DNSSEC Analyzer - keys.openpgp.org

Domain Name:

Time: 2021-07-31 16:07:07 UTC, NTP stratum 16

Analyzing DNSSEC problems for keys.openpgp.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (864 octets) ;; HEADER SECTION ;; id = 18004 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210821000000 20210731000000 20326 . MQCiL1+LRbTdEm3hyrUQOjMurN4QNmB7Up8ahSMS3vC+Waa7ywqKnClMNiZqPJKYuAn3wHZM0kj5 pTF/wASaLJ9duxmcL6Wyi7mugRZE1Pv3RDvp6o4RbroZND9HVnImDxg/GmaJbRxtPuA/dGSp/Iq7 AObJrtgNM81p19Z50Zn89POIr50/7SpuiRZ7xFYhfwIug9pgrHHdNQpQN7UVUJVXMDgtH/IT8ACg vGfoVLXCciPIpKJhwYZXq9nOGBgVxV7/h7aIGkrOryfm2ChvIei3MQANyjiq1QfckaXHpg+iHa4J 6kduZoTR5Pe+E0VFpf8q63kYBaJTshOVVMm3TQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210821000000 20210731000000 20326 . MQCiL1+LRbTdEm3hyrUQOjMurN4QNmB7Up8ahSMS3vC+Waa7ywqKnClMNiZqPJKYuAn3wHZM0kj5 pTF/wASaLJ9duxmcL6Wyi7mugRZE1Pv3RDvp6o4RbroZND9HVnImDxg/GmaJbRxtPuA/dGSp/Iq7 AObJrtgNM81p19Z50Zn89POIr50/7SpuiRZ7xFYhfwIug9pgrHHdNQpQN7UVUJVXMDgtH/IT8ACg vGfoVLXCciPIpKJhwYZXq9nOGBgVxV7/h7aIGkrOryfm2ChvIei3MQANyjiq1QfckaXHpg+iHa4J 6kduZoTR5Pe+E0VFpf8q63kYBaJTshOVVMm3TQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26838 is now in the chain-of-trust
	Query to e.root-servers.net for keys.openpgp.org/A
	Received 782 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (782 octets) ;; HEADER SECTION ;; id = 37867 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . ijIY5/FotkIJCA+4I6oJjOmnI7PNDjBZ1xlxVbszqBBQAL4mY9sXV0HiJmy5Sf3WKW2TN+bROHv/ mJAOEWZgoEsYbgf9WfpaQui0FQCih95ZXtkbpSMi4XmJiIfD5PPjSYA2cGhR6nEgCoj1PHg4tm7H c5W0IGOwJiKXGGC/VNmu0/8MAKH+Mbd2EkPhAGs2rjCJ+tovpgc0zitp5EIkQbOA6FGJPHfxwInj jPo8qoSG/J+5yN1mvJLR/mtYcx4Ad2rI4pa4ZYE0TRj7/QO4PyTD+KqpzQmj4gbwGn/WKbfwLI0Y tUuaeP7UXPL4KzfoEm5A3ttMSZ/XdOb5Qh1Qcg== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to d.root-servers.net for org/DNSKEY
	Received 769 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (769 octets) ;; HEADER SECTION ;; id = 13343 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . ijIY5/FotkIJCA+4I6oJjOmnI7PNDjBZ1xlxVbszqBBQAL4mY9sXV0HiJmy5Sf3WKW2TN+bROHv/ mJAOEWZgoEsYbgf9WfpaQui0FQCih95ZXtkbpSMi4XmJiIfD5PPjSYA2cGhR6nEgCoj1PHg4tm7H c5W0IGOwJiKXGGC/VNmu0/8MAKH+Mbd2EkPhAGs2rjCJ+tovpgc0zitp5EIkQbOA6FGJPHfxwInj jPo8qoSG/J+5yN1mvJLR/mtYcx4Ad2rI4pa4ZYE0TRj7/QO4PyTD+KqpzQmj4gbwGn/WKbfwLI0Y tUuaeP7UXPL4KzfoEm5A3ttMSZ/XdOb5Qh1Qcg== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone org

org

	Checking DS between . and org
	Query to l.root-servers.net for org/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (367 octets) ;; HEADER SECTION ;; id = 22443 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . ijIY5/FotkIJCA+4I6oJjOmnI7PNDjBZ1xlxVbszqBBQAL4mY9sXV0HiJmy5Sf3WKW2TN+bROHv/ mJAOEWZgoEsYbgf9WfpaQui0FQCih95ZXtkbpSMi4XmJiIfD5PPjSYA2cGhR6nEgCoj1PHg4tm7H c5W0IGOwJiKXGGC/VNmu0/8MAKH+Mbd2EkPhAGs2rjCJ+tovpgc0zitp5EIkQbOA6FGJPHfxwInj jPo8qoSG/J+5yN1mvJLR/mtYcx4Ad2rI4pa4ZYE0TRj7/QO4PyTD+KqpzQmj4gbwGn/WKbfwLI0Y tUuaeP7UXPL4KzfoEm5A3ttMSZ/XdOb5Qh1Qcg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . ijIY5/FotkIJCA+4I6oJjOmnI7PNDjBZ1xlxVbszqBBQAL4mY9sXV0HiJmy5Sf3WKW2TN+bROHv/ mJAOEWZgoEsYbgf9WfpaQui0FQCih95ZXtkbpSMi4XmJiIfD5PPjSYA2cGhR6nEgCoj1PHg4tm7H c5W0IGOwJiKXGGC/VNmu0/8MAKH+Mbd2EkPhAGs2rjCJ+tovpgc0zitp5EIkQbOA6FGJPHfxwInj jPo8qoSG/J+5yN1mvJLR/mtYcx4Ad2rI4pa4ZYE0TRj7/QO4PyTD+KqpzQmj4gbwGn/WKbfwLI0Y tUuaeP7UXPL4KzfoEm5A3ttMSZ/XdOb5Qh1Qcg== )`
	RRSIG=26838 and DNSKEY=26838 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to a0.org.afilias-nst.info for org/DNSKEY
	Received 895 bytes from 199.19.56.1
	;; Response received from 199.19.56.1 (895 octets) ;; HEADER SECTION ;; id = 33199 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 900 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974 org. 900 IN DNSKEY ( 256 3 8 AwEAAeL05ciO98RxPnpNlCp9DdfxtRYxd+CllZNl8X66pKbMWAnuv8L8WDcw8XQR05aNEE9adoEe 1LuIbk8Y5gOfkCmCOahiB7j/Obpv+2U0+/uVvVW+YgWYK0iPqNj9cEk4OsG59eghwA3cVa5rFq32 cSHTZ6iY7dqValJkY0bvr75x ) ; Key ID = 5643 org. 900 IN DNSKEY ( 256 3 8 AwEAAb392FycLD3GBJ0EiZPm/zazorent63bul3sFokVMuYarYe/w7lYNDK2o4sFF/5dXeFZJh4S w54TwYTdERhQAulQC4EF285YmJvxTbrHihWih+a11ANbUsDH5QByrubX+H5gZFFKBPVc3EELwS6e I5vOlKrD8LILgeXvYG7cDU+V ) ; Key ID = 63813 org. 900 IN RRSIG ( DNSKEY 8 1 900 20210815152858 20210725142858 26974 org. EuuKss0blQe6EDH5uq3jTD3w9026qOTyNbUWl4F3rZRIvmM8AcGBhdOsw9JBwJFL6MDfi33pY5Pt hcDORYrHon4BACaVVmHs0JqSFrFgXlhTS0Qjm3h4i5D0qt8EKi/zgOV6/ZyQwnQps9Zc0fWrXa78 G/EDlX1WLsddip9XKuIeulA1GHzJqCFl39p2GfsDPzahvStnERF2gp0iojUUni2DtJsF8hfxt43e jb7TEwqIZovXZCdcwdNnSPbiQaF58vl/xargb7nkGaDVdYjvocdU1l3io80tv5YmaGF2PsBY5ylz 6XU8q61cghlVdhlzsvq6hQKY7LYRqqJKizVR4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for org
	`org. 900 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974`
	`org. 900 IN DNSKEY ( 256 3 8 AwEAAeL05ciO98RxPnpNlCp9DdfxtRYxd+CllZNl8X66pKbMWAnuv8L8WDcw8XQR05aNEE9adoEe 1LuIbk8Y5gOfkCmCOahiB7j/Obpv+2U0+/uVvVW+YgWYK0iPqNj9cEk4OsG59eghwA3cVa5rFq32 cSHTZ6iY7dqValJkY0bvr75x ) ; Key ID = 5643`
	`org. 900 IN DNSKEY ( 256 3 8 AwEAAb392FycLD3GBJ0EiZPm/zazorent63bul3sFokVMuYarYe/w7lYNDK2o4sFF/5dXeFZJh4S w54TwYTdERhQAulQC4EF285YmJvxTbrHihWih+a11ANbUsDH5QByrubX+H5gZFFKBPVc3EELwS6e I5vOlKrD8LILgeXvYG7cDU+V ) ; Key ID = 63813`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 900 IN RRSIG ( DNSKEY 8 1 900 20210815152858 20210725142858 26974 org. EuuKss0blQe6EDH5uq3jTD3w9026qOTyNbUWl4F3rZRIvmM8AcGBhdOsw9JBwJFL6MDfi33pY5Pt hcDORYrHon4BACaVVmHs0JqSFrFgXlhTS0Qjm3h4i5D0qt8EKi/zgOV6/ZyQwnQps9Zc0fWrXa78 G/EDlX1WLsddip9XKuIeulA1GHzJqCFl39p2GfsDPzahvStnERF2gp0iojUUni2DtJsF8hfxt43e jb7TEwqIZovXZCdcwdNnSPbiQaF58vl/xargb7nkGaDVdYjvocdU1l3io80tv5YmaGF2PsBY5ylz 6XU8q61cghlVdhlzsvq6hQKY7LYRqqJKizVR4A== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=5643 is now in the chain-of-trust
	DNSKEY=63813 is now in the chain-of-trust
	Query to d0.org.afilias-nst.org for keys.openpgp.org/A
	Received 304 bytes from 199.19.57.1
	;; Response received from 199.19.57.1 (304 octets) ;; HEADER SECTION ;; id = 42462 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) openpgp.org. 86400 IN NS ns2.swcp.com. openpgp.org. 86400 IN NS kitsune.swcp.com. openpgp.org. 86400 IN DS ( 26041 8 2 e68586c464fd449d62b879bc5913214c93ff841d0490a4e7d405324c81dac25c ) openpgp.org. 86400 IN RRSIG ( DS 8 2 86400 20210815152858 20210725142858 5643 org. Fh5oNxywbTa3k4VLgm7fZuwkLjZkPR9ojMYw18zwKg6Uv9/bQBbLMVNxr/n/Lg2WBxSshyqSORoi aytFHDcPBKBlfo5hdNsg+1aQpOpLA3+Jxc3ZANhT3ou6tQ13avn3ICXQtqs2/YgrUnLz0O4KCMes DdUNybQniIHVwfhoRY4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to d0.org.afilias-nst.org for openpgp.org/DNSKEY
	Received 299 bytes from 199.19.57.1
	;; Response received from 199.19.57.1 (299 octets) ;; HEADER SECTION ;; id = 63524 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; openpgp.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) openpgp.org. 86400 IN NS ns2.swcp.com. openpgp.org. 86400 IN NS kitsune.swcp.com. openpgp.org. 86400 IN DS ( 26041 8 2 e68586c464fd449d62b879bc5913214c93ff841d0490a4e7d405324c81dac25c ) openpgp.org. 86400 IN RRSIG ( DS 8 2 86400 20210815152858 20210725142858 5643 org. Fh5oNxywbTa3k4VLgm7fZuwkLjZkPR9ojMYw18zwKg6Uv9/bQBbLMVNxr/n/Lg2WBxSshyqSORoi aytFHDcPBKBlfo5hdNsg+1aQpOpLA3+Jxc3ZANhT3ou6tQ13avn3ICXQtqs2/YgrUnLz0O4KCMes DdUNybQniIHVwfhoRY4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone openpgp.org

openpgp.org

	Checking DS between org and openpgp.org
	Query to c0.org.afilias-nst.info for openpgp.org/DS
	Received 251 bytes from 199.19.53.1
	;; Response received from 199.19.53.1 (251 octets) ;; HEADER SECTION ;; id = 4870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; openpgp.org. IN DS ;; ANSWER SECTION (2 records) openpgp.org. 86400 IN DS ( 26041 8 2 e68586c464fd449d62b879bc5913214c93ff841d0490a4e7d405324c81dac25c ) openpgp.org. 86400 IN RRSIG ( DS 8 2 86400 20210815152858 20210725142858 5643 org. Fh5oNxywbTa3k4VLgm7fZuwkLjZkPR9ojMYw18zwKg6Uv9/bQBbLMVNxr/n/Lg2WBxSshyqSORoi aytFHDcPBKBlfo5hdNsg+1aQpOpLA3+Jxc3ZANhT3ou6tQ13avn3ICXQtqs2/YgrUnLz0O4KCMes DdUNybQniIHVwfhoRY4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for openpgp.org in the org zone
	DS=26041/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`openpgp.org. 86400 IN RRSIG ( DS 8 2 86400 20210815152858 20210725142858 5643 org. Fh5oNxywbTa3k4VLgm7fZuwkLjZkPR9ojMYw18zwKg6Uv9/bQBbLMVNxr/n/Lg2WBxSshyqSORoi aytFHDcPBKBlfo5hdNsg+1aQpOpLA3+Jxc3ZANhT3ou6tQ13avn3ICXQtqs2/YgrUnLz0O4KCMes DdUNybQniIHVwfhoRY4= )`
	RRSIG=5643 and DNSKEY=5643 verifies the DS RRset
	DS=26041/SHA-256 is now in the chain-of-trust
	`openpgp.org. 86400 IN DS ( 26041 8 2 e68586c464fd449d62b879bc5913214c93ff841d0490a4e7d405324c81dac25c )`
	Query to kitsune.swcp.com for openpgp.org/DNSKEY
	Received 1190 bytes from 198.59.115.2
	;; Response received from 198.59.115.2 (1190 octets) ;; HEADER SECTION ;; id = 11774 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; openpgp.org. IN DNSKEY ;; ANSWER SECTION (4 records) openpgp.org. 120 IN DNSKEY ( 256 3 8 AwEAAcmKm3eN4EiVyopunUJsjgnYiChWaGryi39e2c+Cvw1EvH58Aa1yNxkE9l0HprUjWN3xCgrp ocHlfcJsIveJb7yzG9pUXbuRPSB/6uon+cS5ulZrPS0L1kW5+2YCRlV7Nui7uab+N+AAikrUTuyE dtWdpo8o7B9b6A4iiH3CR5pyt0YpzAVCtzyDn2D+1qh0E9aeoklRjal3Z5VPY9COBbHf+Qbd4dd8 ev197DbLUJVQlfhLIEQbqagbwTpnSDyF++DLoY23P2NHGCxP7ZH3GLlJNhGYuHhGpF7JRgUcWhPi yhUCvmaaWnXu2byYsEBa0XhrFxvAKzeowgY5s4+WiKU= ) ; Key ID = 63435 openpgp.org. 120 IN DNSKEY ( 257 3 8 AwEAAb1qvXeWZyisHjP4sfRppmYkS+yqkfKshPFDi4Gjm7vOxdpMzWE0zJw71nb4ZHvK1I2CJama HWNuO/75dltEe1/BA3tVr63YMDtz7B7K/nyy+o7hSbVAV+a1z+MzX80A0LnqY3EM25/kHuzT1AaZ mm62H8BKw5xcJK1d0SRz5EwRpI5x2oyj+w6r/x1pj7tJwcx/8NUz3bPN3WpZ5GQelfP0c6MJxKL1 vTQuXwm6rrIpkGF4FO7Z1eiGBgW24jovAZp6EmiPkNo9CBfa/unImnr+VD0TrXqphonIp/uqhpQv X1FIXFUuIpw2Dl77qDZbJgrykwat0ykXRcIjSsXmbzE= ) ; Key ID = 26041 openpgp.org. 120 IN RRSIG ( DNSKEY 8 2 120 20210826124046 20210727115716 26041 openpgp.org. p0Bnz4PgOxAoekZmmVkqe5Ljkxjk7e4mk7nGFzNj2xXcXX1ilumQeN/Mo3ULSdcYnIlxoCBDBtfo ZTajZZ6gJvFzos3wxbAXhXKYhdFA+/wQV79Pu51J+LzJOUxCXDqOdWnuMG8gqKYP6geHa/rPbdKz xiX8N98gQgR/Yn33ijEnduDJvMsCagqYrNIgQeQ/uqpwC1CMSHoMA8W9xuja0CuX6yY0wERuzMBO LKe2Cao+WRLxH5GAeWtJvsOv/i4+PhtIVmMY1VHgG22ZXnYFCr1ODoUtKyxxMpXVjNJynKvEv1M0 ESmxLM3PWLZwHIo9tJr2HsfqVEkKMdz509TMWg== ) openpgp.org. 120 IN RRSIG ( DNSKEY 8 2 120 20210826124046 20210727115716 63435 openpgp.org. gT/NI4CxKa2dElyQGE//+dTYVZWcOaW8PKjegY01UktGcUdeV0epmfLkod332ONWOssAxGJCcSsq 3WwI2QycDYmTcglTgty7FWQbr4h5/KoT3xXk5pqciUlXvWFjHx2kUFzV2G6QMETbTidQlhpbFI8f PcMm+zUncpk3krA9Z02ir2A7ISY7zGBUeFCZ6PSvWzQC67bjkq4Dizi3NNoYglnrsvSv1ZXLFywe FkbDVs2AmujoLwWNSEa+po4C4p9QfjN3uBSSufkfkp7vS614fH6xf2KgFJgtka7NeJsAS43KnY+r dwbFelWCvhfxInMGiZPrtugfmBCmrAQUfwQSIA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for openpgp.org
	`openpgp.org. 120 IN DNSKEY ( 256 3 8 AwEAAcmKm3eN4EiVyopunUJsjgnYiChWaGryi39e2c+Cvw1EvH58Aa1yNxkE9l0HprUjWN3xCgrp ocHlfcJsIveJb7yzG9pUXbuRPSB/6uon+cS5ulZrPS0L1kW5+2YCRlV7Nui7uab+N+AAikrUTuyE dtWdpo8o7B9b6A4iiH3CR5pyt0YpzAVCtzyDn2D+1qh0E9aeoklRjal3Z5VPY9COBbHf+Qbd4dd8 ev197DbLUJVQlfhLIEQbqagbwTpnSDyF++DLoY23P2NHGCxP7ZH3GLlJNhGYuHhGpF7JRgUcWhPi yhUCvmaaWnXu2byYsEBa0XhrFxvAKzeowgY5s4+WiKU= ) ; Key ID = 63435`
	`openpgp.org. 120 IN DNSKEY ( 257 3 8 AwEAAb1qvXeWZyisHjP4sfRppmYkS+yqkfKshPFDi4Gjm7vOxdpMzWE0zJw71nb4ZHvK1I2CJama HWNuO/75dltEe1/BA3tVr63YMDtz7B7K/nyy+o7hSbVAV+a1z+MzX80A0LnqY3EM25/kHuzT1AaZ mm62H8BKw5xcJK1d0SRz5EwRpI5x2oyj+w6r/x1pj7tJwcx/8NUz3bPN3WpZ5GQelfP0c6MJxKL1 vTQuXwm6rrIpkGF4FO7Z1eiGBgW24jovAZp6EmiPkNo9CBfa/unImnr+VD0TrXqphonIp/uqhpQv X1FIXFUuIpw2Dl77qDZbJgrykwat0ykXRcIjSsXmbzE= ) ; Key ID = 26041`
	DNSKEY=26041/SEP is now in the chain-of-trust
	DS=26041/SHA-256 verifies DNSKEY=26041/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`openpgp.org. 120 IN RRSIG ( DNSKEY 8 2 120 20210826124046 20210727115716 26041 openpgp.org. p0Bnz4PgOxAoekZmmVkqe5Ljkxjk7e4mk7nGFzNj2xXcXX1ilumQeN/Mo3ULSdcYnIlxoCBDBtfo ZTajZZ6gJvFzos3wxbAXhXKYhdFA+/wQV79Pu51J+LzJOUxCXDqOdWnuMG8gqKYP6geHa/rPbdKz xiX8N98gQgR/Yn33ijEnduDJvMsCagqYrNIgQeQ/uqpwC1CMSHoMA8W9xuja0CuX6yY0wERuzMBO LKe2Cao+WRLxH5GAeWtJvsOv/i4+PhtIVmMY1VHgG22ZXnYFCr1ODoUtKyxxMpXVjNJynKvEv1M0 ESmxLM3PWLZwHIo9tJr2HsfqVEkKMdz509TMWg== )`
	`openpgp.org. 120 IN RRSIG ( DNSKEY 8 2 120 20210826124046 20210727115716 63435 openpgp.org. gT/NI4CxKa2dElyQGE//+dTYVZWcOaW8PKjegY01UktGcUdeV0epmfLkod332ONWOssAxGJCcSsq 3WwI2QycDYmTcglTgty7FWQbr4h5/KoT3xXk5pqciUlXvWFjHx2kUFzV2G6QMETbTidQlhpbFI8f PcMm+zUncpk3krA9Z02ir2A7ISY7zGBUeFCZ6PSvWzQC67bjkq4Dizi3NNoYglnrsvSv1ZXLFywe FkbDVs2AmujoLwWNSEa+po4C4p9QfjN3uBSSufkfkp7vS614fH6xf2KgFJgtka7NeJsAS43KnY+r dwbFelWCvhfxInMGiZPrtugfmBCmrAQUfwQSIA== )`
	RRSIG=26041 and DNSKEY=26041/SEP verifies the DNSKEY RRset
	RRSIG=63435 and DNSKEY=63435 verifies the DNSKEY RRset
	DNSKEY=63435 is now in the chain-of-trust
	Query to ns2.swcp.com for keys.openpgp.org/A
	Received 506 bytes from 216.243.105.246
	;; Response received from 216.243.105.246 (506 octets) ;; HEADER SECTION ;; id = 63528 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) keys.openpgp.org. 120 IN NS ns1.desec.io. keys.openpgp.org. 120 IN NS ns2.desec.org. keys.openpgp.org. 120 IN DS ( 59593 13 2 34965cc2d30a1d0fbdf11e4cacf25100810c58ffc78fa46e23b87e5db01a1889 ) keys.openpgp.org. 120 IN DS ( 59593 13 4 cbfc3c1d3ba64f5a4c4fa97ea741f16128ce769ed82ccb2af53910e75e55fa3e 0c1a0a79b9c4a6b218249f196f842bd4 ) keys.openpgp.org. 120 IN RRSIG ( DS 8 3 120 20210825145404 20210726135839 63435 openpgp.org. XToH4YGijWttuwvkjOipBqfUKay084pIUD+6QRZSANb+hi1F2D4Y7QFeblF7M6La9nYGSiKrIB2F aZz4DgISL/yBR8FNmOFA0QDk9BNm/5lU5K1bHnLhm6BfcxTwcUm7VQKmgk+tSMSP4k172uXREApO ZQQSMcZZFGUaBu87/ZVCaDP3bpyFFZkP6BzsZ4dFtMe27bUhwdZSf0c1wF3MiCOzeqKMzvOIQQut mlFMvEQKp7GuRJQMq7SD7finZIpqSVbzjzy2JwbR+EgLlMdCJuiBlavUnp2udBcNgyRstyHHiyIG DqY2rsAhlK3iqm5GySANFdaFTqVpGny7oU9p/Q== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.swcp.com for keys.openpgp.org/DNSKEY
	Received 506 bytes from 216.243.105.246
	;; Response received from 216.243.105.246 (506 octets) ;; HEADER SECTION ;; id = 26165 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) keys.openpgp.org. 120 IN NS ns1.desec.io. keys.openpgp.org. 120 IN NS ns2.desec.org. keys.openpgp.org. 120 IN DS ( 59593 13 4 cbfc3c1d3ba64f5a4c4fa97ea741f16128ce769ed82ccb2af53910e75e55fa3e 0c1a0a79b9c4a6b218249f196f842bd4 ) keys.openpgp.org. 120 IN DS ( 59593 13 2 34965cc2d30a1d0fbdf11e4cacf25100810c58ffc78fa46e23b87e5db01a1889 ) keys.openpgp.org. 120 IN RRSIG ( DS 8 3 120 20210825145404 20210726135839 63435 openpgp.org. XToH4YGijWttuwvkjOipBqfUKay084pIUD+6QRZSANb+hi1F2D4Y7QFeblF7M6La9nYGSiKrIB2F aZz4DgISL/yBR8FNmOFA0QDk9BNm/5lU5K1bHnLhm6BfcxTwcUm7VQKmgk+tSMSP4k172uXREApO ZQQSMcZZFGUaBu87/ZVCaDP3bpyFFZkP6BzsZ4dFtMe27bUhwdZSf0c1wF3MiCOzeqKMzvOIQQut mlFMvEQKp7GuRJQMq7SD7finZIpqSVbzjzy2JwbR+EgLlMdCJuiBlavUnp2udBcNgyRstyHHiyIG DqY2rsAhlK3iqm5GySANFdaFTqVpGny7oU9p/Q== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone keys.openpgp.org

keys.openpgp.org

	Checking DS between openpgp.org and keys.openpgp.org
	Query to ns2.swcp.com for keys.openpgp.org/DS
	Received 456 bytes from 216.243.105.246
	;; Response received from 216.243.105.246 (456 octets) ;; HEADER SECTION ;; id = 35954 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN DS ;; ANSWER SECTION (3 records) keys.openpgp.org. 120 IN DS ( 59593 13 2 34965cc2d30a1d0fbdf11e4cacf25100810c58ffc78fa46e23b87e5db01a1889 ) keys.openpgp.org. 120 IN DS ( 59593 13 4 cbfc3c1d3ba64f5a4c4fa97ea741f16128ce769ed82ccb2af53910e75e55fa3e 0c1a0a79b9c4a6b218249f196f842bd4 ) keys.openpgp.org. 120 IN RRSIG ( DS 8 3 120 20210825145404 20210726135839 63435 openpgp.org. XToH4YGijWttuwvkjOipBqfUKay084pIUD+6QRZSANb+hi1F2D4Y7QFeblF7M6La9nYGSiKrIB2F aZz4DgISL/yBR8FNmOFA0QDk9BNm/5lU5K1bHnLhm6BfcxTwcUm7VQKmgk+tSMSP4k172uXREApO ZQQSMcZZFGUaBu87/ZVCaDP3bpyFFZkP6BzsZ4dFtMe27bUhwdZSf0c1wF3MiCOzeqKMzvOIQQut mlFMvEQKp7GuRJQMq7SD7finZIpqSVbzjzy2JwbR+EgLlMdCJuiBlavUnp2udBcNgyRstyHHiyIG DqY2rsAhlK3iqm5GySANFdaFTqVpGny7oU9p/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for keys.openpgp.org in the openpgp.org zone
	DS=59593/SHA-256 has algorithm ECDSAP256SHA256
	DS=59593/SHA-384 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`keys.openpgp.org. 120 IN RRSIG ( DS 8 3 120 20210825145404 20210726135839 63435 openpgp.org. XToH4YGijWttuwvkjOipBqfUKay084pIUD+6QRZSANb+hi1F2D4Y7QFeblF7M6La9nYGSiKrIB2F aZz4DgISL/yBR8FNmOFA0QDk9BNm/5lU5K1bHnLhm6BfcxTwcUm7VQKmgk+tSMSP4k172uXREApO ZQQSMcZZFGUaBu87/ZVCaDP3bpyFFZkP6BzsZ4dFtMe27bUhwdZSf0c1wF3MiCOzeqKMzvOIQQut mlFMvEQKp7GuRJQMq7SD7finZIpqSVbzjzy2JwbR+EgLlMdCJuiBlavUnp2udBcNgyRstyHHiyIG DqY2rsAhlK3iqm5GySANFdaFTqVpGny7oU9p/Q== )`
	RRSIG=63435 and DNSKEY=63435 verifies the DS RRset
	DS=59593/SHA-256 is now in the chain-of-trust
	`keys.openpgp.org. 120 IN DS ( 59593 13 2 34965cc2d30a1d0fbdf11e4cacf25100810c58ffc78fa46e23b87e5db01a1889 )`
	`keys.openpgp.org. 120 IN DS ( 59593 13 4 cbfc3c1d3ba64f5a4c4fa97ea741f16128ce769ed82ccb2af53910e75e55fa3e 0c1a0a79b9c4a6b218249f196f842bd4 )`
	Query to ns1.desec.io for keys.openpgp.org/DNSKEY
	Received 237 bytes from 45.54.76.1
	;; Response received from 45.54.76.1 (237 octets) ;; HEADER SECTION ;; id = 27079 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN DNSKEY ;; ANSWER SECTION (2 records) keys.openpgp.org. 3600 IN DNSKEY ( 257 3 13 hGujIjp/pUajpJQkahzaZCBuDL6UDqr89PPyfUcak43SDJLGpqRh3vkIb8gtXWGfbXd3xb4nUF0r 72dPwvqDrA== ) ; Key ID = 59593 keys.openpgp.org. 3600 IN RRSIG ( DNSKEY 13 3 3600 20210812000000 20210722000000 59593 keys.openpgp.org. nVfJTvUtJAlBx+m552xUQSk8Zl9SDLxzeSXprEjkceikAJuYckqYnpfGNrHD2XFSnu3/s45T896f fqWFWtKK3w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for keys.openpgp.org
	`keys.openpgp.org. 3600 IN DNSKEY ( 257 3 13 hGujIjp/pUajpJQkahzaZCBuDL6UDqr89PPyfUcak43SDJLGpqRh3vkIb8gtXWGfbXd3xb4nUF0r 72dPwvqDrA== ) ; Key ID = 59593`
	DNSKEY=59593/SEP is now in the chain-of-trust
	DS=59593/SHA-256 verifies DNSKEY=59593/SEP
	DS=59593/SHA-384 verifies DNSKEY=59593/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`keys.openpgp.org. 3600 IN RRSIG ( DNSKEY 13 3 3600 20210812000000 20210722000000 59593 keys.openpgp.org. nVfJTvUtJAlBx+m552xUQSk8Zl9SDLxzeSXprEjkceikAJuYckqYnpfGNrHD2XFSnu3/s45T896f fqWFWtKK3w== )`
	RRSIG=59593 and DNSKEY=59593/SEP verifies the DNSKEY RRset
	Query to ns1.desec.io for keys.openpgp.org/A
	Received 173 bytes from 45.54.76.1
	;; Response received from 45.54.76.1 (173 octets) ;; HEADER SECTION ;; id = 50872 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (2 records) keys.openpgp.org. 3600 IN A 37.218.245.50 keys.openpgp.org. 3600 IN RRSIG ( A 13 3 3600 20210812000000 20210722000000 59593 keys.openpgp.org. NEgdHiN/nqyHog9wUyTwDvotsr5y+bUjE4+MkaGLodJJ0YeKxpPlcSRu7Xu7Mmvsf5uZbbvgD3WT qZdkIYkMRw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.desec.io is authoritative for keys.openpgp.org
	Found RRSIG signed by keys.openpgp.org zone
	Query to ns2.desec.org for keys.openpgp.org/SOA
	Received 205 bytes from 157.53.224.1
	;; Response received from 157.53.224.1 (205 octets) ;; HEADER SECTION ;; id = 23264 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN SOA ;; ANSWER SECTION (2 records) keys.openpgp.org. 300 IN RRSIG ( SOA 13 3 300 20210812000000 20210722000000 59593 keys.openpgp.org. xA0/JwFe39DAfDimlEEwWatEaSM5Sznmm0sHBrnGKLXdNsTq1uEcaZS4GZBmK4DvvZ+iy150HhAu aLFVMAhDNA== ) keys.openpgp.org. 300 IN SOA ( get.desec.io. get.desec.io. 2021063809 ;serial 86400 ;refresh 86400 ;retry 2419200 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.desec.io for keys.openpgp.org/A
	Received 173 bytes from 45.54.76.1
	;; Response received from 45.54.76.1 (173 octets) ;; HEADER SECTION ;; id = 15819 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (2 records) keys.openpgp.org. 3600 IN A 37.218.245.50 keys.openpgp.org. 3600 IN RRSIG ( A 13 3 3600 20210812000000 20210722000000 59593 keys.openpgp.org. NEgdHiN/nqyHog9wUyTwDvotsr5y+bUjE4+MkaGLodJJ0YeKxpPlcSRu7Xu7Mmvsf5uZbbvgD3WT qZdkIYkMRw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	keys.openpgp.org A RR has value 37.218.245.50
	Found 1 RRSIGs over A RRset
	`keys.openpgp.org. 3600 IN RRSIG ( A 13 3 3600 20210812000000 20210722000000 59593 keys.openpgp.org. NEgdHiN/nqyHog9wUyTwDvotsr5y+bUjE4+MkaGLodJJ0YeKxpPlcSRu7Xu7Mmvsf5uZbbvgD3WT qZdkIYkMRw== )`
	RRSIG=59593 and DNSKEY=59593/SEP verifies the A RRset

keys.openpgp.org

	Query to ns2.desec.org for keys.openpgp.org/A
	Received 173 bytes from 157.53.224.1
	;; Response received from 157.53.224.1 (173 octets) ;; HEADER SECTION ;; id = 27310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (2 records) keys.openpgp.org. 3600 IN RRSIG ( A 13 3 3600 20210812000000 20210722000000 59593 keys.openpgp.org. NEgdHiN/nqyHog9wUyTwDvotsr5y+bUjE4+MkaGLodJJ0YeKxpPlcSRu7Xu7Mmvsf5uZbbvgD3WT qZdkIYkMRw== ) keys.openpgp.org. 3600 IN A 37.218.245.50 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.desec.org is authoritative for keys.openpgp.org
	Found RRSIG signed by keys.openpgp.org zone
	Query to ns2.desec.org for keys.openpgp.org/A
	Received 173 bytes from 157.53.224.1
	;; Response received from 157.53.224.1 (173 octets) ;; HEADER SECTION ;; id = 4996 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; keys.openpgp.org. IN A ;; ANSWER SECTION (2 records) keys.openpgp.org. 3600 IN RRSIG ( A 13 3 3600 20210812000000 20210722000000 59593 keys.openpgp.org. NEgdHiN/nqyHog9wUyTwDvotsr5y+bUjE4+MkaGLodJJ0YeKxpPlcSRu7Xu7Mmvsf5uZbbvgD3WT qZdkIYkMRw== ) keys.openpgp.org. 3600 IN A 37.218.245.50 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	keys.openpgp.org A RR has value 37.218.245.50
	Found 1 RRSIGs over A RRset
	`keys.openpgp.org. 3600 IN RRSIG ( A 13 3 3600 20210812000000 20210722000000 59593 keys.openpgp.org. NEgdHiN/nqyHog9wUyTwDvotsr5y+bUjE4+MkaGLodJJ0YeKxpPlcSRu7Xu7Mmvsf5uZbbvgD3WT qZdkIYkMRw== )`
	RRSIG=59593 and DNSKEY=59593/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test keys.openpgp.org at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: