DNSSEC Debugger - NCSC.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-06-21 08:53:02 UTC

Analyzing DNSSEC problems for NCSC.GOV

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1414 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1414 octets ;; HEADER SECTION ;; id = 25615 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260711000000 20260620000000 20326 . UU/g/jQ3AjhIGIxSxGVoYAg1X117oL9XvEKrRR3YUZVoVsaHrb9Cd1lMqqmCJXbnReOQeetx9ms+ jAzt+Jvi79GIBABl7r0VTkHdJle67pwRtOOeCjMxvSsQIikZg3DIpl0bBvr4o3+0rlN3xjdCsQEC OOseGCjggcrqkimc+tOdD/l1r67R3rBjrhu3VDInUSmtnF0h7j9JxEMJcfRxFDjFvFOxSAn+X2x8 alBURCi50ksk7K3kaC73ccmUt5+Mb3za+4dEOtXuIPEwpmx1qKRdaIv2N9tvE0zo2CClfwLCrK+c 2YVCcqujrKL8TTV3rWICBxDO5Bc2tkdOZm79Cw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260711000000 20260620000000 20326 . UU/g/jQ3AjhIGIxSxGVoYAg1X117oL9XvEKrRR3YUZVoVsaHrb9Cd1lMqqmCJXbnReOQeetx9ms+ jAzt+Jvi79GIBABl7r0VTkHdJle67pwRtOOeCjMxvSsQIikZg3DIpl0bBvr4o3+0rlN3xjdCsQEC OOseGCjggcrqkimc+tOdD/l1r67R3rBjrhu3VDInUSmtnF0h7j9JxEMJcfRxFDjFvFOxSAn+X2x8 alBURCi50ksk7K3kaC73ccmUt5+Mb3za+4dEOtXuIPEwpmx1qKRdaIv2N9tvE0zo2CClfwLCrK+c 2YVCcqujrKL8TTV3rWICBxDO5Bc2tkdOZm79Cw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	DNSKEY=57780 is now in the chain-of-trust
	Query to m.root-servers.net for NCSC.GOV/A
	Received 621 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 621 octets ;; HEADER SECTION ;; id = 36335 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260704050000 20260621040000 54393 . p2xI5KRtNm/0udq131ONtvLsPkBfTTmghOSok+SSVGFIG3Y/KTW4MEEYmg6emxQU/y4EOxynHYeE Aq6nW+kcYbKL0+dvT8wA5LgApfhQuYpQrLdysK5mOZt/PXvZB2CQZAYdvzwOzFvFCzbJu1CdqlxO OaYL/4AQ8QQpxK0aOL9/ul3ZtVxRRTgZ2j9TOptdYIxqzMEyjOi8ZncePaGQU0sJNCIMy/NCHI0K ybh4Lz6//0FJYJtAYkhFEskZ0ZqVgLcqe4tLV0jOR5aQrcMKxem7Pq70IiKKQA26ABsijU9JaG2+ vEYLN3g10e8lde0hAbOtEBVQHi1WFb9XGurrqw== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 610 octets ;; HEADER SECTION ;; id = 13083 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260704050000 20260621040000 54393 . p2xI5KRtNm/0udq131ONtvLsPkBfTTmghOSok+SSVGFIG3Y/KTW4MEEYmg6emxQU/y4EOxynHYeE Aq6nW+kcYbKL0+dvT8wA5LgApfhQuYpQrLdysK5mOZt/PXvZB2CQZAYdvzwOzFvFCzbJu1CdqlxO OaYL/4AQ8QQpxK0aOL9/ul3ZtVxRRTgZ2j9TOptdYIxqzMEyjOi8ZncePaGQU0sJNCIMy/NCHI0K ybh4Lz6//0FJYJtAYkhFEskZ0ZqVgLcqe4tLV0jOR5aQrcMKxem7Pq70IiKKQA26ABsijU9JaG2+ vEYLN3g10e8lde0hAbOtEBVQHi1WFb9XGurrqw== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN A 199.33.231.1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN A 199.33.232.1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN A 199.33.233.1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 367 octets ;; HEADER SECTION ;; id = 55645 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260704050000 20260621040000 54393 . p2xI5KRtNm/0udq131ONtvLsPkBfTTmghOSok+SSVGFIG3Y/KTW4MEEYmg6emxQU/y4EOxynHYeE Aq6nW+kcYbKL0+dvT8wA5LgApfhQuYpQrLdysK5mOZt/PXvZB2CQZAYdvzwOzFvFCzbJu1CdqlxO OaYL/4AQ8QQpxK0aOL9/ul3ZtVxRRTgZ2j9TOptdYIxqzMEyjOi8ZncePaGQU0sJNCIMy/NCHI0K ybh4Lz6//0FJYJtAYkhFEskZ0ZqVgLcqe4tLV0jOR5aQrcMKxem7Pq70IiKKQA26ABsijU9JaG2+ vEYLN3g10e8lde0hAbOtEBVQHi1WFb9XGurrqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260704050000 20260621040000 54393 . p2xI5KRtNm/0udq131ONtvLsPkBfTTmghOSok+SSVGFIG3Y/KTW4MEEYmg6emxQU/y4EOxynHYeE Aq6nW+kcYbKL0+dvT8wA5LgApfhQuYpQrLdysK5mOZt/PXvZB2CQZAYdvzwOzFvFCzbJu1CdqlxO OaYL/4AQ8QQpxK0aOL9/ul3ZtVxRRTgZ2j9TOptdYIxqzMEyjOi8ZncePaGQU0sJNCIMy/NCHI0K ybh4Lz6//0FJYJtAYkhFEskZ0ZqVgLcqe4tLV0jOR5aQrcMKxem7Pq70IiKKQA26ABsijU9JaG2+ vEYLN3g10e8lde0hAbOtEBVQHi1WFb9XGurrqw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 41087 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260816110634 20260616110634 2536 gov. peNjLt/c3zelH9h+BNYXhVTX2LpAqyXVaFVDsClR79rXmibtW598Pp4/p5HOw52ivT3eg4RxSevJ E3g32Fcq6g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260816110634 20260616110634 2536 gov. peNjLt/c3zelH9h+BNYXhVTX2LpAqyXVaFVDsClR79rXmibtW598Pp4/p5HOw52ivT3eg4RxSevJ E3g32Fcq6g== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.GOV for NCSC.GOV/A
	Received 364 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 364 octets ;; HEADER SECTION ;; id = 34015 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) NCSC.GOV. 10800 IN NS a1-22.akam.net. NCSC.GOV. 10800 IN NS a12-65.akam.net. NCSC.GOV. 10800 IN NS a13-65.akam.net. NCSC.GOV. 10800 IN NS a16-67.akam.net. NCSC.GOV. 10800 IN NS a22-66.akam.net. NCSC.GOV. 10800 IN NS a3-64.akam.net. NCSC.GOV. 3600 IN DS ( 18964 8 2 d89c03eaf2f44359bc665e6f1ffab8a881d90a08def78804577dc4a0337e3c46 ) NCSC.GOV. 3600 IN DS ( 41339 8 2 c5f3cfdb934b5ea4c8d7f34dfa5d24cb089961afd4298b3cdfb0245e28abe4a1 ) NCSC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260622095302 20260620075302 35496 gov. je+UPreMpaYEAiUw9iCrb40tQlDJeZIriIx60nFcsaSY/f5wnzabOEazEgEtiNS/BTZXnYb9azeB ch5xnxrKdg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.GOV for NCSC.GOV/DNSKEY
	Received 364 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 364 octets ;; HEADER SECTION ;; id = 36207 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) NCSC.GOV. 10800 IN NS a1-22.akam.net. NCSC.GOV. 10800 IN NS a12-65.akam.net. NCSC.GOV. 10800 IN NS a13-65.akam.net. NCSC.GOV. 10800 IN NS a16-67.akam.net. NCSC.GOV. 10800 IN NS a22-66.akam.net. NCSC.GOV. 10800 IN NS a3-64.akam.net. NCSC.GOV. 3600 IN DS ( 18964 8 2 d89c03eaf2f44359bc665e6f1ffab8a881d90a08def78804577dc4a0337e3c46 ) NCSC.GOV. 3600 IN DS ( 41339 8 2 c5f3cfdb934b5ea4c8d7f34dfa5d24cb089961afd4298b3cdfb0245e28abe4a1 ) NCSC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260622095302 20260620075302 35496 gov. uW4Skrz2DUIUYXqZg968DAR4bKAWhTS3Dx4XMPFb0PJMGBL8VEQ5oax0Pqq6UZM0B2pdEf4pLlgB r8C63ZkChg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone NCSC.GOV

NCSC.GOV

	Checking DS between GOV and NCSC.GOV
	Query to a.ns.GOV for NCSC.GOV/DS
	Received 232 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 232 octets ;; HEADER SECTION ;; id = 35975 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN DS ;; ANSWER SECTION (3 records) NCSC.GOV. 3600 IN DS ( 18964 8 2 d89c03eaf2f44359bc665e6f1ffab8a881d90a08def78804577dc4a0337e3c46 ) NCSC.GOV. 3600 IN DS ( 41339 8 2 c5f3cfdb934b5ea4c8d7f34dfa5d24cb089961afd4298b3cdfb0245e28abe4a1 ) NCSC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260622095302 20260620075302 35496 gov. ArY3NAfl7MU30KcMpSu6vTT4fHd3dLOG6Az6nMZ4MtyiC8SiJJISGbdDRVOTkXKKgkwc24bCqPPY vxfFVlw2lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for NCSC.GOV in the GOV zone
	DS=18964/SHA-256 has algorithm RSASHA256
	DS=41339/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`NCSC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260622095302 20260620075302 35496 gov. ArY3NAfl7MU30KcMpSu6vTT4fHd3dLOG6Az6nMZ4MtyiC8SiJJISGbdDRVOTkXKKgkwc24bCqPPY vxfFVlw2lw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=18964/SHA-256 is now in the chain-of-trust
	DS=41339/SHA-256 is now in the chain-of-trust
	`NCSC.GOV. 3600 IN DS ( 18964 8 2 d89c03eaf2f44359bc665e6f1ffab8a881d90a08def78804577dc4a0337e3c46 )`
	`NCSC.GOV. 3600 IN DS ( 41339 8 2 c5f3cfdb934b5ea4c8d7f34dfa5d24cb089961afd4298b3cdfb0245e28abe4a1 )`
	Query to a16-67.akam.net for NCSC.GOV/DNSKEY
	Received 1477 bytes from 23.211.132.67
	;; Response received from [23.211.132.67] 1477 octets ;; HEADER SECTION ;; id = 55697 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) NCSC.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAbGzCNQ5dFwP5Yzs+BBKZJnDug9nvfwuYkzAnIAZO+SNNfOiujIAptrTi4t3+GecbdO+lCCj 98obG0YcQ11H9qiw0Ejj25kIozYHZ8dqA5gVV0e/aq87EelyKR/F5DGt/9vgiqlmcKKB4okEc0aI 4HgCnF3FnvjPfjSERDJNOrrJJp7hSPBpJA7HsvcDNZizxBTO8aUXXlRZAnIFgSO7VwbRXt98rixH J/CG/19WEI8bsPcEmuxedxRMgA1OE39uyD6ec41RvkqEMM+H7l5P7m4fkzYnb3wXK+VAVhb/v2ry Rukey6R6LcaMeVzTmR+e1N62BHWXpzPRNFakuzFN/IU= ) ; keytag 41339 NCSC.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAd38QMp1ZSGDWCQYwqQXMHKMnDKhYrxB7a492R0ZVJZehLgIdLpHSohDKWu90gBjg+0KCsRa povkSbnb6U/RZb65BThEXqJKJQ0JaGJXpsxusBEJkEC7pEYg5tnJnE3S087O94KW3pTLdJTBEwgT QAkm43Ayxew7NkdnbTDpXlKd ) ; keytag 424 NCSC.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAc3TwMuMSOIUxG80gSE6zn92QqDHumohr+MrfgfKTJQ/fPEG98P45J2v8EiUnEW39x2+hZzE 2H1DGZnicHIZH1PrOg2pXlRX7OdzjeOAvgKpXHi0qfBXAzmuThs+RaTSfznqe9LSxNnfeXMJFCMb PKAJyVxVFnH1zHjJBiS+V15TF5KI73tXB9/3modsiaeMTmgMueFVAq++Y0laZ/LooUT65ls/m+Si BauoOH7X24p6O3DjBYmnXnft7u1tODagPeRfNfmy5NCo+gMn7mkdjHgL8+KLCHzIwSscOxUlNM+/ mMlu4u0WghL3yWr3wNCTSPmBd087rq2XMIq/8M3OANU= ) ; keytag 18964 NCSC.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAdJCOXmAaBEfAokIHAV3zYZpcc2KEBcIOegXrbXhZW44j1xV993wZd8zutTa+Zm8iNho69mI LaNfxmFjYtan4/rQbInZyKvn86MVmsPdMqYbxNouBpAdmTSjaeSJpmxjYfO1B8EkpCZG70pceomY rV4EhI3WcSpodIbz8j1gt6Z1 ) ; keytag 41523 NCSC.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260623171006 20260620161006 18964 ncsc.gov. Bz5xyF1+eqlbV7YhHJsToKAYIU6YuCEejJI9DG1571JaASKWnJ+cURXX0GrXf8rTLIFY5+26BCbk wLtCB8i2/mlxCifGgUMKvEycWbNtUuK+W6gH1/BpCe7Q91cmoFbBYafNXdeJJ44Uj9mlt5982x11 5KBFfcs4JM8G35yASMpaOyVjFbsxoCnBcGsyO1YdG3OLKWXrMEpoD/msL0jeG7DEJml11MwAX4Vj 1C4EYAq+gtymv4/R4VGMqjTaUG6gxJAGzn44rpotkk0LwTXSF3ks7LgRXmmrcHwb8ucUPSqMcyCl IpGD5eYrn2a5ijaCfO/sfXa5wSF1TxzEx4O28A== ) NCSC.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260623171006 20260620161006 41339 ncsc.gov. lm/Ubr9VRNmdhEl92CK2nOFqNTrXvnjeYD6EITG0MhjJgdg1gAGLkPW/O//Ev8Y6zrw7KpARbfTf qjWE2q73lKLcGqL0QpbClQGY3+NObOVaAF0rTX/A+8r/vbRgSKVUbpgQMzuiJx9iK4OpQ5VejInP ossZC6UIKU5UjubtmR7JxgggO3cW6ClHNfbvdre+ZYf/Kr5cM2fs2Amq6WSFGrvs/qLSd7Qqdp6m bJsO+OXhKPcAAgnUiaPMurDiteS01klg9OtS4M1pubD6brUYTEZcVX450FQMxl6ZrLYuq8IVAqlf z8V4OIRblnHCBuUSU6sz2f6Zo1v8qcbb7EFx7g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for NCSC.GOV
	`NCSC.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAbGzCNQ5dFwP5Yzs+BBKZJnDug9nvfwuYkzAnIAZO+SNNfOiujIAptrTi4t3+GecbdO+lCCj 98obG0YcQ11H9qiw0Ejj25kIozYHZ8dqA5gVV0e/aq87EelyKR/F5DGt/9vgiqlmcKKB4okEc0aI 4HgCnF3FnvjPfjSERDJNOrrJJp7hSPBpJA7HsvcDNZizxBTO8aUXXlRZAnIFgSO7VwbRXt98rixH J/CG/19WEI8bsPcEmuxedxRMgA1OE39uyD6ec41RvkqEMM+H7l5P7m4fkzYnb3wXK+VAVhb/v2ry Rukey6R6LcaMeVzTmR+e1N62BHWXpzPRNFakuzFN/IU= ) ; keytag 41339`
	`NCSC.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAd38QMp1ZSGDWCQYwqQXMHKMnDKhYrxB7a492R0ZVJZehLgIdLpHSohDKWu90gBjg+0KCsRa povkSbnb6U/RZb65BThEXqJKJQ0JaGJXpsxusBEJkEC7pEYg5tnJnE3S087O94KW3pTLdJTBEwgT QAkm43Ayxew7NkdnbTDpXlKd ) ; keytag 424`
	`NCSC.GOV. 7200 IN DNSKEY ( 257 3 8 AwEAAc3TwMuMSOIUxG80gSE6zn92QqDHumohr+MrfgfKTJQ/fPEG98P45J2v8EiUnEW39x2+hZzE 2H1DGZnicHIZH1PrOg2pXlRX7OdzjeOAvgKpXHi0qfBXAzmuThs+RaTSfznqe9LSxNnfeXMJFCMb PKAJyVxVFnH1zHjJBiS+V15TF5KI73tXB9/3modsiaeMTmgMueFVAq++Y0laZ/LooUT65ls/m+Si BauoOH7X24p6O3DjBYmnXnft7u1tODagPeRfNfmy5NCo+gMn7mkdjHgL8+KLCHzIwSscOxUlNM+/ mMlu4u0WghL3yWr3wNCTSPmBd087rq2XMIq/8M3OANU= ) ; keytag 18964`
	`NCSC.GOV. 7200 IN DNSKEY ( 256 3 8 AwEAAdJCOXmAaBEfAokIHAV3zYZpcc2KEBcIOegXrbXhZW44j1xV993wZd8zutTa+Zm8iNho69mI LaNfxmFjYtan4/rQbInZyKvn86MVmsPdMqYbxNouBpAdmTSjaeSJpmxjYfO1B8EkpCZG70pceomY rV4EhI3WcSpodIbz8j1gt6Z1 ) ; keytag 41523`
	DNSKEY=41339/SEP is now in the chain-of-trust
	DS=41339/SHA-256 verifies DNSKEY=41339/SEP
	DNSKEY=18964/SEP is now in the chain-of-trust
	DS=18964/SHA-256 verifies DNSKEY=18964/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`NCSC.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260623171006 20260620161006 18964 ncsc.gov. Bz5xyF1+eqlbV7YhHJsToKAYIU6YuCEejJI9DG1571JaASKWnJ+cURXX0GrXf8rTLIFY5+26BCbk wLtCB8i2/mlxCifGgUMKvEycWbNtUuK+W6gH1/BpCe7Q91cmoFbBYafNXdeJJ44Uj9mlt5982x11 5KBFfcs4JM8G35yASMpaOyVjFbsxoCnBcGsyO1YdG3OLKWXrMEpoD/msL0jeG7DEJml11MwAX4Vj 1C4EYAq+gtymv4/R4VGMqjTaUG6gxJAGzn44rpotkk0LwTXSF3ks7LgRXmmrcHwb8ucUPSqMcyCl IpGD5eYrn2a5ijaCfO/sfXa5wSF1TxzEx4O28A== )`
	`NCSC.GOV. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260623171006 20260620161006 41339 ncsc.gov. lm/Ubr9VRNmdhEl92CK2nOFqNTrXvnjeYD6EITG0MhjJgdg1gAGLkPW/O//Ev8Y6zrw7KpARbfTf qjWE2q73lKLcGqL0QpbClQGY3+NObOVaAF0rTX/A+8r/vbRgSKVUbpgQMzuiJx9iK4OpQ5VejInP ossZC6UIKU5UjubtmR7JxgggO3cW6ClHNfbvdre+ZYf/Kr5cM2fs2Amq6WSFGrvs/qLSd7Qqdp6m bJsO+OXhKPcAAgnUiaPMurDiteS01klg9OtS4M1pubD6brUYTEZcVX450FQMxl6ZrLYuq8IVAqlf z8V4OIRblnHCBuUSU6sz2f6Zo1v8qcbb7EFx7g== )`
	RRSIG=18964 and DNSKEY=18964/SEP verifies the DNSKEY RRset
	RRSIG=41339 and DNSKEY=41339/SEP verifies the DNSKEY RRset
	DNSKEY=424 is now in the chain-of-trust
	DNSKEY=41523 is now in the chain-of-trust
	Query to a12-65.akam.net for NCSC.GOV/A
	Received 221 bytes from 184.26.160.65
	;; Response received from [184.26.160.65] 221 octets ;; HEADER SECTION ;; id = 63699 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN A ;; ANSWER SECTION (2 records) NCSC.GOV. 20 IN A 184.31.223.58 NCSC.GOV. 20 IN RRSIG ( A 8 2 20 20260623171006 20260620161006 424 ncsc.gov. Hkcziz6sNct4QrNM4Qv/9ogxxEQMiLSSyIV/n8j5yYXaS7Gutv2HIdRaKv9iBLdRdGubxPHx0QVs UCEKGKRd3JWfsV8NwdiQc8MPa2PvHVNpeHLOHEWxqejxT49FfGr/Uknxz3Ju+DQCklpaOxfzawNX XP2lfrut9o2bHRvyEmA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a12-65.akam.net is authoritative for NCSC.GOV
	Found RRSIG signed by ncsc.gov zone
	Query to a3-64.akam.net for NCSC.GOV/SOA
	Received 562 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 562 octets ;; HEADER SECTION ;; id = 42746 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN SOA ;; ANSWER SECTION (2 records) NCSC.GOV. 86400 IN SOA ( a16-67.akam.net. hostmaster.akamai.com. 1468267200 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) NCSC.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260623171006 20260620161006 424 ncsc.gov. y72uEQgmzGQXdFji7f/Cmz2WlapdtuVzPXQ+BSuSMK1qqgnJhR7PmHNPiQz4ydJHb86KqNV+ofOh copIq+raoDZE/mdD53yLGQeC057Oab97OkBNJxw3zHKYvq7dEMhQCnsVC5923xl+n4YfYYbhtlKV MDMP9GZs0ICJ3H3dKFU= ) ;; AUTHORITY SECTION (7 records) NCSC.GOV. 86400 IN NS a1-22.akam.net. NCSC.GOV. 86400 IN NS a3-64.akam.net. NCSC.GOV. 86400 IN NS a16-67.akam.net. NCSC.GOV. 86400 IN NS a13-65.akam.net. NCSC.GOV. 86400 IN NS a12-65.akam.net. NCSC.GOV. 86400 IN NS a22-66.akam.net. NCSC.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260623171006 20260620161006 424 ncsc.gov. ElrnT/AiwsKgoLVwt+Whzh+4A1BexgQJRmxxnezatOEpCyeNFTycCdF1oD+CSXhbv64H6unV3i37 Zc900wfYX5x+W+e7R+ZalvyK/S9WyJVeiRsDWHOB4Nu9m8zGVPwq4FsYxpIc5GFF3jSbRuJSzD68 IXzSxDhZvymWP+4ZBzM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a13-65.akam.net for NCSC.GOV/SOA
	Received 562 bytes from 2.22.230.65
	;; Response received from [2.22.230.65] 562 octets ;; HEADER SECTION ;; id = 36390 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN SOA ;; ANSWER SECTION (2 records) NCSC.GOV. 86400 IN SOA ( a16-67.akam.net. hostmaster.akamai.com. 1468267200 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) NCSC.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260623171006 20260620161006 424 ncsc.gov. y72uEQgmzGQXdFji7f/Cmz2WlapdtuVzPXQ+BSuSMK1qqgnJhR7PmHNPiQz4ydJHb86KqNV+ofOh copIq+raoDZE/mdD53yLGQeC057Oab97OkBNJxw3zHKYvq7dEMhQCnsVC5923xl+n4YfYYbhtlKV MDMP9GZs0ICJ3H3dKFU= ) ;; AUTHORITY SECTION (7 records) NCSC.GOV. 86400 IN NS a13-65.akam.net. NCSC.GOV. 86400 IN NS a3-64.akam.net. NCSC.GOV. 86400 IN NS a22-66.akam.net. NCSC.GOV. 86400 IN NS a12-65.akam.net. NCSC.GOV. 86400 IN NS a1-22.akam.net. NCSC.GOV. 86400 IN NS a16-67.akam.net. NCSC.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260623171006 20260620161006 424 ncsc.gov. ElrnT/AiwsKgoLVwt+Whzh+4A1BexgQJRmxxnezatOEpCyeNFTycCdF1oD+CSXhbv64H6unV3i37 Zc900wfYX5x+W+e7R+ZalvyK/S9WyJVeiRsDWHOB4Nu9m8zGVPwq4FsYxpIc5GFF3jSbRuJSzD68 IXzSxDhZvymWP+4ZBzM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-22.akam.net for NCSC.GOV/SOA
	Received 562 bytes from 193.108.91.22
	;; Response received from [193.108.91.22] 562 octets ;; HEADER SECTION ;; id = 60957 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN SOA ;; ANSWER SECTION (2 records) NCSC.GOV. 86400 IN SOA ( a16-67.akam.net. hostmaster.akamai.com. 1468267200 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) NCSC.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260623171006 20260620161006 424 ncsc.gov. y72uEQgmzGQXdFji7f/Cmz2WlapdtuVzPXQ+BSuSMK1qqgnJhR7PmHNPiQz4ydJHb86KqNV+ofOh copIq+raoDZE/mdD53yLGQeC057Oab97OkBNJxw3zHKYvq7dEMhQCnsVC5923xl+n4YfYYbhtlKV MDMP9GZs0ICJ3H3dKFU= ) ;; AUTHORITY SECTION (7 records) NCSC.GOV. 86400 IN NS a1-22.akam.net. NCSC.GOV. 86400 IN NS a3-64.akam.net. NCSC.GOV. 86400 IN NS a13-65.akam.net. NCSC.GOV. 86400 IN NS a16-67.akam.net. NCSC.GOV. 86400 IN NS a12-65.akam.net. NCSC.GOV. 86400 IN NS a22-66.akam.net. NCSC.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260623171006 20260620161006 424 ncsc.gov. ElrnT/AiwsKgoLVwt+Whzh+4A1BexgQJRmxxnezatOEpCyeNFTycCdF1oD+CSXhbv64H6unV3i37 Zc900wfYX5x+W+e7R+ZalvyK/S9WyJVeiRsDWHOB4Nu9m8zGVPwq4FsYxpIc5GFF3jSbRuJSzD68 IXzSxDhZvymWP+4ZBzM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a16-67.akam.net for NCSC.GOV/SOA
	Received 562 bytes from 23.211.132.67
	;; Response received from [23.211.132.67] 562 octets ;; HEADER SECTION ;; id = 43646 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN SOA ;; ANSWER SECTION (2 records) NCSC.GOV. 86400 IN SOA ( a16-67.akam.net. hostmaster.akamai.com. 1468267200 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) NCSC.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260623171006 20260620161006 424 ncsc.gov. y72uEQgmzGQXdFji7f/Cmz2WlapdtuVzPXQ+BSuSMK1qqgnJhR7PmHNPiQz4ydJHb86KqNV+ofOh copIq+raoDZE/mdD53yLGQeC057Oab97OkBNJxw3zHKYvq7dEMhQCnsVC5923xl+n4YfYYbhtlKV MDMP9GZs0ICJ3H3dKFU= ) ;; AUTHORITY SECTION (7 records) NCSC.GOV. 86400 IN NS a22-66.akam.net. NCSC.GOV. 86400 IN NS a3-64.akam.net. NCSC.GOV. 86400 IN NS a1-22.akam.net. NCSC.GOV. 86400 IN NS a13-65.akam.net. NCSC.GOV. 86400 IN NS a16-67.akam.net. NCSC.GOV. 86400 IN NS a12-65.akam.net. NCSC.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260623171006 20260620161006 424 ncsc.gov. ElrnT/AiwsKgoLVwt+Whzh+4A1BexgQJRmxxnezatOEpCyeNFTycCdF1oD+CSXhbv64H6unV3i37 Zc900wfYX5x+W+e7R+ZalvyK/S9WyJVeiRsDWHOB4Nu9m8zGVPwq4FsYxpIc5GFF3jSbRuJSzD68 IXzSxDhZvymWP+4ZBzM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a22-66.akam.net for NCSC.GOV/SOA
	Received 562 bytes from 23.211.61.66
	;; Response received from [23.211.61.66] 562 octets ;; HEADER SECTION ;; id = 57583 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN SOA ;; ANSWER SECTION (2 records) NCSC.GOV. 86400 IN SOA ( a16-67.akam.net. hostmaster.akamai.com. 1468267200 ;serial 43200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) NCSC.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260623171006 20260620161006 424 ncsc.gov. y72uEQgmzGQXdFji7f/Cmz2WlapdtuVzPXQ+BSuSMK1qqgnJhR7PmHNPiQz4ydJHb86KqNV+ofOh copIq+raoDZE/mdD53yLGQeC057Oab97OkBNJxw3zHKYvq7dEMhQCnsVC5923xl+n4YfYYbhtlKV MDMP9GZs0ICJ3H3dKFU= ) ;; AUTHORITY SECTION (7 records) NCSC.GOV. 86400 IN NS a12-65.akam.net. NCSC.GOV. 86400 IN NS a22-66.akam.net. NCSC.GOV. 86400 IN NS a16-67.akam.net. NCSC.GOV. 86400 IN NS a3-64.akam.net. NCSC.GOV. 86400 IN NS a13-65.akam.net. NCSC.GOV. 86400 IN NS a1-22.akam.net. NCSC.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260623171006 20260620161006 424 ncsc.gov. ElrnT/AiwsKgoLVwt+Whzh+4A1BexgQJRmxxnezatOEpCyeNFTycCdF1oD+CSXhbv64H6unV3i37 Zc900wfYX5x+W+e7R+ZalvyK/S9WyJVeiRsDWHOB4Nu9m8zGVPwq4FsYxpIc5GFF3jSbRuJSzD68 IXzSxDhZvymWP+4ZBzM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a12-65.akam.net for NCSC.GOV/A
	NCSC.GOV A RR has value 184.31.223.58
	Found 1 RRSIGs over A RRset
	`NCSC.GOV. 20 IN RRSIG ( A 8 2 20 20260623171006 20260620161006 424 ncsc.gov. Hkcziz6sNct4QrNM4Qv/9ogxxEQMiLSSyIV/n8j5yYXaS7Gutv2HIdRaKv9iBLdRdGubxPHx0QVs UCEKGKRd3JWfsV8NwdiQc8MPa2PvHVNpeHLOHEWxqejxT49FfGr/Uknxz3Ju+DQCklpaOxfzawNX XP2lfrut9o2bHRvyEmA= )`
	RRSIG=424 and DNSKEY=424 verifies the A RRset

NCSC.GOV

	Query to a22-66.akam.net for NCSC.GOV/A
	Received 221 bytes from 23.211.61.66
	;; Response received from [23.211.61.66] 221 octets ;; HEADER SECTION ;; id = 48545 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN A ;; ANSWER SECTION (2 records) NCSC.GOV. 20 IN A 184.31.223.58 NCSC.GOV. 20 IN RRSIG ( A 8 2 20 20260623171006 20260620161006 424 ncsc.gov. Hkcziz6sNct4QrNM4Qv/9ogxxEQMiLSSyIV/n8j5yYXaS7Gutv2HIdRaKv9iBLdRdGubxPHx0QVs UCEKGKRd3JWfsV8NwdiQc8MPa2PvHVNpeHLOHEWxqejxT49FfGr/Uknxz3Ju+DQCklpaOxfzawNX XP2lfrut9o2bHRvyEmA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a22-66.akam.net is authoritative for NCSC.GOV
	Found RRSIG signed by ncsc.gov zone
	Query to a22-66.akam.net for NCSC.GOV/A
	NCSC.GOV A RR has value 184.31.223.58
	Found 1 RRSIGs over A RRset
	`NCSC.GOV. 20 IN RRSIG ( A 8 2 20 20260623171006 20260620161006 424 ncsc.gov. Hkcziz6sNct4QrNM4Qv/9ogxxEQMiLSSyIV/n8j5yYXaS7Gutv2HIdRaKv9iBLdRdGubxPHx0QVs UCEKGKRd3JWfsV8NwdiQc8MPa2PvHVNpeHLOHEWxqejxT49FfGr/Uknxz3Ju+DQCklpaOxfzawNX XP2lfrut9o2bHRvyEmA= )`
	RRSIG=424 and DNSKEY=424 verifies the A RRset

NCSC.GOV

	Query to a3-64.akam.net for NCSC.GOV/A
	Received 221 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 221 octets ;; HEADER SECTION ;; id = 9810 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN A ;; ANSWER SECTION (2 records) NCSC.GOV. 20 IN A 184.27.0.107 NCSC.GOV. 20 IN RRSIG ( A 8 2 20 20260623171006 20260620161006 424 ncsc.gov. aOf1ncZjbVliKdBEStcp/57eC1BbWK7O3UQtUn7uZnvk3Y9PzFhItelc0feup89K/v+11yTFtgsI XbhPI0J+BQn9OiGLwfWtoaLBE0RUXzIGBlL1Stt0UkrjdjH6AD14MaYLm+0LmnlySl+ySEyB4XBM M1DgPy/IQeFH8Pu7sLQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a3-64.akam.net is authoritative for NCSC.GOV
	Found RRSIG signed by ncsc.gov zone
	Query to a3-64.akam.net for NCSC.GOV/A
	NCSC.GOV A RR has value 184.27.0.107
	Found 1 RRSIGs over A RRset
	`NCSC.GOV. 20 IN RRSIG ( A 8 2 20 20260623171006 20260620161006 424 ncsc.gov. aOf1ncZjbVliKdBEStcp/57eC1BbWK7O3UQtUn7uZnvk3Y9PzFhItelc0feup89K/v+11yTFtgsI XbhPI0J+BQn9OiGLwfWtoaLBE0RUXzIGBlL1Stt0UkrjdjH6AD14MaYLm+0LmnlySl+ySEyB4XBM M1DgPy/IQeFH8Pu7sLQ= )`
	RRSIG=424 and DNSKEY=424 verifies the A RRset

NCSC.GOV

	Query to a13-65.akam.net for NCSC.GOV/A
	Received 221 bytes from 2.22.230.65
	;; Response received from [2.22.230.65] 221 octets ;; HEADER SECTION ;; id = 52587 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN A ;; ANSWER SECTION (2 records) NCSC.GOV. 20 IN A 23.61.51.236 NCSC.GOV. 20 IN RRSIG ( A 8 2 20 20260623171006 20260620161006 424 ncsc.gov. QsburnwbmzN69iSdp7C/yRN+VI/2yPyqv7iw0Yn8oWchb2IuYUzJV2gbvS7lgWibVp2pVQ0PEE/U lGCDYxjAXx4rVL1XRPjeYug2i48L9PecgfjoUYpW7JSH178Ac6vbNJBqbCJzV/3uVna/RGnmUuqE wN1jYJVXM6xbs5rTPvQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a13-65.akam.net is authoritative for NCSC.GOV
	Found RRSIG signed by ncsc.gov zone
	Query to a13-65.akam.net for NCSC.GOV/A
	NCSC.GOV A RR has value 23.61.51.236
	Found 1 RRSIGs over A RRset
	`NCSC.GOV. 20 IN RRSIG ( A 8 2 20 20260623171006 20260620161006 424 ncsc.gov. QsburnwbmzN69iSdp7C/yRN+VI/2yPyqv7iw0Yn8oWchb2IuYUzJV2gbvS7lgWibVp2pVQ0PEE/U lGCDYxjAXx4rVL1XRPjeYug2i48L9PecgfjoUYpW7JSH178Ac6vbNJBqbCJzV/3uVna/RGnmUuqE wN1jYJVXM6xbs5rTPvQ= )`
	RRSIG=424 and DNSKEY=424 verifies the A RRset

NCSC.GOV

	Query to a16-67.akam.net for NCSC.GOV/A
	Received 221 bytes from 23.211.132.67
	;; Response received from [23.211.132.67] 221 octets ;; HEADER SECTION ;; id = 49181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN A ;; ANSWER SECTION (2 records) NCSC.GOV. 20 IN A 184.31.223.58 NCSC.GOV. 20 IN RRSIG ( A 8 2 20 20260623171006 20260620161006 424 ncsc.gov. Hkcziz6sNct4QrNM4Qv/9ogxxEQMiLSSyIV/n8j5yYXaS7Gutv2HIdRaKv9iBLdRdGubxPHx0QVs UCEKGKRd3JWfsV8NwdiQc8MPa2PvHVNpeHLOHEWxqejxT49FfGr/Uknxz3Ju+DQCklpaOxfzawNX XP2lfrut9o2bHRvyEmA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a16-67.akam.net is authoritative for NCSC.GOV
	Found RRSIG signed by ncsc.gov zone
	Query to a16-67.akam.net for NCSC.GOV/A
	NCSC.GOV A RR has value 184.31.223.58
	Found 1 RRSIGs over A RRset
	`NCSC.GOV. 20 IN RRSIG ( A 8 2 20 20260623171006 20260620161006 424 ncsc.gov. Hkcziz6sNct4QrNM4Qv/9ogxxEQMiLSSyIV/n8j5yYXaS7Gutv2HIdRaKv9iBLdRdGubxPHx0QVs UCEKGKRd3JWfsV8NwdiQc8MPa2PvHVNpeHLOHEWxqejxT49FfGr/Uknxz3Ju+DQCklpaOxfzawNX XP2lfrut9o2bHRvyEmA= )`
	RRSIG=424 and DNSKEY=424 verifies the A RRset

NCSC.GOV

	Query to a1-22.akam.net for NCSC.GOV/A
	Received 221 bytes from 193.108.91.22
	;; Response received from [193.108.91.22] 221 octets ;; HEADER SECTION ;; id = 55742 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; NCSC.GOV. IN A ;; ANSWER SECTION (2 records) NCSC.GOV. 20 IN A 23.61.51.236 NCSC.GOV. 20 IN RRSIG ( A 8 2 20 20260623171006 20260620161006 424 ncsc.gov. QsburnwbmzN69iSdp7C/yRN+VI/2yPyqv7iw0Yn8oWchb2IuYUzJV2gbvS7lgWibVp2pVQ0PEE/U lGCDYxjAXx4rVL1XRPjeYug2i48L9PecgfjoUYpW7JSH178Ac6vbNJBqbCJzV/3uVna/RGnmUuqE wN1jYJVXM6xbs5rTPvQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-22.akam.net is authoritative for NCSC.GOV
	Found RRSIG signed by ncsc.gov zone
	Query to a1-22.akam.net for NCSC.GOV/A
	NCSC.GOV A RR has value 23.61.51.236
	Found 1 RRSIGs over A RRset
	`NCSC.GOV. 20 IN RRSIG ( A 8 2 20 20260623171006 20260620161006 424 ncsc.gov. QsburnwbmzN69iSdp7C/yRN+VI/2yPyqv7iw0Yn8oWchb2IuYUzJV2gbvS7lgWibVp2pVQ0PEE/U lGCDYxjAXx4rVL1XRPjeYug2i48L9PecgfjoUYpW7JSH178Ac6vbNJBqbCJzV/3uVna/RGnmUuqE wN1jYJVXM6xbs5rTPvQ= )`
	RRSIG=424 and DNSKEY=424 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test NCSC.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: