DNSSEC Analyzer

Domain Name:

Time: 2023-02-02 20:49:11 UTC, NTP stratum 4

Analyzing DNSSEC problems for gov.ru

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (865 octets) ;; HEADER SECTION ;; id = 3401 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcVnO2jZFx4756Rb/yAhJnsl72eemsObU43nclmXwqdJlp+kC5WQjGYkqLT5xkaUCPhkr4NK LLrIBZXeSGazc6gx/yrrMtUpXcQvax6kfDJPTu974OmeEbtjyyP7ZG5tUfSwNWt/4EuxDNmZTESG 8jU0ZLjYIB11pK0gSXQbMVPyIyGtFGHMPx6UxWn6zUzpECWRFbqEvkA6Y13zeJ1jG2Rki/zs7a/o 13FTl/kI9013Eh6l6Kc2zxbc14GS8fpM0/xQIrZZyeiXj/2C4RcsPeqWuNj9m0qSQrbrCZtLHb20 U8x1uue4iwSX9y7LpwZd6vjYd1d6dgBa1Xxgc/TC+m8= ) ; Key ID = 951 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20230221000000 20230131000000 20326 . AYJ7I4skgye9MjLJrJjl7J2wDlp1R/69q9jEMRYlwMfRY7qHt1RakZWIeFi784GfquGIzrLUnimU Q+dzG4SbixzhnQQcnC+tRvt4IhhEDb/GiHB7wRbm8Yji1XIvNpdFILVA78ZDUd2mi4iUbc3NXSdw jnGhoncQkEAu5ocADtsmiZJFGldWBK+MSJBA5R8uGyqz9zWznSMPtfSqjmb4RJcnJRP90L5YddO/ iW6puIj3ILRRUyDdq9RmjaHXpsT4HIK7/BQ2rFyW3b8oo4bv4GS6WnN4azlKCWiC7D99gWQhwX0y GUvaAuWLkgUyOCDJMu/3j3R2j250EMvh7qtOSA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcVnO2jZFx4756Rb/yAhJnsl72eemsObU43nclmXwqdJlp+kC5WQjGYkqLT5xkaUCPhkr4NK LLrIBZXeSGazc6gx/yrrMtUpXcQvax6kfDJPTu974OmeEbtjyyP7ZG5tUfSwNWt/4EuxDNmZTESG 8jU0ZLjYIB11pK0gSXQbMVPyIyGtFGHMPx6UxWn6zUzpECWRFbqEvkA6Y13zeJ1jG2Rki/zs7a/o 13FTl/kI9013Eh6l6Kc2zxbc14GS8fpM0/xQIrZZyeiXj/2C4RcsPeqWuNj9m0qSQrbrCZtLHb20 U8x1uue4iwSX9y7LpwZd6vjYd1d6dgBa1Xxgc/TC+m8= ) ; Key ID = 951`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20230221000000 20230131000000 20326 . AYJ7I4skgye9MjLJrJjl7J2wDlp1R/69q9jEMRYlwMfRY7qHt1RakZWIeFi784GfquGIzrLUnimU Q+dzG4SbixzhnQQcnC+tRvt4IhhEDb/GiHB7wRbm8Yji1XIvNpdFILVA78ZDUd2mi4iUbc3NXSdw jnGhoncQkEAu5ocADtsmiZJFGldWBK+MSJBA5R8uGyqz9zWznSMPtfSqjmb4RJcnJRP90L5YddO/ iW6puIj3ILRRUyDdq9RmjaHXpsT4HIK7/BQ2rFyW3b8oo4bv4GS6WnN4azlKCWiC7D99gWQhwX0y GUvaAuWLkgUyOCDJMu/3j3R2j250EMvh7qtOSA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=951 is now in the chain-of-trust
	Query to c.root-servers.net for gov.ru/A
	Received 682 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (682 octets) ;; HEADER SECTION ;; id = 5942 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 33257 8 2 641a0ba027a1027d2fd17b5743931804eebb329b8b514a357d1ef290f159d79f ) ru. 86400 IN RRSIG ( DS 8 1 86400 20230215170000 20230202160000 951 . Gt8M7uF1RjH7dBcA0XHgJ+fUDsaUKJsbMxFAx+1VBCUWitpM6/vsOmlbJnNMAXcG44sEytHzy53C aBFQ+MNBzmvcpeXtLOAtpsFktQwU2D7Jdif/0I1wEZuzzjTJ4OuXKsm4hGSRFwTi8EQyEKEJUsKs TSSZtCCcirhIXqeRxUv87jO/ru+01/VVax4N3XEOmx4GpwRIZUtB2P6bSeZkZaaLnMJl1oM/kiuF 6MYxJgPf06YT6Fy/H6P5rUyi5Ps2IeGyXu1Mfgmp9cM01RVXmDh7u2AXB7uMqmN/8VMxv7uBLiIq 3BXniD2E6tgverv1dRibkJ1k1XPFHBjAjGAa7A== ) ;; ADDITIONAL SECTION (11 records) f.dns.ripn.net. 172800 IN A 193.232.156.17 e.dns.ripn.net. 172800 IN A 193.232.142.17 d.dns.ripn.net. 172800 IN A 194.190.124.17 b.dns.ripn.net. 172800 IN A 194.85.252.62 a.dns.ripn.net. 172800 IN A 193.232.128.6 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to k.root-servers.net for ru/DNSKEY
	Received 678 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (678 octets) ;; HEADER SECTION ;; id = 54190 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 33257 8 2 641a0ba027a1027d2fd17b5743931804eebb329b8b514a357d1ef290f159d79f ) ru. 86400 IN RRSIG ( DS 8 1 86400 20230215170000 20230202160000 951 . Gt8M7uF1RjH7dBcA0XHgJ+fUDsaUKJsbMxFAx+1VBCUWitpM6/vsOmlbJnNMAXcG44sEytHzy53C aBFQ+MNBzmvcpeXtLOAtpsFktQwU2D7Jdif/0I1wEZuzzjTJ4OuXKsm4hGSRFwTi8EQyEKEJUsKs TSSZtCCcirhIXqeRxUv87jO/ru+01/VVax4N3XEOmx4GpwRIZUtB2P6bSeZkZaaLnMJl1oM/kiuF 6MYxJgPf06YT6Fy/H6P5rUyi5Ps2IeGyXu1Mfgmp9cM01RVXmDh7u2AXB7uMqmN/8VMxv7uBLiIq 3BXniD2E6tgverv1dRibkJ1k1XPFHBjAjGAa7A== ) ;; ADDITIONAL SECTION (11 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 b.dns.ripn.net. 172800 IN A 194.85.252.62 d.dns.ripn.net. 172800 IN A 194.190.124.17 e.dns.ripn.net. 172800 IN A 193.232.142.17 f.dns.ripn.net. 172800 IN A 193.232.156.17 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone ru

	Checking DS between . and ru
	Query to e.root-servers.net for ru/DS
	Received 366 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (366 octets) ;; HEADER SECTION ;; id = 35739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ru. IN DS ;; ANSWER SECTION (2 records) ru. 86400 IN DS ( 33257 8 2 641a0ba027a1027d2fd17b5743931804eebb329b8b514a357d1ef290f159d79f ) ru. 86400 IN RRSIG ( DS 8 1 86400 20230215170000 20230202160000 951 . Gt8M7uF1RjH7dBcA0XHgJ+fUDsaUKJsbMxFAx+1VBCUWitpM6/vsOmlbJnNMAXcG44sEytHzy53C aBFQ+MNBzmvcpeXtLOAtpsFktQwU2D7Jdif/0I1wEZuzzjTJ4OuXKsm4hGSRFwTi8EQyEKEJUsKs TSSZtCCcirhIXqeRxUv87jO/ru+01/VVax4N3XEOmx4GpwRIZUtB2P6bSeZkZaaLnMJl1oM/kiuF 6MYxJgPf06YT6Fy/H6P5rUyi5Ps2IeGyXu1Mfgmp9cM01RVXmDh7u2AXB7uMqmN/8VMxv7uBLiIq 3BXniD2E6tgverv1dRibkJ1k1XPFHBjAjGAa7A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for ru in the . zone
	DS=33257/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ru. 86400 IN RRSIG ( DS 8 1 86400 20230215170000 20230202160000 951 . Gt8M7uF1RjH7dBcA0XHgJ+fUDsaUKJsbMxFAx+1VBCUWitpM6/vsOmlbJnNMAXcG44sEytHzy53C aBFQ+MNBzmvcpeXtLOAtpsFktQwU2D7Jdif/0I1wEZuzzjTJ4OuXKsm4hGSRFwTi8EQyEKEJUsKs TSSZtCCcirhIXqeRxUv87jO/ru+01/VVax4N3XEOmx4GpwRIZUtB2P6bSeZkZaaLnMJl1oM/kiuF 6MYxJgPf06YT6Fy/H6P5rUyi5Ps2IeGyXu1Mfgmp9cM01RVXmDh7u2AXB7uMqmN/8VMxv7uBLiIq 3BXniD2E6tgverv1dRibkJ1k1XPFHBjAjGAa7A== )`
	RRSIG=951 and DNSKEY=951 verifies the DS RRset
	DS=33257/SHA-256 is now in the chain-of-trust
	`ru. 86400 IN DS ( 33257 8 2 641a0ba027a1027d2fd17b5743931804eebb329b8b514a357d1ef290f159d79f )`
	Query to a.dns.ripn.net for ru/DNSKEY
	Received 745 bytes from 193.232.128.6
	;; Response received from 193.232.128.6 (745 octets) ;; HEADER SECTION ;; id = 41727 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (3 records) ru. 345600 IN DNSKEY ( 257 3 8 AwEAAa/EEOFpDs6lI4a/NWZ6JKoMW41yXIBpFfxbrYTyQX4esuzvxbF5LkCQGdQnSTbt5RXEZUJT WmnXp2f91ZV8BmDY5n9PpfMjdicp/u7h4V81AJ6tOnU/tDOTFJ42tioUgON7lID5Go1fVuMS2e+k /U3PhbC6pMvEr6OV5iL3Qf1ncBAk7ukxRwI+B80B/vDYMjVd5hXpFOf8TCf7cJgcbK/ZbpK5LbfM gWoSH7d3OPI6FLsX2XVyMCTR3Mr1gX6ErI+a904s2pnvx4NkqcWJxFT1RmTB4JyKdQFTR9lR4oxZ ZEU3/OkT3xEq5n/uXLBbCwQbQYN0h0DwTDC9d3GODfc= ) ; Key ID = 33257 ru. 345600 IN DNSKEY ( 256 3 8 AwEAAcyWpoytOrieucUjnApXStRnGbBXb0srnuq7VUyQaAePa3rsjoELuWFZ31OmThMyArZGolU9 EXbK44REkMFqCj2rT01FFXwcNthH0D9CSF68+jIhft96O7uHB1OHj6/4nnTHbQl+dZSSVa2eaFSI sjjinEjGsO+IyyPA6Y86xQzL ) ; Key ID = 5244 ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20230221000000 20230201000000 33257 ru. JLIERSwS8/TfVNeuwoXFwmoOsK7IJPN0ztj3Ue+yq75376jZC+Y1hXh/JTWZ7Zo1VWvBasyc6ppm IKbHy8+mgb4Vdbv27NgtH6B0YVNfvu/Xa26j9pnuQPs5HJ9SwZfHEdicIvYH6OHYunhBqJx3KY0/ OuiXGeKkLvqrKfyIhKNyT/W6O9JNeX/coG1hlmmdo0VzTUaesQFYY47ljfqzvh7erhLfh+lfS9lx zgaGPMG//ZnWg6F/BYhFWmpT65+q9ZAlkuus669RD1te1ZssbkCaxA1jXlKbUmeZS4C+XjpaBNgp LQWo9lqJC6F8bP1bOKdWtfiwoqCyEj2M/uOReQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for ru
	`ru. 345600 IN DNSKEY ( 257 3 8 AwEAAa/EEOFpDs6lI4a/NWZ6JKoMW41yXIBpFfxbrYTyQX4esuzvxbF5LkCQGdQnSTbt5RXEZUJT WmnXp2f91ZV8BmDY5n9PpfMjdicp/u7h4V81AJ6tOnU/tDOTFJ42tioUgON7lID5Go1fVuMS2e+k /U3PhbC6pMvEr6OV5iL3Qf1ncBAk7ukxRwI+B80B/vDYMjVd5hXpFOf8TCf7cJgcbK/ZbpK5LbfM gWoSH7d3OPI6FLsX2XVyMCTR3Mr1gX6ErI+a904s2pnvx4NkqcWJxFT1RmTB4JyKdQFTR9lR4oxZ ZEU3/OkT3xEq5n/uXLBbCwQbQYN0h0DwTDC9d3GODfc= ) ; Key ID = 33257`
	`ru. 345600 IN DNSKEY ( 256 3 8 AwEAAcyWpoytOrieucUjnApXStRnGbBXb0srnuq7VUyQaAePa3rsjoELuWFZ31OmThMyArZGolU9 EXbK44REkMFqCj2rT01FFXwcNthH0D9CSF68+jIhft96O7uHB1OHj6/4nnTHbQl+dZSSVa2eaFSI sjjinEjGsO+IyyPA6Y86xQzL ) ; Key ID = 5244`
	DNSKEY=33257/SEP is now in the chain-of-trust
	DS=33257/SHA-256 verifies DNSKEY=33257/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20230221000000 20230201000000 33257 ru. JLIERSwS8/TfVNeuwoXFwmoOsK7IJPN0ztj3Ue+yq75376jZC+Y1hXh/JTWZ7Zo1VWvBasyc6ppm IKbHy8+mgb4Vdbv27NgtH6B0YVNfvu/Xa26j9pnuQPs5HJ9SwZfHEdicIvYH6OHYunhBqJx3KY0/ OuiXGeKkLvqrKfyIhKNyT/W6O9JNeX/coG1hlmmdo0VzTUaesQFYY47ljfqzvh7erhLfh+lfS9lx zgaGPMG//ZnWg6F/BYhFWmpT65+q9ZAlkuus669RD1te1ZssbkCaxA1jXlKbUmeZS4C+XjpaBNgp LQWo9lqJC6F8bP1bOKdWtfiwoqCyEj2M/uOReQ== )`
	RRSIG=33257 and DNSKEY=33257/SEP verifies the DNSKEY RRset
	DNSKEY=5244 is now in the chain-of-trust
	Query to e.dns.ripn.net for gov.ru/A
	Received 378 bytes from 193.232.142.17
	;; Response received from 193.232.142.17 (378 octets) ;; HEADER SECTION ;; id = 14041 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov.ru. 345600 IN NS ns.gov.ru. gov.ru. 345600 IN NS ns2.gov.ru. gov.ru. 345600 IN NS acl.dns.ripn.net. gov.ru. 345600 IN NS bcl.dns.ripn.net. gov.ru. 345600 IN NS ccl.dns.ripn.net. gov.ru. 345600 IN DS ( 28029 13 2 d5194a16ba2eed6dd0c231c56e6e0df944ffaa35715f2b2e7fdd0582dc74ad73 ) gov.ru. 345600 IN RRSIG ( DS 8 2 345600 20230301204928 20230128181915 5244 ru. hXU0UbgMBZqDrSe7TmPFT9XDbTRSsK02gcenyUeyDBOxF/CxUJOvbTeyo4o8WD4wRWcz97ErDJUt vPNjS6JSXBWgF5vujagHbFibInZ8fgcUosYugTnjSiAH7debukxO8MeLLcfkWuxQRMIpNZTVVE92 DXm8G1EJ0TxCGmjbbMk= ) ;; ADDITIONAL SECTION (3 records) ns.gov.ru. 345600 IN A 95.173.128.77 ns2.gov.ru. 345600 IN A 95.173.128.80 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to a.dns.ripn.net for gov.ru/DNSKEY
	Received 548 bytes from 193.232.128.6
	;; Response received from 193.232.128.6 (548 octets) ;; HEADER SECTION ;; id = 10265 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV.RU. 345600 IN NS ns.gov.RU. GOV.RU. 345600 IN NS bcl.dns.ripn.net. GOV.RU. 345600 IN NS acl.dns.ripn.net. GOV.RU. 345600 IN NS ns2.gov.RU. GOV.RU. 345600 IN NS ccl.dns.ripn.net. gov.ru. 345600 IN DS ( 28029 13 2 d5194a16ba2eed6dd0c231c56e6e0df944ffaa35715f2b2e7fdd0582dc74ad73 ) gov.ru. 345600 IN RRSIG ( DS 8 2 345600 20230301204928 20230128181915 5244 ru. hXU0UbgMBZqDrSe7TmPFT9XDbTRSsK02gcenyUeyDBOxF/CxUJOvbTeyo4o8WD4wRWcz97ErDJUt vPNjS6JSXBWgF5vujagHbFibInZ8fgcUosYugTnjSiAH7debukxO8MeLLcfkWuxQRMIpNZTVVE92 DXm8G1EJ0TxCGmjbbMk= ) ;; ADDITIONAL SECTION (9 records) ns.GOV.RU. 345600 IN A 95.173.128.77 acl.dns.RIPN.net. 1800 IN A 193.232.66.15 bcl.dns.RIPN.net. 1800 IN A 194.85.84.15 ccl.dns.RIPN.net. 1800 IN A 193.232.82.15 ns2.gov.ru. 345600 IN A 95.173.128.80 acl.dns.RIPN.net. 1800 IN AAAA 2001:6d0:ffd5:0:193:232:66:15 bcl.dns.RIPN.net. 1800 IN AAAA 2001:6d0:ffd6:0:194:85:84:15 ccl.dns.RIPN.net. 1800 IN AAAA 2001:6d0:ffd7:0:193:232:82:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone gov.ru

gov.ru

	Checking DS between ru and gov.ru
	Query to f.dns.ripn.net for gov.ru/DS
	Received 251 bytes from 193.232.156.17
	;; Response received from 193.232.156.17 (251 octets) ;; HEADER SECTION ;; id = 49577 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN DS ;; ANSWER SECTION (2 records) GOV.RU. 345600 IN DS ( 28029 13 2 d5194a16ba2eed6dd0c231c56e6e0df944ffaa35715f2b2e7fdd0582dc74ad73 ) gov.ru. 345600 IN RRSIG ( DS 8 2 345600 20230301204928 20230128181915 5244 ru. hXU0UbgMBZqDrSe7TmPFT9XDbTRSsK02gcenyUeyDBOxF/CxUJOvbTeyo4o8WD4wRWcz97ErDJUt vPNjS6JSXBWgF5vujagHbFibInZ8fgcUosYugTnjSiAH7debukxO8MeLLcfkWuxQRMIpNZTVVE92 DXm8G1EJ0TxCGmjbbMk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for gov.ru in the ru zone
	DS=28029/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov.ru. 345600 IN RRSIG ( DS 8 2 345600 20230301204928 20230128181915 5244 ru. hXU0UbgMBZqDrSe7TmPFT9XDbTRSsK02gcenyUeyDBOxF/CxUJOvbTeyo4o8WD4wRWcz97ErDJUt vPNjS6JSXBWgF5vujagHbFibInZ8fgcUosYugTnjSiAH7debukxO8MeLLcfkWuxQRMIpNZTVVE92 DXm8G1EJ0TxCGmjbbMk= )`
	RRSIG=5244 and DNSKEY=5244 verifies the DS RRset
	DS=28029/SHA-256 is now in the chain-of-trust
	`GOV.RU. 345600 IN DS ( 28029 13 2 d5194a16ba2eed6dd0c231c56e6e0df944ffaa35715f2b2e7fdd0582dc74ad73 )`
	Query to ns2.gov.RU for gov.ru/DNSKEY
	Received 479 bytes from 95.173.128.80
	;; Response received from 95.173.128.80 (479 octets) ;; HEADER SECTION ;; id = 1204 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN DNSKEY ;; ANSWER SECTION (5 records) gov.ru. 7200 IN DNSKEY ( 257 3 13 QIzS5hpp7BeojUPq+hWfESiOsaeLtYhE0RKGosuzybWaU7e9BXDFfOfd4aMAX1as4widOxtFtp1d zNTz3mtNrg== ) ; Key ID = 28029 gov.ru. 7200 IN DNSKEY ( 256 3 13 32G4NZ0rydYmOni+s458c/LZG7gIrQkOQAglz82WR7mGA8+Fvcq7j6wO/7YXh6eihKd7hvnpgtT1 3BeHWfLckQ== ) ; Key ID = 26558 gov.ru. 7200 IN DNSKEY ( 256 3 13 LbmDcNPRH+7TEn1+KJWSxa8hX6zRNkMMuJiMN0syx90ORofCrpeZdjUYOprHEKqrPiAl0BhMUuss VTjiaY6/YA== ) ; Key ID = 19624 gov.ru. 7200 IN RRSIG ( DNSKEY 13 2 7200 20230304194000 20230202194000 26558 gov.ru. bbPCB9cTlCHI7AUIIY1lCYVreewqGRzCExvEcQ+H6kvyDkGlZ1RDwx2aeR2FgvlCuVcibYK9zuiE gdHDXv1GGQ== ) gov.ru. 7200 IN RRSIG ( DNSKEY 13 2 7200 20230304194000 20230202194000 28029 gov.ru. 9N89hy9ZETMjJYHUoFhMDILSLa9AGRPRXItYivc2WBGENMn83AJ37QyAWQuRYAOclRlz6ftDOHVd bHNFk5OC+A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for gov.ru
	`gov.ru. 7200 IN DNSKEY ( 257 3 13 QIzS5hpp7BeojUPq+hWfESiOsaeLtYhE0RKGosuzybWaU7e9BXDFfOfd4aMAX1as4widOxtFtp1d zNTz3mtNrg== ) ; Key ID = 28029`
	`gov.ru. 7200 IN DNSKEY ( 256 3 13 32G4NZ0rydYmOni+s458c/LZG7gIrQkOQAglz82WR7mGA8+Fvcq7j6wO/7YXh6eihKd7hvnpgtT1 3BeHWfLckQ== ) ; Key ID = 26558`
	`gov.ru. 7200 IN DNSKEY ( 256 3 13 LbmDcNPRH+7TEn1+KJWSxa8hX6zRNkMMuJiMN0syx90ORofCrpeZdjUYOprHEKqrPiAl0BhMUuss VTjiaY6/YA== ) ; Key ID = 19624`
	DNSKEY=28029/SEP is now in the chain-of-trust
	DS=28029/SHA-256 verifies DNSKEY=28029/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`gov.ru. 7200 IN RRSIG ( DNSKEY 13 2 7200 20230304194000 20230202194000 26558 gov.ru. bbPCB9cTlCHI7AUIIY1lCYVreewqGRzCExvEcQ+H6kvyDkGlZ1RDwx2aeR2FgvlCuVcibYK9zuiE gdHDXv1GGQ== )`
	`gov.ru. 7200 IN RRSIG ( DNSKEY 13 2 7200 20230304194000 20230202194000 28029 gov.ru. 9N89hy9ZETMjJYHUoFhMDILSLa9AGRPRXItYivc2WBGENMn83AJ37QyAWQuRYAOclRlz6ftDOHVd bHNFk5OC+A== )`
	RRSIG=26558 and DNSKEY=26558 verifies the DNSKEY RRset
	RRSIG=28029 and DNSKEY=28029/SEP verifies the DNSKEY RRset
	DNSKEY=26558 is now in the chain-of-trust
	DNSKEY=19624 is now in the chain-of-trust
	Query to ns.gov.RU for gov.ru/A
	Received 608 bytes from 95.173.128.77
	;; Response received from 95.173.128.77 (608 octets) ;; HEADER SECTION ;; id = 39792 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20230304194000 20230202194000 26558 gov.ru. TD84nA263BZj3yUerhaBc5SfEuNE0o8nIjPDY8MVKRUnUvPyfPZGQ0ylm4dPAoDDLb6Bybii6AZt miBDY6NuvQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20230304194000 20230202194000 26558 gov.ru. l4I5Wm7Jd4PQKknswE7oM1tR+os//7cRUJOXRjkT3UxlQNZtZmypiwyDKW5O+vHfd5xWgh6Nyu9e VbfAzAQ5XA== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. vk4nu5o0FgyIokIPN3Fnnjr+4nl/kF3fMLK+o6v9gkJoOJTyQJJnsoVV0jstPYxwqKBs7NR8DuDi WQhJ+3s20Q== ) ns2.gov.ru. 1800 IN A 95.173.128.80 ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. +GVqdBKFko4p2ADtRBHYt2UHqOVJ9ApSkWbgEA5Usdt/x8BnopqiGjl4m6aYd2EacI5XIQconFNZ 6phQe8AZ4w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns.gov.RU is authoritative for gov.ru
	Found RRSIG signed by gov.ru zone
	Query to ccl.dns.ripn.net for gov.ru/SOA
	Received 616 bytes from 193.232.82.15
	;; Response received from 193.232.82.15 (616 octets) ;; HEADER SECTION ;; id = 14298 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN SOA ;; ANSWER SECTION (2 records) gov.ru. 1800 IN SOA ( ns.gov.ru. ncc.gov.ru. 4023020204 ;serial 2400 ;refresh 1200 ;retry 2592000 ;expire 1800 ;minimum ) gov.ru. 1800 IN RRSIG ( SOA 13 2 1800 20230304194000 20230202194000 26558 gov.ru. /VdPeNSsn3sHFz12bClubWAmNofNYvwYhZHQjKpa/rl3W0N4jeOxXZ/tupdOcAiNeL0azpbbKgT9 UgRvEBZpmA== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20230304194000 20230202194000 26558 gov.ru. l4I5Wm7Jd4PQKknswE7oM1tR+os//7cRUJOXRjkT3UxlQNZtZmypiwyDKW5O+vHfd5xWgh6Nyu9e VbfAzAQ5XA== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. vk4nu5o0FgyIokIPN3Fnnjr+4nl/kF3fMLK+o6v9gkJoOJTyQJJnsoVV0jstPYxwqKBs7NR8DuDi WQhJ+3s20Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. +GVqdBKFko4p2ADtRBHYt2UHqOVJ9ApSkWbgEA5Usdt/x8BnopqiGjl4m6aYd2EacI5XIQconFNZ 6phQe8AZ4w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.gov.ru for gov.ru/SOA
	Received 616 bytes from 95.173.128.80
	;; Response received from 95.173.128.80 (616 octets) ;; HEADER SECTION ;; id = 33310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN SOA ;; ANSWER SECTION (2 records) gov.ru. 1800 IN SOA ( ns.gov.ru. ncc.gov.ru. 4023020204 ;serial 2400 ;refresh 1200 ;retry 2592000 ;expire 1800 ;minimum ) gov.ru. 1800 IN RRSIG ( SOA 13 2 1800 20230304194000 20230202194000 26558 gov.ru. /VdPeNSsn3sHFz12bClubWAmNofNYvwYhZHQjKpa/rl3W0N4jeOxXZ/tupdOcAiNeL0azpbbKgT9 UgRvEBZpmA== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20230304194000 20230202194000 26558 gov.ru. l4I5Wm7Jd4PQKknswE7oM1tR+os//7cRUJOXRjkT3UxlQNZtZmypiwyDKW5O+vHfd5xWgh6Nyu9e VbfAzAQ5XA== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. vk4nu5o0FgyIokIPN3Fnnjr+4nl/kF3fMLK+o6v9gkJoOJTyQJJnsoVV0jstPYxwqKBs7NR8DuDi WQhJ+3s20Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. +GVqdBKFko4p2ADtRBHYt2UHqOVJ9ApSkWbgEA5Usdt/x8BnopqiGjl4m6aYd2EacI5XIQconFNZ 6phQe8AZ4w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to acl.dns.ripn.net for gov.ru/SOA
	Timeout querying acl.dns.ripn.net/193.232.66.15 for gov.ru/SOA
	All Queries to acl.dns.ripn.net for gov.ru/SOA timed out or failed
	Query to bcl.dns.ripn.net for gov.ru/SOA
	Received 616 bytes from 194.85.84.15
	;; Response received from 194.85.84.15 (616 octets) ;; HEADER SECTION ;; id = 51683 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN SOA ;; ANSWER SECTION (2 records) gov.ru. 1800 IN SOA ( ns.gov.ru. ncc.gov.ru. 4023020204 ;serial 2400 ;refresh 1200 ;retry 2592000 ;expire 1800 ;minimum ) gov.ru. 1800 IN RRSIG ( SOA 13 2 1800 20230304194000 20230202194000 26558 gov.ru. /VdPeNSsn3sHFz12bClubWAmNofNYvwYhZHQjKpa/rl3W0N4jeOxXZ/tupdOcAiNeL0azpbbKgT9 UgRvEBZpmA== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20230304194000 20230202194000 26558 gov.ru. l4I5Wm7Jd4PQKknswE7oM1tR+os//7cRUJOXRjkT3UxlQNZtZmypiwyDKW5O+vHfd5xWgh6Nyu9e VbfAzAQ5XA== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. vk4nu5o0FgyIokIPN3Fnnjr+4nl/kF3fMLK+o6v9gkJoOJTyQJJnsoVV0jstPYxwqKBs7NR8DuDi WQhJ+3s20Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. +GVqdBKFko4p2ADtRBHYt2UHqOVJ9ApSkWbgEA5Usdt/x8BnopqiGjl4m6aYd2EacI5XIQconFNZ 6phQe8AZ4w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.gov.RU for gov.ru/A
	Received 608 bytes from 95.173.128.77
	;; Response received from 95.173.128.77 (608 octets) ;; HEADER SECTION ;; id = 59705 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20230304194000 20230202194000 26558 gov.ru. TD84nA263BZj3yUerhaBc5SfEuNE0o8nIjPDY8MVKRUnUvPyfPZGQ0ylm4dPAoDDLb6Bybii6AZt miBDY6NuvQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20230304194000 20230202194000 26558 gov.ru. l4I5Wm7Jd4PQKknswE7oM1tR+os//7cRUJOXRjkT3UxlQNZtZmypiwyDKW5O+vHfd5xWgh6Nyu9e VbfAzAQ5XA== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. vk4nu5o0FgyIokIPN3Fnnjr+4nl/kF3fMLK+o6v9gkJoOJTyQJJnsoVV0jstPYxwqKBs7NR8DuDi WQhJ+3s20Q== ) ns2.gov.ru. 1800 IN A 95.173.128.80 ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. +GVqdBKFko4p2ADtRBHYt2UHqOVJ9ApSkWbgEA5Usdt/x8BnopqiGjl4m6aYd2EacI5XIQconFNZ 6phQe8AZ4w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	gov.ru A RR has value 95.173.128.89
	gov.ru A RR has value 95.173.128.90
	Found 1 RRSIGs over A RRset
	`gov.ru. 1800 IN RRSIG ( A 13 2 1800 20230304194000 20230202194000 26558 gov.ru. TD84nA263BZj3yUerhaBc5SfEuNE0o8nIjPDY8MVKRUnUvPyfPZGQ0ylm4dPAoDDLb6Bybii6AZt miBDY6NuvQ== )`
	RRSIG=26558 and DNSKEY=26558 verifies the A RRset

gov.ru

	Query to ccl.dns.ripn.net for gov.ru/A
	Received 608 bytes from 193.232.82.15
	;; Response received from 193.232.82.15 (608 octets) ;; HEADER SECTION ;; id = 57672 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20230304194000 20230202194000 26558 gov.ru. TD84nA263BZj3yUerhaBc5SfEuNE0o8nIjPDY8MVKRUnUvPyfPZGQ0ylm4dPAoDDLb6Bybii6AZt miBDY6NuvQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20230304194000 20230202194000 26558 gov.ru. l4I5Wm7Jd4PQKknswE7oM1tR+os//7cRUJOXRjkT3UxlQNZtZmypiwyDKW5O+vHfd5xWgh6Nyu9e VbfAzAQ5XA== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. vk4nu5o0FgyIokIPN3Fnnjr+4nl/kF3fMLK+o6v9gkJoOJTyQJJnsoVV0jstPYxwqKBs7NR8DuDi WQhJ+3s20Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. +GVqdBKFko4p2ADtRBHYt2UHqOVJ9ApSkWbgEA5Usdt/x8BnopqiGjl4m6aYd2EacI5XIQconFNZ 6phQe8AZ4w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ccl.dns.ripn.net is authoritative for gov.ru
	Found RRSIG signed by gov.ru zone
	Query to ccl.dns.ripn.net for gov.ru/A
	Received 608 bytes from 193.232.82.15
	;; Response received from 193.232.82.15 (608 octets) ;; HEADER SECTION ;; id = 60102 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20230304194000 20230202194000 26558 gov.ru. TD84nA263BZj3yUerhaBc5SfEuNE0o8nIjPDY8MVKRUnUvPyfPZGQ0ylm4dPAoDDLb6Bybii6AZt miBDY6NuvQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20230304194000 20230202194000 26558 gov.ru. l4I5Wm7Jd4PQKknswE7oM1tR+os//7cRUJOXRjkT3UxlQNZtZmypiwyDKW5O+vHfd5xWgh6Nyu9e VbfAzAQ5XA== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. vk4nu5o0FgyIokIPN3Fnnjr+4nl/kF3fMLK+o6v9gkJoOJTyQJJnsoVV0jstPYxwqKBs7NR8DuDi WQhJ+3s20Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. +GVqdBKFko4p2ADtRBHYt2UHqOVJ9ApSkWbgEA5Usdt/x8BnopqiGjl4m6aYd2EacI5XIQconFNZ 6phQe8AZ4w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gov.ru A RR has value 95.173.128.89
	gov.ru A RR has value 95.173.128.90
	Found 1 RRSIGs over A RRset
	`gov.ru. 1800 IN RRSIG ( A 13 2 1800 20230304194000 20230202194000 26558 gov.ru. TD84nA263BZj3yUerhaBc5SfEuNE0o8nIjPDY8MVKRUnUvPyfPZGQ0ylm4dPAoDDLb6Bybii6AZt miBDY6NuvQ== )`
	RRSIG=26558 and DNSKEY=26558 verifies the A RRset

gov.ru

	Query to ns2.gov.ru for gov.ru/A
	Received 608 bytes from 95.173.128.80
	;; Response received from 95.173.128.80 (608 octets) ;; HEADER SECTION ;; id = 24138 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20230304194000 20230202194000 26558 gov.ru. TD84nA263BZj3yUerhaBc5SfEuNE0o8nIjPDY8MVKRUnUvPyfPZGQ0ylm4dPAoDDLb6Bybii6AZt miBDY6NuvQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20230304194000 20230202194000 26558 gov.ru. l4I5Wm7Jd4PQKknswE7oM1tR+os//7cRUJOXRjkT3UxlQNZtZmypiwyDKW5O+vHfd5xWgh6Nyu9e VbfAzAQ5XA== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. vk4nu5o0FgyIokIPN3Fnnjr+4nl/kF3fMLK+o6v9gkJoOJTyQJJnsoVV0jstPYxwqKBs7NR8DuDi WQhJ+3s20Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. +GVqdBKFko4p2ADtRBHYt2UHqOVJ9ApSkWbgEA5Usdt/x8BnopqiGjl4m6aYd2EacI5XIQconFNZ 6phQe8AZ4w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.gov.ru is authoritative for gov.ru
	Found RRSIG signed by gov.ru zone
	Query to ns2.gov.ru for gov.ru/A
	Received 608 bytes from 95.173.128.80
	;; Response received from 95.173.128.80 (608 octets) ;; HEADER SECTION ;; id = 38275 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20230304194000 20230202194000 26558 gov.ru. TD84nA263BZj3yUerhaBc5SfEuNE0o8nIjPDY8MVKRUnUvPyfPZGQ0ylm4dPAoDDLb6Bybii6AZt miBDY6NuvQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20230304194000 20230202194000 26558 gov.ru. l4I5Wm7Jd4PQKknswE7oM1tR+os//7cRUJOXRjkT3UxlQNZtZmypiwyDKW5O+vHfd5xWgh6Nyu9e VbfAzAQ5XA== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. vk4nu5o0FgyIokIPN3Fnnjr+4nl/kF3fMLK+o6v9gkJoOJTyQJJnsoVV0jstPYxwqKBs7NR8DuDi WQhJ+3s20Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. +GVqdBKFko4p2ADtRBHYt2UHqOVJ9ApSkWbgEA5Usdt/x8BnopqiGjl4m6aYd2EacI5XIQconFNZ 6phQe8AZ4w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	gov.ru A RR has value 95.173.128.89
	gov.ru A RR has value 95.173.128.90
	Found 1 RRSIGs over A RRset
	`gov.ru. 1800 IN RRSIG ( A 13 2 1800 20230304194000 20230202194000 26558 gov.ru. TD84nA263BZj3yUerhaBc5SfEuNE0o8nIjPDY8MVKRUnUvPyfPZGQ0ylm4dPAoDDLb6Bybii6AZt miBDY6NuvQ== )`
	RRSIG=26558 and DNSKEY=26558 verifies the A RRset

gov.ru

	Query to bcl.dns.ripn.net for gov.ru/A
	Received 608 bytes from 194.85.84.15
	;; Response received from 194.85.84.15 (608 octets) ;; HEADER SECTION ;; id = 10005 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20230304194000 20230202194000 26558 gov.ru. TD84nA263BZj3yUerhaBc5SfEuNE0o8nIjPDY8MVKRUnUvPyfPZGQ0ylm4dPAoDDLb6Bybii6AZt miBDY6NuvQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20230304194000 20230202194000 26558 gov.ru. l4I5Wm7Jd4PQKknswE7oM1tR+os//7cRUJOXRjkT3UxlQNZtZmypiwyDKW5O+vHfd5xWgh6Nyu9e VbfAzAQ5XA== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. vk4nu5o0FgyIokIPN3Fnnjr+4nl/kF3fMLK+o6v9gkJoOJTyQJJnsoVV0jstPYxwqKBs7NR8DuDi WQhJ+3s20Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. +GVqdBKFko4p2ADtRBHYt2UHqOVJ9ApSkWbgEA5Usdt/x8BnopqiGjl4m6aYd2EacI5XIQconFNZ 6phQe8AZ4w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	bcl.dns.ripn.net is authoritative for gov.ru
	Found RRSIG signed by gov.ru zone
	Query to bcl.dns.ripn.net for gov.ru/A
	Received 608 bytes from 194.85.84.15
	;; Response received from 194.85.84.15 (608 octets) ;; HEADER SECTION ;; id = 55434 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20230304194000 20230202194000 26558 gov.ru. TD84nA263BZj3yUerhaBc5SfEuNE0o8nIjPDY8MVKRUnUvPyfPZGQ0ylm4dPAoDDLb6Bybii6AZt miBDY6NuvQ== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20230304194000 20230202194000 26558 gov.ru. l4I5Wm7Jd4PQKknswE7oM1tR+os//7cRUJOXRjkT3UxlQNZtZmypiwyDKW5O+vHfd5xWgh6Nyu9e VbfAzAQ5XA== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns2.gov.ru. 1800 IN A 95.173.128.80 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. vk4nu5o0FgyIokIPN3Fnnjr+4nl/kF3fMLK+o6v9gkJoOJTyQJJnsoVV0jstPYxwqKBs7NR8DuDi WQhJ+3s20Q== ) ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20230304194000 20230202194000 26558 gov.ru. +GVqdBKFko4p2ADtRBHYt2UHqOVJ9ApSkWbgEA5Usdt/x8BnopqiGjl4m6aYd2EacI5XIQconFNZ 6phQe8AZ4w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gov.ru A RR has value 95.173.128.89
	gov.ru A RR has value 95.173.128.90
	Found 1 RRSIGs over A RRset
	`gov.ru. 1800 IN RRSIG ( A 13 2 1800 20230304194000 20230202194000 26558 gov.ru. TD84nA263BZj3yUerhaBc5SfEuNE0o8nIjPDY8MVKRUnUvPyfPZGQ0ylm4dPAoDDLb6Bybii6AZt miBDY6NuvQ== )`
	RRSIG=26558 and DNSKEY=26558 verifies the A RRset

gov.ru

No response from gov.ru nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test gov.ru at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: