DNSSEC Debugger - riecis.nl

Domain Name:

Time: 2024-05-19 06:59:30 UTC

Analyzing DNSSEC problems for riecis.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 864 octets ;; HEADER SECTION ;; id = 40304 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to g.root-servers.net for riecis.nl/A
	Received 565 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 565 octets ;; HEADER SECTION ;; id = 23073 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns4.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns1.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . gegrG0ejNdS0wqEKAlIAZ3qZCVKTk7913MNMOOS5Exu6wMHjA/dAat9VIFWWkXLsbiQ9xzUqzQhO fGikTz3HhMwt0dEjTTsAlfe2krFtRhHBVyGij2uoeP6Kqyoe9/h9yhOJ7GBhWPDnl1TI1lYPm20w vllJuKqnEE54qcJyHsNG/TVQ7u+FSpsifkFyFwuVw+L3lKAWKyj4T4ihsFXZCFTMACT8wtTJwrZB MPBlIhrrQCEIyNL1/A+b9TPYruLiw/2q2t76q0F5EYPM0ibc/A1bhaLn+OINDp+3XXFoFyOqScsq q4K+p7aFvrmTUgEYgaWiZ035CkmOI2zwIrH5Rg== ) ;; ADDITIONAL SECTION (7 records) ns4.dns.nl. 172800 IN A 185.159.199.200 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN A 194.0.28.53 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for nl/DNSKEY
	Received 556 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 556 octets ;; HEADER SECTION ;; id = 51066 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . gegrG0ejNdS0wqEKAlIAZ3qZCVKTk7913MNMOOS5Exu6wMHjA/dAat9VIFWWkXLsbiQ9xzUqzQhO fGikTz3HhMwt0dEjTTsAlfe2krFtRhHBVyGij2uoeP6Kqyoe9/h9yhOJ7GBhWPDnl1TI1lYPm20w vllJuKqnEE54qcJyHsNG/TVQ7u+FSpsifkFyFwuVw+L3lKAWKyj4T4ihsFXZCFTMACT8wtTJwrZB MPBlIhrrQCEIyNL1/A+b9TPYruLiw/2q2t76q0F5EYPM0ibc/A1bhaLn+OINDp+3XXFoFyOqScsq q4K+p7aFvrmTUgEYgaWiZ035CkmOI2zwIrH5Rg== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Found child zone nl

	Checking DS between . and nl
	Query to i.root-servers.net for nl/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 13024 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . gegrG0ejNdS0wqEKAlIAZ3qZCVKTk7913MNMOOS5Exu6wMHjA/dAat9VIFWWkXLsbiQ9xzUqzQhO fGikTz3HhMwt0dEjTTsAlfe2krFtRhHBVyGij2uoeP6Kqyoe9/h9yhOJ7GBhWPDnl1TI1lYPm20w vllJuKqnEE54qcJyHsNG/TVQ7u+FSpsifkFyFwuVw+L3lKAWKyj4T4ihsFXZCFTMACT8wtTJwrZB MPBlIhrrQCEIyNL1/A+b9TPYruLiw/2q2t76q0F5EYPM0ibc/A1bhaLn+OINDp+3XXFoFyOqScsq q4K+p7aFvrmTUgEYgaWiZ035CkmOI2zwIrH5Rg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nl in the . zone
	DS=17153/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . gegrG0ejNdS0wqEKAlIAZ3qZCVKTk7913MNMOOS5Exu6wMHjA/dAat9VIFWWkXLsbiQ9xzUqzQhO fGikTz3HhMwt0dEjTTsAlfe2krFtRhHBVyGij2uoeP6Kqyoe9/h9yhOJ7GBhWPDnl1TI1lYPm20w vllJuKqnEE54qcJyHsNG/TVQ7u+FSpsifkFyFwuVw+L3lKAWKyj4T4ihsFXZCFTMACT8wtTJwrZB MPBlIhrrQCEIyNL1/A+b9TPYruLiw/2q2t76q0F5EYPM0ibc/A1bhaLn+OINDp+3XXFoFyOqScsq q4K+p7aFvrmTUgEYgaWiZ035CkmOI2zwIrH5Rg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=17153/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 )`
	Query to ns3.dns.nl for nl/DNSKEY
	Received 289 bytes from 194.0.25.24
	;; Response received from [194.0.25.24] 289 octets ;; HEADER SECTION ;; id = 27993 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 256 3 13 8w2Kzk5wKvHFpQzhZxuVey/zCdxgg1gVtRSoK+UiGVlAGtHKFYvJC6yLx3qrv3db3reYGCVqc2+X lCStE+x3yg== ) ; Key ID = 63436 nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; Key ID = 17153 nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240527193820 20240513230840 17153 nl. CMGe1MnMl3A5IRzO6fUNruvFMAzAdmpe2EvOJU7RtbPuzTdqT3XApOrLO6YlKiMeyfCkWom8bvyX r53tkQi+yw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 13 8w2Kzk5wKvHFpQzhZxuVey/zCdxgg1gVtRSoK+UiGVlAGtHKFYvJC6yLx3qrv3db3reYGCVqc2+X lCStE+x3yg== ) ; Key ID = 63436`
	`nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; Key ID = 17153`
	DNSKEY=17153/SEP is now in the chain-of-trust
	DS=17153/SHA-256 verifies DNSKEY=17153/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240527193820 20240513230840 17153 nl. CMGe1MnMl3A5IRzO6fUNruvFMAzAdmpe2EvOJU7RtbPuzTdqT3XApOrLO6YlKiMeyfCkWom8bvyX r53tkQi+yw== )`
	RRSIG=17153 and DNSKEY=17153/SEP verifies the DNSKEY RRset
	DNSKEY=63436 is now in the chain-of-trust
	Query to ns1.dns.nl for riecis.nl/A
	Received 315 bytes from 194.0.28.53
	;; Response received from [194.0.28.53] 315 octets ;; HEADER SECTION ;; id = 7776 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) riecis.nl. 3600 IN NS a3-65.akam.net. riecis.nl. 3600 IN NS a4-66.akam.net. riecis.nl. 3600 IN NS a9-65.akam.net. riecis.nl. 3600 IN NS a1-157.akam.net. riecis.nl. 3600 IN NS a10-65.akam.net. riecis.nl. 3600 IN NS a28-64.akam.net. riecis.nl. 3600 IN DS ( 6327 13 2 9a87864137a31554745b116172c1a0ae35188d1605957714500657d53ae28284 ) riecis.nl. 3600 IN RRSIG ( DS 13 2 3600 20240601233138 20240518210825 63436 nl. 95FWa4G4DDll78kf4c0BK+8nmCyTnPvqWEYf+xIJH5pG07lOTjUYg7pbDTg7hg2QaCHM+BT8+aRt Vo5jTElkGQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.dns.nl for riecis.nl/DNSKEY
	Received 315 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 315 octets ;; HEADER SECTION ;; id = 7455 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) riecis.nl. 3600 IN NS a3-65.akam.net. riecis.nl. 3600 IN NS a4-66.akam.net. riecis.nl. 3600 IN NS a9-65.akam.net. riecis.nl. 3600 IN NS a1-157.akam.net. riecis.nl. 3600 IN NS a10-65.akam.net. riecis.nl. 3600 IN NS a28-64.akam.net. riecis.nl. 3600 IN DS ( 6327 13 2 9a87864137a31554745b116172c1a0ae35188d1605957714500657d53ae28284 ) riecis.nl. 3600 IN RRSIG ( DS 13 2 3600 20240601233138 20240518210825 63436 nl. 95FWa4G4DDll78kf4c0BK+8nmCyTnPvqWEYf+xIJH5pG07lOTjUYg7pbDTg7hg2QaCHM+BT8+aRt Vo5jTElkGQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone riecis.nl

riecis.nl

	Checking DS between nl and riecis.nl
	Query to ns3.dns.nl for riecis.nl/DS
	Received 184 bytes from 194.0.25.24
	;; Response received from [194.0.25.24] 184 octets ;; HEADER SECTION ;; id = 35438 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN DS ;; ANSWER SECTION (2 records) riecis.nl. 3600 IN DS ( 6327 13 2 9a87864137a31554745b116172c1a0ae35188d1605957714500657d53ae28284 ) riecis.nl. 3600 IN RRSIG ( DS 13 2 3600 20240601233138 20240518210825 63436 nl. 95FWa4G4DDll78kf4c0BK+8nmCyTnPvqWEYf+xIJH5pG07lOTjUYg7pbDTg7hg2QaCHM+BT8+aRt Vo5jTElkGQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for riecis.nl in the nl zone
	DS=6327/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`riecis.nl. 3600 IN RRSIG ( DS 13 2 3600 20240601233138 20240518210825 63436 nl. 95FWa4G4DDll78kf4c0BK+8nmCyTnPvqWEYf+xIJH5pG07lOTjUYg7pbDTg7hg2QaCHM+BT8+aRt Vo5jTElkGQ== )`
	RRSIG=63436 and DNSKEY=63436 verifies the DS RRset
	DS=6327/SHA-256 is now in the chain-of-trust
	`riecis.nl. 3600 IN DS ( 6327 13 2 9a87864137a31554745b116172c1a0ae35188d1605957714500657d53ae28284 )`
	Query to a3-65.akam.net for riecis.nl/DNSKEY
	Received 383 bytes from 96.7.49.65
	;; Response received from [96.7.49.65] 383 octets ;; HEADER SECTION ;; id = 56397 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN DNSKEY ;; ANSWER SECTION (4 records) riecis.nl. 7200 IN DNSKEY ( 257 3 13 jL2VCvuDsRdEJRsROrYLBzFKxqg+i78LtgukVFyYNr17vZG5udZxH2gGNGOpYvVNs+CkeBcwRXP4 rzXPuXOtmg== ) ; Key ID = 6327 riecis.nl. 7200 IN DNSKEY ( 256 3 13 tyT+FExb/RibBY6S/LMbUM/GGstSl/MSTET0FMoSeWLzfuROkgP1Pv+X56oBNiv3rWdXbiaiSFL4 W7R6dkV+Kg== ) ; Key ID = 33011 riecis.nl. 7200 IN DNSKEY ( 256 3 13 ublrT5zkohw0AAqI8k7qkqpAUng9LOWBKVD92AsodLO3TNJDVBK2xP9WroPg/heSWoIjsvKwdWhf MRZYCikUWg== ) ; Key ID = 65306 riecis.nl. 7200 IN RRSIG ( DNSKEY 13 2 7200 20240521141043 20240518131043 6327 riecis.nl. PRyK64iIUDmMiniWrvNZh8JaFD7QTmNiZRxQYSLfkJ3KADBOFci47hVJShTog1NLRCWX8Gy+874Z V7/9d5DiyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for riecis.nl
	`riecis.nl. 7200 IN DNSKEY ( 257 3 13 jL2VCvuDsRdEJRsROrYLBzFKxqg+i78LtgukVFyYNr17vZG5udZxH2gGNGOpYvVNs+CkeBcwRXP4 rzXPuXOtmg== ) ; Key ID = 6327`
	`riecis.nl. 7200 IN DNSKEY ( 256 3 13 tyT+FExb/RibBY6S/LMbUM/GGstSl/MSTET0FMoSeWLzfuROkgP1Pv+X56oBNiv3rWdXbiaiSFL4 W7R6dkV+Kg== ) ; Key ID = 33011`
	`riecis.nl. 7200 IN DNSKEY ( 256 3 13 ublrT5zkohw0AAqI8k7qkqpAUng9LOWBKVD92AsodLO3TNJDVBK2xP9WroPg/heSWoIjsvKwdWhf MRZYCikUWg== ) ; Key ID = 65306`
	DNSKEY=6327/SEP is now in the chain-of-trust
	DS=6327/SHA-256 verifies DNSKEY=6327/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`riecis.nl. 7200 IN RRSIG ( DNSKEY 13 2 7200 20240521141043 20240518131043 6327 riecis.nl. PRyK64iIUDmMiniWrvNZh8JaFD7QTmNiZRxQYSLfkJ3KADBOFci47hVJShTog1NLRCWX8Gy+874Z V7/9d5DiyA== )`
	RRSIG=6327 and DNSKEY=6327/SEP verifies the DNSKEY RRset
	DNSKEY=33011 is now in the chain-of-trust
	DNSKEY=65306 is now in the chain-of-trust
	Query to a1-157.akam.net for riecis.nl/A
	Received 159 bytes from 193.108.91.157
	;; Response received from [193.108.91.157] 159 octets ;; HEADER SECTION ;; id = 4391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN A ;; ANSWER SECTION (2 records) riecis.nl. 900 IN A 159.46.204.40 riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-157.akam.net is authoritative for riecis.nl
	Found RRSIG signed by riecis.nl zone
	Query to a9-65.akam.net for riecis.nl/SOA
	Received 426 bytes from 184.85.248.65
	;; Response received from [184.85.248.65] 426 octets ;; HEADER SECTION ;; id = 11716 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN SOA ;; ANSWER SECTION (2 records) riecis.nl. 3600 IN SOA ( a1-157.akam.net. hostmaster.riecis.nl. 2024012313 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) riecis.nl. 3600 IN RRSIG ( SOA 13 2 3600 20240521141043 20240518131043 33011 riecis.nl. 3+MAehlQ9wtduAlcBeAS1rJJu5hG+osFnMP7d85qmf1ST5BuImC1QmwBsJImb4vninre0qNvgDIk W2cdwzS4WQ== ) ;; AUTHORITY SECTION (7 records) riecis.nl. 3600 IN NS a9-65.akam.net. riecis.nl. 3600 IN NS a28-64.akam.net. riecis.nl. 3600 IN NS a10-65.akam.net. riecis.nl. 3600 IN NS a3-65.akam.net. riecis.nl. 3600 IN NS a4-66.akam.net. riecis.nl. 3600 IN NS a1-157.akam.net. riecis.nl. 3600 IN RRSIG ( NS 13 2 3600 20240521141043 20240518131043 33011 riecis.nl. SELIpsG0Bm7cB8rascvOLzk1Le3CdOjlDikUbuLQ3VIwPwaZWoE0zcHNgRNF+RrxfUaX/NW/QGGW J2fXblOOeg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a4-66.akam.net for riecis.nl/SOA
	Received 426 bytes from 72.246.46.66
	;; Response received from [72.246.46.66] 426 octets ;; HEADER SECTION ;; id = 23559 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN SOA ;; ANSWER SECTION (2 records) riecis.nl. 3600 IN SOA ( a1-157.akam.net. hostmaster.riecis.nl. 2024012313 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) riecis.nl. 3600 IN RRSIG ( SOA 13 2 3600 20240521141043 20240518131043 33011 riecis.nl. 3+MAehlQ9wtduAlcBeAS1rJJu5hG+osFnMP7d85qmf1ST5BuImC1QmwBsJImb4vninre0qNvgDIk W2cdwzS4WQ== ) ;; AUTHORITY SECTION (7 records) riecis.nl. 3600 IN NS a28-64.akam.net. riecis.nl. 3600 IN NS a9-65.akam.net. riecis.nl. 3600 IN NS a4-66.akam.net. riecis.nl. 3600 IN NS a10-65.akam.net. riecis.nl. 3600 IN NS a1-157.akam.net. riecis.nl. 3600 IN NS a3-65.akam.net. riecis.nl. 3600 IN RRSIG ( NS 13 2 3600 20240521141043 20240518131043 33011 riecis.nl. SELIpsG0Bm7cB8rascvOLzk1Le3CdOjlDikUbuLQ3VIwPwaZWoE0zcHNgRNF+RrxfUaX/NW/QGGW J2fXblOOeg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a10-65.akam.net for riecis.nl/SOA
	Received 426 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 426 octets ;; HEADER SECTION ;; id = 51257 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN SOA ;; ANSWER SECTION (2 records) riecis.nl. 3600 IN SOA ( a1-157.akam.net. hostmaster.riecis.nl. 2024012313 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) riecis.nl. 3600 IN RRSIG ( SOA 13 2 3600 20240521141043 20240518131043 33011 riecis.nl. 3+MAehlQ9wtduAlcBeAS1rJJu5hG+osFnMP7d85qmf1ST5BuImC1QmwBsJImb4vninre0qNvgDIk W2cdwzS4WQ== ) ;; AUTHORITY SECTION (7 records) riecis.nl. 3600 IN NS a3-65.akam.net. riecis.nl. 3600 IN NS a4-66.akam.net. riecis.nl. 3600 IN NS a10-65.akam.net. riecis.nl. 3600 IN NS a9-65.akam.net. riecis.nl. 3600 IN NS a1-157.akam.net. riecis.nl. 3600 IN NS a28-64.akam.net. riecis.nl. 3600 IN RRSIG ( NS 13 2 3600 20240521141043 20240518131043 33011 riecis.nl. SELIpsG0Bm7cB8rascvOLzk1Le3CdOjlDikUbuLQ3VIwPwaZWoE0zcHNgRNF+RrxfUaX/NW/QGGW J2fXblOOeg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a28-64.akam.net for riecis.nl/SOA
	Received 426 bytes from 95.100.173.64
	;; Response received from [95.100.173.64] 426 octets ;; HEADER SECTION ;; id = 32557 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN SOA ;; ANSWER SECTION (2 records) riecis.nl. 3600 IN SOA ( a1-157.akam.net. hostmaster.riecis.nl. 2024012313 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) riecis.nl. 3600 IN RRSIG ( SOA 13 2 3600 20240521141043 20240518131043 33011 riecis.nl. 3+MAehlQ9wtduAlcBeAS1rJJu5hG+osFnMP7d85qmf1ST5BuImC1QmwBsJImb4vninre0qNvgDIk W2cdwzS4WQ== ) ;; AUTHORITY SECTION (7 records) riecis.nl. 3600 IN NS a28-64.akam.net. riecis.nl. 3600 IN NS a9-65.akam.net. riecis.nl. 3600 IN NS a4-66.akam.net. riecis.nl. 3600 IN NS a10-65.akam.net. riecis.nl. 3600 IN NS a3-65.akam.net. riecis.nl. 3600 IN NS a1-157.akam.net. riecis.nl. 3600 IN RRSIG ( NS 13 2 3600 20240521141043 20240518131043 33011 riecis.nl. SELIpsG0Bm7cB8rascvOLzk1Le3CdOjlDikUbuLQ3VIwPwaZWoE0zcHNgRNF+RrxfUaX/NW/QGGW J2fXblOOeg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a3-65.akam.net for riecis.nl/SOA
	Received 426 bytes from 96.7.49.65
	;; Response received from [96.7.49.65] 426 octets ;; HEADER SECTION ;; id = 11337 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN SOA ;; ANSWER SECTION (2 records) riecis.nl. 3600 IN SOA ( a1-157.akam.net. hostmaster.riecis.nl. 2024012313 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) riecis.nl. 3600 IN RRSIG ( SOA 13 2 3600 20240521141043 20240518131043 33011 riecis.nl. 3+MAehlQ9wtduAlcBeAS1rJJu5hG+osFnMP7d85qmf1ST5BuImC1QmwBsJImb4vninre0qNvgDIk W2cdwzS4WQ== ) ;; AUTHORITY SECTION (7 records) riecis.nl. 3600 IN NS a10-65.akam.net. riecis.nl. 3600 IN NS a28-64.akam.net. riecis.nl. 3600 IN NS a1-157.akam.net. riecis.nl. 3600 IN NS a4-66.akam.net. riecis.nl. 3600 IN NS a3-65.akam.net. riecis.nl. 3600 IN NS a9-65.akam.net. riecis.nl. 3600 IN RRSIG ( NS 13 2 3600 20240521141043 20240518131043 33011 riecis.nl. SELIpsG0Bm7cB8rascvOLzk1Le3CdOjlDikUbuLQ3VIwPwaZWoE0zcHNgRNF+RrxfUaX/NW/QGGW J2fXblOOeg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-157.akam.net for riecis.nl/A
	Received 159 bytes from 193.108.91.157
	;; Response received from [193.108.91.157] 159 octets ;; HEADER SECTION ;; id = 52347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN A ;; ANSWER SECTION (2 records) riecis.nl. 900 IN A 159.46.204.40 riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	riecis.nl A RR has value 159.46.204.40
	Found 1 RRSIGs over A RRset
	`riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== )`
	RRSIG=33011 and DNSKEY=33011 verifies the A RRset

riecis.nl

	Query to a4-66.akam.net for riecis.nl/A
	Received 159 bytes from 72.246.46.66
	;; Response received from [72.246.46.66] 159 octets ;; HEADER SECTION ;; id = 63458 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN A ;; ANSWER SECTION (2 records) riecis.nl. 900 IN A 159.46.204.40 riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a4-66.akam.net is authoritative for riecis.nl
	Found RRSIG signed by riecis.nl zone
	Query to a4-66.akam.net for riecis.nl/A
	Received 159 bytes from 72.246.46.66
	;; Response received from [72.246.46.66] 159 octets ;; HEADER SECTION ;; id = 40235 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN A ;; ANSWER SECTION (2 records) riecis.nl. 900 IN A 159.46.204.40 riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	riecis.nl A RR has value 159.46.204.40
	Found 1 RRSIGs over A RRset
	`riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== )`
	RRSIG=33011 and DNSKEY=33011 verifies the A RRset

riecis.nl

	Query to a3-65.akam.net for riecis.nl/A
	Received 159 bytes from 96.7.49.65
	;; Response received from [96.7.49.65] 159 octets ;; HEADER SECTION ;; id = 59744 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN A ;; ANSWER SECTION (2 records) riecis.nl. 900 IN A 159.46.204.40 riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a3-65.akam.net is authoritative for riecis.nl
	Found RRSIG signed by riecis.nl zone
	Query to a3-65.akam.net for riecis.nl/A
	Received 159 bytes from 96.7.49.65
	;; Response received from [96.7.49.65] 159 octets ;; HEADER SECTION ;; id = 35021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN A ;; ANSWER SECTION (2 records) riecis.nl. 900 IN A 159.46.204.40 riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	riecis.nl A RR has value 159.46.204.40
	Found 1 RRSIGs over A RRset
	`riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== )`
	RRSIG=33011 and DNSKEY=33011 verifies the A RRset

riecis.nl

	Query to a9-65.akam.net for riecis.nl/A
	Received 159 bytes from 184.85.248.65
	;; Response received from [184.85.248.65] 159 octets ;; HEADER SECTION ;; id = 11519 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN A ;; ANSWER SECTION (2 records) riecis.nl. 900 IN A 159.46.204.40 riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a9-65.akam.net is authoritative for riecis.nl
	Found RRSIG signed by riecis.nl zone
	Query to a9-65.akam.net for riecis.nl/A
	Received 159 bytes from 184.85.248.65
	;; Response received from [184.85.248.65] 159 octets ;; HEADER SECTION ;; id = 23972 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN A ;; ANSWER SECTION (2 records) riecis.nl. 900 IN A 159.46.204.40 riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	riecis.nl A RR has value 159.46.204.40
	Found 1 RRSIGs over A RRset
	`riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== )`
	RRSIG=33011 and DNSKEY=33011 verifies the A RRset

riecis.nl

	Query to a10-65.akam.net for riecis.nl/A
	Received 159 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 159 octets ;; HEADER SECTION ;; id = 26728 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN A ;; ANSWER SECTION (2 records) riecis.nl. 900 IN A 159.46.204.40 riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a10-65.akam.net is authoritative for riecis.nl
	Found RRSIG signed by riecis.nl zone
	Query to a10-65.akam.net for riecis.nl/A
	Received 159 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 159 octets ;; HEADER SECTION ;; id = 13698 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN A ;; ANSWER SECTION (2 records) riecis.nl. 900 IN A 159.46.204.40 riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	riecis.nl A RR has value 159.46.204.40
	Found 1 RRSIGs over A RRset
	`riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== )`
	RRSIG=33011 and DNSKEY=33011 verifies the A RRset

riecis.nl

	Query to a28-64.akam.net for riecis.nl/A
	Received 159 bytes from 95.100.173.64
	;; Response received from [95.100.173.64] 159 octets ;; HEADER SECTION ;; id = 7106 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN A ;; ANSWER SECTION (2 records) riecis.nl. 900 IN A 159.46.204.40 riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a28-64.akam.net is authoritative for riecis.nl
	Found RRSIG signed by riecis.nl zone
	Query to a28-64.akam.net for riecis.nl/A
	Received 159 bytes from 95.100.173.64
	;; Response received from [95.100.173.64] 159 octets ;; HEADER SECTION ;; id = 52621 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; riecis.nl. IN A ;; ANSWER SECTION (2 records) riecis.nl. 900 IN A 159.46.204.40 riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	riecis.nl A RR has value 159.46.204.40
	Found 1 RRSIGs over A RRset
	`riecis.nl. 900 IN RRSIG ( A 13 2 900 20240521141043 20240518131043 33011 riecis.nl. CPQG23pk4W5F549tnd99W38hXgKU4kj+SkUDcIULA09NX0GMk4w6hbjECWORaBU9YAY1N6FtPexC 4LGfJOrM2A== )`
	RRSIG=33011 and DNSKEY=33011 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test riecis.nl at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: