwm4h2+JZPdDIgkEeKB+yFmAdWDB1a7gzj1f2YRhMDvpg9nul+JKWhvrVlnNv9 dwu41N+yT7KS23Gcoeyz25B5+A1HeknMbhGprjBF+JaP0UKgJTXoIyHoUTzUxx+0kHOARpyV/9xk jfp9RP6gJeTFqO7otVSyX/YZH9CRxtMoHncJjd0qSpcJFJKV2LGuyro+IStmhRjD4bFXxsxULpVX FsAeAE/jsA1wO2+TCf9EwWocNAIKv0nJohDGoQ== ) ;; AUTHORITY SECTION (4 records) protonmail.ch. 1200 IN NS ns2.protonmail.ch. protonmail.ch. 1200 IN NS ns3.protonmail.ch. protonmail.ch. 1200 IN NS ns1.protonmail.ch. protonmail.ch. 1200 IN RRSIG ( NS 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. HArApTKHsBqxA43U8NpiuD88vpmTgYEIuaD68/QY2Ly8ynrEx6m8Z4dwKAnrp87ZbQoC9NaezI1o QPctjKG6Ac/TV5xa/DTFreNVvadbb9ZNv1ySKt426uSP5SoDeBZVLM7UtUj2KvOEyJ4LQ/A1/j34 ZXcHouJdng5kbPrNNPlq9bsN64losr5r92brjgtL3Vhp+YyHLbfDuH+3TJFPYRAgaX5QGJiJUDTP rpr12nHtRiWAiyijHFeWIvtfLge04blfZkKmzZ26RSiQqnzb6GN03ob2lUT46hgjqnLaQVm9LCQY vZ8CQdg7I1GfLPQgzNzygAk2kqxeqO+NFFefMw== ) ;; ADDITIONAL SECTION (5 records) ns1.protonmail.ch. 1200 IN A 185.70.42.150 ns2.protonmail.ch. 1200 IN A 176.119.200.150 ns3.protonmail.ch. 1200 IN A 205.132.47.1 ns1.protonmail.ch. 1200 IN RRSIG ( A 8 3 1200 20240603024318 20240504022140 6753 protonmail.ch. Ylhl/Pz/13OK8Uux2++7FrbZAfOsaDPH0eQ5FVpvSHsoGnFHi1rCPtrpMOEn/LcUI3plvgAoKTtf 8teLbnFsLADjCMxiLO6s5uyIxPAxb0rj/OrOmrAyUHVTd7R2iijujUcfi6tpKfe2mkkm9kruDlBl Jp4HqgQY4rDia/e3OvhRrrHnkPvo2DBpLRnd8Sgu7OajqyQ2I3jQD15TLCa41LKn57T2k5JSOkIF VRUos23Z8yjUS4FLwwYcQXf6ujRqZ5BoptRAsZaa56BrQKQzo+R2Lezrw6/fcUjIwX4SGkof5vWJ 1ISLs66IFA+G42d/NmWOmWij7ibb8ObrtE1l0w== ) ;; { "EDNS-VERSION": 0 }
	ns1.protonmail.ch is authoritative for protonmail.ch
	Found RRSIG signed by protonmail.ch zone
	Query to ns2.protonmail.ch for protonmail.ch/SOA
	Received 1091 bytes from 176.119.200.150
	;; Response received from [176.119.200.150] 1091 octets ;; HEADER SECTION ;; id = 5391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; protonmail.ch. IN SOA ;; ANSWER SECTION (2 records) protonmail.ch. 1200 IN SOA ( ns1.protonmail.ch. support.protonmail.ch. 2401162057 ;serial 1200 ;refresh 144 ;retry 1814400 ;expire 7200 ;minimum ) protonmail.ch. 1200 IN RRSIG ( SOA 8 2 1200 20240613222351 20240514212351 6753 protonmail.ch. CT98lFUKxIeTUgrciPnXXjbYgdx2b1j7DKa2VUIFn4nbv3MdnqOGbiXv/LvcFJIguRIZuEjLcktC bHWYq1PgGsUO5tPCDOBnSloSQ8wLLWqtPYrrXJZ3RDlkGX0rcNcSbtCGWuh8LjyAuq5dMw36RwFZ 6DwEbtou/GnrdOLxTp2X4avYqKXrhuF8MI7a8R+lNVwZE1zNspCNIzF0XeTq69b2TrJzTB9kXJBZ vZezChvmU5ZEj66KzMLY0u7raBeHLMNybQSnxSp45Cstw1c9cWBX6agf7DvTdhFkj7Mlpknk3EOy l91sl+TvujcdubIDvDjQcTKXb6eNhMm2JzlcGQ== ) ;; AUTHORITY SECTION (4 records) protonmail.ch. 1200 IN NS ns2.protonmail.ch. protonmail.ch. 1200 IN NS ns1.protonmail.ch. protonmail.ch. 1200 IN NS ns3.protonmail.ch. protonmail.ch. 1200 IN RRSIG ( NS 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. HArApTKHsBqxA43U8NpiuD88vpmTgYEIuaD68/QY2Ly8ynrEx6m8Z4dwKAnrp87ZbQoC9NaezI1o QPctjKG6Ac/TV5xa/DTFreNVvadbb9ZNv1ySKt426uSP5SoDeBZVLM7UtUj2KvOEyJ4LQ/A1/j34 ZXcHouJdng5kbPrNNPlq9bsN64losr5r92brjgtL3Vhp+YyHLbfDuH+3TJFPYRAgaX5QGJiJUDTP rpr12nHtRiWAiyijHFeWIvtfLge04blfZkKmzZ26RSiQqnzb6GN03ob2lUT46hgjqnLaQVm9LCQY vZ8CQdg7I1GfLPQgzNzygAk2kqxeqO+NFFefMw== ) ;; ADDITIONAL SECTION (5 records) ns1.protonmail.ch. 1200 IN A 185.70.42.150 ns2.protonmail.ch. 1200 IN A 176.119.200.150 ns3.protonmail.ch. 1200 IN A 205.132.47.1 ns1.protonmail.ch. 1200 IN RRSIG ( A 8 3 1200 20240603024318 20240504022140 6753 protonmail.ch. Ylhl/Pz/13OK8Uux2++7FrbZAfOsaDPH0eQ5FVpvSHsoGnFHi1rCPtrpMOEn/LcUI3plvgAoKTtf 8teLbnFsLADjCMxiLO6s5uyIxPAxb0rj/OrOmrAyUHVTd7R2iijujUcfi6tpKfe2mkkm9kruDlBl Jp4HqgQY4rDia/e3OvhRrrHnkPvo2DBpLRnd8Sgu7OajqyQ2I3jQD15TLCa41LKn57T2k5JSOkIF VRUos23Z8yjUS4FLwwYcQXf6ujRqZ5BoptRAsZaa56BrQKQzo+R2Lezrw6/fcUjIwX4SGkof5vWJ 1ISLs66IFA+G42d/NmWOmWij7ibb8ObrtE1l0w== ) ;; { "EDNS-VERSION": 0 }
	Query to ns3.protonmail.ch for protonmail.ch/SOA
	Received 1091 bytes from 205.132.47.1
	;; Response received from [205.132.47.1] 1091 octets ;; HEADER SECTION ;; id = 40930 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; protonmail.ch. IN SOA ;; ANSWER SECTION (2 records) protonmail.ch. 1200 IN SOA ( ns1.protonmail.ch. support.protonmail.ch. 2401162057 ;serial 1200 ;refresh 144 ;retry 1814400 ;expire 7200 ;minimum ) protonmail.ch. 1200 IN RRSIG ( SOA 8 2 1200 20240613222351 20240514212351 6753 protonmail.ch. CT98lFUKxIeTUgrciPnXXjbYgdx2b1j7DKa2VUIFn4nbv3MdnqOGbiXv/LvcFJIguRIZuEjLcktC bHWYq1PgGsUO5tPCDOBnSloSQ8wLLWqtPYrrXJZ3RDlkGX0rcNcSbtCGWuh8LjyAuq5dMw36RwFZ 6DwEbtou/GnrdOLxTp2X4avYqKXrhuF8MI7a8R+lNVwZE1zNspCNIzF0XeTq69b2TrJzTB9kXJBZ vZezChvmU5ZEj66KzMLY0u7raBeHLMNybQSnxSp45Cstw1c9cWBX6agf7DvTdhFkj7Mlpknk3EOy l91sl+TvujcdubIDvDjQcTKXb6eNhMm2JzlcGQ== ) ;; AUTHORITY SECTION (4 records) protonmail.ch. 1200 IN NS ns3.protonmail.ch. protonmail.ch. 1200 IN NS ns2.protonmail.ch. protonmail.ch. 1200 IN NS ns1.protonmail.ch. protonmail.ch. 1200 IN RRSIG ( NS 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. HArApTKHsBqxA43U8NpiuD88vpmTgYEIuaD68/QY2Ly8ynrEx6m8Z4dwKAnrp87ZbQoC9NaezI1o QPctjKG6Ac/TV5xa/DTFreNVvadbb9ZNv1ySKt426uSP5SoDeBZVLM7UtUj2KvOEyJ4LQ/A1/j34 ZXcHouJdng5kbPrNNPlq9bsN64losr5r92brjgtL3Vhp+YyHLbfDuH+3TJFPYRAgaX5QGJiJUDTP rpr12nHtRiWAiyijHFeWIvtfLge04blfZkKmzZ26RSiQqnzb6GN03ob2lUT46hgjqnLaQVm9LCQY vZ8CQdg7I1GfLPQgzNzygAk2kqxeqO+NFFefMw== ) ;; ADDITIONAL SECTION (5 records) ns1.protonmail.ch. 1200 IN A 185.70.42.150 ns2.protonmail.ch. 1200 IN A 176.119.200.150 ns3.protonmail.ch. 1200 IN A 205.132.47.1 ns1.protonmail.ch. 1200 IN RRSIG ( A 8 3 1200 20240603024318 20240504022140 6753 protonmail.ch. Ylhl/Pz/13OK8Uux2++7FrbZAfOsaDPH0eQ5FVpvSHsoGnFHi1rCPtrpMOEn/LcUI3plvgAoKTtf 8teLbnFsLADjCMxiLO6s5uyIxPAxb0rj/OrOmrAyUHVTd7R2iijujUcfi6tpKfe2mkkm9kruDlBl Jp4HqgQY4rDia/e3OvhRrrHnkPvo2DBpLRnd8Sgu7OajqyQ2I3jQD15TLCa41LKn57T2k5JSOkIF VRUos23Z8yjUS4FLwwYcQXf6ujRqZ5BoptRAsZaa56BrQKQzo+R2Lezrw6/fcUjIwX4SGkof5vWJ 1ISLs66IFA+G42d/NmWOmWij7ibb8ObrtE1l0w== ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.protonmail.ch for protonmail.ch/A
	Received 1063 bytes from 185.70.42.150
	;; Response received from [185.70.42.150] 1063 octets ;; HEADER SECTION ;; id = 41941 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; protonmail.ch. IN A ;; ANSWER SECTION (2 records) protonmail.ch. 1200 IN A 185.70.42.21 protonmail.ch. 1200 IN RRSIG ( A 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. ZjG8uzxIlp66fbfoFYJhtrSnRVv64TtfVv57Go+jn45S4JzQXtE2FLx2oHdS0wh9Ni8CbwodybhP SQ8JWOQ/+yS1FMqwm4h2+JZPdDIgkEeKB+yFmAdWDB1a7gzj1f2YRhMDvpg9nul+JKWhvrVlnNv9 dwu41N+yT7KS23Gcoeyz25B5+A1HeknMbhGprjBF+JaP0UKgJTXoIyHoUTzUxx+0kHOARpyV/9xk jfp9RP6gJeTFqO7otVSyX/YZH9CRxtMoHncJjd0qSpcJFJKV2LGuyro+IStmhRjD4bFXxsxULpVX FsAeAE/jsA1wO2+TCf9EwWocNAIKv0nJohDGoQ== ) ;; AUTHORITY SECTION (4 records) protonmail.ch. 1200 IN NS ns1.protonmail.ch. protonmail.ch. 1200 IN NS ns3.protonmail.ch. protonmail.ch. 1200 IN NS ns2.protonmail.ch. protonmail.ch. 1200 IN RRSIG ( NS 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. HArApTKHsBqxA43U8NpiuD88vpmTgYEIuaD68/QY2Ly8ynrEx6m8Z4dwKAnrp87ZbQoC9NaezI1o QPctjKG6Ac/TV5xa/DTFreNVvadbb9ZNv1ySKt426uSP5SoDeBZVLM7UtUj2KvOEyJ4LQ/A1/j34 ZXcHouJdng5kbPrNNPlq9bsN64losr5r92brjgtL3Vhp+YyHLbfDuH+3TJFPYRAgaX5QGJiJUDTP rpr12nHtRiWAiyijHFeWIvtfLge04blfZkKmzZ26RSiQqnzb6GN03ob2lUT46hgjqnLaQVm9LCQY vZ8CQdg7I1GfLPQgzNzygAk2kqxeqO+NFFefMw== ) ;; ADDITIONAL SECTION (5 records) ns1.protonmail.ch. 1200 IN A 185.70.42.150 ns2.protonmail.ch. 1200 IN A 176.119.200.150 ns3.protonmail.ch. 1200 IN A 205.132.47.1 ns1.protonmail.ch. 1200 IN RRSIG ( A 8 3 1200 20240603024318 20240504022140 6753 protonmail.ch. Ylhl/Pz/13OK8Uux2++7FrbZAfOsaDPH0eQ5FVpvSHsoGnFHi1rCPtrpMOEn/LcUI3plvgAoKTtf 8teLbnFsLADjCMxiLO6s5uyIxPAxb0rj/OrOmrAyUHVTd7R2iijujUcfi6tpKfe2mkkm9kruDlBl Jp4HqgQY4rDia/e3OvhRrrHnkPvo2DBpLRnd8Sgu7OajqyQ2I3jQD15TLCa41LKn57T2k5JSOkIF VRUos23Z8yjUS4FLwwYcQXf6ujRqZ5BoptRAsZaa56BrQKQzo+R2Lezrw6/fcUjIwX4SGkof5vWJ 1ISLs66IFA+G42d/NmWOmWij7ibb8ObrtE1l0w== ) ;; { "EDNS-VERSION": 0 }
	protonmail.ch A RR has value 185.70.42.21
	Found 1 RRSIGs over A RRset
	`protonmail.ch. 1200 IN RRSIG ( A 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. ZjG8uzxIlp66fbfoFYJhtrSnRVv64TtfVv57Go+jn45S4JzQXtE2FLx2oHdS0wh9Ni8CbwodybhP SQ8JWOQ/+yS1FMqwm4h2+JZPdDIgkEeKB+yFmAdWDB1a7gzj1f2YRhMDvpg9nul+JKWhvrVlnNv9 dwu41N+yT7KS23Gcoeyz25B5+A1HeknMbhGprjBF+JaP0UKgJTXoIyHoUTzUxx+0kHOARpyV/9xk jfp9RP6gJeTFqO7otVSyX/YZH9CRxtMoHncJjd0qSpcJFJKV2LGuyro+IStmhRjD4bFXxsxULpVX FsAeAE/jsA1wO2+TCf9EwWocNAIKv0nJohDGoQ== )`
	RRSIG=6753 and DNSKEY=6753 verifies the A RRset

protonmail.ch

	Query to ns3.protonmail.ch for protonmail.ch/A
	Received 1063 bytes from 205.132.47.1
	;; Response received from [205.132.47.1] 1063 octets ;; HEADER SECTION ;; id = 21443 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; protonmail.ch. IN A ;; ANSWER SECTION (2 records) protonmail.ch. 1200 IN A 185.70.42.21 protonmail.ch. 1200 IN RRSIG ( A 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. ZjG8uzxIlp66fbfoFYJhtrSnRVv64TtfVv57Go+jn45S4JzQXtE2FLx2oHdS0wh9Ni8CbwodybhP SQ8JWOQ/+yS1FMqwm4h2+JZPdDIgkEeKB+yFmAdWDB1a7gzj1f2YRhMDvpg9nul+JKWhvrVlnNv9 dwu41N+yT7KS23Gcoeyz25B5+A1HeknMbhGprjBF+JaP0UKgJTXoIyHoUTzUxx+0kHOARpyV/9xk jfp9RP6gJeTFqO7otVSyX/YZH9CRxtMoHncJjd0qSpcJFJKV2LGuyro+IStmhRjD4bFXxsxULpVX FsAeAE/jsA1wO2+TCf9EwWocNAIKv0nJohDGoQ== ) ;; AUTHORITY SECTION (4 records) protonmail.ch. 1200 IN NS ns3.protonmail.ch. protonmail.ch. 1200 IN NS ns2.protonmail.ch. protonmail.ch. 1200 IN NS ns1.protonmail.ch. protonmail.ch. 1200 IN RRSIG ( NS 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. HArApTKHsBqxA43U8NpiuD88vpmTgYEIuaD68/QY2Ly8ynrEx6m8Z4dwKAnrp87ZbQoC9NaezI1o QPctjKG6Ac/TV5xa/DTFreNVvadbb9ZNv1ySKt426uSP5SoDeBZVLM7UtUj2KvOEyJ4LQ/A1/j34 ZXcHouJdng5kbPrNNPlq9bsN64losr5r92brjgtL3Vhp+YyHLbfDuH+3TJFPYRAgaX5QGJiJUDTP rpr12nHtRiWAiyijHFeWIvtfLge04blfZkKmzZ26RSiQqnzb6GN03ob2lUT46hgjqnLaQVm9LCQY vZ8CQdg7I1GfLPQgzNzygAk2kqxeqO+NFFefMw== ) ;; ADDITIONAL SECTION (5 records) ns1.protonmail.ch. 1200 IN A 185.70.42.150 ns2.protonmail.ch. 1200 IN A 176.119.200.150 ns3.protonmail.ch. 1200 IN A 205.132.47.1 ns1.protonmail.ch. 1200 IN RRSIG ( A 8 3 1200 20240603024318 20240504022140 6753 protonmail.ch. Ylhl/Pz/13OK8Uux2++7FrbZAfOsaDPH0eQ5FVpvSHsoGnFHi1rCPtrpMOEn/LcUI3plvgAoKTtf 8teLbnFsLADjCMxiLO6s5uyIxPAxb0rj/OrOmrAyUHVTd7R2iijujUcfi6tpKfe2mkkm9kruDlBl Jp4HqgQY4rDia/e3OvhRrrHnkPvo2DBpLRnd8Sgu7OajqyQ2I3jQD15TLCa41LKn57T2k5JSOkIF VRUos23Z8yjUS4FLwwYcQXf6ujRqZ5BoptRAsZaa56BrQKQzo+R2Lezrw6/fcUjIwX4SGkof5vWJ 1ISLs66IFA+G42d/NmWOmWij7ibb8ObrtE1l0w== ) ;; { "EDNS-VERSION": 0 }
	ns3.protonmail.ch is authoritative for protonmail.ch
	Found RRSIG signed by protonmail.ch zone
	Query to ns3.protonmail.ch for protonmail.ch/A
	Received 1063 bytes from 205.132.47.1
	;; Response received from [205.132.47.1] 1063 octets ;; HEADER SECTION ;; id = 19374 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; protonmail.ch. IN A ;; ANSWER SECTION (2 records) protonmail.ch. 1200 IN A 185.70.42.21 protonmail.ch. 1200 IN RRSIG ( A 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. ZjG8uzxIlp66fbfoFYJhtrSnRVv64TtfVv57Go+jn45S4JzQXtE2FLx2oHdS0wh9Ni8CbwodybhP SQ8JWOQ/+yS1FMqwm4h2+JZPdDIgkEeKB+yFmAdWDB1a7gzj1f2YRhMDvpg9nul+JKWhvrVlnNv9 dwu41N+yT7KS23Gcoeyz25B5+A1HeknMbhGprjBF+JaP0UKgJTXoIyHoUTzUxx+0kHOARpyV/9xk jfp9RP6gJeTFqO7otVSyX/YZH9CRxtMoHncJjd0qSpcJFJKV2LGuyro+IStmhRjD4bFXxsxULpVX FsAeAE/jsA1wO2+TCf9EwWocNAIKv0nJohDGoQ== ) ;; AUTHORITY SECTION (4 records) protonmail.ch. 1200 IN NS ns1.protonmail.ch. protonmail.ch. 1200 IN NS ns3.protonmail.ch. protonmail.ch. 1200 IN NS ns2.protonmail.ch. protonmail.ch. 1200 IN RRSIG ( NS 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. HArApTKHsBqxA43U8NpiuD88vpmTgYEIuaD68/QY2Ly8ynrEx6m8Z4dwKAnrp87ZbQoC9NaezI1o QPctjKG6Ac/TV5xa/DTFreNVvadbb9ZNv1ySKt426uSP5SoDeBZVLM7UtUj2KvOEyJ4LQ/A1/j34 ZXcHouJdng5kbPrNNPlq9bsN64losr5r92brjgtL3Vhp+YyHLbfDuH+3TJFPYRAgaX5QGJiJUDTP rpr12nHtRiWAiyijHFeWIvtfLge04blfZkKmzZ26RSiQqnzb6GN03ob2lUT46hgjqnLaQVm9LCQY vZ8CQdg7I1GfLPQgzNzygAk2kqxeqO+NFFefMw== ) ;; ADDITIONAL SECTION (5 records) ns1.protonmail.ch. 1200 IN A 185.70.42.150 ns2.protonmail.ch. 1200 IN A 176.119.200.150 ns3.protonmail.ch. 1200 IN A 205.132.47.1 ns1.protonmail.ch. 1200 IN RRSIG ( A 8 3 1200 20240603024318 20240504022140 6753 protonmail.ch. Ylhl/Pz/13OK8Uux2++7FrbZAfOsaDPH0eQ5FVpvSHsoGnFHi1rCPtrpMOEn/LcUI3plvgAoKTtf 8teLbnFsLADjCMxiLO6s5uyIxPAxb0rj/OrOmrAyUHVTd7R2iijujUcfi6tpKfe2mkkm9kruDlBl Jp4HqgQY4rDia/e3OvhRrrHnkPvo2DBpLRnd8Sgu7OajqyQ2I3jQD15TLCa41LKn57T2k5JSOkIF VRUos23Z8yjUS4FLwwYcQXf6ujRqZ5BoptRAsZaa56BrQKQzo+R2Lezrw6/fcUjIwX4SGkof5vWJ 1ISLs66IFA+G42d/NmWOmWij7ibb8ObrtE1l0w== ) ;; { "EDNS-VERSION": 0 }
	protonmail.ch A RR has value 185.70.42.21
	Found 1 RRSIGs over A RRset
	`protonmail.ch. 1200 IN RRSIG ( A 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. ZjG8uzxIlp66fbfoFYJhtrSnRVv64TtfVv57Go+jn45S4JzQXtE2FLx2oHdS0wh9Ni8CbwodybhP SQ8JWOQ/+yS1FMqwm4h2+JZPdDIgkEeKB+yFmAdWDB1a7gzj1f2YRhMDvpg9nul+JKWhvrVlnNv9 dwu41N+yT7KS23Gcoeyz25B5+A1HeknMbhGprjBF+JaP0UKgJTXoIyHoUTzUxx+0kHOARpyV/9xk jfp9RP6gJeTFqO7otVSyX/YZH9CRxtMoHncJjd0qSpcJFJKV2LGuyro+IStmhRjD4bFXxsxULpVX FsAeAE/jsA1wO2+TCf9EwWocNAIKv0nJohDGoQ== )`
	RRSIG=6753 and DNSKEY=6753 verifies the A RRset

protonmail.ch

	Query to ns2.protonmail.ch for protonmail.ch/A
	Received 1063 bytes from 176.119.200.150
	;; Response received from [176.119.200.150] 1063 octets ;; HEADER SECTION ;; id = 46315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; protonmail.ch. IN A ;; ANSWER SECTION (2 records) protonmail.ch. 1200 IN A 185.70.42.21 protonmail.ch. 1200 IN RRSIG ( A 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. ZjG8uzxIlp66fbfoFYJhtrSnRVv64TtfVv57Go+jn45S4JzQXtE2FLx2oHdS0wh9Ni8CbwodybhP SQ8JWOQ/+yS1FMqwm4h2+JZPdDIgkEeKB+yFmAdWDB1a7gzj1f2YRhMDvpg9nul+JKWhvrVlnNv9 dwu41N+yT7KS23Gcoeyz25B5+A1HeknMbhGprjBF+JaP0UKgJTXoIyHoUTzUxx+0kHOARpyV/9xk jfp9RP6gJeTFqO7otVSyX/YZH9CRxtMoHncJjd0qSpcJFJKV2LGuyro+IStmhRjD4bFXxsxULpVX FsAeAE/jsA1wO2+TCf9EwWocNAIKv0nJohDGoQ== ) ;; AUTHORITY SECTION (4 records) protonmail.ch. 1200 IN NS ns2.protonmail.ch. protonmail.ch. 1200 IN NS ns1.protonmail.ch. protonmail.ch. 1200 IN NS ns3.protonmail.ch. protonmail.ch. 1200 IN RRSIG ( NS 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. HArApTKHsBqxA43U8NpiuD88vpmTgYEIuaD68/QY2Ly8ynrEx6m8Z4dwKAnrp87ZbQoC9NaezI1o QPctjKG6Ac/TV5xa/DTFreNVvadbb9ZNv1ySKt426uSP5SoDeBZVLM7UtUj2KvOEyJ4LQ/A1/j34 ZXcHouJdng5kbPrNNPlq9bsN64losr5r92brjgtL3Vhp+YyHLbfDuH+3TJFPYRAgaX5QGJiJUDTP rpr12nHtRiWAiyijHFeWIvtfLge04blfZkKmzZ26RSiQqnzb6GN03ob2lUT46hgjqnLaQVm9LCQY vZ8CQdg7I1GfLPQgzNzygAk2kqxeqO+NFFefMw== ) ;; ADDITIONAL SECTION (5 records) ns1.protonmail.ch. 1200 IN A 185.70.42.150 ns2.protonmail.ch. 1200 IN A 176.119.200.150 ns3.protonmail.ch. 1200 IN A 205.132.47.1 ns1.protonmail.ch. 1200 IN RRSIG ( A 8 3 1200 20240603024318 20240504022140 6753 protonmail.ch. Ylhl/Pz/13OK8Uux2++7FrbZAfOsaDPH0eQ5FVpvSHsoGnFHi1rCPtrpMOEn/LcUI3plvgAoKTtf 8teLbnFsLADjCMxiLO6s5uyIxPAxb0rj/OrOmrAyUHVTd7R2iijujUcfi6tpKfe2mkkm9kruDlBl Jp4HqgQY4rDia/e3OvhRrrHnkPvo2DBpLRnd8Sgu7OajqyQ2I3jQD15TLCa41LKn57T2k5JSOkIF VRUos23Z8yjUS4FLwwYcQXf6ujRqZ5BoptRAsZaa56BrQKQzo+R2Lezrw6/fcUjIwX4SGkof5vWJ 1ISLs66IFA+G42d/NmWOmWij7ibb8ObrtE1l0w== ) ;; { "EDNS-VERSION": 0 }
	ns2.protonmail.ch is authoritative for protonmail.ch
	Found RRSIG signed by protonmail.ch zone
	Query to ns2.protonmail.ch for protonmail.ch/A
	Received 1063 bytes from 176.119.200.150
	;; Response received from [176.119.200.150] 1063 octets ;; HEADER SECTION ;; id = 3641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; protonmail.ch. IN A ;; ANSWER SECTION (2 records) protonmail.ch. 1200 IN A 185.70.42.21 protonmail.ch. 1200 IN RRSIG ( A 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. ZjG8uzxIlp66fbfoFYJhtrSnRVv64TtfVv57Go+jn45S4JzQXtE2FLx2oHdS0wh9Ni8CbwodybhP SQ8JWOQ/+yS1FMqwm4h2+JZPdDIgkEeKB+yFmAdWDB1a7gzj1f2YRhMDvpg9nul+JKWhvrVlnNv9 dwu41N+yT7KS23Gcoeyz25B5+A1HeknMbhGprjBF+JaP0UKgJTXoIyHoUTzUxx+0kHOARpyV/9xk jfp9RP6gJeTFqO7otVSyX/YZH9CRxtMoHncJjd0qSpcJFJKV2LGuyro+IStmhRjD4bFXxsxULpVX FsAeAE/jsA1wO2+TCf9EwWocNAIKv0nJohDGoQ== ) ;; AUTHORITY SECTION (4 records) protonmail.ch. 1200 IN NS ns1.protonmail.ch. protonmail.ch. 1200 IN NS ns3.protonmail.ch. protonmail.ch. 1200 IN NS ns2.protonmail.ch. protonmail.ch. 1200 IN RRSIG ( NS 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. HArApTKHsBqxA43U8NpiuD88vpmTgYEIuaD68/QY2Ly8ynrEx6m8Z4dwKAnrp87ZbQoC9NaezI1o QPctjKG6Ac/TV5xa/DTFreNVvadbb9ZNv1ySKt426uSP5SoDeBZVLM7UtUj2KvOEyJ4LQ/A1/j34 ZXcHouJdng5kbPrNNPlq9bsN64losr5r92brjgtL3Vhp+YyHLbfDuH+3TJFPYRAgaX5QGJiJUDTP rpr12nHtRiWAiyijHFeWIvtfLge04blfZkKmzZ26RSiQqnzb6GN03ob2lUT46hgjqnLaQVm9LCQY vZ8CQdg7I1GfLPQgzNzygAk2kqxeqO+NFFefMw== ) ;; ADDITIONAL SECTION (5 records) ns1.protonmail.ch. 1200 IN A 185.70.42.150 ns2.protonmail.ch. 1200 IN A 176.119.200.150 ns3.protonmail.ch. 1200 IN A 205.132.47.1 ns1.protonmail.ch. 1200 IN RRSIG ( A 8 3 1200 20240603024318 20240504022140 6753 protonmail.ch. Ylhl/Pz/13OK8Uux2++7FrbZAfOsaDPH0eQ5FVpvSHsoGnFHi1rCPtrpMOEn/LcUI3plvgAoKTtf 8teLbnFsLADjCMxiLO6s5uyIxPAxb0rj/OrOmrAyUHVTd7R2iijujUcfi6tpKfe2mkkm9kruDlBl Jp4HqgQY4rDia/e3OvhRrrHnkPvo2DBpLRnd8Sgu7OajqyQ2I3jQD15TLCa41LKn57T2k5JSOkIF VRUos23Z8yjUS4FLwwYcQXf6ujRqZ5BoptRAsZaa56BrQKQzo+R2Lezrw6/fcUjIwX4SGkof5vWJ 1ISLs66IFA+G42d/NmWOmWij7ibb8ObrtE1l0w== ) ;; { "EDNS-VERSION": 0 }
	protonmail.ch A RR has value 185.70.42.21
	Found 1 RRSIGs over A RRset
	`protonmail.ch. 1200 IN RRSIG ( A 8 2 1200 20240604212048 20240505205343 6753 protonmail.ch. ZjG8uzxIlp66fbfoFYJhtrSnRVv64TtfVv57Go+jn45S4JzQXtE2FLx2oHdS0wh9Ni8CbwodybhP SQ8JWOQ/+yS1FMqwm4h2+JZPdDIgkEeKB+yFmAdWDB1a7gzj1f2YRhMDvpg9nul+JKWhvrVlnNv9 dwu41N+yT7KS23Gcoeyz25B5+A1HeknMbhGprjBF+JaP0UKgJTXoIyHoUTzUxx+0kHOARpyV/9xk jfp9RP6gJeTFqO7otVSyX/YZH9CRxtMoHncJjd0qSpcJFJKV2LGuyro+IStmhRjD4bFXxsxULpVX FsAeAE/jsA1wO2+TCf9EwWocNAIKv0nJohDGoQ== )`
	RRSIG=6753 and DNSKEY=6753 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test protonmail.ch at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: