DNSSEC Debugger

Domain Name:

Time: 2025-10-17 06:22:23 UTC

Analyzing DNSSEC problems for bpa.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1139 octets ;; HEADER SECTION ;; id = 60088 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=61809 is now in the chain-of-trust
	Query to f.root-servers.net for bpa.gov/A
	Received 614 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 614 octets ;; HEADER SECTION ;; id = 58518 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251030050000 20251017040000 61809 . ftadstHyWbUE8E6a8FHx0sBGmciJtO16qbKRWGiMowd1U20uCTgF/rMfNIzuOcye3w0WUO6NniEU scDH5xGpzRO3DflrzqNkD+BvhF3D8wAfZ4avM72PWThPhcGmXKougiGnzXlrvrZffX/4wwtXEEWO 3tAsErCLS0tCxGJVoyjW8ZnJiCSSmtV9i3bkGfToiPTvG5Wd1As9MFOJjAYce+mJ1AZbTKrZAFqN KLtEqJVgMRYEbZpI/HUWXq4gO1N1PeldFHRKwcyzr4uZJao7d9KMkf6Q88dQADJmmi5jGZs8Ttus 2bqNhydWNpVepoqVzyiYU07zDTByaGz3+Nv3Fw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for gov/DNSKEY
	Received 613 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 613 octets ;; HEADER SECTION ;; id = 9096 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251030050000 20251017040000 61809 . ftadstHyWbUE8E6a8FHx0sBGmciJtO16qbKRWGiMowd1U20uCTgF/rMfNIzuOcye3w0WUO6NniEU scDH5xGpzRO3DflrzqNkD+BvhF3D8wAfZ4avM72PWThPhcGmXKougiGnzXlrvrZffX/4wwtXEEWO 3tAsErCLS0tCxGJVoyjW8ZnJiCSSmtV9i3bkGfToiPTvG5Wd1As9MFOJjAYce+mJ1AZbTKrZAFqN KLtEqJVgMRYEbZpI/HUWXq4gO1N1PeldFHRKwcyzr4uZJao7d9KMkf6Q88dQADJmmi5jGZs8Ttus 2bqNhydWNpVepoqVzyiYU07zDTByaGz3+Nv3Fw== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to d.root-servers.net for gov/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 367 octets ;; HEADER SECTION ;; id = 39217 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251030050000 20251017040000 61809 . ftadstHyWbUE8E6a8FHx0sBGmciJtO16qbKRWGiMowd1U20uCTgF/rMfNIzuOcye3w0WUO6NniEU scDH5xGpzRO3DflrzqNkD+BvhF3D8wAfZ4avM72PWThPhcGmXKougiGnzXlrvrZffX/4wwtXEEWO 3tAsErCLS0tCxGJVoyjW8ZnJiCSSmtV9i3bkGfToiPTvG5Wd1As9MFOJjAYce+mJ1AZbTKrZAFqN KLtEqJVgMRYEbZpI/HUWXq4gO1N1PeldFHRKwcyzr4uZJao7d9KMkf6Q88dQADJmmi5jGZs8Ttus 2bqNhydWNpVepoqVzyiYU07zDTByaGz3+Nv3Fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20251030050000 20251017040000 61809 . ftadstHyWbUE8E6a8FHx0sBGmciJtO16qbKRWGiMowd1U20uCTgF/rMfNIzuOcye3w0WUO6NniEU scDH5xGpzRO3DflrzqNkD+BvhF3D8wAfZ4avM72PWThPhcGmXKougiGnzXlrvrZffX/4wwtXEEWO 3tAsErCLS0tCxGJVoyjW8ZnJiCSSmtV9i3bkGfToiPTvG5Wd1As9MFOJjAYce+mJ1AZbTKrZAFqN KLtEqJVgMRYEbZpI/HUWXq4gO1N1PeldFHRKwcyzr4uZJao7d9KMkf6Q88dQADJmmi5jGZs8Ttus 2bqNhydWNpVepoqVzyiYU07zDTByaGz3+Nv3Fw== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 15905 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251125110613 20250925110613 2536 gov. 50+umlvq+/fQZOfYuFih8Z9uQFp4xt6BVMtajcMtcFvvQcr3T0l05b7D1L9zn64WMdfmZhltmoMm eKX5PHsSlA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251125110613 20250925110613 2536 gov. 50+umlvq+/fQZOfYuFih8Z9uQFp4xt6BVMtajcMtcFvvQcr3T0l05b7D1L9zn64WMdfmZhltmoMm eKX5PHsSlA== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for bpa.gov/A
	Received 299 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 299 octets ;; HEADER SECTION ;; id = 47555 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bpa.gov. 10800 IN NS ns1.bpa.gov. bpa.gov. 10800 IN NS ns2.bpa.gov. bpa.gov. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) bpa.gov. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 ) bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20251018072223 20251016052223 35496 gov. gSFCiC+UwcqZvEc9e7NcGuQuU8E/D13csIWYo4F2SFMjv0M3HhRUA19DsKFPqCz+7LaGYXZxQ6ZG y4Ry4QHaTg== ) ;; ADDITIONAL SECTION (3 records) ns1.bpa.gov. 3600 IN A 170.160.36.10 ns2.bpa.gov. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for bpa.gov/DNSKEY
	Received 299 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 299 octets ;; HEADER SECTION ;; id = 43185 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bpa.gov. 10800 IN NS ns1.bpa.gov. bpa.gov. 10800 IN NS ns2.bpa.gov. bpa.gov. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) bpa.gov. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 ) bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20251018072223 20251016052223 35496 gov. lbeQYed5mDN1PZoLS4ltxhf3Moe9D4c3cm0afob+ilJ91jgCcv0xrBjO0Yyw72BWRrL79u74d4CO Ve3+ApX39Q== ) ;; ADDITIONAL SECTION (3 records) ns1.bpa.gov. 3600 IN A 170.160.36.10 ns2.bpa.gov. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Found child zone bpa.gov

bpa.gov

	Checking DS between gov and bpa.gov
	Query to b.ns.gov for bpa.gov/DS
	Received 231 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 231 octets ;; HEADER SECTION ;; id = 36968 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DS ;; ANSWER SECTION (3 records) bpa.gov. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) bpa.gov. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 ) bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20251018072223 20251016052223 35496 gov. fPqI5OX4LatA9nOb2YbPyGcDT6vQYdPcsDlf+SYC4y15L7wgEWBU70IqXpbSfBzoUaFCvhqXF0fm cIt5VINt/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for bpa.gov in the gov zone
	DS=14926/SHA-256 has algorithm RSASHA256
	DS=61645/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20251018072223 20251016052223 35496 gov. fPqI5OX4LatA9nOb2YbPyGcDT6vQYdPcsDlf+SYC4y15L7wgEWBU70IqXpbSfBzoUaFCvhqXF0fm cIt5VINt/Q== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=14926/SHA-256 is now in the chain-of-trust
	DS=61645/SHA-256 is now in the chain-of-trust
	`bpa.gov. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 )`
	`bpa.gov. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 )`
	Query to ns2.bpa.gov for bpa.gov/DNSKEY
	Received 2320 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2320 octets ;; HEADER SECTION ;; id = 12310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DNSKEY ;; ANSWER SECTION (8 records) bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcYSZyBGafjypJTxZGMYGC1C9TQyX48uinmeon2yiC8ZQhsZDF/+ik2PJ7CUXhmSfffhv2Q+ 1rLyozqZg5Y40iGPEJHKX7YA6+sH7eXYAQEEGIXe4KdX2BiMeLAnsstn6FmoFa5QW1gYsopSWjkV 9zgwBIUYm+e1qr1Zx3X405TvIBdSVB+5PGrWbvjcbIYY7aqjcSvCPOTEscByZpXMkMIL6m0fGwFF 2GqCN8pgTk5oUc/UygazskWynGaUSdXxScaLCi1BWsJuQH9e+F40CEd+AzKhFVx4auogtDS6LHb2 g2riq94/c/EZBJ/ffoyLoZeTtIX7LcgaR+tv6P+fgwU= ) ; keytag 61645 bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAb5ePz/0eR+f5vr5xbmM8tQEr64favsURzo3kA7DWerppoDCUeXRe6ivPkAOY9bk01wQhfUs qwjtw79HcCpsfaekD1VJUm337edVdkBeZs/ikujeB3K6834OW/PWKgzL35bPnlixZ/0Jp5zCTk2A VggSuZzxM4T67UGSqg+oQkDcPBY5gf1oLakvxl4H0IhCuEppXVbcV6J6o4PvR04Rt0wU5UUjzJ+P cXBuqcwZIXa4FQDJrVEYj68VF877u2UwYQ5FT+v7jErKQkTPvLpglqAkHiuuVrRSKVjOY8T7AjTJ IgBaixQZ6KPZqr78XUOQ0zl0pke6cmlCEzDE1ufaOgM= ) ; keytag 14926 bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAb5nRuHTr3GoWVE8K7C9snOT7rHI6V9EwRuQh07oVvXQAppsGfsXXNfRsedWE9eLqN7lxrFR dLOC8H7WcRgJ0LojK+E63s9TWIte8Dzw7TVVh2koWowxDU3GwO6ETaRJrZYLUAShjRCn527qietw 810hfSHfyNIchABltgDkK/WlRTAcFnkgSygEtMLbkvRRvaot/Ah5JeB9z5/sqH2Yn5KR5W8K0L/h 5aJVNCj+iHBwH74jbihpWf6+QX+uHwg50Ub5Nkx2fA8KQ2Ic+eoBtt9I5CXKP6/SAYVqmDkOhiwU vdk9D8ypMg6lbHVa5qV8aWjrEuOmb1mSHE3ym6VASRs= ) ; keytag 63136 bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAZr79aDvqqIazvPN9Q0HA0B7az890dEVT1JkI5VYfql7GHjiVml1vBzdO0zAs9m3iANpP0K8 FIQ6yU2a7BGAxTnLDjNTfls4ZRGYY9TDxgdmU7j6xYXruK6CFMLqvs0weM3I80NXzTicuxU98IGx RwdlXmfg7zzGrlXBSeUaq3mCCFjRNBEaEx4OgachaaWGcBNyUmdv7tYDgLA0wcwQTntsJTvHgG0d vnaRjtlHFXJ5qTTqLjKArenfK15rM7nTlcQA0ecuhjs4nU+xdok4lm9oCliEQZ9XiL7bBR9gNjhV HOP7WXDdaQ/O671iDJyLK77eiYpbmHLFAYO/t3FIaYM= ) ; keytag 44994 bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251023180749 20251016170749 61645 bpa.gov. jEpudkjVchZ9yduh9dR7LFgLbczvhOv98LtYS5cn6sFA9EC7G+fHR/Vy2oHaXfKnN1RkP2kSUTSt dPvuD7iOKJxY9cAWMqTEW91EDwYoCjYlgadkt99Xmfm1+7yXcy94fe2uTxO0PBuJAWBGuNik1jAs BD/k6XJtWqc1o4xz0A3lQL0+o+fgjsGEWXkdBF8rCYMMtJrxsXkpvQXjGCAQCRQvsa5hKOfc4pN9 BkyFNA5r2JJuGqEkMEU0QQaXu+XYp+tYZ6kStTJw3WbrLjHR8WkJsaoJDsZIqGCkWhf3jd/d+3P1 WOjBnk4pbG/Qjxb0Czi3bHpcfO/5sn8WWEonMQ== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251023180749 20251016170749 14926 bpa.gov. ncAt2MPn0LBxrdmnclNxbXct+yZClISQC7dl5DQm5q+SHy9/F9zKWnPzD/xrOEFYGW46qgq9ufbW EdW2wokraRetJyFycAEDp1qvncJaTaHNB8knSSAdBGkLhFRtav0ZrKvz/YMC/NsxVQxlv2lEXWla DX6pfbaizqCyc5iKC57NrVTxGIUwL92cJUn4Mrr6IloVpJvy6CrBao/Y4kOH4KXGvEG7jBgsMPUF u/9cF8A1Jy+cYXIGq/p+4DtLK6hymMw1rKliEpORPoUurZOpQ/TJjZN9KBv8TO5P14KlCdHC9jVF yBcFWgYGLlHfZ/UZgZkNOhmOghn861po494HnQ== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251023180749 20251016170749 63136 bpa.gov. Ny3wGMKExNs//RxB832Tzo73jytf0lMVgCof1fvTGfnhK+L1x5MjEFUEQM77BCHuhy/E3YmyMeeC lK6K0vHoydbqLDyfFsSW+v7qDT60sJRfrJ/mCmnWn7sEQ3Rd5n+TbH/KKIC/MBxA3I0m4oUt4vf+ UFG5eYfYOS+t5buXz8S2nTbaYI8SEPJcb1cFubjngemWDXJha86gJznXBCGW49Np/Ixw2WrJTSjK 9uP9DLs7L99ruZqc3i5XXWJQt1YmH0AXzZxPdOWoKDwHKhzZfhPd8U5HaMoJSAJ/mohQAbtIJfMW Sg2XP2V9i3vYQYBNPrtVcvmNRZkrlhqmB3Luxw== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251023180749 20251016170749 44994 bpa.gov. ewuqmttSkzXOHcuQe+biCj9OWmmtiRb/WB4+Ys9eX3kj6SQqWJkYPowmzqilVOfKJnAzPSAo5UVz 9CmNdnFC0VmvT7N1IFyeoETLGMeV2K9zY5iXkHrQvkaoWOmS/GwDAfzii+PzBVYj936vKa0oBFGL VYju7zEyVCCvb3rZFt6N1ViUm7KF/HYIH7BXzw67AWJvtdd2MaFlhF30k58pvELglnm8MJNhngxo IEE2oV6/mU4YnpCg59frG1gxVgQf4euGLyINm51FCIp/2J6HEnHTiVdZ0tkcviFLpl+YIgutD+gm vD/8/MCWPtG1/MHyrHdMlpwQPf1txTdPOVrEUg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for bpa.gov
	`bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcYSZyBGafjypJTxZGMYGC1C9TQyX48uinmeon2yiC8ZQhsZDF/+ik2PJ7CUXhmSfffhv2Q+ 1rLyozqZg5Y40iGPEJHKX7YA6+sH7eXYAQEEGIXe4KdX2BiMeLAnsstn6FmoFa5QW1gYsopSWjkV 9zgwBIUYm+e1qr1Zx3X405TvIBdSVB+5PGrWbvjcbIYY7aqjcSvCPOTEscByZpXMkMIL6m0fGwFF 2GqCN8pgTk5oUc/UygazskWynGaUSdXxScaLCi1BWsJuQH9e+F40CEd+AzKhFVx4auogtDS6LHb2 g2riq94/c/EZBJ/ffoyLoZeTtIX7LcgaR+tv6P+fgwU= ) ; keytag 61645`
	`bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAb5ePz/0eR+f5vr5xbmM8tQEr64favsURzo3kA7DWerppoDCUeXRe6ivPkAOY9bk01wQhfUs qwjtw79HcCpsfaekD1VJUm337edVdkBeZs/ikujeB3K6834OW/PWKgzL35bPnlixZ/0Jp5zCTk2A VggSuZzxM4T67UGSqg+oQkDcPBY5gf1oLakvxl4H0IhCuEppXVbcV6J6o4PvR04Rt0wU5UUjzJ+P cXBuqcwZIXa4FQDJrVEYj68VF877u2UwYQ5FT+v7jErKQkTPvLpglqAkHiuuVrRSKVjOY8T7AjTJ IgBaixQZ6KPZqr78XUOQ0zl0pke6cmlCEzDE1ufaOgM= ) ; keytag 14926`
	`bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAb5nRuHTr3GoWVE8K7C9snOT7rHI6V9EwRuQh07oVvXQAppsGfsXXNfRsedWE9eLqN7lxrFR dLOC8H7WcRgJ0LojK+E63s9TWIte8Dzw7TVVh2koWowxDU3GwO6ETaRJrZYLUAShjRCn527qietw 810hfSHfyNIchABltgDkK/WlRTAcFnkgSygEtMLbkvRRvaot/Ah5JeB9z5/sqH2Yn5KR5W8K0L/h 5aJVNCj+iHBwH74jbihpWf6+QX+uHwg50Ub5Nkx2fA8KQ2Ic+eoBtt9I5CXKP6/SAYVqmDkOhiwU vdk9D8ypMg6lbHVa5qV8aWjrEuOmb1mSHE3ym6VASRs= ) ; keytag 63136`
	`bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAZr79aDvqqIazvPN9Q0HA0B7az890dEVT1JkI5VYfql7GHjiVml1vBzdO0zAs9m3iANpP0K8 FIQ6yU2a7BGAxTnLDjNTfls4ZRGYY9TDxgdmU7j6xYXruK6CFMLqvs0weM3I80NXzTicuxU98IGx RwdlXmfg7zzGrlXBSeUaq3mCCFjRNBEaEx4OgachaaWGcBNyUmdv7tYDgLA0wcwQTntsJTvHgG0d vnaRjtlHFXJ5qTTqLjKArenfK15rM7nTlcQA0ecuhjs4nU+xdok4lm9oCliEQZ9XiL7bBR9gNjhV HOP7WXDdaQ/O671iDJyLK77eiYpbmHLFAYO/t3FIaYM= ) ; keytag 44994`
	DNSKEY=61645/SEP is now in the chain-of-trust
	DS=61645/SHA-256 verifies DNSKEY=61645/SEP
	DNSKEY=14926/SEP is now in the chain-of-trust
	DS=14926/SHA-256 verifies DNSKEY=14926/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251023180749 20251016170749 61645 bpa.gov. jEpudkjVchZ9yduh9dR7LFgLbczvhOv98LtYS5cn6sFA9EC7G+fHR/Vy2oHaXfKnN1RkP2kSUTSt dPvuD7iOKJxY9cAWMqTEW91EDwYoCjYlgadkt99Xmfm1+7yXcy94fe2uTxO0PBuJAWBGuNik1jAs BD/k6XJtWqc1o4xz0A3lQL0+o+fgjsGEWXkdBF8rCYMMtJrxsXkpvQXjGCAQCRQvsa5hKOfc4pN9 BkyFNA5r2JJuGqEkMEU0QQaXu+XYp+tYZ6kStTJw3WbrLjHR8WkJsaoJDsZIqGCkWhf3jd/d+3P1 WOjBnk4pbG/Qjxb0Czi3bHpcfO/5sn8WWEonMQ== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251023180749 20251016170749 14926 bpa.gov. ncAt2MPn0LBxrdmnclNxbXct+yZClISQC7dl5DQm5q+SHy9/F9zKWnPzD/xrOEFYGW46qgq9ufbW EdW2wokraRetJyFycAEDp1qvncJaTaHNB8knSSAdBGkLhFRtav0ZrKvz/YMC/NsxVQxlv2lEXWla DX6pfbaizqCyc5iKC57NrVTxGIUwL92cJUn4Mrr6IloVpJvy6CrBao/Y4kOH4KXGvEG7jBgsMPUF u/9cF8A1Jy+cYXIGq/p+4DtLK6hymMw1rKliEpORPoUurZOpQ/TJjZN9KBv8TO5P14KlCdHC9jVF yBcFWgYGLlHfZ/UZgZkNOhmOghn861po494HnQ== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251023180749 20251016170749 63136 bpa.gov. Ny3wGMKExNs//RxB832Tzo73jytf0lMVgCof1fvTGfnhK+L1x5MjEFUEQM77BCHuhy/E3YmyMeeC lK6K0vHoydbqLDyfFsSW+v7qDT60sJRfrJ/mCmnWn7sEQ3Rd5n+TbH/KKIC/MBxA3I0m4oUt4vf+ UFG5eYfYOS+t5buXz8S2nTbaYI8SEPJcb1cFubjngemWDXJha86gJznXBCGW49Np/Ixw2WrJTSjK 9uP9DLs7L99ruZqc3i5XXWJQt1YmH0AXzZxPdOWoKDwHKhzZfhPd8U5HaMoJSAJ/mohQAbtIJfMW Sg2XP2V9i3vYQYBNPrtVcvmNRZkrlhqmB3Luxw== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251023180749 20251016170749 44994 bpa.gov. ewuqmttSkzXOHcuQe+biCj9OWmmtiRb/WB4+Ys9eX3kj6SQqWJkYPowmzqilVOfKJnAzPSAo5UVz 9CmNdnFC0VmvT7N1IFyeoETLGMeV2K9zY5iXkHrQvkaoWOmS/GwDAfzii+PzBVYj936vKa0oBFGL VYju7zEyVCCvb3rZFt6N1ViUm7KF/HYIH7BXzw67AWJvtdd2MaFlhF30k58pvELglnm8MJNhngxo IEE2oV6/mU4YnpCg59frG1gxVgQf4euGLyINm51FCIp/2J6HEnHTiVdZ0tkcviFLpl+YIgutD+gm vD/8/MCWPtG1/MHyrHdMlpwQPf1txTdPOVrEUg== )`
	RRSIG=61645 and DNSKEY=61645/SEP verifies the DNSKEY RRset
	RRSIG=14926 and DNSKEY=14926/SEP verifies the DNSKEY RRset
	RRSIG=63136 and DNSKEY=63136 verifies the DNSKEY RRset
	RRSIG=44994 and DNSKEY=44994 verifies the DNSKEY RRset
	DNSKEY=63136 is now in the chain-of-trust
	DNSKEY=44994 is now in the chain-of-trust
	Query to ns2.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 46413 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20251023180741 20251016170741 63136 bpa.gov. ZX5GS7Eo3GGst6gm5lKCH7F+sxiyNN/vSq1XULZ8peGB+ao9TFRAvdzm093RDC9mqiq8D5FRlZLU gBJ28u+7rhzryjR3886w3OQyzBB9WPul0wJNx3PEiJ8Em//4pdb0mLp9dEZ8PAgKH7JdTli+ecyw si5b3n6wxyosELGwSIxgolOos768r6xA7OJ8wXPfFwt1aVssJd78TFZ7ksdKZO59veu66M0jpMgF aJqNtj1wtPr0tdOTZ4h8bD/QSuYcJQoXEIcvFWuBiHX21FA8fZ8D3IUOuc8v1KKgbTlEQPvEeGeq ej+cMlcmzCmMoZY8oicCC1fnKCiUpCMoGjFj2g== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20251023180741 20251016170741 44994 bpa.gov. ie7WL6arZY61Iinngp3GbeaprnkJS2ttSKWUpa8lz4jcrSqUsp7Lwa+oTze0oExph25XEH7/+3k3 RjxTUi41ETc2s06kKOUe/1NYDx/SO2ouGjadDJHD479bdXaOfaZ74e8sJGsfdsfUvuys7RLxsd5n vVHvrQQbnF0EnPHsthy/YJIJL2Bov9OJ3q4/fUV672sqxys+6ZJeqP4UTPxbVcjIZHyJ0NaLYKqg j2Sk6IFs0uAeZN1Iz/2czT/hAl/QIkrTQ+ZihUlNAqubCNIlSKW0Zn9t8EtyoQaqHaRnHlc09JN4 3x+jdWIScmYE7bieDAsK5tRHoD5Jkd2zhXTuFw== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251023180721 20251016170721 63136 bpa.gov. pxkLXjLY3HBhqnfzqymi3Mw2qTrqyQuedyk6YzQrno/Enbtw52XDFxiw4MSSs75Em/Tq/upFblBw a6hV2OXX06MwQgRo0XNjJIQtV01LbksegLXJrFgo+QtyXa5mMUiU6T1IcdKD6WBZ8R7Gu4t0Pz93 Io5w7VEaB9Fevbb93M0V+IvklzvdCZbeH68JbdUUaalwdb52BxUunvnzDRjEg6ICjaT3ClfXC+rm meYaUoCeU9QIW7eiANyLAP9fFLdKwAPLFMrpY15uq8AEjOAsPurJb12oJf8FFkPloLTUj4xdEbX2 xTKKexWAkPvJKeovz135ZbPmgV98CIcXv+Nm1w== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251023180721 20251016170721 44994 bpa.gov. AmiBISJVAlVAKoAvbO1+gOKUV7XQ2pdrMP3foQu341oq6CRzEIuhekRQFZCmB/MMHPqgpL8bPzhZ Bt5c0Bal9CxizYVS7PzmkKTQEAk2o9NZPn1XxCNMS5QRfk93ZsFrwALxIierfdDi9m+gnN+h5IV1 dV1jCd5baeBrCZLwVlfia+p9BuWR5GXBubxXxb7MWOZIpVVi1qGFBLGWXqD7uG4z1WDA5/T1MGDC zN+dzqeqjyBRtWRR9gOxw3h7+cezjRt9+e6KEYLAY+sfZj0qFkT8zpUjuLlfY+yzR7jYh+1+t47S 06o6AQ56nrEaJg6UkhIcLfBVoq6pFKOdGm4mJA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023180721 20251016170721 63136 bpa.gov. unC6QKdgv4Ia+6BafLxYRV4HHkaiC/q7n64N3iljoUwGnCqVNlzv4vYdhNCSvCl+T78sm1iUxp0b LdifHrtnE1M+E9hv7DxUDcFzIpHGU4OAXh3XDIM99nEUZ57ZGTHvTnFV7CYW8c5mig3Zm+UZ6LOE GsjILqVy4z5V4cmeAAnFRJKk+5i8M5AZYHXkxZEqglC4bIebtJguhoz89gd+FOJK6PYi60L576KJ xkoU0cgmJFNjBab4oHW09Pf4rE/Sta4sJ4Nt9t3NWh6YHotQwE1uokgoF5ihTFne8AtW59ju8mkt rsn1UrJkbd956+5GLQxwm4ocSaUod8LT8eB2sw== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023180721 20251016170721 44994 bpa.gov. lLgBl2rCtYnmvbTzFtJP+hLyVpFwXmZ7CK3W3zGMLYUtBRPsWzzmryEkCRYqruWrAL5PRmbIx+Po A1YbL/S0YwIimOYxIjJycGwox8bqm6wax72G8ZhykGCMJQZJDt4gd+C7Kw9O2O4T+TJO44nQzpH3 uOF/dxbySlu43YFgnsUIpNlGFcLLBdRg/NRGQ2Q96oDiVvy12pxpA9d4URQ55LJgNYh0p744yYzT uhPbivvmMmN+aY9gnkoVl7fTlDxVg5eTpvqnmnEE7V9cB8T9R+kdZW7axTslnWUcsn9k1/v5Se9N oLqKVVbTIMX4ic+uNDWCYJYa65RmtMJOXyzptA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023180721 20251016170721 63136 bpa.gov. BUXd0uoM1MJL3XpA575LRq+KB3ooBpymn5HLeYyj9wcc8Mw3WCjQLBOgBspTPbk1FcZaluEW8aVP jx78lZKTIRUvYAWUkwxoiHv50gNjcNzI0JDgHLZtuSgQHysS+sr5sx/HiE6rVacFIyxF3o0iSqsJ YF+iSUjlpDE5i1jEt4BWDgpCafcwIIkMgD+Ll0zbkz88wjjVyI5DR0s1s4UEZymoduCRJbNAddGE xh4aYVbMeox58UKaTVXunVLCYCdXfRKCfoMK09P9maIi/DAvcMqYDaZUNXB+CqlpLAKyXB7D27jN CVh0kKMjvUBp1QVANz/LxaSlCxznV3FTOjrQ6g== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023180721 20251016170721 44994 bpa.gov. kfMgoaAN3wBVjYK3SX3Zpzx6FOt7e77RveywGzsQEA++STzfoMfyxlx2/bcgeLLKng5ruQH753ml VyPhrTEw44jc2WZkNpf4ha4ysP6ZmMsleB7sqg5kRFLEwWb7vKu1WkMzZPUQ2udGyD+UOdednBCz HJ6q4jOtTRp+Ti4B/ScgeQ6JRHf3xjhGACkD2YnQtiORvqMy+LcOF3pIQgMAW3ExCyw5KU90OXkG /pM/kvc6ZsCa56LdwxxiGSAAxtPAKPHiZXHLD003GKJHET/v5Ej5Qe0FbWtGncY7SuRfOxEmUUOg udFAAoC0ws8mk9FoqzVqWEFx1iQZklsfN9GmEQ== ) ;; { "EDNS-VERSION": 0 }
	ns2.bpa.gov is authoritative for bpa.gov
	Found RRSIG signed by bpa.gov zone
	Query to ns1.bpa.gov for bpa.gov/SOA
	Received 2511 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2511 octets ;; HEADER SECTION ;; id = 54333 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN SOA ;; ANSWER SECTION (3 records) bpa.gov. 43200 IN SOA ( ns1.bpa.gov. hostmaster.bpa.gov. 2025090902 ;serial 43200 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) bpa.gov. 43200 IN RRSIG ( SOA 8 2 43200 20251023191002 20251016181002 63136 bpa.gov. n0nc0lqhDU7KmZBDGDIoZMRaVZLSXF6hNmQlxIipALHBV+j3Jv9E5P2vdxXD/7DHN7OXt05K+dPC 4QpJieT2e7r8WetHnlj1uGL/blEmbTNUxsclMIXWkMmuunSUXjBS/QT0cRRQE8SCJr3HZv80H7CP rsgIqc7axNWXw+VSF3AMfecq3bdToyz8eyCSbEmDalRIiRHsoOCAFn9SP3fiP7LYquIYwlq1hfLl NEmjP3gbsmUHsbDjeQAhxbCW0u6jkmez9K1UkNeSG+UQ5muNl3h8yyjSUoGMzP0ciUl2ZseLsLMi JOrZrNLPstCXkdDRnq0Pd0yfJiqXk6q08MJQhA== ) bpa.gov. 43200 IN RRSIG ( SOA 8 2 43200 20251023191002 20251016181002 44994 bpa.gov. S85/+T9jzc7lIvTxpYaSPcVMvmbbTUofL/wkIDsB5YtkytHc7EZ/Ts7bg7S+H23Ra58xLvCwAuDo Qvvis5xj0IXMhRtHlmWa/DDWiX5TFnLwfYJ7ysZVOwjBTwlRYeEzB0sW1LZWEqXUTWVOXq9RjMHo H73rLZofSf9DufCIRMOrB5jeZCfCWsPKq8ZsY26XlTaBnh3nuidhESw4vJ6tcmQJejpaCqnvPKe0 Uvwqzqp+6hPq0M5vbL3LW0ktVBRlWjmAaKyXa5sTn3fQT1v0M0qs2enrScglyTOhSDtz/VjbPAUq f2TGSB7eK5vcrx7tpPoXAKx/RQLAK327Kb4uww== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251023190924 20251016180924 63136 bpa.gov. d/dCAjo73jemo+Bd+fXsB3zo4g7egtGv8dHW0ewZDPdCS0DVd/vk4MChxe37Fu7Uxv2cXGFLfs3k GG9cCRG8niHdqkVKjjiEN+qy4Ne+nTCGrQhLSHiNh+1Qn6jgGjuzoFrC55X3dhK2HQ9W7TMdb4no nmhwuCtYSSDQM+ph5Jl7TZJysWBG1NxZoIBSQ2P5QABz8Vf5RVL+kTmJawuWRaeNMGEmCqXoCY1Z agUNYnnkKnvhJyYzzUF/hjmSMJWZDMXih6YDXyR65BZuuD9nbCm2bP3QrzKXM/B4mFDVLTmdlaDZ fNKERRp7fzZLtvl3Yv2kqlSnLk+92x7hs4/urQ== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251023190924 20251016180924 44994 bpa.gov. D+HroiN4uTD9BhROISvKfkcEvMPP6WT4vEF92J3JZYAn9dezKXwSgdK/UbspksWG9+g2k7su852k jYj7qOpefcEu4V/zxNJ/TY5qou5FcbOwBTNVuBE3ToZL7fmWofG6+7ea177gWM825STg1vnoBQqF P+n7LDG3zkONnbp0D7TPqn534k/jt21DDOMIaentOfsQmRQzrzgkf2HOR3cC0NVvttlUxmsTIdhm Q/M7gEuguYUOgNw6X7VGRbB7b8H9j8SF/UMGu6KGSxL6BYla57IlCmt2R1SPdH37LJdpcqRJInv7 OzP9M2JsAqx/RG1rF5XNSV5mW/GnZhEUa7IXJA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023190924 20251016180924 63136 bpa.gov. fC3YSe4XGYJ5hRC+MiebyEXMQWfntC8wG24l9gLBuZ474SrBdwgj47XgGHROV8wSQCweku3ZZzzQ 4B7T44oI/FMjTrX/wXq64xh2AGFmnHeuxo8RV4BLp4T+ojJzaAkXuyrEyBiS0+Mu89oVhkj3gfKr CK0JdSfCcWnsTGGAzFvINTfq9CpgmGxbrXE8do6yFBH1VZUcUKEWiHmus9rDtG/AC+FpRtO3h4DN KJx6ukCT8ryrL42vxf2TEQr1tNpT+UcBEa5RkidXItF87FReCvBblcmcxWaORPa3scJccMrnWFED 8SkMfax5EGW3xSEVXXBuqDXQlM2EMvVsZEK2LA== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023190924 20251016180924 44994 bpa.gov. jv8V5XycUf/Y4Cdgg8FnhWUQ6tLNwZcETVRLnvQnt4a4DPAzv6VI2ZS/dCqk8lC+kU9xpivIMoVp ck71TEJMmv+jCs5+LSEUOjFzzGAYkQZYcxwlhMBVWQQlr4yZtt2G9YbRSNpbmVYeicsjTG88Gx3a Yk24CmMf/jmLe6ltlMdqyir0eEGseJ/KF/8QAbvfixzzszmZgylXQ0+eYP7M8hDZxqSOObVbdHX/ tUKe6HtaMWEY2GSqnmap/s7sKUdJ1BxRdjW0Rlq3XfvRunlVXHB1vEwwjYxoeSQjIYPGQflO8zg1 VQmULDFedToY5UFLffLwPoe96g2HlGQzzbL/OQ== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023190924 20251016180924 63136 bpa.gov. HgzWFVDRpswbA3GQSWKsc2HV7AN0izW/PNzRgSOxM4z/Or1v0CWmBfySp2JkIh3BJU+GrTw1zLS7 KMaJhpJc+tI8QFiCOy0Hsab2HPTDDySEflWbgCQeuyDpD+xvn6KwYg6WvBsT+6BzGF/ICZzY5e0j L6rsNOIbh3jxbhKmYyQ+gpZN6Omy0MoPKeG/tUcd6g1T8pQxUgwwwfNucdf1qjdrsAqhpMH1ztpZ TGpDoBsOtw0jZO9UqCEYwDPj7e7Clf24T0DEcDdFM3ZHXsLMKEwtWrGne7tNWUfuGOUgOk+BFyOf +B/BKl7obUOpOcD9NR1eN9WzWS2Dn/lAeS5CrQ== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023190924 20251016180924 44994 bpa.gov. ctKHzvuyyZbJYMRzmE9+BDejG/MiU8e2RMRBMQtnt0TVUX6B3CUjR7deiQH7sljyQ4JYsnIaaII8 9SwauRlXxBm4qaW1T2Q2MsbuLJF/NQm/Hsoeu5Tsfn3nTSTs+uSpXziLqt/y0t14o3oFft3fnnUF oxIlUGr7JhPjdpEdw91xh/GdYtqcYSi2bl1Evp300NrMYc4wdqSn+2fyvY9L7tcLkCDr1mms013t utfSZPMeRS11WkagZaqFN3CijBEnqrZkFmbGCEuXggl6pYQvnh4v6LSP2taJEjTvPOrm2EF+atPy NMMyqWWMoLBmmU7mL19vbdSVtPb+o5DIk9R5Ag== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 49116 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20251023180808 20251016170808 63136 bpa.gov. Cpg+NGFn92878yY+o3j7gpyv7Ywt3uiYnCg0a8zXapdp620TfUJX+NH/oyGcCfTn02/mJpMSGcET /6/R9Db0KSVwaqb3aoBIMJDYEQZP1Au8Wb/cYm3y11W90ncFG3LMpVf8HuSFUVgJIwcxzmJ7GnT6 e/b3YvE8l4VQHMeUzluNwOznD0iQNgpux54gBOiaylhuy4X5mDrvSAVJ22Z8tU0/gf4Q9Ot/TDyY sEU8lVoqrL3d0sVNDBWthTzRbGUA248QZH8dwlHp8rUkZOJSbie0Osa5cDPECVKR8nFcaOvggHBD 4+fxsYaPrdK5p1e+BWwoBQ0aN/k0yvHdjREzfw== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20251023180808 20251016170808 44994 bpa.gov. N6sMt/VkSBvMhGhbPRbfavb/rt2GCZUIJmW7Q7Yj+9VyaOcyJtuscT5enUJT2coZx1pkSuF75ITf WCNMl8O6qIhOVgYPI4+lxTCG/I3N24HEs4lFkMINHDHn+oMW6q1g9olKO2KhzLryF8VHZ/upOR8I sf+rpJES1DOoqkBy4BCqEwC0rHK9pGGe7xhGYiIOLmlPcEwCDekGEMwBSBO1l6nj46yAOEm1ASxF b5iDJv0oBnrjADdhPytfFsMoplZJeO5IeG3N4J1UWswG7Xxz3TgUcVTVhBiKybvw6wKdbjlJkHyQ Y6NEjWMkBfoveRSkvBvTBTUHnHM11hDjw8WKCg== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251023180721 20251016170721 63136 bpa.gov. pxkLXjLY3HBhqnfzqymi3Mw2qTrqyQuedyk6YzQrno/Enbtw52XDFxiw4MSSs75Em/Tq/upFblBw a6hV2OXX06MwQgRo0XNjJIQtV01LbksegLXJrFgo+QtyXa5mMUiU6T1IcdKD6WBZ8R7Gu4t0Pz93 Io5w7VEaB9Fevbb93M0V+IvklzvdCZbeH68JbdUUaalwdb52BxUunvnzDRjEg6ICjaT3ClfXC+rm meYaUoCeU9QIW7eiANyLAP9fFLdKwAPLFMrpY15uq8AEjOAsPurJb12oJf8FFkPloLTUj4xdEbX2 xTKKexWAkPvJKeovz135ZbPmgV98CIcXv+Nm1w== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251023180721 20251016170721 44994 bpa.gov. AmiBISJVAlVAKoAvbO1+gOKUV7XQ2pdrMP3foQu341oq6CRzEIuhekRQFZCmB/MMHPqgpL8bPzhZ Bt5c0Bal9CxizYVS7PzmkKTQEAk2o9NZPn1XxCNMS5QRfk93ZsFrwALxIierfdDi9m+gnN+h5IV1 dV1jCd5baeBrCZLwVlfia+p9BuWR5GXBubxXxb7MWOZIpVVi1qGFBLGWXqD7uG4z1WDA5/T1MGDC zN+dzqeqjyBRtWRR9gOxw3h7+cezjRt9+e6KEYLAY+sfZj0qFkT8zpUjuLlfY+yzR7jYh+1+t47S 06o6AQ56nrEaJg6UkhIcLfBVoq6pFKOdGm4mJA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023180721 20251016170721 63136 bpa.gov. unC6QKdgv4Ia+6BafLxYRV4HHkaiC/q7n64N3iljoUwGnCqVNlzv4vYdhNCSvCl+T78sm1iUxp0b LdifHrtnE1M+E9hv7DxUDcFzIpHGU4OAXh3XDIM99nEUZ57ZGTHvTnFV7CYW8c5mig3Zm+UZ6LOE GsjILqVy4z5V4cmeAAnFRJKk+5i8M5AZYHXkxZEqglC4bIebtJguhoz89gd+FOJK6PYi60L576KJ xkoU0cgmJFNjBab4oHW09Pf4rE/Sta4sJ4Nt9t3NWh6YHotQwE1uokgoF5ihTFne8AtW59ju8mkt rsn1UrJkbd956+5GLQxwm4ocSaUod8LT8eB2sw== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023180721 20251016170721 44994 bpa.gov. lLgBl2rCtYnmvbTzFtJP+hLyVpFwXmZ7CK3W3zGMLYUtBRPsWzzmryEkCRYqruWrAL5PRmbIx+Po A1YbL/S0YwIimOYxIjJycGwox8bqm6wax72G8ZhykGCMJQZJDt4gd+C7Kw9O2O4T+TJO44nQzpH3 uOF/dxbySlu43YFgnsUIpNlGFcLLBdRg/NRGQ2Q96oDiVvy12pxpA9d4URQ55LJgNYh0p744yYzT uhPbivvmMmN+aY9gnkoVl7fTlDxVg5eTpvqnmnEE7V9cB8T9R+kdZW7axTslnWUcsn9k1/v5Se9N oLqKVVbTIMX4ic+uNDWCYJYa65RmtMJOXyzptA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023180721 20251016170721 63136 bpa.gov. BUXd0uoM1MJL3XpA575LRq+KB3ooBpymn5HLeYyj9wcc8Mw3WCjQLBOgBspTPbk1FcZaluEW8aVP jx78lZKTIRUvYAWUkwxoiHv50gNjcNzI0JDgHLZtuSgQHysS+sr5sx/HiE6rVacFIyxF3o0iSqsJ YF+iSUjlpDE5i1jEt4BWDgpCafcwIIkMgD+Ll0zbkz88wjjVyI5DR0s1s4UEZymoduCRJbNAddGE xh4aYVbMeox58UKaTVXunVLCYCdXfRKCfoMK09P9maIi/DAvcMqYDaZUNXB+CqlpLAKyXB7D27jN CVh0kKMjvUBp1QVANz/LxaSlCxznV3FTOjrQ6g== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023180721 20251016170721 44994 bpa.gov. kfMgoaAN3wBVjYK3SX3Zpzx6FOt7e77RveywGzsQEA++STzfoMfyxlx2/bcgeLLKng5ruQH753ml VyPhrTEw44jc2WZkNpf4ha4ysP6ZmMsleB7sqg5kRFLEwWb7vKu1WkMzZPUQ2udGyD+UOdednBCz HJ6q4jOtTRp+Ti4B/ScgeQ6JRHf3xjhGACkD2YnQtiORvqMy+LcOF3pIQgMAW3ExCyw5KU90OXkG /pM/kvc6ZsCa56LdwxxiGSAAxtPAKPHiZXHLD003GKJHET/v5Ej5Qe0FbWtGncY7SuRfOxEmUUOg udFAAoC0ws8mk9FoqzVqWEFx1iQZklsfN9GmEQ== ) ;; { "EDNS-VERSION": 0 }
	bpa.gov A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20251023180808 20251016170808 63136 bpa.gov. Cpg+NGFn92878yY+o3j7gpyv7Ywt3uiYnCg0a8zXapdp620TfUJX+NH/oyGcCfTn02/mJpMSGcET /6/R9Db0KSVwaqb3aoBIMJDYEQZP1Au8Wb/cYm3y11W90ncFG3LMpVf8HuSFUVgJIwcxzmJ7GnT6 e/b3YvE8l4VQHMeUzluNwOznD0iQNgpux54gBOiaylhuy4X5mDrvSAVJ22Z8tU0/gf4Q9Ot/TDyY sEU8lVoqrL3d0sVNDBWthTzRbGUA248QZH8dwlHp8rUkZOJSbie0Osa5cDPECVKR8nFcaOvggHBD 4+fxsYaPrdK5p1e+BWwoBQ0aN/k0yvHdjREzfw== )`
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20251023180808 20251016170808 44994 bpa.gov. N6sMt/VkSBvMhGhbPRbfavb/rt2GCZUIJmW7Q7Yj+9VyaOcyJtuscT5enUJT2coZx1pkSuF75ITf WCNMl8O6qIhOVgYPI4+lxTCG/I3N24HEs4lFkMINHDHn+oMW6q1g9olKO2KhzLryF8VHZ/upOR8I sf+rpJES1DOoqkBy4BCqEwC0rHK9pGGe7xhGYiIOLmlPcEwCDekGEMwBSBO1l6nj46yAOEm1ASxF b5iDJv0oBnrjADdhPytfFsMoplZJeO5IeG3N4J1UWswG7Xxz3TgUcVTVhBiKybvw6wKdbjlJkHyQ Y6NEjWMkBfoveRSkvBvTBTUHnHM11hDjw8WKCg== )`
	RRSIG=63136 and DNSKEY=63136 verifies the A RRset
	RRSIG=44994 and DNSKEY=44994 verifies the A RRset

bpa.gov

	Query to ns1.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 3753 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20251023190939 20251016180939 63136 bpa.gov. usnoRl8YoPb9IwjR7viGM1YdlOGE3LMe21rz2fKvg98+3jOgC8BVTNGdrkOO1oiCMnbPG3OsrUny vdzcVbIesukrr7kbI+jm16sAiBY/qUIrLBF9nNqOhuprwe4gLYokcvaC74Z+gB+XzxcL0IY47emw dzvhzDHP4Y/nDJ9LSs8o+eI+QLz0NskILeCyi8S29/jDCUphHs7QATz28a5H/ZWJ1kZbpO58XYCk vS+1LSr83GnfhTRbNxb5yTPNou3c8/AVv3833ygADO8ANOGqsbGt269QSidjo5uqqhMhcA/lvXOJ zSV9Q/5Yygk8IkM6fZl96pa013KgI8wDrK1Yug== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20251023190939 20251016180939 44994 bpa.gov. fj2zRf64XyIk0Ul1yujOguKTuOtrDji3psDmlPCNAn56VisQarT/p8ibwETVspqSvKu9h6uqhdpZ qxpup2o9R8BEsyTcBI5UHH0LqDJa81vJCcOkCQCoc6fqSYbyfKQLjSrkaK8oUt8kWAiPkt/qXpF1 3/ee/wIzPmTZADPWiKHWcIzSWJHfYOfsXuPzYFJGJTuCnuvVfqPMXtNmL4Hy3KXTqYvK669BQGTq IrAEFeBmw1J0WUzs5HE0T9sWTO9Xci1qCl0kXodkZdYOE3KyvGD4AsdjQ70gsdgJcgh0bErnzzUn d2lhlQ/pmg5ofJQHMZkRat/5ewMhEWFD5floxw== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251023190924 20251016180924 63136 bpa.gov. d/dCAjo73jemo+Bd+fXsB3zo4g7egtGv8dHW0ewZDPdCS0DVd/vk4MChxe37Fu7Uxv2cXGFLfs3k GG9cCRG8niHdqkVKjjiEN+qy4Ne+nTCGrQhLSHiNh+1Qn6jgGjuzoFrC55X3dhK2HQ9W7TMdb4no nmhwuCtYSSDQM+ph5Jl7TZJysWBG1NxZoIBSQ2P5QABz8Vf5RVL+kTmJawuWRaeNMGEmCqXoCY1Z agUNYnnkKnvhJyYzzUF/hjmSMJWZDMXih6YDXyR65BZuuD9nbCm2bP3QrzKXM/B4mFDVLTmdlaDZ fNKERRp7fzZLtvl3Yv2kqlSnLk+92x7hs4/urQ== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251023190924 20251016180924 44994 bpa.gov. D+HroiN4uTD9BhROISvKfkcEvMPP6WT4vEF92J3JZYAn9dezKXwSgdK/UbspksWG9+g2k7su852k jYj7qOpefcEu4V/zxNJ/TY5qou5FcbOwBTNVuBE3ToZL7fmWofG6+7ea177gWM825STg1vnoBQqF P+n7LDG3zkONnbp0D7TPqn534k/jt21DDOMIaentOfsQmRQzrzgkf2HOR3cC0NVvttlUxmsTIdhm Q/M7gEuguYUOgNw6X7VGRbB7b8H9j8SF/UMGu6KGSxL6BYla57IlCmt2R1SPdH37LJdpcqRJInv7 OzP9M2JsAqx/RG1rF5XNSV5mW/GnZhEUa7IXJA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023190924 20251016180924 63136 bpa.gov. fC3YSe4XGYJ5hRC+MiebyEXMQWfntC8wG24l9gLBuZ474SrBdwgj47XgGHROV8wSQCweku3ZZzzQ 4B7T44oI/FMjTrX/wXq64xh2AGFmnHeuxo8RV4BLp4T+ojJzaAkXuyrEyBiS0+Mu89oVhkj3gfKr CK0JdSfCcWnsTGGAzFvINTfq9CpgmGxbrXE8do6yFBH1VZUcUKEWiHmus9rDtG/AC+FpRtO3h4DN KJx6ukCT8ryrL42vxf2TEQr1tNpT+UcBEa5RkidXItF87FReCvBblcmcxWaORPa3scJccMrnWFED 8SkMfax5EGW3xSEVXXBuqDXQlM2EMvVsZEK2LA== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023190924 20251016180924 44994 bpa.gov. jv8V5XycUf/Y4Cdgg8FnhWUQ6tLNwZcETVRLnvQnt4a4DPAzv6VI2ZS/dCqk8lC+kU9xpivIMoVp ck71TEJMmv+jCs5+LSEUOjFzzGAYkQZYcxwlhMBVWQQlr4yZtt2G9YbRSNpbmVYeicsjTG88Gx3a Yk24CmMf/jmLe6ltlMdqyir0eEGseJ/KF/8QAbvfixzzszmZgylXQ0+eYP7M8hDZxqSOObVbdHX/ tUKe6HtaMWEY2GSqnmap/s7sKUdJ1BxRdjW0Rlq3XfvRunlVXHB1vEwwjYxoeSQjIYPGQflO8zg1 VQmULDFedToY5UFLffLwPoe96g2HlGQzzbL/OQ== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023190924 20251016180924 63136 bpa.gov. HgzWFVDRpswbA3GQSWKsc2HV7AN0izW/PNzRgSOxM4z/Or1v0CWmBfySp2JkIh3BJU+GrTw1zLS7 KMaJhpJc+tI8QFiCOy0Hsab2HPTDDySEflWbgCQeuyDpD+xvn6KwYg6WvBsT+6BzGF/ICZzY5e0j L6rsNOIbh3jxbhKmYyQ+gpZN6Omy0MoPKeG/tUcd6g1T8pQxUgwwwfNucdf1qjdrsAqhpMH1ztpZ TGpDoBsOtw0jZO9UqCEYwDPj7e7Clf24T0DEcDdFM3ZHXsLMKEwtWrGne7tNWUfuGOUgOk+BFyOf +B/BKl7obUOpOcD9NR1eN9WzWS2Dn/lAeS5CrQ== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023190924 20251016180924 44994 bpa.gov. ctKHzvuyyZbJYMRzmE9+BDejG/MiU8e2RMRBMQtnt0TVUX6B3CUjR7deiQH7sljyQ4JYsnIaaII8 9SwauRlXxBm4qaW1T2Q2MsbuLJF/NQm/Hsoeu5Tsfn3nTSTs+uSpXziLqt/y0t14o3oFft3fnnUF oxIlUGr7JhPjdpEdw91xh/GdYtqcYSi2bl1Evp300NrMYc4wdqSn+2fyvY9L7tcLkCDr1mms013t utfSZPMeRS11WkagZaqFN3CijBEnqrZkFmbGCEuXggl6pYQvnh4v6LSP2taJEjTvPOrm2EF+atPy NMMyqWWMoLBmmU7mL19vbdSVtPb+o5DIk9R5Ag== ) ;; { "EDNS-VERSION": 0 }
	ns1.bpa.gov is authoritative for bpa.gov
	Found RRSIG signed by bpa.gov zone
	Query to ns1.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 16607 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20251023190941 20251016180941 63136 bpa.gov. eU5PEhULNpl/1lVi7vFCZAe5Cc/6lMU/KNad5M+s7OR2EAdyyIP+t10pWVItujmqCQ7S06/IbJ5B ClcpjOiH3SLuWMAdpyrnHpcoVbYSNiMF0sVDT9TZef6b3wAgytoqCVmRCc2RuSziJe+zene9yQxI FAidr2EskyAWxToIDorcO7Z2/u/nIE/7K6c/nS6ygNlEI4Y66zC4KfakJHsyJRs9UhBKcW8Xvm8D s6uaIzu/bP+wpFrDmJ3cKd6oU9qR96Nv2TRjBdx8O8bigFtRHTRmf3XY6aekN5kxjApnHcUmfzKu tHQqs5I2zrSGgocdfsH8RXG/22GXxb3ggFGBSA== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20251023190941 20251016180941 44994 bpa.gov. eRnZ867bSFl+Tr4jQ22r3OqFG0k/E72vUgYGa+f3nBO4FUz3Yb0GYKzwIMPIcQPAgx4ZuDBYB3rQ wP6z0ew6w3KjUqV+sp99C3hQFKlTvkgrkGmFHX7XEslx8p9P63kPm0VIeorPp/TUC2K9owshpV7V /95JY1DUh1o6ByF6Fn2YR5UcVcN6sqlKg67L30XXQNTfU4NgQI/KGObYmmkGSjlJB7mGZC2dyvO2 rKGzcYNHm999Y4c2GgVJROBhqEe69SCn0J+fgvfl7sY2JcQf0GbeDVuFM1jVR633jXQZdAeB8iSs R8AjEHtrN5ja1PLix8gSyiQ3N204vKwmCERr/g== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251023190924 20251016180924 63136 bpa.gov. d/dCAjo73jemo+Bd+fXsB3zo4g7egtGv8dHW0ewZDPdCS0DVd/vk4MChxe37Fu7Uxv2cXGFLfs3k GG9cCRG8niHdqkVKjjiEN+qy4Ne+nTCGrQhLSHiNh+1Qn6jgGjuzoFrC55X3dhK2HQ9W7TMdb4no nmhwuCtYSSDQM+ph5Jl7TZJysWBG1NxZoIBSQ2P5QABz8Vf5RVL+kTmJawuWRaeNMGEmCqXoCY1Z agUNYnnkKnvhJyYzzUF/hjmSMJWZDMXih6YDXyR65BZuuD9nbCm2bP3QrzKXM/B4mFDVLTmdlaDZ fNKERRp7fzZLtvl3Yv2kqlSnLk+92x7hs4/urQ== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251023190924 20251016180924 44994 bpa.gov. D+HroiN4uTD9BhROISvKfkcEvMPP6WT4vEF92J3JZYAn9dezKXwSgdK/UbspksWG9+g2k7su852k jYj7qOpefcEu4V/zxNJ/TY5qou5FcbOwBTNVuBE3ToZL7fmWofG6+7ea177gWM825STg1vnoBQqF P+n7LDG3zkONnbp0D7TPqn534k/jt21DDOMIaentOfsQmRQzrzgkf2HOR3cC0NVvttlUxmsTIdhm Q/M7gEuguYUOgNw6X7VGRbB7b8H9j8SF/UMGu6KGSxL6BYla57IlCmt2R1SPdH37LJdpcqRJInv7 OzP9M2JsAqx/RG1rF5XNSV5mW/GnZhEUa7IXJA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023190924 20251016180924 63136 bpa.gov. fC3YSe4XGYJ5hRC+MiebyEXMQWfntC8wG24l9gLBuZ474SrBdwgj47XgGHROV8wSQCweku3ZZzzQ 4B7T44oI/FMjTrX/wXq64xh2AGFmnHeuxo8RV4BLp4T+ojJzaAkXuyrEyBiS0+Mu89oVhkj3gfKr CK0JdSfCcWnsTGGAzFvINTfq9CpgmGxbrXE8do6yFBH1VZUcUKEWiHmus9rDtG/AC+FpRtO3h4DN KJx6ukCT8ryrL42vxf2TEQr1tNpT+UcBEa5RkidXItF87FReCvBblcmcxWaORPa3scJccMrnWFED 8SkMfax5EGW3xSEVXXBuqDXQlM2EMvVsZEK2LA== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023190924 20251016180924 44994 bpa.gov. jv8V5XycUf/Y4Cdgg8FnhWUQ6tLNwZcETVRLnvQnt4a4DPAzv6VI2ZS/dCqk8lC+kU9xpivIMoVp ck71TEJMmv+jCs5+LSEUOjFzzGAYkQZYcxwlhMBVWQQlr4yZtt2G9YbRSNpbmVYeicsjTG88Gx3a Yk24CmMf/jmLe6ltlMdqyir0eEGseJ/KF/8QAbvfixzzszmZgylXQ0+eYP7M8hDZxqSOObVbdHX/ tUKe6HtaMWEY2GSqnmap/s7sKUdJ1BxRdjW0Rlq3XfvRunlVXHB1vEwwjYxoeSQjIYPGQflO8zg1 VQmULDFedToY5UFLffLwPoe96g2HlGQzzbL/OQ== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023190924 20251016180924 63136 bpa.gov. HgzWFVDRpswbA3GQSWKsc2HV7AN0izW/PNzRgSOxM4z/Or1v0CWmBfySp2JkIh3BJU+GrTw1zLS7 KMaJhpJc+tI8QFiCOy0Hsab2HPTDDySEflWbgCQeuyDpD+xvn6KwYg6WvBsT+6BzGF/ICZzY5e0j L6rsNOIbh3jxbhKmYyQ+gpZN6Omy0MoPKeG/tUcd6g1T8pQxUgwwwfNucdf1qjdrsAqhpMH1ztpZ TGpDoBsOtw0jZO9UqCEYwDPj7e7Clf24T0DEcDdFM3ZHXsLMKEwtWrGne7tNWUfuGOUgOk+BFyOf +B/BKl7obUOpOcD9NR1eN9WzWS2Dn/lAeS5CrQ== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251023190924 20251016180924 44994 bpa.gov. ctKHzvuyyZbJYMRzmE9+BDejG/MiU8e2RMRBMQtnt0TVUX6B3CUjR7deiQH7sljyQ4JYsnIaaII8 9SwauRlXxBm4qaW1T2Q2MsbuLJF/NQm/Hsoeu5Tsfn3nTSTs+uSpXziLqt/y0t14o3oFft3fnnUF oxIlUGr7JhPjdpEdw91xh/GdYtqcYSi2bl1Evp300NrMYc4wdqSn+2fyvY9L7tcLkCDr1mms013t utfSZPMeRS11WkagZaqFN3CijBEnqrZkFmbGCEuXggl6pYQvnh4v6LSP2taJEjTvPOrm2EF+atPy NMMyqWWMoLBmmU7mL19vbdSVtPb+o5DIk9R5Ag== ) ;; { "EDNS-VERSION": 0 }
	bpa.gov A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20251023190941 20251016180941 63136 bpa.gov. eU5PEhULNpl/1lVi7vFCZAe5Cc/6lMU/KNad5M+s7OR2EAdyyIP+t10pWVItujmqCQ7S06/IbJ5B ClcpjOiH3SLuWMAdpyrnHpcoVbYSNiMF0sVDT9TZef6b3wAgytoqCVmRCc2RuSziJe+zene9yQxI FAidr2EskyAWxToIDorcO7Z2/u/nIE/7K6c/nS6ygNlEI4Y66zC4KfakJHsyJRs9UhBKcW8Xvm8D s6uaIzu/bP+wpFrDmJ3cKd6oU9qR96Nv2TRjBdx8O8bigFtRHTRmf3XY6aekN5kxjApnHcUmfzKu tHQqs5I2zrSGgocdfsH8RXG/22GXxb3ggFGBSA== )`
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20251023190941 20251016180941 44994 bpa.gov. eRnZ867bSFl+Tr4jQ22r3OqFG0k/E72vUgYGa+f3nBO4FUz3Yb0GYKzwIMPIcQPAgx4ZuDBYB3rQ wP6z0ew6w3KjUqV+sp99C3hQFKlTvkgrkGmFHX7XEslx8p9P63kPm0VIeorPp/TUC2K9owshpV7V /95JY1DUh1o6ByF6Fn2YR5UcVcN6sqlKg67L30XXQNTfU4NgQI/KGObYmmkGSjlJB7mGZC2dyvO2 rKGzcYNHm999Y4c2GgVJROBhqEe69SCn0J+fgvfl7sY2JcQf0GbeDVuFM1jVR633jXQZdAeB8iSs R8AjEHtrN5ja1PLix8gSyiQ3N204vKwmCERr/g== )`
	RRSIG=63136 and DNSKEY=63136 verifies the A RRset
	RRSIG=44994 and DNSKEY=44994 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bpa.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: