DNSSEC Debugger - climate.gov

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-06-16 03:03:20 UTC

Analyzing DNSSEC problems for climate.gov

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 24836 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to a.root-servers.net for climate.gov/A
	Received 618 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 618 octets ;; HEADER SECTION ;; id = 11366 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; climate.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . aYWfgE1jHQHjCE/mc++3mzlC7HQMuPbq4oIprc+w41D3IDEYqNOPiEFMbLBSX9wTrgk/+l3AhJ3W OL6HevLmFXcbutn4qJh81UQEwOFB8/dRqeXoxjhSFzBk22luOf1sln6FmOBvGUrlZlul8BTV32mt jcvSm7wYl3RcBpS+MtoBAvKu5Aooxn+m8oNo51oSlfHC2hfvMny9yylYdATT68oudFYQQeghDzam BlrQd0yTAlgx67+04TZbI14AQSesBlmOSPgqN8ZJxyPraoTUbOaU5TGiUavjVz5yfV77XpFYAKI7 Cfz7VjJGuxlAn9yIaiigozN31D6Ewos4gOl3JA== ) ;; ADDITIONAL SECTION (9 records) c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 610 octets ;; HEADER SECTION ;; id = 23789 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . aYWfgE1jHQHjCE/mc++3mzlC7HQMuPbq4oIprc+w41D3IDEYqNOPiEFMbLBSX9wTrgk/+l3AhJ3W OL6HevLmFXcbutn4qJh81UQEwOFB8/dRqeXoxjhSFzBk22luOf1sln6FmOBvGUrlZlul8BTV32mt jcvSm7wYl3RcBpS+MtoBAvKu5Aooxn+m8oNo51oSlfHC2hfvMny9yylYdATT68oudFYQQeghDzam BlrQd0yTAlgx67+04TZbI14AQSesBlmOSPgqN8ZJxyPraoTUbOaU5TGiUavjVz5yfV77XpFYAKI7 Cfz7VjJGuxlAn9yIaiigozN31D6Ewos4gOl3JA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to a.root-servers.net for gov/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 367 octets ;; HEADER SECTION ;; id = 50614 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . aYWfgE1jHQHjCE/mc++3mzlC7HQMuPbq4oIprc+w41D3IDEYqNOPiEFMbLBSX9wTrgk/+l3AhJ3W OL6HevLmFXcbutn4qJh81UQEwOFB8/dRqeXoxjhSFzBk22luOf1sln6FmOBvGUrlZlul8BTV32mt jcvSm7wYl3RcBpS+MtoBAvKu5Aooxn+m8oNo51oSlfHC2hfvMny9yylYdATT68oudFYQQeghDzam BlrQd0yTAlgx67+04TZbI14AQSesBlmOSPgqN8ZJxyPraoTUbOaU5TGiUavjVz5yfV77XpFYAKI7 Cfz7VjJGuxlAn9yIaiigozN31D6Ewos4gOl3JA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . aYWfgE1jHQHjCE/mc++3mzlC7HQMuPbq4oIprc+w41D3IDEYqNOPiEFMbLBSX9wTrgk/+l3AhJ3W OL6HevLmFXcbutn4qJh81UQEwOFB8/dRqeXoxjhSFzBk22luOf1sln6FmOBvGUrlZlul8BTV32mt jcvSm7wYl3RcBpS+MtoBAvKu5Aooxn+m8oNo51oSlfHC2hfvMny9yylYdATT68oudFYQQeghDzam BlrQd0yTAlgx67+04TZbI14AQSesBlmOSPgqN8ZJxyPraoTUbOaU5TGiUavjVz5yfV77XpFYAKI7 Cfz7VjJGuxlAn9yIaiigozN31D6Ewos4gOl3JA== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 40517 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260723110631 20260523110631 2536 gov. KuwBJAdUDPtJavW6u6F8ib8E+R3O8hIRJ3mN+zRdmXbJ7LYMyAN5A6mf1nr9I/8WsCmSxZS5Nehw XiGC/1k0Iw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260723110631 20260523110631 2536 gov. KuwBJAdUDPtJavW6u6F8ib8E+R3O8hIRJ3mN+zRdmXbJ7LYMyAN5A6mf1nr9I/8WsCmSxZS5Nehw XiGC/1k0Iw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for climate.gov/A
	Received 384 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 384 octets ;; HEADER SECTION ;; id = 5021 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; climate.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) climate.gov. 10800 IN NS ns-01.noaa.gov. climate.gov. 10800 IN NS ns-02.noaa.gov. climate.gov. 10800 IN NS ns-03.noaa.gov. climate.gov. 3600 IN DS ( 14252 8 2 d5646305035daa0537afa2d6cbccfa0ffd291e9d2ced205bc90dc9336f050fa9 ) climate.gov. 3600 IN RRSIG ( DS 13 2 3600 20260617040320 20260615020320 35496 gov. HoscONGGpxl0o8AyfiNGx4G8fttq47YX4jzk1ObxdS2jBdio4NoXFKvNoshbwUuyPrzyCvKwHVEt F9ToTtFqaA== ) ;; ADDITIONAL SECTION (7 records) ns-01.noaa.gov. 3600 IN A 137.75.116.93 ns-01.noaa.gov. 3600 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 3600 IN A 137.75.112.7 ns-02.noaa.gov. 3600 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 3600 IN A 137.75.112.58 ns-03.noaa.gov. 3600 IN AAAA 2610:20:9300:1:137:75:112:58 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for climate.gov/DNSKEY
	Received 384 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 384 octets ;; HEADER SECTION ;; id = 63617 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; climate.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) climate.gov. 10800 IN NS ns-01.noaa.gov. climate.gov. 10800 IN NS ns-02.noaa.gov. climate.gov. 10800 IN NS ns-03.noaa.gov. climate.gov. 3600 IN DS ( 14252 8 2 d5646305035daa0537afa2d6cbccfa0ffd291e9d2ced205bc90dc9336f050fa9 ) climate.gov. 3600 IN RRSIG ( DS 13 2 3600 20260617040320 20260615020320 35496 gov. ec4wX0plHFSJQqvvGUw6tsNU0UjkEAH4JHAjkJ/b3NlzPlz6wab3ok1VhTfHjBHQLJG8j870iJmL x+Y0nr0BXA== ) ;; ADDITIONAL SECTION (7 records) ns-01.noaa.gov. 3600 IN A 137.75.116.93 ns-01.noaa.gov. 3600 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 3600 IN A 137.75.112.7 ns-02.noaa.gov. 3600 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 3600 IN A 137.75.112.58 ns-03.noaa.gov. 3600 IN AAAA 2610:20:9300:1:137:75:112:58 ;; { "EDNS-VERSION": 0 }
	Found child zone climate.gov

climate.gov

	Checking DS between gov and climate.gov
	Query to d.ns.gov for climate.gov/DS
	Received 187 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 187 octets ;; HEADER SECTION ;; id = 54292 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; climate.gov. IN DS ;; ANSWER SECTION (2 records) climate.gov. 3600 IN DS ( 14252 8 2 d5646305035daa0537afa2d6cbccfa0ffd291e9d2ced205bc90dc9336f050fa9 ) climate.gov. 3600 IN RRSIG ( DS 13 2 3600 20260617040320 20260615020320 35496 gov. lSmKmWknup1OlMaBNB5zH8w21j9q0SpE0CarbMJLx0qWyxr1RmVDJ7xt/NhTNQK9NqOx+WFhqYI7 lf9tR2YnNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for climate.gov in the gov zone
	DS=14252/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`climate.gov. 3600 IN RRSIG ( DS 13 2 3600 20260617040320 20260615020320 35496 gov. lSmKmWknup1OlMaBNB5zH8w21j9q0SpE0CarbMJLx0qWyxr1RmVDJ7xt/NhTNQK9NqOx+WFhqYI7 lf9tR2YnNw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=14252/SHA-256 is now in the chain-of-trust
	`climate.gov. 3600 IN DS ( 14252 8 2 d5646305035daa0537afa2d6cbccfa0ffd291e9d2ced205bc90dc9336f050fa9 )`
	Query to ns-02.noaa.gov for climate.gov/DNSKEY
	Received 1082 bytes from 137.75.112.7
	;; Response received from [137.75.112.7] 1082 octets ;; HEADER SECTION ;; id = 61427 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; climate.gov. IN DNSKEY ;; ANSWER SECTION (5 records) climate.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcOdHucxlQfBAY9Z4h9t2D5kJkto5v+ax+mEAaJRH3+a2XqBKjkQxwCkMaJuQSF5hXNjzPuk Xp9AfRpQ9qbh/XMf3pjzwNpqZh2OAXSPoJj0qt2DHG6mpQzN4+jB7cLnmy/PBH0VdIbdec1fau13 KABN8HpnYItcuItfgTUg9V5L ) ; keytag 32694 climate.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAa35b8ZqoZZ4gyWN+UJOcf4n9NZj33o7gfy5lR/uYJdmcmHmnod8dk0dGwcOLxHbj6cpc9Hn sgMv6jXgghST3l5JF+mjwEyJIvEmGsyQwr8xq+Rt74/T3aPkSIZy731MC7yHpIB2X8mJrY7WBwr+ EpGlZzQtCAhn45Z/iRldIEoiVzGF3XfWs+Cn1Ui7qCFuLyggDg/yqk441uZG9IJ009569pO6782L sRgPwIs7i/w4vVF1u/7rKAbN441p2m0lo7Q9aQai5YoU79jrRibu3rhvDJw3uLZFtlMmr0Oiren/ WUWD0pz+Y3sm8bL1a/8cEhFW+CKNNfMWiweiw/atfcc= ) ; keytag 14252 climate.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAagXbfyM+xKxigsx6yGQiUP+hHGNXoY9siYEEmpMWRAKbDOmUAupHRzzkcKsGijIu/i1lY1H ILodQICXdyqzEBkC72bLhJex6OjtArNYMiuC6uviAEdLKR5nVz5AyV2ek53RFl6OzrpL4ZJTiLhz ddslCk4njQ5unL1ImcWapA0L ) ; keytag 25633 climate.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260711010110 20260611010110 14252 climate.gov. ksqTINI/bc7zwBcczaX1Q9pPZcIekxnnZTFM5XDerA4GdmIz0V349EyLBHgk5GFZ30FB154W1/8j 7XnBxvsy72aDUwca1Cur8iStSfW7vDccvgsyEqudmqs8a2zooMfi/vC33nuoaLx3n24Z1LpetQBp bWLFvM7LoAnTz+7mPI284EKPxboK2G1PKTgJAh+jwQ3C6shbw2EQ1+ZvQPLifeBJCcb0/ImZxKZm 6US1MS2IALWIY0zoYd1LrCGWXEQlTllCHYOA2wQA64BNGbhUjwYhbwubda7rXbkdVgj0Mk1JKscS p7E9EDfOu2b++OPMsyfC58T94QbZXz6c+prG8A== ) climate.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260711010110 20260611010110 32694 climate.gov. UHiBtb1JgrW8a4+eQFVXcrYyqGFiipsf6i0uGVZe84Zzit52HoOcrt1yE9TXERqO7fB0q+TgaHdN 75zVs6Xna8tFfAER+xYuZgxu2WxgEJdKti8vx+xc63gnjNuqthFrFtiRSXuxv0O2uWHHXZh9uWVv nroT4aU901ge1Phlrn0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for climate.gov
	`climate.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcOdHucxlQfBAY9Z4h9t2D5kJkto5v+ax+mEAaJRH3+a2XqBKjkQxwCkMaJuQSF5hXNjzPuk Xp9AfRpQ9qbh/XMf3pjzwNpqZh2OAXSPoJj0qt2DHG6mpQzN4+jB7cLnmy/PBH0VdIbdec1fau13 KABN8HpnYItcuItfgTUg9V5L ) ; keytag 32694`
	`climate.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAa35b8ZqoZZ4gyWN+UJOcf4n9NZj33o7gfy5lR/uYJdmcmHmnod8dk0dGwcOLxHbj6cpc9Hn sgMv6jXgghST3l5JF+mjwEyJIvEmGsyQwr8xq+Rt74/T3aPkSIZy731MC7yHpIB2X8mJrY7WBwr+ EpGlZzQtCAhn45Z/iRldIEoiVzGF3XfWs+Cn1Ui7qCFuLyggDg/yqk441uZG9IJ009569pO6782L sRgPwIs7i/w4vVF1u/7rKAbN441p2m0lo7Q9aQai5YoU79jrRibu3rhvDJw3uLZFtlMmr0Oiren/ WUWD0pz+Y3sm8bL1a/8cEhFW+CKNNfMWiweiw/atfcc= ) ; keytag 14252`
	`climate.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAagXbfyM+xKxigsx6yGQiUP+hHGNXoY9siYEEmpMWRAKbDOmUAupHRzzkcKsGijIu/i1lY1H ILodQICXdyqzEBkC72bLhJex6OjtArNYMiuC6uviAEdLKR5nVz5AyV2ek53RFl6OzrpL4ZJTiLhz ddslCk4njQ5unL1ImcWapA0L ) ; keytag 25633`
	DNSKEY=14252/SEP is now in the chain-of-trust
	DS=14252/SHA-256 verifies DNSKEY=14252/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`climate.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260711010110 20260611010110 14252 climate.gov. ksqTINI/bc7zwBcczaX1Q9pPZcIekxnnZTFM5XDerA4GdmIz0V349EyLBHgk5GFZ30FB154W1/8j 7XnBxvsy72aDUwca1Cur8iStSfW7vDccvgsyEqudmqs8a2zooMfi/vC33nuoaLx3n24Z1LpetQBp bWLFvM7LoAnTz+7mPI284EKPxboK2G1PKTgJAh+jwQ3C6shbw2EQ1+ZvQPLifeBJCcb0/ImZxKZm 6US1MS2IALWIY0zoYd1LrCGWXEQlTllCHYOA2wQA64BNGbhUjwYhbwubda7rXbkdVgj0Mk1JKscS p7E9EDfOu2b++OPMsyfC58T94QbZXz6c+prG8A== )`
	`climate.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260711010110 20260611010110 32694 climate.gov. UHiBtb1JgrW8a4+eQFVXcrYyqGFiipsf6i0uGVZe84Zzit52HoOcrt1yE9TXERqO7fB0q+TgaHdN 75zVs6Xna8tFfAER+xYuZgxu2WxgEJdKti8vx+xc63gnjNuqthFrFtiRSXuxv0O2uWHHXZh9uWVv nroT4aU901ge1Phlrn0= )`
	RRSIG=14252 and DNSKEY=14252/SEP verifies the DNSKEY RRset
	RRSIG=32694 and DNSKEY=32694 verifies the DNSKEY RRset
	DNSKEY=32694 is now in the chain-of-trust
	DNSKEY=25633 is now in the chain-of-trust
	Query to ns-01.noaa.gov for climate.gov/A
	Received 1115 bytes from 137.75.116.93
	;; Response received from [137.75.116.93] 1115 octets ;; HEADER SECTION ;; id = 44010 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; climate.gov. IN A ;; ANSWER SECTION (3 records) climate.gov. 300 IN A 137.75.88.52 climate.gov. 300 IN A 137.75.88.7 climate.gov. 300 IN RRSIG ( A 8 2 300 20260711010110 20260611010110 32694 climate.gov. Rr1dS7S2GazoKPsGGaw+WSLCS/rtD7gphrzJF6kV9a3ALR9G0cdlkpQeCrk93ihjLFWiYdlJDJlm idzKhmY09k40rYuEbcEb9yRkaHn9ubxwnN+WnSTkdFSfBKMgWHlG30ROSiwVJGqtY3kDQWKnkO9e trDXN35Dof9Sn1O4aTc= ) ;; AUTHORITY SECTION (4 records) climate.gov. 300 IN NS ns-01.noaa.gov. climate.gov. 300 IN NS ns-03.noaa.gov. climate.gov. 300 IN NS ns-02.noaa.gov. climate.gov. 300 IN RRSIG ( NS 8 2 300 20260711010110 20260611010110 32694 climate.gov. gbbrdGzYiY8tV14eP1jDuNeE25DejpRma+JAuXDwLz74ZXXRhK2138XD5MYM3tJQ6+py2zpghwOs GamELSGJWNZCwdnA2yOUAzEphwumL88XzREWLgLhd/gzFsVme8cvd0+McFwhhTv2ph3jweOhTuUE 3P+C7ePQBFlUukSe7JA= ) ;; ADDITIONAL SECTION (10 records) ns-01.noaa.gov. 86400 IN A 137.75.116.93 ns-02.noaa.gov. 86400 IN A 137.75.112.7 ns-03.noaa.gov. 86400 IN A 137.75.112.58 ns-01.noaa.gov. 86400 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 86400 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 86400 IN AAAA 2610:20:9300:1:137:75:112:58 ns-01.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20260712181204 20260612181204 5245 noaa.gov. VyK++PLnCPH4zAwmaBiB0VW7uP9pw8sZAE9yegXBXmgZe8jcD9KdESftgGfip/3il4KGn26HJOQt I+3R0I1RPMpM0dcZzo83WxVEMN+ughaJxIYSHy88WZsyFPa46/vvezo3I4cWMDwqR+vByLeTwFzy Mk01TQa+9f5ZLfzSKKo= ) ns-01.noaa.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20260712181204 20260612181204 5245 noaa.gov. myHtz33IUfldFXnri9xAy5gdDxVIw/Mdq/IyhcJtgWI9M+VOLgaPMrJZCxIJUoaGdQ/oNn/K+oID C55ekpCw3qwFA+igrAx7X70xnP4Suv2HXM5OSHobocsc4GHH5Ptjkkw5Gl9E/v2v3aupgEafAgCR 9ZnXKCAPOr/FxMegVJg= ) ns-02.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20260712181204 20260612181204 5245 noaa.gov. pMk/yfWXfnpokoEbrf6o0g6hwspuC51zrzP8gNHEHTbnu0MKdT/GPNB5GDZVex93b5FfPo6bFvZt 3HUp5kV1Ghx0Vy7aTFmr8SLGvrwg6dXu/Mj0Ek+28shN3jVusN4b/gvg2oSjEXnY6nSz/u1E/1V9 lIOtoCHN9gWd5o/q0DU= ) ;; { "EDNS-VERSION": 0 }
	ns-01.noaa.gov is authoritative for climate.gov
	Found RRSIG signed by climate.gov zone
	Query to ns-02.noaa.gov for climate.gov/SOA
	Received 1140 bytes from 137.75.112.7
	;; Response received from [137.75.112.7] 1140 octets ;; HEADER SECTION ;; id = 7263 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; climate.gov. IN SOA ;; ANSWER SECTION (2 records) climate.gov. 300 IN SOA ( dns02.woc.noaa.gov. hostmaster.noaa.gov. 1781143270 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) climate.gov. 300 IN RRSIG ( SOA 8 2 300 20260711010110 20260611010110 32694 climate.gov. CvYjLH1f79xVOcvLnVntpQncztJRJLHmQr/VA9AmjGxyAGZM9iZH9fchdHqq5p/mzldYt1/Gfw4b oyWVCiDqoH7DlBC6MZ3TktFp3kcH1/9972EGEFKdzc64tV1pSB8Pi+8EXpKsS1CYt14BkSxThefC 6o//9pkSy9IDn6xf2GI= ) ;; AUTHORITY SECTION (4 records) climate.gov. 300 IN NS ns-02.noaa.gov. climate.gov. 300 IN NS ns-03.noaa.gov. climate.gov. 300 IN NS ns-01.noaa.gov. climate.gov. 300 IN RRSIG ( NS 8 2 300 20260711010110 20260611010110 32694 climate.gov. gbbrdGzYiY8tV14eP1jDuNeE25DejpRma+JAuXDwLz74ZXXRhK2138XD5MYM3tJQ6+py2zpghwOs GamELSGJWNZCwdnA2yOUAzEphwumL88XzREWLgLhd/gzFsVme8cvd0+McFwhhTv2ph3jweOhTuUE 3P+C7ePQBFlUukSe7JA= ) ;; ADDITIONAL SECTION (10 records) ns-01.noaa.gov. 86400 IN A 137.75.116.93 ns-02.noaa.gov. 86400 IN A 137.75.112.7 ns-03.noaa.gov. 86400 IN A 137.75.112.58 ns-01.noaa.gov. 86400 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 86400 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 86400 IN AAAA 2610:20:9300:1:137:75:112:58 ns-01.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20260712181204 20260612181204 5245 noaa.gov. VyK++PLnCPH4zAwmaBiB0VW7uP9pw8sZAE9yegXBXmgZe8jcD9KdESftgGfip/3il4KGn26HJOQt I+3R0I1RPMpM0dcZzo83WxVEMN+ughaJxIYSHy88WZsyFPa46/vvezo3I4cWMDwqR+vByLeTwFzy Mk01TQa+9f5ZLfzSKKo= ) ns-01.noaa.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20260712181204 20260612181204 5245 noaa.gov. myHtz33IUfldFXnri9xAy5gdDxVIw/Mdq/IyhcJtgWI9M+VOLgaPMrJZCxIJUoaGdQ/oNn/K+oID C55ekpCw3qwFA+igrAx7X70xnP4Suv2HXM5OSHobocsc4GHH5Ptjkkw5Gl9E/v2v3aupgEafAgCR 9ZnXKCAPOr/FxMegVJg= ) ns-02.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20260712181204 20260612181204 5245 noaa.gov. pMk/yfWXfnpokoEbrf6o0g6hwspuC51zrzP8gNHEHTbnu0MKdT/GPNB5GDZVex93b5FfPo6bFvZt 3HUp5kV1Ghx0Vy7aTFmr8SLGvrwg6dXu/Mj0Ek+28shN3jVusN4b/gvg2oSjEXnY6nSz/u1E/1V9 lIOtoCHN9gWd5o/q0DU= ) ;; { "EDNS-VERSION": 0 }
	Query to ns-03.noaa.gov for climate.gov/SOA
	Received 1140 bytes from 137.75.112.58
	;; Response received from [137.75.112.58] 1140 octets ;; HEADER SECTION ;; id = 8041 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; climate.gov. IN SOA ;; ANSWER SECTION (2 records) climate.gov. 300 IN SOA ( dns02.woc.noaa.gov. hostmaster.noaa.gov. 1781143270 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) climate.gov. 300 IN RRSIG ( SOA 8 2 300 20260711010110 20260611010110 32694 climate.gov. CvYjLH1f79xVOcvLnVntpQncztJRJLHmQr/VA9AmjGxyAGZM9iZH9fchdHqq5p/mzldYt1/Gfw4b oyWVCiDqoH7DlBC6MZ3TktFp3kcH1/9972EGEFKdzc64tV1pSB8Pi+8EXpKsS1CYt14BkSxThefC 6o//9pkSy9IDn6xf2GI= ) ;; AUTHORITY SECTION (4 records) climate.gov. 300 IN NS ns-02.noaa.gov. climate.gov. 300 IN NS ns-03.noaa.gov. climate.gov. 300 IN NS ns-01.noaa.gov. climate.gov. 300 IN RRSIG ( NS 8 2 300 20260711010110 20260611010110 32694 climate.gov. gbbrdGzYiY8tV14eP1jDuNeE25DejpRma+JAuXDwLz74ZXXRhK2138XD5MYM3tJQ6+py2zpghwOs GamELSGJWNZCwdnA2yOUAzEphwumL88XzREWLgLhd/gzFsVme8cvd0+McFwhhTv2ph3jweOhTuUE 3P+C7ePQBFlUukSe7JA= ) ;; ADDITIONAL SECTION (10 records) ns-01.noaa.gov. 86400 IN A 137.75.116.93 ns-02.noaa.gov. 86400 IN A 137.75.112.7 ns-03.noaa.gov. 86400 IN A 137.75.112.58 ns-01.noaa.gov. 86400 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 86400 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 86400 IN AAAA 2610:20:9300:1:137:75:112:58 ns-01.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20260712181204 20260612181204 5245 noaa.gov. VyK++PLnCPH4zAwmaBiB0VW7uP9pw8sZAE9yegXBXmgZe8jcD9KdESftgGfip/3il4KGn26HJOQt I+3R0I1RPMpM0dcZzo83WxVEMN+ughaJxIYSHy88WZsyFPa46/vvezo3I4cWMDwqR+vByLeTwFzy Mk01TQa+9f5ZLfzSKKo= ) ns-01.noaa.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20260712181204 20260612181204 5245 noaa.gov. myHtz33IUfldFXnri9xAy5gdDxVIw/Mdq/IyhcJtgWI9M+VOLgaPMrJZCxIJUoaGdQ/oNn/K+oID C55ekpCw3qwFA+igrAx7X70xnP4Suv2HXM5OSHobocsc4GHH5Ptjkkw5Gl9E/v2v3aupgEafAgCR 9ZnXKCAPOr/FxMegVJg= ) ns-02.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20260712181204 20260612181204 5245 noaa.gov. pMk/yfWXfnpokoEbrf6o0g6hwspuC51zrzP8gNHEHTbnu0MKdT/GPNB5GDZVex93b5FfPo6bFvZt 3HUp5kV1Ghx0Vy7aTFmr8SLGvrwg6dXu/Mj0Ek+28shN3jVusN4b/gvg2oSjEXnY6nSz/u1E/1V9 lIOtoCHN9gWd5o/q0DU= ) ;; { "EDNS-VERSION": 0 }
	Query to ns-01.noaa.gov for climate.gov/A
	climate.gov A RR has value 137.75.88.52
	climate.gov A RR has value 137.75.88.7
	Found 1 RRSIGs over A RRset
	`climate.gov. 300 IN RRSIG ( A 8 2 300 20260711010110 20260611010110 32694 climate.gov. Rr1dS7S2GazoKPsGGaw+WSLCS/rtD7gphrzJF6kV9a3ALR9G0cdlkpQeCrk93ihjLFWiYdlJDJlm idzKhmY09k40rYuEbcEb9yRkaHn9ubxwnN+WnSTkdFSfBKMgWHlG30ROSiwVJGqtY3kDQWKnkO9e trDXN35Dof9Sn1O4aTc= )`
	RRSIG=32694 and DNSKEY=32694 verifies the A RRset

climate.gov

	Query to ns-02.noaa.gov for climate.gov/A
	Received 1115 bytes from 137.75.112.7
	;; Response received from [137.75.112.7] 1115 octets ;; HEADER SECTION ;; id = 14892 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; climate.gov. IN A ;; ANSWER SECTION (3 records) climate.gov. 300 IN A 137.75.88.7 climate.gov. 300 IN A 137.75.88.52 climate.gov. 300 IN RRSIG ( A 8 2 300 20260711010110 20260611010110 32694 climate.gov. Rr1dS7S2GazoKPsGGaw+WSLCS/rtD7gphrzJF6kV9a3ALR9G0cdlkpQeCrk93ihjLFWiYdlJDJlm idzKhmY09k40rYuEbcEb9yRkaHn9ubxwnN+WnSTkdFSfBKMgWHlG30ROSiwVJGqtY3kDQWKnkO9e trDXN35Dof9Sn1O4aTc= ) ;; AUTHORITY SECTION (4 records) climate.gov. 300 IN NS ns-03.noaa.gov. climate.gov. 300 IN NS ns-01.noaa.gov. climate.gov. 300 IN NS ns-02.noaa.gov. climate.gov. 300 IN RRSIG ( NS 8 2 300 20260711010110 20260611010110 32694 climate.gov. gbbrdGzYiY8tV14eP1jDuNeE25DejpRma+JAuXDwLz74ZXXRhK2138XD5MYM3tJQ6+py2zpghwOs GamELSGJWNZCwdnA2yOUAzEphwumL88XzREWLgLhd/gzFsVme8cvd0+McFwhhTv2ph3jweOhTuUE 3P+C7ePQBFlUukSe7JA= ) ;; ADDITIONAL SECTION (10 records) ns-01.noaa.gov. 86400 IN A 137.75.116.93 ns-02.noaa.gov. 86400 IN A 137.75.112.7 ns-03.noaa.gov. 86400 IN A 137.75.112.58 ns-01.noaa.gov. 86400 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 86400 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 86400 IN AAAA 2610:20:9300:1:137:75:112:58 ns-01.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20260712181204 20260612181204 5245 noaa.gov. VyK++PLnCPH4zAwmaBiB0VW7uP9pw8sZAE9yegXBXmgZe8jcD9KdESftgGfip/3il4KGn26HJOQt I+3R0I1RPMpM0dcZzo83WxVEMN+ughaJxIYSHy88WZsyFPa46/vvezo3I4cWMDwqR+vByLeTwFzy Mk01TQa+9f5ZLfzSKKo= ) ns-01.noaa.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20260712181204 20260612181204 5245 noaa.gov. myHtz33IUfldFXnri9xAy5gdDxVIw/Mdq/IyhcJtgWI9M+VOLgaPMrJZCxIJUoaGdQ/oNn/K+oID C55ekpCw3qwFA+igrAx7X70xnP4Suv2HXM5OSHobocsc4GHH5Ptjkkw5Gl9E/v2v3aupgEafAgCR 9ZnXKCAPOr/FxMegVJg= ) ns-02.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20260712181204 20260612181204 5245 noaa.gov. pMk/yfWXfnpokoEbrf6o0g6hwspuC51zrzP8gNHEHTbnu0MKdT/GPNB5GDZVex93b5FfPo6bFvZt 3HUp5kV1Ghx0Vy7aTFmr8SLGvrwg6dXu/Mj0Ek+28shN3jVusN4b/gvg2oSjEXnY6nSz/u1E/1V9 lIOtoCHN9gWd5o/q0DU= ) ;; { "EDNS-VERSION": 0 }
	ns-02.noaa.gov is authoritative for climate.gov
	Found RRSIG signed by climate.gov zone
	Query to ns-02.noaa.gov for climate.gov/A
	climate.gov A RR has value 137.75.88.7
	climate.gov A RR has value 137.75.88.52
	Found 1 RRSIGs over A RRset
	`climate.gov. 300 IN RRSIG ( A 8 2 300 20260711010110 20260611010110 32694 climate.gov. Rr1dS7S2GazoKPsGGaw+WSLCS/rtD7gphrzJF6kV9a3ALR9G0cdlkpQeCrk93ihjLFWiYdlJDJlm idzKhmY09k40rYuEbcEb9yRkaHn9ubxwnN+WnSTkdFSfBKMgWHlG30ROSiwVJGqtY3kDQWKnkO9e trDXN35Dof9Sn1O4aTc= )`
	RRSIG=32694 and DNSKEY=32694 verifies the A RRset

climate.gov

	Query to ns-03.noaa.gov for climate.gov/A
	Received 1115 bytes from 137.75.112.58
	;; Response received from [137.75.112.58] 1115 octets ;; HEADER SECTION ;; id = 12785 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; climate.gov. IN A ;; ANSWER SECTION (3 records) climate.gov. 300 IN A 137.75.88.52 climate.gov. 300 IN A 137.75.88.7 climate.gov. 300 IN RRSIG ( A 8 2 300 20260711010110 20260611010110 32694 climate.gov. Rr1dS7S2GazoKPsGGaw+WSLCS/rtD7gphrzJF6kV9a3ALR9G0cdlkpQeCrk93ihjLFWiYdlJDJlm idzKhmY09k40rYuEbcEb9yRkaHn9ubxwnN+WnSTkdFSfBKMgWHlG30ROSiwVJGqtY3kDQWKnkO9e trDXN35Dof9Sn1O4aTc= ) ;; AUTHORITY SECTION (4 records) climate.gov. 300 IN NS ns-03.noaa.gov. climate.gov. 300 IN NS ns-01.noaa.gov. climate.gov. 300 IN NS ns-02.noaa.gov. climate.gov. 300 IN RRSIG ( NS 8 2 300 20260711010110 20260611010110 32694 climate.gov. gbbrdGzYiY8tV14eP1jDuNeE25DejpRma+JAuXDwLz74ZXXRhK2138XD5MYM3tJQ6+py2zpghwOs GamELSGJWNZCwdnA2yOUAzEphwumL88XzREWLgLhd/gzFsVme8cvd0+McFwhhTv2ph3jweOhTuUE 3P+C7ePQBFlUukSe7JA= ) ;; ADDITIONAL SECTION (10 records) ns-01.noaa.gov. 86400 IN A 137.75.116.93 ns-02.noaa.gov. 86400 IN A 137.75.112.7 ns-03.noaa.gov. 86400 IN A 137.75.112.58 ns-01.noaa.gov. 86400 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 86400 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 86400 IN AAAA 2610:20:9300:1:137:75:112:58 ns-01.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20260712181204 20260612181204 5245 noaa.gov. VyK++PLnCPH4zAwmaBiB0VW7uP9pw8sZAE9yegXBXmgZe8jcD9KdESftgGfip/3il4KGn26HJOQt I+3R0I1RPMpM0dcZzo83WxVEMN+ughaJxIYSHy88WZsyFPa46/vvezo3I4cWMDwqR+vByLeTwFzy Mk01TQa+9f5ZLfzSKKo= ) ns-01.noaa.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20260712181204 20260612181204 5245 noaa.gov. myHtz33IUfldFXnri9xAy5gdDxVIw/Mdq/IyhcJtgWI9M+VOLgaPMrJZCxIJUoaGdQ/oNn/K+oID C55ekpCw3qwFA+igrAx7X70xnP4Suv2HXM5OSHobocsc4GHH5Ptjkkw5Gl9E/v2v3aupgEafAgCR 9ZnXKCAPOr/FxMegVJg= ) ns-02.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20260712181204 20260612181204 5245 noaa.gov. pMk/yfWXfnpokoEbrf6o0g6hwspuC51zrzP8gNHEHTbnu0MKdT/GPNB5GDZVex93b5FfPo6bFvZt 3HUp5kV1Ghx0Vy7aTFmr8SLGvrwg6dXu/Mj0Ek+28shN3jVusN4b/gvg2oSjEXnY6nSz/u1E/1V9 lIOtoCHN9gWd5o/q0DU= ) ;; { "EDNS-VERSION": 0 }
	ns-03.noaa.gov is authoritative for climate.gov
	Found RRSIG signed by climate.gov zone
	Query to ns-03.noaa.gov for climate.gov/A
	climate.gov A RR has value 137.75.88.52
	climate.gov A RR has value 137.75.88.7
	Found 1 RRSIGs over A RRset
	`climate.gov. 300 IN RRSIG ( A 8 2 300 20260711010110 20260611010110 32694 climate.gov. Rr1dS7S2GazoKPsGGaw+WSLCS/rtD7gphrzJF6kV9a3ALR9G0cdlkpQeCrk93ihjLFWiYdlJDJlm idzKhmY09k40rYuEbcEb9yRkaHn9ubxwnN+WnSTkdFSfBKMgWHlG30ROSiwVJGqtY3kDQWKnkO9e trDXN35Dof9Sn1O4aTc= )`
	RRSIG=32694 and DNSKEY=32694 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test climate.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: