DNSSEC Debugger - nrelhub.gov

Domain Name:

Time: 2026-02-13 07:15:26 UTC

Analyzing DNSSEC problems for nrelhub.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 27197 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260303000000 20260210000000 20326 . TNriFzthFM1hKzGD2meB96QrMIdTe/9ZFzMPdP3wWZAOvyfH9F9wuIhjT0V3H/0UE2cq04wvOtdG sEdmJaF7fCIj8aEE3e9Zn/woJXXXl9J3fhZQyGMq5jQLr+4KAuaNPwaMwlGHMDgZuwVJx1KpsAii b+GldJsCAVqM9hW9FpPwtuiN3c8xKT+A8DlAImzKTAUyQEyfSa9UlQzRwPeWcs2HQA/5GL0eosEW pwfdCHfpMw7JPFIMhUEsRftyZuxDgrPQs/geHoSXMeI+bgIRirnRkOLVDaNSiAKt1VtWeDrVeOBc IEzocdRicpX7VmwFHiHM1BblamwYCsX/nfexFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260303000000 20260210000000 20326 . TNriFzthFM1hKzGD2meB96QrMIdTe/9ZFzMPdP3wWZAOvyfH9F9wuIhjT0V3H/0UE2cq04wvOtdG sEdmJaF7fCIj8aEE3e9Zn/woJXXXl9J3fhZQyGMq5jQLr+4KAuaNPwaMwlGHMDgZuwVJx1KpsAii b+GldJsCAVqM9hW9FpPwtuiN3c8xKT+A8DlAImzKTAUyQEyfSa9UlQzRwPeWcs2HQA/5GL0eosEW pwfdCHfpMw7JPFIMhUEsRftyZuxDgrPQs/geHoSXMeI+bgIRirnRkOLVDaNSiAKt1VtWeDrVeOBc IEzocdRicpX7VmwFHiHM1BblamwYCsX/nfexFg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to l.root-servers.net for nrelhub.gov/A
	Received 618 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 618 octets ;; HEADER SECTION ;; id = 38612 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260226050000 20260213040000 21831 . TteXzNrNu/zzziMCoymmKEoOySuieWCToNgQ7hbboP7Z1kGFCzwpngThVgGAWPnRU3nvTrhNXawz FgCusQiYft9DGLe7XI2EDLwgVhkchDmLOcr0bw04aKvkUfFe+XTM6yeNxr20nb7Bbm64th/rI5KR cVRTG/hM9RjoNsrAJIL1V4SpTrIneGgR9hiMPEtdOr6o5m9RTxoMLfwedsx2VajOIM0avvCgeR8F B53W610kqN47p28d7gQ2yR/tTpoc8ll33B9TwLqwvXHCZ4RpRiJq4pyNcxUZ2RSyAvEJlYwoRtNm wzbWAs0MlRDCQ6gXn1NMWk7KF2e5goURv6+Y0Q== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 610 octets ;; HEADER SECTION ;; id = 10017 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260226050000 20260213040000 21831 . TteXzNrNu/zzziMCoymmKEoOySuieWCToNgQ7hbboP7Z1kGFCzwpngThVgGAWPnRU3nvTrhNXawz FgCusQiYft9DGLe7XI2EDLwgVhkchDmLOcr0bw04aKvkUfFe+XTM6yeNxr20nb7Bbm64th/rI5KR cVRTG/hM9RjoNsrAJIL1V4SpTrIneGgR9hiMPEtdOr6o5m9RTxoMLfwedsx2VajOIM0avvCgeR8F B53W610kqN47p28d7gQ2yR/tTpoc8ll33B9TwLqwvXHCZ4RpRiJq4pyNcxUZ2RSyAvEJlYwoRtNm wzbWAs0MlRDCQ6gXn1NMWk7KF2e5goURv6+Y0Q== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to b.root-servers.net for gov/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 1923 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260226050000 20260213040000 21831 . TteXzNrNu/zzziMCoymmKEoOySuieWCToNgQ7hbboP7Z1kGFCzwpngThVgGAWPnRU3nvTrhNXawz FgCusQiYft9DGLe7XI2EDLwgVhkchDmLOcr0bw04aKvkUfFe+XTM6yeNxr20nb7Bbm64th/rI5KR cVRTG/hM9RjoNsrAJIL1V4SpTrIneGgR9hiMPEtdOr6o5m9RTxoMLfwedsx2VajOIM0avvCgeR8F B53W610kqN47p28d7gQ2yR/tTpoc8ll33B9TwLqwvXHCZ4RpRiJq4pyNcxUZ2RSyAvEJlYwoRtNm wzbWAs0MlRDCQ6gXn1NMWk7KF2e5goURv6+Y0Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260226050000 20260213040000 21831 . TteXzNrNu/zzziMCoymmKEoOySuieWCToNgQ7hbboP7Z1kGFCzwpngThVgGAWPnRU3nvTrhNXawz FgCusQiYft9DGLe7XI2EDLwgVhkchDmLOcr0bw04aKvkUfFe+XTM6yeNxr20nb7Bbm64th/rI5KR cVRTG/hM9RjoNsrAJIL1V4SpTrIneGgR9hiMPEtdOr6o5m9RTxoMLfwedsx2VajOIM0avvCgeR8F B53W610kqN47p28d7gQ2yR/tTpoc8ll33B9TwLqwvXHCZ4RpRiJq4pyNcxUZ2RSyAvEJlYwoRtNm wzbWAs0MlRDCQ6gXn1NMWk7KF2e5goURv6+Y0Q== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 20315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260325110622 20260123110622 2536 gov. 1Yi8jf2XMbTmgyRtyAql82WHrDi/8ytE7icJRnRPcCVnXyEt3A8YdXw6HrWtpNUl/JkqW97k8CkQ IcmdNBTspg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260325110622 20260123110622 2536 gov. 1Yi8jf2XMbTmgyRtyAql82WHrDi/8ytE7icJRnRPcCVnXyEt3A8YdXw6HrWtpNUl/JkqW97k8CkQ IcmdNBTspg== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for nrelhub.gov/A
	Received 369 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 369 octets ;; HEADER SECTION ;; id = 38166 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 10800 IN NS adns1.es.net. nrelhub.gov. 10800 IN NS adns2.es.net. nrelhub.gov. 10800 IN NS helios.nrel.gov. nrelhub.gov. 10800 IN NS phaeton.nrel.gov. nrelhub.gov. 3600 IN DS ( 3727 13 2 fa612dc427324ac250492c290ed7ec9e3129c8d14819766202afb3d1e562bc6e ) nrelhub.gov. 3600 IN RRSIG ( DS 13 2 3600 20260214081527 20260212061527 35496 gov. rMBKQxkDUWyzsGaFU0OkOwVh/ast4gGTZND817GD2yyDoiUn0qHQHAOXcuxgQLw00l8+idkRfmdW pa97SggnnQ== ) ;; ADDITIONAL SECTION (5 records) helios.nrel.gov. 3600 IN A 192.174.58.2 helios.nrel.gov. 3600 IN AAAA 2620:d0:8000:3::20 phaeton.nrel.gov. 3600 IN A 192.174.58.253 phaeton.nrel.gov. 3600 IN AAAA 2620:d0:8000:3::21 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for nrelhub.gov/DNSKEY
	Received 369 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 369 octets ;; HEADER SECTION ;; id = 14342 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 10800 IN NS adns1.es.net. nrelhub.gov. 10800 IN NS adns2.es.net. nrelhub.gov. 10800 IN NS helios.nrel.gov. nrelhub.gov. 10800 IN NS phaeton.nrel.gov. nrelhub.gov. 3600 IN DS ( 3727 13 2 fa612dc427324ac250492c290ed7ec9e3129c8d14819766202afb3d1e562bc6e ) nrelhub.gov. 3600 IN RRSIG ( DS 13 2 3600 20260214081527 20260212061527 35496 gov. U9y6hvYuW82Qq0TtGtL3jTFFLseCq+L+GujV985hQZp7xBhH5i9BzItG/XuSzsusg+Bf8+SG4XF7 qvicebZ0eQ== ) ;; ADDITIONAL SECTION (5 records) helios.nrel.gov. 3600 IN A 192.174.58.2 helios.nrel.gov. 3600 IN AAAA 2620:d0:8000:3::20 phaeton.nrel.gov. 3600 IN A 192.174.58.253 phaeton.nrel.gov. 3600 IN AAAA 2620:d0:8000:3::21 ;; { "EDNS-VERSION": 0 }
	Found child zone nrelhub.gov

nrelhub.gov

	Checking DS between gov and nrelhub.gov
	Query to a.ns.gov for nrelhub.gov/DS
	Received 187 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 187 octets ;; HEADER SECTION ;; id = 43890 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN DS ;; ANSWER SECTION (2 records) nrelhub.gov. 3600 IN DS ( 3727 13 2 fa612dc427324ac250492c290ed7ec9e3129c8d14819766202afb3d1e562bc6e ) nrelhub.gov. 3600 IN RRSIG ( DS 13 2 3600 20260214081527 20260212061527 35496 gov. WkBj6VUB+y/wLUv6zo6QkJGxY4B7mogtMvZCRTuSQ+znMEUHdjnVIXgcGWeVy9dRS/NZN9JdR2gQ 0eM+WMmVsg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nrelhub.gov in the gov zone
	DS=3727/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nrelhub.gov. 3600 IN RRSIG ( DS 13 2 3600 20260214081527 20260212061527 35496 gov. WkBj6VUB+y/wLUv6zo6QkJGxY4B7mogtMvZCRTuSQ+znMEUHdjnVIXgcGWeVy9dRS/NZN9JdR2gQ 0eM+WMmVsg== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=3727/SHA-256 is now in the chain-of-trust
	`nrelhub.gov. 3600 IN DS ( 3727 13 2 fa612dc427324ac250492c290ed7ec9e3129c8d14819766202afb3d1e562bc6e )`
	Query to adns2.es.net for nrelhub.gov/DNSKEY
	Received 601 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 601 octets ;; HEADER SECTION ;; id = 32956 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN DNSKEY ;; ANSWER SECTION (6 records) nrelhub.gov. 172800 IN DNSKEY ( 256 3 13 p54XuLeukPxGb5VvGlGz3+0zUKgG1yUwjS/HzeRybBbleF0KoKh5Eh1A3RNbCAvG1q+ZbyFuuAev tJchdMHnRg== ) ; keytag 28509 nrelhub.gov. 172800 IN DNSKEY ( 256 3 13 O4R+7vlvVStKokxFF6qXsCm+m9tTzl13AMAJYNUwoDa1mU63tt2WmQ/GQ+j6WYnkrRqFGHqerRm0 2G3a8/YWnA== ) ; keytag 64170 nrelhub.gov. 172800 IN DNSKEY ( 257 3 13 s9xrV07ZoYKVL0qNgneuhrklib2x+LPglCvwyaQYewEAXffWTeWZU1+Ys1FYsAxOLejWiPSCSZl0 0x4AktLd4A== ) ; keytag 3727 nrelhub.gov. 172800 IN RRSIG ( DNSKEY 13 2 172800 20260216231742 20260212224809 3727 nrelhub.gov. RFjdsLYp2o+gRIkxvk/N9iAcGNNr40jZ11cgfriCQV35ztwVFRX3/8wvbK14udaAaA1B8cAZ/ZQv sT8Pz65aHw== ) nrelhub.gov. 172800 IN RRSIG ( DNSKEY 13 2 172800 20260216231742 20260212224809 28509 nrelhub.gov. nCUpD/9ddkURklZyoc4bbpbVsr21MS/+Hn37wswoCc9YofaPrN9dsjsUqNRKHr0G0hVfWf+oNxDW ErQZFnLyww== ) nrelhub.gov. 172800 IN RRSIG ( DNSKEY 13 2 172800 20260216231742 20260212224809 64170 nrelhub.gov. fkbBTBqbIEAOxpDKBG0XbmMUey1h3k0mddro7fUH5GCgC2DUXZwwP3lx0dR1mE9QgnVDmfgEAIdO TOzb3yJGfA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for nrelhub.gov
	`nrelhub.gov. 172800 IN DNSKEY ( 256 3 13 p54XuLeukPxGb5VvGlGz3+0zUKgG1yUwjS/HzeRybBbleF0KoKh5Eh1A3RNbCAvG1q+ZbyFuuAev tJchdMHnRg== ) ; keytag 28509`
	`nrelhub.gov. 172800 IN DNSKEY ( 256 3 13 O4R+7vlvVStKokxFF6qXsCm+m9tTzl13AMAJYNUwoDa1mU63tt2WmQ/GQ+j6WYnkrRqFGHqerRm0 2G3a8/YWnA== ) ; keytag 64170`
	`nrelhub.gov. 172800 IN DNSKEY ( 257 3 13 s9xrV07ZoYKVL0qNgneuhrklib2x+LPglCvwyaQYewEAXffWTeWZU1+Ys1FYsAxOLejWiPSCSZl0 0x4AktLd4A== ) ; keytag 3727`
	DNSKEY=3727/SEP is now in the chain-of-trust
	DS=3727/SHA-256 verifies DNSKEY=3727/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`nrelhub.gov. 172800 IN RRSIG ( DNSKEY 13 2 172800 20260216231742 20260212224809 3727 nrelhub.gov. RFjdsLYp2o+gRIkxvk/N9iAcGNNr40jZ11cgfriCQV35ztwVFRX3/8wvbK14udaAaA1B8cAZ/ZQv sT8Pz65aHw== )`
	`nrelhub.gov. 172800 IN RRSIG ( DNSKEY 13 2 172800 20260216231742 20260212224809 28509 nrelhub.gov. nCUpD/9ddkURklZyoc4bbpbVsr21MS/+Hn37wswoCc9YofaPrN9dsjsUqNRKHr0G0hVfWf+oNxDW ErQZFnLyww== )`
	`nrelhub.gov. 172800 IN RRSIG ( DNSKEY 13 2 172800 20260216231742 20260212224809 64170 nrelhub.gov. fkbBTBqbIEAOxpDKBG0XbmMUey1h3k0mddro7fUH5GCgC2DUXZwwP3lx0dR1mE9QgnVDmfgEAIdO TOzb3yJGfA== )`
	RRSIG=3727 and DNSKEY=3727/SEP verifies the DNSKEY RRset
	RRSIG=28509 and DNSKEY=28509 verifies the DNSKEY RRset
	RRSIG=64170 and DNSKEY=64170 verifies the DNSKEY RRset
	DNSKEY=28509 is now in the chain-of-trust
	DNSKEY=64170 is now in the chain-of-trust
	Query to phaeton.nrel.gov for nrelhub.gov/A
	Received 628 bytes from 192.174.58.253
	;; Response received from [192.174.58.253] 628 octets ;; HEADER SECTION ;; id = 13519 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019120977 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 28509 nrelhub.gov. h7iFyrARsdqoJnLgEb0ra2+7y7iRMnmNrYKhIgGH9tNx6BCYw0YLhxXvfP++Ht8u+lJlJCpp/OjQ zTsItVMJMg== ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 64170 nrelhub.gov. cRcSqiljZJroX9wn6Ia+ZravlvEt3i5HtOViPmrRXTSBbFx9jgXHyhQQUBcCdkK5apCu60ZUI6wZ hiqWR8xJyw== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN NSEC3 ( 1 0 10 8d70 ac13nhsb2cj7dkup4hf00gnh6qqgcu1t NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 28509 nrelhub.gov. js0DFpvdjOuLvJXrCZKNJX3ChVQarX8RzkZb9OprrrNOijcS1SRU8hIqOy8k3zyvpC16oGqLkD9i jq3n06sw1A== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 64170 nrelhub.gov. JZzYZB9jVwJdaaQllE4Bw9nJjVVO42ll1tq5BbByrQ+VCCwcYndo+atfdQFH2qv/fb9I/MJ5LRW2 cVmgkTdm9A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	phaeton.nrel.gov is authoritative for nrelhub.gov
	Found RRSIG signed by nrelhub.gov zone
	Query to helios.nrel.gov for nrelhub.gov/SOA
	Received 627 bytes from 192.174.58.2
	;; Response received from [192.174.58.2] 627 octets ;; HEADER SECTION ;; id = 21339 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN SOA ;; ANSWER SECTION (3 records) nrelhub.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019120977 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 28509 nrelhub.gov. h7iFyrARsdqoJnLgEb0ra2+7y7iRMnmNrYKhIgGH9tNx6BCYw0YLhxXvfP++Ht8u+lJlJCpp/OjQ zTsItVMJMg== ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 64170 nrelhub.gov. cRcSqiljZJroX9wn6Ia+ZravlvEt3i5HtOViPmrRXTSBbFx9jgXHyhQQUBcCdkK5apCu60ZUI6wZ hiqWR8xJyw== ) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 3600 IN NS phaeton.nrel.gov. nrelhub.gov. 3600 IN NS adns1.es.net. nrelhub.gov. 3600 IN NS adns2.es.net. nrelhub.gov. 3600 IN NS helios.nrel.gov. nrelhub.gov. 3600 IN RRSIG ( NS 13 2 3600 20260216160508 20260212154319 28509 nrelhub.gov. jD01fGFiKCxhvlW42j0rKHiaZAcofFdsvNbk7cPKYzZVx1dn1D02eCQ2DyH1/M15BY70gNZOocAi prCPvV1xHg== ) nrelhub.gov. 3600 IN RRSIG ( NS 13 2 3600 20260216160508 20260212154319 64170 nrelhub.gov. n2SXg4L3b4iWH4EbqG81chwU1PSQxU/SgB+f3a4vrdL6AaCJTMIOVlDFQ14WLXq/fEm+1vxiyFX8 yA9uQrIhFQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns2.es.net for nrelhub.gov/SOA
	Received 627 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 627 octets ;; HEADER SECTION ;; id = 18643 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN SOA ;; ANSWER SECTION (3 records) nrelhub.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019120977 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 28509 nrelhub.gov. h7iFyrARsdqoJnLgEb0ra2+7y7iRMnmNrYKhIgGH9tNx6BCYw0YLhxXvfP++Ht8u+lJlJCpp/OjQ zTsItVMJMg== ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 64170 nrelhub.gov. cRcSqiljZJroX9wn6Ia+ZravlvEt3i5HtOViPmrRXTSBbFx9jgXHyhQQUBcCdkK5apCu60ZUI6wZ hiqWR8xJyw== ) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 3600 IN NS helios.nrel.gov. nrelhub.gov. 3600 IN NS adns1.es.net. nrelhub.gov. 3600 IN NS adns2.es.net. nrelhub.gov. 3600 IN NS phaeton.nrel.gov. nrelhub.gov. 3600 IN RRSIG ( NS 13 2 3600 20260216160508 20260212154319 28509 nrelhub.gov. jD01fGFiKCxhvlW42j0rKHiaZAcofFdsvNbk7cPKYzZVx1dn1D02eCQ2DyH1/M15BY70gNZOocAi prCPvV1xHg== ) nrelhub.gov. 3600 IN RRSIG ( NS 13 2 3600 20260216160508 20260212154319 64170 nrelhub.gov. n2SXg4L3b4iWH4EbqG81chwU1PSQxU/SgB+f3a4vrdL6AaCJTMIOVlDFQ14WLXq/fEm+1vxiyFX8 yA9uQrIhFQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns1.es.net for nrelhub.gov/SOA
	Received 332 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 332 octets ;; HEADER SECTION ;; id = 33102 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN SOA ;; ANSWER SECTION (3 records) nrelhub.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019120977 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 28509 nrelhub.gov. h7iFyrARsdqoJnLgEb0ra2+7y7iRMnmNrYKhIgGH9tNx6BCYw0YLhxXvfP++Ht8u+lJlJCpp/OjQ zTsItVMJMg== ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 64170 nrelhub.gov. cRcSqiljZJroX9wn6Ia+ZravlvEt3i5HtOViPmrRXTSBbFx9jgXHyhQQUBcCdkK5apCu60ZUI6wZ hiqWR8xJyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to phaeton.nrel.gov for nrelhub.gov/A
	Received 628 bytes from 192.174.58.253
	;; Response received from [192.174.58.253] 628 octets ;; HEADER SECTION ;; id = 36448 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019120977 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 28509 nrelhub.gov. h7iFyrARsdqoJnLgEb0ra2+7y7iRMnmNrYKhIgGH9tNx6BCYw0YLhxXvfP++Ht8u+lJlJCpp/OjQ zTsItVMJMg== ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 64170 nrelhub.gov. cRcSqiljZJroX9wn6Ia+ZravlvEt3i5HtOViPmrRXTSBbFx9jgXHyhQQUBcCdkK5apCu60ZUI6wZ hiqWR8xJyw== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN NSEC3 ( 1 0 10 8d70 ac13nhsb2cj7dkup4hf00gnh6qqgcu1t NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 28509 nrelhub.gov. js0DFpvdjOuLvJXrCZKNJX3ChVQarX8RzkZb9OprrrNOijcS1SRU8hIqOy8k3zyvpC16oGqLkD9i jq3n06sw1A== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 64170 nrelhub.gov. JZzYZB9jVwJdaaQllE4Bw9nJjVVO42ll1tq5BbByrQ+VCCwcYndo+atfdQFH2qv/fb9I/MJ5LRW2 cVmgkTdm9A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 28509 nrelhub.gov. h7iFyrARsdqoJnLgEb0ra2+7y7iRMnmNrYKhIgGH9tNx6BCYw0YLhxXvfP++Ht8u+lJlJCpp/OjQ zTsItVMJMg== )`
	`nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 64170 nrelhub.gov. cRcSqiljZJroX9wn6Ia+ZravlvEt3i5HtOViPmrRXTSBbFx9jgXHyhQQUBcCdkK5apCu60ZUI6wZ hiqWR8xJyw== )`
	RRSIG=28509 and DNSKEY=28509 verifies the SOA RRset
	RRSIG=64170 and DNSKEY=64170 verifies the SOA RRset

nrelhub.gov

	Query to adns2.es.net for nrelhub.gov/A
	Received 628 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 628 octets ;; HEADER SECTION ;; id = 61923 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019120977 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 28509 nrelhub.gov. h7iFyrARsdqoJnLgEb0ra2+7y7iRMnmNrYKhIgGH9tNx6BCYw0YLhxXvfP++Ht8u+lJlJCpp/OjQ zTsItVMJMg== ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 64170 nrelhub.gov. cRcSqiljZJroX9wn6Ia+ZravlvEt3i5HtOViPmrRXTSBbFx9jgXHyhQQUBcCdkK5apCu60ZUI6wZ hiqWR8xJyw== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN NSEC3 ( 1 0 10 8d70 ac13nhsb2cj7dkup4hf00gnh6qqgcu1t NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 28509 nrelhub.gov. js0DFpvdjOuLvJXrCZKNJX3ChVQarX8RzkZb9OprrrNOijcS1SRU8hIqOy8k3zyvpC16oGqLkD9i jq3n06sw1A== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 64170 nrelhub.gov. JZzYZB9jVwJdaaQllE4Bw9nJjVVO42ll1tq5BbByrQ+VCCwcYndo+atfdQFH2qv/fb9I/MJ5LRW2 cVmgkTdm9A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns2.es.net is authoritative for nrelhub.gov
	Found RRSIG signed by nrelhub.gov zone
	Query to adns2.es.net for nrelhub.gov/A
	Received 628 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 628 octets ;; HEADER SECTION ;; id = 2759 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019120977 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 28509 nrelhub.gov. h7iFyrARsdqoJnLgEb0ra2+7y7iRMnmNrYKhIgGH9tNx6BCYw0YLhxXvfP++Ht8u+lJlJCpp/OjQ zTsItVMJMg== ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 64170 nrelhub.gov. cRcSqiljZJroX9wn6Ia+ZravlvEt3i5HtOViPmrRXTSBbFx9jgXHyhQQUBcCdkK5apCu60ZUI6wZ hiqWR8xJyw== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN NSEC3 ( 1 0 10 8d70 ac13nhsb2cj7dkup4hf00gnh6qqgcu1t NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 28509 nrelhub.gov. js0DFpvdjOuLvJXrCZKNJX3ChVQarX8RzkZb9OprrrNOijcS1SRU8hIqOy8k3zyvpC16oGqLkD9i jq3n06sw1A== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 64170 nrelhub.gov. JZzYZB9jVwJdaaQllE4Bw9nJjVVO42ll1tq5BbByrQ+VCCwcYndo+atfdQFH2qv/fb9I/MJ5LRW2 cVmgkTdm9A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 28509 nrelhub.gov. h7iFyrARsdqoJnLgEb0ra2+7y7iRMnmNrYKhIgGH9tNx6BCYw0YLhxXvfP++Ht8u+lJlJCpp/OjQ zTsItVMJMg== )`
	`nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 64170 nrelhub.gov. cRcSqiljZJroX9wn6Ia+ZravlvEt3i5HtOViPmrRXTSBbFx9jgXHyhQQUBcCdkK5apCu60ZUI6wZ hiqWR8xJyw== )`
	RRSIG=28509 and DNSKEY=28509 verifies the SOA RRset
	RRSIG=64170 and DNSKEY=64170 verifies the SOA RRset

nrelhub.gov

	Query to adns1.es.net for nrelhub.gov/A
	Received 628 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 628 octets ;; HEADER SECTION ;; id = 58364 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019120977 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 28509 nrelhub.gov. h7iFyrARsdqoJnLgEb0ra2+7y7iRMnmNrYKhIgGH9tNx6BCYw0YLhxXvfP++Ht8u+lJlJCpp/OjQ zTsItVMJMg== ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 64170 nrelhub.gov. cRcSqiljZJroX9wn6Ia+ZravlvEt3i5HtOViPmrRXTSBbFx9jgXHyhQQUBcCdkK5apCu60ZUI6wZ hiqWR8xJyw== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN NSEC3 ( 1 0 10 8d70 ac13nhsb2cj7dkup4hf00gnh6qqgcu1t NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 28509 nrelhub.gov. js0DFpvdjOuLvJXrCZKNJX3ChVQarX8RzkZb9OprrrNOijcS1SRU8hIqOy8k3zyvpC16oGqLkD9i jq3n06sw1A== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 64170 nrelhub.gov. JZzYZB9jVwJdaaQllE4Bw9nJjVVO42ll1tq5BbByrQ+VCCwcYndo+atfdQFH2qv/fb9I/MJ5LRW2 cVmgkTdm9A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns1.es.net is authoritative for nrelhub.gov
	Found RRSIG signed by nrelhub.gov zone
	Query to adns1.es.net for nrelhub.gov/A
	Received 628 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 628 octets ;; HEADER SECTION ;; id = 58400 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019120977 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 28509 nrelhub.gov. h7iFyrARsdqoJnLgEb0ra2+7y7iRMnmNrYKhIgGH9tNx6BCYw0YLhxXvfP++Ht8u+lJlJCpp/OjQ zTsItVMJMg== ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 64170 nrelhub.gov. cRcSqiljZJroX9wn6Ia+ZravlvEt3i5HtOViPmrRXTSBbFx9jgXHyhQQUBcCdkK5apCu60ZUI6wZ hiqWR8xJyw== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN NSEC3 ( 1 0 10 8d70 ac13nhsb2cj7dkup4hf00gnh6qqgcu1t NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 28509 nrelhub.gov. js0DFpvdjOuLvJXrCZKNJX3ChVQarX8RzkZb9OprrrNOijcS1SRU8hIqOy8k3zyvpC16oGqLkD9i jq3n06sw1A== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 64170 nrelhub.gov. JZzYZB9jVwJdaaQllE4Bw9nJjVVO42ll1tq5BbByrQ+VCCwcYndo+atfdQFH2qv/fb9I/MJ5LRW2 cVmgkTdm9A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 28509 nrelhub.gov. h7iFyrARsdqoJnLgEb0ra2+7y7iRMnmNrYKhIgGH9tNx6BCYw0YLhxXvfP++Ht8u+lJlJCpp/OjQ zTsItVMJMg== )`
	`nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 64170 nrelhub.gov. cRcSqiljZJroX9wn6Ia+ZravlvEt3i5HtOViPmrRXTSBbFx9jgXHyhQQUBcCdkK5apCu60ZUI6wZ hiqWR8xJyw== )`
	RRSIG=28509 and DNSKEY=28509 verifies the SOA RRset
	RRSIG=64170 and DNSKEY=64170 verifies the SOA RRset

nrelhub.gov

	Query to helios.nrel.gov for nrelhub.gov/A
	Received 628 bytes from 192.174.58.2
	;; Response received from [192.174.58.2] 628 octets ;; HEADER SECTION ;; id = 3878 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019120977 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 28509 nrelhub.gov. h7iFyrARsdqoJnLgEb0ra2+7y7iRMnmNrYKhIgGH9tNx6BCYw0YLhxXvfP++Ht8u+lJlJCpp/OjQ zTsItVMJMg== ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 64170 nrelhub.gov. cRcSqiljZJroX9wn6Ia+ZravlvEt3i5HtOViPmrRXTSBbFx9jgXHyhQQUBcCdkK5apCu60ZUI6wZ hiqWR8xJyw== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN NSEC3 ( 1 0 10 8d70 ac13nhsb2cj7dkup4hf00gnh6qqgcu1t NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 28509 nrelhub.gov. js0DFpvdjOuLvJXrCZKNJX3ChVQarX8RzkZb9OprrrNOijcS1SRU8hIqOy8k3zyvpC16oGqLkD9i jq3n06sw1A== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 64170 nrelhub.gov. JZzYZB9jVwJdaaQllE4Bw9nJjVVO42ll1tq5BbByrQ+VCCwcYndo+atfdQFH2qv/fb9I/MJ5LRW2 cVmgkTdm9A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	helios.nrel.gov is authoritative for nrelhub.gov
	Found RRSIG signed by nrelhub.gov zone
	Query to helios.nrel.gov for nrelhub.gov/A
	Received 628 bytes from 192.174.58.2
	;; Response received from [192.174.58.2] 628 octets ;; HEADER SECTION ;; id = 6279 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nrelhub.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 3600 IN SOA ( phaeton.nrel.gov. postmaster.no.email.please. 2019120977 ;serial 1800 ;refresh 180 ;retry 2419200 ;expire 3600 ;minimum ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 28509 nrelhub.gov. h7iFyrARsdqoJnLgEb0ra2+7y7iRMnmNrYKhIgGH9tNx6BCYw0YLhxXvfP++Ht8u+lJlJCpp/OjQ zTsItVMJMg== ) nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 64170 nrelhub.gov. cRcSqiljZJroX9wn6Ia+ZravlvEt3i5HtOViPmrRXTSBbFx9jgXHyhQQUBcCdkK5apCu60ZUI6wZ hiqWR8xJyw== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN NSEC3 ( 1 0 10 8d70 ac13nhsb2cj7dkup4hf00gnh6qqgcu1t NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 28509 nrelhub.gov. js0DFpvdjOuLvJXrCZKNJX3ChVQarX8RzkZb9OprrrNOijcS1SRU8hIqOy8k3zyvpC16oGqLkD9i jq3n06sw1A== ) A2LQA3EA3KH9RS0JB2TEB2QAJ9UN7U1E.nrelhub.gov. 3600 IN RRSIG ( NSEC3 13 3 3600 20260216231742 20260212224809 64170 nrelhub.gov. JZzYZB9jVwJdaaQllE4Bw9nJjVVO42ll1tq5BbByrQ+VCCwcYndo+atfdQFH2qv/fb9I/MJ5LRW2 cVmgkTdm9A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 28509 nrelhub.gov. h7iFyrARsdqoJnLgEb0ra2+7y7iRMnmNrYKhIgGH9tNx6BCYw0YLhxXvfP++Ht8u+lJlJCpp/OjQ zTsItVMJMg== )`
	`nrelhub.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260216234809 20260212224809 64170 nrelhub.gov. cRcSqiljZJroX9wn6Ia+ZravlvEt3i5HtOViPmrRXTSBbFx9jgXHyhQQUBcCdkK5apCu60ZUI6wZ hiqWR8xJyw== )`
	RRSIG=28509 and DNSKEY=28509 verifies the SOA RRset
	RRSIG=64170 and DNSKEY=64170 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nrelhub.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: