DNSSEC Analyzer - ns0.dnscrypt.nl

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-05-21 15:12:21 UTC, NTP stratum 4

Analyzing DNSSEC problems for ns0.dnscrypt.nl

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 50613 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190611000000 20190521000000 20326 . otBkINZAQu7AvPKjr/xWIEE7+SoZtKgF8bzVynX6bfJMJuPay8jPvNmwXkZOdSoYlvFp0bk9JWJK Ch8y5uoNfMFkN6OSrDkr3t0E+c8c0Mnmwkk5CETH3Gqxthi0yyRX5T4VlHU06/Ks4zI+XAgl3FBp Oc554ivdzez8YCjAIGx7XgzzooEb7heMSlLc7S7/HNjw51TPRs4RxrAVcezieKCzPPpeWBhjE6R3 oiSwrl0SBD4/yplrDlr7UHs/Atcm3MSgemdyr2sOoOUkVQCVpcj3SQQezoD2tCM7861CXEQdg5fj eHDtz285xHt5HJpA5cOcctRo4ihybfow/+V7AQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190611000000 20190521000000 20326 . otBkINZAQu7AvPKjr/xWIEE7+SoZtKgF8bzVynX6bfJMJuPay8jPvNmwXkZOdSoYlvFp0bk9JWJK Ch8y5uoNfMFkN6OSrDkr3t0E+c8c0Mnmwkk5CETH3Gqxthi0yyRX5T4VlHU06/Ks4zI+XAgl3FBp Oc554ivdzez8YCjAIGx7XgzzooEb7heMSlLc7S7/HNjw51TPRs4RxrAVcezieKCzPPpeWBhjE6R3 oiSwrl0SBD4/yplrDlr7UHs/Atcm3MSgemdyr2sOoOUkVQCVpcj3SQQezoD2tCM7861CXEQdg5fj eHDtz285xHt5HJpA5cOcctRo4ihybfow/+V7AQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to c.root-servers.net for ns0.dnscrypt.nl/A
	Received 641 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (641 bytes) ;; HEADER SECTION ;; id = 8134 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ns0.dnscrypt.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS sns-pb.isc.org. nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . LWlPrahfsgtsoFBDa1vLcyYQtD/wf8xnaT1VJQSYVuLFXXtOa/6O85/kQHzqN6OulKtuz/qCNFa8 NAPW+3nGtqo1TRNoxhnzSwCqPOhknxdeBxFwdkY8zXjYF9fghnwDtwxX97tauSHfIYMrrYY7q5ry DZjSgFiVJglhgcwM8UDQEzqhE+boK16RELD9C81rCGnC6xUob5UiT8EkLMZDvHpUF6STua8fWsQZ x6H+J4p0J7utzYUagpNQPVDMCdql2sXo2ro7fPNJ5UoBC5kfZfghYHoS+sXD+NWnQfgiM3ZXPCyd CHZ6EvxTig4tNVoi6FdqaTiC4D4SKPyaKyTiMw== ) ;; ADDITIONAL SECTION (9 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 sns-pb.isc.org. 172800 IN A 192.5.4.1 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to j.root-servers.net for nl/DNSKEY
	Received 628 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (628 bytes) ;; HEADER SECTION ;; id = 41807 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS sns-pb.isc.org. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . LWlPrahfsgtsoFBDa1vLcyYQtD/wf8xnaT1VJQSYVuLFXXtOa/6O85/kQHzqN6OulKtuz/qCNFa8 NAPW+3nGtqo1TRNoxhnzSwCqPOhknxdeBxFwdkY8zXjYF9fghnwDtwxX97tauSHfIYMrrYY7q5ry DZjSgFiVJglhgcwM8UDQEzqhE+boK16RELD9C81rCGnC6xUob5UiT8EkLMZDvHpUF6STua8fWsQZ x6H+J4p0J7utzYUagpNQPVDMCdql2sXo2ro7fPNJ5UoBC5kfZfghYHoS+sXD+NWnQfgiM3ZXPCyd CHZ6EvxTig4tNVoi6FdqaTiC4D4SKPyaKyTiMw== ) ;; ADDITIONAL SECTION (9 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 sns-pb.isc.org. 172800 IN A 192.5.4.1 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to e.root-servers.net for nl/DS
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for nl/DS: 'IPv6 transport disabled'
	Received 366 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (366 bytes) ;; HEADER SECTION ;; id = 583 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . LWlPrahfsgtsoFBDa1vLcyYQtD/wf8xnaT1VJQSYVuLFXXtOa/6O85/kQHzqN6OulKtuz/qCNFa8 NAPW+3nGtqo1TRNoxhnzSwCqPOhknxdeBxFwdkY8zXjYF9fghnwDtwxX97tauSHfIYMrrYY7q5ry DZjSgFiVJglhgcwM8UDQEzqhE+boK16RELD9C81rCGnC6xUob5UiT8EkLMZDvHpUF6STua8fWsQZ x6H+J4p0J7utzYUagpNQPVDMCdql2sXo2ro7fPNJ5UoBC5kfZfghYHoS+sXD+NWnQfgiM3ZXPCyd CHZ6EvxTig4tNVoi6FdqaTiC4D4SKPyaKyTiMw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for nl in the . zone
	DS=34112/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . LWlPrahfsgtsoFBDa1vLcyYQtD/wf8xnaT1VJQSYVuLFXXtOa/6O85/kQHzqN6OulKtuz/qCNFa8 NAPW+3nGtqo1TRNoxhnzSwCqPOhknxdeBxFwdkY8zXjYF9fghnwDtwxX97tauSHfIYMrrYY7q5ry DZjSgFiVJglhgcwM8UDQEzqhE+boK16RELD9C81rCGnC6xUob5UiT8EkLMZDvHpUF6STua8fWsQZ x6H+J4p0J7utzYUagpNQPVDMCdql2sXo2ro7fPNJ5UoBC5kfZfghYHoS+sXD+NWnQfgiM3ZXPCyd CHZ6EvxTig4tNVoi6FdqaTiC4D4SKPyaKyTiMw== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=34112/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 )`
	Query to ns2.dns.nl for nl/DNSKEY
	Error querying ns2.dns.nl/2001:67c:1010:10:0:0:0:53 for nl/DNSKEY: 'IPv6 transport disabled'
	Received 745 bytes from 194.146.106.42
	;; Answer received from 194.146.106.42 (745 bytes) ;; HEADER SECTION ;; id = 46294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112 nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdiElqBPvEQJgiVowSJEMfpKmik+7ugCluVeOWi30mD6+rypryFI4f20s4MnOnluO6fdapBk I4UcZFQP05sQv7qpSCeEEqsMaNrhhWJtvHu4/C+6ftzkn1QP2EFyBufj5YHFly17BhQ3HtBNVWs6 KaeVrxMg3iUlkW2ATUDjyt5f ) ; Key ID = 46123 nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190530142418 20190516070802 34112 nl. RV0cQOg3GXMGaB/1UtoqSWuawZJCH7TqCl6z2AulIBoa/YP5rXfIAWvG3Ev4rA7fEUBUhAf4MVt6 BukfRggh0wkcdM/eqP9cRtuUHnDilWYuUl7dq3c94UaaUzUNTRdsZbwpTPTuMo914kAK4M29lWDd 7Kuor6U9Mya0fsPcOxiW5eyhBtuocaPPpPW6F/IxRrby/9PlMIsaTZpnevdcb2N0uO2vu8b4RSWa x8bE9b7FUH60xarNt5osvpc0vlbxDUPUJ9SRPYMbAdcrW1EyoT4N4BcvvTFK0BA1q5SEFzyPazpI xpcJiQ6fxPD1f7MK3wbVKMe4dR+ElNy1FJZAUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112`
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdiElqBPvEQJgiVowSJEMfpKmik+7ugCluVeOWi30mD6+rypryFI4f20s4MnOnluO6fdapBk I4UcZFQP05sQv7qpSCeEEqsMaNrhhWJtvHu4/C+6ftzkn1QP2EFyBufj5YHFly17BhQ3HtBNVWs6 KaeVrxMg3iUlkW2ATUDjyt5f ) ; Key ID = 46123`
	DNSKEY=34112/SEP is now in the chain-of-trust
	DS=34112/SHA-256 verifies DNSKEY=34112/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190530142418 20190516070802 34112 nl. RV0cQOg3GXMGaB/1UtoqSWuawZJCH7TqCl6z2AulIBoa/YP5rXfIAWvG3Ev4rA7fEUBUhAf4MVt6 BukfRggh0wkcdM/eqP9cRtuUHnDilWYuUl7dq3c94UaaUzUNTRdsZbwpTPTuMo914kAK4M29lWDd 7Kuor6U9Mya0fsPcOxiW5eyhBtuocaPPpPW6F/IxRrby/9PlMIsaTZpnevdcb2N0uO2vu8b4RSWa x8bE9b7FUH60xarNt5osvpc0vlbxDUPUJ9SRPYMbAdcrW1EyoT4N4BcvvTFK0BA1q5SEFzyPazpI xpcJiQ6fxPD1f7MK3wbVKMe4dR+ElNy1FJZAUA== )`
	RRSIG=34112 and DNSKEY=34112/SEP verifies the DNSKEY RRset
	DNSKEY=46123 is now in the chain-of-trust
	Query to ns3.dns.nl for ns0.dnscrypt.nl/A
	Error querying ns3.dns.nl/2001:678:20:0:0:0:0:24 for ns0.dnscrypt.nl/A: 'IPv6 transport disabled'
	Received 381 bytes from 194.0.25.24
	;; Answer received from 194.0.25.24 (381 bytes) ;; HEADER SECTION ;; id = 19330 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ns0.dnscrypt.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) dnscrypt.nl. 3600 IN NS ns2.transip.eu. dnscrypt.nl. 3600 IN NS ns0.transip.net. dnscrypt.nl. 3600 IN NS ns1.transip.nl. dnscrypt.nl. 3600 IN DS ( 40464 7 2 b912990edde27583ea3e51c388a08df3fe0c1f26898f1404d526a19c1c2605a9 ) dnscrypt.nl. 3600 IN RRSIG ( DS 8 2 3600 20190530145106 20190516070802 46123 nl. sYD0YSuhbDeLNHrPZ7O9X2rLeowtFnm7vSYyi7REi8KEwmFxeCOaqHk4mQMeGjikq1Ssf2rw0Arl uPmz3TRB90kyRa/hSnQ1p8tRr1jZr8r730ZiQ2XP5AGmcszRyMNet/fL8foQWfZHjd0MD+0TPTZ1 7kRoECKaPsfMzjfhnwU= ) ;; ADDITIONAL SECTION (3 records) ns1.transip.nl. 3600 IN A 195.8.195.195 ns1.transip.nl. 3600 IN AAAA 2a01:7c8:7000:195::195 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.dns.nl for dnscrypt.nl/DNSKEY
	Received 377 bytes from 194.0.28.53
	;; Answer received from 194.0.28.53 (377 bytes) ;; HEADER SECTION ;; id = 42191 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) dnscrypt.nl. 3600 IN NS ns1.transip.nl. dnscrypt.nl. 3600 IN NS ns0.transip.net. dnscrypt.nl. 3600 IN NS ns2.transip.eu. dnscrypt.nl. 3600 IN DS ( 40464 7 2 b912990edde27583ea3e51c388a08df3fe0c1f26898f1404d526a19c1c2605a9 ) dnscrypt.nl. 3600 IN RRSIG ( DS 8 2 3600 20190530145106 20190516070802 46123 nl. sYD0YSuhbDeLNHrPZ7O9X2rLeowtFnm7vSYyi7REi8KEwmFxeCOaqHk4mQMeGjikq1Ssf2rw0Arl uPmz3TRB90kyRa/hSnQ1p8tRr1jZr8r730ZiQ2XP5AGmcszRyMNet/fL8foQWfZHjd0MD+0TPTZ1 7kRoECKaPsfMzjfhnwU= ) ;; ADDITIONAL SECTION (3 records) ns1.transip.nl. 3600 IN A 195.8.195.195 ns1.transip.nl. 3600 IN AAAA 2a01:7c8:7000:195::195 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dnscrypt.nl

dnscrypt.nl

	Checking DS between nl and dnscrypt.nl
	Query to ns1.dns.nl for dnscrypt.nl/DS
	Received 250 bytes from 194.0.28.53
	;; Answer received from 194.0.28.53 (250 bytes) ;; HEADER SECTION ;; id = 12256 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.nl. IN DS ;; ANSWER SECTION (2 records) dnscrypt.nl. 3600 IN DS ( 40464 7 2 b912990edde27583ea3e51c388a08df3fe0c1f26898f1404d526a19c1c2605a9 ) dnscrypt.nl. 3600 IN RRSIG ( DS 8 2 3600 20190530145106 20190516070802 46123 nl. sYD0YSuhbDeLNHrPZ7O9X2rLeowtFnm7vSYyi7REi8KEwmFxeCOaqHk4mQMeGjikq1Ssf2rw0Arl uPmz3TRB90kyRa/hSnQ1p8tRr1jZr8r730ZiQ2XP5AGmcszRyMNet/fL8foQWfZHjd0MD+0TPTZ1 7kRoECKaPsfMzjfhnwU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for dnscrypt.nl in the nl zone
	DS=40464/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`dnscrypt.nl. 3600 IN RRSIG ( DS 8 2 3600 20190530145106 20190516070802 46123 nl. sYD0YSuhbDeLNHrPZ7O9X2rLeowtFnm7vSYyi7REi8KEwmFxeCOaqHk4mQMeGjikq1Ssf2rw0Arl uPmz3TRB90kyRa/hSnQ1p8tRr1jZr8r730ZiQ2XP5AGmcszRyMNet/fL8foQWfZHjd0MD+0TPTZ1 7kRoECKaPsfMzjfhnwU= )`
	RRSIG=46123 and DNSKEY=46123 verifies the DS RRset
	DS=40464/SHA-256 is now in the chain-of-trust
	`dnscrypt.nl. 3600 IN DS ( 40464 7 2 b912990edde27583ea3e51c388a08df3fe0c1f26898f1404d526a19c1c2605a9 )`
	Query to ns2.transip.eu for dnscrypt.nl/DNSKEY
	Error querying ns2.transip.eu/2a01:7c8:f:c1f:0:0:0:195 for dnscrypt.nl/DNSKEY: 'IPv6 transport disabled'
	Received 1137 bytes from 37.97.199.195
	;; Answer received from 37.97.199.195 (1137 bytes) ;; HEADER SECTION ;; id = 38144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.nl. IN DNSKEY ;; ANSWER SECTION (5 records) dnscrypt.nl. 86400 IN DNSKEY ( 256 3 7 AwEAAbntjBLRvQ/mededyvAD+b0nINo7PpOD1JX9okE8rGr6k6HKx4mtpK1nbwCW7LwlGaNGDOKL /uGu2vSEMKyksOcaCyAG7uaRLhLVCT0I2gzFtI5IQF7ttJFwJSLt3jwjqTIgTNIGqRODXGFinOW4 A2lX3bwXQ7Jp1Mv02zICECLB ) ; Key ID = 5300 dnscrypt.nl. 86400 IN DNSKEY ( 256 3 7 AwEAAcFyHmCK3fEC5LtKxn0++7qIITq4bh8CLdgGAa0hAnf6pAfooOMiMtFBScU5bUtawOb1uh7x kQCPLxKEmOSwtc+QB0KM+TjF38zdJ/50W7z8n1MSd12wcmLA8htQ5k5/XsUAlSGl4eu9lVKA38Zg koAWvZjVzaiO+xRJj5tIvbWB ) ; Key ID = 34937 dnscrypt.nl. 86400 IN DNSKEY ( 257 3 7 AwEAAaXq0smW7RhDzduOK541osRL7gzi0mIwABflUbWu1Kase4a7P6wOxtvQ14JlUDMhXOqJY3Ji 9uFa1JgqVhhKeJhACrKte5wdmbC8geWLqZCHNod2XVt85jS4aLxsdu0ydD3AeW/llVpLODZ88o4m bspy/gG1+59eGihf/UsE+Xc4MkEwjs8TktmP24tHnEFFQ2HpcdqdPA9ZY++e+i2zuCaZCh5IRGbM hsSQonS9tLpS0QPL7+/ojC34KY6riuk8b/xchUOnE+h0fhu4O/e/zruuRU/rcftj8xA/CBXsqQ0l 1bQrEbKy1eg/AgAlLNOrzd2lw12Dy4NZjhbw+xELH3s= ) ; Key ID = 40464 dnscrypt.nl. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190824162807 20190424162807 40464 dnscrypt.nl. KvOeVh3TH3DAN+GV0q3SjIfPOcapWXsf0csQC9wMDgDy2InCGejAsjwoOppypLkUvNaHlPftsTzI ZWMnIzZ+JxplNvYCAfB9YoBIodXGKozNCLHs8opWKeZCMgoQsV64blNS9YSXngpNERQsG8KcH103 CAzwx5HSAh6rRPYeT80ojMX+YDOis54FsJxaTA3imJxaXvkl4FjgoV+Kh18jy5iq5sddCC2zH4UF Twx9NsWlcMkpDhOMHUlfoFQOseD5PuqGBgFroIoQtktyba5EVe67FadN+caeG6CdSY0M+TZR6czi dMt+DmK7QFb5Yj5tpQmtfkTJuMSYVUi3LMAEMA== ) dnscrypt.nl. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190824162807 20190424162807 34937 dnscrypt.nl. D4d9W8G14CqeQUSwj3RrK8dIVapnguTKT37gsMGjrHe89aPpbWOzsRRfhHWG5tH71AcHYYWcOCPw QiyRDbhiINib8/VWTMEm/6erZBe2r2EZi+nK/XByoq6ZLPY2mOjwWR7N1Nz76cRN6C9Yp27Suxaz TRIwWn02/ckJ+97HXos= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for dnscrypt.nl
	`dnscrypt.nl. 86400 IN DNSKEY ( 256 3 7 AwEAAbntjBLRvQ/mededyvAD+b0nINo7PpOD1JX9okE8rGr6k6HKx4mtpK1nbwCW7LwlGaNGDOKL /uGu2vSEMKyksOcaCyAG7uaRLhLVCT0I2gzFtI5IQF7ttJFwJSLt3jwjqTIgTNIGqRODXGFinOW4 A2lX3bwXQ7Jp1Mv02zICECLB ) ; Key ID = 5300`
	`dnscrypt.nl. 86400 IN DNSKEY ( 256 3 7 AwEAAcFyHmCK3fEC5LtKxn0++7qIITq4bh8CLdgGAa0hAnf6pAfooOMiMtFBScU5bUtawOb1uh7x kQCPLxKEmOSwtc+QB0KM+TjF38zdJ/50W7z8n1MSd12wcmLA8htQ5k5/XsUAlSGl4eu9lVKA38Zg koAWvZjVzaiO+xRJj5tIvbWB ) ; Key ID = 34937`
	`dnscrypt.nl. 86400 IN DNSKEY ( 257 3 7 AwEAAaXq0smW7RhDzduOK541osRL7gzi0mIwABflUbWu1Kase4a7P6wOxtvQ14JlUDMhXOqJY3Ji 9uFa1JgqVhhKeJhACrKte5wdmbC8geWLqZCHNod2XVt85jS4aLxsdu0ydD3AeW/llVpLODZ88o4m bspy/gG1+59eGihf/UsE+Xc4MkEwjs8TktmP24tHnEFFQ2HpcdqdPA9ZY++e+i2zuCaZCh5IRGbM hsSQonS9tLpS0QPL7+/ojC34KY6riuk8b/xchUOnE+h0fhu4O/e/zruuRU/rcftj8xA/CBXsqQ0l 1bQrEbKy1eg/AgAlLNOrzd2lw12Dy4NZjhbw+xELH3s= ) ; Key ID = 40464`
	DNSKEY=40464/SEP is now in the chain-of-trust
	DS=40464/SHA-256 verifies DNSKEY=40464/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`dnscrypt.nl. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190824162807 20190424162807 40464 dnscrypt.nl. KvOeVh3TH3DAN+GV0q3SjIfPOcapWXsf0csQC9wMDgDy2InCGejAsjwoOppypLkUvNaHlPftsTzI ZWMnIzZ+JxplNvYCAfB9YoBIodXGKozNCLHs8opWKeZCMgoQsV64blNS9YSXngpNERQsG8KcH103 CAzwx5HSAh6rRPYeT80ojMX+YDOis54FsJxaTA3imJxaXvkl4FjgoV+Kh18jy5iq5sddCC2zH4UF Twx9NsWlcMkpDhOMHUlfoFQOseD5PuqGBgFroIoQtktyba5EVe67FadN+caeG6CdSY0M+TZR6czi dMt+DmK7QFb5Yj5tpQmtfkTJuMSYVUi3LMAEMA== )`
	`dnscrypt.nl. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190824162807 20190424162807 34937 dnscrypt.nl. D4d9W8G14CqeQUSwj3RrK8dIVapnguTKT37gsMGjrHe89aPpbWOzsRRfhHWG5tH71AcHYYWcOCPw QiyRDbhiINib8/VWTMEm/6erZBe2r2EZi+nK/XByoq6ZLPY2mOjwWR7N1Nz76cRN6C9Yp27Suxaz TRIwWn02/ckJ+97HXos= )`
	RRSIG=40464 and DNSKEY=40464/SEP verifies the DNSKEY RRset
	RRSIG=34937 and DNSKEY=34937 verifies the DNSKEY RRset
	DNSKEY=5300 is now in the chain-of-trust
	DNSKEY=34937 is now in the chain-of-trust
	Query to ns0.transip.net for ns0.dnscrypt.nl/A
	Error querying ns0.transip.net/2a01:7c8:dddd:195:0:0:0:195 for ns0.dnscrypt.nl/A: 'IPv6 transport disabled'
	Received 261 bytes from 195.135.195.195
	;; Answer received from 195.135.195.195 (261 bytes) ;; HEADER SECTION ;; id = 52010 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ns0.dnscrypt.nl. IN A ;; ANSWER SECTION (2 records) ns0.dnscrypt.nl. 300 IN A 45.76.35.212 ns0.dnscrypt.nl. 300 IN RRSIG ( A 7 3 300 20190824162807 20190424162807 34937 dnscrypt.nl. QL06fFOgRO8zzKn0IPnrzyAPLcR5+JL4BjSu8IbIfSEqZfp3QmxoXgK7DKSHtpM+r+ZK5or8zXCz xlkNyQwEGixP7QQjqyLSFM9W/PmfWe0S7FSD8hVo61xGTK2ycd6u0vjzI010e++BSdUWWhOrUitn axTxBy04NEx1P7Noj2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dnscrypt.nl is authoritative for ns0.dnscrypt.nl
	Query to ns2.transip.eu for ns0.dnscrypt.nl/DNSKEY
	Received 622 bytes from 37.97.199.195
	;; Answer received from 37.97.199.195 (622 bytes) ;; HEADER SECTION ;; id = 59287 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ns0.dnscrypt.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dnscrypt.nl. 300 IN SOA ( ns0.transip.net. hostmaster.transip.nl. 2019042401 ;serial 14400 ;refresh 1800 ;retry 2419200 ;expire 300 ;minimum ) dnscrypt.nl. 300 IN RRSIG ( SOA 7 2 3600 20190824162807 20190424162807 34937 dnscrypt.nl. dqUMxrf3RjoCVQjIHTVCSv2Y5KqsOmiWS4A4jBKftlul2nWN2bwLyaBCR+/SDhSiQhxXJKaX5Jy+ hXgPFf0L0cCHu7Bm0nsBWoSZdcA4LUTQmYsmHZYImMZ7ZizYvkTOh2oZBgZF+fdSs0c0MiPO4VrY +PodNVsMOC9sUmDnl9E= ) qsgaua6qvsou9q06fid4drbphq6p3jv7.dnscrypt.nl. 300 IN NSEC3 ( 1 0 100 f91ea6609663d328 rkgbfkt7obrr00l8t70hblpsms6670fm A AAAA SSHFP RRSIG ) qsgaua6qvsou9q06fid4drbphq6p3jv7.dnscrypt.nl. 300 IN RRSIG ( NSEC3 7 3 300 20190824162807 20190424162807 34937 dnscrypt.nl. XpLpliLDOZvDxa+iNsarZqyEZ2Lzkd7qcEU/bZuwxVukwGfoPS3x22Bgk3wajD6W8Ic+pT8uq0xG pBz5lC2X6LZs4dGAvPvp1Plq7FXfhJ0A2dUETFsa+kDz6Z/+y5KEtI2MzIrdIgarz/EWcou5Nmbk 0auCo7f9QoI7u3tofGc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by dnscrypt.nl zone
	Query to ns2.transip.eu for dnscrypt.nl/SOA
	Error querying ns2.transip.eu/2a01:7c8:f:c1f:0:0:0:195 for dnscrypt.nl/SOA: 'IPv6 transport disabled'
	Received 305 bytes from 37.97.199.195
	;; Answer received from 37.97.199.195 (305 bytes) ;; HEADER SECTION ;; id = 19433 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.nl. IN SOA ;; ANSWER SECTION (2 records) dnscrypt.nl. 3600 IN SOA ( ns0.transip.net. hostmaster.transip.nl. 2019042401 ;serial 14400 ;refresh 1800 ;retry 2419200 ;expire 300 ;minimum ) dnscrypt.nl. 3600 IN RRSIG ( SOA 7 2 3600 20190824162807 20190424162807 34937 dnscrypt.nl. dqUMxrf3RjoCVQjIHTVCSv2Y5KqsOmiWS4A4jBKftlul2nWN2bwLyaBCR+/SDhSiQhxXJKaX5Jy+ hXgPFf0L0cCHu7Bm0nsBWoSZdcA4LUTQmYsmHZYImMZ7ZizYvkTOh2oZBgZF+fdSs0c0MiPO4VrY +PodNVsMOC9sUmDnl9E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns0.transip.net for dnscrypt.nl/SOA
	Received 305 bytes from 195.135.195.195
	;; Answer received from 195.135.195.195 (305 bytes) ;; HEADER SECTION ;; id = 23021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.nl. IN SOA ;; ANSWER SECTION (2 records) dnscrypt.nl. 3600 IN SOA ( ns0.transip.net. hostmaster.transip.nl. 2019042401 ;serial 14400 ;refresh 1800 ;retry 2419200 ;expire 300 ;minimum ) dnscrypt.nl. 3600 IN RRSIG ( SOA 7 2 3600 20190824162807 20190424162807 34937 dnscrypt.nl. dqUMxrf3RjoCVQjIHTVCSv2Y5KqsOmiWS4A4jBKftlul2nWN2bwLyaBCR+/SDhSiQhxXJKaX5Jy+ hXgPFf0L0cCHu7Bm0nsBWoSZdcA4LUTQmYsmHZYImMZ7ZizYvkTOh2oZBgZF+fdSs0c0MiPO4VrY +PodNVsMOC9sUmDnl9E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.transip.nl for dnscrypt.nl/SOA
	Received 305 bytes from 195.8.195.195
	;; Answer received from 195.8.195.195 (305 bytes) ;; HEADER SECTION ;; id = 52626 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.nl. IN SOA ;; ANSWER SECTION (2 records) dnscrypt.nl. 3600 IN SOA ( ns0.transip.net. hostmaster.transip.nl. 2019042401 ;serial 14400 ;refresh 1800 ;retry 2419200 ;expire 300 ;minimum ) dnscrypt.nl. 3600 IN RRSIG ( SOA 7 2 3600 20190824162807 20190424162807 34937 dnscrypt.nl. dqUMxrf3RjoCVQjIHTVCSv2Y5KqsOmiWS4A4jBKftlul2nWN2bwLyaBCR+/SDhSiQhxXJKaX5Jy+ hXgPFf0L0cCHu7Bm0nsBWoSZdcA4LUTQmYsmHZYImMZ7ZizYvkTOh2oZBgZF+fdSs0c0MiPO4VrY +PodNVsMOC9sUmDnl9E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns0.transip.net for ns0.dnscrypt.nl/A
	Received 261 bytes from 195.135.195.195
	;; Answer received from 195.135.195.195 (261 bytes) ;; HEADER SECTION ;; id = 51125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ns0.dnscrypt.nl. IN A ;; ANSWER SECTION (2 records) ns0.dnscrypt.nl. 300 IN A 45.76.35.212 ns0.dnscrypt.nl. 300 IN RRSIG ( A 7 3 300 20190824162807 20190424162807 34937 dnscrypt.nl. QL06fFOgRO8zzKn0IPnrzyAPLcR5+JL4BjSu8IbIfSEqZfp3QmxoXgK7DKSHtpM+r+ZK5or8zXCz xlkNyQwEGixP7QQjqyLSFM9W/PmfWe0S7FSD8hVo61xGTK2ycd6u0vjzI010e++BSdUWWhOrUitn axTxBy04NEx1P7Noj2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns0.dnscrypt.nl A RR has value 45.76.35.212
	Found 1 RRSIGs over A RRset
	`ns0.dnscrypt.nl. 300 IN RRSIG ( A 7 3 300 20190824162807 20190424162807 34937 dnscrypt.nl. QL06fFOgRO8zzKn0IPnrzyAPLcR5+JL4BjSu8IbIfSEqZfp3QmxoXgK7DKSHtpM+r+ZK5or8zXCz xlkNyQwEGixP7QQjqyLSFM9W/PmfWe0S7FSD8hVo61xGTK2ycd6u0vjzI010e++BSdUWWhOrUitn axTxBy04NEx1P7Noj2Q= )`
	RRSIG=34937 and DNSKEY=34937 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ns0.dnscrypt.nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: