DNSSEC Debugger

Domain Name:

Time: 2025-11-10 01:47:51 UTC

Analyzing DNSSEC problems for bpa.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 61545 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251121000000 20251031000000 20326 . qnzPUNeV8plQe0Se5Fa0uHS0Ygf4DSnEekaMeH7GQRbNhk6ntkneJFKUN+EBJQfd/JoaY//18qf4 G6YrWE/a+FwJ5oefafEhuJWhITrXMle9e4oy4Z7sjb7e1ajwGSKlcfp0Rsulv/aPlLLfl+4jUijr zzZUvUJA10LzOwswvjI16xA3HMG9rEh0mKY0RywLI+R5NkYgDzY0QGL9BMaUHWNV+eTFBmMpmg3j jKGnIg8jmFhqcypUqLXW7md/oO+k0A8QG39nGvhx7rVDUoaQd7atJH2jtzGeXW8n/XI/ncI9fSoX rLXu6NvJY5bX6dXI9ypg+sFnkF7Fd4TdZ8AasA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251121000000 20251031000000 20326 . qnzPUNeV8plQe0Se5Fa0uHS0Ygf4DSnEekaMeH7GQRbNhk6ntkneJFKUN+EBJQfd/JoaY//18qf4 G6YrWE/a+FwJ5oefafEhuJWhITrXMle9e4oy4Z7sjb7e1ajwGSKlcfp0Rsulv/aPlLLfl+4jUijr zzZUvUJA10LzOwswvjI16xA3HMG9rEh0mKY0RywLI+R5NkYgDzY0QGL9BMaUHWNV+eTFBmMpmg3j jKGnIg8jmFhqcypUqLXW7md/oO+k0A8QG39nGvhx7rVDUoaQd7atJH2jtzGeXW8n/XI/ncI9fSoX rLXu6NvJY5bX6dXI9ypg+sFnkF7Fd4TdZ8AasA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to e.root-servers.net for bpa.gov/A
	Received 614 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 614 octets ;; HEADER SECTION ;; id = 65330 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251122170000 20251109160000 61809 . UKAuerckTehHMGg2WTEy+U5TuWQ3+Nmw+vXaNuZc/koIXGdzyw38o5dRb7D1NOtHJkGPC4Q6k5sC 6chQ8r8mCrc+FhlE8o0VO3Ah7zFRLQhvoTXrCY7clheaZ99PLfO8BZkHtJcEue7DSwfUWjetW8fh jCFbejZefOXdlAoe6xhCekgxrAvOpkUPwHAyi1DSp2M5vG7x4q6SH5E7kF0P0YETCroPY8IdHfJs IceMDtiJSfdpY0aWj7Qk4+2VEjsm3Dxsu+J29zD+IhJPjenjTPdES6RH96WbXvvfBx+/xCt/Sm1p X0xoSIPv0wSfnoA/2Bn4/hnzPBLG6YAOAa9F+A== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for gov/DNSKEY
	Received 610 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 610 octets ;; HEADER SECTION ;; id = 22105 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251122170000 20251109160000 61809 . UKAuerckTehHMGg2WTEy+U5TuWQ3+Nmw+vXaNuZc/koIXGdzyw38o5dRb7D1NOtHJkGPC4Q6k5sC 6chQ8r8mCrc+FhlE8o0VO3Ah7zFRLQhvoTXrCY7clheaZ99PLfO8BZkHtJcEue7DSwfUWjetW8fh jCFbejZefOXdlAoe6xhCekgxrAvOpkUPwHAyi1DSp2M5vG7x4q6SH5E7kF0P0YETCroPY8IdHfJs IceMDtiJSfdpY0aWj7Qk4+2VEjsm3Dxsu+J29zD+IhJPjenjTPdES6RH96WbXvvfBx+/xCt/Sm1p X0xoSIPv0wSfnoA/2Bn4/hnzPBLG6YAOAa9F+A== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to k.root-servers.net for gov/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 47582 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251122170000 20251109160000 61809 . UKAuerckTehHMGg2WTEy+U5TuWQ3+Nmw+vXaNuZc/koIXGdzyw38o5dRb7D1NOtHJkGPC4Q6k5sC 6chQ8r8mCrc+FhlE8o0VO3Ah7zFRLQhvoTXrCY7clheaZ99PLfO8BZkHtJcEue7DSwfUWjetW8fh jCFbejZefOXdlAoe6xhCekgxrAvOpkUPwHAyi1DSp2M5vG7x4q6SH5E7kF0P0YETCroPY8IdHfJs IceMDtiJSfdpY0aWj7Qk4+2VEjsm3Dxsu+J29zD+IhJPjenjTPdES6RH96WbXvvfBx+/xCt/Sm1p X0xoSIPv0wSfnoA/2Bn4/hnzPBLG6YAOAa9F+A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20251122170000 20251109160000 61809 . UKAuerckTehHMGg2WTEy+U5TuWQ3+Nmw+vXaNuZc/koIXGdzyw38o5dRb7D1NOtHJkGPC4Q6k5sC 6chQ8r8mCrc+FhlE8o0VO3Ah7zFRLQhvoTXrCY7clheaZ99PLfO8BZkHtJcEue7DSwfUWjetW8fh jCFbejZefOXdlAoe6xhCekgxrAvOpkUPwHAyi1DSp2M5vG7x4q6SH5E7kF0P0YETCroPY8IdHfJs IceMDtiJSfdpY0aWj7Qk4+2VEjsm3Dxsu+J29zD+IhJPjenjTPdES6RH96WbXvvfBx+/xCt/Sm1p X0xoSIPv0wSfnoA/2Bn4/hnzPBLG6YAOAa9F+A== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 26300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251219110613 20251019110613 2536 gov. j3FRDkQ+/qhx8n7XWgDk7DC6YuMd0K42x1BaoJP4SEm+WtzI5LbaxO7OS3rDz3G0nG4HtRwBe8wW 1w4LNc5mNA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251219110613 20251019110613 2536 gov. j3FRDkQ+/qhx8n7XWgDk7DC6YuMd0K42x1BaoJP4SEm+WtzI5LbaxO7OS3rDz3G0nG4HtRwBe8wW 1w4LNc5mNA== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for bpa.gov/A
	Received 299 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 299 octets ;; HEADER SECTION ;; id = 39545 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bpa.gov. 10800 IN NS ns1.bpa.gov. bpa.gov. 10800 IN NS ns2.bpa.gov. bpa.gov. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) bpa.gov. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 ) bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20251111024752 20251109004752 35496 gov. mWBJ7dT/NS5bjGiQzxFfIbWoatMDGkRc23cw9B2sCqaKcaMZlPYohgMWhuKLfesMiB7JtSEOISG1 02HjkgVCMA== ) ;; ADDITIONAL SECTION (3 records) ns1.bpa.gov. 3600 IN A 170.160.36.10 ns2.bpa.gov. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for bpa.gov/DNSKEY
	Received 299 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 299 octets ;; HEADER SECTION ;; id = 1094 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bpa.gov. 10800 IN NS ns1.bpa.gov. bpa.gov. 10800 IN NS ns2.bpa.gov. bpa.gov. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) bpa.gov. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 ) bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20251111024752 20251109004752 35496 gov. 7bM6amvXXyVtfQxvVuzKso5fW6wSY2O/2+fFIrxdta6QPupH6Ce4NKxtaBtbaMRYhsF/+tosfgp/ Ea7J6xM6GQ== ) ;; ADDITIONAL SECTION (3 records) ns1.bpa.gov. 3600 IN A 170.160.36.10 ns2.bpa.gov. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Found child zone bpa.gov

bpa.gov

	Checking DS between gov and bpa.gov
	Query to a.ns.gov for bpa.gov/DS
	Received 231 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 231 octets ;; HEADER SECTION ;; id = 36568 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DS ;; ANSWER SECTION (3 records) bpa.gov. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 ) bpa.gov. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 ) bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20251111024752 20251109004752 35496 gov. ARSP2HTV5vpyXGPFhehAfsi9hPi1dfWkpHOc8i7yaTucteU9pQm+soZJ0FXTrDNg8tlv0HOk0f61 JsMH0X4ohw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for bpa.gov in the gov zone
	DS=14926/SHA-256 has algorithm RSASHA256
	DS=61645/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20251111024752 20251109004752 35496 gov. ARSP2HTV5vpyXGPFhehAfsi9hPi1dfWkpHOc8i7yaTucteU9pQm+soZJ0FXTrDNg8tlv0HOk0f61 JsMH0X4ohw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=14926/SHA-256 is now in the chain-of-trust
	DS=61645/SHA-256 is now in the chain-of-trust
	`bpa.gov. 3600 IN DS ( 14926 8 2 fde2f4c28583adec15696547d7a62aa5fa0f7c30220be81868fdac8529289c30 )`
	`bpa.gov. 3600 IN DS ( 61645 8 2 1cd0ff5cc6076e2079e547e87b3ee6e829cc985ffedc097a8ffc408d51df2196 )`
	Query to ns2.bpa.gov for bpa.gov/DNSKEY
	Received 2320 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2320 octets ;; HEADER SECTION ;; id = 4314 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DNSKEY ;; ANSWER SECTION (8 records) bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcYSZyBGafjypJTxZGMYGC1C9TQyX48uinmeon2yiC8ZQhsZDF/+ik2PJ7CUXhmSfffhv2Q+ 1rLyozqZg5Y40iGPEJHKX7YA6+sH7eXYAQEEGIXe4KdX2BiMeLAnsstn6FmoFa5QW1gYsopSWjkV 9zgwBIUYm+e1qr1Zx3X405TvIBdSVB+5PGrWbvjcbIYY7aqjcSvCPOTEscByZpXMkMIL6m0fGwFF 2GqCN8pgTk5oUc/UygazskWynGaUSdXxScaLCi1BWsJuQH9e+F40CEd+AzKhFVx4auogtDS6LHb2 g2riq94/c/EZBJ/ffoyLoZeTtIX7LcgaR+tv6P+fgwU= ) ; keytag 61645 bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAb5ePz/0eR+f5vr5xbmM8tQEr64favsURzo3kA7DWerppoDCUeXRe6ivPkAOY9bk01wQhfUs qwjtw79HcCpsfaekD1VJUm337edVdkBeZs/ikujeB3K6834OW/PWKgzL35bPnlixZ/0Jp5zCTk2A VggSuZzxM4T67UGSqg+oQkDcPBY5gf1oLakvxl4H0IhCuEppXVbcV6J6o4PvR04Rt0wU5UUjzJ+P cXBuqcwZIXa4FQDJrVEYj68VF877u2UwYQ5FT+v7jErKQkTPvLpglqAkHiuuVrRSKVjOY8T7AjTJ IgBaixQZ6KPZqr78XUOQ0zl0pke6cmlCEzDE1ufaOgM= ) ; keytag 14926 bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAb5nRuHTr3GoWVE8K7C9snOT7rHI6V9EwRuQh07oVvXQAppsGfsXXNfRsedWE9eLqN7lxrFR dLOC8H7WcRgJ0LojK+E63s9TWIte8Dzw7TVVh2koWowxDU3GwO6ETaRJrZYLUAShjRCn527qietw 810hfSHfyNIchABltgDkK/WlRTAcFnkgSygEtMLbkvRRvaot/Ah5JeB9z5/sqH2Yn5KR5W8K0L/h 5aJVNCj+iHBwH74jbihpWf6+QX+uHwg50Ub5Nkx2fA8KQ2Ic+eoBtt9I5CXKP6/SAYVqmDkOhiwU vdk9D8ypMg6lbHVa5qV8aWjrEuOmb1mSHE3ym6VASRs= ) ; keytag 63136 bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAboK5MSM3FmOb92fPTwucTZ3aDdrwPRL06Y92drv9U7hk3cyfBG9qWbMrR/cT/3TTQ2qiTkh Al+WGLCOGqmqWMKJdIdjtedXhtJ+JGvFdKKoS+YJ8oCd+CNblHU9uSsSiiFy0fIz4yrBiBJIqT9r w+Ts16Wv6WLfLEzcCZhgmQLPstvPXZ+7U/wMH5p39RrU5cyD4jJruVs5hfITUBBikIRvOp80Zlmr UsMBMiSnzJBda/H41tNVOm5YTZDUwAb7xwZmP/NzU2qHPiv9ZzEnE8RBxQ4Q7xUKAWwwAXTl15kQ OWL31Hxevnj6SYwemsFd+tz68EC/bSRUGnxaWkcoLJ0= ) ; keytag 37540 bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251116003736 20251108233736 61645 bpa.gov. T3WSLuecIhx1f7e3atM6LbZOpqdPj4zYa5zguG4b533hWZu/Vv7rADtk6SPiQyN0aPh8hsBa+j5I bHuIorhe62n/YTsoRfciievOIDrNALrxCl/NVRXev1XYy6PP880fPWYgyglGFpIzVOpvFE61AjHf 3+ZY/Noi8w1CECbcx7CTe0FfsWVNThl0VAMQpCMTxw4OVBHKBhyIk3BgWQTqSfmwaUXwaODgDIpo mVzMR3NphKow9t2B3zAYqWkePpMUySsP/lTAcTG+KhN3JbA93mFye8XUpomEnlGmhvva4cZlYHLj 5Y7ZAOj4DScg9J0+4pDR9PWGsWNs6HH3KsMrNw== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251116003736 20251108233736 14926 bpa.gov. gLaw746AfbUiNmrWA6882d6pkqs4FZnmOeoTynb5JMq4b7sYJo186usx7VV8lid7cffiTvbsTDc4 6doBDgQwWn0X58vkRqT7f9nHPjLz7R90+6R7Lxq+OZhxVne3oTjkH5PzKW/UIMgVFE23BDb/HgX8 wQE3L7dj/NntU6NZCJW2doBRPeEcSGe9It4EAMufcte4m9cmuq0d/8OYOMeZiy7zPbnAMicCDtKu ZHzB6qOC2Y2qZaITBBQspAp9OkdYauStyiotz4hgmZ7XPqemw7SpU0lhccn4YvCJey/hxHyOXOTO dYX+HPIthe8E9bL0WdpBA9lDznClv0uafqOD2A== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251116003736 20251108233736 63136 bpa.gov. vBg/7ByD4jXEzh4X48s6kRMVabUHGL+QaNZYJ8LumSvvUs3Le8v3956nOrvP5Aq3odts/NhY98sm EdwLtIBPPimz4Iek1qftfKoVQBDK0/sMIqai6/BgJqq4KTGmfk4iycs6vITHv0H5d6dIXtPUm+nX W1Nw/ooHHPx9nfPrwcOCxaJ6BAYGJ9xO1FYouRuhOBDKOfJL+DYIY82LVpdCAqykc5ikBTJu7xxy f+pbpnl93TR6s2XbzoQ8VzewqCLgJDuqL+KXst7Vv+oCW/tsojjrwS9YUnDUZVP6sXW9mdDZiBpz TakOK5EfLtKKE7KzOwx7MunK0V6IiPwISKAfwA== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251116003736 20251108233736 37540 bpa.gov. DYWFo3uhUEXbqYgdmHm2Fb/EpBjI+8LndBFDHuKtleJrt9qaaiJeo/Zw7P3bqgcGyNMMLiF6w291 kmHIj81CmMm/YcSFiLwucm90kdaM/KOP5/ns2CRJoC5bYkvsIIhKbdA6c6iz2BjJ80yYDWXzDUEI JETEIMtkzxfdWIVVt80WkEkSlsCtJZT0/KrHTuPhzuq9Pm4+2W4j1BdJcM8Zsmd3zUhx3OXJ8kmw Bkyg6wTOEewmuEtG0wwvIAzUuTaCKHlckquCATDQL1g5h8iInfErCZa2YKd9etw0yB2UJsM9V8bn iC3dr6T87rbK3F+McoiEK484pyqY2mYUpwybpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for bpa.gov
	`bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcYSZyBGafjypJTxZGMYGC1C9TQyX48uinmeon2yiC8ZQhsZDF/+ik2PJ7CUXhmSfffhv2Q+ 1rLyozqZg5Y40iGPEJHKX7YA6+sH7eXYAQEEGIXe4KdX2BiMeLAnsstn6FmoFa5QW1gYsopSWjkV 9zgwBIUYm+e1qr1Zx3X405TvIBdSVB+5PGrWbvjcbIYY7aqjcSvCPOTEscByZpXMkMIL6m0fGwFF 2GqCN8pgTk5oUc/UygazskWynGaUSdXxScaLCi1BWsJuQH9e+F40CEd+AzKhFVx4auogtDS6LHb2 g2riq94/c/EZBJ/ffoyLoZeTtIX7LcgaR+tv6P+fgwU= ) ; keytag 61645`
	`bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAb5ePz/0eR+f5vr5xbmM8tQEr64favsURzo3kA7DWerppoDCUeXRe6ivPkAOY9bk01wQhfUs qwjtw79HcCpsfaekD1VJUm337edVdkBeZs/ikujeB3K6834OW/PWKgzL35bPnlixZ/0Jp5zCTk2A VggSuZzxM4T67UGSqg+oQkDcPBY5gf1oLakvxl4H0IhCuEppXVbcV6J6o4PvR04Rt0wU5UUjzJ+P cXBuqcwZIXa4FQDJrVEYj68VF877u2UwYQ5FT+v7jErKQkTPvLpglqAkHiuuVrRSKVjOY8T7AjTJ IgBaixQZ6KPZqr78XUOQ0zl0pke6cmlCEzDE1ufaOgM= ) ; keytag 14926`
	`bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAb5nRuHTr3GoWVE8K7C9snOT7rHI6V9EwRuQh07oVvXQAppsGfsXXNfRsedWE9eLqN7lxrFR dLOC8H7WcRgJ0LojK+E63s9TWIte8Dzw7TVVh2koWowxDU3GwO6ETaRJrZYLUAShjRCn527qietw 810hfSHfyNIchABltgDkK/WlRTAcFnkgSygEtMLbkvRRvaot/Ah5JeB9z5/sqH2Yn5KR5W8K0L/h 5aJVNCj+iHBwH74jbihpWf6+QX+uHwg50Ub5Nkx2fA8KQ2Ic+eoBtt9I5CXKP6/SAYVqmDkOhiwU vdk9D8ypMg6lbHVa5qV8aWjrEuOmb1mSHE3ym6VASRs= ) ; keytag 63136`
	`bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAboK5MSM3FmOb92fPTwucTZ3aDdrwPRL06Y92drv9U7hk3cyfBG9qWbMrR/cT/3TTQ2qiTkh Al+WGLCOGqmqWMKJdIdjtedXhtJ+JGvFdKKoS+YJ8oCd+CNblHU9uSsSiiFy0fIz4yrBiBJIqT9r w+Ts16Wv6WLfLEzcCZhgmQLPstvPXZ+7U/wMH5p39RrU5cyD4jJruVs5hfITUBBikIRvOp80Zlmr UsMBMiSnzJBda/H41tNVOm5YTZDUwAb7xwZmP/NzU2qHPiv9ZzEnE8RBxQ4Q7xUKAWwwAXTl15kQ OWL31Hxevnj6SYwemsFd+tz68EC/bSRUGnxaWkcoLJ0= ) ; keytag 37540`
	DNSKEY=61645/SEP is now in the chain-of-trust
	DS=61645/SHA-256 verifies DNSKEY=61645/SEP
	DNSKEY=14926/SEP is now in the chain-of-trust
	DS=14926/SHA-256 verifies DNSKEY=14926/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251116003736 20251108233736 61645 bpa.gov. T3WSLuecIhx1f7e3atM6LbZOpqdPj4zYa5zguG4b533hWZu/Vv7rADtk6SPiQyN0aPh8hsBa+j5I bHuIorhe62n/YTsoRfciievOIDrNALrxCl/NVRXev1XYy6PP880fPWYgyglGFpIzVOpvFE61AjHf 3+ZY/Noi8w1CECbcx7CTe0FfsWVNThl0VAMQpCMTxw4OVBHKBhyIk3BgWQTqSfmwaUXwaODgDIpo mVzMR3NphKow9t2B3zAYqWkePpMUySsP/lTAcTG+KhN3JbA93mFye8XUpomEnlGmhvva4cZlYHLj 5Y7ZAOj4DScg9J0+4pDR9PWGsWNs6HH3KsMrNw== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251116003736 20251108233736 14926 bpa.gov. gLaw746AfbUiNmrWA6882d6pkqs4FZnmOeoTynb5JMq4b7sYJo186usx7VV8lid7cffiTvbsTDc4 6doBDgQwWn0X58vkRqT7f9nHPjLz7R90+6R7Lxq+OZhxVne3oTjkH5PzKW/UIMgVFE23BDb/HgX8 wQE3L7dj/NntU6NZCJW2doBRPeEcSGe9It4EAMufcte4m9cmuq0d/8OYOMeZiy7zPbnAMicCDtKu ZHzB6qOC2Y2qZaITBBQspAp9OkdYauStyiotz4hgmZ7XPqemw7SpU0lhccn4YvCJey/hxHyOXOTO dYX+HPIthe8E9bL0WdpBA9lDznClv0uafqOD2A== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251116003736 20251108233736 63136 bpa.gov. vBg/7ByD4jXEzh4X48s6kRMVabUHGL+QaNZYJ8LumSvvUs3Le8v3956nOrvP5Aq3odts/NhY98sm EdwLtIBPPimz4Iek1qftfKoVQBDK0/sMIqai6/BgJqq4KTGmfk4iycs6vITHv0H5d6dIXtPUm+nX W1Nw/ooHHPx9nfPrwcOCxaJ6BAYGJ9xO1FYouRuhOBDKOfJL+DYIY82LVpdCAqykc5ikBTJu7xxy f+pbpnl93TR6s2XbzoQ8VzewqCLgJDuqL+KXst7Vv+oCW/tsojjrwS9YUnDUZVP6sXW9mdDZiBpz TakOK5EfLtKKE7KzOwx7MunK0V6IiPwISKAfwA== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20251116003736 20251108233736 37540 bpa.gov. DYWFo3uhUEXbqYgdmHm2Fb/EpBjI+8LndBFDHuKtleJrt9qaaiJeo/Zw7P3bqgcGyNMMLiF6w291 kmHIj81CmMm/YcSFiLwucm90kdaM/KOP5/ns2CRJoC5bYkvsIIhKbdA6c6iz2BjJ80yYDWXzDUEI JETEIMtkzxfdWIVVt80WkEkSlsCtJZT0/KrHTuPhzuq9Pm4+2W4j1BdJcM8Zsmd3zUhx3OXJ8kmw Bkyg6wTOEewmuEtG0wwvIAzUuTaCKHlckquCATDQL1g5h8iInfErCZa2YKd9etw0yB2UJsM9V8bn iC3dr6T87rbK3F+McoiEK484pyqY2mYUpwybpw== )`
	RRSIG=61645 and DNSKEY=61645/SEP verifies the DNSKEY RRset
	RRSIG=14926 and DNSKEY=14926/SEP verifies the DNSKEY RRset
	RRSIG=63136 and DNSKEY=63136 verifies the DNSKEY RRset
	RRSIG=37540 and DNSKEY=37540 verifies the DNSKEY RRset
	DNSKEY=63136 is now in the chain-of-trust
	DNSKEY=37540 is now in the chain-of-trust
	Query to ns2.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 60488 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20251116021127 20251109011127 63136 bpa.gov. TjUggm5A6kWl2ahwGZzTHReoU20Q4nDtO+V1KNRuqxntYXchYPCIDs1KZvoasjQflPTDE2sBSUc5 yDMtYMLQlHI2ojbCeo4X92HvOvSS3ZaJhD1g8M7EAFc39BJCn2xR2M3nJxMCpEJYZ7ved4skjXfR UGdxujAMtT+U4L/k1Fs+exNio9OP0bRmYpkPOPMmnaoItSV0IKQM/AKMyg3QwFCiDEBXzGs05o0y zjWT/CUNCJkxCgaQIiFUePiHlQHFdEQjd/FAPFWV3keViJbdfi/chp9ZrPfZ2Bt/uanmir55y7bu D+64N6r85nkjcL+QUNfribYAhN2rS3ABJ+A3pw== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20251116004024 20251108234024 37540 bpa.gov. hmVxGzaqTrAT6brS4jjEFc1+3xLdzdgNLylqw7GHQxAZP86p3ur4HIDCfRoUamap9oHWESon8q+j ewAqEc4tV5/Hkl3VkMW2CSWqDtLReYNpThQ1/LTaY35w2veommFFB33x5yzjt+smw839Kc6fqbCi dkqzK6zZvBr5UUu/lOUw1BY25QHTV7lMAu8/yZMR4Z+rpvV6RsFuhEwgK+TylJJPs/zXj57zW3LI jQ5r+3WLQLPUEZrjftLYdDVCtK3CiRPBJFX1LWwNik+IFCS+nl9hPbVBcKJJBngXmPkuRx+WAz1p NaSbqpO2eWA07AU/hxvqhCmaz+RoDuBgb8p38A== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251116020733 20251109010733 63136 bpa.gov. vNCMG2pHivoGDxu5NKUBZKdXilVzHmiQWt+7oIQ6U4xJPn3nMc1Bcte+xHkyeSdfG2jC3a4ybNeu x/P5IaILvwJvMoWJxz4y+FftfE85PztzCwX7ixGoUvJPSp8n14QIobnT31fTUSX0qd5/bsWwzZaA 7Yd0JR10w2oCZjetSuem2Oixpqnnt5fC/Ho95gXJpIhqDWff8RQJqgy7sHjrXvuCOxC1wWJyXU0D zvX+7SZdeXYwOkdIHQ8fxAi+9lbwe7k3O2TkV0CIqqoXmfF4ndNXjCatZCpOCTofcoJB9h+fMfj8 ICGB+pW8v8c1lFAYng3lTl1hZdTA9VCybc4w3A== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251116003712 20251108233712 37540 bpa.gov. E7uW9FgoG6C01qr7E7gEvPRV1NEFv6m0uWJP/uTTOoMCo2hm4RMYbARm9PFhQjjJmQTVFL5JURee nJKRfMMkExaGUyMg2JVhHR1Y4zex68b+M9h1iH9zF43FEdbam8PNZBKkIAL7qU5ZebvYYIYCNPiO YZVbRJY1yqEnDY26ktPGYx88s/DeTdVS2kq+FcgB9vZmn9G0TQyzCNHDpXmVSjzAkRzsn0QjdYmG K0giuC1hDcfZQ9QNCcL4cse9D7+/Fcbax9rt/cTIxIq3OymQ1ci+MQITNAgwIsPNf4NDjCiJC6rD pCKWSg9X0rq8l5R4ScwODIrD/+GaX3Wx3FSTaA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116020733 20251109010733 63136 bpa.gov. gPsTP5aM+LpPE0xSba7mi+ZQbTCr+z3oYb9O+vy/t54LPVLdNImAT+qg868lZAypkyimmIjLV7B9 5a1gJHNBESrrgbXC7M1OrKuF/f5DbtlyJZTjeh1qsWdMs2cg/rmvZHpyJ7tg4TZ08XXkem/VMK+F +1aaKb5J1FrHeBPzTzhQYGR7dEINIQqFeAqSqgRar7v6GR5OvadB4GAH3tJX5FSMqJTnNx8JK7uI 2tZ99N8/rZqHXQhkvzq8p098qNMSoyIjCpnlPXbY67g58Aix72cvNbnR8sSSWjp96a7NeTpAnjgq YN1zmeweXwTxbtbFM1HJW47OYomFMnFagwbGyQ== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116003712 20251108233712 37540 bpa.gov. VWuO0U5szzh0MRgO7tdj2fBU9fI12FGwYopfAsSP26vF1vL6Vh7k8QLJFYRS6t7MArojCAhvQPpd VQ3Lmh9f2kweYtsBG1ymgV8RgdkSVToULPCMlmrzvHa8TaLKCS5zadbl9ZDyn7IJhN8eSVSY6btU JxZcac5aJAZNo6vtaz/RthRXeNwhvwLYxvezb7pSfUS0Lu2CDeb+CvPJm/FuAmLerZHGbJwPXQ87 INYgo5chZaGi7whfdSJh+RpPNSLX/RzVvNpp6TGvsAAWyXleIkkiKvjG/n259SXoJqVrW+OsCehq a47SW+XqXZyurjLvlYxJ7rG6XkpExQERqJAiaQ== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116020733 20251109010733 63136 bpa.gov. YV51s+dEYQxTH8ONR2/ZE0cxv4x4UxNt8/6ZbzKnJRtLjfUPmCbcLc0HnF4vh0jmszsAjGOVlW82 EEpkAJnNWhqlTTgkSPBOmD/P/lOmsNtoBSpzoNYes3w503t/A/Bvxek2cDbYwD0Lv7pb6M1KPnpo SLWHNs043Na9fGyxgzZS4SODgAqxz1K5DviGpL0Nu09Rc0T/QfC6fBtmUdwuprkIvvMFJHifAMml PVnm+IgACJm3VIt5JWj0ZZ/dvs4d7Pa+UW+xvxAsBaOl9m/AhisfEpDLKuP3/J+36QuoTjK8RsiU Qj9sZBf2pSMYar7Ozk2uy432Rp5k28Dd7mKsVA== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116003712 20251108233712 37540 bpa.gov. GHfgWc3slUs1Eqrwl8PKVdQvnMXi+5f7wYPZn4h+vNoXPvd1O2OSVW7vMNplqpGEp8VfXZ+rgNBr pWT4x4EWUmgGivlrV/uV2CSQEIB5PpFHGTniooLzzxtbEycPpw4fTSsvVTuEdIDQON9GF84aIknZ Y8otRUfvj5UsKMqyrFRFPQjETbRrcjWQeUyvabp84IihrYpi2QD2wtyjZ0/py+dc8gjHQy2gW82H 3w0NLtlB4XscmhzDNEpjGIcveomKQ84/fNTfLI/cygGkVygqmciOa2/uXD1jvUos+xG3nFcu3YAe 0hDkm++/L3nQwhEKnJeJIwvgOwleYlY1agYIzg== ) ;; { "EDNS-VERSION": 0 }
	ns2.bpa.gov is authoritative for bpa.gov
	Found RRSIG signed by bpa.gov zone
	Query to ns1.bpa.gov for bpa.gov/SOA
	Received 2511 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2511 octets ;; HEADER SECTION ;; id = 46291 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN SOA ;; ANSWER SECTION (3 records) bpa.gov. 43200 IN SOA ( ns1.bpa.gov. hostmaster.bpa.gov. 2025102101 ;serial 43200 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) bpa.gov. 43200 IN RRSIG ( SOA 8 2 43200 20251116163959 20251109153959 63136 bpa.gov. rJOSCS5DZZaLgZa476k2lKR2xTOylX+15NF85YJ1ruqp/E+HFSIYC9vlmAWa0rg155xY6CaUzBPw thVEphyM4GMgc8FSbOBpzonmzwOQTrkXw8fejtiZDSgk6EHFsiXDCou7NUjwwHHur6a8Yo5tzuJW zPmit6l0WNRpXsXa+NHPaoaHjjBjze9zIVrvMLPSqtLxcqzcXNTEXMd3Wi+1nbnKiCZ91nEbSVcd Ump6Z5Io+KjmXPxMsHo7Z69sVZNl9arjmkD6b1VM9zSJdRwaeFkPJ5tum1zKkHN0IJexlWId/aP2 vdBAfxXOQjXQVOPZNktnJtQmhS8hIZKjQgGGCA== ) bpa.gov. 43200 IN RRSIG ( SOA 8 2 43200 20251116020413 20251109010413 37540 bpa.gov. ndh6c+/hdZ4aSy8OLav2NmWDjgO3Aen0u5aVbF8TmoWuoLPg0b2FMHDDXfO7Ndpw/5vShGQ13EQf Emtf5GkkxW+FoFylDWkNGjHFCoU5SZgAF72qg6/LAs/8vlVUoRXidG+LkNuKAbVSruChMJ/ILvQm LqbNaLHZ3ntyfshVvnlFFaxIpj+LOk1Vf0JDYniV/HvRuSg8C3wx8GIu1wOP0xbph47OhSsNgFOr lVPwqmMSwZsIyOAoi8ek35nbAl2ImY7tOys/nJQF7TI/pQBP36zgbMpkSx01NtgsNPa75FDJ0hGO +/4zEzVhlybC3SyFkCjDd04WTiVUC/1XANM8Kw== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251116030931 20251109020931 63136 bpa.gov. WC8PELU4EnAmc/0Hb+gVuTVrAV+3EwzaO22wyr4AEVKvvBPY4lCqTjkJkJ/2aUoaMKE9r4C2XLbN VhWNbFO+CH1clK457SaGMXlHX9zYjfZYA7SUGxt199DZapBy6Vh3CP+7IRgpKd+WsWFJgdAVQKNj Cz5PqPQXcN2zQd9jqhF6Hc4H4jelHyY+G3wWC0Hwm+imTz0TJNF+vOYEviY4Le06V00KfwEtFcIK DyLLlLbQjjbZtFSmbaD0IyDrhXoL0yz0oixuEnJdZd92mBZi932p1aDn/hngV3VZyBFYHcHVKmH1 0sPabLpcy+7+fgUpfNvm28Bh9Djo9ZMW8deERQ== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251116003709 20251108233709 37540 bpa.gov. t1dnoFxXsmoLUbFpRuGm/wU7bbm1pJTz5Woy+YcAZyoEyied2oJjl73wP/4dg123eMtrenOqb6dE DOFEBEzL6yIyKBZ7dgLht/VMK6ZbQfFkp21AnKOWhhzILT7WtSfWliHsaCYCDRX0zNUuYxfuF++Q pWFXu+Qz7FMj3fXKdeFfGVX+Q5Lcv5X7OtIcNhCBUSeB435L37OesCDz4+HAyikRdacrEo9iScRu qqgr8TKJ4LIjAefTj4V3kPCquybG0xkK04W/M6Nu9b3ob9S/GVcCZl3menSU3HqtDSU0vStx+aL3 7TrbBFvjPFjAcl1crCzP606wxHlMeqpezQh5tQ== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116030931 20251109020931 63136 bpa.gov. geqUemVLv0bqefbH8NsWgW2g/nApQldsuSfJas2nnD9LLIFl1zCk1gP/AuYIrYR6+UsKSbJeLzWo rSxZHJVIgiOMSnK41ENMw0OLpTyRZQIq4IvUEGwHYmVIrihpY66nJwfs313qj3BJqyLZD8eq3s8f gxw6ZITOkisQAo4wOcLj/OjVjL85QXKH1Gr8szSTGtOE8rnqmnNNqO641Ier8JopRWQ6z/I7RGKk yTrbwNn1aTsMj2fKU4YwgC46Fx6q+Wp3pCywoQNIVemXExyIcdoMYoTQB96qQPi1PRS10XJGuGSe qgoRRD8BybSklac0PE8Vsicd3abfSVGXTU5nnw== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116003709 20251108233709 37540 bpa.gov. X2zOjS/tyCluaJmkDmFd8MWCXzG7Us1n2Gt3maqZIEj3bwGY4O+aRRFdYy20pFeAKQjaCyCBOkcE QK/pnThRm3gG4HTMA+AR2UAptqRW3aZt9mwFP7QS7tti6/RsiNOJ5locYIptTK3kbxXzJZNG8esj NU6AYzdGqqpbnV8TBrGsHCGs3Ut7dsixczj116g0Na8HCDKBV/NtCFbaeHSlz9us15ZOdR6rhxL6 naDYVpEX3t2pTG65pyphU4bY4u6unp15VxC2/Y1qhmxqRAjQPpWNzpbrkLnaaRljaZIkimH8mU67 B1WzEvt0kDVq5n+4FT7oTQM+I/nJNILwhh2nFQ== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116030931 20251109020931 63136 bpa.gov. RpOF/umqgtvSx/nOZeZRlAhCnda+UIIVoxVr1kzkF6ATGjMlTOtTpFPSafFKB8oWRoDzJ829WURs epjxtTx/AYZVbbsKw9TlDDe7iEWavR8hJhXfdeGJTHPbXmFbxZMolKQyeioqX2DEXu6JIt5TWLUn b1FihYkshprJgkKSM/9bJdbqKr3nBvLi4YwWw5vBCiRuDGpbkFm7DzO9NevZVXqHlsZo1O38Phqq k64JYIFTVHqeVxKCNeQ0oeBJvW3dhPME2cgJb8qDHzpCsJ72K0wmV8Mp7rI8BBZj7WYEtv2DouD2 K8ODVVOIwfrbXK8nWs56Hvs+8QaqOZ7s/Zlhnw== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116003709 20251108233709 37540 bpa.gov. nd/Zjtblu51ZcbG+MjWR5kGxqQswi47+j+Yw78/OVmOmTbtE7JIQs8lkcdOkrK90PQ7LN6j2Uh/y sN4tk9h1hhnzjb35MQnQluwmUfS2oiMwctJHzY5ZY3eLYxroIQ++RkfSi926ajRC2YnoBwS5MZ/1 lC1YOPqSxbnpssKCPjMki/7Hep0roXJ7dhDHtx+SHk8TTaxfnO2+efkEi3w0BjhwwuZMtXeOtHT0 4KEMy8MuE6Jj3S5ejSZEMcp3ItYEvJhZZ1gbsf9aqM9H8AqgPaksx02xs4Zv7d/H8NLIGL5XbURp EgABTkBdCHWiRqVdE4UmHwvApGzqR6Ahahgp+Q== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 4335 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20251116021305 20251109011305 63136 bpa.gov. AIzIv2YutF5EuvNsgLL8KlEr/brhyN4e5g2dDrIgLFEy0SsgSRL5hyQ2M/V4VGgYrygRQnSyNDRD nrKSHNlgKn/Ss27QOcEwmaWpvnXzL5/pl/p8s1YZPbYJjTSOihCfbx8otBb1eaavtdMaN/frjLz0 lsZZIGHdAcBvJlVZ5FMgfn05Ag8ddLwyDRs1acFEKdmL42aC+W0rYthPKvtrD/2Proi+6HALdGfJ D4YShv+KUsdnHSsgFLHhdDCU2/om8iBnIllPQ7BXSmlN5Lg7Xug7i036b0hPAcJ4WIbPCVSX6Zz0 f/v1QWovOBctxyl3bGKEEUAlwxr7VN+bP5Z/aw== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20251116004404 20251108234404 37540 bpa.gov. lc2pK55eyydtf0BpAZAGvx+hpJDOd1UB45SxtXdA/YiGvo1g16A2jLZmleGyrQv2Y8smt/nmrZbQ GTXkKcAe/3o8ivGi1flD1Qd8TkpHIWEqFmYsXUrTeqH1Wo6izAtqEWz2zlAyyvUWyq+G8KwOKml7 g0e2sf9T7v8hSO/BxB29D+bdEeoMP0lo0bNEdXLqjGcsS0ozyqC++wsHlvNHARKq8FaTGwQk3sdH eb1dTf7yUOs5G44Qotl7+Ezo6llNeNShCDScb3ZeBycEGDI5BfAOPT9iCYX7bVt/lOrzZbYuzyG5 m5VGIvTrFNT9FqUqe9OJ+RBOsKOZ8KRyCh+oZw== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251116020734 20251109010734 63136 bpa.gov. QY6A16geSTPu9JavcGWaZGPPADD85sK2C+FmQ794YMawGWseIu/h+b3zc16fi1QaEHY2jGgdiLJ7 xt307W3sHdT6GB4HKTd8nVKB425S8dBcFeOMdeudT9Bu7fHz3D3aAG+sbkCDbo7Nf1PBK4dM5qqX Ih01f1obGy7Bw9bIkn/T2ftlDwQnprO6t0vGmPEL73Z/P3SLwsiRPgK/ZV905dUVK92Dg0+eU2KJ pdNOyk8Fu1sNmtLNBQdPTKoRXig2YvihjKY8F3fZdhEfzpWgDkKZK8RbfTG1yxAYL6cOaNCB7AOE BO+FRMBa7u+wrZ5S/YrEs7J+0lOzH38OCNp4vg== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251116003712 20251108233712 37540 bpa.gov. E7uW9FgoG6C01qr7E7gEvPRV1NEFv6m0uWJP/uTTOoMCo2hm4RMYbARm9PFhQjjJmQTVFL5JURee nJKRfMMkExaGUyMg2JVhHR1Y4zex68b+M9h1iH9zF43FEdbam8PNZBKkIAL7qU5ZebvYYIYCNPiO YZVbRJY1yqEnDY26ktPGYx88s/DeTdVS2kq+FcgB9vZmn9G0TQyzCNHDpXmVSjzAkRzsn0QjdYmG K0giuC1hDcfZQ9QNCcL4cse9D7+/Fcbax9rt/cTIxIq3OymQ1ci+MQITNAgwIsPNf4NDjCiJC6rD pCKWSg9X0rq8l5R4ScwODIrD/+GaX3Wx3FSTaA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116020734 20251109010734 63136 bpa.gov. PK1OZoXnfuZS9p4you0xvWPAZFMPxHTbYG2zhENedTaoqSP9fCITlpThPQUwnQEokf1BdszAQxnS zfA5YIqCkKU8yEeoOFEBTZESdPxUE/8NXP9zRrTYr0mkLY9WqnDncAeM6nuS1PArrK9ZQXYQEoxj fxoHBGLI4st8sqciQwvZlwTTcSjhAJBF2vcPnf+ss1c2NrhaUsgH8Cl5FPdUViVOEov7M7ElAUSg wpC1JkyI9bQh1FclF4MWQDCMfa+irB9laSZoho43xTac+Ubx1706mKeFnJnlejF3aSHEs6XdQXHQ V/ajSEuJGR/sc8keOmSlOXbvqNyux76D7uPa4g== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116003712 20251108233712 37540 bpa.gov. VWuO0U5szzh0MRgO7tdj2fBU9fI12FGwYopfAsSP26vF1vL6Vh7k8QLJFYRS6t7MArojCAhvQPpd VQ3Lmh9f2kweYtsBG1ymgV8RgdkSVToULPCMlmrzvHa8TaLKCS5zadbl9ZDyn7IJhN8eSVSY6btU JxZcac5aJAZNo6vtaz/RthRXeNwhvwLYxvezb7pSfUS0Lu2CDeb+CvPJm/FuAmLerZHGbJwPXQ87 INYgo5chZaGi7whfdSJh+RpPNSLX/RzVvNpp6TGvsAAWyXleIkkiKvjG/n259SXoJqVrW+OsCehq a47SW+XqXZyurjLvlYxJ7rG6XkpExQERqJAiaQ== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116020734 20251109010734 63136 bpa.gov. Ht25+SgBMp4+nto8vOVEr32yxOzk/IPeOo+VMoR6jWyYm4rrNrWojNMv+T/jNac9rZKMHgCXCVQA L1Azdi3RLsMw4J3Urpq0HTzHgNqWV2TfyhnOpM2pvkfsDEySEjB5xO5E5+bd1ppOI+2TL2ofq1Li L0lX+6qQHEazu+1MEir+Eetk++/etFjfH2j3maloXUxmqJMS625WMtrPQTuv2ZNu5CjvUH73BIRn w/M0qztahp+W3N3tR7jYv1es+VI36bOJv9elP55ppFl9XAiJfzpoYWNFTSEeJrXduaYQRtkORKkc k9VXgBYLP4VpUYdCUOhmQco/Gda25MhL4Il7MA== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116003712 20251108233712 37540 bpa.gov. GHfgWc3slUs1Eqrwl8PKVdQvnMXi+5f7wYPZn4h+vNoXPvd1O2OSVW7vMNplqpGEp8VfXZ+rgNBr pWT4x4EWUmgGivlrV/uV2CSQEIB5PpFHGTniooLzzxtbEycPpw4fTSsvVTuEdIDQON9GF84aIknZ Y8otRUfvj5UsKMqyrFRFPQjETbRrcjWQeUyvabp84IihrYpi2QD2wtyjZ0/py+dc8gjHQy2gW82H 3w0NLtlB4XscmhzDNEpjGIcveomKQ84/fNTfLI/cygGkVygqmciOa2/uXD1jvUos+xG3nFcu3YAe 0hDkm++/L3nQwhEKnJeJIwvgOwleYlY1agYIzg== ) ;; { "EDNS-VERSION": 0 }
	bpa.gov A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20251116021305 20251109011305 63136 bpa.gov. AIzIv2YutF5EuvNsgLL8KlEr/brhyN4e5g2dDrIgLFEy0SsgSRL5hyQ2M/V4VGgYrygRQnSyNDRD nrKSHNlgKn/Ss27QOcEwmaWpvnXzL5/pl/p8s1YZPbYJjTSOihCfbx8otBb1eaavtdMaN/frjLz0 lsZZIGHdAcBvJlVZ5FMgfn05Ag8ddLwyDRs1acFEKdmL42aC+W0rYthPKvtrD/2Proi+6HALdGfJ D4YShv+KUsdnHSsgFLHhdDCU2/om8iBnIllPQ7BXSmlN5Lg7Xug7i036b0hPAcJ4WIbPCVSX6Zz0 f/v1QWovOBctxyl3bGKEEUAlwxr7VN+bP5Z/aw== )`
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20251116004404 20251108234404 37540 bpa.gov. lc2pK55eyydtf0BpAZAGvx+hpJDOd1UB45SxtXdA/YiGvo1g16A2jLZmleGyrQv2Y8smt/nmrZbQ GTXkKcAe/3o8ivGi1flD1Qd8TkpHIWEqFmYsXUrTeqH1Wo6izAtqEWz2zlAyyvUWyq+G8KwOKml7 g0e2sf9T7v8hSO/BxB29D+bdEeoMP0lo0bNEdXLqjGcsS0ozyqC++wsHlvNHARKq8FaTGwQk3sdH eb1dTf7yUOs5G44Qotl7+Ezo6llNeNShCDScb3ZeBycEGDI5BfAOPT9iCYX7bVt/lOrzZbYuzyG5 m5VGIvTrFNT9FqUqe9OJ+RBOsKOZ8KRyCh+oZw== )`
	RRSIG=63136 and DNSKEY=63136 verifies the A RRset
	RRSIG=37540 and DNSKEY=37540 verifies the A RRset

bpa.gov

	Query to ns1.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 62313 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20251116031347 20251109021347 63136 bpa.gov. aj0QDrwnfs5wQRLVeGJ8K5U2GETK5Tfkye/a6FXdAAwsSIKQjoQRFBeeGmG5xafUcJmdzb9K7fWj gK9dGGid2XkaCddPqt3seUER/LAS+d1Rz11tOq8IORvR7fMp9Ty50TMgeCA7fE9GYkqHGj/n/8fH zznxrkKKYNEruABybrFMD7rOjPwd4ilsj1S5eorBP2AYvHQ0QwROkTagPKJ5/c9B6YvnxjZUNrx3 XDkF5HGYnCzCUs1xIM9dZt/zaNGemsTAoJ0sSNNW+GN6M6L8ip7SoNEbhHUaQZOR7BEz88lLV0QM OI51txr9TW6jC4OL2drceGriWPjXYIIW8IOCzw== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20251116003928 20251108233928 37540 bpa.gov. sj00ugI7XRSlcaXYAtI5Y1p1HteJjvUOHnoexKM1SH++dwIPEjsvz4vP8OdiGoEZxdJTFObOySur ei+UrtQPQzenoPDNlRy46AFWrfaOH+Hb3BaErWRxTU+CGGEoNidK+tK7BjnCC+kzZHVAk0BdKT8Q H9nTTaNpOaaDfsQRDuNVpXxnZa7dz1PkR3eLmpmMGmAfBdTOuxMgQeL3mdF4GnCZLNIS4N+fpDZA ZvozF3XyaaOPHWai6ob+rDpI+tIR7sgUFNTMZzFqpqGjo5BO4bBhPyW4DLtRNwFxrR1kkmSTY97P RC6oEPJXNvsdHTV3d3e6V00o3Zo7pwDxfG+n8g== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251116030929 20251109020929 63136 bpa.gov. FF3IRhHnNX6/Hfm7YL03hpdTn8L5LYF73uUYSnjcqn2LeywYvLVhY9HwHBFscVu/AJp46kStrX5s kob1kFUMU0PoxrseLib2xvyoz4nAdLzr92WVVKZO70epRcE/dn1UbPdPOQv27o6aC8w0OKAvIH9O la3OJalx02CakhTmsfRk+2qW6bLkiuqchu0Z7GUUukmOPyiptYBmXQMFXaCC9Tf2Ep6fOzrjhfsk A6OAYJcUo1zIoKr9o52OmgOmCplDWALIN1A7X0Dyy9bGDhsO9mfDzDGujMRyXrlI4ST6m8hXKRtN i5HbFj6dNU+FXB7VofBKouUBL8jGWE0a99P7yA== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251116003713 20251108233713 37540 bpa.gov. nRDI8TCkjEkZFMB8MymlybWrHrOuYqvjPVe56QlHfJ8OXsz2NLfjL2ZnhLJEH/pa2ZzxM6H5rvSf 8oCgGucHUnr6mY0QgNMg+uBaLpLQLME65otVb4boWrhjShXiigYctzeJThdmN3PTYi5R3VeTBWq2 YUXBnNPIRaL9VynQktgGjYNdNSJMycjBLq68InFP6SGd3RLltBEWXfw+S4mOCKdvn9ZJXjE9EIke P0BmSnoYtn6+GvDE9itdVIZQS0iWZ1r3dlU9eKiIeEdusuqOx3NH1qsUlThDkYqnY+epYALVk/2g DPaUe3dfPEqgnh0v8nij68uYVxWK+ftoy1eqOg== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116030929 20251109020929 63136 bpa.gov. T1S3SduPGN0jwHQTDpxzs2D0slYtKGae7OX2JPPH7D1AqI9qBxjcz6LNJbrpmpnl3vQnOviuig6h /3USPJ4Ogc+CK50Qo2QUV4rCTr0nav3wvVBRHgUAGpIQx0kyEC0tXGvLk8JRfPkBI10XLXjgKa6M 3qbGpglZLZ/DDvojG72EultyW9GHd74UQBUoji0rtHMTCN49smIR9WyQzAqB+5YxYV36iSrGiGRV wNOlzGtABt4WTCPjuJyMorh2Hsk7dgpZj7xMCB2VDonI5hk5D7yI6QzInqk81yNeJ6KNgNGKeYvg 75cLxVvpm77fuWzwKdwQ1+a5OtuEksB8faGLsQ== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116003713 20251108233713 37540 bpa.gov. e7o9g8s9p9eP25txGTTVwrL6U4E1BJEsXfXwy/y6nnRpjSQQBIHR0RTrtuN7xpDnVW1M+NG7CybI y2vcsBkanNbNmkgp23enbG1m68FEs1ROiYX1nJTG6FLo9pMb1fEBgJ3XS0owZg6C5CBm+/LG3Y+R ha6wwaFRXgrUKAV6i1rmjIKpOrtBofT/ULQcbl6uNxYfq/7YP81h9zbEGq0jBqDG1pT9uZ+ymkpA 8tvqEKCEiFve4St9ZSmjDOj3gwsEyPfgEMkTIvFdQnWVnUaJMgTBlqb2/xo6KNg6LopypgkPj96Y CE4VXBHYgcEvA554m4L92UiuU3+4l+d/quG+wA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116030929 20251109020929 63136 bpa.gov. UBy3mDBefAb5Qkf7Du/FZyPw1qImiu6kiywQb0L6W+JunC5BSnv/DLox4UZKwb5ztiG/HUzOuO/W 0uRzTmTaYzicxYiNIpfhm8w1y/BT02n+WudSgYv/OQcbWkVY/ZyVPtmHHnHJVOaSCNh+io1i6MRK kV70ZvEk9BE83YUCKaP7skw3BJgunqeezif5fO87kFWllmF1WDuNzjEIpLrzcjFadxcNtrQ448r3 dokPNIEY1GbUotkeK2O2anb7eYR5bLgVNtV7FS5gSoJU0FHzaETC2MeUa8/cRQ9dFF8CvybMFkGa B4DniznyL33gfVqrlU4g2C4g7Y1lLV2WLmTolw== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116003713 20251108233713 37540 bpa.gov. ex6dC9Bd1KA5xY0WYwP9qsIRPD8m7Z1r+nlE1c6Tzj5EbOSFp2qp7niLSCRP3mw6+SyNykWcHnhh L+O7RUXlYXYJ8bWJpFDQwZZFplM4SXMdmXxevb+yVv2r4EloJ0eZiZh9XK5+Pxj+KLWR/A0E3pDv xgDCWtvofI+5vBjI9kanNll509lEdMTdbo/AZUX06vceiaJVYdH2cCt929yM1aPPxmPk2YSNHkJU PT2582S0gzAo/WkX6ul/JHgaY99dG1fQv54oNMiXvC8+iype+U+2swqo+1Y64o6OlC6BMN3nkw3j OLAWIz/ORcuA0Owl94eqTGR6gqqOps5aWYSsCQ== ) ;; { "EDNS-VERSION": 0 }
	ns1.bpa.gov is authoritative for bpa.gov
	Found RRSIG signed by bpa.gov zone
	Query to ns1.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 58464 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20251116031347 20251109021347 63136 bpa.gov. aj0QDrwnfs5wQRLVeGJ8K5U2GETK5Tfkye/a6FXdAAwsSIKQjoQRFBeeGmG5xafUcJmdzb9K7fWj gK9dGGid2XkaCddPqt3seUER/LAS+d1Rz11tOq8IORvR7fMp9Ty50TMgeCA7fE9GYkqHGj/n/8fH zznxrkKKYNEruABybrFMD7rOjPwd4ilsj1S5eorBP2AYvHQ0QwROkTagPKJ5/c9B6YvnxjZUNrx3 XDkF5HGYnCzCUs1xIM9dZt/zaNGemsTAoJ0sSNNW+GN6M6L8ip7SoNEbhHUaQZOR7BEz88lLV0QM OI51txr9TW6jC4OL2drceGriWPjXYIIW8IOCzw== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20251116003928 20251108233928 37540 bpa.gov. sj00ugI7XRSlcaXYAtI5Y1p1HteJjvUOHnoexKM1SH++dwIPEjsvz4vP8OdiGoEZxdJTFObOySur ei+UrtQPQzenoPDNlRy46AFWrfaOH+Hb3BaErWRxTU+CGGEoNidK+tK7BjnCC+kzZHVAk0BdKT8Q H9nTTaNpOaaDfsQRDuNVpXxnZa7dz1PkR3eLmpmMGmAfBdTOuxMgQeL3mdF4GnCZLNIS4N+fpDZA ZvozF3XyaaOPHWai6ob+rDpI+tIR7sgUFNTMZzFqpqGjo5BO4bBhPyW4DLtRNwFxrR1kkmSTY97P RC6oEPJXNvsdHTV3d3e6V00o3Zo7pwDxfG+n8g== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251116030929 20251109020929 63136 bpa.gov. FF3IRhHnNX6/Hfm7YL03hpdTn8L5LYF73uUYSnjcqn2LeywYvLVhY9HwHBFscVu/AJp46kStrX5s kob1kFUMU0PoxrseLib2xvyoz4nAdLzr92WVVKZO70epRcE/dn1UbPdPOQv27o6aC8w0OKAvIH9O la3OJalx02CakhTmsfRk+2qW6bLkiuqchu0Z7GUUukmOPyiptYBmXQMFXaCC9Tf2Ep6fOzrjhfsk A6OAYJcUo1zIoKr9o52OmgOmCplDWALIN1A7X0Dyy9bGDhsO9mfDzDGujMRyXrlI4ST6m8hXKRtN i5HbFj6dNU+FXB7VofBKouUBL8jGWE0a99P7yA== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20251116003713 20251108233713 37540 bpa.gov. nRDI8TCkjEkZFMB8MymlybWrHrOuYqvjPVe56QlHfJ8OXsz2NLfjL2ZnhLJEH/pa2ZzxM6H5rvSf 8oCgGucHUnr6mY0QgNMg+uBaLpLQLME65otVb4boWrhjShXiigYctzeJThdmN3PTYi5R3VeTBWq2 YUXBnNPIRaL9VynQktgGjYNdNSJMycjBLq68InFP6SGd3RLltBEWXfw+S4mOCKdvn9ZJXjE9EIke P0BmSnoYtn6+GvDE9itdVIZQS0iWZ1r3dlU9eKiIeEdusuqOx3NH1qsUlThDkYqnY+epYALVk/2g DPaUe3dfPEqgnh0v8nij68uYVxWK+ftoy1eqOg== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116030929 20251109020929 63136 bpa.gov. T1S3SduPGN0jwHQTDpxzs2D0slYtKGae7OX2JPPH7D1AqI9qBxjcz6LNJbrpmpnl3vQnOviuig6h /3USPJ4Ogc+CK50Qo2QUV4rCTr0nav3wvVBRHgUAGpIQx0kyEC0tXGvLk8JRfPkBI10XLXjgKa6M 3qbGpglZLZ/DDvojG72EultyW9GHd74UQBUoji0rtHMTCN49smIR9WyQzAqB+5YxYV36iSrGiGRV wNOlzGtABt4WTCPjuJyMorh2Hsk7dgpZj7xMCB2VDonI5hk5D7yI6QzInqk81yNeJ6KNgNGKeYvg 75cLxVvpm77fuWzwKdwQ1+a5OtuEksB8faGLsQ== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116003713 20251108233713 37540 bpa.gov. e7o9g8s9p9eP25txGTTVwrL6U4E1BJEsXfXwy/y6nnRpjSQQBIHR0RTrtuN7xpDnVW1M+NG7CybI y2vcsBkanNbNmkgp23enbG1m68FEs1ROiYX1nJTG6FLo9pMb1fEBgJ3XS0owZg6C5CBm+/LG3Y+R ha6wwaFRXgrUKAV6i1rmjIKpOrtBofT/ULQcbl6uNxYfq/7YP81h9zbEGq0jBqDG1pT9uZ+ymkpA 8tvqEKCEiFve4St9ZSmjDOj3gwsEyPfgEMkTIvFdQnWVnUaJMgTBlqb2/xo6KNg6LopypgkPj96Y CE4VXBHYgcEvA554m4L92UiuU3+4l+d/quG+wA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116030929 20251109020929 63136 bpa.gov. UBy3mDBefAb5Qkf7Du/FZyPw1qImiu6kiywQb0L6W+JunC5BSnv/DLox4UZKwb5ztiG/HUzOuO/W 0uRzTmTaYzicxYiNIpfhm8w1y/BT02n+WudSgYv/OQcbWkVY/ZyVPtmHHnHJVOaSCNh+io1i6MRK kV70ZvEk9BE83YUCKaP7skw3BJgunqeezif5fO87kFWllmF1WDuNzjEIpLrzcjFadxcNtrQ448r3 dokPNIEY1GbUotkeK2O2anb7eYR5bLgVNtV7FS5gSoJU0FHzaETC2MeUa8/cRQ9dFF8CvybMFkGa B4DniznyL33gfVqrlU4g2C4g7Y1lLV2WLmTolw== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20251116003713 20251108233713 37540 bpa.gov. ex6dC9Bd1KA5xY0WYwP9qsIRPD8m7Z1r+nlE1c6Tzj5EbOSFp2qp7niLSCRP3mw6+SyNykWcHnhh L+O7RUXlYXYJ8bWJpFDQwZZFplM4SXMdmXxevb+yVv2r4EloJ0eZiZh9XK5+Pxj+KLWR/A0E3pDv xgDCWtvofI+5vBjI9kanNll509lEdMTdbo/AZUX06vceiaJVYdH2cCt929yM1aPPxmPk2YSNHkJU PT2582S0gzAo/WkX6ul/JHgaY99dG1fQv54oNMiXvC8+iype+U+2swqo+1Y64o6OlC6BMN3nkw3j OLAWIz/ORcuA0Owl94eqTGR6gqqOps5aWYSsCQ== ) ;; { "EDNS-VERSION": 0 }
	bpa.gov A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20251116031347 20251109021347 63136 bpa.gov. aj0QDrwnfs5wQRLVeGJ8K5U2GETK5Tfkye/a6FXdAAwsSIKQjoQRFBeeGmG5xafUcJmdzb9K7fWj gK9dGGid2XkaCddPqt3seUER/LAS+d1Rz11tOq8IORvR7fMp9Ty50TMgeCA7fE9GYkqHGj/n/8fH zznxrkKKYNEruABybrFMD7rOjPwd4ilsj1S5eorBP2AYvHQ0QwROkTagPKJ5/c9B6YvnxjZUNrx3 XDkF5HGYnCzCUs1xIM9dZt/zaNGemsTAoJ0sSNNW+GN6M6L8ip7SoNEbhHUaQZOR7BEz88lLV0QM OI51txr9TW6jC4OL2drceGriWPjXYIIW8IOCzw== )`
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20251116003928 20251108233928 37540 bpa.gov. sj00ugI7XRSlcaXYAtI5Y1p1HteJjvUOHnoexKM1SH++dwIPEjsvz4vP8OdiGoEZxdJTFObOySur ei+UrtQPQzenoPDNlRy46AFWrfaOH+Hb3BaErWRxTU+CGGEoNidK+tK7BjnCC+kzZHVAk0BdKT8Q H9nTTaNpOaaDfsQRDuNVpXxnZa7dz1PkR3eLmpmMGmAfBdTOuxMgQeL3mdF4GnCZLNIS4N+fpDZA ZvozF3XyaaOPHWai6ob+rDpI+tIR7sgUFNTMZzFqpqGjo5BO4bBhPyW4DLtRNwFxrR1kkmSTY97P RC6oEPJXNvsdHTV3d3e6V00o3Zo7pwDxfG+n8g== )`
	RRSIG=63136 and DNSKEY=63136 verifies the A RRset
	RRSIG=37540 and DNSKEY=37540 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bpa.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: