DNSSEC Debugger - habrahabr.ru

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-27 20:15:49 UTC

Analyzing DNSSEC problems for habrahabr.ru

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1414 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1414 octets ;; HEADER SECTION ;; id = 65064 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261010000000 20260919000000 20326 . SeT2U+BKi7S4R7OPnQ0EBjS6DtsNPasISEAE3iOUQWl552IWiqHLBYkZOa5au73wjV5oH9vQleMB gtIQleByqX74kORDKMmx+EIhhDmiNOf9w33OqM4+s0Etem28QjqQ9e4QgsKI6N39HDMedL31iybJ n6ghPcDT73IyzgTs6mtyV+Lpu1ZqH1yXNNB34YsEzgquGDKU7QkAlQMupqKlZOhJC2pj4724Fzjr MXq68MYAitHMmfnrm2/iqP8i0jIrIQgIl4mVOO4VxMZEsQa+ESJWEBQJ3Fu3jLRII/xIEq1qXb8F 87yhBvKhzuyLfQGaKttdkN9oudecqKuNezNp0g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261010000000 20260919000000 20326 . SeT2U+BKi7S4R7OPnQ0EBjS6DtsNPasISEAE3iOUQWl552IWiqHLBYkZOa5au73wjV5oH9vQleMB gtIQleByqX74kORDKMmx+EIhhDmiNOf9w33OqM4+s0Etem28QjqQ9e4QgsKI6N39HDMedL31iybJ n6ghPcDT73IyzgTs6mtyV+Lpu1ZqH1yXNNB34YsEzgquGDKU7QkAlQMupqKlZOhJC2pj4724Fzjr MXq68MYAitHMmfnrm2/iqP8i0jIrIQgIl4mVOO4VxMZEsQa+ESJWEBQJ3Fu3jLRII/xIEq1qXb8F 87yhBvKhzuyLfQGaKttdkN9oudecqKuNezNp0g== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	DNSKEY=8763 is now in the chain-of-trust
	Query to l.root-servers.net for habrahabr.ru/A
	Received 760 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 760 octets ;; HEADER SECTION ;; id = 47757 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; habrahabr.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS c.tld-servers.ru. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20261010170000 20260927160000 57780 . kQjXwqw+2Lca0e6zeezxqb0+7szyQgbn8/xYliomPjGlhBY82Pg1nYpmq0pnoJrvabfgNyuXpgzn ksljZ1IIyV9RT4Nw0m5OPPMiPdNMPhsevHQWQmC4ceaHGNc29LTyJ6MU3RTu5HTG9NG1MMEqmabd BvPOHKJc3gS+0sY+jcs62IdLz53okOvv2+CPrYzzFl4fpWi/oTecL9YYj9Ad/ya8VLxRxzWyrDVq FCbq/4TNC9csntwHotpDtToJNfCtnufB2WIaQFivpoydLmS0lzSpLwMpo2iDDTlQh54hjPzjC6H0 RrGN+P5yRu1jnNX301kiBvpx1nSzxd6bB9uQrw== ) ;; ADDITIONAL SECTION (13 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 b.dns.ripn.net. 172800 IN A 194.85.252.62 c.tld-servers.ru. 172800 IN A 194.190.122.17 d.dns.ripn.net. 172800 IN A 194.190.124.17 e.dns.ripn.net. 172800 IN A 193.232.142.17 f.dns.ripn.net. 172800 IN A 193.232.156.17 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 c.tld-servers.ru. 172800 IN AAAA 2a09:bd00:1:0:194:190:122:17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for ru/DNSKEY
	Received 750 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 750 octets ;; HEADER SECTION ;; id = 49091 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS c.tld-servers.ru. ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20261010170000 20260927160000 57780 . kQjXwqw+2Lca0e6zeezxqb0+7szyQgbn8/xYliomPjGlhBY82Pg1nYpmq0pnoJrvabfgNyuXpgzn ksljZ1IIyV9RT4Nw0m5OPPMiPdNMPhsevHQWQmC4ceaHGNc29LTyJ6MU3RTu5HTG9NG1MMEqmabd BvPOHKJc3gS+0sY+jcs62IdLz53okOvv2+CPrYzzFl4fpWi/oTecL9YYj9Ad/ya8VLxRxzWyrDVq FCbq/4TNC9csntwHotpDtToJNfCtnufB2WIaQFivpoydLmS0lzSpLwMpo2iDDTlQh54hjPzjC6H0 RrGN+P5yRu1jnNX301kiBvpx1nSzxd6bB9uQrw== ) ;; ADDITIONAL SECTION (13 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 d.dns.ripn.net. 172800 IN A 194.190.124.17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 f.dns.ripn.net. 172800 IN A 193.232.156.17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 b.dns.ripn.net. 172800 IN A 194.85.252.62 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 e.dns.ripn.net. 172800 IN A 193.232.142.17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 c.tld-servers.ru. 172800 IN A 194.190.122.17 c.tld-servers.ru. 172800 IN AAAA 2a09:bd00:1:0:194:190:122:17 ;; { "EDNS-VERSION": 0 }
	Found child zone ru

	Checking DS between . and ru
	Query to f.root-servers.net for ru/DS
	Received 366 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 366 octets ;; HEADER SECTION ;; id = 49763 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DS ;; ANSWER SECTION (2 records) ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20261010170000 20260927160000 57780 . kQjXwqw+2Lca0e6zeezxqb0+7szyQgbn8/xYliomPjGlhBY82Pg1nYpmq0pnoJrvabfgNyuXpgzn ksljZ1IIyV9RT4Nw0m5OPPMiPdNMPhsevHQWQmC4ceaHGNc29LTyJ6MU3RTu5HTG9NG1MMEqmabd BvPOHKJc3gS+0sY+jcs62IdLz53okOvv2+CPrYzzFl4fpWi/oTecL9YYj9Ad/ya8VLxRxzWyrDVq FCbq/4TNC9csntwHotpDtToJNfCtnufB2WIaQFivpoydLmS0lzSpLwMpo2iDDTlQh54hjPzjC6H0 RrGN+P5yRu1jnNX301kiBvpx1nSzxd6bB9uQrw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ru in the . zone
	DS=26734/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ru. 86400 IN RRSIG ( DS 8 1 86400 20261010170000 20260927160000 57780 . kQjXwqw+2Lca0e6zeezxqb0+7szyQgbn8/xYliomPjGlhBY82Pg1nYpmq0pnoJrvabfgNyuXpgzn ksljZ1IIyV9RT4Nw0m5OPPMiPdNMPhsevHQWQmC4ceaHGNc29LTyJ6MU3RTu5HTG9NG1MMEqmabd BvPOHKJc3gS+0sY+jcs62IdLz53okOvv2+CPrYzzFl4fpWi/oTecL9YYj9Ad/ya8VLxRxzWyrDVq FCbq/4TNC9csntwHotpDtToJNfCtnufB2WIaQFivpoydLmS0lzSpLwMpo2iDDTlQh54hjPzjC6H0 RrGN+P5yRu1jnNX301kiBvpx1nSzxd6bB9uQrw== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=26734/SHA-256 is now in the chain-of-trust
	`ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 )`
	Query to e.dns.ripn.net for ru/DNSKEY
	Received 745 bytes from 193.232.142.17
	;; Response received from [193.232.142.17] 745 octets ;; HEADER SECTION ;; id = 28410 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (3 records) ru. 345600 IN DNSKEY ( 256 3 8 AwEAAc0x7WIRpwiOloLTO58z32pgHOoALc8NKwCUujCwRvZYpAN/8/jGMKJKimKoWumuroZSYjfx SWBdcG90KfWZmRN6RP5oBYqh9DGXFbp8X9cObfNbWXhqKHfTE8s5p48vwi7I8Cb62VawvEsviHMR TLmHSl7HEN0OsBo2dKQDyTEp ) ; keytag 56460 ru. 345600 IN DNSKEY ( 257 3 8 AwEAAd+cacI5tMDtkvRg5WH1oNbQW1QnoS6zMBe94PImVKXMyg17dOqGZgEG7etk9e30p1IQAZ6B FzmaUSqw3jK52g5HzRMLAMGhG3DPYvA7q5M/cZB9/eckdO7Nb08RUvUHGpM1KFFThIxJgJEyEA/3 oiDer/bBMIBb9VtweMR0wsCsSfgxtCoZ1SGSvJIPOxqPlX3wQJO+waKU/WqdkHDmP6WpNmZTnQlm UWxL4K6vSK9QDCMpD54KSCcuuFm2kn5KKvA2QL+12xQw7MKUyl5eT5shwUP/yp/wNFixDfvdN9Im 2BJiqmeZGWSYde+IGJ33JFWrXu6CLiQy7UWPqKygPdM= ) ; keytag 26734 ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20261017000000 20260927000000 26734 ru. mi9/vS7EdYCVzl6uhuFFGWGdUK1Ott7JkQCUUEPaSfwb3D/B8i7BFJAWcIU8+YxoqSJfF5M8/XKZ KBb2MQBqmFTJueqywdwe5OyXDBqYIpUKFJlqdIYyt/nSssylvQvqN6wBr+9CLa1NPjjfJrsguT3V M0hqA2NpvRJgsdQx82qdqUw3g0jK7DaYp0wjzwRQxUz/Ic+5We4lTS8BclLGXAnZRXB296M8lLgd Z41fjpJ40TVf9GTuECAJc4RXU5YT86Ak+kvKDyGVIyjcM57cH5Tsur7wFB8kcLBZ2aLgMjGuaBKf uLRjgkGPhdvTLD9U3qBvoRBY+pBs1iDLvLkcXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ru
	`ru. 345600 IN DNSKEY ( 256 3 8 AwEAAc0x7WIRpwiOloLTO58z32pgHOoALc8NKwCUujCwRvZYpAN/8/jGMKJKimKoWumuroZSYjfx SWBdcG90KfWZmRN6RP5oBYqh9DGXFbp8X9cObfNbWXhqKHfTE8s5p48vwi7I8Cb62VawvEsviHMR TLmHSl7HEN0OsBo2dKQDyTEp ) ; keytag 56460`
	`ru. 345600 IN DNSKEY ( 257 3 8 AwEAAd+cacI5tMDtkvRg5WH1oNbQW1QnoS6zMBe94PImVKXMyg17dOqGZgEG7etk9e30p1IQAZ6B FzmaUSqw3jK52g5HzRMLAMGhG3DPYvA7q5M/cZB9/eckdO7Nb08RUvUHGpM1KFFThIxJgJEyEA/3 oiDer/bBMIBb9VtweMR0wsCsSfgxtCoZ1SGSvJIPOxqPlX3wQJO+waKU/WqdkHDmP6WpNmZTnQlm UWxL4K6vSK9QDCMpD54KSCcuuFm2kn5KKvA2QL+12xQw7MKUyl5eT5shwUP/yp/wNFixDfvdN9Im 2BJiqmeZGWSYde+IGJ33JFWrXu6CLiQy7UWPqKygPdM= ) ; keytag 26734`
	DNSKEY=26734/SEP is now in the chain-of-trust
	DS=26734/SHA-256 verifies DNSKEY=26734/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20261017000000 20260927000000 26734 ru. mi9/vS7EdYCVzl6uhuFFGWGdUK1Ott7JkQCUUEPaSfwb3D/B8i7BFJAWcIU8+YxoqSJfF5M8/XKZ KBb2MQBqmFTJueqywdwe5OyXDBqYIpUKFJlqdIYyt/nSssylvQvqN6wBr+9CLa1NPjjfJrsguT3V M0hqA2NpvRJgsdQx82qdqUw3g0jK7DaYp0wjzwRQxUz/Ic+5We4lTS8BclLGXAnZRXB296M8lLgd Z41fjpJ40TVf9GTuECAJc4RXU5YT86Ak+kvKDyGVIyjcM57cH5Tsur7wFB8kcLBZ2aLgMjGuaBKf uLRjgkGPhdvTLD9U3qBvoRBY+pBs1iDLvLkcXw== )`
	RRSIG=26734 and DNSKEY=26734/SEP verifies the DNSKEY RRset
	DNSKEY=56460 is now in the chain-of-trust
	Query to b.dns.ripn.net for habrahabr.ru/A
	Received 590 bytes from 194.85.252.62
	;; Response received from [194.85.252.62] 590 octets ;; HEADER SECTION ;; id = 37371 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; habrahabr.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) habrahabr.ru. 345600 IN NS ns1.habradns.net. habrahabr.ru. 345600 IN NS ns2.habradns.net. habrahabr.ru. 345600 IN NS ns3.habradns.net. j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN NSEC3 ( 1 1 0 - j21lulr2unpa28sere28ovnjnj67qp7v NS SOA RRSIG DNSKEY NSEC3PARAM ) j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261010121249 20260904141520 56460 ru. W1d/w0QKTlaczimDsj/iaA+1QhRr5W808w8o6tBYR9RSA76HNGw0I1/kaCshl/4fu7ZXFdrfupFr Zk7HD5ahSyxpfEhfyhqkA3qJdLCr2gZrfjcf5psbngzSqWzKmgPE1u5ARTBB4a/iflTWZ2h+y4Ln NaJUJLxXRQPOfl93PIQ= ) atakm789roed3g8h3g9d0oaveohf1s1e.ru. 3600 IN NSEC3 ( 1 1 0 - atbsr0o070v56c0cppamrci6b060gc6k NS DS RRSIG ) atakm789roed3g8h3g9d0oaveohf1s1e.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261016194629 20260904141520 56460 ru. oYfVG5SiHOt16b3DJaKlswVpj8mV5KRYu2m0+gisgtoDuIbcFQDt+8v/ljc6YXjninSsqJhCgpEw w+vFF1x+r25MpIB9E0gKiXSFNaE0nnD3R8IZ4sle7UFwVqQvSKkSuwMkTLgExOuu7cBlygbpSYX0 bcTDvHuCKKDNI1ZMWas= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.dns.ripn.net for habrahabr.ru/DNSKEY
	Received 602 bytes from 193.232.128.6
	;; Response received from [193.232.128.6] 602 octets ;; HEADER SECTION ;; id = 50133 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; habrahabr.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) HABRAHABR.RU. 345600 IN NS ns2.habradns.net. HABRAHABR.RU. 345600 IN NS ns3.habradns.net. HABRAHABR.RU. 345600 IN NS ns1.habradns.net. J20C0QKDHUA3CUMNKST289FF06U2SQ91.ru. 3600 IN NSEC3 ( 1 1 0 - j21lulr2unpa28sere28ovnjnj67qp7v NS SOA RRSIG DNSKEY NSEC3PARAM ) J20C0QKDHUA3CUMNKST289FF06U2SQ91.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261010121249 20260904141520 56460 ru. W1d/w0QKTlaczimDsj/iaA+1QhRr5W808w8o6tBYR9RSA76HNGw0I1/kaCshl/4fu7ZXFdrfupFr Zk7HD5ahSyxpfEhfyhqkA3qJdLCr2gZrfjcf5psbngzSqWzKmgPE1u5ARTBB4a/iflTWZ2h+y4Ln NaJUJLxXRQPOfl93PIQ= ) ATAKM789ROED3G8H3G9D0OAVEOHF1S1E.ru. 3600 IN NSEC3 ( 1 1 0 - atbsr0o070v56c0cppamrci6b060gc6k NS DS RRSIG ) ATAKM789ROED3G8H3G9D0OAVEOHF1S1E.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261016194629 20260904141520 56460 ru. oYfVG5SiHOt16b3DJaKlswVpj8mV5KRYu2m0+gisgtoDuIbcFQDt+8v/ljc6YXjninSsqJhCgpEw w+vFF1x+r25MpIB9E0gKiXSFNaE0nnD3R8IZ4sle7UFwVqQvSKkSuwMkTLgExOuu7cBlygbpSYX0 bcTDvHuCKKDNI1ZMWas= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone habrahabr.ru

habrahabr.ru

	Checking DS between ru and habrahabr.ru
	Query to b.dns.ripn.net for habrahabr.ru/DS
	Received 747 bytes from 194.85.252.62
	;; Response received from [194.85.252.62] 747 octets ;; HEADER SECTION ;; id = 36459 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; habrahabr.ru. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ru. 3600 IN SOA ( a.dns.ripn.net. hostmaster.ripn.net. 4070519 ;serial 86400 ;refresh 14400 ;retry 2592000 ;expire 3600 ;minimum ) ru. 3600 IN RRSIG ( SOA 8 1 345600 20261031175628 20260927181637 56460 ru. rbSExRtaF8j0f2boiZBkA3myzRq6wrfmuUxYiKCd7zS+E9rR5LZ/TKJtP7f3sdz2BKtDVjuB9IJa 3xSYRJvEG8Udp9ACEWrysOQnrUshRyyxzYIz68M1vSGerKgjPJQaxJutd8dBmNpRvEb2uKY3tCxu L3Y33RymjUvlCXPQS28= ) j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN NSEC3 ( 1 1 0 - j21lulr2unpa28sere28ovnjnj67qp7v NS SOA RRSIG DNSKEY NSEC3PARAM ) j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261010121249 20260904141520 56460 ru. W1d/w0QKTlaczimDsj/iaA+1QhRr5W808w8o6tBYR9RSA76HNGw0I1/kaCshl/4fu7ZXFdrfupFr Zk7HD5ahSyxpfEhfyhqkA3qJdLCr2gZrfjcf5psbngzSqWzKmgPE1u5ARTBB4a/iflTWZ2h+y4Ln NaJUJLxXRQPOfl93PIQ= ) atakm789roed3g8h3g9d0oaveohf1s1e.ru. 3600 IN NSEC3 ( 1 1 0 - atbsr0o070v56c0cppamrci6b060gc6k NS DS RRSIG ) atakm789roed3g8h3g9d0oaveohf1s1e.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261016194629 20260904141520 56460 ru. oYfVG5SiHOt16b3DJaKlswVpj8mV5KRYu2m0+gisgtoDuIbcFQDt+8v/ljc6YXjninSsqJhCgpEw w+vFF1x+r25MpIB9E0gKiXSFNaE0nnD3R8IZ4sle7UFwVqQvSKkSuwMkTLgExOuu7cBlygbpSYX0 bcTDvHuCKKDNI1ZMWas= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for habrahabr.ru in the ru zone
	Query to ns1.habradns.net for habrahabr.ru/DNSKEY
	Received 111 bytes from 159.253.22.172
	;; Response received from [159.253.22.172] 111 octets ;; HEADER SECTION ;; id = 58395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; habrahabr.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) habrahabr.ru. 3600 IN SOA ( ns1.habradns.net. nsmaster.habralab.ru. 2021122801 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns3.habradns.net for habrahabr.ru/A
	Received 57 bytes from 51.75.150.16
	;; Response received from [51.75.150.16] 57 octets ;; HEADER SECTION ;; id = 36125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; habrahabr.ru. IN A ;; ANSWER SECTION (1 record) habrahabr.ru. 3600 IN A 178.248.233.33 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.habradns.net is authoritative for habrahabr.ru
	Query to ns2.habradns.net for habrahabr.ru/SOA
	Received 111 bytes from 65.21.120.92
	;; Response received from [65.21.120.92] 111 octets ;; HEADER SECTION ;; id = 30192 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; habrahabr.ru. IN SOA ;; ANSWER SECTION (1 record) habrahabr.ru. 3600 IN SOA ( ns1.habradns.net. nsmaster.habralab.ru. 2021122801 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.habradns.net for habrahabr.ru/SOA
	Received 111 bytes from 205.196.80.14
	;; Response received from [205.196.80.14] 111 octets ;; HEADER SECTION ;; id = 65467 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; habrahabr.ru. IN SOA ;; ANSWER SECTION (1 record) habrahabr.ru. 3600 IN SOA ( ns1.habradns.net. nsmaster.habralab.ru. 2021122801 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.habradns.net for habrahabr.ru/A
	habrahabr.ru A RR has value 178.248.233.33
	No RRSIGs found

habrahabr.ru

	Query to ns2.habradns.net for habrahabr.ru/A
	Received 57 bytes from 65.21.120.92
	;; Response received from [65.21.120.92] 57 octets ;; HEADER SECTION ;; id = 18748 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; habrahabr.ru. IN A ;; ANSWER SECTION (1 record) habrahabr.ru. 3600 IN A 178.248.233.33 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.habradns.net is authoritative for habrahabr.ru
	Query to ns2.habradns.net for habrahabr.ru/A
	habrahabr.ru A RR has value 178.248.233.33
	No RRSIGs found

habrahabr.ru

	Query to ns1.habradns.net for habrahabr.ru/A
	Received 57 bytes from 159.253.22.172
	;; Response received from [159.253.22.172] 57 octets ;; HEADER SECTION ;; id = 56460 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; habrahabr.ru. IN A ;; ANSWER SECTION (1 record) habrahabr.ru. 3600 IN A 178.248.233.33 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.habradns.net is authoritative for habrahabr.ru
	Query to ns1.habradns.net for habrahabr.ru/A
	habrahabr.ru A RR has value 178.248.233.33
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test habrahabr.ru at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: