DNSSEC Debugger - athensmuseums.ru

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-11-15 00:23:48 UTC

Analyzing DNSSEC problems for athensmuseums.ru

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 65349 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261201000000 20261110000000 38696 . TuNb+MGI2u01zLpoSlOCQ90qWsYvKOXIqPmhHWXsKss1JDrWc9akScIE/LDT5mobotEn8vmGICOF WEeVN2/usP2HPvYCJh8IcD1AUDsr3UPEqTI6O55MJ8FteyK2xiyQJ8NzxQ6pAjKkpAmY3FxL0+v5 lmi7Qlb1pMw8rwqL331lEhAxHFDRNFsY4rrwud1eKvsT6DdWnHU3bzNUAzTtsnb6d2JM116+lsQD KzuqokOVGWcf/ROz1Q6lnjI8xGKwEAV+khmd099z6Y1l//t3T8QkuIbDIL+yxmuygB5/5O4/T/ZH 75asCe0qE2FoHFhrkgKTFWjuyt5mYVkqAYsKSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261201000000 20261110000000 38696 . TuNb+MGI2u01zLpoSlOCQ90qWsYvKOXIqPmhHWXsKss1JDrWc9akScIE/LDT5mobotEn8vmGICOF WEeVN2/usP2HPvYCJh8IcD1AUDsr3UPEqTI6O55MJ8FteyK2xiyQJ8NzxQ6pAjKkpAmY3FxL0+v5 lmi7Qlb1pMw8rwqL331lEhAxHFDRNFsY4rrwud1eKvsT6DdWnHU3bzNUAzTtsnb6d2JM116+lsQD KzuqokOVGWcf/ROz1Q6lnjI8xGKwEAV+khmd099z6Y1l//t3T8QkuIbDIL+yxmuygB5/5O4/T/ZH 75asCe0qE2FoHFhrkgKTFWjuyt5mYVkqAYsKSg== )`
	RRSIG=38696 and DNSKEY=38696/SEP verifies the DNSKEY RRset
	DNSKEY=8763 is now in the chain-of-trust
	Query to i.root-servers.net for athensmuseums.ru/A
	Received 764 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 764 octets ;; HEADER SECTION ;; id = 41311 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; athensmuseums.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS c.tld-servers.ru. ru. 172800 IN NS f.dns.ripn.net. ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20261127170000 20261114160000 8763 . QjkHvNxGArr4gNW93IVgykiBWdzWjWtTk7PYiu7NC6IErdVltnyYjzHkbjyt4dnxM0l3nOD9cFbs fInJMgkL5FWSjuqbMxancoUmC1Vfb3ptO3OWJD7m6BGj8FKgZfUExuudiDFP7RF01nkiEUgqT2Az sziF6JEkl0uyRtdxqM13KcSii3EO0V5NzElEF40f4KzBw5X7Wcir8U7ZkzF3BuFTMQRKbwCuOHNg 4wfc33F3Y4xEqKQ++3SDb0VvoUJeOropSlIavDUzGMcK21TLo9+SY6K3kvCYzHUJC1hVuHh0X+Cx Vb0VzM8TliMegHS1epXO/GVGsBEaSn7iMvKLsQ== ) ;; ADDITIONAL SECTION (13 records) c.tld-servers.ru. 172800 IN A 194.190.122.17 f.dns.ripn.net. 172800 IN A 193.232.156.17 e.dns.ripn.net. 172800 IN A 193.232.142.17 d.dns.ripn.net. 172800 IN A 194.190.124.17 b.dns.ripn.net. 172800 IN A 194.85.252.62 a.dns.ripn.net. 172800 IN A 193.232.128.6 c.tld-servers.ru. 172800 IN AAAA 2a09:bd00:1:0:194:190:122:17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for ru/DNSKEY
	Received 750 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 750 octets ;; HEADER SECTION ;; id = 51666 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS c.tld-servers.ru. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20261127170000 20261114160000 8763 . QjkHvNxGArr4gNW93IVgykiBWdzWjWtTk7PYiu7NC6IErdVltnyYjzHkbjyt4dnxM0l3nOD9cFbs fInJMgkL5FWSjuqbMxancoUmC1Vfb3ptO3OWJD7m6BGj8FKgZfUExuudiDFP7RF01nkiEUgqT2Az sziF6JEkl0uyRtdxqM13KcSii3EO0V5NzElEF40f4KzBw5X7Wcir8U7ZkzF3BuFTMQRKbwCuOHNg 4wfc33F3Y4xEqKQ++3SDb0VvoUJeOropSlIavDUzGMcK21TLo9+SY6K3kvCYzHUJC1hVuHh0X+Cx Vb0VzM8TliMegHS1epXO/GVGsBEaSn7iMvKLsQ== ) ;; ADDITIONAL SECTION (13 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 b.dns.ripn.net. 172800 IN A 194.85.252.62 c.tld-servers.ru. 172800 IN A 194.190.122.17 d.dns.ripn.net. 172800 IN A 194.190.124.17 e.dns.ripn.net. 172800 IN A 193.232.142.17 f.dns.ripn.net. 172800 IN A 193.232.156.17 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 c.tld-servers.ru. 172800 IN AAAA 2a09:bd00:1:0:194:190:122:17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; { "EDNS-VERSION": 0 }
	Found child zone ru

	Checking DS between . and ru
	Query to a.root-servers.net for ru/DS
	Received 366 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 366 octets ;; HEADER SECTION ;; id = 31673 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DS ;; ANSWER SECTION (2 records) ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20261127170000 20261114160000 8763 . QjkHvNxGArr4gNW93IVgykiBWdzWjWtTk7PYiu7NC6IErdVltnyYjzHkbjyt4dnxM0l3nOD9cFbs fInJMgkL5FWSjuqbMxancoUmC1Vfb3ptO3OWJD7m6BGj8FKgZfUExuudiDFP7RF01nkiEUgqT2Az sziF6JEkl0uyRtdxqM13KcSii3EO0V5NzElEF40f4KzBw5X7Wcir8U7ZkzF3BuFTMQRKbwCuOHNg 4wfc33F3Y4xEqKQ++3SDb0VvoUJeOropSlIavDUzGMcK21TLo9+SY6K3kvCYzHUJC1hVuHh0X+Cx Vb0VzM8TliMegHS1epXO/GVGsBEaSn7iMvKLsQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ru in the . zone
	DS=26734/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ru. 86400 IN RRSIG ( DS 8 1 86400 20261127170000 20261114160000 8763 . QjkHvNxGArr4gNW93IVgykiBWdzWjWtTk7PYiu7NC6IErdVltnyYjzHkbjyt4dnxM0l3nOD9cFbs fInJMgkL5FWSjuqbMxancoUmC1Vfb3ptO3OWJD7m6BGj8FKgZfUExuudiDFP7RF01nkiEUgqT2Az sziF6JEkl0uyRtdxqM13KcSii3EO0V5NzElEF40f4KzBw5X7Wcir8U7ZkzF3BuFTMQRKbwCuOHNg 4wfc33F3Y4xEqKQ++3SDb0VvoUJeOropSlIavDUzGMcK21TLo9+SY6K3kvCYzHUJC1hVuHh0X+Cx Vb0VzM8TliMegHS1epXO/GVGsBEaSn7iMvKLsQ== )`
	RRSIG=8763 and DNSKEY=8763 verifies the DS RRset
	DS=26734/SHA-256 is now in the chain-of-trust
	`ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 )`
	Query to c.tld-servers.ru for ru/DNSKEY
	Received 893 bytes from 194.190.122.17
	;; Response received from [194.190.122.17] 893 octets ;; HEADER SECTION ;; id = 12449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (4 records) ru. 345600 IN DNSKEY ( 256 3 8 AwEAAc0x7WIRpwiOloLTO58z32pgHOoALc8NKwCUujCwRvZYpAN/8/jGMKJKimKoWumuroZSYjfx SWBdcG90KfWZmRN6RP5oBYqh9DGXFbp8X9cObfNbWXhqKHfTE8s5p48vwi7I8Cb62VawvEsviHMR TLmHSl7HEN0OsBo2dKQDyTEp ) ; keytag 56460 ru. 345600 IN DNSKEY ( 257 3 8 AwEAAd+cacI5tMDtkvRg5WH1oNbQW1QnoS6zMBe94PImVKXMyg17dOqGZgEG7etk9e30p1IQAZ6B FzmaUSqw3jK52g5HzRMLAMGhG3DPYvA7q5M/cZB9/eckdO7Nb08RUvUHGpM1KFFThIxJgJEyEA/3 oiDer/bBMIBb9VtweMR0wsCsSfgxtCoZ1SGSvJIPOxqPlX3wQJO+waKU/WqdkHDmP6WpNmZTnQlm UWxL4K6vSK9QDCMpD54KSCcuuFm2kn5KKvA2QL+12xQw7MKUyl5eT5shwUP/yp/wNFixDfvdN9Im 2BJiqmeZGWSYde+IGJ33JFWrXu6CLiQy7UWPqKygPdM= ) ; keytag 26734 ru. 345600 IN DNSKEY ( 256 3 8 AwEAAa6I5F0RZolNw8UvnWdis94WwdFsmbE9Z6VGq8+v1xbslEni6hL4J49F5Pt/l4Kae5GnotCL qbHTLgP7OenaNJtcSxmYGHhvDWS2WaLCjFihFqbDV7KrMK59mFbtvv3WAPwlehhngu0yAy8skURC HlKg3jlhq5z3Fcn8BQyrYGn5 ) ; keytag 46489 ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20261202000000 20261112000000 26734 ru. IIEdoBhsxAJ5G2qMshWOqslYOZL8LlAkcvTWFKlK8tLzLg69n1Y2V/H0EovzStwRFRVHoS4uSgSv HFzYhK/6FhmDOfEtgVFmEfqm1+JVIZJj8W7f+Mlrpaqx0wm+Xe1XhAZH0j6A/VKnGyFzwEWoLjJe 5KW0iGaIF9xxujQ0PvUe2PWqw+vhelfElh8PiNugcCuFIOfMuLOoX/BC9C/pSmWhwe3Njm6Qk72f rInQpPt9aX3udOllgbR+4GqSQpy43LvC+kp1BxZYAECiRu8d9Ey+li0hUQh3T0p2w83kchcTX+Zw LR9VyUhAdI1LvpdiavyNHULd6YebDXeUdX5MmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ru
	`ru. 345600 IN DNSKEY ( 256 3 8 AwEAAc0x7WIRpwiOloLTO58z32pgHOoALc8NKwCUujCwRvZYpAN/8/jGMKJKimKoWumuroZSYjfx SWBdcG90KfWZmRN6RP5oBYqh9DGXFbp8X9cObfNbWXhqKHfTE8s5p48vwi7I8Cb62VawvEsviHMR TLmHSl7HEN0OsBo2dKQDyTEp ) ; keytag 56460`
	`ru. 345600 IN DNSKEY ( 257 3 8 AwEAAd+cacI5tMDtkvRg5WH1oNbQW1QnoS6zMBe94PImVKXMyg17dOqGZgEG7etk9e30p1IQAZ6B FzmaUSqw3jK52g5HzRMLAMGhG3DPYvA7q5M/cZB9/eckdO7Nb08RUvUHGpM1KFFThIxJgJEyEA/3 oiDer/bBMIBb9VtweMR0wsCsSfgxtCoZ1SGSvJIPOxqPlX3wQJO+waKU/WqdkHDmP6WpNmZTnQlm UWxL4K6vSK9QDCMpD54KSCcuuFm2kn5KKvA2QL+12xQw7MKUyl5eT5shwUP/yp/wNFixDfvdN9Im 2BJiqmeZGWSYde+IGJ33JFWrXu6CLiQy7UWPqKygPdM= ) ; keytag 26734`
	`ru. 345600 IN DNSKEY ( 256 3 8 AwEAAa6I5F0RZolNw8UvnWdis94WwdFsmbE9Z6VGq8+v1xbslEni6hL4J49F5Pt/l4Kae5GnotCL qbHTLgP7OenaNJtcSxmYGHhvDWS2WaLCjFihFqbDV7KrMK59mFbtvv3WAPwlehhngu0yAy8skURC HlKg3jlhq5z3Fcn8BQyrYGn5 ) ; keytag 46489`
	DNSKEY=26734/SEP is now in the chain-of-trust
	DS=26734/SHA-256 verifies DNSKEY=26734/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20261202000000 20261112000000 26734 ru. IIEdoBhsxAJ5G2qMshWOqslYOZL8LlAkcvTWFKlK8tLzLg69n1Y2V/H0EovzStwRFRVHoS4uSgSv HFzYhK/6FhmDOfEtgVFmEfqm1+JVIZJj8W7f+Mlrpaqx0wm+Xe1XhAZH0j6A/VKnGyFzwEWoLjJe 5KW0iGaIF9xxujQ0PvUe2PWqw+vhelfElh8PiNugcCuFIOfMuLOoX/BC9C/pSmWhwe3Njm6Qk72f rInQpPt9aX3udOllgbR+4GqSQpy43LvC+kp1BxZYAECiRu8d9Ey+li0hUQh3T0p2w83kchcTX+Zw LR9VyUhAdI1LvpdiavyNHULd6YebDXeUdX5MmA== )`
	RRSIG=26734 and DNSKEY=26734/SEP verifies the DNSKEY RRset
	DNSKEY=56460 is now in the chain-of-trust
	DNSKEY=46489 is now in the chain-of-trust
	Query to c.tld-servers.ru for athensmuseums.ru/A
	Received 584 bytes from 194.190.122.17
	;; Response received from [194.190.122.17] 584 octets ;; HEADER SECTION ;; id = 19744 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; athensmuseums.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) athensmuseums.ru. 345600 IN NS remy.ns.cloudflare.com. athensmuseums.ru. 345600 IN NS raina.ns.cloudflare.com. j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN NSEC3 ( 1 1 0 - j21lulr2unpa28sere28ovnjnj67qp7v NS SOA RRSIG DNSKEY NSEC3PARAM ) j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261129053500 20261029141641 56460 ru. ZrnTo6K65Ki2O/h5/JG1A7WdhQl9F+s21iKPoiq1tKPvT5HTNKZEzjS32HrQC7nCKlHtqJecMY7/ yG2sNENt3bqt/eqsK0q0RXW5p4gyfOaF6TyDK/eJDlWZk8wFrCxuE8SLajfOWAaAVS5Jbg6NRLWA R0AAHQcNLwxLXtMBPbg= ) 5fvf7a5ahpoqf3dtcght1hm4507kd3oe.ru. 3600 IN NSEC3 ( 1 1 0 - 5g9nd55cu3h7avcer0uvporbfsvtu3f7 NS DS RRSIG ) 5fvf7a5ahpoqf3dtcght1hm4507kd3oe.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261217002137 20261102021711 56460 ru. t1JyoAfs44j3zmYJCyZW2qhlKk0OtiKjSTnYAUbdhxDQ6P1YVfZRd7m7E6uY3g+th4tDnzLBh/s3 YDLp4Nsdj7pveShdWXQz2VLJA5dBewFTuf6adpZjtX5pTaWIyy+wK4Ne8I/aD4YHiECklaLlkVaM 3SW7J9mzF/KZYiOKHTI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.dns.ripn.net for athensmuseums.ru/DNSKEY
	Received 584 bytes from 194.190.124.17
	;; Response received from [194.190.124.17] 584 octets ;; HEADER SECTION ;; id = 62468 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; athensmuseums.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) athensmuseums.ru. 345600 IN NS remy.ns.cloudflare.com. athensmuseums.ru. 345600 IN NS raina.ns.cloudflare.com. j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN NSEC3 ( 1 1 0 - j21lulr2unpa28sere28ovnjnj67qp7v NS SOA RRSIG DNSKEY NSEC3PARAM ) j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261129053500 20261029141641 56460 ru. ZrnTo6K65Ki2O/h5/JG1A7WdhQl9F+s21iKPoiq1tKPvT5HTNKZEzjS32HrQC7nCKlHtqJecMY7/ yG2sNENt3bqt/eqsK0q0RXW5p4gyfOaF6TyDK/eJDlWZk8wFrCxuE8SLajfOWAaAVS5Jbg6NRLWA R0AAHQcNLwxLXtMBPbg= ) 5fvf7a5ahpoqf3dtcght1hm4507kd3oe.ru. 3600 IN NSEC3 ( 1 1 0 - 5g9nd55cu3h7avcer0uvporbfsvtu3f7 NS DS RRSIG ) 5fvf7a5ahpoqf3dtcght1hm4507kd3oe.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261217002137 20261102021711 56460 ru. t1JyoAfs44j3zmYJCyZW2qhlKk0OtiKjSTnYAUbdhxDQ6P1YVfZRd7m7E6uY3g+th4tDnzLBh/s3 YDLp4Nsdj7pveShdWXQz2VLJA5dBewFTuf6adpZjtX5pTaWIyy+wK4Ne8I/aD4YHiECklaLlkVaM 3SW7J9mzF/KZYiOKHTI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone athensmuseums.ru

athensmuseums.ru

	Checking DS between ru and athensmuseums.ru
	Query to a.dns.ripn.net for athensmuseums.ru/DS
	Received 759 bytes from 193.232.128.6
	;; Response received from [193.232.128.6] 759 octets ;; HEADER SECTION ;; id = 27126 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; athensmuseums.ru. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) J20C0QKDHUA3CUMNKST289FF06U2SQ91.ru. 3600 IN NSEC3 ( 1 1 0 - j21lulr2unpa28sere28ovnjnj67qp7v NS SOA RRSIG DNSKEY NSEC3PARAM ) J20C0QKDHUA3CUMNKST289FF06U2SQ91.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261129053500 20261029141641 56460 ru. ZrnTo6K65Ki2O/h5/JG1A7WdhQl9F+s21iKPoiq1tKPvT5HTNKZEzjS32HrQC7nCKlHtqJecMY7/ yG2sNENt3bqt/eqsK0q0RXW5p4gyfOaF6TyDK/eJDlWZk8wFrCxuE8SLajfOWAaAVS5Jbg6NRLWA R0AAHQcNLwxLXtMBPbg= ) ru. 3600 IN SOA ( a.dns.ripn.net. hostmaster.ripn.net. 4071097 ;serial 86400 ;refresh 14400 ;retry 2592000 ;expire 3600 ;minimum ) ru. 3600 IN RRSIG ( SOA 8 1 345600 20261218013313 20261114221652 56460 ru. MiTsX+0VkF5c7b2THVjNxq7xAwYphAzPQNpKDXLA8Iwc3vMMtlrqtqTyy+c5P6RUAD/PAyli0wbA Tz21Frm4rRe47gMD+/gXrgOwhzdvWR9nClrMNmbj9IS4FUWuqkF5pR1lEPxyVJPBGCgvfmosQB8W odbus71QOAwZUlv+yDQ= ) 5FVF7A5AHPOQF3DTCGHT1HM4507KD3OE.ru. 3600 IN NSEC3 ( 1 1 0 - 5g9nd55cu3h7avcer0uvporbfsvtu3f7 NS DS RRSIG ) 5FVF7A5AHPOQF3DTCGHT1HM4507KD3OE.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261217002137 20261102021711 56460 ru. t1JyoAfs44j3zmYJCyZW2qhlKk0OtiKjSTnYAUbdhxDQ6P1YVfZRd7m7E6uY3g+th4tDnzLBh/s3 YDLp4Nsdj7pveShdWXQz2VLJA5dBewFTuf6adpZjtX5pTaWIyy+wK4Ne8I/aD4YHiECklaLlkVaM 3SW7J9mzF/KZYiOKHTI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for athensmuseums.ru in the ru zone
	Query to remy.ns.cloudflare.com for athensmuseums.ru/DNSKEY
	Received 108 bytes from 172.64.35.115
	;; Response received from [172.64.35.115] 108 octets ;; HEADER SECTION ;; id = 6094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; athensmuseums.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) athensmuseums.ru. 1800 IN SOA ( raina.ns.cloudflare.com. dns.cloudflare.com. 2418493668 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to remy.ns.cloudflare.com for athensmuseums.ru/A
	Received 77 bytes from 172.64.35.115
	;; Response received from [172.64.35.115] 77 octets ;; HEADER SECTION ;; id = 20517 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; athensmuseums.ru. IN A ;; ANSWER SECTION (2 records) athensmuseums.ru. 300 IN A 172.67.172.80 athensmuseums.ru. 300 IN A 104.21.79.252 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	remy.ns.cloudflare.com is authoritative for athensmuseums.ru
	Query to raina.ns.cloudflare.com for athensmuseums.ru/SOA
	Received 108 bytes from 108.162.194.241
	;; Response received from [108.162.194.241] 108 octets ;; HEADER SECTION ;; id = 63453 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; athensmuseums.ru. IN SOA ;; ANSWER SECTION (1 record) athensmuseums.ru. 1800 IN SOA ( raina.ns.cloudflare.com. dns.cloudflare.com. 2418493668 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to remy.ns.cloudflare.com for athensmuseums.ru/A
	athensmuseums.ru A RR has value 172.67.172.80
	athensmuseums.ru A RR has value 104.21.79.252
	No RRSIGs found

athensmuseums.ru

	Query to raina.ns.cloudflare.com for athensmuseums.ru/A
	Received 77 bytes from 172.64.34.241
	;; Response received from [172.64.34.241] 77 octets ;; HEADER SECTION ;; id = 62277 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; athensmuseums.ru. IN A ;; ANSWER SECTION (2 records) athensmuseums.ru. 300 IN A 172.67.172.80 athensmuseums.ru. 300 IN A 104.21.79.252 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	raina.ns.cloudflare.com is authoritative for athensmuseums.ru
	Query to raina.ns.cloudflare.com for athensmuseums.ru/A
	athensmuseums.ru A RR has value 172.67.172.80
	athensmuseums.ru A RR has value 104.21.79.252
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test athensmuseums.ru at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: