DNSSEC Debugger

Domain Name:

Time: 2025-07-06 23:39:32 UTC

Analyzing DNSSEC problems for bpa.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1414 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1414 octets ;; HEADER SECTION ;; id = 46540 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to c.root-servers.net for bpa.gov/A
	Received 617 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 617 octets ;; HEADER SECTION ;; id = 36620 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250719170000 20250706160000 46441 . mjnN1zJunAuUCyBeR9uf2pVkHesgu7pxQvU5jSRrD92XVoBWtgo9hv6LnK/BEA880EbohUX+O9dd Nmm2FC8WJAtmOdQtZArLbscxUfY5AIE4t86/MPbZnUJsF2pna+2udGPCzBy2dUnIL662HDb/J9MK PiENOhPfK4rolXDQ372nqoCn8qzng4EI35tQ6CRnfUbnHW705rMVRy8K/yAwcA3i/bPidyXqG8L3 q6cR+/6G9UGuFYF0I+cWy97dR0gEaxromU39oNMHZ+oGLfYAJNRZyXzdvkMsh/PtLlIRpfEC7NWI /h3P1e4ywKHdE1Wj7YI2pHPtoiPCXxgjW1ft8g== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for gov/DNSKEY
	Received 613 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 613 octets ;; HEADER SECTION ;; id = 25106 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250719170000 20250706160000 46441 . mjnN1zJunAuUCyBeR9uf2pVkHesgu7pxQvU5jSRrD92XVoBWtgo9hv6LnK/BEA880EbohUX+O9dd Nmm2FC8WJAtmOdQtZArLbscxUfY5AIE4t86/MPbZnUJsF2pna+2udGPCzBy2dUnIL662HDb/J9MK PiENOhPfK4rolXDQ372nqoCn8qzng4EI35tQ6CRnfUbnHW705rMVRy8K/yAwcA3i/bPidyXqG8L3 q6cR+/6G9UGuFYF0I+cWy97dR0gEaxromU39oNMHZ+oGLfYAJNRZyXzdvkMsh/PtLlIRpfEC7NWI /h3P1e4ywKHdE1Wj7YI2pHPtoiPCXxgjW1ft8g== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to c.root-servers.net for gov/DS
	Received 367 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 367 octets ;; HEADER SECTION ;; id = 40080 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20250719170000 20250706160000 46441 . mjnN1zJunAuUCyBeR9uf2pVkHesgu7pxQvU5jSRrD92XVoBWtgo9hv6LnK/BEA880EbohUX+O9dd Nmm2FC8WJAtmOdQtZArLbscxUfY5AIE4t86/MPbZnUJsF2pna+2udGPCzBy2dUnIL662HDb/J9MK PiENOhPfK4rolXDQ372nqoCn8qzng4EI35tQ6CRnfUbnHW705rMVRy8K/yAwcA3i/bPidyXqG8L3 q6cR+/6G9UGuFYF0I+cWy97dR0gEaxromU39oNMHZ+oGLfYAJNRZyXzdvkMsh/PtLlIRpfEC7NWI /h3P1e4ywKHdE1Wj7YI2pHPtoiPCXxgjW1ft8g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20250719170000 20250706160000 46441 . mjnN1zJunAuUCyBeR9uf2pVkHesgu7pxQvU5jSRrD92XVoBWtgo9hv6LnK/BEA880EbohUX+O9dd Nmm2FC8WJAtmOdQtZArLbscxUfY5AIE4t86/MPbZnUJsF2pna+2udGPCzBy2dUnIL662HDb/J9MK PiENOhPfK4rolXDQ372nqoCn8qzng4EI35tQ6CRnfUbnHW705rMVRy8K/yAwcA3i/bPidyXqG8L3 q6cR+/6G9UGuFYF0I+cWy97dR0gEaxromU39oNMHZ+oGLfYAJNRZyXzdvkMsh/PtLlIRpfEC7NWI /h3P1e4ywKHdE1Wj7YI2pHPtoiPCXxgjW1ft8g== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 25189 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250821110604 20250621110604 2536 gov. n6svyrR3H3gY3Fie3fgekD6gXenvEpExK1GXpXb0NxWZW3AHyD02jwlrZecgESKHXU9ydtsw6ibM Y9FOlT+89A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250821110604 20250621110604 2536 gov. n6svyrR3H3gY3Fie3fgekD6gXenvEpExK1GXpXb0NxWZW3AHyD02jwlrZecgESKHXU9ydtsw6ibM Y9FOlT+89A== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for bpa.gov/A
	Received 299 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 299 octets ;; HEADER SECTION ;; id = 13699 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bpa.gov. 10800 IN NS ns1.bpa.gov. bpa.gov. 10800 IN NS ns2.bpa.gov. bpa.gov. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) bpa.gov. 3600 IN DS ( 29440 8 2 afb48fdefd7829c8f5ab749b33d153f1407d6ea1f356e1c8d7fccfc4ae407db3 ) bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20250708003932 20250705223932 35496 gov. gkmzVmgpMYwLp6zACcdCA0jVJbC9kzdCcpUjxdXtB+7dR+HyHIZo1cgCyN5ovUTY9+Ut7F1hvJIX Anria8bnzQ== ) ;; ADDITIONAL SECTION (3 records) ns1.bpa.gov. 3600 IN A 170.160.36.10 ns2.bpa.gov. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for bpa.gov/DNSKEY
	Received 299 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 299 octets ;; HEADER SECTION ;; id = 48763 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bpa.gov. 10800 IN NS ns1.bpa.gov. bpa.gov. 10800 IN NS ns2.bpa.gov. bpa.gov. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) bpa.gov. 3600 IN DS ( 29440 8 2 afb48fdefd7829c8f5ab749b33d153f1407d6ea1f356e1c8d7fccfc4ae407db3 ) bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20250708003932 20250705223932 35496 gov. 5ldTx7se8mJsuAXlNgnURV7EkSCXtm5H7i5xGl9NlOz5yqh+HsUqEKNREpKprDnWqMRtYwYkWxjb SJDEzON5ew== ) ;; ADDITIONAL SECTION (3 records) ns1.bpa.gov. 3600 IN A 170.160.36.10 ns2.bpa.gov. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Found child zone bpa.gov

bpa.gov

	Checking DS between gov and bpa.gov
	Query to d.ns.gov for bpa.gov/DS
	Received 231 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 231 octets ;; HEADER SECTION ;; id = 34437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DS ;; ANSWER SECTION (3 records) bpa.gov. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) bpa.gov. 3600 IN DS ( 29440 8 2 afb48fdefd7829c8f5ab749b33d153f1407d6ea1f356e1c8d7fccfc4ae407db3 ) bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20250708003932 20250705223932 35496 gov. JVvTRhUU9oxOEB9onCjUFQ2o5ttPkg24+zEaUxrUCCZ+xKYPZPycPHD8vp7Ewn25xeNHgriknBjK XONTArqzAw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for bpa.gov in the gov zone
	DS=14926/SHA-256 has algorithm RSASHA256
	DS=29440/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20250708003932 20250705223932 35496 gov. JVvTRhUU9oxOEB9onCjUFQ2o5ttPkg24+zEaUxrUCCZ+xKYPZPycPHD8vp7Ewn25xeNHgriknBjK XONTArqzAw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=14926/SHA-256 is now in the chain-of-trust
	DS=29440/SHA-256 is now in the chain-of-trust
	`bpa.gov. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 )`
	`bpa.gov. 3600 IN DS ( 29440 8 2 afb48fdefd7829c8f5ab749b33d153f1407d6ea1f356e1c8d7fccfc4ae407db3 )`
	Query to ns2.bpa.gov for bpa.gov/DNSKEY
	Received 2320 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2320 octets ;; HEADER SECTION ;; id = 52607 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DNSKEY ;; ANSWER SECTION (8 records) bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAb5ePz/0eR+f5vr5xbmM8tQEr64favsURzo3kA7DWerppoDCUeXRe6ivPkAOY9bk01wQhfUs qwjtw79HcCpsfaekD1VJUm337edVdkBeZs/ikujeB3K6834OW/PWKgzL35bPnlixZ/0Jp5zCTk2A VggSuZzxM4T67UGSqg+oQkDcPBY5gf1oLakvxl4H0IhCuEppXVbcV6J6o4PvR04Rt0wU5UUjzJ+P cXBuqcwZIXa4FQDJrVEYj68VF877u2UwYQ5FT+v7jErKQkTPvLpglqAkHiuuVrRSKVjOY8T7AjTJ IgBaixQZ6KPZqr78XUOQ0zl0pke6cmlCEzDE1ufaOgM= ) ; keytag 14926 bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcCanpnvYUKS/IhoBzBfXZNDe+ANzXzUmf6F+loKXbPoQwxck1jk2TZ6Gn5/GTFb2yhZcK8+ q54CcdeaZ1Ol1dImO0wao8jwJVyfTBuUM6eQoEbhfYrQPlJgJJf6RJcQn23zTi6XPZdU4VU3lP1b EWbm5Muem94tNWG4etSZn4c/vQN+1JYFLYWhiBHM/vW2hBQxRzqzlFdyu7dtnJ29iHx1IxXK9YMl Vyb+kuGMkJ6xrVhMtoR/XQITebPO1ejtqycoPwWrqVcY7ncuWisKi1LuUvzpVPcMGzqfkYrn/mfZ b0AieLW62hfQ2TYVC/FtFDDNTuoWD1D6JHOx1joLJcE= ) ; keytag 29440 bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAbvCV/cW4/mzjx8fKEETd9SXeSrabiB559TKvgMiMN3IIWak3Rq9ms/Q6hdJVaVIZe+gGdDv oEgDdMGbNoGlwpr9u4JVtY1jN0Pmp/2XgWTHx2gamrQSEWMjlHTD6WWyVNMpTKpjS4fJsNrJf2zv j3Yl3RYF1S0gyZkgH4rK58ZzkKgLHzxJPSDhqapY2GOtTtsOFvVojH+oxBbEJoNGlloDAt04SktU i+vbOztvrpgR6M4r1Mf9VoMNosAge9ywRrLbq5Rk9CYuQltHJsPVf+Y7mPDE9E9lgQmNAZSTV3yC PUNeT/mAU/9SKLQbe3ftVUtGY57lxE7qKBKlHJcw5QE= ) ; keytag 7206 bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAax2+mpwfpt3euyuQDVCTKd0SQcXvVV2lHA43xdbF1iXEUDyBeOjXzuJ0W2gIm83mWd7GW/w 8TULZJxDxbnKlpnRetAx7IC83e05y5ETT736sGz7bWqIL9v0rhGyXWnUnynRsQCUPqogFJxjUeJR lOpVRanj9gwDJ3H2RyGKJKfHY+7yYG11iA4UtK3v63JmL3ok8Dh9UDmyuP97b77EPB8NFragaY9P 69sGujT/9WYcKo3O7wCNhB9pWwShvtb9ZU20eTPC09IOG9EXE86b9BKfOgUqQwJeTfgzr1+L77ah XhekNXLPV3ulMAaOc4AnHCs7Vs7P4J9Fv+UhXsnXpGk= ) ; keytag 13474 bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250710022328 20250703012328 14926 bpa.gov. Qc/eLjgl1SCTN0VxxiOypfO4h4gNOYOQ5AKd1UHc9ELfNPz/3wJWptCVn/EJS0UmWx0df0OJEQJu WtuoxgDuMYelI+Xm3DBijKwvp4JGYJtFotvHMX8852EOjFLD+K4xqYcaVamn/IMcW2AY5/HTxZ5b 6NVcjLOgS703hcVBMMWPq3h6gjokF1bbQ/jrDGbGDXV8wo5YczCXy+1WjvO6XinOxl9hwBUbjUjk ffetVAuvWE+BfbbF5NCpj1N9+Hf1T4Dvmeaa9F7/j3zEFrHlutanRWUocL4BHqjvHNo1E3EsXQ74 7OKWQRmYPqeC6NlCYUu3awCtb1nj95d59FdqsA== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250710022328 20250703012328 29440 bpa.gov. rdepJj1dxXxaaB1MbW4ehPPQHdP0+fFMt2qCJAG1nz0UU096a7LRgTX+QLKwuh7BJIXfx1AscCKn W69rQqiX4BgUM+FfLKZgHqQAIT6cMXcr/tMS+qM8epJLUKUzqxgi/gZkyEypwKpmrtaglcUVMVXp pv9flbXjkjsC/bzpz72f3SdWcFHyRBXWIUx+smqRiS4zwX4kAPUC+8XwDR9SGiEhlCeAtdUA/OG9 TdvVY3XZhtZhf+iBv/54JjYEQ5x1rYeMe/SEgTD5EAEbw5Zc9V6qUYh1oSgygjehThp1SGYcL2Pm f2yzsip98J/awla4v2riTZFPyl5Q16ZXjkEfyw== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250710022328 20250703012328 7206 bpa.gov. OgAiaqxKwhrtqACXwMUp9DUXEY+jfwxzlYqUm6QmKycyyCOPHTU3BjjujM3xEpibCAbQ9y1b2ozn 5f2Tj6r4EUeN0wDxrhAf0rqP9UvEP4ycv13IhNOvuJyvcobgkuyrKzSxpgyQZlNAu6DKt1RPxD1I vIiTkNXWv6q4RXsk32UTeZlSk6RC7RpCvAkcL/KmX+ejuCfI6kZMp3mJnVA9GKm3O66XHFcOFO5p AU8EM+1tG+7m4t99KVYm8PmzVaBUXEGJv3vChBn+1Uu+nFxSO5MuGZfJ7SHaanTG+7X3AqxDwOnS dQ4PJfWftWioL8n1M8EaqB2m/D2lgoMlFpLE3g== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250710022328 20250703012328 13474 bpa.gov. h7xZM/02uWlwJdjr+kyoi/E7WWupYFE5rv8HbfjBDbB0rl1ZAgLSKq5tPZ9oD8rg3S+EIJ75EbjO WvKZvAB15kB6hWMbAMaiKL1TMww+aQ7phehj/ijPYGYtoPB+UzjtdW5+g4F8GoctpFhB+SE7XXKR EZHqrC57BMyqle77Gqg/gtD4X9E/lVRJpvkqwq1oGYJwWvIkbPR5LxRTzbuu7vO/FDFv2AqeshjP L3xnahxG75m8G6Ic4UeQ0jksPfIkWl6ZHdK28LvncZ9dPNb7SrClHTYmOtuQhoNUL0fcltHxM8QM JHMPC6dipO1L4E/cvvJH9/hIBwxMuzr6Q6VTKA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for bpa.gov
	`bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAb5ePz/0eR+f5vr5xbmM8tQEr64favsURzo3kA7DWerppoDCUeXRe6ivPkAOY9bk01wQhfUs qwjtw79HcCpsfaekD1VJUm337edVdkBeZs/ikujeB3K6834OW/PWKgzL35bPnlixZ/0Jp5zCTk2A VggSuZzxM4T67UGSqg+oQkDcPBY5gf1oLakvxl4H0IhCuEppXVbcV6J6o4PvR04Rt0wU5UUjzJ+P cXBuqcwZIXa4FQDJrVEYj68VF877u2UwYQ5FT+v7jErKQkTPvLpglqAkHiuuVrRSKVjOY8T7AjTJ IgBaixQZ6KPZqr78XUOQ0zl0pke6cmlCEzDE1ufaOgM= ) ; keytag 14926`
	`bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcCanpnvYUKS/IhoBzBfXZNDe+ANzXzUmf6F+loKXbPoQwxck1jk2TZ6Gn5/GTFb2yhZcK8+ q54CcdeaZ1Ol1dImO0wao8jwJVyfTBuUM6eQoEbhfYrQPlJgJJf6RJcQn23zTi6XPZdU4VU3lP1b EWbm5Muem94tNWG4etSZn4c/vQN+1JYFLYWhiBHM/vW2hBQxRzqzlFdyu7dtnJ29iHx1IxXK9YMl Vyb+kuGMkJ6xrVhMtoR/XQITebPO1ejtqycoPwWrqVcY7ncuWisKi1LuUvzpVPcMGzqfkYrn/mfZ b0AieLW62hfQ2TYVC/FtFDDNTuoWD1D6JHOx1joLJcE= ) ; keytag 29440`
	`bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAbvCV/cW4/mzjx8fKEETd9SXeSrabiB559TKvgMiMN3IIWak3Rq9ms/Q6hdJVaVIZe+gGdDv oEgDdMGbNoGlwpr9u4JVtY1jN0Pmp/2XgWTHx2gamrQSEWMjlHTD6WWyVNMpTKpjS4fJsNrJf2zv j3Yl3RYF1S0gyZkgH4rK58ZzkKgLHzxJPSDhqapY2GOtTtsOFvVojH+oxBbEJoNGlloDAt04SktU i+vbOztvrpgR6M4r1Mf9VoMNosAge9ywRrLbq5Rk9CYuQltHJsPVf+Y7mPDE9E9lgQmNAZSTV3yC PUNeT/mAU/9SKLQbe3ftVUtGY57lxE7qKBKlHJcw5QE= ) ; keytag 7206`
	`bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAax2+mpwfpt3euyuQDVCTKd0SQcXvVV2lHA43xdbF1iXEUDyBeOjXzuJ0W2gIm83mWd7GW/w 8TULZJxDxbnKlpnRetAx7IC83e05y5ETT736sGz7bWqIL9v0rhGyXWnUnynRsQCUPqogFJxjUeJR lOpVRanj9gwDJ3H2RyGKJKfHY+7yYG11iA4UtK3v63JmL3ok8Dh9UDmyuP97b77EPB8NFragaY9P 69sGujT/9WYcKo3O7wCNhB9pWwShvtb9ZU20eTPC09IOG9EXE86b9BKfOgUqQwJeTfgzr1+L77ah XhekNXLPV3ulMAaOc4AnHCs7Vs7P4J9Fv+UhXsnXpGk= ) ; keytag 13474`
	DNSKEY=14926/SEP is now in the chain-of-trust
	DS=14926/SHA-256 verifies DNSKEY=14926/SEP
	DNSKEY=29440/SEP is now in the chain-of-trust
	DS=29440/SHA-256 verifies DNSKEY=29440/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250710022328 20250703012328 14926 bpa.gov. Qc/eLjgl1SCTN0VxxiOypfO4h4gNOYOQ5AKd1UHc9ELfNPz/3wJWptCVn/EJS0UmWx0df0OJEQJu WtuoxgDuMYelI+Xm3DBijKwvp4JGYJtFotvHMX8852EOjFLD+K4xqYcaVamn/IMcW2AY5/HTxZ5b 6NVcjLOgS703hcVBMMWPq3h6gjokF1bbQ/jrDGbGDXV8wo5YczCXy+1WjvO6XinOxl9hwBUbjUjk ffetVAuvWE+BfbbF5NCpj1N9+Hf1T4Dvmeaa9F7/j3zEFrHlutanRWUocL4BHqjvHNo1E3EsXQ74 7OKWQRmYPqeC6NlCYUu3awCtb1nj95d59FdqsA== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250710022328 20250703012328 29440 bpa.gov. rdepJj1dxXxaaB1MbW4ehPPQHdP0+fFMt2qCJAG1nz0UU096a7LRgTX+QLKwuh7BJIXfx1AscCKn W69rQqiX4BgUM+FfLKZgHqQAIT6cMXcr/tMS+qM8epJLUKUzqxgi/gZkyEypwKpmrtaglcUVMVXp pv9flbXjkjsC/bzpz72f3SdWcFHyRBXWIUx+smqRiS4zwX4kAPUC+8XwDR9SGiEhlCeAtdUA/OG9 TdvVY3XZhtZhf+iBv/54JjYEQ5x1rYeMe/SEgTD5EAEbw5Zc9V6qUYh1oSgygjehThp1SGYcL2Pm f2yzsip98J/awla4v2riTZFPyl5Q16ZXjkEfyw== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250710022328 20250703012328 7206 bpa.gov. OgAiaqxKwhrtqACXwMUp9DUXEY+jfwxzlYqUm6QmKycyyCOPHTU3BjjujM3xEpibCAbQ9y1b2ozn 5f2Tj6r4EUeN0wDxrhAf0rqP9UvEP4ycv13IhNOvuJyvcobgkuyrKzSxpgyQZlNAu6DKt1RPxD1I vIiTkNXWv6q4RXsk32UTeZlSk6RC7RpCvAkcL/KmX+ejuCfI6kZMp3mJnVA9GKm3O66XHFcOFO5p AU8EM+1tG+7m4t99KVYm8PmzVaBUXEGJv3vChBn+1Uu+nFxSO5MuGZfJ7SHaanTG+7X3AqxDwOnS dQ4PJfWftWioL8n1M8EaqB2m/D2lgoMlFpLE3g== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20250710022328 20250703012328 13474 bpa.gov. h7xZM/02uWlwJdjr+kyoi/E7WWupYFE5rv8HbfjBDbB0rl1ZAgLSKq5tPZ9oD8rg3S+EIJ75EbjO WvKZvAB15kB6hWMbAMaiKL1TMww+aQ7phehj/ijPYGYtoPB+UzjtdW5+g4F8GoctpFhB+SE7XXKR EZHqrC57BMyqle77Gqg/gtD4X9E/lVRJpvkqwq1oGYJwWvIkbPR5LxRTzbuu7vO/FDFv2AqeshjP L3xnahxG75m8G6Ic4UeQ0jksPfIkWl6ZHdK28LvncZ9dPNb7SrClHTYmOtuQhoNUL0fcltHxM8QM JHMPC6dipO1L4E/cvvJH9/hIBwxMuzr6Q6VTKA== )`
	RRSIG=14926 and DNSKEY=14926/SEP verifies the DNSKEY RRset
	RRSIG=29440 and DNSKEY=29440/SEP verifies the DNSKEY RRset
	RRSIG=7206 and DNSKEY=7206 verifies the DNSKEY RRset
	RRSIG=13474 and DNSKEY=13474 verifies the DNSKEY RRset
	DNSKEY=7206 is now in the chain-of-trust
	DNSKEY=13474 is now in the chain-of-trust
	Query to ns2.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 56323 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20250713182452 20250706172452 7206 bpa.gov. m6TkeMGwNY6up4BYA//cgsK2VtJQg3g5e/dAOC/QnuGFAPh7U0UpjJTR5//9Nw5UchqhEgVQPcSk 3zN5GUGrvy8Pey4WDG+HINtcOwBNouin5vgVdyZNcmSrgaM2fXBq/G5stTLHmW1Ey0UE0HPjUecU 3TS397OOj0x95l1T8vvS6A4OX3bAA+VBEOj5WQmWFOhJtT1DGCUScSeNTU+ga2rx098tsP/LrmwF nzDBOb/ALTJTmcuZ/vZZOxmx7InkK9rwVliLfk20yLaan24lCm/tnwd3x8QkzVBmd5SkRi+6+yLT GcLsXDLCVkF11iB1zlYRyVgyaSzOj1iFBwkOfw== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20250710022342 20250703012342 13474 bpa.gov. H0Uwm+A5uzEb7Y2QUcHWkSs7d5ROxKk9lggz/wlidecroc3tolnk6A3JKhdXVX9SDcZGbBTmzGik E+NWvELkP6ByhNomfnWxvQLLWZ9sHK1qYkjaIx81seUjC7J8/iwUi/3dd1G9jmtdumpNGMMZ5V4y FdBoWNVfkoIdB6dCIpn5ocum8PAmYTj9Zm49fmvIZpxNJAfxTPEXEGCvV7ayR6cB50xcz5W3o2q8 FMYJlCs/vtF6xG12PTf9I3nC+QPiqFr+IohcmWEQX7Ij2Y83zT09Q3Sei84JCosZ3hPmLRk/3Z6s zUyd7LU4jVkyFp9G79t6BiHwHH6h46KYni0fbg== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20250713182331 20250706172331 7206 bpa.gov. QDIx8G5wFSuO3iHiTbKT5ejgiYBHQP2LTKOJy0YtrxIjrtvi6iZIfz4U1KNiMOVreyBJ/Iic5F8l uPosqaAWufNnKFs30e/R6HBhT+sc/KL7yZrxO21DJZpLVJU6c/j1PKjv3/ZV3w9eicXUUUz+AnYP o5G9gMlt8z1zNasdQOPacrMm79f1dE4qJ4JHj2KiloWqj+yDVqUXJdbNz09eteP4SoSBdzaJh684 WXoXXloTypd71n07d9uZbd4i2LiGeMpoKPbLTe4UsUJAv6pS8IDlJzp8AvUmrEfOrIwvJSlOdzoI MrFz1g1hi5sswOX9QZDQEpRpZYj22OJTBAYalQ== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20250710022326 20250703012326 13474 bpa.gov. Wd54udcHo+6mf+yzZzDy/4fsmmMm3CU6w9pJHz1AwVvmx0XE1P+IaszeEVbzSZg9tdIJ4uYJECCB 82xgbxgx4G/wgT6OQ/XJK7t5jkE19UfPe4kMvx/ug1cMSVSZKaM9AMcsJlC15fliztaG9TKnj0Wm 5djpIx80EzH2p/E+yq8NXEocPO3ZbvvDu+A8DHS9rCGMgFSGRbSprqdNztmQkDXaQUqWKPKjaBH4 4mhoAWeCWNpKriOG9eQ5TT+VL5sq1gGUJOi7FKQ92XyjOOxIQP1szMuZyblFsw5cpFqmPoFXefQ6 zswUlXzXujfLQprCFfs7Nk9NmSu5c0skr0EIIQ== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250713182331 20250706172331 7206 bpa.gov. APho90BIbglQdD8stPM0v3eMA2ipeM+4PZbX1h42fsKXY2szphA0lZB+LhYJ3qWKLvaAji26DlUO hKiu9j/JOT2Guj//yeNguEgi36R7pwuEzoxqXClIq7P9P4CuSvBJ+gwyS6aFgI0KsQkjO/TFXz2H acBRCOM51FEXOrx+NPzlzoWC9nsPaNwaLnwcHPCXxmdGzTCpXp7Teg2qrcJO0043Ae7NrDLugQju rVV35TKhx2OtBEoXzZojxeM5thg0Xmb5YCZYq5ykZbgLU9W2wWOcuGE9M5Hm4YrNFjwHl3oBQmBs w0ZQglmvdw+6cF4E5hRs8FUtwUKiOvXowM8JcA== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250710022326 20250703012326 13474 bpa.gov. ei+JuryxYTMWqz7Wy7kno19ahM8LADVjjmzhZcf1qqtykF9z9n/jYIZKub2+P93+X2oERuXV1Bsv 3hPpve6lj1tRhjZDL/LDDIFivT4UefC0WB/wYcliaI1OJxJwosoH8LUW+ewRwoWfTT00NYmwZf6Z s/h56MQ09kR7xzulZHq0yWqgVmd0iPmCGi6koIqyUEq1sFp292X+gyfH00UuwWzAX86LwiIYhX76 uq675LeBilrx0fuHJlRx716Y3r3yxYciWFyiREkqq6SvhmY8zVxBdUDMBYw+82Pmevt3WkM9pmPd g1LoxliJ/u4VFxCvQn3oiIxwZ9dgOxMx1VuoRg== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250713182331 20250706172331 7206 bpa.gov. ch7IGdGG9BXrE0Xx7VFX8kzxhYTqC9FS2ac+2yIcqVxLFAKXmrV/UgmUCuPjZ25yrW/bvVQob4Ls LRkGdhjJ/kokf+QYxEDuDQVgivpaO+d02MyeoptUe39orIv2PgyiTeH4XqkMSoAYN5yZ+MhAzwu4 vo6pi4aC61McRfG3BD9uuo6+3VYJWzIyTRT+5T7OyFF/hiwKAY7vPWCK8//QNblVkD8wDywZHibW NwaEPO9Z8JdPSa8815mWM2bX/mISvdjEYokCJoi6gdRhM0DMI7ueWGb1rMBmoCqgnn9dF/CYRskN SsHF/sEa3RzvzpEGemh+2580dod37QmVs86nRg== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250710022326 20250703012326 13474 bpa.gov. ZI7HUFDxlQqsAN7sN7r6bDl9HARtC7I+Bz4i4NtibEYtTp9s4ftjYv/4JY2tFsZh39IyQVhfJzpQ 02d9CSpp6dtJPWBE8xxqRryJUZsiD5Y/w3NMYbF/YDZ6NzwyXihcbg1sd4D7wilykXiQ5RaV3Ydw KosNwwUa2qLRy2F4QiJUPiyzTECdb6wfGKJVdwwzfx8sMAuAZ4aNH2Rjd7HNxeRng6Hm2IfpIChe aoODb7VLungnmlpqceHyQfcsga87qsgrXccrGer8sWZhL7tlUAVYxZJsf4IlOujpusigY84wCLH4 81mL+l5a84oszOV0Z3UWBZxqSoF4NGzSB7Vqaw== ) ;; { "EDNS-VERSION": 0 }
	ns2.bpa.gov is authoritative for bpa.gov
	Found RRSIG signed by bpa.gov zone
	Query to ns1.bpa.gov for bpa.gov/SOA
	Received 2511 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2511 octets ;; HEADER SECTION ;; id = 8987 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN SOA ;; ANSWER SECTION (3 records) bpa.gov. 43200 IN SOA ( ns1.bpa.gov. hostmaster.bpa.gov. 2025040801 ;serial 43200 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) bpa.gov. 43200 IN RRSIG ( SOA 8 2 43200 20250713213413 20250706203413 7206 bpa.gov. LVzxRcxxCq902P57+Y3wN3dtnnuyUuuo3OyV9/I4Jq/buKiiKq2TleOk64wWQGgkBigMmYBJMcX0 iXLTuAojwaHAuGqIe0SWZSQB5Upoh/+/Dzf1YM8QaLCsMzMUQOWcVQYuuNZIRJvIDlezsFHPl25I bbZqohqzJ46w1+NyeTIiTGWqa5CxZwG0w8oj5dwDiNGKRc2zFz56Q4yo225RaJMWNGbu8pNzR1Wv KUpd4wlBKr4fHjEs7jt/9hnChEg0rnlZidowIzEYwEZnpBBUSw/o5xt+LllbfGSnziVNiPJo9tWi 0T7brUN44cCD61EYec8c7m64Z+9EWiQMZpgBdA== ) bpa.gov. 43200 IN RRSIG ( SOA 8 2 43200 20250710042120 20250703032120 13474 bpa.gov. cB/3me4q1f/KHinltgi218jhqYdYNUc9VFLij699oJITyAPoz/GHTBP2H0H3XaYt79kWOUZdDfbr 23P+qt5kkFkLrD+3PTgMQDDgNIZWAFeKsVjFW5wzYsLSF2jrnx1NEDJrIfSel7/bIBze6jjxixA9 DHVRF2znoXFqeN2YilhD4sKmhrvXyOXiqzKrqXrXIgkVM5SJGHeRTgxcYlUZ5FHyQDwf5e1t8uQh KoUiMWQ4OtOytAlGJeAgcmvE6cCkHd9sOHcjSEm+QMfek6CotRP7E+0vMBB79Xv2FqjCuqeBa30P FpP76rGUfMP5OF5Rgr+moDHpuY6QCXhe08yVsA== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20250713182334 20250706172334 7206 bpa.gov. KnoK8j1/qv3UpuWArVq2NtvuGkQc6tz46FbUIBadr7RQWP17L0gp8oFLpLNof904O/VTj7KUqLmc 367gQ/kbTh1SAEOldi0uDOGVrOHHh1ejdB/AbFMpJH9PzTkWHMirR26mq36PAukrh5fu1Hur47ll F254V08gKyj9xpdvd9d0wDj4r7k2dX4FtMR4HLZvnXlZC/0Ac5maWxb2X2FPIY/9jwfFW71Vp0/G HdtCQ6dY6GvN0/EqripL1sNcQ0CkcQLr5BO704D5b9TvnDeXRGy0kGCpHknmse8cTbj0sZCWRp70 JchwGZQpuoC88zuscoVrHOGMSmpPS5zADYFQRA== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20250710022325 20250703012325 13474 bpa.gov. W/T/CbUDgPHnS8icQjI+Z7WknjJZSAVEe0/LYDHaVoXta15P9sZd2JxxAz57jo2O6/MuN+G6L7P2 NPmB4OaKJGXNPp9tWY0AQDCdseBkTO2/5h6qn35WtOUdaNFvclkKLomR8p8bdY0fF+kFTR0TEfM8 h0Ii7z2/Ffk/VJ3eemv/iBOv7FqkWFvd+hyvklWXgaVZXiMiRj+lAdY580JrbkHdD69NCj7Kscfz TyehnbbNpKQDkg1TMRgpnbBsYzRaL6KPNSMXPzbF65lr6YqQbkCSgyeMft0YpyKaI9a75xjx6ayR mH0cPFPkAjcA0EQhIIxKo0cvE7PlEJDOocWyuA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250713182334 20250706172334 7206 bpa.gov. MciRRD1Lm8OSKoKvCTwRC4bGkjq5fWOBsjbHwW7ozqVPdCAI1tBbBSyWvvtqSw/BSnYThaEc8J8N fqPzH4uJSEmywCpAnEn5Ka78W6xG+mH9HoWCecA1JQobvc9WmIOMi8xrFUj6hQi+eX+s2jeUOHGL K2XvyGWiUcN9NEL8R7U5Q9YsHBGcRhNaK3c15cO1Oz/cN/ugKBCUqf3wzyOiQF3vR/cnB+b5bXDb XP0LOeBwHKi6XVHVWdnsrC0k4bnBuHTVS+gzDQVPD8PR3bK7X6A6UXyu3VkpYf/2MpPbkVLyexV3 OM8eQRebN95t42A00Vjwd8Mroxi+5vYea/9RfQ== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250710022325 20250703012325 13474 bpa.gov. E4BVkhtS+IN2ENgst3peSL7q9gaiDN3d27EaLyQcYPjz/ka3IuhKUWTx5OqeqRdnGf3C2ki1bwUe z/wV7gFrOkHoAjxmqXAQmISR6doFW5vrRe0V8mRODS43qHYf0BdUj+A9bEAju79119Hv+YaHTlf3 wXcHLbZwTqAKgIq9t1+MbqFyvSvYXHbvT2MmQ0wUmWAEoBCa2qZTOgt+TTZ5HE4S3Fq03Cf5PwqB Hnvm8+xYpcU/mcXAOFt/Mc8G4yzR7eeBAjjUopE9gV/lnfMaq9SFN/ZsOVS4idVrZadMjoTGG55C ZiDT55vvXdRLrKnrgxEZNs0j2Sj37Hc0ohWvcA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250713182334 20250706172334 7206 bpa.gov. jrX3oUFMUJvxMMp4Bd16t3PCMgiaDYmAs4gvf/izFpAHjSx1SRlMdlMPkqBJ/TcckJr8iMknsaGQ m4RiNr+3t5bOlXfO4+QuEPF7q0YER2uLieeHxt+DofUy7hwrv28fSEr7G+imaqab6b1d2AA4azBk BEX8/QWCVhcvNwnCtB97GgjF0GMykhMAByIGnQmFBK5ovU99sFw8TjmpSw68fsraDFmxt6eDDPFv +fgJ4cJjlM466WZu7q/cgnI6X8qbBCGFsFpj8+zcF6eOdbwWfiUZNVT1Mo4y7f+UUc5k3gNuRh67 D1IYOuFkRdLRj9h5XnkhgcKCYNHZj3mHfdmB7A== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250710022325 20250703012325 13474 bpa.gov. DdsCq4X0TSbFX3R8hQam5pSrw0fAtvWAlW9n0dTm7rpxahIRkob3dkZlrM+/gVs5fX+XR4oLIsw6 7a0xHzVEk8V0HYux8hk6Amtw+mw2Nop5ylQbe26mLevhTHDmps14UYO8+NQazm5E+I9/yrCzWuh7 W+oJLZORFRz3wBaLCqiwIplep7YTk5GzoEg1cOs8icCzmhqK4niBTKBXPUqmpLOpaUtly3iTwoZj iz2B9sf0UpD3VuG8WVEsDI0MVk314BtTuyc+RFI4SDgioTNNO7wROrqED/ajApWQshtnfx45oIFU ekK8BVSVi3ATWbrUDMrU4qECHMHVf9k3Bs9rwg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 41763 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20250713182452 20250706172452 7206 bpa.gov. m6TkeMGwNY6up4BYA//cgsK2VtJQg3g5e/dAOC/QnuGFAPh7U0UpjJTR5//9Nw5UchqhEgVQPcSk 3zN5GUGrvy8Pey4WDG+HINtcOwBNouin5vgVdyZNcmSrgaM2fXBq/G5stTLHmW1Ey0UE0HPjUecU 3TS397OOj0x95l1T8vvS6A4OX3bAA+VBEOj5WQmWFOhJtT1DGCUScSeNTU+ga2rx098tsP/LrmwF nzDBOb/ALTJTmcuZ/vZZOxmx7InkK9rwVliLfk20yLaan24lCm/tnwd3x8QkzVBmd5SkRi+6+yLT GcLsXDLCVkF11iB1zlYRyVgyaSzOj1iFBwkOfw== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20250710022342 20250703012342 13474 bpa.gov. H0Uwm+A5uzEb7Y2QUcHWkSs7d5ROxKk9lggz/wlidecroc3tolnk6A3JKhdXVX9SDcZGbBTmzGik E+NWvELkP6ByhNomfnWxvQLLWZ9sHK1qYkjaIx81seUjC7J8/iwUi/3dd1G9jmtdumpNGMMZ5V4y FdBoWNVfkoIdB6dCIpn5ocum8PAmYTj9Zm49fmvIZpxNJAfxTPEXEGCvV7ayR6cB50xcz5W3o2q8 FMYJlCs/vtF6xG12PTf9I3nC+QPiqFr+IohcmWEQX7Ij2Y83zT09Q3Sei84JCosZ3hPmLRk/3Z6s zUyd7LU4jVkyFp9G79t6BiHwHH6h46KYni0fbg== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20250713182331 20250706172331 7206 bpa.gov. QDIx8G5wFSuO3iHiTbKT5ejgiYBHQP2LTKOJy0YtrxIjrtvi6iZIfz4U1KNiMOVreyBJ/Iic5F8l uPosqaAWufNnKFs30e/R6HBhT+sc/KL7yZrxO21DJZpLVJU6c/j1PKjv3/ZV3w9eicXUUUz+AnYP o5G9gMlt8z1zNasdQOPacrMm79f1dE4qJ4JHj2KiloWqj+yDVqUXJdbNz09eteP4SoSBdzaJh684 WXoXXloTypd71n07d9uZbd4i2LiGeMpoKPbLTe4UsUJAv6pS8IDlJzp8AvUmrEfOrIwvJSlOdzoI MrFz1g1hi5sswOX9QZDQEpRpZYj22OJTBAYalQ== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20250710022326 20250703012326 13474 bpa.gov. Wd54udcHo+6mf+yzZzDy/4fsmmMm3CU6w9pJHz1AwVvmx0XE1P+IaszeEVbzSZg9tdIJ4uYJECCB 82xgbxgx4G/wgT6OQ/XJK7t5jkE19UfPe4kMvx/ug1cMSVSZKaM9AMcsJlC15fliztaG9TKnj0Wm 5djpIx80EzH2p/E+yq8NXEocPO3ZbvvDu+A8DHS9rCGMgFSGRbSprqdNztmQkDXaQUqWKPKjaBH4 4mhoAWeCWNpKriOG9eQ5TT+VL5sq1gGUJOi7FKQ92XyjOOxIQP1szMuZyblFsw5cpFqmPoFXefQ6 zswUlXzXujfLQprCFfs7Nk9NmSu5c0skr0EIIQ== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250713182331 20250706172331 7206 bpa.gov. APho90BIbglQdD8stPM0v3eMA2ipeM+4PZbX1h42fsKXY2szphA0lZB+LhYJ3qWKLvaAji26DlUO hKiu9j/JOT2Guj//yeNguEgi36R7pwuEzoxqXClIq7P9P4CuSvBJ+gwyS6aFgI0KsQkjO/TFXz2H acBRCOM51FEXOrx+NPzlzoWC9nsPaNwaLnwcHPCXxmdGzTCpXp7Teg2qrcJO0043Ae7NrDLugQju rVV35TKhx2OtBEoXzZojxeM5thg0Xmb5YCZYq5ykZbgLU9W2wWOcuGE9M5Hm4YrNFjwHl3oBQmBs w0ZQglmvdw+6cF4E5hRs8FUtwUKiOvXowM8JcA== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250710022326 20250703012326 13474 bpa.gov. ei+JuryxYTMWqz7Wy7kno19ahM8LADVjjmzhZcf1qqtykF9z9n/jYIZKub2+P93+X2oERuXV1Bsv 3hPpve6lj1tRhjZDL/LDDIFivT4UefC0WB/wYcliaI1OJxJwosoH8LUW+ewRwoWfTT00NYmwZf6Z s/h56MQ09kR7xzulZHq0yWqgVmd0iPmCGi6koIqyUEq1sFp292X+gyfH00UuwWzAX86LwiIYhX76 uq675LeBilrx0fuHJlRx716Y3r3yxYciWFyiREkqq6SvhmY8zVxBdUDMBYw+82Pmevt3WkM9pmPd g1LoxliJ/u4VFxCvQn3oiIxwZ9dgOxMx1VuoRg== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250713182331 20250706172331 7206 bpa.gov. ch7IGdGG9BXrE0Xx7VFX8kzxhYTqC9FS2ac+2yIcqVxLFAKXmrV/UgmUCuPjZ25yrW/bvVQob4Ls LRkGdhjJ/kokf+QYxEDuDQVgivpaO+d02MyeoptUe39orIv2PgyiTeH4XqkMSoAYN5yZ+MhAzwu4 vo6pi4aC61McRfG3BD9uuo6+3VYJWzIyTRT+5T7OyFF/hiwKAY7vPWCK8//QNblVkD8wDywZHibW NwaEPO9Z8JdPSa8815mWM2bX/mISvdjEYokCJoi6gdRhM0DMI7ueWGb1rMBmoCqgnn9dF/CYRskN SsHF/sEa3RzvzpEGemh+2580dod37QmVs86nRg== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250710022326 20250703012326 13474 bpa.gov. ZI7HUFDxlQqsAN7sN7r6bDl9HARtC7I+Bz4i4NtibEYtTp9s4ftjYv/4JY2tFsZh39IyQVhfJzpQ 02d9CSpp6dtJPWBE8xxqRryJUZsiD5Y/w3NMYbF/YDZ6NzwyXihcbg1sd4D7wilykXiQ5RaV3Ydw KosNwwUa2qLRy2F4QiJUPiyzTECdb6wfGKJVdwwzfx8sMAuAZ4aNH2Rjd7HNxeRng6Hm2IfpIChe aoODb7VLungnmlpqceHyQfcsga87qsgrXccrGer8sWZhL7tlUAVYxZJsf4IlOujpusigY84wCLH4 81mL+l5a84oszOV0Z3UWBZxqSoF4NGzSB7Vqaw== ) ;; { "EDNS-VERSION": 0 }
	bpa.gov A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20250713182452 20250706172452 7206 bpa.gov. m6TkeMGwNY6up4BYA//cgsK2VtJQg3g5e/dAOC/QnuGFAPh7U0UpjJTR5//9Nw5UchqhEgVQPcSk 3zN5GUGrvy8Pey4WDG+HINtcOwBNouin5vgVdyZNcmSrgaM2fXBq/G5stTLHmW1Ey0UE0HPjUecU 3TS397OOj0x95l1T8vvS6A4OX3bAA+VBEOj5WQmWFOhJtT1DGCUScSeNTU+ga2rx098tsP/LrmwF nzDBOb/ALTJTmcuZ/vZZOxmx7InkK9rwVliLfk20yLaan24lCm/tnwd3x8QkzVBmd5SkRi+6+yLT GcLsXDLCVkF11iB1zlYRyVgyaSzOj1iFBwkOfw== )`
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20250710022342 20250703012342 13474 bpa.gov. H0Uwm+A5uzEb7Y2QUcHWkSs7d5ROxKk9lggz/wlidecroc3tolnk6A3JKhdXVX9SDcZGbBTmzGik E+NWvELkP6ByhNomfnWxvQLLWZ9sHK1qYkjaIx81seUjC7J8/iwUi/3dd1G9jmtdumpNGMMZ5V4y FdBoWNVfkoIdB6dCIpn5ocum8PAmYTj9Zm49fmvIZpxNJAfxTPEXEGCvV7ayR6cB50xcz5W3o2q8 FMYJlCs/vtF6xG12PTf9I3nC+QPiqFr+IohcmWEQX7Ij2Y83zT09Q3Sei84JCosZ3hPmLRk/3Z6s zUyd7LU4jVkyFp9G79t6BiHwHH6h46KYni0fbg== )`
	RRSIG=7206 and DNSKEY=7206 verifies the A RRset
	RRSIG=13474 and DNSKEY=13474 verifies the A RRset

bpa.gov

	Query to ns1.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 23076 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20250713182531 20250706172531 7206 bpa.gov. lTa6PlueSjAJsHSbJQa6N8OQV+pfYWTFqg73pNBvRkGGHxcM6NAvdLYtdkX97Z+xeiA9DCRP6o/C Nh7Shjim+xcXHg6TfT/akgT+SUjVB8XtyYovhyE7u3IE1JbE5SkJ2qDqCsRbHnXWH/JW3d+CA5xF XMMFmrV6KAkuggYXV8us85dohi9E6lVcwRoCWf6hjrntRfT9rLybi8unGI8twCb8UjgR0R3ZmlxV T+t3vUYHD2njYFss6K3/+L1jZaAym855molLIYJTab9qKhHhFjsEfTEh4R1zJLTfVTKtFiv5628j ZfIIL4Tovd3QguEXAw5wlMZmxrDhxcJoRTuQFA== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20250710022332 20250703012332 13474 bpa.gov. DriXP+A0TM60M7r+lVj03grNqKvJH17tlDXsuT2LhtYvMPzYD+E4X7ayYeqd0VyVRzZXdvKz+cfe GsnkApPr2U569VktG4tUnybCi/CYlNyEpidMWSZEheK8wWXJ7+PtMjgJvuDjtn6nvjDOHkAB+GwT vGrV6IzBh3cQunmw3tBuOLlTBN3PjWwyObmhG/+A08mXjS8fUIDCr6JGBRE5j9wjiG3wp9m8zHQK rFYWtoS7vvB3rA6D2WdoEjtovJYcA+2gcOPUcIrteJdCs93WC/giePsGBGnvRNC4Jzu1GCIx2rLw KHMGZXlsx28ICR4AvmUHmZnYY+VJlZ57FRMywg== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20250713182334 20250706172334 7206 bpa.gov. KnoK8j1/qv3UpuWArVq2NtvuGkQc6tz46FbUIBadr7RQWP17L0gp8oFLpLNof904O/VTj7KUqLmc 367gQ/kbTh1SAEOldi0uDOGVrOHHh1ejdB/AbFMpJH9PzTkWHMirR26mq36PAukrh5fu1Hur47ll F254V08gKyj9xpdvd9d0wDj4r7k2dX4FtMR4HLZvnXlZC/0Ac5maWxb2X2FPIY/9jwfFW71Vp0/G HdtCQ6dY6GvN0/EqripL1sNcQ0CkcQLr5BO704D5b9TvnDeXRGy0kGCpHknmse8cTbj0sZCWRp70 JchwGZQpuoC88zuscoVrHOGMSmpPS5zADYFQRA== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20250710022325 20250703012325 13474 bpa.gov. W/T/CbUDgPHnS8icQjI+Z7WknjJZSAVEe0/LYDHaVoXta15P9sZd2JxxAz57jo2O6/MuN+G6L7P2 NPmB4OaKJGXNPp9tWY0AQDCdseBkTO2/5h6qn35WtOUdaNFvclkKLomR8p8bdY0fF+kFTR0TEfM8 h0Ii7z2/Ffk/VJ3eemv/iBOv7FqkWFvd+hyvklWXgaVZXiMiRj+lAdY580JrbkHdD69NCj7Kscfz TyehnbbNpKQDkg1TMRgpnbBsYzRaL6KPNSMXPzbF65lr6YqQbkCSgyeMft0YpyKaI9a75xjx6ayR mH0cPFPkAjcA0EQhIIxKo0cvE7PlEJDOocWyuA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250713182334 20250706172334 7206 bpa.gov. MciRRD1Lm8OSKoKvCTwRC4bGkjq5fWOBsjbHwW7ozqVPdCAI1tBbBSyWvvtqSw/BSnYThaEc8J8N fqPzH4uJSEmywCpAnEn5Ka78W6xG+mH9HoWCecA1JQobvc9WmIOMi8xrFUj6hQi+eX+s2jeUOHGL K2XvyGWiUcN9NEL8R7U5Q9YsHBGcRhNaK3c15cO1Oz/cN/ugKBCUqf3wzyOiQF3vR/cnB+b5bXDb XP0LOeBwHKi6XVHVWdnsrC0k4bnBuHTVS+gzDQVPD8PR3bK7X6A6UXyu3VkpYf/2MpPbkVLyexV3 OM8eQRebN95t42A00Vjwd8Mroxi+5vYea/9RfQ== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250710022325 20250703012325 13474 bpa.gov. E4BVkhtS+IN2ENgst3peSL7q9gaiDN3d27EaLyQcYPjz/ka3IuhKUWTx5OqeqRdnGf3C2ki1bwUe z/wV7gFrOkHoAjxmqXAQmISR6doFW5vrRe0V8mRODS43qHYf0BdUj+A9bEAju79119Hv+YaHTlf3 wXcHLbZwTqAKgIq9t1+MbqFyvSvYXHbvT2MmQ0wUmWAEoBCa2qZTOgt+TTZ5HE4S3Fq03Cf5PwqB Hnvm8+xYpcU/mcXAOFt/Mc8G4yzR7eeBAjjUopE9gV/lnfMaq9SFN/ZsOVS4idVrZadMjoTGG55C ZiDT55vvXdRLrKnrgxEZNs0j2Sj37Hc0ohWvcA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250713182334 20250706172334 7206 bpa.gov. jrX3oUFMUJvxMMp4Bd16t3PCMgiaDYmAs4gvf/izFpAHjSx1SRlMdlMPkqBJ/TcckJr8iMknsaGQ m4RiNr+3t5bOlXfO4+QuEPF7q0YER2uLieeHxt+DofUy7hwrv28fSEr7G+imaqab6b1d2AA4azBk BEX8/QWCVhcvNwnCtB97GgjF0GMykhMAByIGnQmFBK5ovU99sFw8TjmpSw68fsraDFmxt6eDDPFv +fgJ4cJjlM466WZu7q/cgnI6X8qbBCGFsFpj8+zcF6eOdbwWfiUZNVT1Mo4y7f+UUc5k3gNuRh67 D1IYOuFkRdLRj9h5XnkhgcKCYNHZj3mHfdmB7A== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250710022325 20250703012325 13474 bpa.gov. DdsCq4X0TSbFX3R8hQam5pSrw0fAtvWAlW9n0dTm7rpxahIRkob3dkZlrM+/gVs5fX+XR4oLIsw6 7a0xHzVEk8V0HYux8hk6Amtw+mw2Nop5ylQbe26mLevhTHDmps14UYO8+NQazm5E+I9/yrCzWuh7 W+oJLZORFRz3wBaLCqiwIplep7YTk5GzoEg1cOs8icCzmhqK4niBTKBXPUqmpLOpaUtly3iTwoZj iz2B9sf0UpD3VuG8WVEsDI0MVk314BtTuyc+RFI4SDgioTNNO7wROrqED/ajApWQshtnfx45oIFU ekK8BVSVi3ATWbrUDMrU4qECHMHVf9k3Bs9rwg== ) ;; { "EDNS-VERSION": 0 }
	ns1.bpa.gov is authoritative for bpa.gov
	Found RRSIG signed by bpa.gov zone
	Query to ns1.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 40054 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20250713182445 20250706172445 7206 bpa.gov. X5uiWqSOC13jjUY/RzfbKFjBB3wiuPoOtQUQJhQmLvRHYQjyDY3HOALF36+mUdK7hqdLdXjEI900 2OciGNVmsJHzzJSZoLrfp3S+khpymz+w6QtgdO8WqeW3bLM0GlJsR7JSRIwN+OFnMujlzXwZTi1l l4jxYqn/oTMmpbQry+1CLq1TwrkxImzGewbkjTsbOVjW+smdTOcIrGaAuDihQCUGX7UfMmzPofrM wKsEXBWtoaoj09NXyqZG44ZCfRTRCrwv4pQV8BWqHaUm/lRpOgD0NdDvdPU9XLytxT7Zr5ACT1bs 4VxTkrwkLfK8Aazym/WdbSnhdhiwMezaxho16A== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20250710022459 20250703012459 13474 bpa.gov. NQsEDmoTAE3JnY34xl8enX7w5aWTUR2B0NaqHQgd1GQFwG3T3jHugw5ckf80xrSGDW95ihWoqtDU WV+4JxrGIYwt1IojGQ5X+LUwSk83ZrLRWo4WHXjCBG2qyeT+GwqKY59D32mATQQFDpWYeZDEOUwo 1SzsKcoSXUJ/dAW3rx8c2bLuEbY58DX+atHTevNhYf9h/1FBCRgh4OF1LG6vFR1oBScdYZmWq57i uFa8j324LI1hJjjiwpWUDITSCo+PEy/W4RH8rGkToP/krelYUiUSwjnT5EOFHDlvjDUZ0wu4AYKw nAaQXgwegaSTyqIXWrzxLr+xr8UPq4P2kFrw1w== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20250713182333 20250706172333 7206 bpa.gov. jbHR1zzIAtz8591Au7O6neSHJTnEN3GYIx0tTHSbnEAFkzrRhOFjyN45dqQPMXtqchF6YwEYML7k 6c1YLEQa+qefGgpEJ7qdOz9N+WiWQAgHdIkx+R32qgsQr3C6fN475H7ea5mKTdpA+gVI5MXuoAhR cVkNlNmn8ODLwGFZGmIXKiG8zf6xnqeuK0/KPFS44Me7ReneQesejbHG06PrwfRHHdDNoOuDGAfS RrsnRdLmDfgCudBBud3neVZCy4q012/hdBU3og0hnkwhAfZWUQEud51ipqNruz8FV17jHKcZf1sF sUNZm/LBOjotxCG2J6hm+OiOK8hRAPfSEPcISQ== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20250710022326 20250703012326 13474 bpa.gov. Wd54udcHo+6mf+yzZzDy/4fsmmMm3CU6w9pJHz1AwVvmx0XE1P+IaszeEVbzSZg9tdIJ4uYJECCB 82xgbxgx4G/wgT6OQ/XJK7t5jkE19UfPe4kMvx/ug1cMSVSZKaM9AMcsJlC15fliztaG9TKnj0Wm 5djpIx80EzH2p/E+yq8NXEocPO3ZbvvDu+A8DHS9rCGMgFSGRbSprqdNztmQkDXaQUqWKPKjaBH4 4mhoAWeCWNpKriOG9eQ5TT+VL5sq1gGUJOi7FKQ92XyjOOxIQP1szMuZyblFsw5cpFqmPoFXefQ6 zswUlXzXujfLQprCFfs7Nk9NmSu5c0skr0EIIQ== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250713182333 20250706172333 7206 bpa.gov. c4UUKSuLUjjnpyo01Rxpg3kdGYUpu65wRmd4dn5cfZYl0nD0B7WlEVxqt1aBGgL45qRWp7fb799V q4OvLCrUn4FSkAgBbxDp9Y4fQyd/8QT3VhPOtYuaYd6hyG/88WsYV4KN/aK+F3Aq3M3k/C1Bc0j0 2UzrpBmIufymoCFMcBmx9pPeZwbo3YTGWl3zDwFpEUxhNFiuK3rcXG9PcHNYemDa8AdL2xuC0suf oJHeCbqDZyLAz8anJPON/FlyWb3m1r8YkF5HFhfQbRmMv/eeLIDiPeUZ6dJkplntIrW3ABw9WkxV 28tPkOsp9R6+kk+LNw+i51XJcu+jOJ7OWS4dfQ== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250710022326 20250703012326 13474 bpa.gov. ei+JuryxYTMWqz7Wy7kno19ahM8LADVjjmzhZcf1qqtykF9z9n/jYIZKub2+P93+X2oERuXV1Bsv 3hPpve6lj1tRhjZDL/LDDIFivT4UefC0WB/wYcliaI1OJxJwosoH8LUW+ewRwoWfTT00NYmwZf6Z s/h56MQ09kR7xzulZHq0yWqgVmd0iPmCGi6koIqyUEq1sFp292X+gyfH00UuwWzAX86LwiIYhX76 uq675LeBilrx0fuHJlRx716Y3r3yxYciWFyiREkqq6SvhmY8zVxBdUDMBYw+82Pmevt3WkM9pmPd g1LoxliJ/u4VFxCvQn3oiIxwZ9dgOxMx1VuoRg== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250713182333 20250706172333 7206 bpa.gov. WgR/3rIsMnnX2dGeZwTRCwLii1Zg+uiMdwqSaTPA5BQKApufiFabDcufyl98vcgGH8knWtq9IzPk yu/RollgqUlI9i4dA3MP2eTg6zK9Dmlp3ZKh9QxZM579DVIf4tjiKMsEU+tFSZ5oHZT4RSSxsw1z Yc+TsDeYgjgLtAho3u8ipQw6XzbC9K7QYVL2f475+SUA9Sleqph+CmFJBRzKKe43BYSqXFmixjgI OQqRym7+IRZTv1weiYYxvdgKyNmd7BdoBv2HkkTz9si32ZZu11lWMXa0jH48JUPWFBbbxe3oycV7 qrqk+4kkjlOwJc+T7IZXUc24TW8/izrtXMFWQg== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20250710022326 20250703012326 13474 bpa.gov. ZI7HUFDxlQqsAN7sN7r6bDl9HARtC7I+Bz4i4NtibEYtTp9s4ftjYv/4JY2tFsZh39IyQVhfJzpQ 02d9CSpp6dtJPWBE8xxqRryJUZsiD5Y/w3NMYbF/YDZ6NzwyXihcbg1sd4D7wilykXiQ5RaV3Ydw KosNwwUa2qLRy2F4QiJUPiyzTECdb6wfGKJVdwwzfx8sMAuAZ4aNH2Rjd7HNxeRng6Hm2IfpIChe aoODb7VLungnmlpqceHyQfcsga87qsgrXccrGer8sWZhL7tlUAVYxZJsf4IlOujpusigY84wCLH4 81mL+l5a84oszOV0Z3UWBZxqSoF4NGzSB7Vqaw== ) ;; { "EDNS-VERSION": 0 }
	bpa.gov A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20250713182445 20250706172445 7206 bpa.gov. X5uiWqSOC13jjUY/RzfbKFjBB3wiuPoOtQUQJhQmLvRHYQjyDY3HOALF36+mUdK7hqdLdXjEI900 2OciGNVmsJHzzJSZoLrfp3S+khpymz+w6QtgdO8WqeW3bLM0GlJsR7JSRIwN+OFnMujlzXwZTi1l l4jxYqn/oTMmpbQry+1CLq1TwrkxImzGewbkjTsbOVjW+smdTOcIrGaAuDihQCUGX7UfMmzPofrM wKsEXBWtoaoj09NXyqZG44ZCfRTRCrwv4pQV8BWqHaUm/lRpOgD0NdDvdPU9XLytxT7Zr5ACT1bs 4VxTkrwkLfK8Aazym/WdbSnhdhiwMezaxho16A== )`
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20250710022459 20250703012459 13474 bpa.gov. NQsEDmoTAE3JnY34xl8enX7w5aWTUR2B0NaqHQgd1GQFwG3T3jHugw5ckf80xrSGDW95ihWoqtDU WV+4JxrGIYwt1IojGQ5X+LUwSk83ZrLRWo4WHXjCBG2qyeT+GwqKY59D32mATQQFDpWYeZDEOUwo 1SzsKcoSXUJ/dAW3rx8c2bLuEbY58DX+atHTevNhYf9h/1FBCRgh4OF1LG6vFR1oBScdYZmWq57i uFa8j324LI1hJjjiwpWUDITSCo+PEy/W4RH8rGkToP/krelYUiUSwjnT5EOFHDlvjDUZ0wu4AYKw nAaQXgwegaSTyqIXWrzxLr+xr8UPq4P2kFrw1w== )`
	RRSIG=7206 and DNSKEY=7206 verifies the A RRset
	RRSIG=13474 and DNSKEY=13474 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bpa.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: