DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-14 05:47:04 UTC

Analyzing DNSSEC problems for gov.ru

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1139 octets ;; HEADER SECTION ;; id = 53712 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to d.root-servers.net for gov.ru/A
	Received 754 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 754 octets ;; HEADER SECTION ;; id = 52714 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS c.tld-servers.ru. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20260927050000 20260914040000 57780 . RSsZfdn0Pde0RTLqoy+jzRXsIrb7FD98qVxeRJOFxPfGe3nk4VLqdWrFpSxT20zCQMTfNCDen1dP TAHNty1ufj/jd1PLdr2sF6ztCHVHmatwJwZ1vi6v/kNQywOAstJOQ1iXaRgxOSNXmeL9xYaaeKOl vVqNKK7zp/8nWSRS5LfkcVZ6X1J2l+qgcEa6YBZ37gmyMw5uZ1x97EvS13fCQFliuhAdtsh2UaJw 7b3v/lMbSYvHRbbeA2drWJrjW1+Nu8hpqadQtzk1Ik72IT+gfh/gfP/qKUMLY1aD9vomZshZ0FEO FkqbbqH+qssgvVJfU+L1tcTr8JN3hotjsjbwUA== ) ;; ADDITIONAL SECTION (13 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 b.dns.ripn.net. 172800 IN A 194.85.252.62 c.tld-servers.ru. 172800 IN A 194.190.122.17 d.dns.ripn.net. 172800 IN A 194.190.124.17 e.dns.ripn.net. 172800 IN A 193.232.142.17 f.dns.ripn.net. 172800 IN A 193.232.156.17 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 c.tld-servers.ru. 172800 IN AAAA 2a09:bd00:1:0:194:190:122:17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for ru/DNSKEY
	Received 764 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 764 octets ;; HEADER SECTION ;; id = 35122 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS c.tld-servers.ru. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20260927050000 20260914040000 57780 . RSsZfdn0Pde0RTLqoy+jzRXsIrb7FD98qVxeRJOFxPfGe3nk4VLqdWrFpSxT20zCQMTfNCDen1dP TAHNty1ufj/jd1PLdr2sF6ztCHVHmatwJwZ1vi6v/kNQywOAstJOQ1iXaRgxOSNXmeL9xYaaeKOl vVqNKK7zp/8nWSRS5LfkcVZ6X1J2l+qgcEa6YBZ37gmyMw5uZ1x97EvS13fCQFliuhAdtsh2UaJw 7b3v/lMbSYvHRbbeA2drWJrjW1+Nu8hpqadQtzk1Ik72IT+gfh/gfP/qKUMLY1aD9vomZshZ0FEO FkqbbqH+qssgvVJfU+L1tcTr8JN3hotjsjbwUA== ) ;; ADDITIONAL SECTION (13 records) c.tld-servers.ru. 172800 IN A 194.190.122.17 c.tld-servers.ru. 172800 IN AAAA 2a09:bd00:1:0:194:190:122:17 a.dns.ripn.net. 172800 IN A 193.232.128.6 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN A 194.85.252.62 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 d.dns.ripn.net. 172800 IN A 194.190.124.17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN A 193.232.142.17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN A 193.232.156.17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; { "EDNS-VERSION": 0 }
	Found child zone ru

	Checking DS between . and ru
	Query to l.root-servers.net for ru/DS
	Received 366 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 366 octets ;; HEADER SECTION ;; id = 47988 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DS ;; ANSWER SECTION (2 records) ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20260927050000 20260914040000 57780 . RSsZfdn0Pde0RTLqoy+jzRXsIrb7FD98qVxeRJOFxPfGe3nk4VLqdWrFpSxT20zCQMTfNCDen1dP TAHNty1ufj/jd1PLdr2sF6ztCHVHmatwJwZ1vi6v/kNQywOAstJOQ1iXaRgxOSNXmeL9xYaaeKOl vVqNKK7zp/8nWSRS5LfkcVZ6X1J2l+qgcEa6YBZ37gmyMw5uZ1x97EvS13fCQFliuhAdtsh2UaJw 7b3v/lMbSYvHRbbeA2drWJrjW1+Nu8hpqadQtzk1Ik72IT+gfh/gfP/qKUMLY1aD9vomZshZ0FEO FkqbbqH+qssgvVJfU+L1tcTr8JN3hotjsjbwUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ru in the . zone
	DS=26734/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ru. 86400 IN RRSIG ( DS 8 1 86400 20260927050000 20260914040000 57780 . RSsZfdn0Pde0RTLqoy+jzRXsIrb7FD98qVxeRJOFxPfGe3nk4VLqdWrFpSxT20zCQMTfNCDen1dP TAHNty1ufj/jd1PLdr2sF6ztCHVHmatwJwZ1vi6v/kNQywOAstJOQ1iXaRgxOSNXmeL9xYaaeKOl vVqNKK7zp/8nWSRS5LfkcVZ6X1J2l+qgcEa6YBZ37gmyMw5uZ1x97EvS13fCQFliuhAdtsh2UaJw 7b3v/lMbSYvHRbbeA2drWJrjW1+Nu8hpqadQtzk1Ik72IT+gfh/gfP/qKUMLY1aD9vomZshZ0FEO FkqbbqH+qssgvVJfU+L1tcTr8JN3hotjsjbwUA== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=26734/SHA-256 is now in the chain-of-trust
	`ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 )`
	Query to c.tld-servers.ru for ru/DNSKEY
	Received 745 bytes from 194.190.122.17
	;; Response received from [194.190.122.17] 745 octets ;; HEADER SECTION ;; id = 33139 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (3 records) ru. 345600 IN DNSKEY ( 256 3 8 AwEAAc0x7WIRpwiOloLTO58z32pgHOoALc8NKwCUujCwRvZYpAN/8/jGMKJKimKoWumuroZSYjfx SWBdcG90KfWZmRN6RP5oBYqh9DGXFbp8X9cObfNbWXhqKHfTE8s5p48vwi7I8Cb62VawvEsviHMR TLmHSl7HEN0OsBo2dKQDyTEp ) ; keytag 56460 ru. 345600 IN DNSKEY ( 257 3 8 AwEAAd+cacI5tMDtkvRg5WH1oNbQW1QnoS6zMBe94PImVKXMyg17dOqGZgEG7etk9e30p1IQAZ6B FzmaUSqw3jK52g5HzRMLAMGhG3DPYvA7q5M/cZB9/eckdO7Nb08RUvUHGpM1KFFThIxJgJEyEA/3 oiDer/bBMIBb9VtweMR0wsCsSfgxtCoZ1SGSvJIPOxqPlX3wQJO+waKU/WqdkHDmP6WpNmZTnQlm UWxL4K6vSK9QDCMpD54KSCcuuFm2kn5KKvA2QL+12xQw7MKUyl5eT5shwUP/yp/wNFixDfvdN9Im 2BJiqmeZGWSYde+IGJ33JFWrXu6CLiQy7UWPqKygPdM= ) ; keytag 26734 ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20260927000000 20260907000000 26734 ru. NcgLtmhYZVo+jvutOVAvD57oaatTVF17ODFWWkWcGkCBcUNZbLR+C+nsL/IT4S22kOqdr0DJv9I9 gQRnQNrueNIilTqHEuq6orFgruq4z+P9CziQs3m8HHr6RV0m0esD2Wr0GM9YpTUTetHuKSllWiDc NW9D/GHGBUdDGP12xlludsMdMHJ2w1x8xGEMext1UB2Ab7hVn8OkYqPhsfKJpweD8PuOqg2apAFB iK+A7CaQ923GnTun/J25VA2iJlEtv1POAddKXxJdtngfBsgVORJmI0ea3x2xzfkqXC0lMYOjjiJi 1SNFuEUV9gt1LCqHx7E3LdyBKUIg372+JC5O+g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ru
	`ru. 345600 IN DNSKEY ( 256 3 8 AwEAAc0x7WIRpwiOloLTO58z32pgHOoALc8NKwCUujCwRvZYpAN/8/jGMKJKimKoWumuroZSYjfx SWBdcG90KfWZmRN6RP5oBYqh9DGXFbp8X9cObfNbWXhqKHfTE8s5p48vwi7I8Cb62VawvEsviHMR TLmHSl7HEN0OsBo2dKQDyTEp ) ; keytag 56460`
	`ru. 345600 IN DNSKEY ( 257 3 8 AwEAAd+cacI5tMDtkvRg5WH1oNbQW1QnoS6zMBe94PImVKXMyg17dOqGZgEG7etk9e30p1IQAZ6B FzmaUSqw3jK52g5HzRMLAMGhG3DPYvA7q5M/cZB9/eckdO7Nb08RUvUHGpM1KFFThIxJgJEyEA/3 oiDer/bBMIBb9VtweMR0wsCsSfgxtCoZ1SGSvJIPOxqPlX3wQJO+waKU/WqdkHDmP6WpNmZTnQlm UWxL4K6vSK9QDCMpD54KSCcuuFm2kn5KKvA2QL+12xQw7MKUyl5eT5shwUP/yp/wNFixDfvdN9Im 2BJiqmeZGWSYde+IGJ33JFWrXu6CLiQy7UWPqKygPdM= ) ; keytag 26734`
	DNSKEY=26734/SEP is now in the chain-of-trust
	DS=26734/SHA-256 verifies DNSKEY=26734/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20260927000000 20260907000000 26734 ru. NcgLtmhYZVo+jvutOVAvD57oaatTVF17ODFWWkWcGkCBcUNZbLR+C+nsL/IT4S22kOqdr0DJv9I9 gQRnQNrueNIilTqHEuq6orFgruq4z+P9CziQs3m8HHr6RV0m0esD2Wr0GM9YpTUTetHuKSllWiDc NW9D/GHGBUdDGP12xlludsMdMHJ2w1x8xGEMext1UB2Ab7hVn8OkYqPhsfKJpweD8PuOqg2apAFB iK+A7CaQ923GnTun/J25VA2iJlEtv1POAddKXxJdtngfBsgVORJmI0ea3x2xzfkqXC0lMYOjjiJi 1SNFuEUV9gt1LCqHx7E3LdyBKUIg372+JC5O+g== )`
	RRSIG=26734 and DNSKEY=26734/SEP verifies the DNSKEY RRset
	DNSKEY=56460 is now in the chain-of-trust
	Query to f.dns.ripn.net for gov.ru/A
	Received 378 bytes from 193.232.156.17
	;; Response received from [193.232.156.17] 378 octets ;; HEADER SECTION ;; id = 10055 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov.ru. 345600 IN NS ns.gov.ru. gov.ru. 345600 IN NS acl.dns.ripn.net. gov.ru. 345600 IN NS bcl.dns.ripn.net. gov.ru. 345600 IN NS ccl.dns.ripn.net. gov.ru. 345600 IN NS ns2.gov.ru. gov.ru. 345600 IN DS ( 28029 13 2 d5194a16ba2eed6dd0c231c56e6e0df944ffaa35715f2b2e7fdd0582dc74ad73 ) gov.ru. 345600 IN RRSIG ( DS 8 2 345600 20261019103657 20260904141520 56460 ru. vKjFGjaNrSTJN1vn/pNSbvhXZolRIRmt2lMkQv4/GPP1aNLHc37tXAbQ2cY6jMEYH/q3gEqB3NBZ HyptWu55+6HwzFrZnl0xkrrySXMisumd3sN+ExOHTSwUSx89FX1mdtfehVHgPElMH1wOxx84zBHz 04wOmxBsFBabhqGblls= ) ;; ADDITIONAL SECTION (3 records) ns.gov.ru. 345600 IN A 95.173.128.77 ns2.gov.ru. 345600 IN A 95.173.128.80 ;; { "EDNS-VERSION": 0 }
	Query to a.dns.ripn.net for gov.ru/DNSKEY
	Received 378 bytes from 193.232.128.6
	;; Response received from [193.232.128.6] 378 octets ;; HEADER SECTION ;; id = 15400 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov.ru. 345600 IN NS ns.gov.ru. gov.ru. 345600 IN NS acl.dns.ripn.net. gov.ru. 345600 IN NS bcl.dns.ripn.net. gov.ru. 345600 IN NS ccl.dns.ripn.net. gov.ru. 345600 IN NS ns2.gov.ru. gov.ru. 345600 IN DS ( 28029 13 2 d5194a16ba2eed6dd0c231c56e6e0df944ffaa35715f2b2e7fdd0582dc74ad73 ) gov.ru. 345600 IN RRSIG ( DS 8 2 345600 20261019103657 20260904141520 56460 ru. vKjFGjaNrSTJN1vn/pNSbvhXZolRIRmt2lMkQv4/GPP1aNLHc37tXAbQ2cY6jMEYH/q3gEqB3NBZ HyptWu55+6HwzFrZnl0xkrrySXMisumd3sN+ExOHTSwUSx89FX1mdtfehVHgPElMH1wOxx84zBHz 04wOmxBsFBabhqGblls= ) ;; ADDITIONAL SECTION (3 records) ns.gov.ru. 345600 IN A 95.173.128.77 ns2.gov.ru. 345600 IN A 95.173.128.80 ;; { "EDNS-VERSION": 0 }
	Found child zone gov.ru

gov.ru

	Checking DS between ru and gov.ru
	Query to f.dns.ripn.net for gov.ru/DS
	Received 245 bytes from 193.232.156.17
	;; Response received from [193.232.156.17] 245 octets ;; HEADER SECTION ;; id = 31867 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN DS ;; ANSWER SECTION (2 records) gov.ru. 345600 IN DS ( 28029 13 2 d5194a16ba2eed6dd0c231c56e6e0df944ffaa35715f2b2e7fdd0582dc74ad73 ) gov.ru. 345600 IN RRSIG ( DS 8 2 345600 20261019103657 20260904141520 56460 ru. vKjFGjaNrSTJN1vn/pNSbvhXZolRIRmt2lMkQv4/GPP1aNLHc37tXAbQ2cY6jMEYH/q3gEqB3NBZ HyptWu55+6HwzFrZnl0xkrrySXMisumd3sN+ExOHTSwUSx89FX1mdtfehVHgPElMH1wOxx84zBHz 04wOmxBsFBabhqGblls= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov.ru in the ru zone
	DS=28029/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov.ru. 345600 IN RRSIG ( DS 8 2 345600 20261019103657 20260904141520 56460 ru. vKjFGjaNrSTJN1vn/pNSbvhXZolRIRmt2lMkQv4/GPP1aNLHc37tXAbQ2cY6jMEYH/q3gEqB3NBZ HyptWu55+6HwzFrZnl0xkrrySXMisumd3sN+ExOHTSwUSx89FX1mdtfehVHgPElMH1wOxx84zBHz 04wOmxBsFBabhqGblls= )`
	RRSIG=56460 and DNSKEY=56460 verifies the DS RRset
	DS=28029/SHA-256 is now in the chain-of-trust
	`gov.ru. 345600 IN DS ( 28029 13 2 d5194a16ba2eed6dd0c231c56e6e0df944ffaa35715f2b2e7fdd0582dc74ad73 )`
	Query to bcl.dns.ripn.net for gov.ru/DNSKEY
	Received 479 bytes from 194.85.84.15
	;; Response received from [194.85.84.15] 479 octets ;; HEADER SECTION ;; id = 52937 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN DNSKEY ;; ANSWER SECTION (5 records) gov.ru. 7200 IN DNSKEY ( 256 3 13 BzTtcRyUdnMZpWuKHvDI2oSvAt+H2CMOClVM85nh+Wb2Wjs2++PmAiilZXt4Rab+qS6x0u7ixCay IRLy3F7+6A== ) ; keytag 34046 gov.ru. 7200 IN DNSKEY ( 256 3 13 SdCoEQsfX7sd2j0VJUr9HvvvOv9uk9goNniYBctmSZjqUVzUIs6X46h7GId6nNkrPEeC7yxGfnP+ mNoMZqS+Gg== ) ; keytag 48450 gov.ru. 7200 IN DNSKEY ( 257 3 13 QIzS5hpp7BeojUPq+hWfESiOsaeLtYhE0RKGosuzybWaU7e9BXDFfOfd4aMAX1as4widOxtFtp1d zNTz3mtNrg== ) ; keytag 28029 gov.ru. 7200 IN RRSIG ( DNSKEY 13 2 7200 20261013194000 20260913194000 28029 gov.ru. lSEbrY8tbf/SdEs8oui8VHnimZXyWu2T0j0xPXU6LtRbXdU4S1fgGPDYtKmo5OQyCa0tocNrkLwG 4sZupAjPfg== ) gov.ru. 7200 IN RRSIG ( DNSKEY 13 2 7200 20261013194000 20260913194000 48450 gov.ru. tVlVmx4GowBLRx/MJya5qS3TeuZCaV4O1c9Vlh+G5nIGfFMlT//sPYZQSK5f0aFKyWSimAWuOp8y ZhIDmdlN0w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for gov.ru
	`gov.ru. 7200 IN DNSKEY ( 256 3 13 BzTtcRyUdnMZpWuKHvDI2oSvAt+H2CMOClVM85nh+Wb2Wjs2++PmAiilZXt4Rab+qS6x0u7ixCay IRLy3F7+6A== ) ; keytag 34046`
	`gov.ru. 7200 IN DNSKEY ( 256 3 13 SdCoEQsfX7sd2j0VJUr9HvvvOv9uk9goNniYBctmSZjqUVzUIs6X46h7GId6nNkrPEeC7yxGfnP+ mNoMZqS+Gg== ) ; keytag 48450`
	`gov.ru. 7200 IN DNSKEY ( 257 3 13 QIzS5hpp7BeojUPq+hWfESiOsaeLtYhE0RKGosuzybWaU7e9BXDFfOfd4aMAX1as4widOxtFtp1d zNTz3mtNrg== ) ; keytag 28029`
	DNSKEY=28029/SEP is now in the chain-of-trust
	DS=28029/SHA-256 verifies DNSKEY=28029/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`gov.ru. 7200 IN RRSIG ( DNSKEY 13 2 7200 20261013194000 20260913194000 28029 gov.ru. lSEbrY8tbf/SdEs8oui8VHnimZXyWu2T0j0xPXU6LtRbXdU4S1fgGPDYtKmo5OQyCa0tocNrkLwG 4sZupAjPfg== )`
	`gov.ru. 7200 IN RRSIG ( DNSKEY 13 2 7200 20261013194000 20260913194000 48450 gov.ru. tVlVmx4GowBLRx/MJya5qS3TeuZCaV4O1c9Vlh+G5nIGfFMlT//sPYZQSK5f0aFKyWSimAWuOp8y ZhIDmdlN0w== )`
	RRSIG=28029 and DNSKEY=28029/SEP verifies the DNSKEY RRset
	RRSIG=48450 and DNSKEY=48450 verifies the DNSKEY RRset
	DNSKEY=34046 is now in the chain-of-trust
	DNSKEY=48450 is now in the chain-of-trust
	Query to ccl.dns.ripn.net for gov.ru/A
	Received 608 bytes from 193.232.82.15
	;; Response received from [193.232.82.15] 608 octets ;; HEADER SECTION ;; id = 11043 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20261013194000 20260913194000 48450 gov.ru. aHbw//LQ4namJ9YHszYFj5F8aSDaYF1dyZajoWH+cgYPO8j7DdGzLJENNkknDpX/BbHrQ1QwCVtz AKV/BRnrvA== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20261013194000 20260913194000 48450 gov.ru. Y1bkCr4Hs4FM+9wl2N9IuHIVFDxK5pqyxd5090Htd+Vh8VNEc20moj7o9RnUpEk5BFJyFng02WEN 9uM9M57f/w== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20261013194000 20260913194000 48450 gov.ru. SmDcNtwY/g8GPr5cfbp0jS3gGugwUtGd7eAh23JfpwTtiS9Z5IZqZieaefn5gS4vj4GBznm4k2u+ Tvc+bM4a6w== ) ns2.gov.ru. 1800 IN A 95.173.128.80 ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20261013194000 20260913194000 48450 gov.ru. Dg43FyicXUgnnFgVhkraqxdGyNCVYe5Y3nFlVtJO57jR1pRE+CJwR8otLXqwr+XqwpMPXypMN1C6 E3pNa2zTqw== ) ;; { "EDNS-VERSION": 0 }
	ccl.dns.ripn.net is authoritative for gov.ru
	Found RRSIG signed by gov.ru zone
	Query to ns2.gov.ru for gov.ru/SOA
	Received 180 bytes from 95.173.128.80
	;; Response received from [95.173.128.80] 180 octets ;; HEADER SECTION ;; id = 8393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN SOA ;; ANSWER SECTION (2 records) gov.ru. 1800 IN SOA ( ns.gov.ru. ncc.gov.ru. 4026091010 ;serial 2400 ;refresh 1200 ;retry 2592000 ;expire 1800 ;minimum ) gov.ru. 1800 IN RRSIG ( SOA 13 2 1800 20261013194000 20260913194000 48450 gov.ru. +YuLU2Duy8VLt50wWs0BPO5kLXPbbATOVAkLDnJ/8nJU2Rb9UDEqhdbZdTWYRX6xZ1208uSh9shh eyRx7e7q6A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns.gov.ru for gov.ru/SOA
	Received 616 bytes from 95.173.128.77
	;; Response received from [95.173.128.77] 616 octets ;; HEADER SECTION ;; id = 50395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN SOA ;; ANSWER SECTION (2 records) gov.ru. 1800 IN SOA ( ns.gov.ru. ncc.gov.ru. 4026091010 ;serial 2400 ;refresh 1200 ;retry 2592000 ;expire 1800 ;minimum ) gov.ru. 1800 IN RRSIG ( SOA 13 2 1800 20261013194000 20260913194000 48450 gov.ru. +YuLU2Duy8VLt50wWs0BPO5kLXPbbATOVAkLDnJ/8nJU2Rb9UDEqhdbZdTWYRX6xZ1208uSh9shh eyRx7e7q6A== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20261013194000 20260913194000 48450 gov.ru. Y1bkCr4Hs4FM+9wl2N9IuHIVFDxK5pqyxd5090Htd+Vh8VNEc20moj7o9RnUpEk5BFJyFng02WEN 9uM9M57f/w== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20261013194000 20260913194000 48450 gov.ru. SmDcNtwY/g8GPr5cfbp0jS3gGugwUtGd7eAh23JfpwTtiS9Z5IZqZieaefn5gS4vj4GBznm4k2u+ Tvc+bM4a6w== ) ns2.gov.ru. 1800 IN A 95.173.128.80 ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20261013194000 20260913194000 48450 gov.ru. Dg43FyicXUgnnFgVhkraqxdGyNCVYe5Y3nFlVtJO57jR1pRE+CJwR8otLXqwr+XqwpMPXypMN1C6 E3pNa2zTqw== ) ;; { "EDNS-VERSION": 0 }
	Query to acl.dns.ripn.net for gov.ru/SOA
	Received 616 bytes from 193.232.66.15
	;; Response received from [193.232.66.15] 616 octets ;; HEADER SECTION ;; id = 14129 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN SOA ;; ANSWER SECTION (2 records) gov.ru. 1800 IN SOA ( ns.gov.ru. ncc.gov.ru. 4026091010 ;serial 2400 ;refresh 1200 ;retry 2592000 ;expire 1800 ;minimum ) gov.ru. 1800 IN RRSIG ( SOA 13 2 1800 20261013194000 20260913194000 48450 gov.ru. +YuLU2Duy8VLt50wWs0BPO5kLXPbbATOVAkLDnJ/8nJU2Rb9UDEqhdbZdTWYRX6xZ1208uSh9shh eyRx7e7q6A== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20261013194000 20260913194000 48450 gov.ru. Y1bkCr4Hs4FM+9wl2N9IuHIVFDxK5pqyxd5090Htd+Vh8VNEc20moj7o9RnUpEk5BFJyFng02WEN 9uM9M57f/w== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20261013194000 20260913194000 48450 gov.ru. SmDcNtwY/g8GPr5cfbp0jS3gGugwUtGd7eAh23JfpwTtiS9Z5IZqZieaefn5gS4vj4GBznm4k2u+ Tvc+bM4a6w== ) ns2.gov.ru. 1800 IN A 95.173.128.80 ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20261013194000 20260913194000 48450 gov.ru. Dg43FyicXUgnnFgVhkraqxdGyNCVYe5Y3nFlVtJO57jR1pRE+CJwR8otLXqwr+XqwpMPXypMN1C6 E3pNa2zTqw== ) ;; { "EDNS-VERSION": 0 }
	Query to bcl.dns.ripn.net for gov.ru/SOA
	Received 616 bytes from 194.85.84.15
	;; Response received from [194.85.84.15] 616 octets ;; HEADER SECTION ;; id = 36592 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN SOA ;; ANSWER SECTION (2 records) gov.ru. 1800 IN SOA ( ns.gov.ru. ncc.gov.ru. 4026091010 ;serial 2400 ;refresh 1200 ;retry 2592000 ;expire 1800 ;minimum ) gov.ru. 1800 IN RRSIG ( SOA 13 2 1800 20261013194000 20260913194000 48450 gov.ru. +YuLU2Duy8VLt50wWs0BPO5kLXPbbATOVAkLDnJ/8nJU2Rb9UDEqhdbZdTWYRX6xZ1208uSh9shh eyRx7e7q6A== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20261013194000 20260913194000 48450 gov.ru. Y1bkCr4Hs4FM+9wl2N9IuHIVFDxK5pqyxd5090Htd+Vh8VNEc20moj7o9RnUpEk5BFJyFng02WEN 9uM9M57f/w== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20261013194000 20260913194000 48450 gov.ru. SmDcNtwY/g8GPr5cfbp0jS3gGugwUtGd7eAh23JfpwTtiS9Z5IZqZieaefn5gS4vj4GBznm4k2u+ Tvc+bM4a6w== ) ns2.gov.ru. 1800 IN A 95.173.128.80 ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20261013194000 20260913194000 48450 gov.ru. Dg43FyicXUgnnFgVhkraqxdGyNCVYe5Y3nFlVtJO57jR1pRE+CJwR8otLXqwr+XqwpMPXypMN1C6 E3pNa2zTqw== ) ;; { "EDNS-VERSION": 0 }
	Query to ccl.dns.ripn.net for gov.ru/A
	gov.ru A RR has value 95.173.128.89
	gov.ru A RR has value 95.173.128.90
	Found 1 RRSIGs over A RRset
	`gov.ru. 1800 IN RRSIG ( A 13 2 1800 20261013194000 20260913194000 48450 gov.ru. aHbw//LQ4namJ9YHszYFj5F8aSDaYF1dyZajoWH+cgYPO8j7DdGzLJENNkknDpX/BbHrQ1QwCVtz AKV/BRnrvA== )`
	RRSIG=48450 and DNSKEY=48450 verifies the A RRset

gov.ru

	Query to bcl.dns.ripn.net for gov.ru/A
	Received 608 bytes from 194.85.84.15
	;; Response received from [194.85.84.15] 608 octets ;; HEADER SECTION ;; id = 42692 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20261013194000 20260913194000 48450 gov.ru. aHbw//LQ4namJ9YHszYFj5F8aSDaYF1dyZajoWH+cgYPO8j7DdGzLJENNkknDpX/BbHrQ1QwCVtz AKV/BRnrvA== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20261013194000 20260913194000 48450 gov.ru. Y1bkCr4Hs4FM+9wl2N9IuHIVFDxK5pqyxd5090Htd+Vh8VNEc20moj7o9RnUpEk5BFJyFng02WEN 9uM9M57f/w== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20261013194000 20260913194000 48450 gov.ru. SmDcNtwY/g8GPr5cfbp0jS3gGugwUtGd7eAh23JfpwTtiS9Z5IZqZieaefn5gS4vj4GBznm4k2u+ Tvc+bM4a6w== ) ns2.gov.ru. 1800 IN A 95.173.128.80 ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20261013194000 20260913194000 48450 gov.ru. Dg43FyicXUgnnFgVhkraqxdGyNCVYe5Y3nFlVtJO57jR1pRE+CJwR8otLXqwr+XqwpMPXypMN1C6 E3pNa2zTqw== ) ;; { "EDNS-VERSION": 0 }
	bcl.dns.ripn.net is authoritative for gov.ru
	Found RRSIG signed by gov.ru zone
	Query to bcl.dns.ripn.net for gov.ru/A
	gov.ru A RR has value 95.173.128.89
	gov.ru A RR has value 95.173.128.90
	Found 1 RRSIGs over A RRset
	`gov.ru. 1800 IN RRSIG ( A 13 2 1800 20261013194000 20260913194000 48450 gov.ru. aHbw//LQ4namJ9YHszYFj5F8aSDaYF1dyZajoWH+cgYPO8j7DdGzLJENNkknDpX/BbHrQ1QwCVtz AKV/BRnrvA== )`
	RRSIG=48450 and DNSKEY=48450 verifies the A RRset

gov.ru

	Query to acl.dns.ripn.net for gov.ru/A
	Received 608 bytes from 193.232.66.15
	;; Response received from [193.232.66.15] 608 octets ;; HEADER SECTION ;; id = 20416 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20261013194000 20260913194000 48450 gov.ru. aHbw//LQ4namJ9YHszYFj5F8aSDaYF1dyZajoWH+cgYPO8j7DdGzLJENNkknDpX/BbHrQ1QwCVtz AKV/BRnrvA== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20261013194000 20260913194000 48450 gov.ru. Y1bkCr4Hs4FM+9wl2N9IuHIVFDxK5pqyxd5090Htd+Vh8VNEc20moj7o9RnUpEk5BFJyFng02WEN 9uM9M57f/w== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20261013194000 20260913194000 48450 gov.ru. SmDcNtwY/g8GPr5cfbp0jS3gGugwUtGd7eAh23JfpwTtiS9Z5IZqZieaefn5gS4vj4GBznm4k2u+ Tvc+bM4a6w== ) ns2.gov.ru. 1800 IN A 95.173.128.80 ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20261013194000 20260913194000 48450 gov.ru. Dg43FyicXUgnnFgVhkraqxdGyNCVYe5Y3nFlVtJO57jR1pRE+CJwR8otLXqwr+XqwpMPXypMN1C6 E3pNa2zTqw== ) ;; { "EDNS-VERSION": 0 }
	acl.dns.ripn.net is authoritative for gov.ru
	Found RRSIG signed by gov.ru zone
	Query to acl.dns.ripn.net for gov.ru/A
	gov.ru A RR has value 95.173.128.89
	gov.ru A RR has value 95.173.128.90
	Found 1 RRSIGs over A RRset
	`gov.ru. 1800 IN RRSIG ( A 13 2 1800 20261013194000 20260913194000 48450 gov.ru. aHbw//LQ4namJ9YHszYFj5F8aSDaYF1dyZajoWH+cgYPO8j7DdGzLJENNkknDpX/BbHrQ1QwCVtz AKV/BRnrvA== )`
	RRSIG=48450 and DNSKEY=48450 verifies the A RRset

gov.ru

	Query to ns2.gov.ru for gov.ru/A
	Received 169 bytes from 95.173.128.80
	;; Response received from [95.173.128.80] 169 octets ;; HEADER SECTION ;; id = 12511 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20261013194000 20260913194000 48450 gov.ru. aHbw//LQ4namJ9YHszYFj5F8aSDaYF1dyZajoWH+cgYPO8j7DdGzLJENNkknDpX/BbHrQ1QwCVtz AKV/BRnrvA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.gov.ru is authoritative for gov.ru
	Found RRSIG signed by gov.ru zone
	Query to ns2.gov.ru for gov.ru/A
	gov.ru A RR has value 95.173.128.89
	gov.ru A RR has value 95.173.128.90
	Found 1 RRSIGs over A RRset
	`gov.ru. 1800 IN RRSIG ( A 13 2 1800 20261013194000 20260913194000 48450 gov.ru. aHbw//LQ4namJ9YHszYFj5F8aSDaYF1dyZajoWH+cgYPO8j7DdGzLJENNkknDpX/BbHrQ1QwCVtz AKV/BRnrvA== )`
	RRSIG=48450 and DNSKEY=48450 verifies the A RRset

gov.ru

	Query to ns.gov.ru for gov.ru/A
	Received 608 bytes from 95.173.128.77
	;; Response received from [95.173.128.77] 608 octets ;; HEADER SECTION ;; id = 31651 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.ru. IN A ;; ANSWER SECTION (3 records) gov.ru. 1800 IN A 95.173.128.89 gov.ru. 1800 IN A 95.173.128.90 gov.ru. 1800 IN RRSIG ( A 13 2 1800 20261013194000 20260913194000 48450 gov.ru. aHbw//LQ4namJ9YHszYFj5F8aSDaYF1dyZajoWH+cgYPO8j7DdGzLJENNkknDpX/BbHrQ1QwCVtz AKV/BRnrvA== ) ;; AUTHORITY SECTION (6 records) gov.ru. 1800 IN NS ns.gov.ru. gov.ru. 1800 IN NS acl.dns.ripn.net. gov.ru. 1800 IN NS bcl.dns.ripn.net. gov.ru. 1800 IN NS ccl.dns.ripn.net. gov.ru. 1800 IN NS ns2.gov.ru. gov.ru. 1800 IN RRSIG ( NS 13 2 1800 20261013194000 20260913194000 48450 gov.ru. Y1bkCr4Hs4FM+9wl2N9IuHIVFDxK5pqyxd5090Htd+Vh8VNEc20moj7o9RnUpEk5BFJyFng02WEN 9uM9M57f/w== ) ;; ADDITIONAL SECTION (5 records) ns.gov.ru. 1800 IN A 95.173.128.77 ns.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20261013194000 20260913194000 48450 gov.ru. SmDcNtwY/g8GPr5cfbp0jS3gGugwUtGd7eAh23JfpwTtiS9Z5IZqZieaefn5gS4vj4GBznm4k2u+ Tvc+bM4a6w== ) ns2.gov.ru. 1800 IN A 95.173.128.80 ns2.gov.ru. 1800 IN RRSIG ( A 13 3 1800 20261013194000 20260913194000 48450 gov.ru. Dg43FyicXUgnnFgVhkraqxdGyNCVYe5Y3nFlVtJO57jR1pRE+CJwR8otLXqwr+XqwpMPXypMN1C6 E3pNa2zTqw== ) ;; { "EDNS-VERSION": 0 }
	ns.gov.ru is authoritative for gov.ru
	Found RRSIG signed by gov.ru zone
	Query to ns.gov.ru for gov.ru/A
	gov.ru A RR has value 95.173.128.89
	gov.ru A RR has value 95.173.128.90
	Found 1 RRSIGs over A RRset
	`gov.ru. 1800 IN RRSIG ( A 13 2 1800 20261013194000 20260913194000 48450 gov.ru. aHbw//LQ4namJ9YHszYFj5F8aSDaYF1dyZajoWH+cgYPO8j7DdGzLJENNkknDpX/BbHrQ1QwCVtz AKV/BRnrvA== )`
	RRSIG=48450 and DNSKEY=48450 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test gov.ru at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: