DNSSEC Debugger

Domain Name:

Time: 2025-12-14 13:52:45 UTC

Analyzing DNSSEC problems for BPA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1139 octets ;; HEADER SECTION ;; id = 49821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to e.root-servers.net for BPA.GOV/A
	Received 614 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 614 octets ;; HEADER SECTION ;; id = 14661 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20251227050000 20251214040000 61809 . AEgRyBji/41A/pS7Kfg7ssWMnWNOMLuYGZQHnpMLnmrFetitsP0pF0uqBrcvPcpDb61UCDJ7/Lqc 2y+gT+QA+n7HHE6rr++Ia2lK4aJVgcYX+dG18qJhsdirkOSgezc5U7jidOzSM32juCZmS0ecwL87 mnLDEmqMiA3zVlui5zj5PwNsMEmCm6qSGmuRsnroHWBimL+BsX4CBt2lJwjHH96Z6q0nNria0KkW wpgaW9v+SdhvOeBGh4sQEyzaJZNGpTDMJLmwzgJxX4NeLP0/swA4ycQ0vhZPLhE25r6yUWSEvtbK 6dNt8pH4qDt3BpaNUey1A5wzPynq7uufI+ttOg== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for GOV/DNSKEY
	Received 616 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 616 octets ;; HEADER SECTION ;; id = 63880 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251227050000 20251214040000 61809 . AEgRyBji/41A/pS7Kfg7ssWMnWNOMLuYGZQHnpMLnmrFetitsP0pF0uqBrcvPcpDb61UCDJ7/Lqc 2y+gT+QA+n7HHE6rr++Ia2lK4aJVgcYX+dG18qJhsdirkOSgezc5U7jidOzSM32juCZmS0ecwL87 mnLDEmqMiA3zVlui5zj5PwNsMEmCm6qSGmuRsnroHWBimL+BsX4CBt2lJwjHH96Z6q0nNria0KkW wpgaW9v+SdhvOeBGh4sQEyzaJZNGpTDMJLmwzgJxX4NeLP0/swA4ycQ0vhZPLhE25r6yUWSEvtbK 6dNt8pH4qDt3BpaNUey1A5wzPynq7uufI+ttOg== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to l.root-servers.net for GOV/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 8096 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20251227050000 20251214040000 61809 . AEgRyBji/41A/pS7Kfg7ssWMnWNOMLuYGZQHnpMLnmrFetitsP0pF0uqBrcvPcpDb61UCDJ7/Lqc 2y+gT+QA+n7HHE6rr++Ia2lK4aJVgcYX+dG18qJhsdirkOSgezc5U7jidOzSM32juCZmS0ecwL87 mnLDEmqMiA3zVlui5zj5PwNsMEmCm6qSGmuRsnroHWBimL+BsX4CBt2lJwjHH96Z6q0nNria0KkW wpgaW9v+SdhvOeBGh4sQEyzaJZNGpTDMJLmwzgJxX4NeLP0/swA4ycQ0vhZPLhE25r6yUWSEvtbK 6dNt8pH4qDt3BpaNUey1A5wzPynq7uufI+ttOg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20251227050000 20251214040000 61809 . AEgRyBji/41A/pS7Kfg7ssWMnWNOMLuYGZQHnpMLnmrFetitsP0pF0uqBrcvPcpDb61UCDJ7/Lqc 2y+gT+QA+n7HHE6rr++Ia2lK4aJVgcYX+dG18qJhsdirkOSgezc5U7jidOzSM32juCZmS0ecwL87 mnLDEmqMiA3zVlui5zj5PwNsMEmCm6qSGmuRsnroHWBimL+BsX4CBt2lJwjHH96Z6q0nNria0KkW wpgaW9v+SdhvOeBGh4sQEyzaJZNGpTDMJLmwzgJxX4NeLP0/swA4ycQ0vhZPLhE25r6yUWSEvtbK 6dNt8pH4qDt3BpaNUey1A5wzPynq7uufI+ttOg== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.gov for GOV/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 16786 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260205110617 20251206110617 2536 gov. nZHIPZZ3z80AAkg8IDRVDprfpie4C0q93y05w0bzGd/fdwD8ocNWH6iMFuJ1B13pIaERw0TJTBOo cbM9gLWhNQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260205110617 20251206110617 2536 gov. nZHIPZZ3z80AAkg8IDRVDprfpie4C0q93y05w0bzGd/fdwD8ocNWH6iMFuJ1B13pIaERw0TJTBOo cbM9gLWhNQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for BPA.GOV/A
	Received 299 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 299 octets ;; HEADER SECTION ;; id = 22292 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) BPA.GOV. 10800 IN NS ns1.BPA.GOV. BPA.GOV. 10800 IN NS ns2.BPA.GOV. BPA.GOV. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) BPA.GOV. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 ) BPA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251215145245 20251213125245 35496 gov. 4uXQL2tdXfJSNPQ19kC4ZMlazY7Baq201tSvDU3ky6nd7QM6Hh8TzgiQJdgEIG8feSNW6VZfs+Cq kXYdJg62YQ== ) ;; ADDITIONAL SECTION (3 records) ns1.BPA.GOV. 3600 IN A 170.160.36.10 ns2.BPA.GOV. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for BPA.GOV/DNSKEY
	Received 299 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 299 octets ;; HEADER SECTION ;; id = 36646 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) BPA.GOV. 10800 IN NS ns1.BPA.GOV. BPA.GOV. 10800 IN NS ns2.BPA.GOV. BPA.GOV. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) BPA.GOV. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 ) BPA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251215145245 20251213125245 35496 gov. Ck7RB4WctWEhxfUst/Dqf+/c2/fFA5+NmMYbQcp9tZxhmxanw/K9QbrSwM1RWVrDwl0OQdYSHNkl 9ZSQ9GIxZw== ) ;; ADDITIONAL SECTION (3 records) ns1.BPA.GOV. 3600 IN A 170.160.36.10 ns2.BPA.GOV. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Found child zone BPA.GOV

BPA.GOV

	Checking DS between GOV and BPA.GOV
	Query to d.ns.gov for BPA.GOV/DS
	Received 231 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 231 octets ;; HEADER SECTION ;; id = 55009 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN DS ;; ANSWER SECTION (3 records) BPA.GOV. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) BPA.GOV. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 ) BPA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251215145245 20251213125245 35496 gov. O089XsIBnQgoa5VelNrfEkDpFCZXzQGMLwm1KsJVsVM4Gvai3Nhqipyl5ISoeJgtob52AdpjP8ub cp6bYDhKSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for BPA.GOV in the GOV zone
	DS=14926/SHA-256 has algorithm RSASHA256
	DS=61645/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`BPA.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251215145245 20251213125245 35496 gov. O089XsIBnQgoa5VelNrfEkDpFCZXzQGMLwm1KsJVsVM4Gvai3Nhqipyl5ISoeJgtob52AdpjP8ub cp6bYDhKSw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=14926/SHA-256 is now in the chain-of-trust
	DS=61645/SHA-256 is now in the chain-of-trust
	`BPA.GOV. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 )`
	`BPA.GOV. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 )`
	Query to ns1.BPA.GOV for BPA.GOV/DNSKEY
	Received 2320 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2320 octets ;; HEADER SECTION ;; id = 6216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) BPA.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaN1xNEnVaPBn+zwBYf3L+SqtgCfkJ5EL2Z9diXo3OxheyijTExMVq39uikinIwvZk5KwmEj vS+xin7aONBiynWoxdlXN6PwXAuoyzKrFClRVEJCUriaI7wwShMl02I10eWYu3F9wb2uqo+ht5t5 gI0Lq3pPVq9Diuu3xmvKpTw4K3cIWvkwoB2yIM1C11kOxKiyy++VE93y6FmafFiPBJDYE2y21oJn 5WDAaA5M2aDjMZjU2ATPoRXOAt1ymJAsy66LqY0ThmRgzBuDcBIJRmhoAzIAGuRQ6x/PH6E3DM6w lHRNnc5/G7+0r6lEFsOxJtkV+Lt/Zie650KMBfpSRk8= ) ; keytag 12864 BPA.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZ/3KgMat5yfVjGjwogqJpCnbDMkpinom0BHP44vvc9cyMYZrf8F8/CAVkGou8LN319OIuaj QhrzabHnuHxOcOhiIArryXQPXoe1dQ0+MJRlq3If2GVG0+coTVBbbuE96tq8DAXpzJSaRLz6fwPa zTN98q6AbW9E3dcC08JGCQrLw2KvRu7jRz1zccyoj3RCTPhTpqYh0sNZwhrLtBmLnenJPjSisZmq 8PSbbrR+ulpdtA+D9rP3XF04PVD5fu6TIX+nFIyrQoKQ2IkLwuR3eY6k/ZkvMy10ZuX+UT2GHGq3 pnrPdyn34CljRg3gtMbiQu7zwlTFZ5MY/pdYU0quJo8= ) ; keytag 45886 BPA.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAcYSZyBGafjypJTxZGMYGC1C9TQyX48uinmeon2yiC8ZQhsZDF/+ik2PJ7CUXhmSfffhv2Q+ 1rLyozqZg5Y40iGPEJHKX7YA6+sH7eXYAQEEGIXe4KdX2BiMeLAnsstn6FmoFa5QW1gYsopSWjkV 9zgwBIUYm+e1qr1Zx3X405TvIBdSVB+5PGrWbvjcbIYY7aqjcSvCPOTEscByZpXMkMIL6m0fGwFF 2GqCN8pgTk5oUc/UygazskWynGaUSdXxScaLCi1BWsJuQH9e+F40CEd+AzKhFVx4auogtDS6LHb2 g2riq94/c/EZBJ/ffoyLoZeTtIX7LcgaR+tv6P+fgwU= ) ; keytag 61645 BPA.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb5ePz/0eR+f5vr5xbmM8tQEr64favsURzo3kA7DWerppoDCUeXRe6ivPkAOY9bk01wQhfUs qwjtw79HcCpsfaekD1VJUm337edVdkBeZs/ikujeB3K6834OW/PWKgzL35bPnlixZ/0Jp5zCTk2A VggSuZzxM4T67UGSqg+oQkDcPBY5gf1oLakvxl4H0IhCuEppXVbcV6J6o4PvR04Rt0wU5UUjzJ+P cXBuqcwZIXa4FQDJrVEYj68VF877u2UwYQ5FT+v7jErKQkTPvLpglqAkHiuuVrRSKVjOY8T7AjTJ IgBaixQZ6KPZqr78XUOQ0zl0pke6cmlCEzDE1ufaOgM= ) ; keytag 14926 BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251220163747 20251213153747 12864 bpa.gov. dUa0692nBFvDL36XAzAwCFScyHLW6zzLikGcca4WCVC2hxwhOuAtkPtc5mHqkSksXHNfG0acYrvE JZvOxEkf+qMLXpFnKTbzwf36MvudNeE0a47FdTXz55foErWjPwjIa8F5iyMqOs2iqVsK+gd9xEjG kxzQA9noK/YALgkS8a3U/3P+nNQi69Sx9V02vnU7k4XxL1oaYPz594T33cEoFXBiAGB3WvJhNlvD d3oH14wMob9YlHo4AwY5ji0kXadarxuy7Pw3XqINWEAm1VeexHvI8kSgD1JD+vl3v+RAX7uom846 DCZWzDJ/jrlFHF7+s7sfQslA7XeXD5LxqsF1Iw== ) BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251220163747 20251213153747 45886 bpa.gov. jZDwzVXH10G9XHtBstkvZX4IofprLv0ahCd3HLDKQzHfuutJkZHnjp/5EUXr95+H++NoFSciI77/ d3jEVpzHFhDSNS7xCB/rLOZg4i9BFjPVhT3/l6yGGyrKhgPxJceewojnmUWmo2lcgqO+0InmTrcn 1ZoUMto/XdedHAnvYL7XRNGcMVmYSdfKXaxqab9XTg5+je6a6/lY0XyV023rEtY2f0Q7kqyDlJNn 30qLYWY0NIb9XRLvqVf6zLyAMhaxTIADwR5z+fLILHJvvKGTSRVNLTOlCRq970eAT35Uoz6N6YMO WkWIb9E9Y7IGpzIWsKhTbCA7N1GzC1CaW6DyNQ== ) BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251220163747 20251213153747 61645 bpa.gov. PmLO1HfLK+mtxI30ifwt+7hLP8Ch/GTDWzTMH6q3JT4KtPCw6f4iAStAeMX8j9ZWyiCIWGVAUe/t 7Z4S58xFtZPX4quyIpj2uR8n5zgQ0ZudsDikkm+GDfV+2+s0DHN49sC0ccLJMp9EsrZBCR8AfAEI CUXrayEgfD2E/oe+SudtEcaLtVOKM4Pmq6/MrXrhZlCjHrKK7+IsJKm9UoNFBw60Nc5GafOJ6ZN8 eKmoGBpJSuUJ8YXJK/aPv2VFOGqGrq7UHDC0j5eplZnyl8z7Zn7H1k03I6QeSl6szkjHhOpC9P5d GFFIaqeguthbicOWj3kwz/HbqjaEUUiSEuLqmw== ) BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251220163747 20251213153747 14926 bpa.gov. k+hBuO9/k+kG1NJOmAPR7YJcKOxdEnl3h7PWnYtBDzV59b+kGkTDOiLgEyWY05oUy25qKeU/6YNk 4ARy1VtJLRJMLamCfK7pcCbow0uLSg9K5PICpyjuYkZgCT405fwqbPF7FvLZJpEpGGrx6gt5WeYH 5I8wY67QW74X8Uc6xnL+O6rEHP1YU8bAc2zEWG5wlGMZx8M+9QkCgMiquPp6ucw5H55v2YPNajP2 j9VtKaQ415D2xH0UNqDoYS6/D1SIdo6LlRWy96/uub3/WjGGW3Be4ppD7Hg6T7YSty3t5Wu8Tnw/ kirs69+oVFJOi9HcuxeMZApNTmwPSSdHND6X5w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for BPA.GOV
	`BPA.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaN1xNEnVaPBn+zwBYf3L+SqtgCfkJ5EL2Z9diXo3OxheyijTExMVq39uikinIwvZk5KwmEj vS+xin7aONBiynWoxdlXN6PwXAuoyzKrFClRVEJCUriaI7wwShMl02I10eWYu3F9wb2uqo+ht5t5 gI0Lq3pPVq9Diuu3xmvKpTw4K3cIWvkwoB2yIM1C11kOxKiyy++VE93y6FmafFiPBJDYE2y21oJn 5WDAaA5M2aDjMZjU2ATPoRXOAt1ymJAsy66LqY0ThmRgzBuDcBIJRmhoAzIAGuRQ6x/PH6E3DM6w lHRNnc5/G7+0r6lEFsOxJtkV+Lt/Zie650KMBfpSRk8= ) ; keytag 12864`
	`BPA.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZ/3KgMat5yfVjGjwogqJpCnbDMkpinom0BHP44vvc9cyMYZrf8F8/CAVkGou8LN319OIuaj QhrzabHnuHxOcOhiIArryXQPXoe1dQ0+MJRlq3If2GVG0+coTVBbbuE96tq8DAXpzJSaRLz6fwPa zTN98q6AbW9E3dcC08JGCQrLw2KvRu7jRz1zccyoj3RCTPhTpqYh0sNZwhrLtBmLnenJPjSisZmq 8PSbbrR+ulpdtA+D9rP3XF04PVD5fu6TIX+nFIyrQoKQ2IkLwuR3eY6k/ZkvMy10ZuX+UT2GHGq3 pnrPdyn34CljRg3gtMbiQu7zwlTFZ5MY/pdYU0quJo8= ) ; keytag 45886`
	`BPA.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAcYSZyBGafjypJTxZGMYGC1C9TQyX48uinmeon2yiC8ZQhsZDF/+ik2PJ7CUXhmSfffhv2Q+ 1rLyozqZg5Y40iGPEJHKX7YA6+sH7eXYAQEEGIXe4KdX2BiMeLAnsstn6FmoFa5QW1gYsopSWjkV 9zgwBIUYm+e1qr1Zx3X405TvIBdSVB+5PGrWbvjcbIYY7aqjcSvCPOTEscByZpXMkMIL6m0fGwFF 2GqCN8pgTk5oUc/UygazskWynGaUSdXxScaLCi1BWsJuQH9e+F40CEd+AzKhFVx4auogtDS6LHb2 g2riq94/c/EZBJ/ffoyLoZeTtIX7LcgaR+tv6P+fgwU= ) ; keytag 61645`
	`BPA.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb5ePz/0eR+f5vr5xbmM8tQEr64favsURzo3kA7DWerppoDCUeXRe6ivPkAOY9bk01wQhfUs qwjtw79HcCpsfaekD1VJUm337edVdkBeZs/ikujeB3K6834OW/PWKgzL35bPnlixZ/0Jp5zCTk2A VggSuZzxM4T67UGSqg+oQkDcPBY5gf1oLakvxl4H0IhCuEppXVbcV6J6o4PvR04Rt0wU5UUjzJ+P cXBuqcwZIXa4FQDJrVEYj68VF877u2UwYQ5FT+v7jErKQkTPvLpglqAkHiuuVrRSKVjOY8T7AjTJ IgBaixQZ6KPZqr78XUOQ0zl0pke6cmlCEzDE1ufaOgM= ) ; keytag 14926`
	DNSKEY=61645/SEP is now in the chain-of-trust
	DS=61645/SHA-256 verifies DNSKEY=61645/SEP
	DNSKEY=14926/SEP is now in the chain-of-trust
	DS=14926/SHA-256 verifies DNSKEY=14926/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251220163747 20251213153747 12864 bpa.gov. dUa0692nBFvDL36XAzAwCFScyHLW6zzLikGcca4WCVC2hxwhOuAtkPtc5mHqkSksXHNfG0acYrvE JZvOxEkf+qMLXpFnKTbzwf36MvudNeE0a47FdTXz55foErWjPwjIa8F5iyMqOs2iqVsK+gd9xEjG kxzQA9noK/YALgkS8a3U/3P+nNQi69Sx9V02vnU7k4XxL1oaYPz594T33cEoFXBiAGB3WvJhNlvD d3oH14wMob9YlHo4AwY5ji0kXadarxuy7Pw3XqINWEAm1VeexHvI8kSgD1JD+vl3v+RAX7uom846 DCZWzDJ/jrlFHF7+s7sfQslA7XeXD5LxqsF1Iw== )`
	`BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251220163747 20251213153747 45886 bpa.gov. jZDwzVXH10G9XHtBstkvZX4IofprLv0ahCd3HLDKQzHfuutJkZHnjp/5EUXr95+H++NoFSciI77/ d3jEVpzHFhDSNS7xCB/rLOZg4i9BFjPVhT3/l6yGGyrKhgPxJceewojnmUWmo2lcgqO+0InmTrcn 1ZoUMto/XdedHAnvYL7XRNGcMVmYSdfKXaxqab9XTg5+je6a6/lY0XyV023rEtY2f0Q7kqyDlJNn 30qLYWY0NIb9XRLvqVf6zLyAMhaxTIADwR5z+fLILHJvvKGTSRVNLTOlCRq970eAT35Uoz6N6YMO WkWIb9E9Y7IGpzIWsKhTbCA7N1GzC1CaW6DyNQ== )`
	`BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251220163747 20251213153747 61645 bpa.gov. PmLO1HfLK+mtxI30ifwt+7hLP8Ch/GTDWzTMH6q3JT4KtPCw6f4iAStAeMX8j9ZWyiCIWGVAUe/t 7Z4S58xFtZPX4quyIpj2uR8n5zgQ0ZudsDikkm+GDfV+2+s0DHN49sC0ccLJMp9EsrZBCR8AfAEI CUXrayEgfD2E/oe+SudtEcaLtVOKM4Pmq6/MrXrhZlCjHrKK7+IsJKm9UoNFBw60Nc5GafOJ6ZN8 eKmoGBpJSuUJ8YXJK/aPv2VFOGqGrq7UHDC0j5eplZnyl8z7Zn7H1k03I6QeSl6szkjHhOpC9P5d GFFIaqeguthbicOWj3kwz/HbqjaEUUiSEuLqmw== )`
	`BPA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251220163747 20251213153747 14926 bpa.gov. k+hBuO9/k+kG1NJOmAPR7YJcKOxdEnl3h7PWnYtBDzV59b+kGkTDOiLgEyWY05oUy25qKeU/6YNk 4ARy1VtJLRJMLamCfK7pcCbow0uLSg9K5PICpyjuYkZgCT405fwqbPF7FvLZJpEpGGrx6gt5WeYH 5I8wY67QW74X8Uc6xnL+O6rEHP1YU8bAc2zEWG5wlGMZx8M+9QkCgMiquPp6ucw5H55v2YPNajP2 j9VtKaQ415D2xH0UNqDoYS6/D1SIdo6LlRWy96/uub3/WjGGW3Be4ppD7Hg6T7YSty3t5Wu8Tnw/ kirs69+oVFJOi9HcuxeMZApNTmwPSSdHND6X5w== )`
	RRSIG=12864 and DNSKEY=12864 verifies the DNSKEY RRset
	RRSIG=45886 and DNSKEY=45886 verifies the DNSKEY RRset
	RRSIG=61645 and DNSKEY=61645/SEP verifies the DNSKEY RRset
	RRSIG=14926 and DNSKEY=14926/SEP verifies the DNSKEY RRset
	DNSKEY=12864 is now in the chain-of-trust
	DNSKEY=45886 is now in the chain-of-trust
	Query to ns1.BPA.GOV for BPA.GOV/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 41778 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (3 records) BPA.GOV. 300 IN A 20.42.128.100 BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251219164249 20251212154249 12864 bpa.gov. LNMzTmK77MhaBrP6gEmnMi0JnFft9C4rkjq5GituW0MrilsCc7MnCBAEHGEAGK1FwpzhXAB2YqCb xjrfj5FRNGvdarV55vgB2YrQv1XHH0ZfnrSn1q5xHmF0JgJ0qECZJKJE3AhhJL/89IRWObpAKefX Q/CtCGByogNzulsjvI8eNrCo6BTooQ1BgLZDv9J3k14gLzFzsc882KPlm+CaE0Cd1Ejb98d3x5sb sEimyX7WmmaQKy28zqaECWWx8MsTM1MM39BxvzNzMnRqWtgzZtBTz4TqdDaKUoEm+4uMGAKn97nG +f4ggXMdDUP9bT6s6t/LsBcQLYqMcO82pm7cng== ) BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251220163916 20251213153916 45886 bpa.gov. B42jYP9Q9ZdG4uQlZa/Ut70Z6Zzvzdu5ZQ4cOelcgMZbB9AMslETDIramai8m2ynvneqcovA2NYT qHeCTIWm2y8L1uKnsWIvkJ46I2X0hv/kuW7gaMtJju+MBJKCznQcxQxbZ3Ri0gzONYpQzdbjPcaG HdZKZSdAtI8CzcgWaF5VhCB2csg5BvkHftgI2RGMyGdFpJXU7M1E9UxEh0d9Pk8W7glR9wTIF+zS c+hTZlyeQwRLE018iLvwZLbAsjy6XQWYLsxuET7IEmivH5dWQvoaNwlVjx8rjaaMKLLrkzQVeZCr uRt4cslccZwLNPgmorK/z+dH9G6SPnh82IqluQ== ) ;; AUTHORITY SECTION (4 records) BPA.GOV. 86400 IN NS ns2.BPA.GOV. BPA.GOV. 86400 IN NS ns1.BPA.GOV. BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251219163719 20251212153719 12864 bpa.gov. bK/IE4TqI9Vr6r0bU6PRKWaxtoJFZKQ0rocUUxNiMf9a77MgOZYP5cCV/evqCdz027cRY6g3VBWh l9jaPP4+2lsxNzzCDNE9mCx7ckB9kqq+IAcGPman3t+qIvOX4zQrClfzwwLRvpWC4fGxxkAwkeQF 6VRBcraxgfhq4Z0vJGvNktYLiq8gGjVt19ZfoJtj24qdclY4cR3twmQ6Z+XBxjKg/byB8ltFNTCR 48XfhWvKADmeEu7andMvhoSRoLA++lnfU3x6OI/UZPjLP055rbtq+/k/fxJMKD9S5CmmkaeDHUCi Gz7s2MG3roXl9CMm+Zcuc3HMxMnDMDp+Mo4PlQ== ) BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251220163716 20251213153716 45886 bpa.gov. GW/zanYjxlSr8s3HTrJzGCPmnqUK/yy8IRuHPTfdhhhn9jJ+EOMXf9Q6cVsPRomE6FhOuomrXtOQ y50NReq4pKD02fc4eXYrSxS9LqDNuWSxE4eYDNP0VaKlZOHCkgKSdyWLZzS4cQikAIiRA76IE4nX 9C4XV8fNp3Lg1CTBF/J8e9uefGTP/0MaXL50DdHKVs298bFZSxpxNdgY5ErAw1j2aD39dpHvJgXE HjS+D1LdvLi1Zm3SRnHw3p8iI6ItIGr178/rcmjh1uUByYyRQESlC8RZzlQqkwZ3cPtBQuG7hFxE h4suoGD+lF4v0P+XLGtea4L6XpaSpJ36oqNT6A== ) ;; ADDITIONAL SECTION (7 records) ns1.BPA.GOV. 86400 IN A 170.160.36.10 ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251219163719 20251212153719 12864 bpa.gov. A69Jr8AYWmjbXQhtlqVhhaTNVUgH72shrwLlJ7mPRmdMPcPFtxlbmzbwNIWURo07nf9XsPbeLc/S YMuQaU57XyLPSWzyhk+nItFDAD/jXe6NDcDt0GFKTk7iokVOKqktWlby8PfHjqe2+/p4OlNsRP6t l1YlT5KnRZLiB3/MbY8S0ai0jasEqtE0NmsMOx+C6p6NZ/IALq2eJmtZyT6vJzioxumEu2pBaIFf 8h9r7pHxmcd+is2oFbPrNHwt9wJSgoTS/RksmosHdg9KorCQ07kohc17I3pulJ5ONtH7x/9NiKB6 DRJZja0/AriGpSVSs4F+9RBoBxVVn9TehJlbMg== ) ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251220163716 20251213153716 45886 bpa.gov. DM9OdVHVtSUZvTMNst8Uxymdr71PywvBlDP4ARNolijMxcJUf3sbNo/0c+hLL/MZ5sjtVWi2C+x3 WLmEtopKcwpmym/t6swZctfue6LLqk9VYvaI1+n91XWcrIHzieCmoPSULZ55295FX/u0IagYkxie A/aMXzzMPYY8Jg56+YKL7K2mlALwbOKBdBk0NqeB5R2dXxbm+xc0pWIjP+6MwrVXzissk3Vv2qlp 38P+oPQKDyZK5MOadf4scMsM+3tXLnqv1TS6YPssm8drIqKJc8cw01NjrBYpAxFBti5Iu22uvOpB eyqyTrvkEZMOrgRTLmHrcrZ1+H+/gwWtM2/RYA== ) ns2.BPA.GOV. 86400 IN A 170.160.100.10 ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251219163719 20251212153719 12864 bpa.gov. QDID7iDWZSMz17sMHsrR/ha/+zl9/xljiDlhwrZhU5AJErxWlGyJss+5lyn4BbTn4mqKZzkaxSge ZctZPtOv9wnCdPYkQwIdxcrdPfSS5JwduPMdV3jYHavhakkOIdGbIlXFlGFoz0jlx+zO5wh7XgMx 8gKsoqMNyYhk5MPcHfye9kvb9xxs9fLl5IcFrwrfg6pD5CJJzie43W9Dx+NIlkSBBmz9QxVmEfAr XVy7Cc8KhKYI09GDDEJX6oxjmb87nFhHuvLcJsPv5Rv5CJag1S8h2El5IH/vWHSUcsDiFyIxJw2n uxg8IEnjXbkLdizDFUEF3dK2OqPKEQUuDTJZjQ== ) ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251220163716 20251213153716 45886 bpa.gov. kw+YySbTBdMp/7SU4brNQjMlEH7iVA+pa9a1D3TS4/Q2mehhOcujo+4aZjEv7h5IK2SYNbr3zmDo 54L1nh29E0+3pzYsyFaEyXF0uO5Bu71bof8P+rlWjRrr1T9dX0kOWPzPrb0ErkzpJ7ICztAZQywJ 6Kg6/tYftiPwKAvuR8DgtR3lIfCd1jd43CSwBHZv0tE7aHRPu2grJaQN4vZXfXjdQRE6Qb7awYZg +hM3oYuM3zD6jIaFUl9YyYPuEl4kVpLWp/1tN2z+rSSpCgjduOqIpujfQcmJO2/JeGUfXMUAEkHJ 9xCnwir+3rOUovH8tG3PEm2eF87WtI1gALKNCQ== ) ;; { "EDNS-VERSION": 0 }
	ns1.BPA.GOV is authoritative for BPA.GOV
	Found RRSIG signed by bpa.gov zone
	Query to ns2.BPA.GOV for BPA.GOV/SOA
	Received 2511 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2511 octets ;; HEADER SECTION ;; id = 27308 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN SOA ;; ANSWER SECTION (3 records) BPA.GOV. 43200 IN SOA ( ns1.BPA.GOV. hostmaster.BPA.GOV. 2025102101 ;serial 43200 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) BPA.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20251219205344 20251212195344 12864 bpa.gov. DPo6sCxNDtQRChlTJwNxaUgiAy24m9PPNSNPFqrWEI81X6HSi7Yh+yiwHsr6QRCtfwJ3o2NKQHgg lQVg6qg01GKkivtHUWYVbgC7yMGPdSeEyPYkbk9JAIG/ShhtcGNGapsHlAAeYeJcnXoR5++envv/ Y20MP01ocJySwoBlIAHSSaVhhfh8fRQ3nnxgmXpuF5AAuWzA3M5Y6OVgu0iP7cecfT9SEutjsfc0 vdqhTUS+GjBineYRbGYLh2Dh3QKA6ldL2o6KlNrFrpAvLU73i9TZOwv0P4sYsDO3XG0ZNRLAa0Sb 1YfG614PvyZ1J/KXiSVb/7TVZ8bZJCxyCHShLQ== ) BPA.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20251220212102 20251213202102 45886 bpa.gov. b2jzI+hMGanMttOl4OG1PLpuWW1B4KkFg2sLBMS7UU1hk49H3z3E32hstS3JKg10eODMs4GQGCF2 BCNq/wyxDuewm5PToO97gw3NeygSHpguMcDYI6+4AIsRUuWJxJ93qGCgQ4m0H2POUkBZMwRIAjUH ilyc/VG/8TMHHJNDgiE6UYJFRg9Bxci+pXq2Y+TfIQJIAiDAT5HFsvAnsm5/TDX4AQZeP/WqM8zz gSy7EqUma531rZJnUkKR64bYrgCCP/n1CeITWUxuDAcaI73PIZkBJJEkmIQ5pw6l9Vcg2CP6tVEY ob+q2RzEmq28y2Vyb/KjRTpGSRRWeKsopVCqsA== ) ;; AUTHORITY SECTION (4 records) BPA.GOV. 86400 IN NS ns2.BPA.GOV. BPA.GOV. 86400 IN NS ns1.BPA.GOV. BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251219163717 20251212153717 12864 bpa.gov. OBMmIV0sK7VV2xq9IyqThUGml8MJEQMLmC2w5P8aKLnFXtIwOFJeT2/hHP99z2nJsO8OwmFpIswS 3HR+US5LHFeTxbnjMjKLkAZ+xtPXZvRVAOU38MQ1LgCzSC24MPAVZM+zck1rRdq1WWUfDGGaMQ4n eYup1tmLiasJn3nTy3tOeG6q2C7nrnvkQn8Xpcb60FO2h5Vqh5Juaas3g3GcioBq3zIllPCBWIsI jAsudZH4HLnFHTDac5W19hom/3WMgJUaZbCjtDDI40j4GzU+aAEsHO1skGx+puFukdADa1d5RaIY 3QbfLYWX4ZMSH0raDc51hL1qEbk36UsCuXzyTQ== ) BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251220163716 20251213153716 45886 bpa.gov. GW/zanYjxlSr8s3HTrJzGCPmnqUK/yy8IRuHPTfdhhhn9jJ+EOMXf9Q6cVsPRomE6FhOuomrXtOQ y50NReq4pKD02fc4eXYrSxS9LqDNuWSxE4eYDNP0VaKlZOHCkgKSdyWLZzS4cQikAIiRA76IE4nX 9C4XV8fNp3Lg1CTBF/J8e9uefGTP/0MaXL50DdHKVs298bFZSxpxNdgY5ErAw1j2aD39dpHvJgXE HjS+D1LdvLi1Zm3SRnHw3p8iI6ItIGr178/rcmjh1uUByYyRQESlC8RZzlQqkwZ3cPtBQuG7hFxE h4suoGD+lF4v0P+XLGtea4L6XpaSpJ36oqNT6A== ) ;; ADDITIONAL SECTION (7 records) ns1.BPA.GOV. 86400 IN A 170.160.36.10 ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251219163717 20251212153717 12864 bpa.gov. KmD6xwJERyaH68cTystntI/GAChb6G7+7wLf78ZYCeof7RTPHX66ICfnERue2Yxz1B7Z6qDO7de0 rFV5R3RiGh7UP1Hf5MbOvfkZyIOdc/U76Iznh56XEApgi1GCV1u2wU1F71FHT5eNUs69xjSef35O 1BB2cn3QuwrSH+D53P8WAZj9CwIr60YeuZXj2SwQOVzomyt1sbsY/hiz3COEpxOeA70qNTrKhBSm X/RtgQosfiYMqt/gKUPjRbe83hugas3rbBq98qsZeOWVb1+lvRpGsZABCKdj0bsMQT9e2QWJmWVg vec5NZU6VGnmK1b8UvNvV8LponIVoxWWsBS9Ag== ) ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251220163716 20251213153716 45886 bpa.gov. DM9OdVHVtSUZvTMNst8Uxymdr71PywvBlDP4ARNolijMxcJUf3sbNo/0c+hLL/MZ5sjtVWi2C+x3 WLmEtopKcwpmym/t6swZctfue6LLqk9VYvaI1+n91XWcrIHzieCmoPSULZ55295FX/u0IagYkxie A/aMXzzMPYY8Jg56+YKL7K2mlALwbOKBdBk0NqeB5R2dXxbm+xc0pWIjP+6MwrVXzissk3Vv2qlp 38P+oPQKDyZK5MOadf4scMsM+3tXLnqv1TS6YPssm8drIqKJc8cw01NjrBYpAxFBti5Iu22uvOpB eyqyTrvkEZMOrgRTLmHrcrZ1+H+/gwWtM2/RYA== ) ns2.BPA.GOV. 86400 IN A 170.160.100.10 ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251219163717 20251212153717 12864 bpa.gov. ZJkoM+pvEIy3kbFy0okfiiTtkZ2y1ViHkZ83xW9J605afpkTBA73abykSsQzPZS9fpRVaVgEnS0i nPqZrwH1Eh+QzGHGVBagVgcBf5zk2tGgiG3zQn5AheBgCTmzUhcADaq203jBZKVE134WoY/vVrrA Ze/QG6G6Rk1QHiUao0Bd93Rs8Z+3RlwhC7N9PICkWWw7bYUnfEcgKfrow80pcDIsdxmJN/j2gjW4 K7Q2plRNfd+R4GZrY6i2Z0dSzWLywt/jH35oDST7gwapCNXjnQuHNXHROdrD0b4/x2/tBPIKM6Xd Avwtd9wOM+2/ODgEkXskhGglPg9Nh8Oz7+DEjw== ) ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251220163716 20251213153716 45886 bpa.gov. kw+YySbTBdMp/7SU4brNQjMlEH7iVA+pa9a1D3TS4/Q2mehhOcujo+4aZjEv7h5IK2SYNbr3zmDo 54L1nh29E0+3pzYsyFaEyXF0uO5Bu71bof8P+rlWjRrr1T9dX0kOWPzPrb0ErkzpJ7ICztAZQywJ 6Kg6/tYftiPwKAvuR8DgtR3lIfCd1jd43CSwBHZv0tE7aHRPu2grJaQN4vZXfXjdQRE6Qb7awYZg +hM3oYuM3zD6jIaFUl9YyYPuEl4kVpLWp/1tN2z+rSSpCgjduOqIpujfQcmJO2/JeGUfXMUAEkHJ 9xCnwir+3rOUovH8tG3PEm2eF87WtI1gALKNCQ== ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.BPA.GOV for BPA.GOV/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 38591 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (3 records) BPA.GOV. 300 IN A 20.42.128.100 BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251219164249 20251212154249 12864 bpa.gov. LNMzTmK77MhaBrP6gEmnMi0JnFft9C4rkjq5GituW0MrilsCc7MnCBAEHGEAGK1FwpzhXAB2YqCb xjrfj5FRNGvdarV55vgB2YrQv1XHH0ZfnrSn1q5xHmF0JgJ0qECZJKJE3AhhJL/89IRWObpAKefX Q/CtCGByogNzulsjvI8eNrCo6BTooQ1BgLZDv9J3k14gLzFzsc882KPlm+CaE0Cd1Ejb98d3x5sb sEimyX7WmmaQKy28zqaECWWx8MsTM1MM39BxvzNzMnRqWtgzZtBTz4TqdDaKUoEm+4uMGAKn97nG +f4ggXMdDUP9bT6s6t/LsBcQLYqMcO82pm7cng== ) BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251220163916 20251213153916 45886 bpa.gov. B42jYP9Q9ZdG4uQlZa/Ut70Z6Zzvzdu5ZQ4cOelcgMZbB9AMslETDIramai8m2ynvneqcovA2NYT qHeCTIWm2y8L1uKnsWIvkJ46I2X0hv/kuW7gaMtJju+MBJKCznQcxQxbZ3Ri0gzONYpQzdbjPcaG HdZKZSdAtI8CzcgWaF5VhCB2csg5BvkHftgI2RGMyGdFpJXU7M1E9UxEh0d9Pk8W7glR9wTIF+zS c+hTZlyeQwRLE018iLvwZLbAsjy6XQWYLsxuET7IEmivH5dWQvoaNwlVjx8rjaaMKLLrkzQVeZCr uRt4cslccZwLNPgmorK/z+dH9G6SPnh82IqluQ== ) ;; AUTHORITY SECTION (4 records) BPA.GOV. 86400 IN NS ns2.BPA.GOV. BPA.GOV. 86400 IN NS ns1.BPA.GOV. BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251219163719 20251212153719 12864 bpa.gov. bK/IE4TqI9Vr6r0bU6PRKWaxtoJFZKQ0rocUUxNiMf9a77MgOZYP5cCV/evqCdz027cRY6g3VBWh l9jaPP4+2lsxNzzCDNE9mCx7ckB9kqq+IAcGPman3t+qIvOX4zQrClfzwwLRvpWC4fGxxkAwkeQF 6VRBcraxgfhq4Z0vJGvNktYLiq8gGjVt19ZfoJtj24qdclY4cR3twmQ6Z+XBxjKg/byB8ltFNTCR 48XfhWvKADmeEu7andMvhoSRoLA++lnfU3x6OI/UZPjLP055rbtq+/k/fxJMKD9S5CmmkaeDHUCi Gz7s2MG3roXl9CMm+Zcuc3HMxMnDMDp+Mo4PlQ== ) BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251220163716 20251213153716 45886 bpa.gov. GW/zanYjxlSr8s3HTrJzGCPmnqUK/yy8IRuHPTfdhhhn9jJ+EOMXf9Q6cVsPRomE6FhOuomrXtOQ y50NReq4pKD02fc4eXYrSxS9LqDNuWSxE4eYDNP0VaKlZOHCkgKSdyWLZzS4cQikAIiRA76IE4nX 9C4XV8fNp3Lg1CTBF/J8e9uefGTP/0MaXL50DdHKVs298bFZSxpxNdgY5ErAw1j2aD39dpHvJgXE HjS+D1LdvLi1Zm3SRnHw3p8iI6ItIGr178/rcmjh1uUByYyRQESlC8RZzlQqkwZ3cPtBQuG7hFxE h4suoGD+lF4v0P+XLGtea4L6XpaSpJ36oqNT6A== ) ;; ADDITIONAL SECTION (7 records) ns1.BPA.GOV. 86400 IN A 170.160.36.10 ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251219163719 20251212153719 12864 bpa.gov. A69Jr8AYWmjbXQhtlqVhhaTNVUgH72shrwLlJ7mPRmdMPcPFtxlbmzbwNIWURo07nf9XsPbeLc/S YMuQaU57XyLPSWzyhk+nItFDAD/jXe6NDcDt0GFKTk7iokVOKqktWlby8PfHjqe2+/p4OlNsRP6t l1YlT5KnRZLiB3/MbY8S0ai0jasEqtE0NmsMOx+C6p6NZ/IALq2eJmtZyT6vJzioxumEu2pBaIFf 8h9r7pHxmcd+is2oFbPrNHwt9wJSgoTS/RksmosHdg9KorCQ07kohc17I3pulJ5ONtH7x/9NiKB6 DRJZja0/AriGpSVSs4F+9RBoBxVVn9TehJlbMg== ) ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251220163716 20251213153716 45886 bpa.gov. DM9OdVHVtSUZvTMNst8Uxymdr71PywvBlDP4ARNolijMxcJUf3sbNo/0c+hLL/MZ5sjtVWi2C+x3 WLmEtopKcwpmym/t6swZctfue6LLqk9VYvaI1+n91XWcrIHzieCmoPSULZ55295FX/u0IagYkxie A/aMXzzMPYY8Jg56+YKL7K2mlALwbOKBdBk0NqeB5R2dXxbm+xc0pWIjP+6MwrVXzissk3Vv2qlp 38P+oPQKDyZK5MOadf4scMsM+3tXLnqv1TS6YPssm8drIqKJc8cw01NjrBYpAxFBti5Iu22uvOpB eyqyTrvkEZMOrgRTLmHrcrZ1+H+/gwWtM2/RYA== ) ns2.BPA.GOV. 86400 IN A 170.160.100.10 ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251219163719 20251212153719 12864 bpa.gov. QDID7iDWZSMz17sMHsrR/ha/+zl9/xljiDlhwrZhU5AJErxWlGyJss+5lyn4BbTn4mqKZzkaxSge ZctZPtOv9wnCdPYkQwIdxcrdPfSS5JwduPMdV3jYHavhakkOIdGbIlXFlGFoz0jlx+zO5wh7XgMx 8gKsoqMNyYhk5MPcHfye9kvb9xxs9fLl5IcFrwrfg6pD5CJJzie43W9Dx+NIlkSBBmz9QxVmEfAr XVy7Cc8KhKYI09GDDEJX6oxjmb87nFhHuvLcJsPv5Rv5CJag1S8h2El5IH/vWHSUcsDiFyIxJw2n uxg8IEnjXbkLdizDFUEF3dK2OqPKEQUuDTJZjQ== ) ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251220163716 20251213153716 45886 bpa.gov. kw+YySbTBdMp/7SU4brNQjMlEH7iVA+pa9a1D3TS4/Q2mehhOcujo+4aZjEv7h5IK2SYNbr3zmDo 54L1nh29E0+3pzYsyFaEyXF0uO5Bu71bof8P+rlWjRrr1T9dX0kOWPzPrb0ErkzpJ7ICztAZQywJ 6Kg6/tYftiPwKAvuR8DgtR3lIfCd1jd43CSwBHZv0tE7aHRPu2grJaQN4vZXfXjdQRE6Qb7awYZg +hM3oYuM3zD6jIaFUl9YyYPuEl4kVpLWp/1tN2z+rSSpCgjduOqIpujfQcmJO2/JeGUfXMUAEkHJ 9xCnwir+3rOUovH8tG3PEm2eF87WtI1gALKNCQ== ) ;; { "EDNS-VERSION": 0 }
	BPA.GOV A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251219164249 20251212154249 12864 bpa.gov. LNMzTmK77MhaBrP6gEmnMi0JnFft9C4rkjq5GituW0MrilsCc7MnCBAEHGEAGK1FwpzhXAB2YqCb xjrfj5FRNGvdarV55vgB2YrQv1XHH0ZfnrSn1q5xHmF0JgJ0qECZJKJE3AhhJL/89IRWObpAKefX Q/CtCGByogNzulsjvI8eNrCo6BTooQ1BgLZDv9J3k14gLzFzsc882KPlm+CaE0Cd1Ejb98d3x5sb sEimyX7WmmaQKy28zqaECWWx8MsTM1MM39BxvzNzMnRqWtgzZtBTz4TqdDaKUoEm+4uMGAKn97nG +f4ggXMdDUP9bT6s6t/LsBcQLYqMcO82pm7cng== )`
	`BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251220163916 20251213153916 45886 bpa.gov. B42jYP9Q9ZdG4uQlZa/Ut70Z6Zzvzdu5ZQ4cOelcgMZbB9AMslETDIramai8m2ynvneqcovA2NYT qHeCTIWm2y8L1uKnsWIvkJ46I2X0hv/kuW7gaMtJju+MBJKCznQcxQxbZ3Ri0gzONYpQzdbjPcaG HdZKZSdAtI8CzcgWaF5VhCB2csg5BvkHftgI2RGMyGdFpJXU7M1E9UxEh0d9Pk8W7glR9wTIF+zS c+hTZlyeQwRLE018iLvwZLbAsjy6XQWYLsxuET7IEmivH5dWQvoaNwlVjx8rjaaMKLLrkzQVeZCr uRt4cslccZwLNPgmorK/z+dH9G6SPnh82IqluQ== )`
	RRSIG=12864 and DNSKEY=12864 verifies the A RRset
	RRSIG=45886 and DNSKEY=45886 verifies the A RRset

BPA.GOV

	Query to ns2.BPA.GOV for BPA.GOV/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 40660 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (3 records) BPA.GOV. 300 IN A 20.42.128.100 BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251219164139 20251212154139 12864 bpa.gov. Y/h8M9b52ToByZO4LxghAjZqtp6ZXjosuWOdNqchHnmUf15MZoTemGRBAMh3MOXVUjmn6A5TS5ra C94oJTFSmbkvcZ6ZmxrrgWAQXieTQeqRllUdSjfKtu5jj3v2zATVMKxeI4e1SY/DavX6CgUGBfbR s1I6MDDLbBRYPTqQHN/se08Z9wxGWrj9nvKtacwv8tvARX/7NGtAMn0zVMi7xR0ycvtGNuFrUkRI 2yZDjQBqaJrzcYadk/qhMmMeyd7iJdJ56VN2qSadGG0fq35MM3NiuMUJ5eWdFYEuIs8b3K5bcgpC nvFMv8tZpRR8HSfskpEbKbtK8pPjCIy+CM45ow== ) BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251220163833 20251213153833 45886 bpa.gov. a7q62Pm/hKaispmn2NvMlSn+BFdBl8/tsQJRznwZ476pAFXxGO+upqup9dpbkd4/DkipUHClvzrz zs1viq9Rw5v0QXilkuv8vZI1eq/uXB5Dx1LMTSGMsS/4WgvY2sV5Ngb4UdxQxA1m6rDeKaowGUqJ KtkZ8uI9AqK1kcGv2pxR9RuVAEF2XqymBGfOL8J+bgpthrWmvMKRNXuQ5UokWRs+QFSsAJkNOw57 mk14LIJ8ljxmD8byrzpBdDii+K0b4gjB6YYizfqUJeUqsSYkDXHDh4VlPxeISmExq3VwQ00kc+F2 YDhzSLUQg+a/M192BoxeBskeEI0n99G0SvXUNg== ) ;; AUTHORITY SECTION (4 records) BPA.GOV. 86400 IN NS ns2.BPA.GOV. BPA.GOV. 86400 IN NS ns1.BPA.GOV. BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251219163717 20251212153717 12864 bpa.gov. OBMmIV0sK7VV2xq9IyqThUGml8MJEQMLmC2w5P8aKLnFXtIwOFJeT2/hHP99z2nJsO8OwmFpIswS 3HR+US5LHFeTxbnjMjKLkAZ+xtPXZvRVAOU38MQ1LgCzSC24MPAVZM+zck1rRdq1WWUfDGGaMQ4n eYup1tmLiasJn3nTy3tOeG6q2C7nrnvkQn8Xpcb60FO2h5Vqh5Juaas3g3GcioBq3zIllPCBWIsI jAsudZH4HLnFHTDac5W19hom/3WMgJUaZbCjtDDI40j4GzU+aAEsHO1skGx+puFukdADa1d5RaIY 3QbfLYWX4ZMSH0raDc51hL1qEbk36UsCuXzyTQ== ) BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251220163716 20251213153716 45886 bpa.gov. GW/zanYjxlSr8s3HTrJzGCPmnqUK/yy8IRuHPTfdhhhn9jJ+EOMXf9Q6cVsPRomE6FhOuomrXtOQ y50NReq4pKD02fc4eXYrSxS9LqDNuWSxE4eYDNP0VaKlZOHCkgKSdyWLZzS4cQikAIiRA76IE4nX 9C4XV8fNp3Lg1CTBF/J8e9uefGTP/0MaXL50DdHKVs298bFZSxpxNdgY5ErAw1j2aD39dpHvJgXE HjS+D1LdvLi1Zm3SRnHw3p8iI6ItIGr178/rcmjh1uUByYyRQESlC8RZzlQqkwZ3cPtBQuG7hFxE h4suoGD+lF4v0P+XLGtea4L6XpaSpJ36oqNT6A== ) ;; ADDITIONAL SECTION (7 records) ns1.BPA.GOV. 86400 IN A 170.160.36.10 ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251219163717 20251212153717 12864 bpa.gov. KmD6xwJERyaH68cTystntI/GAChb6G7+7wLf78ZYCeof7RTPHX66ICfnERue2Yxz1B7Z6qDO7de0 rFV5R3RiGh7UP1Hf5MbOvfkZyIOdc/U76Iznh56XEApgi1GCV1u2wU1F71FHT5eNUs69xjSef35O 1BB2cn3QuwrSH+D53P8WAZj9CwIr60YeuZXj2SwQOVzomyt1sbsY/hiz3COEpxOeA70qNTrKhBSm X/RtgQosfiYMqt/gKUPjRbe83hugas3rbBq98qsZeOWVb1+lvRpGsZABCKdj0bsMQT9e2QWJmWVg vec5NZU6VGnmK1b8UvNvV8LponIVoxWWsBS9Ag== ) ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251220163716 20251213153716 45886 bpa.gov. DM9OdVHVtSUZvTMNst8Uxymdr71PywvBlDP4ARNolijMxcJUf3sbNo/0c+hLL/MZ5sjtVWi2C+x3 WLmEtopKcwpmym/t6swZctfue6LLqk9VYvaI1+n91XWcrIHzieCmoPSULZ55295FX/u0IagYkxie A/aMXzzMPYY8Jg56+YKL7K2mlALwbOKBdBk0NqeB5R2dXxbm+xc0pWIjP+6MwrVXzissk3Vv2qlp 38P+oPQKDyZK5MOadf4scMsM+3tXLnqv1TS6YPssm8drIqKJc8cw01NjrBYpAxFBti5Iu22uvOpB eyqyTrvkEZMOrgRTLmHrcrZ1+H+/gwWtM2/RYA== ) ns2.BPA.GOV. 86400 IN A 170.160.100.10 ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251219163717 20251212153717 12864 bpa.gov. ZJkoM+pvEIy3kbFy0okfiiTtkZ2y1ViHkZ83xW9J605afpkTBA73abykSsQzPZS9fpRVaVgEnS0i nPqZrwH1Eh+QzGHGVBagVgcBf5zk2tGgiG3zQn5AheBgCTmzUhcADaq203jBZKVE134WoY/vVrrA Ze/QG6G6Rk1QHiUao0Bd93Rs8Z+3RlwhC7N9PICkWWw7bYUnfEcgKfrow80pcDIsdxmJN/j2gjW4 K7Q2plRNfd+R4GZrY6i2Z0dSzWLywt/jH35oDST7gwapCNXjnQuHNXHROdrD0b4/x2/tBPIKM6Xd Avwtd9wOM+2/ODgEkXskhGglPg9Nh8Oz7+DEjw== ) ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251220163716 20251213153716 45886 bpa.gov. kw+YySbTBdMp/7SU4brNQjMlEH7iVA+pa9a1D3TS4/Q2mehhOcujo+4aZjEv7h5IK2SYNbr3zmDo 54L1nh29E0+3pzYsyFaEyXF0uO5Bu71bof8P+rlWjRrr1T9dX0kOWPzPrb0ErkzpJ7ICztAZQywJ 6Kg6/tYftiPwKAvuR8DgtR3lIfCd1jd43CSwBHZv0tE7aHRPu2grJaQN4vZXfXjdQRE6Qb7awYZg +hM3oYuM3zD6jIaFUl9YyYPuEl4kVpLWp/1tN2z+rSSpCgjduOqIpujfQcmJO2/JeGUfXMUAEkHJ 9xCnwir+3rOUovH8tG3PEm2eF87WtI1gALKNCQ== ) ;; { "EDNS-VERSION": 0 }
	ns2.BPA.GOV is authoritative for BPA.GOV
	Found RRSIG signed by bpa.gov zone
	Query to ns2.BPA.GOV for BPA.GOV/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 27735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; BPA.GOV. IN A ;; ANSWER SECTION (3 records) BPA.GOV. 300 IN A 20.42.128.100 BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251219164138 20251212154138 12864 bpa.gov. B2/QrDApkLFTvf7dv/02XgHDket+M14/fCrQ90djnJfwRVAWv4Bg/JowS5NO+5KUiqcQ6IS7twEU i29kqgemC8kzwOoRnCVLIlh/NRir4Hq5v721JvLgp0DEelMHi+6kY3VamvWaiSgOITzogDsh7iqI 0Sif8KkY/I3aYnzi8QG9moMWUW7h2oGk3+iW+UYX2o34Ebm6TpB+XKeFKRC/51fkJ+lcaMj7zncB 8bUdcXZ2HcN0vMX266Bxa3pCQTpej3dz8gatFGQ8mKLKuUmuPB9XaybFr76eeJt+AlTaaMBESMji jTsqbMQ6RzaiogWfJ9sc2CP+A6mH/OfrFkMo0Q== ) BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251220163833 20251213153833 45886 bpa.gov. a7q62Pm/hKaispmn2NvMlSn+BFdBl8/tsQJRznwZ476pAFXxGO+upqup9dpbkd4/DkipUHClvzrz zs1viq9Rw5v0QXilkuv8vZI1eq/uXB5Dx1LMTSGMsS/4WgvY2sV5Ngb4UdxQxA1m6rDeKaowGUqJ KtkZ8uI9AqK1kcGv2pxR9RuVAEF2XqymBGfOL8J+bgpthrWmvMKRNXuQ5UokWRs+QFSsAJkNOw57 mk14LIJ8ljxmD8byrzpBdDii+K0b4gjB6YYizfqUJeUqsSYkDXHDh4VlPxeISmExq3VwQ00kc+F2 YDhzSLUQg+a/M192BoxeBskeEI0n99G0SvXUNg== ) ;; AUTHORITY SECTION (4 records) BPA.GOV. 86400 IN NS ns2.BPA.GOV. BPA.GOV. 86400 IN NS ns1.BPA.GOV. BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251219163725 20251212153725 12864 bpa.gov. Fsli6Jy0dmdbgp9gNtPsySX3bnM5SYR/XsYj0WA12biTVXzBA7e3XO+6HYhLjj38bElufuFTslR3 GeUbbDAqIePexoed9kTXdCG9qZus60RXrjFQL+7yfxio9CyoTC4lf9rkudPdWTFuincUTOFk1kZT bS7UkTc9CnvBC15MfH/u2O2MnuCcKnJ29AHSrvPMSt7GxmRx6QutVe5fklBl/ttWmiDo2kdzjDc4 w0V2bF5hVg5dOB+am6UD9W2/naCNP3sm8nZhicDfvofiiTT9BDX2SBeae7dzVh0+AXKXUzPzilNl jOSlRg2dCE5VyRtpRpIb0Ux9/Dv7Gh9pg0NfaQ== ) BPA.GOV. 86400 IN RRSIG ( NS 8 2 86400 20251220163716 20251213153716 45886 bpa.gov. GW/zanYjxlSr8s3HTrJzGCPmnqUK/yy8IRuHPTfdhhhn9jJ+EOMXf9Q6cVsPRomE6FhOuomrXtOQ y50NReq4pKD02fc4eXYrSxS9LqDNuWSxE4eYDNP0VaKlZOHCkgKSdyWLZzS4cQikAIiRA76IE4nX 9C4XV8fNp3Lg1CTBF/J8e9uefGTP/0MaXL50DdHKVs298bFZSxpxNdgY5ErAw1j2aD39dpHvJgXE HjS+D1LdvLi1Zm3SRnHw3p8iI6ItIGr178/rcmjh1uUByYyRQESlC8RZzlQqkwZ3cPtBQuG7hFxE h4suoGD+lF4v0P+XLGtea4L6XpaSpJ36oqNT6A== ) ;; ADDITIONAL SECTION (7 records) ns1.BPA.GOV. 86400 IN A 170.160.36.10 ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251219163725 20251212153725 12864 bpa.gov. ZlPUB1EmpMMxiyrk1tRBB0FULlieSy5/jXjUCC2A8sKT1PUtzwBL/9mQtJajUL2SysF7HMCAo8R5 jELYjeWusrCNVQN2muKjF+oodsKlJ/udvECWWgvhsyZjQvQutO/Md7GEd5hQFaLbO+wyxDnaRbI8 J5uqCZfoLSLBFyfaA6c7IkpqkEd/Xbd6ESyBMpMZDY/j/FK40eJmzI+jUcZ33g4e8uYuLwJmrjgZ XP2a+SVHxexudXadUDMC42fwsX/8gW2wtZxnE0mKK5ZnBPOe0QbZfH7x5s0lBeM5S5um8wHqx3dD tTQe4OxF5BLd8IDtp/J/nC/dmlHQsq3rlbIWvw== ) ns1.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251220163716 20251213153716 45886 bpa.gov. DM9OdVHVtSUZvTMNst8Uxymdr71PywvBlDP4ARNolijMxcJUf3sbNo/0c+hLL/MZ5sjtVWi2C+x3 WLmEtopKcwpmym/t6swZctfue6LLqk9VYvaI1+n91XWcrIHzieCmoPSULZ55295FX/u0IagYkxie A/aMXzzMPYY8Jg56+YKL7K2mlALwbOKBdBk0NqeB5R2dXxbm+xc0pWIjP+6MwrVXzissk3Vv2qlp 38P+oPQKDyZK5MOadf4scMsM+3tXLnqv1TS6YPssm8drIqKJc8cw01NjrBYpAxFBti5Iu22uvOpB eyqyTrvkEZMOrgRTLmHrcrZ1+H+/gwWtM2/RYA== ) ns2.BPA.GOV. 86400 IN A 170.160.100.10 ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251219163725 20251212153725 12864 bpa.gov. UjOTr+LWfEe1v/VAEL2iI3wkttJuywNsoBOEwhvvqgLo0N5o4+PxcUSkyjqSPncHxZ3Gte7MnwSq PpdPDQ0nukBKRSX4pvB5H6Qvgy8xVOdJmqsMIQZrXK2AKzZK+P5TlsFqwjSXK1f0rcUhaPD5CNr/ IG0qjq6T9CWEJ22MtiBaurSNi6RIJ5dAGZ0D8KOfLl6pG4lF1WOYoz6U6jEgE+qFW04vgc0FoVbV KQxmemcRO1DPWU67wbzh2lrVVtCkEuH18jIGSbo/V3AgbWeoVmvnTRLLRr/tdMN/aCyXzfSERTCB AmZUq0AwmTaoJqMZHgy9Zo8wPCAOeFHWqKA4nA== ) ns2.BPA.GOV. 86400 IN RRSIG ( A 8 3 86400 20251220163716 20251213153716 45886 bpa.gov. kw+YySbTBdMp/7SU4brNQjMlEH7iVA+pa9a1D3TS4/Q2mehhOcujo+4aZjEv7h5IK2SYNbr3zmDo 54L1nh29E0+3pzYsyFaEyXF0uO5Bu71bof8P+rlWjRrr1T9dX0kOWPzPrb0ErkzpJ7ICztAZQywJ 6Kg6/tYftiPwKAvuR8DgtR3lIfCd1jd43CSwBHZv0tE7aHRPu2grJaQN4vZXfXjdQRE6Qb7awYZg +hM3oYuM3zD6jIaFUl9YyYPuEl4kVpLWp/1tN2z+rSSpCgjduOqIpujfQcmJO2/JeGUfXMUAEkHJ 9xCnwir+3rOUovH8tG3PEm2eF87WtI1gALKNCQ== ) ;; { "EDNS-VERSION": 0 }
	BPA.GOV A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251219164138 20251212154138 12864 bpa.gov. B2/QrDApkLFTvf7dv/02XgHDket+M14/fCrQ90djnJfwRVAWv4Bg/JowS5NO+5KUiqcQ6IS7twEU i29kqgemC8kzwOoRnCVLIlh/NRir4Hq5v721JvLgp0DEelMHi+6kY3VamvWaiSgOITzogDsh7iqI 0Sif8KkY/I3aYnzi8QG9moMWUW7h2oGk3+iW+UYX2o34Ebm6TpB+XKeFKRC/51fkJ+lcaMj7zncB 8bUdcXZ2HcN0vMX266Bxa3pCQTpej3dz8gatFGQ8mKLKuUmuPB9XaybFr76eeJt+AlTaaMBESMji jTsqbMQ6RzaiogWfJ9sc2CP+A6mH/OfrFkMo0Q== )`
	`BPA.GOV. 300 IN RRSIG ( A 8 2 300 20251220163833 20251213153833 45886 bpa.gov. a7q62Pm/hKaispmn2NvMlSn+BFdBl8/tsQJRznwZ476pAFXxGO+upqup9dpbkd4/DkipUHClvzrz zs1viq9Rw5v0QXilkuv8vZI1eq/uXB5Dx1LMTSGMsS/4WgvY2sV5Ngb4UdxQxA1m6rDeKaowGUqJ KtkZ8uI9AqK1kcGv2pxR9RuVAEF2XqymBGfOL8J+bgpthrWmvMKRNXuQ5UokWRs+QFSsAJkNOw57 mk14LIJ8ljxmD8byrzpBdDii+K0b4gjB6YYizfqUJeUqsSYkDXHDh4VlPxeISmExq3VwQ00kc+F2 YDhzSLUQg+a/M192BoxeBskeEI0n99G0SvXUNg== )`
	RRSIG=12864 and DNSKEY=12864 verifies the A RRset
	RRSIG=45886 and DNSKEY=45886 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test BPA.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: