DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-17 09:04:06 UTC

Analyzing DNSSEC problems for ipp.gov

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1139 octets ;; HEADER SECTION ;; id = 58137 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to g.root-servers.net for ipp.gov/A
	Received 617 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 617 octets ;; HEADER SECTION ;; id = 35237 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ipp.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . njftKBi/siYeyqj8qinHcA8BR5KW+KFh4hWa/QxMpZnKNL9kbI5qB/Kp74HxW+BBEV5RM3qb8iyH 91dkwwlaHBacM14ref7unsY9/6g8p+QyafNgbPp7z1HULHOnqpA2XvzkWIpkqKTBAi0w+124IrjH bNairvFK6pTL6nYAK5SFwN+SfO3RTj+ltNhKvVr/rPgauYzGGdJc7RIEKerRIbbJ61tp1jIsZZmP Asm4saTNvKLc/aGsCG4P1/DzsdW4EfQaHpYQ3EvXjRGZhF/b/OyJbqFmR7vtklUM6kFUWdB5aLB2 hEziIWzKnhE5s0e9um74GiEjn8KdZPPut/6u5Q== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 610 octets ;; HEADER SECTION ;; id = 31702 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . njftKBi/siYeyqj8qinHcA8BR5KW+KFh4hWa/QxMpZnKNL9kbI5qB/Kp74HxW+BBEV5RM3qb8iyH 91dkwwlaHBacM14ref7unsY9/6g8p+QyafNgbPp7z1HULHOnqpA2XvzkWIpkqKTBAi0w+124IrjH bNairvFK6pTL6nYAK5SFwN+SfO3RTj+ltNhKvVr/rPgauYzGGdJc7RIEKerRIbbJ61tp1jIsZZmP Asm4saTNvKLc/aGsCG4P1/DzsdW4EfQaHpYQ3EvXjRGZhF/b/OyJbqFmR7vtklUM6kFUWdB5aLB2 hEziIWzKnhE5s0e9um74GiEjn8KdZPPut/6u5Q== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to l.root-servers.net for gov/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 56309 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . njftKBi/siYeyqj8qinHcA8BR5KW+KFh4hWa/QxMpZnKNL9kbI5qB/Kp74HxW+BBEV5RM3qb8iyH 91dkwwlaHBacM14ref7unsY9/6g8p+QyafNgbPp7z1HULHOnqpA2XvzkWIpkqKTBAi0w+124IrjH bNairvFK6pTL6nYAK5SFwN+SfO3RTj+ltNhKvVr/rPgauYzGGdJc7RIEKerRIbbJ61tp1jIsZZmP Asm4saTNvKLc/aGsCG4P1/DzsdW4EfQaHpYQ3EvXjRGZhF/b/OyJbqFmR7vtklUM6kFUWdB5aLB2 hEziIWzKnhE5s0e9um74GiEjn8KdZPPut/6u5Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . njftKBi/siYeyqj8qinHcA8BR5KW+KFh4hWa/QxMpZnKNL9kbI5qB/Kp74HxW+BBEV5RM3qb8iyH 91dkwwlaHBacM14ref7unsY9/6g8p+QyafNgbPp7z1HULHOnqpA2XvzkWIpkqKTBAi0w+124IrjH bNairvFK6pTL6nYAK5SFwN+SfO3RTj+ltNhKvVr/rPgauYzGGdJc7RIEKerRIbbJ61tp1jIsZZmP Asm4saTNvKLc/aGsCG4P1/DzsdW4EfQaHpYQ3EvXjRGZhF/b/OyJbqFmR7vtklUM6kFUWdB5aLB2 hEziIWzKnhE5s0e9um74GiEjn8KdZPPut/6u5Q== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 21944 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for ipp.gov/A
	Received 355 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 355 octets ;; HEADER SECTION ;; id = 25965 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ipp.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ipp.gov. 10800 IN NS pdns108.ultradns.biz. ipp.gov. 10800 IN NS pdns108.ultradns.com. ipp.gov. 10800 IN NS pdns108.ultradns.net. ipp.gov. 10800 IN NS pdns108.ultradns.org. ipp.gov. 3600 IN DS 37135 13 1 cc018a31282246479715cc24d38595a972192815 ipp.gov. 3600 IN DS ( 37135 13 2 475c798661a405537a1acdc108229e38f6e868b895fe0a398b0c5bbc75ed7537 ) ipp.gov. 3600 IN RRSIG ( DS 13 2 3600 20260418100406 20260416080406 35496 gov. Sw7FtUyTCxrOJHgcz27c3+iajprUw4b1IhIIHYjGyfKd/bfGvdG8rSJW+sKGrsoQP9960Zbl/FVd akyDh64AWQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for ipp.gov/DNSKEY
	Received 355 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 355 octets ;; HEADER SECTION ;; id = 50245 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ipp.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ipp.gov. 10800 IN NS pdns108.ultradns.biz. ipp.gov. 10800 IN NS pdns108.ultradns.com. ipp.gov. 10800 IN NS pdns108.ultradns.net. ipp.gov. 10800 IN NS pdns108.ultradns.org. ipp.gov. 3600 IN DS 37135 13 1 cc018a31282246479715cc24d38595a972192815 ipp.gov. 3600 IN DS ( 37135 13 2 475c798661a405537a1acdc108229e38f6e868b895fe0a398b0c5bbc75ed7537 ) ipp.gov. 3600 IN RRSIG ( DS 13 2 3600 20260418100406 20260416080406 35496 gov. FvVjtO1lqWJ3vsDmijjsVoD8PA2mP3eFalgxXBR+lg+7QCAMB3RHLZHA3pnbMW3Voone70E63/kF FpYrazG3aA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ipp.gov

ipp.gov

	Checking DS between gov and ipp.gov
	Query to a.ns.gov for ipp.gov/DS
	Received 219 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 219 octets ;; HEADER SECTION ;; id = 2752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ipp.gov. IN DS ;; ANSWER SECTION (3 records) ipp.gov. 3600 IN DS 37135 13 1 cc018a31282246479715cc24d38595a972192815 ipp.gov. 3600 IN DS ( 37135 13 2 475c798661a405537a1acdc108229e38f6e868b895fe0a398b0c5bbc75ed7537 ) ipp.gov. 3600 IN RRSIG ( DS 13 2 3600 20260418100406 20260416080406 35496 gov. TqR5Lrm1RqYcfI0ugsNFNI0v0uFidzyaUznOzkG7WK8ybwuPb32K/w2/u7JQXvkUHCgXHTAoJXaw PLLn0YQAvg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for ipp.gov in the gov zone
	DS=37135/SHA-1 uses a deprecated digest algorithm
	DS=37135/SHA-1 has algorithm ECDSAP256SHA256
	DS=37135/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ipp.gov. 3600 IN RRSIG ( DS 13 2 3600 20260418100406 20260416080406 35496 gov. TqR5Lrm1RqYcfI0ugsNFNI0v0uFidzyaUznOzkG7WK8ybwuPb32K/w2/u7JQXvkUHCgXHTAoJXaw PLLn0YQAvg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=37135/SHA-1 is now in the chain-of-trust
	`ipp.gov. 3600 IN DS 37135 13 1 cc018a31282246479715cc24d38595a972192815`
	`ipp.gov. 3600 IN DS ( 37135 13 2 475c798661a405537a1acdc108229e38f6e868b895fe0a398b0c5bbc75ed7537 )`
	Query to pdns108.ultradns.net for ipp.gov/DNSKEY
	Received 379 bytes from 156.154.65.108
	;; Response received from [156.154.65.108] 379 octets ;; HEADER SECTION ;; id = 10215 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ipp.gov. IN DNSKEY ;; ANSWER SECTION (4 records) ipp.gov. 86400 IN DNSKEY ( 256 3 13 EBsKBHC5xFP4fOwNPhHOkHpVOns5zbk4+L3yi1gjxJdHE9fLB8sUS7lql456H9/Ex9GLpWgXnqKU HwBvB/L+5Q== ) ; keytag 53164 ipp.gov. 86400 IN DNSKEY ( 256 3 13 EPzv8ZrsvPdPEIhvZ5OWoGH2IMX+7KuQNvEaEmF0A9MvWoUSll5AQnMh/gsi7OOL5M0hwA////sA b+xlY9ur0g== ) ; keytag 11222 ipp.gov. 86400 IN DNSKEY ( 257 3 13 A3r4q0d4iSMH9Dq6i8ud+Mjmutl4o4/sg/gmBePRoaavfDRw6uQlB+pKhDn2bmfVK/IKe49bj5Az /8hnjqn2+g== ) ; keytag 37135 ipp.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260426064321 20260412064321 37135 ipp.gov. 9NUkOaTKqHcrHcDtW5tedMKM6ibu7Wj7SVUpglMjHz+qN1nfr1uR2wXZLX/0OjbFZXDsW8Rpz+Yg FwcXuRGTyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ipp.gov
	`ipp.gov. 86400 IN DNSKEY ( 256 3 13 EBsKBHC5xFP4fOwNPhHOkHpVOns5zbk4+L3yi1gjxJdHE9fLB8sUS7lql456H9/Ex9GLpWgXnqKU HwBvB/L+5Q== ) ; keytag 53164`
	`ipp.gov. 86400 IN DNSKEY ( 256 3 13 EPzv8ZrsvPdPEIhvZ5OWoGH2IMX+7KuQNvEaEmF0A9MvWoUSll5AQnMh/gsi7OOL5M0hwA////sA b+xlY9ur0g== ) ; keytag 11222`
	`ipp.gov. 86400 IN DNSKEY ( 257 3 13 A3r4q0d4iSMH9Dq6i8ud+Mjmutl4o4/sg/gmBePRoaavfDRw6uQlB+pKhDn2bmfVK/IKe49bj5Az /8hnjqn2+g== ) ; keytag 37135`
	DNSKEY=37135/SEP is now in the chain-of-trust
	DS=37135/SHA-1 verifies DNSKEY=37135/SEP
	DS=37135/SHA-256 verifies DNSKEY=37135/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ipp.gov. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260426064321 20260412064321 37135 ipp.gov. 9NUkOaTKqHcrHcDtW5tedMKM6ibu7Wj7SVUpglMjHz+qN1nfr1uR2wXZLX/0OjbFZXDsW8Rpz+Yg FwcXuRGTyg== )`
	RRSIG=37135 and DNSKEY=37135/SEP verifies the DNSKEY RRset
	DNSKEY=53164 is now in the chain-of-trust
	DNSKEY=11222 is now in the chain-of-trust
	Query to pdns108.ultradns.biz for ipp.gov/A
	Received 410 bytes from 156.154.66.108
	;; Response received from [156.154.66.108] 410 octets ;; HEADER SECTION ;; id = 23133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ipp.gov. IN A ;; ANSWER SECTION (3 records) ipp.gov. 10 IN A 23.48.203.240 ipp.gov. 10 IN A 23.39.174.168 ipp.gov. 10 IN RRSIG ( A 13 2 10 20260426064321 20260412064321 11222 ipp.gov. g1/irV6LGiHQ2+jMl2RqH4kehZcOKJW5z+/F3K7F3KZ6m3g0en8jZAXalgiJTsKiwim8skFTT3EX 5NtR+fngkQ== ) ;; AUTHORITY SECTION (5 records) ipp.gov. 3600 IN NS pdns108.ultradns.biz. ipp.gov. 3600 IN NS pdns108.ultradns.com. ipp.gov. 3600 IN NS pdns108.ultradns.net. ipp.gov. 3600 IN NS pdns108.ultradns.org. ipp.gov. 3600 IN RRSIG ( NS 13 2 3600 20260426064321 20260412064321 11222 ipp.gov. HR1lJaLoWNdwt+qvoaN3DP/XheAUde9uZCGJaYKxODap7P+U6JbPnGkiLMajD7leE96Ygf2clX4q SBqOPVfAYg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns108.ultradns.biz is authoritative for ipp.gov
	Found RRSIG signed by ipp.gov zone
	Query to pdns108.ultradns.net for ipp.gov/SOA
	Received 426 bytes from 156.154.65.108
	;; Response received from [156.154.65.108] 426 octets ;; HEADER SECTION ;; id = 52506 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ipp.gov. IN SOA ;; ANSWER SECTION (2 records) ipp.gov. 300 IN SOA ( pdns108.ultradns.com. dns.ids.frb.org. 5420 ;serial 1200 ;refresh 1800 ;retry 1209600 ;expire 3600 ;minimum ) ipp.gov. 300 IN RRSIG ( SOA 13 2 300 20260426064321 20260412064321 11222 ipp.gov. izJxnwE5f3ZzlMTr2/nzANuIK24f3G12pgP/tIeD4w9iYg940DvOJHhHAo2UPgslwAfFntEAdQKz qpssUh/tDA== ) ;; AUTHORITY SECTION (5 records) ipp.gov. 3600 IN NS pdns108.ultradns.biz. ipp.gov. 3600 IN NS pdns108.ultradns.com. ipp.gov. 3600 IN NS pdns108.ultradns.net. ipp.gov. 3600 IN NS pdns108.ultradns.org. ipp.gov. 3600 IN RRSIG ( NS 13 2 3600 20260426064321 20260412064321 11222 ipp.gov. 7SqxtV4O1XqULPz1azrSuhyiGEIDT2sEWk9Ufss4ZlqQ7LA6+mlb8pirxWxoSu4foxN0ldOFXY+W McFZKdQQHA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns108.ultradns.com for ipp.gov/SOA
	Received 426 bytes from 156.154.64.108
	;; Response received from [156.154.64.108] 426 octets ;; HEADER SECTION ;; id = 43927 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ipp.gov. IN SOA ;; ANSWER SECTION (2 records) ipp.gov. 300 IN SOA ( pdns108.ultradns.com. dns.ids.frb.org. 5420 ;serial 1200 ;refresh 1800 ;retry 1209600 ;expire 3600 ;minimum ) ipp.gov. 300 IN RRSIG ( SOA 13 2 300 20260426064321 20260412064321 11222 ipp.gov. V/nJNBih+rWQmcxdXJwwmg6kO1EKMUruFu2Y913YiXpDOCvIe9eIU8rTfwBbY4nElFTpksODivV0 SDoUBJHP3A== ) ;; AUTHORITY SECTION (5 records) ipp.gov. 3600 IN NS pdns108.ultradns.biz. ipp.gov. 3600 IN NS pdns108.ultradns.com. ipp.gov. 3600 IN NS pdns108.ultradns.net. ipp.gov. 3600 IN NS pdns108.ultradns.org. ipp.gov. 3600 IN RRSIG ( NS 13 2 3600 20260426064321 20260412064321 11222 ipp.gov. xGn4TrB/coWFEAE+HZNNrr3jauCwxmos6hxUyQuD8oDBzZxcLnIcJ2D3FfZkkhfvPwdj+mLiNRoM L3Mwie7CNA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns108.ultradns.org for ipp.gov/SOA
	Received 426 bytes from 156.154.67.108
	;; Response received from [156.154.67.108] 426 octets ;; HEADER SECTION ;; id = 16261 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ipp.gov. IN SOA ;; ANSWER SECTION (2 records) ipp.gov. 300 IN SOA ( pdns108.ultradns.com. dns.ids.frb.org. 5420 ;serial 1200 ;refresh 1800 ;retry 1209600 ;expire 3600 ;minimum ) ipp.gov. 300 IN RRSIG ( SOA 13 2 300 20260426064321 20260412064321 11222 ipp.gov. UcqUi4ZgpXwrkMPTkA9ikekmYrYaxZLEbqtMRyC+RtmD+/EfCkYgx1YP4pZbMY2ncy8Gyv8BXY2H G0iuDoINTg== ) ;; AUTHORITY SECTION (5 records) ipp.gov. 3600 IN NS pdns108.ultradns.biz. ipp.gov. 3600 IN NS pdns108.ultradns.com. ipp.gov. 3600 IN NS pdns108.ultradns.net. ipp.gov. 3600 IN NS pdns108.ultradns.org. ipp.gov. 3600 IN RRSIG ( NS 13 2 3600 20260426064321 20260412064321 11222 ipp.gov. qQDkhityS/93PLQMlEAs3cUCYEJaOq8h01O99m+BOZQx4q5t/LQAspW+gS7o/gTJNPpHZDD3RG6j QgmdWYiJjw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns108.ultradns.biz for ipp.gov/A
	ipp.gov A RR has value 23.48.203.240
	ipp.gov A RR has value 23.39.174.168
	Found 1 RRSIGs over A RRset
	`ipp.gov. 10 IN RRSIG ( A 13 2 10 20260426064321 20260412064321 11222 ipp.gov. g1/irV6LGiHQ2+jMl2RqH4kehZcOKJW5z+/F3K7F3KZ6m3g0en8jZAXalgiJTsKiwim8skFTT3EX 5NtR+fngkQ== )`
	RRSIG=11222 and DNSKEY=11222 verifies the A RRset

ipp.gov

	Query to pdns108.ultradns.net for ipp.gov/A
	Received 410 bytes from 156.154.65.108
	;; Response received from [156.154.65.108] 410 octets ;; HEADER SECTION ;; id = 43889 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ipp.gov. IN A ;; ANSWER SECTION (3 records) ipp.gov. 20 IN A 23.200.88.61 ipp.gov. 20 IN A 23.200.88.62 ipp.gov. 20 IN RRSIG ( A 13 2 20 20260426064321 20260412064321 11222 ipp.gov. 7aC+FlN5fnPGzwrg2Vuoy8Gf3awgEBInt0wLROkKzCtblJjnMpoTlmpNxZnF02lF6lYUPT4DqKXV +1GOIO1eog== ) ;; AUTHORITY SECTION (5 records) ipp.gov. 3600 IN NS pdns108.ultradns.biz. ipp.gov. 3600 IN NS pdns108.ultradns.com. ipp.gov. 3600 IN NS pdns108.ultradns.net. ipp.gov. 3600 IN NS pdns108.ultradns.org. ipp.gov. 3600 IN RRSIG ( NS 13 2 3600 20260426064321 20260412064321 11222 ipp.gov. moZpnH2VXciZsvIbsdYXTkYutERaarQX1CGpFBnh/8zfxj/8r3bW4kMYVxqu+wHckK7t1R4lemsu 9vbJRXcG6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns108.ultradns.net is authoritative for ipp.gov
	Found RRSIG signed by ipp.gov zone
	Query to pdns108.ultradns.net for ipp.gov/A
	ipp.gov A RR has value 23.200.88.61
	ipp.gov A RR has value 23.200.88.62
	Found 1 RRSIGs over A RRset
	`ipp.gov. 20 IN RRSIG ( A 13 2 20 20260426064321 20260412064321 11222 ipp.gov. 7aC+FlN5fnPGzwrg2Vuoy8Gf3awgEBInt0wLROkKzCtblJjnMpoTlmpNxZnF02lF6lYUPT4DqKXV +1GOIO1eog== )`
	RRSIG=11222 and DNSKEY=11222 verifies the A RRset

ipp.gov

	Query to pdns108.ultradns.org for ipp.gov/A
	Received 410 bytes from 156.154.67.108
	;; Response received from [156.154.67.108] 410 octets ;; HEADER SECTION ;; id = 61724 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ipp.gov. IN A ;; ANSWER SECTION (3 records) ipp.gov. 20 IN A 23.200.88.62 ipp.gov. 20 IN A 23.200.88.61 ipp.gov. 20 IN RRSIG ( A 13 2 20 20260426064321 20260412064321 11222 ipp.gov. GR9qUyRL4h48SCIABR9kbnZPm8JC6fQkB99ib4y4SliXqp0/H+2JcZlRJbKP5I3F8IMQspeuat25 bts+JJOXgg== ) ;; AUTHORITY SECTION (5 records) ipp.gov. 3600 IN NS pdns108.ultradns.biz. ipp.gov. 3600 IN NS pdns108.ultradns.com. ipp.gov. 3600 IN NS pdns108.ultradns.net. ipp.gov. 3600 IN NS pdns108.ultradns.org. ipp.gov. 3600 IN RRSIG ( NS 13 2 3600 20260426064321 20260412064321 11222 ipp.gov. D5oZsOVFlyU2kLTWAqHbZLN95KW9wmVC9tSSEGIKdnGruTwoA6NEfHEGs5APzT6LB+1pjC43S9kV 5TDnq3GRiA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns108.ultradns.org is authoritative for ipp.gov
	Found RRSIG signed by ipp.gov zone
	Query to pdns108.ultradns.org for ipp.gov/A
	ipp.gov A RR has value 23.200.88.62
	ipp.gov A RR has value 23.200.88.61
	Found 1 RRSIGs over A RRset
	`ipp.gov. 20 IN RRSIG ( A 13 2 20 20260426064321 20260412064321 11222 ipp.gov. GR9qUyRL4h48SCIABR9kbnZPm8JC6fQkB99ib4y4SliXqp0/H+2JcZlRJbKP5I3F8IMQspeuat25 bts+JJOXgg== )`
	RRSIG=11222 and DNSKEY=11222 verifies the A RRset

ipp.gov

	Query to pdns108.ultradns.com for ipp.gov/A
	Received 410 bytes from 156.154.64.108
	;; Response received from [156.154.64.108] 410 octets ;; HEADER SECTION ;; id = 1242 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ipp.gov. IN A ;; ANSWER SECTION (3 records) ipp.gov. 20 IN A 23.200.88.62 ipp.gov. 20 IN A 23.200.88.61 ipp.gov. 20 IN RRSIG ( A 13 2 20 20260426064321 20260412064321 11222 ipp.gov. N2fLcv8zOqOnJTaGfWn3sH+8h60v30TaoQw0ZQHI4eovaEwmCtIWaHS6Am/QjgddlyKALVFhH+u9 EeaLOJcnkw== ) ;; AUTHORITY SECTION (5 records) ipp.gov. 3600 IN NS pdns108.ultradns.biz. ipp.gov. 3600 IN NS pdns108.ultradns.com. ipp.gov. 3600 IN NS pdns108.ultradns.net. ipp.gov. 3600 IN NS pdns108.ultradns.org. ipp.gov. 3600 IN RRSIG ( NS 13 2 3600 20260426064321 20260412064321 11222 ipp.gov. NTRgOpwum4/0LY6snZlYGrhvO3Kignn8/jezHrCWEHwb9VrgpiOk7+fMADJFuBxdGfYLqoBYT6j9 H6P0IlT6MA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns108.ultradns.com is authoritative for ipp.gov
	Found RRSIG signed by ipp.gov zone
	Query to pdns108.ultradns.com for ipp.gov/A
	ipp.gov A RR has value 23.200.88.62
	ipp.gov A RR has value 23.200.88.61
	Found 1 RRSIGs over A RRset
	`ipp.gov. 20 IN RRSIG ( A 13 2 20 20260426064321 20260412064321 11222 ipp.gov. N2fLcv8zOqOnJTaGfWn3sH+8h60v30TaoQw0ZQHI4eovaEwmCtIWaHS6Am/QjgddlyKALVFhH+u9 EeaLOJcnkw== )`
	RRSIG=11222 and DNSKEY=11222 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ipp.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: