DNSSEC Debugger

Domain Name:

Time: 2026-03-14 21:01:20 UTC

Analyzing DNSSEC problems for BPA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1139 octets ;; HEADER SECTION ;; id = 23396 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to a.root-servers.net for BPA.GOV/A
	Received 614 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 614 octets ;; HEADER SECTION ;; id = 24545 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260327170000 20260314160000 21831 . Yae5VLLPgCsRq92U3z7c0E3QF42+EuDWphispM6YK6k6h4grQQW6Sco7jUtAg6Hb5DiYrbEWAXe0 Sa65CTdI/Kqgq0c3krtWN7bD92gzU3IPA1vb7S+N3y5Y9NFJpn1HEqEFrt4DkxtY+MjQAhgLcmnz eq8T5be+sdmhRxaAJAjn9PFHgnGwKcUoYJ/GGGCkkV24F9z9rdXEETqjHdyN0M1fY7EMHnEU8Cf4 PRAySiIgo6xlw/J5d4IJdgSOmNj/Tv1nIEUsqG/TM+Nda9XiFazzGZvl67yD7s/Lf258qyYPzqQW ZOMvdnnbR1ChDLLVLZJtTcGwVOmNZX8RTkDwQg== ) ;; ADDITIONAL SECTION (9 records) c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 610 octets ;; HEADER SECTION ;; id = 14851 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260327170000 20260314160000 21831 . Yae5VLLPgCsRq92U3z7c0E3QF42+EuDWphispM6YK6k6h4grQQW6Sco7jUtAg6Hb5DiYrbEWAXe0 Sa65CTdI/Kqgq0c3krtWN7bD92gzU3IPA1vb7S+N3y5Y9NFJpn1HEqEFrt4DkxtY+MjQAhgLcmnz eq8T5be+sdmhRxaAJAjn9PFHgnGwKcUoYJ/GGGCkkV24F9z9rdXEETqjHdyN0M1fY7EMHnEU8Cf4 PRAySiIgo6xlw/J5d4IJdgSOmNj/Tv1nIEUsqG/TM+Nda9XiFazzGZvl67yD7s/Lf258qyYPzqQW ZOMvdnnbR1ChDLLVLZJtTcGwVOmNZX8RTkDwQg== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to b.root-servers.net for GOV/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 13477 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260327170000 20260314160000 21831 . Yae5VLLPgCsRq92U3z7c0E3QF42+EuDWphispM6YK6k6h4grQQW6Sco7jUtAg6Hb5DiYrbEWAXe0 Sa65CTdI/Kqgq0c3krtWN7bD92gzU3IPA1vb7S+N3y5Y9NFJpn1HEqEFrt4DkxtY+MjQAhgLcmnz eq8T5be+sdmhRxaAJAjn9PFHgnGwKcUoYJ/GGGCkkV24F9z9rdXEETqjHdyN0M1fY7EMHnEU8Cf4 PRAySiIgo6xlw/J5d4IJdgSOmNj/Tv1nIEUsqG/TM+Nda9XiFazzGZvl67yD7s/Lf258qyYPzqQW ZOMvdnnbR1ChDLLVLZJtTcGwVOmNZX8RTkDwQg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260327170000 20260314160000 21831 . Yae5VLLPgCsRq92U3z7c0E3QF42+EuDWphispM6YK6k6h4grQQW6Sco7jUtAg6Hb5DiYrbEWAXe0 Sa65CTdI/Kqgq0c3krtWN7bD92gzU3IPA1vb7S+N3y5Y9NFJpn1HEqEFrt4DkxtY+MjQAhgLcmnz eq8T5be+sdmhRxaAJAjn9PFHgnGwKcUoYJ/GGGCkkV24F9z9rdXEETqjHdyN0M1fY7EMHnEU8Cf4 PRAySiIgo6xlw/J5d4IJdgSOmNj/Tv1nIEUsqG/TM+Nda9XiFazzGZvl67yD7s/Lf258qyYPzqQW ZOMvdnnbR1ChDLLVLZJtTcGwVOmNZX8RTkDwQg== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 32006 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260512110627 20260312110627 2536 gov. Jp4xQtETAEvQ+3ijB95XRnj4yfrDt223TA90BAOvhR7hqWuK/FuykufDJxatoRQyDYeBGksCrHGt XkE32T4wTg== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.GOV for BPA.GOV/A
	Received 299 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 299 octets ;; HEADER SECTION ;; id = 47303 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) BPA.GOV. 10800 IN NS ns1.BPA.GOV. BPA.GOV. 10800 IN NS ns2.BPA.GOV. BPA.GOV. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) BPA.GOV. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 ) BPA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260315220120 20260313200120 35496 gov. UofkZ+WuJGtNmi8IB3NlK4DuMFZdqzYhIvHvzxhtI2HvgjguF+0jxdZYlptXKLJhEs9/ZWjYsS/l LDqR1WH5pw== ) ;; ADDITIONAL SECTION (3 records) ns1.BPA.GOV. 3600 IN A 170.160.36.10 ns2.BPA.GOV. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Query to a.ns.GOV for BPA.GOV/DNSKEY
	Received 299 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 299 octets ;; HEADER SECTION ;; id = 17658 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) BPA.GOV. 10800 IN NS ns1.BPA.GOV. BPA.GOV. 10800 IN NS ns2.BPA.GOV. BPA.GOV. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) BPA.GOV. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 ) BPA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260315220120 20260313200120 35496 gov. Tm5SnLKJlLkMVKnUiH6uSHvnp/DruKnQvVLlLd3FooJEeZpEi7pKVhO5m/9Xn6o6Tta2mYYmYRCk m2QQRFFCRQ== ) ;; ADDITIONAL SECTION (3 records) ns1.BPA.GOV. 3600 IN A 170.160.36.10 ns2.BPA.GOV. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Found child zone BPA.GOV

BPA.GOV

	Checking DS between GOV and BPA.GOV
	Query to d.ns.GOV for BPA.GOV/DS
	Received 231 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 231 octets ;; HEADER SECTION ;; id = 29337 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN DS ;; ANSWER SECTION (3 records) BPA.GOV. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) BPA.GOV. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 ) BPA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260315220120 20260313200120 35496 gov. S0LqF+UvPaiUDRpyQ+Y1vFtFThfSFDfCUQJzeMWXKI/Cs+Bc3y+HkUZn+Vz07DiLuGDcH6l20131 LqEwP+UEdw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for BPA.GOV in the GOV zone
	DS=14926/SHA-256 has algorithm RSASHA256
	DS=61645/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`BPA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260315220120 20260313200120 35496 gov. S0LqF+UvPaiUDRpyQ+Y1vFtFThfSFDfCUQJzeMWXKI/Cs+Bc3y+HkUZn+Vz07DiLuGDcH6l20131 LqEwP+UEdw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=14926/SHA-256 is now in the chain-of-trust
	DS=61645/SHA-256 is now in the chain-of-trust
	`BPA.GOV. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 )`
	`BPA.GOV. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 )`
	Query to ns1.BPA.GOV for BPA.GOV/DNSKEY
	Received 2320 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2320 octets ;; HEADER SECTION ;; id = 52094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) BPA.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAcYSZyBGafjypJTxZGMYGC1C9TQyX48uinmeon2yiC8ZQhsZDF/+ik2PJ7CUXhmSfffhv2Q+ 1rLyozqZg5Y40iGPEJHKX7YA6+sH7eXYAQEEGIXe4KdX2BiMeLAnsstn6FmoFa5QW1gYsopSWjkV 9zgwBIUYm+e1qr1Zx3X405TvIBdSVB+5PGrWbvjcbIYY7aqjcSvCPOTEscByZpXMkMIL6m0fGwFF 2GqCN8pgTk5oUc/UygazskWynGaUSdXxScaLCi1BWsJuQH9e+F40CEd+AzKhFVx4auogtDS6LHb2 g2riq94/c/EZBJ/ffoyLoZeTtIX7LcgaR+tv6P+fgwU= ) ; keytag 61645 BPA.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb5ePz/0eR+f5vr5xbmM8tQEr64favsURzo3kA7DWerppoDCUeXRe6ivPkAOY9bk01wQhfUs qwjtw79HcCpsfaekD1VJUm337edVdkBeZs/ikujeB3K6834OW/PWKgzL35bPnlixZ/0Jp5zCTk2A VggSuZzxM4T67UGSqg+oQkDcPBY5gf1oLakvxl4H0IhCuEppXVbcV6J6o4PvR04Rt0wU5UUjzJ+P cXBuqcwZIXa4FQDJrVEYj68VF877u2UwYQ5FT+v7jErKQkTPvLpglqAkHiuuVrRSKVjOY8T7AjTJ IgBaixQZ6KPZqr78XUOQ0zl0pke6cmlCEzDE1ufaOgM= ) ; keytag 14926 BPA.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdsT+B1z+dBZN4XGSwAAXb5DczoB44/0rs2DB+YNCujpS/aaYJrkwTXTH2+BNhUY+I4gZmnm Cx9/s6imdNVwERuguo7Z5JxM/w8BRGaua2/vdij6dvCNUNMYMhiZGkLTxhaLjPGWKtcwGDepf8V7 PCK8o9yPAt5GPM0H8FuCuvcj9QCihW7Q9+uizSxks6gcXmDUTHiUiy37ehZj0aaPYKzu/iMZmmaU 5sCBIKrRSm+2pYhg+DQ1YEjd7LcgiHnMc8h60vNSXLoRdJMt9RDpJXtNxoKnr2dgxKm54nW3PCZ7 3gAwwavTQSAYVvU+qTyYH/AkonVxGhUUi20ft/1OcQ8= ) ; keytag 24271 BPA.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAan1StjrtUaKyMvgXMl1vj3aHRPMr7y/qG2MAtQotSf13N3mKNraMhOabQfvc3/JfGc0GMcw QJgroD9pdeXPQdBRkCbhLi8I1ZUNg7a03rPbHGoxnZoy3SAZHf64/hu1UbY6lATkrU1yS0pL6Wbw Hn4K2L0E91lt3rN04LFoxXXGaMfA37QSU2470PM5k85ipQV5TQjKgBFq1PKoN3IGVcG1rWuWrhBd EXD1DoAK2CTv4/ibDjzeJCcKZex4CW/JgZ8i29lZzv5kVHxEqWJqxW/Tn2ATYC31Thi0yIIEgLt1 YwZDgg2CmRjLTPGYB0kuBMxN7GWdddhvM6jCgsSBlP0= ) ; keytag 27741 BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260321163711 20260314153711 61645 bpa.gov. JgJ0kwhbZrRYa9Uzr+76hkDjAvrRvabYmSUCqtiRAZUmZ5BpuyVgWpqzy6yIFBzIDMsK2/cL6elX sQbM7toEfWCnuA/l2raT7sZ6EHBOj2npD9IPSHErweBPPJEm4kE0SLpfT8Ax97K2PWZJXWpfwxFF TjoqjaPi/6Ff+p24wPibEUQzcuqGqkMc4YstaW/PDQTFlv4mPHFHslB9pec10kbTViIfOTnmAyN9 L533fscHXekXI7VDkJNWbBW7YXIUEohyFsKVcKaqy6Y0tek+7w9AChWGktT8w6qSyL/8H1PvAiRH eJewWC7nibghcx2eWniJZIfYUaS5ndlvYKS5YQ== ) BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260321163711 20260314153711 14926 bpa.gov. mcHfdpPWr52xIaJKec73EcRkkMW4yWi7TvV5PxioEHDoT8I5mDxGzff/9vEDB+BTrxTHrIZ1JZyh 7uWjoEegI3/8gL/Yoq1jt2dZHJQiBKBSITR5qhgF45U3fqjdoMF6wYwTOoJ5/h/biIECesTUtnOG wb8QXJ5v46YUq+yHMZnh7CPdn0SlwpWZ0VgKF9L6d+5hgIQ5vz1GXDjjCJh82rEDYzrnUmCMnTbg SV+I1uoKoX/8hmslguJomAzNQxtA2kdn5zWoa/htnwAN7UNGCKRIZwUn2hCTB0X7+nYB9l9sYK68 2k5IdiYwglOV+SWJkdfjMGmcEs0hsmTJcKkGNg== ) BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260321163711 20260314153711 24271 bpa.gov. gxYfmHbMw7YxKH4U9DZ+hU88ja2M091U+4woOHkMFGj+7eU9FNA2gLVSeDFNrIPvgVDuvHPu2pve FqbDP9zvWeYEF8DFcRMs5gxeyanPwOZ+B/hDe3xuBylmeX7xMDqYkxg6JAU+xDeH/uWucAkvKLu8 TL/nLmhELIpXCSfA+5izcbujWVf6W1UZbYEQ1UNl1Gd7YOazp1oXLwsUoD032rMC3tbvNJc2lSPG Ai7vNPCtOj/67At3GBJlFfIKpqzceceTw+V4pPJrecpmvUi/cWBX3bLb6i3eQov9YyNmbdJMsP1u l05EXlKWk85ZA2vZSzER3Bb81NZNEsQonUg+vg== ) BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260321163711 20260314153711 27741 bpa.gov. MFFiZ9zZRwUl2pEFbeajazJ6PdJSv9TUAqH6pRC3lk5R8NqS+q7mAiWWsvuHI7MFsd6jPwfmvtHu bhkA/d+MyS8UoBYIy7hSIlpvtb1oQz9eO6pweRivs9JfHI6XBJWq4u/81FUhpKV++p5koaWVj8or 9mPz7/zzZXbLpuEem2zeafL9HbXaiWwklvfBCooIBQ9xaRE1KbJ0JZ29T72xiTVRrbS7nuMDcTHB 9AUXl3elDYRYid5d7y3YDvrOEdGo9NoXuF/xv4+yp0CTmMlOVBiRi9FHQSvbClf3MnLEUUp7N8C3 1Zl5ZVkMjQNY7I1UJWHIyOCLrjyNYEzXAaDzSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for BPA.GOV
	`BPA.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAcYSZyBGafjypJTxZGMYGC1C9TQyX48uinmeon2yiC8ZQhsZDF/+ik2PJ7CUXhmSfffhv2Q+ 1rLyozqZg5Y40iGPEJHKX7YA6+sH7eXYAQEEGIXe4KdX2BiMeLAnsstn6FmoFa5QW1gYsopSWjkV 9zgwBIUYm+e1qr1Zx3X405TvIBdSVB+5PGrWbvjcbIYY7aqjcSvCPOTEscByZpXMkMIL6m0fGwFF 2GqCN8pgTk5oUc/UygazskWynGaUSdXxScaLCi1BWsJuQH9e+F40CEd+AzKhFVx4auogtDS6LHb2 g2riq94/c/EZBJ/ffoyLoZeTtIX7LcgaR+tv6P+fgwU= ) ; keytag 61645`
	`BPA.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb5ePz/0eR+f5vr5xbmM8tQEr64favsURzo3kA7DWerppoDCUeXRe6ivPkAOY9bk01wQhfUs qwjtw79HcCpsfaekD1VJUm337edVdkBeZs/ikujeB3K6834OW/PWKgzL35bPnlixZ/0Jp5zCTk2A VggSuZzxM4T67UGSqg+oQkDcPBY5gf1oLakvxl4H0IhCuEppXVbcV6J6o4PvR04Rt0wU5UUjzJ+P cXBuqcwZIXa4FQDJrVEYj68VF877u2UwYQ5FT+v7jErKQkTPvLpglqAkHiuuVrRSKVjOY8T7AjTJ IgBaixQZ6KPZqr78XUOQ0zl0pke6cmlCEzDE1ufaOgM= ) ; keytag 14926`
	`BPA.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdsT+B1z+dBZN4XGSwAAXb5DczoB44/0rs2DB+YNCujpS/aaYJrkwTXTH2+BNhUY+I4gZmnm Cx9/s6imdNVwERuguo7Z5JxM/w8BRGaua2/vdij6dvCNUNMYMhiZGkLTxhaLjPGWKtcwGDepf8V7 PCK8o9yPAt5GPM0H8FuCuvcj9QCihW7Q9+uizSxks6gcXmDUTHiUiy37ehZj0aaPYKzu/iMZmmaU 5sCBIKrRSm+2pYhg+DQ1YEjd7LcgiHnMc8h60vNSXLoRdJMt9RDpJXtNxoKnr2dgxKm54nW3PCZ7 3gAwwavTQSAYVvU+qTyYH/AkonVxGhUUi20ft/1OcQ8= ) ; keytag 24271`
	`BPA.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAan1StjrtUaKyMvgXMl1vj3aHRPMr7y/qG2MAtQotSf13N3mKNraMhOabQfvc3/JfGc0GMcw QJgroD9pdeXPQdBRkCbhLi8I1ZUNg7a03rPbHGoxnZoy3SAZHf64/hu1UbY6lATkrU1yS0pL6Wbw Hn4K2L0E91lt3rN04LFoxXXGaMfA37QSU2470PM5k85ipQV5TQjKgBFq1PKoN3IGVcG1rWuWrhBd EXD1DoAK2CTv4/ibDjzeJCcKZex4CW/JgZ8i29lZzv5kVHxEqWJqxW/Tn2ATYC31Thi0yIIEgLt1 YwZDgg2CmRjLTPGYB0kuBMxN7GWdddhvM6jCgsSBlP0= ) ; keytag 27741`
	DNSKEY=61645/SEP is now in the chain-of-trust
	DS=61645/SHA-256 verifies DNSKEY=61645/SEP
	DNSKEY=14926/SEP is now in the chain-of-trust
	DS=14926/SHA-256 verifies DNSKEY=14926/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260321163711 20260314153711 61645 bpa.gov. JgJ0kwhbZrRYa9Uzr+76hkDjAvrRvabYmSUCqtiRAZUmZ5BpuyVgWpqzy6yIFBzIDMsK2/cL6elX sQbM7toEfWCnuA/l2raT7sZ6EHBOj2npD9IPSHErweBPPJEm4kE0SLpfT8Ax97K2PWZJXWpfwxFF TjoqjaPi/6Ff+p24wPibEUQzcuqGqkMc4YstaW/PDQTFlv4mPHFHslB9pec10kbTViIfOTnmAyN9 L533fscHXekXI7VDkJNWbBW7YXIUEohyFsKVcKaqy6Y0tek+7w9AChWGktT8w6qSyL/8H1PvAiRH eJewWC7nibghcx2eWniJZIfYUaS5ndlvYKS5YQ== )`
	`BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260321163711 20260314153711 14926 bpa.gov. mcHfdpPWr52xIaJKec73EcRkkMW4yWi7TvV5PxioEHDoT8I5mDxGzff/9vEDB+BTrxTHrIZ1JZyh 7uWjoEegI3/8gL/Yoq1jt2dZHJQiBKBSITR5qhgF45U3fqjdoMF6wYwTOoJ5/h/biIECesTUtnOG wb8QXJ5v46YUq+yHMZnh7CPdn0SlwpWZ0VgKF9L6d+5hgIQ5vz1GXDjjCJh82rEDYzrnUmCMnTbg SV+I1uoKoX/8hmslguJomAzNQxtA2kdn5zWoa/htnwAN7UNGCKRIZwUn2hCTB0X7+nYB9l9sYK68 2k5IdiYwglOV+SWJkdfjMGmcEs0hsmTJcKkGNg== )`
	`BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260321163711 20260314153711 24271 bpa.gov. gxYfmHbMw7YxKH4U9DZ+hU88ja2M091U+4woOHkMFGj+7eU9FNA2gLVSeDFNrIPvgVDuvHPu2pve FqbDP9zvWeYEF8DFcRMs5gxeyanPwOZ+B/hDe3xuBylmeX7xMDqYkxg6JAU+xDeH/uWucAkvKLu8 TL/nLmhELIpXCSfA+5izcbujWVf6W1UZbYEQ1UNl1Gd7YOazp1oXLwsUoD032rMC3tbvNJc2lSPG Ai7vNPCtOj/67At3GBJlFfIKpqzceceTw+V4pPJrecpmvUi/cWBX3bLb6i3eQov9YyNmbdJMsP1u l05EXlKWk85ZA2vZSzER3Bb81NZNEsQonUg+vg== )`
	`BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260321163711 20260314153711 27741 bpa.gov. MFFiZ9zZRwUl2pEFbeajazJ6PdJSv9TUAqH6pRC3lk5R8NqS+q7mAiWWsvuHI7MFsd6jPwfmvtHu bhkA/d+MyS8UoBYIy7hSIlpvtb1oQz9eO6pweRivs9JfHI6XBJWq4u/81FUhpKV++p5koaWVj8or 9mPz7/zzZXbLpuEem2zeafL9HbXaiWwklvfBCooIBQ9xaRE1KbJ0JZ29T72xiTVRrbS7nuMDcTHB 9AUXl3elDYRYid5d7y3YDvrOEdGo9NoXuF/xv4+yp0CTmMlOVBiRi9FHQSvbClf3MnLEUUp7N8C3 1Zl5ZVkMjQNY7I1UJWHIyOCLrjyNYEzXAaDzSw== )`
	RRSIG=61645 and DNSKEY=61645/SEP verifies the DNSKEY RRset
	RRSIG=14926 and DNSKEY=14926/SEP verifies the DNSKEY RRset
	RRSIG=24271 and DNSKEY=24271 verifies the DNSKEY RRset
	RRSIG=27741 and DNSKEY=27741 verifies the DNSKEY RRset
	DNSKEY=24271 is now in the chain-of-trust
	DNSKEY=27741 is now in the chain-of-trust
	Query to ns2.BPA.GOV for BPA.GOV/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 17506 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (3 records) BPA.GOV. 300 IN A 20.42.128.100 BPA.GOV. 300 IN RRSIG ( A 8 2 300 20260320164007 20260313154007 24271 bpa.gov. EHHMknpHnMnLJ3gddDenSSqxfbai1DR/jILkJMQRK7CrRD5Kbm0Cj82bAhJMQxbiZoKaLQKr96Tg IntC0B6Mmw9J/orLx9tj8s4s+XpPBvAiZ9HS3wBDjYeNZDUM3sb870GZRSGveoKzEla1tR3q/1JF 8RB42vIev562bnaDQ3q7TP5MdOcydMWw4e8rUU3FJNLBs6puy9jaZ2HfgAK5WUYe+0Ud0IBoXgvR MmlfzNxxYi9eHKzXH+6w2YWtz/Vj97FH2lAJg9ndm4toj20QDRbGHJDbyV8FCwgUL0GH1xnbAMOu zEPYDlXl2S8jeKQp5hBtuvJKEHF9rngASoNtjA== ) BPA.GOV. 300 IN RRSIG ( A 8 2 300 20260321163719 20260314153719 27741 bpa.gov. e5zJQKaRGYfVehfMJdaaeEa4q/Mj9p+MWI+vKVM+uYiRNEhjU9SFKUXMwoFeiSHrLmDj47iDhXxk sfm+r1KtB8f/U367+oTKOOR7x18jSe4mYV6RDb14YdD3YRa2b0XHrSrnu9AZtvoiHGKGI3LFGXXg vZZ9YV/IqUg3e9jhomJuk2jmWLmD/b+Xjozp8YXV8mF6uNtwlC23f3KuNkEN2H9YObUoTgf3SFbL zpqPpOGe2alT0oK8kXhQjZMceYOpqA07cUJwZ1SUDC3wtV7G5fNOO71wKTmpWkSKgy8jdASiEl7V yXZVck0QV5RVmfweRajGEbEtX6fVyxcYtxnWHw== ) ;; AUTHORITY SECTION (4 records) BPA.GOV. 86400 IN NS ns2.BPA.GOV. BPA.GOV. 86400 IN NS ns1.BPA.GOV. BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260320163717 20260313153717 24271 bpa.gov. uNKBOHFX9uhXM1rjT8FZJp3p4jYzsof02/XDKc8eZ8nlt8kiiaAIyXkAGaTI10n5BUUqsWwntm2l 9Zevun+rOEO5AfaNFqG6yHz2pzm6GURwDNtZZE3pC3cKyJbGnn+aZrNzanI/YycAlJjyjppuzmHm b7p+0+2w/tlLfY1dA88Vj5wsE/25KlWfaS+mLBAaIWmtLXo4phiB44DqKPFmO8wJ8Vw7sP9mqzPE uAP/lvtY4AaeUlb7qZ3lMy6BV9IHQiWpSMeWtFHIADOENRArj7CKriwup1GETgbjMFPgfFaYZ2hD xUjSNE4eiyxkwJWzh/LiYgUr1+6Pfg3lNev3hA== ) BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260321163709 20260314153709 27741 bpa.gov. TJmFY/xseAL5fss1GhtKqZLcIwAMJw3fwCYmYXWkfrH8D+QoJEyM+PkPjpCpGhdLvo5uFEzHIi6M Hw+u2r2RSz/GbKljbYyj/kCS6dQ+tzK/FP2GuH/7ZzGxjgRc7MumsicjIwkPIwSH+JvjpYcRbA81 KJ5UUNu06BT6sieE/t4Uvaqid+suexfqD2uzrMLuo8nMQzOuJe2OlFyJ/uYYc2XkJZ+mEHXuy1S9 oMzRC6LUp2OiP5fP+k0vJZrytYVDCZZReJzc0zT63AAQ8yY9kD8Ad2JMrG6ijvJpyj57bQNDE752 EsEx/SmUpF9poXidskpehb1G+yu3aBLAhzGGMg== ) ;; ADDITIONAL SECTION (7 records) ns1.BPA.GOV. 86400 IN A 170.160.36.10 ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260320163717 20260313153717 24271 bpa.gov. V8bUYPt6rZNPDX515cPp6zpi7q/jGv++UrHBjXD5bZMhpz26xtgtNTfo3J70cIlye5JTnqrZoVWM oMNJ+DFMGIUHvD2AHVTNYhzM0MPKVoz4T9kia1wHv8wF6Hmbb7J5O8qJrosRbP6/ZHvKtgrAZQR+ rbUz99yDWd4pH7GxZJODXYy/U2SmJa6/CX3PxeCmGuL3ahc/t7hD4GstwaQovetmDghZQ1hAwXjB A0O1Fx2RmuMckLABRu5mCYaDMCSNQbYta3PDjrLwFRkts3qVy0Nl4PNkmqpR0Zc8hJt3ylFLuwm4 zwf0nbX5CRCyg5MhCB8LiZktLcfiWeKBzjUXJw== ) ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260321163709 20260314153709 27741 bpa.gov. TsfYYRKqeK/9mymEjSztE97AqGuzZnIs/UULkVuMas34JmCU2XGOHdRrOMWhTMlha8S41Lw1vi5r Q1gjpNNR2HVBSNo2LY5DQx2XdkkSdPlMRUqGq67YsYgrU4jABktPbxuMF0xS2lT1oRrooyc+hvNO W0SAGPn47m9RHSGPg1kE2w5apN0xFU9JaEbJTGLSvJYLOUsaQwzx00YjS51qgpPFAMI7TlYmbzZ5 sqJUR9dPpMrda9jQCs/whP9JirC7pT1psYDRSPkli+oMxmN8TeyYE5OiPPMBPuw+FmIhhBfCNBp0 POGnOoodI1026SOz6A4smVUNAUOvhNB5WUm5xQ== ) ns2.BPA.GOV. 86400 IN A 170.160.100.10 ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260320163717 20260313153717 24271 bpa.gov. dSaJ8mVwdVRzFY/bcztSTG9Io0KYF+EDwqQheaFxryCufyhERn0Go2I3BdE3No6VSLRroVUlAjsX qjjs9D2Og13yIj2+Jfk/uiDUCrYGlBOr4OG8X5zScetB7G7B/tC5pG5D7PAWEyoqVulCUcU1y+zQ ZKC/gfxw3eiBXf2zZJLQmKiy/WI2LJyridA4EDoTett+4nYiGZIGrQ04N+I02qdby1bEK9X6dWHC nY45tneUoF/S2qmdj0HuzYyrrgJMfWCnO24YvmMINuMw0AO6RRDI6biodInyRt6mrvBNUCvOVRsK hlOPp2WmhP9AzC75FyEydqO3jhj6sa7jRppJHg== ) ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260321163709 20260314153709 27741 bpa.gov. KuDrpL16EDg9cN5rDIJzrtxIP9MdFGkiQ753bCPzvEz5f31RTy6Nomdg0D1jG84Z1hWKdFZFizqg HbPbxUf33kCrZK1evcia4vHtMxqZ0ZDKrdNTUp6qqQhIuP5n1r1cx1MQE94Jkp7Up52CNOQVMU4g 2w0RHpNRpiwLer67plfdyPwZQ6l/+SU86NiWBwT0+0RYB7LGzT0g1afat2hVBUfUSqYFMWM9VR2K KkvBfaz+f7AaNFRDu6oKOUsxS7Y1lUQH1p22YjMiaDQ3fxIswkA81IbjWw8uKuF5jOkZdbvjB9p+ Y69Ftw1Bo3/B3vGzFEG9HcNKCL0NI1deNrfyHg== ) ;; { "EDNS-VERSION": 0 }
	ns2.BPA.GOV is authoritative for BPA.GOV
	Found RRSIG signed by bpa.gov zone
	Query to ns1.BPA.GOV for BPA.GOV/SOA
	Received 2511 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2511 octets ;; HEADER SECTION ;; id = 38577 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN SOA ;; ANSWER SECTION (3 records) BPA.GOV. 43200 IN SOA ( ns1.BPA.GOV. hostmaster.BPA.GOV. 2026031202 ;serial 43200 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) BPA.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20260319145116 20260312135116 24271 bpa.gov. s4AJ3teJx3eNJuwcK/Kcylk5JZeJ2UhW0FDHiqYdQcqq5WPazQuRGAoPBiO/Dw9sD4fSjKLiqMW1 H1z4pkdEwiXdA0zb9hCC1FmcCt0SHXBHYy19t/45JiywR9DeQY4opMIFfFdxiahZATfzVlCL9GYD r9GooaLchUbYbufXuNsgGinbjKbecTpOuJyukL9iY6oaYDRbwC6Pn4yUyydUOtl3gVtoOC+SJ6jZ fmxkc48169vcx82xi5SEwkuaEVTnbbzSnFQ4yc0yYGiZ1wH9XQTVNsGtYfrMb+onX8OU+k993h69 vffxRvoosbSH4S6EVsOkAsYRFFXl3m90uzXFUg== ) BPA.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20260321173218 20260314163218 27741 bpa.gov. nzNffghuX2fTSk11Tab0g3U36T7vYGgPkQzF4BFaiwd8atgx0g7TRUwBZJXbOyUcoTvQ6oGpFuCh t7tZB/P1COe6AIS2ZA0rUnZRIvnHYZsGHACnasEcbjVb5AUoG7j6q9rO6EJMdnozRzv8vAaQMR7j eSLPTVmCh9mFZnAM5LMMeXl/fWogkWgwmdqSKdNfQGSW2GG1jqUe+GacLC9WQUD51rKAzXEXmNbh AjCJiZfjADxxBJwRMjGHUvL3DHDadG6kqcRykIkZ0sbABWNvKycZonArlIkJvgrrbbSUDRGqT3jt mmrM9X8278beSzluXQEUJXs0PVIdmlkdwuw74Q== ) ;; AUTHORITY SECTION (4 records) BPA.GOV. 86400 IN NS ns2.BPA.GOV. BPA.GOV. 86400 IN NS ns1.BPA.GOV. BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260320163715 20260313153715 24271 bpa.gov. grAbCG4UbhFRm0oSf/jLL0iVJzp9uMprGuKOWeBokyFP2J3Uh995xJad4bgDkBBMuC0Yr18f6Z4q aLNvx4p0FlbGEkt4JR6Mn4wCuwQ/f8Y2DyhItYy0vkj1l7PsBHEwOCeNLGw0Kc8bytZa7PjsVBSd KhtDOMPLzgeImVbNCYwjJ6WVvfs01Ygajw47DnBQ1JPZ4iQKaBLp+ObzCTc6hBrbmE96xKs6J8cI 0OATh7Qi22q++E9QLn5c3HZBEGvn2SDNNUXSQM9KB5pnmhJ6Y7YWqTr0pvaVy1PgRJ6VdJpBJEwL z2fo7swfLo2tSUTOwGsmyASpjzMA7VU1ty4VOg== ) BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260321163708 20260314153708 27741 bpa.gov. NiYg/BT4EONS+IxW+tclIYySPDw8CrPizVLLCfWy4zaTcI7+ssRv01mi5xq5d9L58jvh6qCsz/kl rrlN84TWNSeFNqhL3BjSv4b7j112Uo/Sf/xrb64K/jMKUVh8ARGDkRTvn7ZyeBx0fnahi0R6PD5b nvEzp8V8cLpj6n7xGP9bSMITwrGgZfUz4bGG6/HqHVi/mWj4M3dPJohB2/u4Mk3sT73h37lVoxum CAaituF9xFMx3P9B8uXQMLOoXNfiizzlt7MDB3cQ4DxaRleCPHdoKfP1zI78eEiiNXnRSC6jkoIF GUzNFuydn5bYCfrbDLYtlvRdkTdSNw+kwMPVsw== ) ;; ADDITIONAL SECTION (7 records) ns1.BPA.GOV. 86400 IN A 170.160.36.10 ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260320163715 20260313153715 24271 bpa.gov. MrKeb7cbx8z+zPcDaBrNmavBUxZmZg5/PZRwFoE+0Ngcxp0Z6QG4ICRoCb0ORjmxe1bcuiy1mHAa E3d3nPwy1u1lhDbrGS9z5u8NsyDATYEx3gY4gKWPgmoMJrAUPfz8HNEb3bM7seEh7sZmUU+vUcvj ey3+wUpvSlKrUWUZLHAZjmYBXEyh0t9zl6WaHAY9XkdQjQeA2bH9KYqkgP5VP62SWorWeTJfLS1N 8AefPprLgnqp6ibEV8ddAHAYXk0mIE300y0k8ja09BQ8hEnTGk1syCyKZwxL2jXZjj2NHQhpVYi0 YE06/aXEh1qPJkoBm48wI9GeHZJ466tOji9QhQ== ) ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260321163708 20260314153708 27741 bpa.gov. U+PiD6eeFMJNiuSnhpO8ucwxyc+QoPsmcvrBaiAE1APjPeNBXHjZAbbhAZ5WDjjpPomVtiFdVL4K Nzr8BDeec3uAlNAJ2Aw/Hw7Et2jNdFyv/yMO7rp7S9U5oJtedRv9CSgedRVwpZdJEfTZuUHYdigt QH0oRk3er7znrZXWLup+DuQopvVt3fqm3xTnRAiRLwD6uG5Jg3LfiS2Yq2c8QT/vJ3S1ZlS9PXDq VHv91BhKzFnadkbudV2ddo+E0BwhEqebFHJZ5Hc6owNYs/CSP1/2x3Y4Dpnss++JkobRyqfKDU/l ITDMtnbAQ302GE7ezMEnAV3UQNleMxS1NXQ8wA== ) ns2.BPA.GOV. 86400 IN A 170.160.100.10 ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260320163715 20260313153715 24271 bpa.gov. zIjybDUr1lBkByvHZbe0ZDkf361BAKWNiX3r0vqR17Abi45v/ywseZwNOJMSZTh6Xe0tFlihRKBA 86xlMtzkUxX2w9wgyysTv+DwlKiXnkvX1/jC2NpxscoGb/qgtNzgjhRvRYBautXqrCX3u/NQO99b S5aKnUTGFH/fEMLCnX9WioFchsQ+3RAOz25lgYxgBn+C3b+zE+7jNUr59psjHAtYT57OQ3Ejo/wd CeBPgRUbTf21HkkE1vqBqkZngv6Hms3O0YeMvoq0ZMuOEzZfdMUe4Tj/xBd6YPQKh83Or9qbKRqD yLmutEw52/8MRxQ2oRammnWCtIunet8xMfN+5Q== ) ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260321163708 20260314153708 27741 bpa.gov. iaTe2/wFcLBeGfwrIkcxGKVnndhaK4Ca4dBJUFdyroX28WQXnA/5iKPAOlqVIQIBsyK3n2UmXckE ERxYD8PcrXLIVcsPzAUYIciIng0ddeIxqKvgpkknFYwATFv60chLaTFSacrbD/bbhe/Fx2KlD7gZ 6/MM4VrKkskKlo8YlSwkteZtAzuXRuXrbgrCn8x2CQ5/7UJdCRPYn507pCKbSXTCf1HkHxyqU0Nx HmcYcP4lA4sxqwSOB9PodAaoRMNV8nkiKS0jYnQBO6Q1kdS4ECEOKlrR5dFzx2OBpmVhhLmXMtrD /HQeS0ENGkTjJV9MOX2ln5Km4WU2ySy+VZgPyg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.BPA.GOV for BPA.GOV/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 5135 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (3 records) BPA.GOV. 300 IN A 20.42.128.100 BPA.GOV. 300 IN RRSIG ( A 8 2 300 20260320164007 20260313154007 24271 bpa.gov. EHHMknpHnMnLJ3gddDenSSqxfbai1DR/jILkJMQRK7CrRD5Kbm0Cj82bAhJMQxbiZoKaLQKr96Tg IntC0B6Mmw9J/orLx9tj8s4s+XpPBvAiZ9HS3wBDjYeNZDUM3sb870GZRSGveoKzEla1tR3q/1JF 8RB42vIev562bnaDQ3q7TP5MdOcydMWw4e8rUU3FJNLBs6puy9jaZ2HfgAK5WUYe+0Ud0IBoXgvR MmlfzNxxYi9eHKzXH+6w2YWtz/Vj97FH2lAJg9ndm4toj20QDRbGHJDbyV8FCwgUL0GH1xnbAMOu zEPYDlXl2S8jeKQp5hBtuvJKEHF9rngASoNtjA== ) BPA.GOV. 300 IN RRSIG ( A 8 2 300 20260321163719 20260314153719 27741 bpa.gov. e5zJQKaRGYfVehfMJdaaeEa4q/Mj9p+MWI+vKVM+uYiRNEhjU9SFKUXMwoFeiSHrLmDj47iDhXxk sfm+r1KtB8f/U367+oTKOOR7x18jSe4mYV6RDb14YdD3YRa2b0XHrSrnu9AZtvoiHGKGI3LFGXXg vZZ9YV/IqUg3e9jhomJuk2jmWLmD/b+Xjozp8YXV8mF6uNtwlC23f3KuNkEN2H9YObUoTgf3SFbL zpqPpOGe2alT0oK8kXhQjZMceYOpqA07cUJwZ1SUDC3wtV7G5fNOO71wKTmpWkSKgy8jdASiEl7V yXZVck0QV5RVmfweRajGEbEtX6fVyxcYtxnWHw== ) ;; AUTHORITY SECTION (4 records) BPA.GOV. 86400 IN NS ns1.BPA.GOV. BPA.GOV. 86400 IN NS ns2.BPA.GOV. BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260320163717 20260313153717 24271 bpa.gov. uNKBOHFX9uhXM1rjT8FZJp3p4jYzsof02/XDKc8eZ8nlt8kiiaAIyXkAGaTI10n5BUUqsWwntm2l 9Zevun+rOEO5AfaNFqG6yHz2pzm6GURwDNtZZE3pC3cKyJbGnn+aZrNzanI/YycAlJjyjppuzmHm b7p+0+2w/tlLfY1dA88Vj5wsE/25KlWfaS+mLBAaIWmtLXo4phiB44DqKPFmO8wJ8Vw7sP9mqzPE uAP/lvtY4AaeUlb7qZ3lMy6BV9IHQiWpSMeWtFHIADOENRArj7CKriwup1GETgbjMFPgfFaYZ2hD xUjSNE4eiyxkwJWzh/LiYgUr1+6Pfg3lNev3hA== ) BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260321163709 20260314153709 27741 bpa.gov. TJmFY/xseAL5fss1GhtKqZLcIwAMJw3fwCYmYXWkfrH8D+QoJEyM+PkPjpCpGhdLvo5uFEzHIi6M Hw+u2r2RSz/GbKljbYyj/kCS6dQ+tzK/FP2GuH/7ZzGxjgRc7MumsicjIwkPIwSH+JvjpYcRbA81 KJ5UUNu06BT6sieE/t4Uvaqid+suexfqD2uzrMLuo8nMQzOuJe2OlFyJ/uYYc2XkJZ+mEHXuy1S9 oMzRC6LUp2OiP5fP+k0vJZrytYVDCZZReJzc0zT63AAQ8yY9kD8Ad2JMrG6ijvJpyj57bQNDE752 EsEx/SmUpF9poXidskpehb1G+yu3aBLAhzGGMg== ) ;; ADDITIONAL SECTION (7 records) ns1.BPA.GOV. 86400 IN A 170.160.36.10 ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260320163717 20260313153717 24271 bpa.gov. V8bUYPt6rZNPDX515cPp6zpi7q/jGv++UrHBjXD5bZMhpz26xtgtNTfo3J70cIlye5JTnqrZoVWM oMNJ+DFMGIUHvD2AHVTNYhzM0MPKVoz4T9kia1wHv8wF6Hmbb7J5O8qJrosRbP6/ZHvKtgrAZQR+ rbUz99yDWd4pH7GxZJODXYy/U2SmJa6/CX3PxeCmGuL3ahc/t7hD4GstwaQovetmDghZQ1hAwXjB A0O1Fx2RmuMckLABRu5mCYaDMCSNQbYta3PDjrLwFRkts3qVy0Nl4PNkmqpR0Zc8hJt3ylFLuwm4 zwf0nbX5CRCyg5MhCB8LiZktLcfiWeKBzjUXJw== ) ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260321163709 20260314153709 27741 bpa.gov. TsfYYRKqeK/9mymEjSztE97AqGuzZnIs/UULkVuMas34JmCU2XGOHdRrOMWhTMlha8S41Lw1vi5r Q1gjpNNR2HVBSNo2LY5DQx2XdkkSdPlMRUqGq67YsYgrU4jABktPbxuMF0xS2lT1oRrooyc+hvNO W0SAGPn47m9RHSGPg1kE2w5apN0xFU9JaEbJTGLSvJYLOUsaQwzx00YjS51qgpPFAMI7TlYmbzZ5 sqJUR9dPpMrda9jQCs/whP9JirC7pT1psYDRSPkli+oMxmN8TeyYE5OiPPMBPuw+FmIhhBfCNBp0 POGnOoodI1026SOz6A4smVUNAUOvhNB5WUm5xQ== ) ns2.BPA.GOV. 86400 IN A 170.160.100.10 ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260320163717 20260313153717 24271 bpa.gov. dSaJ8mVwdVRzFY/bcztSTG9Io0KYF+EDwqQheaFxryCufyhERn0Go2I3BdE3No6VSLRroVUlAjsX qjjs9D2Og13yIj2+Jfk/uiDUCrYGlBOr4OG8X5zScetB7G7B/tC5pG5D7PAWEyoqVulCUcU1y+zQ ZKC/gfxw3eiBXf2zZJLQmKiy/WI2LJyridA4EDoTett+4nYiGZIGrQ04N+I02qdby1bEK9X6dWHC nY45tneUoF/S2qmdj0HuzYyrrgJMfWCnO24YvmMINuMw0AO6RRDI6biodInyRt6mrvBNUCvOVRsK hlOPp2WmhP9AzC75FyEydqO3jhj6sa7jRppJHg== ) ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260321163709 20260314153709 27741 bpa.gov. KuDrpL16EDg9cN5rDIJzrtxIP9MdFGkiQ753bCPzvEz5f31RTy6Nomdg0D1jG84Z1hWKdFZFizqg HbPbxUf33kCrZK1evcia4vHtMxqZ0ZDKrdNTUp6qqQhIuP5n1r1cx1MQE94Jkp7Up52CNOQVMU4g 2w0RHpNRpiwLer67plfdyPwZQ6l/+SU86NiWBwT0+0RYB7LGzT0g1afat2hVBUfUSqYFMWM9VR2K KkvBfaz+f7AaNFRDu6oKOUsxS7Y1lUQH1p22YjMiaDQ3fxIswkA81IbjWw8uKuF5jOkZdbvjB9p+ Y69Ftw1Bo3/B3vGzFEG9HcNKCL0NI1deNrfyHg== ) ;; { "EDNS-VERSION": 0 }
	BPA.GOV A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`BPA.GOV. 300 IN RRSIG ( A 8 2 300 20260320164007 20260313154007 24271 bpa.gov. EHHMknpHnMnLJ3gddDenSSqxfbai1DR/jILkJMQRK7CrRD5Kbm0Cj82bAhJMQxbiZoKaLQKr96Tg IntC0B6Mmw9J/orLx9tj8s4s+XpPBvAiZ9HS3wBDjYeNZDUM3sb870GZRSGveoKzEla1tR3q/1JF 8RB42vIev562bnaDQ3q7TP5MdOcydMWw4e8rUU3FJNLBs6puy9jaZ2HfgAK5WUYe+0Ud0IBoXgvR MmlfzNxxYi9eHKzXH+6w2YWtz/Vj97FH2lAJg9ndm4toj20QDRbGHJDbyV8FCwgUL0GH1xnbAMOu zEPYDlXl2S8jeKQp5hBtuvJKEHF9rngASoNtjA== )`
	`BPA.GOV. 300 IN RRSIG ( A 8 2 300 20260321163719 20260314153719 27741 bpa.gov. e5zJQKaRGYfVehfMJdaaeEa4q/Mj9p+MWI+vKVM+uYiRNEhjU9SFKUXMwoFeiSHrLmDj47iDhXxk sfm+r1KtB8f/U367+oTKOOR7x18jSe4mYV6RDb14YdD3YRa2b0XHrSrnu9AZtvoiHGKGI3LFGXXg vZZ9YV/IqUg3e9jhomJuk2jmWLmD/b+Xjozp8YXV8mF6uNtwlC23f3KuNkEN2H9YObUoTgf3SFbL zpqPpOGe2alT0oK8kXhQjZMceYOpqA07cUJwZ1SUDC3wtV7G5fNOO71wKTmpWkSKgy8jdASiEl7V yXZVck0QV5RVmfweRajGEbEtX6fVyxcYtxnWHw== )`
	RRSIG=24271 and DNSKEY=24271 verifies the A RRset
	RRSIG=27741 and DNSKEY=27741 verifies the A RRset

BPA.GOV

	Query to ns1.BPA.GOV for BPA.GOV/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 16498 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (3 records) BPA.GOV. 300 IN A 20.42.128.100 BPA.GOV. 300 IN RRSIG ( A 8 2 300 20260320163906 20260313153906 24271 bpa.gov. cPAq0Cbjut7GKrncGeynzrGrWgGY8cyqB9m4H6AcJlQgFTKhLggK9orWrHL1Tv9yz1AF+ufrhqYM 8ySLZsdT1I9sKAHiD2wbwP3wwQR+jS/jYmHNioAdKj1SPKfT399kPEj2/H9iT0mEFRq4k23eTxoR Nfulu6STdzuM1hDCUFtYaBQgbC45u/4XgTh150O17ED6JTNntRvuPFbxg9x3aeulhh5GJ+SBFeDE VzuQLRq9TTIYEIQPfjCoUvFrbPtTINdM30AEBKX3NDnxr2t458WZgWwyXTWFTean2JuC0/gOdZ5j rLfY6TCnH+pIieVcPUi5Q8ksdjuMkThk/60SKQ== ) BPA.GOV. 300 IN RRSIG ( A 8 2 300 20260321163733 20260314153733 27741 bpa.gov. dwdMxTGYHkEDqSw5h8xdSqr+eS3clhSEychNDcnW7Q3jd4I+KXNPt4SfKRPVry5gtiLrcp0I1dHh iSx5Sdg4OQTxVfdSVjFm3/HbGovmeHtw4mMtqCwXfAGMQehxPbMEYovl3PgxHnp77mX4F0AoH3Jl accM6dPqEqIjyDlpY6Q38/ArHnmxSl7adS2D0+/kvZ6JZ+Ujng25zJInkKMEu5BGsgV7wqUAdrZ7 PxCamSMAcfP4vbgEN3RVMLgmlQkWHCk9TQJPZypFb9J2luoKt2N+1XmfpQwas6f4X0u+ptqte86l U907iENqZ60rOyzzA8ZAV2N9yOKH/sC5aFhMlQ== ) ;; AUTHORITY SECTION (4 records) BPA.GOV. 86400 IN NS ns1.BPA.GOV. BPA.GOV. 86400 IN NS ns2.BPA.GOV. BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260320163712 20260313153712 24271 bpa.gov. VJJ3bPGh716ouHUZ2bfPzVCltLESXeVNJgyQwZYEIAKIGIMUveG7YCwpOHC6A4xwLGK7EKJuofVB rgiAHUmoN7wrwBCK51Vy+pNurRTJ4fZG9MzdMKBOz41HPwVTeuEpokKNCG8Z4F1syxBt9KWFHOUf v/AacKEpiICkgV/W2UGSDU5Uk6CY9RhroIkSVpaijwpHw4ihAaoRIkN8qQbBHmq7xCM/26a4B2F0 JwEDk5n2skfV7Eqis7njjY1S+Bs9bueNGglWus+KHaJwdqhK/gRwij4NNhldjJODKA7OUBvZ0qXg OzMj+2ZAdEyoM7dQtQSdvXwOT+R71e0GIMQpig== ) BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260321163708 20260314153708 27741 bpa.gov. NiYg/BT4EONS+IxW+tclIYySPDw8CrPizVLLCfWy4zaTcI7+ssRv01mi5xq5d9L58jvh6qCsz/kl rrlN84TWNSeFNqhL3BjSv4b7j112Uo/Sf/xrb64K/jMKUVh8ARGDkRTvn7ZyeBx0fnahi0R6PD5b nvEzp8V8cLpj6n7xGP9bSMITwrGgZfUz4bGG6/HqHVi/mWj4M3dPJohB2/u4Mk3sT73h37lVoxum CAaituF9xFMx3P9B8uXQMLOoXNfiizzlt7MDB3cQ4DxaRleCPHdoKfP1zI78eEiiNXnRSC6jkoIF GUzNFuydn5bYCfrbDLYtlvRdkTdSNw+kwMPVsw== ) ;; ADDITIONAL SECTION (7 records) ns1.BPA.GOV. 86400 IN A 170.160.36.10 ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260320163712 20260313153712 24271 bpa.gov. qGyAwD7WjwnWBYedBiJzWozh5U1xWiRNr+mWec0x7XLT8h5/xnmWKksM8f0pQnpxdGSycl4/dCJd ytlacVblzZYQwxWqky3Fmafj9D4Y8wczsyzFKfaxpYl08PYV5wxnMa3oosO0d3jVv5uMp9pgxzx8 FLbNkcr6ZEeptKkFlMpinASleDp1y9fgtf/ZN+Y8csJEkoVXbTZaR7vehyFKapkT5USuNDO+BYy2 bJpRwOAorU6W169/D/Hg5Eg0Z29vag7HjbmFRFjB/6x91sC8hrlVIbjwe9Yq+E2cqSE/o9x7Cu2K aK5NNhfNwZqYiiA3hEnAh4lMb4SoQUDKTO3fUw== ) ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260321163708 20260314153708 27741 bpa.gov. U+PiD6eeFMJNiuSnhpO8ucwxyc+QoPsmcvrBaiAE1APjPeNBXHjZAbbhAZ5WDjjpPomVtiFdVL4K Nzr8BDeec3uAlNAJ2Aw/Hw7Et2jNdFyv/yMO7rp7S9U5oJtedRv9CSgedRVwpZdJEfTZuUHYdigt QH0oRk3er7znrZXWLup+DuQopvVt3fqm3xTnRAiRLwD6uG5Jg3LfiS2Yq2c8QT/vJ3S1ZlS9PXDq VHv91BhKzFnadkbudV2ddo+E0BwhEqebFHJZ5Hc6owNYs/CSP1/2x3Y4Dpnss++JkobRyqfKDU/l ITDMtnbAQ302GE7ezMEnAV3UQNleMxS1NXQ8wA== ) ns2.BPA.GOV. 86400 IN A 170.160.100.10 ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260320163712 20260313153712 24271 bpa.gov. HFh3oin3mzhJadPUWaVtlDFHHzPPlROjpnh7CnXFeptOahf9ZJK+5i+Nx/yI1BMO4bfqvYukmI/q qsLcIrN1tjNhFHDGDcjES6d1jfyhXHVVQYRb7zEqnh/6F+cp1SQG5QiBe4l4SpHr94eMxaZTsQIO a1lY69Vl8UKt0rOOEruxa9cs/7OWh0lsUCjjLDMqAC/yy8PIAooUZoG3EiLcXL8D98K+qlO1oegz PFZXKf1AfWZAlUPobbQXhlOcCi0vS6uK13cSxIZlznWIgyRHWNz5cBkxFc6EpawSB2vwFRg5ITcw mcTTRShA/1jgkF9uHgLJeif70H5A7pKOz2poWg== ) ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260321163708 20260314153708 27741 bpa.gov. iaTe2/wFcLBeGfwrIkcxGKVnndhaK4Ca4dBJUFdyroX28WQXnA/5iKPAOlqVIQIBsyK3n2UmXckE ERxYD8PcrXLIVcsPzAUYIciIng0ddeIxqKvgpkknFYwATFv60chLaTFSacrbD/bbhe/Fx2KlD7gZ 6/MM4VrKkskKlo8YlSwkteZtAzuXRuXrbgrCn8x2CQ5/7UJdCRPYn507pCKbSXTCf1HkHxyqU0Nx HmcYcP4lA4sxqwSOB9PodAaoRMNV8nkiKS0jYnQBO6Q1kdS4ECEOKlrR5dFzx2OBpmVhhLmXMtrD /HQeS0ENGkTjJV9MOX2ln5Km4WU2ySy+VZgPyg== ) ;; { "EDNS-VERSION": 0 }
	ns1.BPA.GOV is authoritative for BPA.GOV
	Found RRSIG signed by bpa.gov zone
	Query to ns1.BPA.GOV for BPA.GOV/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 27033 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (3 records) BPA.GOV. 300 IN A 20.42.128.100 BPA.GOV. 300 IN RRSIG ( A 8 2 300 20260320163906 20260313153906 24271 bpa.gov. cPAq0Cbjut7GKrncGeynzrGrWgGY8cyqB9m4H6AcJlQgFTKhLggK9orWrHL1Tv9yz1AF+ufrhqYM 8ySLZsdT1I9sKAHiD2wbwP3wwQR+jS/jYmHNioAdKj1SPKfT399kPEj2/H9iT0mEFRq4k23eTxoR Nfulu6STdzuM1hDCUFtYaBQgbC45u/4XgTh150O17ED6JTNntRvuPFbxg9x3aeulhh5GJ+SBFeDE VzuQLRq9TTIYEIQPfjCoUvFrbPtTINdM30AEBKX3NDnxr2t458WZgWwyXTWFTean2JuC0/gOdZ5j rLfY6TCnH+pIieVcPUi5Q8ksdjuMkThk/60SKQ== ) BPA.GOV. 300 IN RRSIG ( A 8 2 300 20260321163733 20260314153733 27741 bpa.gov. dwdMxTGYHkEDqSw5h8xdSqr+eS3clhSEychNDcnW7Q3jd4I+KXNPt4SfKRPVry5gtiLrcp0I1dHh iSx5Sdg4OQTxVfdSVjFm3/HbGovmeHtw4mMtqCwXfAGMQehxPbMEYovl3PgxHnp77mX4F0AoH3Jl accM6dPqEqIjyDlpY6Q38/ArHnmxSl7adS2D0+/kvZ6JZ+Ujng25zJInkKMEu5BGsgV7wqUAdrZ7 PxCamSMAcfP4vbgEN3RVMLgmlQkWHCk9TQJPZypFb9J2luoKt2N+1XmfpQwas6f4X0u+ptqte86l U907iENqZ60rOyzzA8ZAV2N9yOKH/sC5aFhMlQ== ) ;; AUTHORITY SECTION (4 records) BPA.GOV. 86400 IN NS ns1.BPA.GOV. BPA.GOV. 86400 IN NS ns2.BPA.GOV. BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260320163712 20260313153712 24271 bpa.gov. VJJ3bPGh716ouHUZ2bfPzVCltLESXeVNJgyQwZYEIAKIGIMUveG7YCwpOHC6A4xwLGK7EKJuofVB rgiAHUmoN7wrwBCK51Vy+pNurRTJ4fZG9MzdMKBOz41HPwVTeuEpokKNCG8Z4F1syxBt9KWFHOUf v/AacKEpiICkgV/W2UGSDU5Uk6CY9RhroIkSVpaijwpHw4ihAaoRIkN8qQbBHmq7xCM/26a4B2F0 JwEDk5n2skfV7Eqis7njjY1S+Bs9bueNGglWus+KHaJwdqhK/gRwij4NNhldjJODKA7OUBvZ0qXg OzMj+2ZAdEyoM7dQtQSdvXwOT+R71e0GIMQpig== ) BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260321163708 20260314153708 27741 bpa.gov. NiYg/BT4EONS+IxW+tclIYySPDw8CrPizVLLCfWy4zaTcI7+ssRv01mi5xq5d9L58jvh6qCsz/kl rrlN84TWNSeFNqhL3BjSv4b7j112Uo/Sf/xrb64K/jMKUVh8ARGDkRTvn7ZyeBx0fnahi0R6PD5b nvEzp8V8cLpj6n7xGP9bSMITwrGgZfUz4bGG6/HqHVi/mWj4M3dPJohB2/u4Mk3sT73h37lVoxum CAaituF9xFMx3P9B8uXQMLOoXNfiizzlt7MDB3cQ4DxaRleCPHdoKfP1zI78eEiiNXnRSC6jkoIF GUzNFuydn5bYCfrbDLYtlvRdkTdSNw+kwMPVsw== ) ;; ADDITIONAL SECTION (7 records) ns1.BPA.GOV. 86400 IN A 170.160.36.10 ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260320163712 20260313153712 24271 bpa.gov. qGyAwD7WjwnWBYedBiJzWozh5U1xWiRNr+mWec0x7XLT8h5/xnmWKksM8f0pQnpxdGSycl4/dCJd ytlacVblzZYQwxWqky3Fmafj9D4Y8wczsyzFKfaxpYl08PYV5wxnMa3oosO0d3jVv5uMp9pgxzx8 FLbNkcr6ZEeptKkFlMpinASleDp1y9fgtf/ZN+Y8csJEkoVXbTZaR7vehyFKapkT5USuNDO+BYy2 bJpRwOAorU6W169/D/Hg5Eg0Z29vag7HjbmFRFjB/6x91sC8hrlVIbjwe9Yq+E2cqSE/o9x7Cu2K aK5NNhfNwZqYiiA3hEnAh4lMb4SoQUDKTO3fUw== ) ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260321163708 20260314153708 27741 bpa.gov. U+PiD6eeFMJNiuSnhpO8ucwxyc+QoPsmcvrBaiAE1APjPeNBXHjZAbbhAZ5WDjjpPomVtiFdVL4K Nzr8BDeec3uAlNAJ2Aw/Hw7Et2jNdFyv/yMO7rp7S9U5oJtedRv9CSgedRVwpZdJEfTZuUHYdigt QH0oRk3er7znrZXWLup+DuQopvVt3fqm3xTnRAiRLwD6uG5Jg3LfiS2Yq2c8QT/vJ3S1ZlS9PXDq VHv91BhKzFnadkbudV2ddo+E0BwhEqebFHJZ5Hc6owNYs/CSP1/2x3Y4Dpnss++JkobRyqfKDU/l ITDMtnbAQ302GE7ezMEnAV3UQNleMxS1NXQ8wA== ) ns2.BPA.GOV. 86400 IN A 170.160.100.10 ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260320163712 20260313153712 24271 bpa.gov. HFh3oin3mzhJadPUWaVtlDFHHzPPlROjpnh7CnXFeptOahf9ZJK+5i+Nx/yI1BMO4bfqvYukmI/q qsLcIrN1tjNhFHDGDcjES6d1jfyhXHVVQYRb7zEqnh/6F+cp1SQG5QiBe4l4SpHr94eMxaZTsQIO a1lY69Vl8UKt0rOOEruxa9cs/7OWh0lsUCjjLDMqAC/yy8PIAooUZoG3EiLcXL8D98K+qlO1oegz PFZXKf1AfWZAlUPobbQXhlOcCi0vS6uK13cSxIZlznWIgyRHWNz5cBkxFc6EpawSB2vwFRg5ITcw mcTTRShA/1jgkF9uHgLJeif70H5A7pKOz2poWg== ) ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20260321163708 20260314153708 27741 bpa.gov. iaTe2/wFcLBeGfwrIkcxGKVnndhaK4Ca4dBJUFdyroX28WQXnA/5iKPAOlqVIQIBsyK3n2UmXckE ERxYD8PcrXLIVcsPzAUYIciIng0ddeIxqKvgpkknFYwATFv60chLaTFSacrbD/bbhe/Fx2KlD7gZ 6/MM4VrKkskKlo8YlSwkteZtAzuXRuXrbgrCn8x2CQ5/7UJdCRPYn507pCKbSXTCf1HkHxyqU0Nx HmcYcP4lA4sxqwSOB9PodAaoRMNV8nkiKS0jYnQBO6Q1kdS4ECEOKlrR5dFzx2OBpmVhhLmXMtrD /HQeS0ENGkTjJV9MOX2ln5Km4WU2ySy+VZgPyg== ) ;; { "EDNS-VERSION": 0 }
	BPA.GOV A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`BPA.GOV. 300 IN RRSIG ( A 8 2 300 20260320163906 20260313153906 24271 bpa.gov. cPAq0Cbjut7GKrncGeynzrGrWgGY8cyqB9m4H6AcJlQgFTKhLggK9orWrHL1Tv9yz1AF+ufrhqYM 8ySLZsdT1I9sKAHiD2wbwP3wwQR+jS/jYmHNioAdKj1SPKfT399kPEj2/H9iT0mEFRq4k23eTxoR Nfulu6STdzuM1hDCUFtYaBQgbC45u/4XgTh150O17ED6JTNntRvuPFbxg9x3aeulhh5GJ+SBFeDE VzuQLRq9TTIYEIQPfjCoUvFrbPtTINdM30AEBKX3NDnxr2t458WZgWwyXTWFTean2JuC0/gOdZ5j rLfY6TCnH+pIieVcPUi5Q8ksdjuMkThk/60SKQ== )`
	`BPA.GOV. 300 IN RRSIG ( A 8 2 300 20260321163733 20260314153733 27741 bpa.gov. dwdMxTGYHkEDqSw5h8xdSqr+eS3clhSEychNDcnW7Q3jd4I+KXNPt4SfKRPVry5gtiLrcp0I1dHh iSx5Sdg4OQTxVfdSVjFm3/HbGovmeHtw4mMtqCwXfAGMQehxPbMEYovl3PgxHnp77mX4F0AoH3Jl accM6dPqEqIjyDlpY6Q38/ArHnmxSl7adS2D0+/kvZ6JZ+Ujng25zJInkKMEu5BGsgV7wqUAdrZ7 PxCamSMAcfP4vbgEN3RVMLgmlQkWHCk9TQJPZypFb9J2luoKt2N+1XmfpQwas6f4X0u+ptqte86l U907iENqZ60rOyzzA8ZAV2N9yOKH/sC5aFhMlQ== )`
	RRSIG=24271 and DNSKEY=24271 verifies the A RRset
	RRSIG=27741 and DNSKEY=27741 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test BPA.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: