DNSSEC Debugger - USCCR.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-12 23:10:12 UTC

Analyzing DNSSEC problems for USCCR.GOV

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1139 octets ;; HEADER SECTION ;; id = 35011 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to l.root-servers.net for USCCR.GOV/A
	Received 616 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 616 octets ;; HEADER SECTION ;; id = 25855 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCCR.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260925170000 20260912160000 57780 . EwFBz7AdmTvZQuW2OPXF/1Ia/51Cx29uLRKYsbfZddrEUarj1Nc4WxA7aBjB2dl7OgLObF0Lf8q1 k6Vqd6EkZemLNtJKJWlXwU84CAxu4sipQRFnZXImguzMn2rX+7lssqLRof8mc71VMMsBcbal3DIG vhn8uQrhZ5+xLSxyUtK58lJPMcCDJXcyCgHhaWH2PEopsCpa1f+JGfj7hddSdmz9prO/TB4WkLuN 77BcN9AN7mkpLicnwWHq0uicJahj/qBJk7Thc05uQBwHmrB7CacXz9yYwt4W1LRmpOXofWbrblE6 s1kaWGz+ZqW6Xe4Jo5CFGPwmk0TBywBeDosylA== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for GOV/DNSKEY
	Received 613 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 613 octets ;; HEADER SECTION ;; id = 13771 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260925170000 20260912160000 57780 . EwFBz7AdmTvZQuW2OPXF/1Ia/51Cx29uLRKYsbfZddrEUarj1Nc4WxA7aBjB2dl7OgLObF0Lf8q1 k6Vqd6EkZemLNtJKJWlXwU84CAxu4sipQRFnZXImguzMn2rX+7lssqLRof8mc71VMMsBcbal3DIG vhn8uQrhZ5+xLSxyUtK58lJPMcCDJXcyCgHhaWH2PEopsCpa1f+JGfj7hddSdmz9prO/TB4WkLuN 77BcN9AN7mkpLicnwWHq0uicJahj/qBJk7Thc05uQBwHmrB7CacXz9yYwt4W1LRmpOXofWbrblE6 s1kaWGz+ZqW6Xe4Jo5CFGPwmk0TBywBeDosylA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to b.root-servers.net for GOV/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 12691 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260925170000 20260912160000 57780 . EwFBz7AdmTvZQuW2OPXF/1Ia/51Cx29uLRKYsbfZddrEUarj1Nc4WxA7aBjB2dl7OgLObF0Lf8q1 k6Vqd6EkZemLNtJKJWlXwU84CAxu4sipQRFnZXImguzMn2rX+7lssqLRof8mc71VMMsBcbal3DIG vhn8uQrhZ5+xLSxyUtK58lJPMcCDJXcyCgHhaWH2PEopsCpa1f+JGfj7hddSdmz9prO/TB4WkLuN 77BcN9AN7mkpLicnwWHq0uicJahj/qBJk7Thc05uQBwHmrB7CacXz9yYwt4W1LRmpOXofWbrblE6 s1kaWGz+ZqW6Xe4Jo5CFGPwmk0TBywBeDosylA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260925170000 20260912160000 57780 . EwFBz7AdmTvZQuW2OPXF/1Ia/51Cx29uLRKYsbfZddrEUarj1Nc4WxA7aBjB2dl7OgLObF0Lf8q1 k6Vqd6EkZemLNtJKJWlXwU84CAxu4sipQRFnZXImguzMn2rX+7lssqLRof8mc71VMMsBcbal3DIG vhn8uQrhZ5+xLSxyUtK58lJPMcCDJXcyCgHhaWH2PEopsCpa1f+JGfj7hddSdmz9prO/TB4WkLuN 77BcN9AN7mkpLicnwWHq0uicJahj/qBJk7Thc05uQBwHmrB7CacXz9yYwt4W1LRmpOXofWbrblE6 s1kaWGz+ZqW6Xe4Jo5CFGPwmk0TBywBeDosylA== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for GOV/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 9148 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20261027110638 20260827110638 2536 gov. PtRLa+tjVuHiye3klDjS7yugV+CJgjvDc9nmgh/T1kZfHsYlKKP7AZC5rN3tuCnWUBN0JLaqMvvB aOtx0rt13Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20261027110638 20260827110638 2536 gov. PtRLa+tjVuHiye3klDjS7yugV+CJgjvDc9nmgh/T1kZfHsYlKKP7AZC5rN3tuCnWUBN0JLaqMvvB aOtx0rt13Q== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for USCCR.GOV/A
	Received 277 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 277 octets ;; HEADER SECTION ;; id = 43573 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCCR.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) USCCR.GOV. 10800 IN NS a7.uberns.com. USCCR.GOV. 10800 IN NS b7.uberns.com. USCCR.GOV. 3600 IN DS ( 50951 8 2 dc65151ea10c4da60dbcc422aa44c388bbd32b0d3b4d47e39dc8ba629cf91f38 ) USCCR.GOV. 3600 IN DS ( 6020 8 2 27f6dd709f33bbbbbf4f0d87f760c52557aa8e7e79dec34349401358a990c88b ) USCCR.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260914001012 20260911221012 35496 gov. KUNrixgCy5A6nXEjP1WirzgINaV9Y/PPcaFX2wbisOfYadTWsgRyhoo/8qMb/8m+zWuuTnnmcyav 6QJzJjuTfQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.ns.gov for USCCR.GOV/DNSKEY
	Received 277 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 277 octets ;; HEADER SECTION ;; id = 37145 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCCR.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) USCCR.GOV. 10800 IN NS a7.uberns.com. USCCR.GOV. 10800 IN NS b7.uberns.com. USCCR.GOV. 3600 IN DS ( 50951 8 2 dc65151ea10c4da60dbcc422aa44c388bbd32b0d3b4d47e39dc8ba629cf91f38 ) USCCR.GOV. 3600 IN DS ( 6020 8 2 27f6dd709f33bbbbbf4f0d87f760c52557aa8e7e79dec34349401358a990c88b ) USCCR.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260914001012 20260911221012 35496 gov. 6E+rgfMbD5wfjns07zecwItbUIDe/hPyORj744HKO2d0IsvBHRNhgOpiHaSFjCIxW3bx6xXcv+YC IUdw0pGcHg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone USCCR.GOV

USCCR.GOV

	Checking DS between GOV and USCCR.GOV
	Query to b.ns.gov for USCCR.GOV/DS
	Received 233 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 233 octets ;; HEADER SECTION ;; id = 26152 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCCR.GOV. IN DS ;; ANSWER SECTION (3 records) USCCR.GOV. 3600 IN DS ( 50951 8 2 dc65151ea10c4da60dbcc422aa44c388bbd32b0d3b4d47e39dc8ba629cf91f38 ) USCCR.GOV. 3600 IN DS ( 6020 8 2 27f6dd709f33bbbbbf4f0d87f760c52557aa8e7e79dec34349401358a990c88b ) USCCR.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260914001012 20260911221012 35496 gov. P5ZeSUfwmj9VKOYlMMsA4VqHc5fzPP/vRT+Ge59vLnFViHxHs2svWe7cUEUxhE/pBWkUO6xGNrJ0 VHz72YOF/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for USCCR.GOV in the GOV zone
	DS=50951/SHA-256 has algorithm RSASHA256
	DS=6020/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`USCCR.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260914001012 20260911221012 35496 gov. P5ZeSUfwmj9VKOYlMMsA4VqHc5fzPP/vRT+Ge59vLnFViHxHs2svWe7cUEUxhE/pBWkUO6xGNrJ0 VHz72YOF/w== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=50951/SHA-256 is now in the chain-of-trust
	DS=6020/SHA-256 is now in the chain-of-trust
	`USCCR.GOV. 3600 IN DS ( 50951 8 2 dc65151ea10c4da60dbcc422aa44c388bbd32b0d3b4d47e39dc8ba629cf91f38 )`
	`USCCR.GOV. 3600 IN DS ( 6020 8 2 27f6dd709f33bbbbbf4f0d87f760c52557aa8e7e79dec34349401358a990c88b )`
	Query to b7.uberns.com for USCCR.GOV/DNSKEY
	Received 1228 bytes from 216.59.57.7
	;; Response received from [216.59.57.7] 1228 octets ;; HEADER SECTION ;; id = 35347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCCR.GOV. IN DNSKEY ;; ANSWER SECTION (3 records) USCCR.GOV. 14400 IN DNSKEY ( 256 3 8 AwEAAc90pwU8kTu+r+QlmPMfVpPh1WabpDAbDlizuyl5k28YP9vdoOUDZBxfbnPQfcAIGvP/2EOV z2H6JCrD/uiuHgzeSGEsizTupcCXM3l0/CETzZ0XNDakGRt0t6qWTJoEGgd0E9FwyeYiGJJTXVNd MhUtpx9CYvu1cAVdYCD5PuaIJ4ahILsTDTVSRvEOHcNHgaPLj0654EULjrJCzqxDDKDG+yaPqjFP sMqiA4pdWNNmBhd5ruSuwoTJhWdKb0kH+I9cHGZIyW+NSqMvGbgxdHGBfZ5PIY1jLPXTS0zqkpQW 7XlcQye2ccPQPnvqZskYi+slUmsRKlKCAxCqjLcvfqM= ) ; keytag 53145 USCCR.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAccLg+3jkqPQTPti8W1QnNlfvqYeCicQtgShCktAzygPpLRDtOrveWSq2xza8QexlrfzhtZt 7H8dG7YwGeO1KLo4YoOBSj7tqNtHyCnUmG4joqkMHE3JqSkS6zgubptYlg5x3cZZH0Rt4bu4p4Nt E2YOJwhzBv76/Eu/FUduzJMhQDhxJzgu8UWekJzA67UCzMnpkMKks34pp2QrhSN9QyZv1j9ST6UU Xr8B0QzBuT2BXczcTMubjT41w4gsBkk3oMlonIAPBEwMvIU59jnQ5q0rq8F5Ym8lgcjCj4tt/v+o ZslJ/ZYzAhmCujaR+rL59KOqNfzoBS1tUvyrDTF0gb8= ) ; keytag 50951 USCCR.GOV. 14400 IN RRSIG ( DNSKEY 8 2 14400 20260921172443 20260907155443 50951 usccr.gov. E65/+QT3mPJgPPd8VTw1U+DghZvcaVCL0W0WBnLYU6ZhTruqqdK2/cjkgDuX4R13ilr6ku8R5U+o JH8OPmjpJVxyA7oMS7bQOaSSa/B854gc76gLAFRGBDilpg45ZUBRP+n8Gd93lqiLQYbCYM6KuJzp q4cv0Aj0e+KgXBQ92xGhZV5RPkB6tYj4qkGNjpicD8dgre7pgBlHY3UYE6HCovKvnv/Set9G5QCn Q9ksY/Go5Xhbroh4ZpdIl2DuZ23tSnO19h4xXXBlrZJ0OuzZKgzxaRFoptG6RhNakeBrLHmkXpbI 88olv50SwnvjXl4SnUenL9b37UI1fOqcVbM2FA== ) ;; AUTHORITY SECTION (3 records) USCCR.GOV. 86400 IN NS a7.uberns.com. USCCR.GOV. 86400 IN NS b7.uberns.com. USCCR.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260920162443 20260906145443 53145 usccr.gov. KDPuFxlqLSmdl28R45owp9cPG5arOegrw+Xxe7ofqSzWDvgGFBwiS3VRqQcQe693f0buEJFZxJnI utEeNLUYd48SS9MfTsY5ONJ3IGxKxmqcRgqGJD5henZhEGgftC52zF7Xe8Z+QCOE7Ts9l/lTee4G GP0dJ/wpDbzET83k9VnTwRvUQ3k2tCUweNbxn0Fn/DvyU7EAp35jYgV/Tt2i249cDJWGtv2t0jXF gg4tlsAs3HlxxATtF2bFoSeuJ3CWbK5n2H/vntgRp7gYwQ1RXpSWGOnvFkOA3voND+f+R/7a1r3u Oig+erjZ//9lYJmF486AcxZA9KDZkPyHBYlgfA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for USCCR.GOV
	`USCCR.GOV. 14400 IN DNSKEY ( 256 3 8 AwEAAc90pwU8kTu+r+QlmPMfVpPh1WabpDAbDlizuyl5k28YP9vdoOUDZBxfbnPQfcAIGvP/2EOV z2H6JCrD/uiuHgzeSGEsizTupcCXM3l0/CETzZ0XNDakGRt0t6qWTJoEGgd0E9FwyeYiGJJTXVNd MhUtpx9CYvu1cAVdYCD5PuaIJ4ahILsTDTVSRvEOHcNHgaPLj0654EULjrJCzqxDDKDG+yaPqjFP sMqiA4pdWNNmBhd5ruSuwoTJhWdKb0kH+I9cHGZIyW+NSqMvGbgxdHGBfZ5PIY1jLPXTS0zqkpQW 7XlcQye2ccPQPnvqZskYi+slUmsRKlKCAxCqjLcvfqM= ) ; keytag 53145`
	`USCCR.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAccLg+3jkqPQTPti8W1QnNlfvqYeCicQtgShCktAzygPpLRDtOrveWSq2xza8QexlrfzhtZt 7H8dG7YwGeO1KLo4YoOBSj7tqNtHyCnUmG4joqkMHE3JqSkS6zgubptYlg5x3cZZH0Rt4bu4p4Nt E2YOJwhzBv76/Eu/FUduzJMhQDhxJzgu8UWekJzA67UCzMnpkMKks34pp2QrhSN9QyZv1j9ST6UU Xr8B0QzBuT2BXczcTMubjT41w4gsBkk3oMlonIAPBEwMvIU59jnQ5q0rq8F5Ym8lgcjCj4tt/v+o ZslJ/ZYzAhmCujaR+rL59KOqNfzoBS1tUvyrDTF0gb8= ) ; keytag 50951`
	DNSKEY=50951/SEP is now in the chain-of-trust
	DS=50951/SHA-256 verifies DNSKEY=50951/SEP
	DS=6020/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`USCCR.GOV. 14400 IN RRSIG ( DNSKEY 8 2 14400 20260921172443 20260907155443 50951 usccr.gov. E65/+QT3mPJgPPd8VTw1U+DghZvcaVCL0W0WBnLYU6ZhTruqqdK2/cjkgDuX4R13ilr6ku8R5U+o JH8OPmjpJVxyA7oMS7bQOaSSa/B854gc76gLAFRGBDilpg45ZUBRP+n8Gd93lqiLQYbCYM6KuJzp q4cv0Aj0e+KgXBQ92xGhZV5RPkB6tYj4qkGNjpicD8dgre7pgBlHY3UYE6HCovKvnv/Set9G5QCn Q9ksY/Go5Xhbroh4ZpdIl2DuZ23tSnO19h4xXXBlrZJ0OuzZKgzxaRFoptG6RhNakeBrLHmkXpbI 88olv50SwnvjXl4SnUenL9b37UI1fOqcVbM2FA== )`
	RRSIG=50951 and DNSKEY=50951/SEP verifies the DNSKEY RRset
	DNSKEY=53145 is now in the chain-of-trust
	Query to a7.uberns.com for USCCR.GOV/A
	Received 692 bytes from 216.59.60.7
	;; Response received from [216.59.60.7] 692 octets ;; HEADER SECTION ;; id = 41135 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCCR.GOV. IN A ;; ANSWER SECTION (2 records) USCCR.GOV. 3600 IN A 13.223.20.37 USCCR.GOV. 3600 IN RRSIG ( A 8 2 3600 20260923022550 20260909005550 53145 usccr.gov. D89mybOvzovvXomIgsRno6kzuGIrMzmjZlM08fVRsl/SZxa+NW+4i1KqK0Mzmokw1U4Ih/tIOfP0 OzvN1wc/vRMb7fU9zMunwjzcuW2A4YwnJLZDQ2L86b4/EYNbTNt0TBj2XaflrN9gkIsnbBSobNjx f7xHtb2M8ycf8wcJJNysaudjECJUUfROAwmEhdHLvp/HrlDxsH4fa4wZKWtx9sbXqNlRQer7sAWH p9hT2I6Y65Hy54zwq/++HPi7EbAwjsoCGyvjGB8Y+oQP+U6tAj73ldaETKM7pxduIE2kMMs/SA4y JHZmU22KhG6Wo1cL5HY8J/tJRGQeZwBoyoyipw== ) ;; AUTHORITY SECTION (3 records) USCCR.GOV. 86400 IN NS a7.uberns.com. USCCR.GOV. 86400 IN NS b7.uberns.com. USCCR.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260920162443 20260906145443 53145 usccr.gov. KDPuFxlqLSmdl28R45owp9cPG5arOegrw+Xxe7ofqSzWDvgGFBwiS3VRqQcQe693f0buEJFZxJnI utEeNLUYd48SS9MfTsY5ONJ3IGxKxmqcRgqGJD5henZhEGgftC52zF7Xe8Z+QCOE7Ts9l/lTee4G GP0dJ/wpDbzET83k9VnTwRvUQ3k2tCUweNbxn0Fn/DvyU7EAp35jYgV/Tt2i249cDJWGtv2t0jXF gg4tlsAs3HlxxATtF2bFoSeuJ3CWbK5n2H/vntgRp7gYwQ1RXpSWGOnvFkOA3voND+f+R/7a1r3u Oig+erjZ//9lYJmF486AcxZA9KDZkPyHBYlgfA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a7.uberns.com is authoritative for USCCR.GOV
	Found RRSIG signed by usccr.gov zone
	Query to b7.uberns.com for USCCR.GOV/SOA
	Received 728 bytes from 216.59.57.7
	;; Response received from [216.59.57.7] 728 octets ;; HEADER SECTION ;; id = 47891 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCCR.GOV. IN SOA ;; ANSWER SECTION (2 records) USCCR.GOV. 14400 IN SOA ( a7.uberns.com. webadmin.zekiah.com. 2609100002 ;serial 14400 ;refresh 7200 ;retry 1209600 ;expire 300 ;minimum ) USCCR.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20260924201041 20260910184041 53145 usccr.gov. HwN7I/YWrTJr8Fa/pMW5mhbuGXfwe1d3dQfO4BTmbOrcus5lMgUda4XZFyQUpX2Mx5tRGITT4Wm8 z3l7iAxRhy/+a26WYS/iHG1yty8E/tP92sQprdfDYJwlKBDy+xJGDt4UmnGO5IGdAyAvmH1at47n K6R701pfrtfoauH+dKgx6qBkupft6MwFAeZw6NnHSS+8XLwWHl7PILGmWvv99sHzUvr33U9cvvlQ pZdKG9EzDvVz+qeZSWWTdBRD53Ro638eso8082SSjZ0IolH93DcLoc4XSIVKkErz2r5FkTXPbELa qkjS22YZeygvsZGYHhuuQi2zPncJ90ji6b5Hrw== ) ;; AUTHORITY SECTION (3 records) USCCR.GOV. 86400 IN NS a7.uberns.com. USCCR.GOV. 86400 IN NS b7.uberns.com. USCCR.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260920162443 20260906145443 53145 usccr.gov. KDPuFxlqLSmdl28R45owp9cPG5arOegrw+Xxe7ofqSzWDvgGFBwiS3VRqQcQe693f0buEJFZxJnI utEeNLUYd48SS9MfTsY5ONJ3IGxKxmqcRgqGJD5henZhEGgftC52zF7Xe8Z+QCOE7Ts9l/lTee4G GP0dJ/wpDbzET83k9VnTwRvUQ3k2tCUweNbxn0Fn/DvyU7EAp35jYgV/Tt2i249cDJWGtv2t0jXF gg4tlsAs3HlxxATtF2bFoSeuJ3CWbK5n2H/vntgRp7gYwQ1RXpSWGOnvFkOA3voND+f+R/7a1r3u Oig+erjZ//9lYJmF486AcxZA9KDZkPyHBYlgfA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a7.uberns.com for USCCR.GOV/A
	USCCR.GOV A RR has value 13.223.20.37
	Found 1 RRSIGs over A RRset
	`USCCR.GOV. 3600 IN RRSIG ( A 8 2 3600 20260923022550 20260909005550 53145 usccr.gov. D89mybOvzovvXomIgsRno6kzuGIrMzmjZlM08fVRsl/SZxa+NW+4i1KqK0Mzmokw1U4Ih/tIOfP0 OzvN1wc/vRMb7fU9zMunwjzcuW2A4YwnJLZDQ2L86b4/EYNbTNt0TBj2XaflrN9gkIsnbBSobNjx f7xHtb2M8ycf8wcJJNysaudjECJUUfROAwmEhdHLvp/HrlDxsH4fa4wZKWtx9sbXqNlRQer7sAWH p9hT2I6Y65Hy54zwq/++HPi7EbAwjsoCGyvjGB8Y+oQP+U6tAj73ldaETKM7pxduIE2kMMs/SA4y JHZmU22KhG6Wo1cL5HY8J/tJRGQeZwBoyoyipw== )`
	RRSIG=53145 and DNSKEY=53145 verifies the A RRset

USCCR.GOV

	Query to b7.uberns.com for USCCR.GOV/A
	Received 692 bytes from 216.59.57.7
	;; Response received from [216.59.57.7] 692 octets ;; HEADER SECTION ;; id = 19406 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCCR.GOV. IN A ;; ANSWER SECTION (2 records) USCCR.GOV. 3600 IN A 13.223.20.37 USCCR.GOV. 3600 IN RRSIG ( A 8 2 3600 20260923022550 20260909005550 53145 usccr.gov. D89mybOvzovvXomIgsRno6kzuGIrMzmjZlM08fVRsl/SZxa+NW+4i1KqK0Mzmokw1U4Ih/tIOfP0 OzvN1wc/vRMb7fU9zMunwjzcuW2A4YwnJLZDQ2L86b4/EYNbTNt0TBj2XaflrN9gkIsnbBSobNjx f7xHtb2M8ycf8wcJJNysaudjECJUUfROAwmEhdHLvp/HrlDxsH4fa4wZKWtx9sbXqNlRQer7sAWH p9hT2I6Y65Hy54zwq/++HPi7EbAwjsoCGyvjGB8Y+oQP+U6tAj73ldaETKM7pxduIE2kMMs/SA4y JHZmU22KhG6Wo1cL5HY8J/tJRGQeZwBoyoyipw== ) ;; AUTHORITY SECTION (3 records) USCCR.GOV. 86400 IN NS a7.uberns.com. USCCR.GOV. 86400 IN NS b7.uberns.com. USCCR.GOV. 86400 IN RRSIG ( NS 8 2 86400 20260920162443 20260906145443 53145 usccr.gov. KDPuFxlqLSmdl28R45owp9cPG5arOegrw+Xxe7ofqSzWDvgGFBwiS3VRqQcQe693f0buEJFZxJnI utEeNLUYd48SS9MfTsY5ONJ3IGxKxmqcRgqGJD5henZhEGgftC52zF7Xe8Z+QCOE7Ts9l/lTee4G GP0dJ/wpDbzET83k9VnTwRvUQ3k2tCUweNbxn0Fn/DvyU7EAp35jYgV/Tt2i249cDJWGtv2t0jXF gg4tlsAs3HlxxATtF2bFoSeuJ3CWbK5n2H/vntgRp7gYwQ1RXpSWGOnvFkOA3voND+f+R/7a1r3u Oig+erjZ//9lYJmF486AcxZA9KDZkPyHBYlgfA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	b7.uberns.com is authoritative for USCCR.GOV
	Found RRSIG signed by usccr.gov zone
	Query to b7.uberns.com for USCCR.GOV/A
	USCCR.GOV A RR has value 13.223.20.37
	Found 1 RRSIGs over A RRset
	`USCCR.GOV. 3600 IN RRSIG ( A 8 2 3600 20260923022550 20260909005550 53145 usccr.gov. D89mybOvzovvXomIgsRno6kzuGIrMzmjZlM08fVRsl/SZxa+NW+4i1KqK0Mzmokw1U4Ih/tIOfP0 OzvN1wc/vRMb7fU9zMunwjzcuW2A4YwnJLZDQ2L86b4/EYNbTNt0TBj2XaflrN9gkIsnbBSobNjx f7xHtb2M8ycf8wcJJNysaudjECJUUfROAwmEhdHLvp/HrlDxsH4fa4wZKWtx9sbXqNlRQer7sAWH p9hT2I6Y65Hy54zwq/++HPi7EbAwjsoCGyvjGB8Y+oQP+U6tAj73ldaETKM7pxduIE2kMMs/SA4y JHZmU22KhG6Wo1cL5HY8J/tJRGQeZwBoyoyipw== )`
	RRSIG=53145 and DNSKEY=53145 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test USCCR.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: