DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-08-12 17:58:27 UTC

Analyzing DNSSEC problems for eur.nl

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 55430 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260831000000 20260810000000 20326 . V78PtBnjcahYNt6ZWnzGlM+EExU9UNP4kRg5NGdsDW8OUHNRWY86PPVrQoWY3uwSbIVxs/mv9XJx oH/NdZm46Amyns74QH6IuPcCk055P1xF8f37JaSzrn+AA9vJCicqH8fnOSG7mSXs6W+or+1tJ5zL Npqjj+IuXyWOcTB0/W3loQYrPxdYIieY2DuSPRmXvpC4Z3LjMnOSvO4Q87V2ayUuPIdhO2w6Ltr3 /k6qRfSnyAcvhomTnf55nzn/Pl3urhbB/sx8VypzJZg/76nLCSxrS4XuDU8ORagQA99GeeuqFgLu fdMhNgr5m/QE6tworB9ptU8CHkhizUgIZxCd4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260831000000 20260810000000 20326 . V78PtBnjcahYNt6ZWnzGlM+EExU9UNP4kRg5NGdsDW8OUHNRWY86PPVrQoWY3uwSbIVxs/mv9XJx oH/NdZm46Amyns74QH6IuPcCk055P1xF8f37JaSzrn+AA9vJCicqH8fnOSG7mSXs6W+or+1tJ5zL Npqjj+IuXyWOcTB0/W3loQYrPxdYIieY2DuSPRmXvpC4Z3LjMnOSvO4Q87V2ayUuPIdhO2w6Ltr3 /k6qRfSnyAcvhomTnf55nzn/Pl3urhbB/sx8VypzJZg/76nLCSxrS4XuDU8ORagQA99GeeuqFgLu fdMhNgr5m/QE6tworB9ptU8CHkhizUgIZxCd4A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to m.root-servers.net for eur.nl/A
	Received 562 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 562 octets ;; HEADER SECTION ;; id = 45955 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eur.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260825170000 20260812160000 57780 . pvYsC3unE1C1JZgVPK332mK0iCMeI6GXNrkfa00ia5Bmoj/h/4Fps95aCeMAPM3vz9DsTEVDkpFD kDFIfYFYpk5TZH9/YFmVY2hAUvnYWZ9KVmYnwhr9yS9jHc24+MCTxieQZR9UjEoax7G7jiW+Uiu2 Pg4awN6SqLSDrehv3y5xS+11s7bvLhpmPReSv85PHvYmvyxhttFR3vCU+B5JqHk0fvG8DwV1058G T2LwhVW4U/EIBFdcQZnjWCcGe8k9t9YM+UOCrTvwxogHLyuknxqpH9nI/TaiaDQJoaWScMtOQ4HV tx3k9PElXJO9xOWvkxaIDZRvpLvJOex2dMF3Tg== ) ;; ADDITIONAL SECTION (7 records) ns4.dns.nl. 172800 IN A 185.159.199.200 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN A 194.0.28.53 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for nl/DNSKEY
	Received 556 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 556 octets ;; HEADER SECTION ;; id = 53664 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260825170000 20260812160000 57780 . pvYsC3unE1C1JZgVPK332mK0iCMeI6GXNrkfa00ia5Bmoj/h/4Fps95aCeMAPM3vz9DsTEVDkpFD kDFIfYFYpk5TZH9/YFmVY2hAUvnYWZ9KVmYnwhr9yS9jHc24+MCTxieQZR9UjEoax7G7jiW+Uiu2 Pg4awN6SqLSDrehv3y5xS+11s7bvLhpmPReSv85PHvYmvyxhttFR3vCU+B5JqHk0fvG8DwV1058G T2LwhVW4U/EIBFdcQZnjWCcGe8k9t9YM+UOCrTvwxogHLyuknxqpH9nI/TaiaDQJoaWScMtOQ4HV tx3k9PElXJO9xOWvkxaIDZRvpLvJOex2dMF3Tg== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Found child zone nl

	Checking DS between . and nl
	Query to l.root-servers.net for nl/DS
	Received 366 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 366 octets ;; HEADER SECTION ;; id = 33365 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260825170000 20260812160000 57780 . pvYsC3unE1C1JZgVPK332mK0iCMeI6GXNrkfa00ia5Bmoj/h/4Fps95aCeMAPM3vz9DsTEVDkpFD kDFIfYFYpk5TZH9/YFmVY2hAUvnYWZ9KVmYnwhr9yS9jHc24+MCTxieQZR9UjEoax7G7jiW+Uiu2 Pg4awN6SqLSDrehv3y5xS+11s7bvLhpmPReSv85PHvYmvyxhttFR3vCU+B5JqHk0fvG8DwV1058G T2LwhVW4U/EIBFdcQZnjWCcGe8k9t9YM+UOCrTvwxogHLyuknxqpH9nI/TaiaDQJoaWScMtOQ4HV tx3k9PElXJO9xOWvkxaIDZRvpLvJOex2dMF3Tg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nl in the . zone
	DS=17153/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20260825170000 20260812160000 57780 . pvYsC3unE1C1JZgVPK332mK0iCMeI6GXNrkfa00ia5Bmoj/h/4Fps95aCeMAPM3vz9DsTEVDkpFD kDFIfYFYpk5TZH9/YFmVY2hAUvnYWZ9KVmYnwhr9yS9jHc24+MCTxieQZR9UjEoax7G7jiW+Uiu2 Pg4awN6SqLSDrehv3y5xS+11s7bvLhpmPReSv85PHvYmvyxhttFR3vCU+B5JqHk0fvG8DwV1058G T2LwhVW4U/EIBFdcQZnjWCcGe8k9t9YM+UOCrTvwxogHLyuknxqpH9nI/TaiaDQJoaWScMtOQ4HV tx3k9PElXJO9xOWvkxaIDZRvpLvJOex2dMF3Tg== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=17153/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 )`
	Query to ns3.dns.nl for nl/DNSKEY
	Received 289 bytes from 194.0.25.24
	;; Response received from [194.0.25.24] 289 octets ;; HEADER SECTION ;; id = 59256 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 256 3 13 ArhUNmeRU9NE4fAbORd6DjntZ0vDP3PoQotzRxGg/gdniUCSGp/naJdkcG5/Y9+SVE6f5h/NZCqG y2+Kh/FeEw== ) ; keytag 467 nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153 nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260828203854 20260731073722 17153 nl. 2NQBxEWx9vSGE+JQ0mYpWSnvsfL1gKudGFoSYLzEnwkKflmF/izx0EJFNAMlXap5V04qX2SO06P6 s9Nq6cdAjA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 13 ArhUNmeRU9NE4fAbORd6DjntZ0vDP3PoQotzRxGg/gdniUCSGp/naJdkcG5/Y9+SVE6f5h/NZCqG y2+Kh/FeEw== ) ; keytag 467`
	`nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153`
	DNSKEY=17153/SEP is now in the chain-of-trust
	DS=17153/SHA-256 verifies DNSKEY=17153/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260828203854 20260731073722 17153 nl. 2NQBxEWx9vSGE+JQ0mYpWSnvsfL1gKudGFoSYLzEnwkKflmF/izx0EJFNAMlXap5V04qX2SO06P6 s9Nq6cdAjA== )`
	RRSIG=17153 and DNSKEY=17153/SEP verifies the DNSKEY RRset
	DNSKEY=467 is now in the chain-of-trust
	Query to ns1.dns.nl for eur.nl/A
	Received 458 bytes from 194.0.28.53
	;; Response received from [194.0.28.53] 458 octets ;; HEADER SECTION ;; id = 3794 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eur.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eur.nl. 3600 IN NS ns1.zurich.surf.net. eur.nl. 3600 IN NS ns1.surfnet.nl. eur.nl. 3600 IN NS ns2.surfnet.nl. eur.nl. 3600 IN NS ns3.surfnet.nl. eur.nl. 3600 IN DS ( 16570 8 2 653f2edef749111293f40b481f50db69f0a8191c02d54f7f94c02cafc356c6de ) eur.nl. 3600 IN DS ( 51040 8 2 c3a1aa141e74699791d82d0336fad2c6b3f18a7b9ef11d2c6d72abb1f287da5b ) eur.nl. 3600 IN RRSIG ( DS 13 2 3600 20260904060138 20260806210824 467 nl. +ncd2+KDZ5r0pn+lD5zVX2DlxBVGOhrY5ITav2dgmQiarcMsHIBMPqAk6O1Gm2wH/lajZ+nDXjCW eB0xM7oGZQ== ) ;; ADDITIONAL SECTION (7 records) ns1.surfnet.nl. 3600 IN A 192.87.106.101 ns1.surfnet.nl. 3600 IN AAAA 2001:610:1:800a:192:87:106:101 ns2.surfnet.nl. 3600 IN A 192.87.36.2 ns2.surfnet.nl. 3600 IN AAAA 2001:610:3:200a:192:87:36:2 ns3.surfnet.nl. 3600 IN A 195.169.124.71 ns3.surfnet.nl. 3600 IN AAAA 2001:610:0:800c:195:169:124:71 ;; { "EDNS-VERSION": 0 }
	Query to ns4.dns.nl for eur.nl/DNSKEY
	Received 456 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 456 octets ;; HEADER SECTION ;; id = 61183 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eur.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eur.nl. 3600 IN NS ns1.zurich.surf.net. eur.nl. 3600 IN NS ns1.surfnet.nl. eur.nl. 3600 IN NS ns2.surfnet.nl. eur.nl. 3600 IN NS ns3.surfnet.nl. eur.nl. 3600 IN DS ( 16570 8 2 653f2edef749111293f40b481f50db69f0a8191c02d54f7f94c02cafc356c6de ) eur.nl. 3600 IN DS ( 51040 8 2 c3a1aa141e74699791d82d0336fad2c6b3f18a7b9ef11d2c6d72abb1f287da5b ) eur.nl. 3600 IN RRSIG ( DS 13 2 3600 20260904060138 20260806210824 467 nl. +ncd2+KDZ5r0pn+lD5zVX2DlxBVGOhrY5ITav2dgmQiarcMsHIBMPqAk6O1Gm2wH/lajZ+nDXjCW eB0xM7oGZQ== ) ;; ADDITIONAL SECTION (7 records) ns3.surfnet.nl. 3600 IN A 195.169.124.71 ns2.surfnet.nl. 3600 IN A 192.87.36.2 ns1.surfnet.nl. 3600 IN A 192.87.106.101 ns3.surfnet.nl. 3600 IN AAAA 2001:610:0:800c:195:169:124:71 ns2.surfnet.nl. 3600 IN AAAA 2001:610:3:200a:192:87:36:2 ns1.surfnet.nl. 3600 IN AAAA 2001:610:1:800a:192:87:106:101 ;; { "EDNS-VERSION": 0 }
	Found child zone eur.nl

eur.nl

	Checking DS between nl and eur.nl
	Query to ns3.dns.nl for eur.nl/DS
	Received 229 bytes from 194.0.25.24
	;; Response received from [194.0.25.24] 229 octets ;; HEADER SECTION ;; id = 62187 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eur.nl. IN DS ;; ANSWER SECTION (3 records) eur.nl. 3600 IN DS ( 16570 8 2 653f2edef749111293f40b481f50db69f0a8191c02d54f7f94c02cafc356c6de ) eur.nl. 3600 IN DS ( 51040 8 2 c3a1aa141e74699791d82d0336fad2c6b3f18a7b9ef11d2c6d72abb1f287da5b ) eur.nl. 3600 IN RRSIG ( DS 13 2 3600 20260904060138 20260806210824 467 nl. +ncd2+KDZ5r0pn+lD5zVX2DlxBVGOhrY5ITav2dgmQiarcMsHIBMPqAk6O1Gm2wH/lajZ+nDXjCW eB0xM7oGZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for eur.nl in the nl zone
	DS=16570/SHA-256 has algorithm RSASHA256
	DS=51040/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`eur.nl. 3600 IN RRSIG ( DS 13 2 3600 20260904060138 20260806210824 467 nl. +ncd2+KDZ5r0pn+lD5zVX2DlxBVGOhrY5ITav2dgmQiarcMsHIBMPqAk6O1Gm2wH/lajZ+nDXjCW eB0xM7oGZQ== )`
	RRSIG=467 and DNSKEY=467 verifies the DS RRset
	DS=16570/SHA-256 is now in the chain-of-trust
	DS=51040/SHA-256 is now in the chain-of-trust
	`eur.nl. 3600 IN DS ( 16570 8 2 653f2edef749111293f40b481f50db69f0a8191c02d54f7f94c02cafc356c6de )`
	`eur.nl. 3600 IN DS ( 51040 8 2 c3a1aa141e74699791d82d0336fad2c6b3f18a7b9ef11d2c6d72abb1f287da5b )`
	Query to ns3.surfnet.nl for eur.nl/DNSKEY
	Received 1727 bytes from 195.169.124.71
	;; Response received from [195.169.124.71] 1727 octets ;; HEADER SECTION ;; id = 47481 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eur.nl. IN DNSKEY ;; ANSWER SECTION (6 records) eur.nl. 172800 IN DNSKEY ( 257 3 8 AwEAAcBLhDBeomK2kDgdc5qg832K9KkqFZ5QWLjmgOFnUHtwabpLzK+5DkBgbCXnh7sTzjk2Yy74 pDTg4EW5u4H4V5P1Aui3o82wQq8BI45nhy6qsbHAHBxLM2IicdcMiK3hNs4ZZRam/Thd2BBZdu8N zY6Cq/SRugVNdv9GTWvGw9Yl3CQJCq2Snm7b/FzBmq2dpzYp1c4eufZIZQRMs4YRL295IZjTdERQ jS4eTOqK+knavzKoJLvWZr3+Jcbb1W9CBxEojW9OGdm13cQzpsJrB4rFdL/PgCoDbf4+M50qHpAv HWn+8qbkv2PfBaG/DrrAF8J3SFfc7fTRBGTiexmvSIc= ) ; keytag 16570 eur.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAbXDh0rCi7uiZyqe3HclHdsFhimmFuAtjujMpR4lqxO0n1wkNrf4TenEzSilS+Gbnr2rtNfg caSBrA0JN71Lc16hIkDdfkIkJNfOi4l07umnd8RndEhV6gyJBeL/Es194PiKiyrX9W3KYhrPPG2h LOu6iDczaRbVlhz+LFlCMsJeKzXWNX5dnuPgkRJ1tblk4oD4I1S6Zs5t8vlK5P2vF7yhK9xCzqRY DcQm3GlaP6g5zSgcoFmib9/V45e+smjtrgaEHHdVBjyxjrxq5uozJYCOSidP4jUp7I+wF/dipXAm 4E7LTLfw7J20oPoa5Dn6xRDr8FERSvhhx9IzqGREfw8= ) ; keytag 62223 eur.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAb4rC8k/3O9B79aYdOBcpBuoJ80uNjnVOANIvB/ivxtvZgbT4bILRREQPJGC4MyrdvH+VhUC XA3AakO+NEHKbQGHhzxQxH05vqyIepYRZ8RHpWIxc+4AQqtwbY66HTETWRMt8Unc8egejI/ajKKk P13NvQJoXEBXdwpEziMvBS7zWuJH9+GsPx3P5XHBfiarD1TheH0co27t+KkB+ESkysKZunfvxLB1 fLq/1vemIPESpbaN5joforGE2cYInnYTUiC6msnCKqDZt0HQxrEG+BVtPYfYJvUumsuvIJsArqGg ZgBUUReVH6jdWD5cieimx44krjm3fiwWPHkLkKGJw18= ) ; keytag 58320 eur.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAbHB4PW0sK57fQ53Jb8D8jCPjlkFPMi+JW0tjAiIrMZYGJYPk40M3ec9PcMtBIWZmQlEO9WL Dm+te2DTNubpLLxurCS83DDZwD12rukGNzM07UE6GlbrtZGTfuTYH9Wiw3FzqbzXpOPgCA4glGHT eHwZpYe6Y+6waRppXAOJjmDNuXdoHPrLmVVaYunILP/x1Z7OYztxLATaOZT2F7l2SkxQ1ynoW0mA ZVjUEqy8ONWKK8u8I0njbikUNI5O1Je93aJvVUxKO6MNpk0J3/e9WFFO4yZt3RGs92PB3I/0eJv/ sFNcalEH1zFToNCfpkmZZDNnZXDKqp870Ev3w6DEWO0= ) ; keytag 28554 eur.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260815193447 20260811191531 16570 eur.nl. LbB8yobPYc5IPGrYIBzfiEtUtm+7bfXOmPA8rj+AS4KrljQiMpDnbVI4mnWfJjH91EI7qBpRYnLK nvQOcVAj2iE5dO9wVIIFd87Lf3ItuhLTRAEw5FsxJTlHWXTyz5eP3ztTBdnIglFNebwI0pswK7kc Fb3FdN81qOj6QebuUOM2kdWHnMtW2SNHl7T8LdtRwyMxeBmADXd2jQ6KVNgeRyEOUu6k49yENZlp RWMlimBNH+wsBtB5lgUuNAVnAXSwH0BqBNsHeJVo2ipE+7I1QhrGVPA9ZriEzbTzBkaXNUss2DDc xnPIbyicNeFuQ1RTObHzpW1YpZjfgAYMJUkbpg== ) eur.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260815193447 20260811191531 62223 eur.nl. pDlwRM7nNf4OPiG48ZoOBkUhqYaBPsx7l75BoBtB5unxihC6PaU9p3W+dQXdQghhgssKGu+mFObL PUOxLGwuXhvbJwq+e3jYxOAnY2TdJhv3hzPXQlElPts5nAKC4mB0ZrzRLjz5sQb4f98RXYF3VB03 9LaLlNWTVCRZloX08YKENyfr1GKOFEFT+SnsGkZA48NKpVp86pzIXeJK5Dj6r1hHemYm4gsQQEck qOBVXIfim5/+0oV2dyi6FjtGGx8CwFGt7s7Ag0rBJ0mR0orGQtN01Rm/y0AlomJM841kEIzmamUP jpKjYBQIJMcYR6FLWJHoIwScNqU1eZnzU0UMRQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for eur.nl
	`eur.nl. 172800 IN DNSKEY ( 257 3 8 AwEAAcBLhDBeomK2kDgdc5qg832K9KkqFZ5QWLjmgOFnUHtwabpLzK+5DkBgbCXnh7sTzjk2Yy74 pDTg4EW5u4H4V5P1Aui3o82wQq8BI45nhy6qsbHAHBxLM2IicdcMiK3hNs4ZZRam/Thd2BBZdu8N zY6Cq/SRugVNdv9GTWvGw9Yl3CQJCq2Snm7b/FzBmq2dpzYp1c4eufZIZQRMs4YRL295IZjTdERQ jS4eTOqK+knavzKoJLvWZr3+Jcbb1W9CBxEojW9OGdm13cQzpsJrB4rFdL/PgCoDbf4+M50qHpAv HWn+8qbkv2PfBaG/DrrAF8J3SFfc7fTRBGTiexmvSIc= ) ; keytag 16570`
	`eur.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAbXDh0rCi7uiZyqe3HclHdsFhimmFuAtjujMpR4lqxO0n1wkNrf4TenEzSilS+Gbnr2rtNfg caSBrA0JN71Lc16hIkDdfkIkJNfOi4l07umnd8RndEhV6gyJBeL/Es194PiKiyrX9W3KYhrPPG2h LOu6iDczaRbVlhz+LFlCMsJeKzXWNX5dnuPgkRJ1tblk4oD4I1S6Zs5t8vlK5P2vF7yhK9xCzqRY DcQm3GlaP6g5zSgcoFmib9/V45e+smjtrgaEHHdVBjyxjrxq5uozJYCOSidP4jUp7I+wF/dipXAm 4E7LTLfw7J20oPoa5Dn6xRDr8FERSvhhx9IzqGREfw8= ) ; keytag 62223`
	`eur.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAb4rC8k/3O9B79aYdOBcpBuoJ80uNjnVOANIvB/ivxtvZgbT4bILRREQPJGC4MyrdvH+VhUC XA3AakO+NEHKbQGHhzxQxH05vqyIepYRZ8RHpWIxc+4AQqtwbY66HTETWRMt8Unc8egejI/ajKKk P13NvQJoXEBXdwpEziMvBS7zWuJH9+GsPx3P5XHBfiarD1TheH0co27t+KkB+ESkysKZunfvxLB1 fLq/1vemIPESpbaN5joforGE2cYInnYTUiC6msnCKqDZt0HQxrEG+BVtPYfYJvUumsuvIJsArqGg ZgBUUReVH6jdWD5cieimx44krjm3fiwWPHkLkKGJw18= ) ; keytag 58320`
	`eur.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAbHB4PW0sK57fQ53Jb8D8jCPjlkFPMi+JW0tjAiIrMZYGJYPk40M3ec9PcMtBIWZmQlEO9WL Dm+te2DTNubpLLxurCS83DDZwD12rukGNzM07UE6GlbrtZGTfuTYH9Wiw3FzqbzXpOPgCA4glGHT eHwZpYe6Y+6waRppXAOJjmDNuXdoHPrLmVVaYunILP/x1Z7OYztxLATaOZT2F7l2SkxQ1ynoW0mA ZVjUEqy8ONWKK8u8I0njbikUNI5O1Je93aJvVUxKO6MNpk0J3/e9WFFO4yZt3RGs92PB3I/0eJv/ sFNcalEH1zFToNCfpkmZZDNnZXDKqp870Ev3w6DEWO0= ) ; keytag 28554`
	DNSKEY=16570/SEP is now in the chain-of-trust
	DS=16570/SHA-256 verifies DNSKEY=16570/SEP
	DS=51040/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`eur.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260815193447 20260811191531 16570 eur.nl. LbB8yobPYc5IPGrYIBzfiEtUtm+7bfXOmPA8rj+AS4KrljQiMpDnbVI4mnWfJjH91EI7qBpRYnLK nvQOcVAj2iE5dO9wVIIFd87Lf3ItuhLTRAEw5FsxJTlHWXTyz5eP3ztTBdnIglFNebwI0pswK7kc Fb3FdN81qOj6QebuUOM2kdWHnMtW2SNHl7T8LdtRwyMxeBmADXd2jQ6KVNgeRyEOUu6k49yENZlp RWMlimBNH+wsBtB5lgUuNAVnAXSwH0BqBNsHeJVo2ipE+7I1QhrGVPA9ZriEzbTzBkaXNUss2DDc xnPIbyicNeFuQ1RTObHzpW1YpZjfgAYMJUkbpg== )`
	`eur.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260815193447 20260811191531 62223 eur.nl. pDlwRM7nNf4OPiG48ZoOBkUhqYaBPsx7l75BoBtB5unxihC6PaU9p3W+dQXdQghhgssKGu+mFObL PUOxLGwuXhvbJwq+e3jYxOAnY2TdJhv3hzPXQlElPts5nAKC4mB0ZrzRLjz5sQb4f98RXYF3VB03 9LaLlNWTVCRZloX08YKENyfr1GKOFEFT+SnsGkZA48NKpVp86pzIXeJK5Dj6r1hHemYm4gsQQEck qOBVXIfim5/+0oV2dyi6FjtGGx8CwFGt7s7Ag0rBJ0mR0orGQtN01Rm/y0AlomJM841kEIzmamUP jpKjYBQIJMcYR6FLWJHoIwScNqU1eZnzU0UMRQ== )`
	RRSIG=16570 and DNSKEY=16570/SEP verifies the DNSKEY RRset
	RRSIG=62223 and DNSKEY=62223 verifies the DNSKEY RRset
	DNSKEY=62223 is now in the chain-of-trust
	DNSKEY=58320 is now in the chain-of-trust
	DNSKEY=28554 is now in the chain-of-trust
	Query to ns1.surfnet.nl for eur.nl/A
	Received 345 bytes from 192.87.106.101
	;; Response received from [192.87.106.101] 345 octets ;; HEADER SECTION ;; id = 49151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eur.nl. IN A ;; ANSWER SECTION (2 records) eur.nl. 28800 IN A 145.5.1.13 eur.nl. 28800 IN RRSIG ( A 8 2 28800 20260815192706 20260811185806 62223 eur.nl. a3FRL5h1fA/31VC+zgZRUsetA9L7oYEc00yq9Jboutw7V8eDo4MUo2rbbiYmGsEkrA35LRdK38GB hVW56wqBg62rwF8artXHc2KWApHI3lmSck1fMc8gkl6G7gBrx7yU0NLXLGhYJtPqSmnk5VRiikFb 7keqzITm063kZA7kaHttGdfJ1nfPCpE2TJsd4eGxno48BHxjufYhXELTkwRdFVQXjd1yEjv1m4m6 NXJa1Bk3nvBklOrrilsaJ223SYQ1lEqrCFiqMVCPKlar6dFiAl4vrk60jWn89spE3cBSXOZ23Ue5 /FDQcbo8tu8LZaK80NKLUqo2lyFqbK6O2at5Lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.surfnet.nl is authoritative for eur.nl
	Found RRSIG signed by eur.nl zone
	Query to ns3.surfnet.nl for eur.nl/SOA
	Received 389 bytes from 195.169.124.71
	;; Response received from [195.169.124.71] 389 octets ;; HEADER SECTION ;; id = 65162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eur.nl. IN SOA ;; ANSWER SECTION (2 records) eur.nl. 28800 IN SOA ( ns6.eur.nl. dnsmaster.nic.eur.nl. 2014622930 ;serial 86400 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) eur.nl. 28800 IN RRSIG ( SOA 8 2 28800 20260816081246 20260812071246 62223 eur.nl. IrUJdl/ToR1A/vdAmt+1TqXwNUiSRdPFo1ZD4mIXLAavg4ydGV3aeTFV/9AR+7vEllGiqjkqvUI8 pvPaMm9Gw1AGWDmlLDRFkod/6UlqGsFHgXuyCo66MOUlH99gHYNyhPQNGFDasHbgGdxh3rI2i0P3 dMPaX4Z9d4X6tl22QkJGodUa5tjxXXyPSNpkR9dZVBt5Y+lx31CSihLEpWNfD5BDx4E9rTYEu04K wSSBHfqvk79xSmNAk8K2LA+V45u8pdbn7AqKQyjNiioRTzhkMDBSAwzQ9x5N9Mojd69vZuAvfkTj gPiYwU77d91qSf1Dx4frHNh72BB1u0guKa9ZSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.surfnet.nl for eur.nl/SOA
	Received 389 bytes from 192.87.36.2
	;; Response received from [192.87.36.2] 389 octets ;; HEADER SECTION ;; id = 30781 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eur.nl. IN SOA ;; ANSWER SECTION (2 records) eur.nl. 28800 IN SOA ( ns6.eur.nl. dnsmaster.nic.eur.nl. 2014622930 ;serial 86400 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) eur.nl. 28800 IN RRSIG ( SOA 8 2 28800 20260816081246 20260812071246 62223 eur.nl. IrUJdl/ToR1A/vdAmt+1TqXwNUiSRdPFo1ZD4mIXLAavg4ydGV3aeTFV/9AR+7vEllGiqjkqvUI8 pvPaMm9Gw1AGWDmlLDRFkod/6UlqGsFHgXuyCo66MOUlH99gHYNyhPQNGFDasHbgGdxh3rI2i0P3 dMPaX4Z9d4X6tl22QkJGodUa5tjxXXyPSNpkR9dZVBt5Y+lx31CSihLEpWNfD5BDx4E9rTYEu04K wSSBHfqvk79xSmNAk8K2LA+V45u8pdbn7AqKQyjNiioRTzhkMDBSAwzQ9x5N9Mojd69vZuAvfkTj gPiYwU77d91qSf1Dx4frHNh72BB1u0guKa9ZSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.zurich.surf.net for eur.nl/SOA
	Received 389 bytes from 195.176.255.9
	;; Response received from [195.176.255.9] 389 octets ;; HEADER SECTION ;; id = 49162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eur.nl. IN SOA ;; ANSWER SECTION (2 records) eur.nl. 28800 IN SOA ( ns6.eur.nl. dnsmaster.nic.eur.nl. 2014622930 ;serial 86400 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) eur.nl. 28800 IN RRSIG ( SOA 8 2 28800 20260816081246 20260812071246 62223 eur.nl. IrUJdl/ToR1A/vdAmt+1TqXwNUiSRdPFo1ZD4mIXLAavg4ydGV3aeTFV/9AR+7vEllGiqjkqvUI8 pvPaMm9Gw1AGWDmlLDRFkod/6UlqGsFHgXuyCo66MOUlH99gHYNyhPQNGFDasHbgGdxh3rI2i0P3 dMPaX4Z9d4X6tl22QkJGodUa5tjxXXyPSNpkR9dZVBt5Y+lx31CSihLEpWNfD5BDx4E9rTYEu04K wSSBHfqvk79xSmNAk8K2LA+V45u8pdbn7AqKQyjNiioRTzhkMDBSAwzQ9x5N9Mojd69vZuAvfkTj gPiYwU77d91qSf1Dx4frHNh72BB1u0guKa9ZSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.surfnet.nl for eur.nl/A
	eur.nl A RR has value 145.5.1.13
	Found 1 RRSIGs over A RRset
	`eur.nl. 28800 IN RRSIG ( A 8 2 28800 20260815192706 20260811185806 62223 eur.nl. a3FRL5h1fA/31VC+zgZRUsetA9L7oYEc00yq9Jboutw7V8eDo4MUo2rbbiYmGsEkrA35LRdK38GB hVW56wqBg62rwF8artXHc2KWApHI3lmSck1fMc8gkl6G7gBrx7yU0NLXLGhYJtPqSmnk5VRiikFb 7keqzITm063kZA7kaHttGdfJ1nfPCpE2TJsd4eGxno48BHxjufYhXELTkwRdFVQXjd1yEjv1m4m6 NXJa1Bk3nvBklOrrilsaJ223SYQ1lEqrCFiqMVCPKlar6dFiAl4vrk60jWn89spE3cBSXOZ23Ue5 /FDQcbo8tu8LZaK80NKLUqo2lyFqbK6O2at5Lw== )`
	RRSIG=62223 and DNSKEY=62223 verifies the A RRset

eur.nl

	Query to ns1.zurich.surf.net for eur.nl/A
	Received 345 bytes from 195.176.255.9
	;; Response received from [195.176.255.9] 345 octets ;; HEADER SECTION ;; id = 10575 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eur.nl. IN A ;; ANSWER SECTION (2 records) eur.nl. 28800 IN A 145.5.1.13 eur.nl. 28800 IN RRSIG ( A 8 2 28800 20260815192706 20260811185806 62223 eur.nl. a3FRL5h1fA/31VC+zgZRUsetA9L7oYEc00yq9Jboutw7V8eDo4MUo2rbbiYmGsEkrA35LRdK38GB hVW56wqBg62rwF8artXHc2KWApHI3lmSck1fMc8gkl6G7gBrx7yU0NLXLGhYJtPqSmnk5VRiikFb 7keqzITm063kZA7kaHttGdfJ1nfPCpE2TJsd4eGxno48BHxjufYhXELTkwRdFVQXjd1yEjv1m4m6 NXJa1Bk3nvBklOrrilsaJ223SYQ1lEqrCFiqMVCPKlar6dFiAl4vrk60jWn89spE3cBSXOZ23Ue5 /FDQcbo8tu8LZaK80NKLUqo2lyFqbK6O2at5Lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.zurich.surf.net is authoritative for eur.nl
	Found RRSIG signed by eur.nl zone
	Query to ns1.zurich.surf.net for eur.nl/A
	eur.nl A RR has value 145.5.1.13
	Found 1 RRSIGs over A RRset
	`eur.nl. 28800 IN RRSIG ( A 8 2 28800 20260815192706 20260811185806 62223 eur.nl. a3FRL5h1fA/31VC+zgZRUsetA9L7oYEc00yq9Jboutw7V8eDo4MUo2rbbiYmGsEkrA35LRdK38GB hVW56wqBg62rwF8artXHc2KWApHI3lmSck1fMc8gkl6G7gBrx7yU0NLXLGhYJtPqSmnk5VRiikFb 7keqzITm063kZA7kaHttGdfJ1nfPCpE2TJsd4eGxno48BHxjufYhXELTkwRdFVQXjd1yEjv1m4m6 NXJa1Bk3nvBklOrrilsaJ223SYQ1lEqrCFiqMVCPKlar6dFiAl4vrk60jWn89spE3cBSXOZ23Ue5 /FDQcbo8tu8LZaK80NKLUqo2lyFqbK6O2at5Lw== )`
	RRSIG=62223 and DNSKEY=62223 verifies the A RRset

eur.nl

	Query to ns2.surfnet.nl for eur.nl/A
	Received 345 bytes from 192.87.36.2
	;; Response received from [192.87.36.2] 345 octets ;; HEADER SECTION ;; id = 1867 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eur.nl. IN A ;; ANSWER SECTION (2 records) eur.nl. 28800 IN A 145.5.1.13 eur.nl. 28800 IN RRSIG ( A 8 2 28800 20260815192706 20260811185806 62223 eur.nl. a3FRL5h1fA/31VC+zgZRUsetA9L7oYEc00yq9Jboutw7V8eDo4MUo2rbbiYmGsEkrA35LRdK38GB hVW56wqBg62rwF8artXHc2KWApHI3lmSck1fMc8gkl6G7gBrx7yU0NLXLGhYJtPqSmnk5VRiikFb 7keqzITm063kZA7kaHttGdfJ1nfPCpE2TJsd4eGxno48BHxjufYhXELTkwRdFVQXjd1yEjv1m4m6 NXJa1Bk3nvBklOrrilsaJ223SYQ1lEqrCFiqMVCPKlar6dFiAl4vrk60jWn89spE3cBSXOZ23Ue5 /FDQcbo8tu8LZaK80NKLUqo2lyFqbK6O2at5Lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.surfnet.nl is authoritative for eur.nl
	Found RRSIG signed by eur.nl zone
	Query to ns2.surfnet.nl for eur.nl/A
	eur.nl A RR has value 145.5.1.13
	Found 1 RRSIGs over A RRset
	`eur.nl. 28800 IN RRSIG ( A 8 2 28800 20260815192706 20260811185806 62223 eur.nl. a3FRL5h1fA/31VC+zgZRUsetA9L7oYEc00yq9Jboutw7V8eDo4MUo2rbbiYmGsEkrA35LRdK38GB hVW56wqBg62rwF8artXHc2KWApHI3lmSck1fMc8gkl6G7gBrx7yU0NLXLGhYJtPqSmnk5VRiikFb 7keqzITm063kZA7kaHttGdfJ1nfPCpE2TJsd4eGxno48BHxjufYhXELTkwRdFVQXjd1yEjv1m4m6 NXJa1Bk3nvBklOrrilsaJ223SYQ1lEqrCFiqMVCPKlar6dFiAl4vrk60jWn89spE3cBSXOZ23Ue5 /FDQcbo8tu8LZaK80NKLUqo2lyFqbK6O2at5Lw== )`
	RRSIG=62223 and DNSKEY=62223 verifies the A RRset

eur.nl

	Query to ns3.surfnet.nl for eur.nl/A
	Received 345 bytes from 195.169.124.71
	;; Response received from [195.169.124.71] 345 octets ;; HEADER SECTION ;; id = 24720 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eur.nl. IN A ;; ANSWER SECTION (2 records) eur.nl. 28800 IN A 145.5.1.13 eur.nl. 28800 IN RRSIG ( A 8 2 28800 20260815192706 20260811185806 62223 eur.nl. a3FRL5h1fA/31VC+zgZRUsetA9L7oYEc00yq9Jboutw7V8eDo4MUo2rbbiYmGsEkrA35LRdK38GB hVW56wqBg62rwF8artXHc2KWApHI3lmSck1fMc8gkl6G7gBrx7yU0NLXLGhYJtPqSmnk5VRiikFb 7keqzITm063kZA7kaHttGdfJ1nfPCpE2TJsd4eGxno48BHxjufYhXELTkwRdFVQXjd1yEjv1m4m6 NXJa1Bk3nvBklOrrilsaJ223SYQ1lEqrCFiqMVCPKlar6dFiAl4vrk60jWn89spE3cBSXOZ23Ue5 /FDQcbo8tu8LZaK80NKLUqo2lyFqbK6O2at5Lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.surfnet.nl is authoritative for eur.nl
	Found RRSIG signed by eur.nl zone
	Query to ns3.surfnet.nl for eur.nl/A
	eur.nl A RR has value 145.5.1.13
	Found 1 RRSIGs over A RRset
	`eur.nl. 28800 IN RRSIG ( A 8 2 28800 20260815192706 20260811185806 62223 eur.nl. a3FRL5h1fA/31VC+zgZRUsetA9L7oYEc00yq9Jboutw7V8eDo4MUo2rbbiYmGsEkrA35LRdK38GB hVW56wqBg62rwF8artXHc2KWApHI3lmSck1fMc8gkl6G7gBrx7yU0NLXLGhYJtPqSmnk5VRiikFb 7keqzITm063kZA7kaHttGdfJ1nfPCpE2TJsd4eGxno48BHxjufYhXELTkwRdFVQXjd1yEjv1m4m6 NXJa1Bk3nvBklOrrilsaJ223SYQ1lEqrCFiqMVCPKlar6dFiAl4vrk60jWn89spE3cBSXOZ23Ue5 /FDQcbo8tu8LZaK80NKLUqo2lyFqbK6O2at5Lw== )`
	RRSIG=62223 and DNSKEY=62223 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test eur.nl at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: