DNSSEC Debugger - redpilllinpro01.ring.nlnog.net

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-07-21 13:46:38 UTC

Analyzing DNSSEC problems for redpilllinpro01.ring.nlnog.net

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1139 octets ;; HEADER SECTION ;; id = 56081 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260811000000 20260721000000 20326 . KRNkneCiUAW/3xsn8/6VDpfjYsXUrh19hqxVi2TRYnqbNa9N/fwN0Z/JgTGfigaY6KKSFgTZGZsi ilMiPVdHOirETIVs37XWU6L+dskCttC2rHUShOxnf0lLzy2rFJbolkd3aB5FpbprKmURCyeW/Na/ wtrSCo1kArBAIOGZLHNvDOVKL/MDIAkZJQ6EbfLxY8wkd4Rp93T5sAUyBaSlRpkqDyujUuz/0lCB eApRp0wMGQGC5+3//rdv16be3O5+oi124vJqlskvDw/jIsq3GY2jNjnWBwu7bFeOWHahBsZNROj0 fKTkCYgtWKZfwFp0bwc20chK6hHxPskKEB+AFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260811000000 20260721000000 20326 . KRNkneCiUAW/3xsn8/6VDpfjYsXUrh19hqxVi2TRYnqbNa9N/fwN0Z/JgTGfigaY6KKSFgTZGZsi ilMiPVdHOirETIVs37XWU6L+dskCttC2rHUShOxnf0lLzy2rFJbolkd3aB5FpbprKmURCyeW/Na/ wtrSCo1kArBAIOGZLHNvDOVKL/MDIAkZJQ6EbfLxY8wkd4Rp93T5sAUyBaSlRpkqDyujUuz/0lCB eApRp0wMGQGC5+3//rdv16be3O5+oi124vJqlskvDw/jIsq3GY2jNjnWBwu7bFeOWHahBsZNROj0 fKTkCYgtWKZfwFp0bwc20chK6hHxPskKEB+AFw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to b.root-servers.net for redpilllinpro01.ring.nlnog.net/A
	Received 1187 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1187 octets ;; HEADER SECTION ;; id = 1768 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . fHk+sZz+Tibb4v+8mVxXVTHFn0X4NMLdHbhYr1R2haPuV0F+a+58ysdUgEKG5h8lwGGTz6C7SbDG MEPA+nnjyp3NsTe/yZH5fBLcMHVoNDdySlcTdt/zpF/fg/qt8Rl9wFdhlIHOtOtdY5t7wPxjHuq+ +znInO7qRm0YwtVUUVlY4GkJvSjMMNSt52wlKIjKAnL2yR0C71CLpqnT6nnZmOkvA1JF+qnsiktc bMQOygwhQ//dPmKNBGLam598UXUyEjkBA9NbJikklZMiZbxzfFUusSRV03T2AEFYFTvNKLcaA+Zu I7GtXHgSOOCTdi5gAzgLXRdv5uhPArpQ9T8i+g== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for net/DNSKEY
	Received 1160 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1160 octets ;; HEADER SECTION ;; id = 53349 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . fHk+sZz+Tibb4v+8mVxXVTHFn0X4NMLdHbhYr1R2haPuV0F+a+58ysdUgEKG5h8lwGGTz6C7SbDG MEPA+nnjyp3NsTe/yZH5fBLcMHVoNDdySlcTdt/zpF/fg/qt8Rl9wFdhlIHOtOtdY5t7wPxjHuq+ +znInO7qRm0YwtVUUVlY4GkJvSjMMNSt52wlKIjKAnL2yR0C71CLpqnT6nnZmOkvA1JF+qnsiktc bMQOygwhQ//dPmKNBGLam598UXUyEjkBA9NbJikklZMiZbxzfFUusSRV03T2AEFYFTvNKLcaA+Zu I7GtXHgSOOCTdi5gAzgLXRdv5uhPArpQ9T8i+g== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to f.root-servers.net for net/DS
	Received 367 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 367 octets ;; HEADER SECTION ;; id = 15150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . fHk+sZz+Tibb4v+8mVxXVTHFn0X4NMLdHbhYr1R2haPuV0F+a+58ysdUgEKG5h8lwGGTz6C7SbDG MEPA+nnjyp3NsTe/yZH5fBLcMHVoNDdySlcTdt/zpF/fg/qt8Rl9wFdhlIHOtOtdY5t7wPxjHuq+ +znInO7qRm0YwtVUUVlY4GkJvSjMMNSt52wlKIjKAnL2yR0C71CLpqnT6nnZmOkvA1JF+qnsiktc bMQOygwhQ//dPmKNBGLam598UXUyEjkBA9NbJikklZMiZbxzfFUusSRV03T2AEFYFTvNKLcaA+Zu I7GtXHgSOOCTdi5gAzgLXRdv5uhPArpQ9T8i+g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20260803050000 20260721040000 57780 . fHk+sZz+Tibb4v+8mVxXVTHFn0X4NMLdHbhYr1R2haPuV0F+a+58ysdUgEKG5h8lwGGTz6C7SbDG MEPA+nnjyp3NsTe/yZH5fBLcMHVoNDdySlcTdt/zpF/fg/qt8Rl9wFdhlIHOtOtdY5t7wPxjHuq+ +znInO7qRm0YwtVUUVlY4GkJvSjMMNSt52wlKIjKAnL2yR0C71CLpqnT6nnZmOkvA1JF+qnsiktc bMQOygwhQ//dPmKNBGLam598UXUyEjkBA9NbJikklZMiZbxzfFUusSRV03T2AEFYFTvNKLcaA+Zu I7GtXHgSOOCTdi5gAzgLXRdv5uhPArpQ9T8i+g== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to f.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.35.51.30
	;; Response received from [192.35.51.30] 291 octets ;; HEADER SECTION ;; id = 58925 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 l7rgjR/OtA0Y0DPdQWAIu7VCMbTmizfNQGT4JCU4JKy1hh7qvLHWZHIics0BKnA3mS7ib8EdptDg 6tWkXcv37w== ) ; keytag 7272 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260731141035 20260716140535 37331 net. vuW3zAnG81EGdR1i0+nl48cS74FZ7O0n2753DY3XSmk949xumL63bYs90DaiNR04LkF0q9hmFrbB jv772z1wnQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 l7rgjR/OtA0Y0DPdQWAIu7VCMbTmizfNQGT4JCU4JKy1hh7qvLHWZHIics0BKnA3mS7ib8EdptDg 6tWkXcv37w== ) ; keytag 7272`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260731141035 20260716140535 37331 net. vuW3zAnG81EGdR1i0+nl48cS74FZ7O0n2753DY3XSmk949xumL63bYs90DaiNR04LkF0q9hmFrbB jv772z1wnQ== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=7272 is now in the chain-of-trust
	Query to m.gtld-servers.net for redpilllinpro01.ring.nlnog.net/A
	Received 259 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 259 octets ;; HEADER SECTION ;; id = 13960 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nlnog.net. 172800 IN NS ns1.desec.io. nlnog.net. 172800 IN NS ns2.desec.org. nlnog.net. 86400 IN DS ( 49892 13 2 57bfdd7cb0fe9f4f52dc7ba5bb564ef5091353a747fd8c87da5313885bdc4ee3 ) nlnog.net. 86400 IN RRSIG ( DS 13 2 86400 20260728033741 20260721022741 7272 net. RJQ1/AcJsZDmQeFHZgHaQJJzVti/IF+rfJBa8A4mHpd4z58P2DtcFz2bPn2vZ7WhTTVsQ22Kc1Ge WI0NqIUr5g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to g.gtld-servers.net for nlnog.net/DNSKEY
	Received 238 bytes from 192.42.93.30
	;; Response received from [192.42.93.30] 238 octets ;; HEADER SECTION ;; id = 10728 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nlnog.net. 172800 IN NS ns1.desec.io. nlnog.net. 172800 IN NS ns2.desec.org. nlnog.net. 86400 IN DS ( 49892 13 2 57bfdd7cb0fe9f4f52dc7ba5bb564ef5091353a747fd8c87da5313885bdc4ee3 ) nlnog.net. 86400 IN RRSIG ( DS 13 2 86400 20260728033741 20260721022741 7272 net. RJQ1/AcJsZDmQeFHZgHaQJJzVti/IF+rfJBa8A4mHpd4z58P2DtcFz2bPn2vZ7WhTTVsQ22Kc1Ge WI0NqIUr5g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone nlnog.net

nlnog.net

	Checking DS between net and nlnog.net
	Query to l.gtld-servers.net for nlnog.net/DS
	Received 1077 bytes from 192.41.162.30
	;; Response received from [192.41.162.30] 1077 octets ;; HEADER SECTION ;; id = 10171 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nlnog.net. IN DS ;; ANSWER SECTION (2 records) nlnog.net. 86400 IN DS ( 49892 13 2 57bfdd7cb0fe9f4f52dc7ba5bb564ef5091353a747fd8c87da5313885bdc4ee3 ) nlnog.net. 86400 IN RRSIG ( DS 13 2 86400 20260728033741 20260721022741 7272 net. RJQ1/AcJsZDmQeFHZgHaQJJzVti/IF+rfJBa8A4mHpd4z58P2DtcFz2bPn2vZ7WhTTVsQ22Kc1Ge WI0NqIUr5g== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20260727034209 20260720023209 7272 net. Dw983fghYgHP0FhIsJmkcvq/qxVpPanejUrBvjyBESIiypyw4FDmOrbNZBrJKmwVHHuf1Ruub9ba B9sTiot/pg== ) ;; ADDITIONAL SECTION (27 records) k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nlnog.net in the net zone
	DS=49892/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nlnog.net. 86400 IN RRSIG ( DS 13 2 86400 20260728033741 20260721022741 7272 net. RJQ1/AcJsZDmQeFHZgHaQJJzVti/IF+rfJBa8A4mHpd4z58P2DtcFz2bPn2vZ7WhTTVsQ22Kc1Ge WI0NqIUr5g== )`
	RRSIG=7272 and DNSKEY=7272 verifies the DS RRset
	DS=49892/SHA-256 is now in the chain-of-trust
	`nlnog.net. 86400 IN DS ( 49892 13 2 57bfdd7cb0fe9f4f52dc7ba5bb564ef5091353a747fd8c87da5313885bdc4ee3 )`
	Query to ns1.desec.io for nlnog.net/DNSKEY
	Received 223 bytes from 45.54.76.1
	;; Response received from [45.54.76.1] 223 octets ;; HEADER SECTION ;; id = 25047 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nlnog.net. IN DNSKEY ;; ANSWER SECTION (2 records) nlnog.net. 3600 IN DNSKEY ( 257 3 13 izfY4vFTRUE0sNSg1octHZ2nFGxPBt9tKkzd8huWictxx46LLjUz6VRK4DHkOKzizdDXjbB7xrCE PIu7L+oEkg== ) ; keytag 49892 nlnog.net. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260730000000 20260709000000 49892 nlnog.net. htuT/2iZO+ZyaO2eIwHtP33bUrJQAmq26gD70NJ/XjwX6Pg6Hpsn7RNfcThMtrUuCaPkqqdWb5L9 fQ5WOeHKjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for nlnog.net
	`nlnog.net. 3600 IN DNSKEY ( 257 3 13 izfY4vFTRUE0sNSg1octHZ2nFGxPBt9tKkzd8huWictxx46LLjUz6VRK4DHkOKzizdDXjbB7xrCE PIu7L+oEkg== ) ; keytag 49892`
	DNSKEY=49892/SEP is now in the chain-of-trust
	DS=49892/SHA-256 verifies DNSKEY=49892/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nlnog.net. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260730000000 20260709000000 49892 nlnog.net. htuT/2iZO+ZyaO2eIwHtP33bUrJQAmq26gD70NJ/XjwX6Pg6Hpsn7RNfcThMtrUuCaPkqqdWb5L9 fQ5WOeHKjQ== )`
	RRSIG=49892 and DNSKEY=49892/SEP verifies the DNSKEY RRset
	Query to ns1.desec.io for redpilllinpro01.ring.nlnog.net/A
	Received 434 bytes from 45.54.76.1
	;; Response received from [45.54.76.1] 434 octets ;; HEADER SECTION ;; id = 7858 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ring.nlnog.net. 86400 IN NS ns.rodecker.nl. ring.nlnog.net. 86400 IN NS ns01.infra.ring.nlnog.net. ring.nlnog.net. 86400 IN NS auth1.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth2.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth3.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth4.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth5.ns.gin.ntt.net. ring.nlnog.net. 86400 IN DS ( 41746 8 2 0b5713506eecd741b24486ecdc44f4627eea258605b8f4a27cc031c41b26acb2 ) ring.nlnog.net. 86400 IN RRSIG ( DS 13 3 86400 20260730000000 20260709000000 49892 nlnog.net. NIJ3oOZ0sMgH2Xhh0xQkv/sll4UjoSBj871xmIRieZS3/7GMrkjwBN3Oc+/+bTxD/AxCje81plRk snXaMeFlLA== ) ;; ADDITIONAL SECTION (3 records) ns01.infra.ring.nlnog.net. 3600 IN A 185.107.224.27 ns01.infra.ring.nlnog.net. 3600 IN AAAA 2a00:f10:400:2:4b3:4aff:fe00:707 ;; { "EDNS-VERSION": 0 }
	Query to ns2.desec.org for ring.nlnog.net/DNSKEY
	Received 418 bytes from 157.53.224.1
	;; Response received from [157.53.224.1] 418 octets ;; HEADER SECTION ;; id = 45832 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ring.nlnog.net. 86400 IN NS ns.rodecker.nl. ring.nlnog.net. 86400 IN NS ns01.infra.ring.nlnog.net. ring.nlnog.net. 86400 IN NS auth1.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth2.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth3.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth4.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth5.ns.gin.ntt.net. ring.nlnog.net. 86400 IN DS ( 41746 8 2 0b5713506eecd741b24486ecdc44f4627eea258605b8f4a27cc031c41b26acb2 ) ring.nlnog.net. 86400 IN RRSIG ( DS 13 3 86400 20260730000000 20260709000000 49892 nlnog.net. NIJ3oOZ0sMgH2Xhh0xQkv/sll4UjoSBj871xmIRieZS3/7GMrkjwBN3Oc+/+bTxD/AxCje81plRk snXaMeFlLA== ) ;; ADDITIONAL SECTION (3 records) ns01.infra.ring.nlnog.net. 3600 IN A 185.107.224.27 ns01.infra.ring.nlnog.net. 3600 IN AAAA 2a00:f10:400:2:4b3:4aff:fe00:707 ;; { "EDNS-VERSION": 0 }
	Found child zone ring.nlnog.net

ring.nlnog.net

	Checking DS between nlnog.net and ring.nlnog.net
	Query to ns1.desec.io for ring.nlnog.net/DS
	Received 196 bytes from 45.54.76.1
	;; Response received from [45.54.76.1] 196 octets ;; HEADER SECTION ;; id = 64888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN DS ;; ANSWER SECTION (2 records) ring.nlnog.net. 86400 IN DS ( 41746 8 2 0b5713506eecd741b24486ecdc44f4627eea258605b8f4a27cc031c41b26acb2 ) ring.nlnog.net. 86400 IN RRSIG ( DS 13 3 86400 20260730000000 20260709000000 49892 nlnog.net. NIJ3oOZ0sMgH2Xhh0xQkv/sll4UjoSBj871xmIRieZS3/7GMrkjwBN3Oc+/+bTxD/AxCje81plRk snXaMeFlLA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ring.nlnog.net in the nlnog.net zone
	DS=41746/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ring.nlnog.net. 86400 IN RRSIG ( DS 13 3 86400 20260730000000 20260709000000 49892 nlnog.net. NIJ3oOZ0sMgH2Xhh0xQkv/sll4UjoSBj871xmIRieZS3/7GMrkjwBN3Oc+/+bTxD/AxCje81plRk snXaMeFlLA== )`
	RRSIG=49892 and DNSKEY=49892/SEP verifies the DS RRset
	DS=41746/SHA-256 is now in the chain-of-trust
	`ring.nlnog.net. 86400 IN DS ( 41746 8 2 0b5713506eecd741b24486ecdc44f4627eea258605b8f4a27cc031c41b26acb2 )`
	Query to auth2.ns.gin.ntt.net for ring.nlnog.net/DNSKEY
	Received 917 bytes from 69.36.249.35
	;; Response received from [69.36.249.35] 917 octets ;; HEADER SECTION ;; id = 50070 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (4 records) ring.nlnog.net. 900 IN DNSKEY ( 256 3 8 AwEAAcg4SKX2aD/mj12xgIxXsMJ4tWKZ2CUZSjmZTJYBQQUwX7FtROW8DrQbDV8VAQvLxzrqLTNH 0iJITPzg5vtLRB1Ano3Dh5JhnstXMXDTaZ/Fo4FkMWdhoWBDspCXRVjgWutGi2y0wXphagBal3yC Dzv4i3b3K87KMpJVFOyzYqiz ) ; keytag 65139 ring.nlnog.net. 900 IN DNSKEY ( 256 3 8 AwEAAcUOikoqaAXlNmWlDuuQYKhtAPC3KFfGDNH9fijxLiKONVV3kxFuugadr1eQQZDMRf/Z8xeP AA4EQnp9lrI/HeZ54qda8TYoWnqHVXo6fvzvO6Mu/CI3yzzgVDW1zHxhluAbA5MziC1zSD5bGYM4 whaq4qc9Wk/KDjdbMS4JR8Hp ) ; keytag 45046 ring.nlnog.net. 900 IN DNSKEY ( 257 3 8 AwEAAcykcQckvJ7sRnntoU5yT+PATVNIH/WJZJae+gw+visGuOrKrqF8KzCRUa+YiqV7UiI8g5Q7 d+yOR5CZIYjIh99eLpt7ePh10Hp5oZpCUZqb9jZFQZLqgfpby6vN6yin808JjzrWtxz597X8hyW7 kOvE79JP6mNnpe8O6MObQffj74hoHo14pWHFy2X3ojcPKzgRrwE5H2AkawWBTEp578knau6AnDDq cV7qvUEXozjA91d/oNZMfOzJj6+iE+g8N4Gjss0BnZ1eIJNUBngw2ZFKrbX2sWg0gsXbT1OleAME hStm38vm/r0XHL6zLVFB5mHjMVd1TpZhNxmrPdOr4ws= ) ; keytag 41746 ring.nlnog.net. 900 IN RRSIG ( DNSKEY 8 3 900 20260730000000 20260709000000 41746 ring.nlnog.net. jG7MgH3/50l3RSfWlU7s8dilF8xRiOBB6zZDdv0tr0OUuwzTGxsiNctPFH0Fb2n8BHEW3reqtR03 dpDEiaCpRyMn79L57nSo3E/YVvTGToxf14W5lV7nhW2eE7X9HXjFN/zB92cb8yTmNNov/BRf/zz/ Bf8Dj2l7zOdJ6a2rlHN4IS3lsCLyXbNJjiNkLXmISuAuKZH49DBzBSr20WHbQI4igFFyIE6mpprm nvSmTjPQpO1iUtzlWbgVcgCG6aguD1cGqjtkaDmlgh+OYcodrqnCujEj+5VTGPhxb029HUcyxrW2 PZrwHFuSUz4/SJJT2YHOHYWjABbostUoH4bydA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ring.nlnog.net
	`ring.nlnog.net. 900 IN DNSKEY ( 256 3 8 AwEAAcg4SKX2aD/mj12xgIxXsMJ4tWKZ2CUZSjmZTJYBQQUwX7FtROW8DrQbDV8VAQvLxzrqLTNH 0iJITPzg5vtLRB1Ano3Dh5JhnstXMXDTaZ/Fo4FkMWdhoWBDspCXRVjgWutGi2y0wXphagBal3yC Dzv4i3b3K87KMpJVFOyzYqiz ) ; keytag 65139`
	`ring.nlnog.net. 900 IN DNSKEY ( 256 3 8 AwEAAcUOikoqaAXlNmWlDuuQYKhtAPC3KFfGDNH9fijxLiKONVV3kxFuugadr1eQQZDMRf/Z8xeP AA4EQnp9lrI/HeZ54qda8TYoWnqHVXo6fvzvO6Mu/CI3yzzgVDW1zHxhluAbA5MziC1zSD5bGYM4 whaq4qc9Wk/KDjdbMS4JR8Hp ) ; keytag 45046`
	`ring.nlnog.net. 900 IN DNSKEY ( 257 3 8 AwEAAcykcQckvJ7sRnntoU5yT+PATVNIH/WJZJae+gw+visGuOrKrqF8KzCRUa+YiqV7UiI8g5Q7 d+yOR5CZIYjIh99eLpt7ePh10Hp5oZpCUZqb9jZFQZLqgfpby6vN6yin808JjzrWtxz597X8hyW7 kOvE79JP6mNnpe8O6MObQffj74hoHo14pWHFy2X3ojcPKzgRrwE5H2AkawWBTEp578knau6AnDDq cV7qvUEXozjA91d/oNZMfOzJj6+iE+g8N4Gjss0BnZ1eIJNUBngw2ZFKrbX2sWg0gsXbT1OleAME hStm38vm/r0XHL6zLVFB5mHjMVd1TpZhNxmrPdOr4ws= ) ; keytag 41746`
	DNSKEY=41746/SEP is now in the chain-of-trust
	DS=41746/SHA-256 verifies DNSKEY=41746/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ring.nlnog.net. 900 IN RRSIG ( DNSKEY 8 3 900 20260730000000 20260709000000 41746 ring.nlnog.net. jG7MgH3/50l3RSfWlU7s8dilF8xRiOBB6zZDdv0tr0OUuwzTGxsiNctPFH0Fb2n8BHEW3reqtR03 dpDEiaCpRyMn79L57nSo3E/YVvTGToxf14W5lV7nhW2eE7X9HXjFN/zB92cb8yTmNNov/BRf/zz/ Bf8Dj2l7zOdJ6a2rlHN4IS3lsCLyXbNJjiNkLXmISuAuKZH49DBzBSr20WHbQI4igFFyIE6mpprm nvSmTjPQpO1iUtzlWbgVcgCG6aguD1cGqjtkaDmlgh+OYcodrqnCujEj+5VTGPhxb029HUcyxrW2 PZrwHFuSUz4/SJJT2YHOHYWjABbostUoH4bydA== )`
	RRSIG=41746 and DNSKEY=41746/SEP verifies the DNSKEY RRset
	DNSKEY=65139 is now in the chain-of-trust
	DNSKEY=45046 is now in the chain-of-trust
	Query to auth5.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 116.51.22.180
	;; Response received from [116.51.22.180] 249 octets ;; HEADER SECTION ;; id = 16618 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260730000000 20260709000000 45046 ring.nlnog.net. e3Mir/3Ol2DDcwp8EqlqE1f5iJe9QkGoSfcqcUro1CGt3uVBWTmMWp17i6y5FHdXLv1M5gPuRn2r 8QqK+n+kOULJx1j1ZLZMC9MDAA3Bc3T9EfmC4VQpXbxf5KHYAbQbmRJIvGJ/IP76gRgk7qJ1Z97x azvE2vte358Vrw6Y2Is= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth5.ns.gin.ntt.net is authoritative for redpilllinpro01.ring.nlnog.net
	Query to auth5.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/DNSKEY
	Received 512 bytes from 116.51.22.180
	;; Response received from [116.51.22.180] 512 octets ;; HEADER SECTION ;; id = 64142 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ring.nlnog.net. 900 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1784607242 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 900 IN RRSIG ( SOA 8 3 3600 20260730000000 20260709000000 45046 ring.nlnog.net. T51MJHo41ePkiqkxHEe0bZSMTxhb1gAezDF3xMzC5vynvfefDRtjKZIE/URIfQVZx0zTcRZQAdhs AfMpJlVKzjrnspWLTCNQHcQDpaKCA+ILP5Bl3IsgpJsBZU2K263UMIhr6q8WOWgJZ52SC2wgWo71 KMenwH/aLK7k0tbUR6s= ) redpilllinpro01.ring.nlnog.net. 900 IN NSEC ( retarus01.ring.nlnog.net. A AAAA LOC SSHFP RRSIG NSEC ) redpilllinpro01.ring.nlnog.net. 900 IN RRSIG ( NSEC 8 4 900 20260730000000 20260709000000 45046 ring.nlnog.net. fmq4VDiOp/v8dS9IgRxs5MjqHQPJnZMIqZMNuo7LS4xaZLrcsVVSMdvBtJYOv2FIPtRwMoiSmbqp HAqmVUgczEZG+/l9o/9HiAPsmc2SoYxEoCRp3dsUPGHTcg1SENV6E+/z76OM3Q5vzPvpzpW+VtMn BU/KZytwnWG+bWymkOA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ring.nlnog.net zone
	Query to auth1.ns.gin.ntt.net for ring.nlnog.net/SOA
	Received 276 bytes from 129.250.35.229
	;; Response received from [129.250.35.229] 276 octets ;; HEADER SECTION ;; id = 30277 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1784607242 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260730000000 20260709000000 45046 ring.nlnog.net. T51MJHo41ePkiqkxHEe0bZSMTxhb1gAezDF3xMzC5vynvfefDRtjKZIE/URIfQVZx0zTcRZQAdhs AfMpJlVKzjrnspWLTCNQHcQDpaKCA+ILP5Bl3IsgpJsBZU2K263UMIhr6q8WOWgJZ52SC2wgWo71 KMenwH/aLK7k0tbUR6s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth3.ns.gin.ntt.net for ring.nlnog.net/SOA
	Received 276 bytes from 129.250.31.21
	;; Response received from [129.250.31.21] 276 octets ;; HEADER SECTION ;; id = 60363 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1784607242 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260730000000 20260709000000 45046 ring.nlnog.net. T51MJHo41ePkiqkxHEe0bZSMTxhb1gAezDF3xMzC5vynvfefDRtjKZIE/URIfQVZx0zTcRZQAdhs AfMpJlVKzjrnspWLTCNQHcQDpaKCA+ILP5Bl3IsgpJsBZU2K263UMIhr6q8WOWgJZ52SC2wgWo71 KMenwH/aLK7k0tbUR6s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth4.ns.gin.ntt.net for ring.nlnog.net/SOA
	Received 276 bytes from 213.130.47.21
	;; Response received from [213.130.47.21] 276 octets ;; HEADER SECTION ;; id = 16370 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1784607242 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260730000000 20260709000000 45046 ring.nlnog.net. T51MJHo41ePkiqkxHEe0bZSMTxhb1gAezDF3xMzC5vynvfefDRtjKZIE/URIfQVZx0zTcRZQAdhs AfMpJlVKzjrnspWLTCNQHcQDpaKCA+ILP5Bl3IsgpJsBZU2K263UMIhr6q8WOWgJZ52SC2wgWo71 KMenwH/aLK7k0tbUR6s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns.rodecker.nl for ring.nlnog.net/SOA
	Received 995 bytes from 78.47.208.123
	;; Response received from [78.47.208.123] 995 octets ;; HEADER SECTION ;; id = 1709 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1784607242 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260730000000 20260709000000 45046 ring.nlnog.net. T51MJHo41ePkiqkxHEe0bZSMTxhb1gAezDF3xMzC5vynvfefDRtjKZIE/URIfQVZx0zTcRZQAdhs AfMpJlVKzjrnspWLTCNQHcQDpaKCA+ILP5Bl3IsgpJsBZU2K263UMIhr6q8WOWgJZ52SC2wgWo71 KMenwH/aLK7k0tbUR6s= ) ;; AUTHORITY SECTION (8 records) ring.nlnog.net. 600 IN NS auth1.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth2.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth3.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth4.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth5.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS ns.rodecker.nl. ring.nlnog.net. 86400 IN NS ns01.infra.ring.nlnog.net. ring.nlnog.net. 86400 IN RRSIG ( NS 8 3 86400 20260730000000 20260709000000 45046 ring.nlnog.net. QouVpwgrgCNTDGNvqMHosqIafs8RXEXQt1iOYf//mqoHM7zUF1Fgbv26fYc4OuXyFkadAhpEI1mt 4SkjZMCiUaHWRrh8ClZgKllJbIHYi+UAIKBiPlp4Ue9/ey/KqM+VU9wt2OwkCxBZQEPP6vs/wRNB 9BZPsP/wf3rdKxZopxo= ) ;; ADDITIONAL SECTION (5 records) ns01.infra.ring.nlnog.net. 600 IN A 185.107.224.27 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( A 8 5 600 20260730000000 20260709000000 45046 ring.nlnog.net. tmitit5IPBeSIDWXfSbhWCFv4wjs8cqcELD7+638OQiQSSd0I/s4E6PtV7Mg8Yw+C45hICs6+/EL X4R9y1jCa9r8XWuv5RleKx8dNk2DUNluZmVplOkSvSOl/O7lOag8nCLe9zzonH44h53ot/Bn4k6D 6wVXUtp/svw9ic+9yQI= ) ns01.infra.ring.nlnog.net. 600 IN AAAA 2a00:f10:400:2:4b3:4aff:fe00:707 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( AAAA 8 5 600 20260730000000 20260709000000 45046 ring.nlnog.net. MyPGpSF9fzAR0fRwwcOD4/3UhIi+FawwNE6iI/kMF1/nlZjTpBXHH0kTHbT2SlurYlSipBapHvvh i5TUHws04B5fw5XQUEN5zbhanwXANqYVX7yQIsw4u/UivLZU94kP4OOXoM97vbLQyBawPDWDyrtS p8L5QRMUbT3Kxyx+pnM= ) ;; { "EDNS-VERSION": 0 }
	Query to auth2.ns.gin.ntt.net for ring.nlnog.net/SOA
	Received 276 bytes from 69.36.249.35
	;; Response received from [69.36.249.35] 276 octets ;; HEADER SECTION ;; id = 59449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1784607242 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260730000000 20260709000000 45046 ring.nlnog.net. T51MJHo41ePkiqkxHEe0bZSMTxhb1gAezDF3xMzC5vynvfefDRtjKZIE/URIfQVZx0zTcRZQAdhs AfMpJlVKzjrnspWLTCNQHcQDpaKCA+ILP5Bl3IsgpJsBZU2K263UMIhr6q8WOWgJZ52SC2wgWo71 KMenwH/aLK7k0tbUR6s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns01.infra.ring.nlnog.net for ring.nlnog.net/SOA
	Received 276 bytes from 185.107.224.27
	;; Response received from [185.107.224.27] 276 octets ;; HEADER SECTION ;; id = 44313 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1784607242 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260730000000 20260709000000 45046 ring.nlnog.net. T51MJHo41ePkiqkxHEe0bZSMTxhb1gAezDF3xMzC5vynvfefDRtjKZIE/URIfQVZx0zTcRZQAdhs AfMpJlVKzjrnspWLTCNQHcQDpaKCA+ILP5Bl3IsgpJsBZU2K263UMIhr6q8WOWgJZ52SC2wgWo71 KMenwH/aLK7k0tbUR6s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth5.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	redpilllinpro01.ring.nlnog.net A RR has value 87.238.49.250
	Found 1 RRSIGs over A RRset
	`redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260730000000 20260709000000 45046 ring.nlnog.net. e3Mir/3Ol2DDcwp8EqlqE1f5iJe9QkGoSfcqcUro1CGt3uVBWTmMWp17i6y5FHdXLv1M5gPuRn2r 8QqK+n+kOULJx1j1ZLZMC9MDAA3Bc3T9EfmC4VQpXbxf5KHYAbQbmRJIvGJ/IP76gRgk7qJ1Z97x azvE2vte358Vrw6Y2Is= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to ns.rodecker.nl for redpilllinpro01.ring.nlnog.net/A
	Received 979 bytes from 78.47.208.123
	;; Response received from [78.47.208.123] 979 octets ;; HEADER SECTION ;; id = 721 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260730000000 20260709000000 45046 ring.nlnog.net. e3Mir/3Ol2DDcwp8EqlqE1f5iJe9QkGoSfcqcUro1CGt3uVBWTmMWp17i6y5FHdXLv1M5gPuRn2r 8QqK+n+kOULJx1j1ZLZMC9MDAA3Bc3T9EfmC4VQpXbxf5KHYAbQbmRJIvGJ/IP76gRgk7qJ1Z97x azvE2vte358Vrw6Y2Is= ) ;; AUTHORITY SECTION (8 records) ring.nlnog.net. 600 IN NS auth1.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth2.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth3.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth4.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth5.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS ns.rodecker.nl. ring.nlnog.net. 86400 IN NS ns01.infra.ring.nlnog.net. ring.nlnog.net. 86400 IN RRSIG ( NS 8 3 86400 20260730000000 20260709000000 45046 ring.nlnog.net. QouVpwgrgCNTDGNvqMHosqIafs8RXEXQt1iOYf//mqoHM7zUF1Fgbv26fYc4OuXyFkadAhpEI1mt 4SkjZMCiUaHWRrh8ClZgKllJbIHYi+UAIKBiPlp4Ue9/ey/KqM+VU9wt2OwkCxBZQEPP6vs/wRNB 9BZPsP/wf3rdKxZopxo= ) ;; ADDITIONAL SECTION (5 records) ns01.infra.ring.nlnog.net. 600 IN A 185.107.224.27 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( A 8 5 600 20260730000000 20260709000000 45046 ring.nlnog.net. tmitit5IPBeSIDWXfSbhWCFv4wjs8cqcELD7+638OQiQSSd0I/s4E6PtV7Mg8Yw+C45hICs6+/EL X4R9y1jCa9r8XWuv5RleKx8dNk2DUNluZmVplOkSvSOl/O7lOag8nCLe9zzonH44h53ot/Bn4k6D 6wVXUtp/svw9ic+9yQI= ) ns01.infra.ring.nlnog.net. 600 IN AAAA 2a00:f10:400:2:4b3:4aff:fe00:707 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( AAAA 8 5 600 20260730000000 20260709000000 45046 ring.nlnog.net. MyPGpSF9fzAR0fRwwcOD4/3UhIi+FawwNE6iI/kMF1/nlZjTpBXHH0kTHbT2SlurYlSipBapHvvh i5TUHws04B5fw5XQUEN5zbhanwXANqYVX7yQIsw4u/UivLZU94kP4OOXoM97vbLQyBawPDWDyrtS p8L5QRMUbT3Kxyx+pnM= ) ;; { "EDNS-VERSION": 0 }
	ns.rodecker.nl is authoritative for redpilllinpro01.ring.nlnog.net
	Query to auth3.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/DNSKEY
	Received 512 bytes from 129.250.31.21
	;; Response received from [129.250.31.21] 512 octets ;; HEADER SECTION ;; id = 38900 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ring.nlnog.net. 900 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1784607242 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 900 IN RRSIG ( SOA 8 3 3600 20260730000000 20260709000000 45046 ring.nlnog.net. T51MJHo41ePkiqkxHEe0bZSMTxhb1gAezDF3xMzC5vynvfefDRtjKZIE/URIfQVZx0zTcRZQAdhs AfMpJlVKzjrnspWLTCNQHcQDpaKCA+ILP5Bl3IsgpJsBZU2K263UMIhr6q8WOWgJZ52SC2wgWo71 KMenwH/aLK7k0tbUR6s= ) redpilllinpro01.ring.nlnog.net. 900 IN NSEC ( retarus01.ring.nlnog.net. A AAAA LOC SSHFP RRSIG NSEC ) redpilllinpro01.ring.nlnog.net. 900 IN RRSIG ( NSEC 8 4 900 20260730000000 20260709000000 45046 ring.nlnog.net. fmq4VDiOp/v8dS9IgRxs5MjqHQPJnZMIqZMNuo7LS4xaZLrcsVVSMdvBtJYOv2FIPtRwMoiSmbqp HAqmVUgczEZG+/l9o/9HiAPsmc2SoYxEoCRp3dsUPGHTcg1SENV6E+/z76OM3Q5vzPvpzpW+VtMn BU/KZytwnWG+bWymkOA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ring.nlnog.net zone
	Query to ns.rodecker.nl for redpilllinpro01.ring.nlnog.net/A
	redpilllinpro01.ring.nlnog.net A RR has value 87.238.49.250
	Found 1 RRSIGs over A RRset
	`redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260730000000 20260709000000 45046 ring.nlnog.net. e3Mir/3Ol2DDcwp8EqlqE1f5iJe9QkGoSfcqcUro1CGt3uVBWTmMWp17i6y5FHdXLv1M5gPuRn2r 8QqK+n+kOULJx1j1ZLZMC9MDAA3Bc3T9EfmC4VQpXbxf5KHYAbQbmRJIvGJ/IP76gRgk7qJ1Z97x azvE2vte358Vrw6Y2Is= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to auth3.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 129.250.31.21
	;; Response received from [129.250.31.21] 249 octets ;; HEADER SECTION ;; id = 24078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260730000000 20260709000000 45046 ring.nlnog.net. e3Mir/3Ol2DDcwp8EqlqE1f5iJe9QkGoSfcqcUro1CGt3uVBWTmMWp17i6y5FHdXLv1M5gPuRn2r 8QqK+n+kOULJx1j1ZLZMC9MDAA3Bc3T9EfmC4VQpXbxf5KHYAbQbmRJIvGJ/IP76gRgk7qJ1Z97x azvE2vte358Vrw6Y2Is= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth3.ns.gin.ntt.net is authoritative for redpilllinpro01.ring.nlnog.net
	Query to auth1.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/DNSKEY
	Received 512 bytes from 129.250.35.229
	;; Response received from [129.250.35.229] 512 octets ;; HEADER SECTION ;; id = 2023 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ring.nlnog.net. 900 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1784607242 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 900 IN RRSIG ( SOA 8 3 3600 20260730000000 20260709000000 45046 ring.nlnog.net. T51MJHo41ePkiqkxHEe0bZSMTxhb1gAezDF3xMzC5vynvfefDRtjKZIE/URIfQVZx0zTcRZQAdhs AfMpJlVKzjrnspWLTCNQHcQDpaKCA+ILP5Bl3IsgpJsBZU2K263UMIhr6q8WOWgJZ52SC2wgWo71 KMenwH/aLK7k0tbUR6s= ) redpilllinpro01.ring.nlnog.net. 900 IN NSEC ( retarus01.ring.nlnog.net. A AAAA LOC SSHFP RRSIG NSEC ) redpilllinpro01.ring.nlnog.net. 900 IN RRSIG ( NSEC 8 4 900 20260730000000 20260709000000 45046 ring.nlnog.net. fmq4VDiOp/v8dS9IgRxs5MjqHQPJnZMIqZMNuo7LS4xaZLrcsVVSMdvBtJYOv2FIPtRwMoiSmbqp HAqmVUgczEZG+/l9o/9HiAPsmc2SoYxEoCRp3dsUPGHTcg1SENV6E+/z76OM3Q5vzPvpzpW+VtMn BU/KZytwnWG+bWymkOA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ring.nlnog.net zone
	Query to auth3.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	redpilllinpro01.ring.nlnog.net A RR has value 87.238.49.250
	Found 1 RRSIGs over A RRset
	`redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260730000000 20260709000000 45046 ring.nlnog.net. e3Mir/3Ol2DDcwp8EqlqE1f5iJe9QkGoSfcqcUro1CGt3uVBWTmMWp17i6y5FHdXLv1M5gPuRn2r 8QqK+n+kOULJx1j1ZLZMC9MDAA3Bc3T9EfmC4VQpXbxf5KHYAbQbmRJIvGJ/IP76gRgk7qJ1Z97x azvE2vte358Vrw6Y2Is= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to auth2.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 69.36.249.35
	;; Response received from [69.36.249.35] 249 octets ;; HEADER SECTION ;; id = 56400 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260730000000 20260709000000 45046 ring.nlnog.net. e3Mir/3Ol2DDcwp8EqlqE1f5iJe9QkGoSfcqcUro1CGt3uVBWTmMWp17i6y5FHdXLv1M5gPuRn2r 8QqK+n+kOULJx1j1ZLZMC9MDAA3Bc3T9EfmC4VQpXbxf5KHYAbQbmRJIvGJ/IP76gRgk7qJ1Z97x azvE2vte358Vrw6Y2Is= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth2.ns.gin.ntt.net is authoritative for redpilllinpro01.ring.nlnog.net
	Query to auth1.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/DNSKEY
	Found RRSIG signed by ring.nlnog.net zone
	Query to auth2.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	redpilllinpro01.ring.nlnog.net A RR has value 87.238.49.250
	Found 1 RRSIGs over A RRset
	`redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260730000000 20260709000000 45046 ring.nlnog.net. e3Mir/3Ol2DDcwp8EqlqE1f5iJe9QkGoSfcqcUro1CGt3uVBWTmMWp17i6y5FHdXLv1M5gPuRn2r 8QqK+n+kOULJx1j1ZLZMC9MDAA3Bc3T9EfmC4VQpXbxf5KHYAbQbmRJIvGJ/IP76gRgk7qJ1Z97x azvE2vte358Vrw6Y2Is= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to auth1.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 129.250.35.229
	;; Response received from [129.250.35.229] 249 octets ;; HEADER SECTION ;; id = 59337 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260730000000 20260709000000 45046 ring.nlnog.net. e3Mir/3Ol2DDcwp8EqlqE1f5iJe9QkGoSfcqcUro1CGt3uVBWTmMWp17i6y5FHdXLv1M5gPuRn2r 8QqK+n+kOULJx1j1ZLZMC9MDAA3Bc3T9EfmC4VQpXbxf5KHYAbQbmRJIvGJ/IP76gRgk7qJ1Z97x azvE2vte358Vrw6Y2Is= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth1.ns.gin.ntt.net is authoritative for redpilllinpro01.ring.nlnog.net
	Query to ns01.infra.ring.nlnog.net for redpilllinpro01.ring.nlnog.net/DNSKEY
	Received 512 bytes from 185.107.224.27
	;; Response received from [185.107.224.27] 512 octets ;; HEADER SECTION ;; id = 55442 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ring.nlnog.net. 900 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1784607242 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 900 IN RRSIG ( SOA 8 3 3600 20260730000000 20260709000000 45046 ring.nlnog.net. T51MJHo41ePkiqkxHEe0bZSMTxhb1gAezDF3xMzC5vynvfefDRtjKZIE/URIfQVZx0zTcRZQAdhs AfMpJlVKzjrnspWLTCNQHcQDpaKCA+ILP5Bl3IsgpJsBZU2K263UMIhr6q8WOWgJZ52SC2wgWo71 KMenwH/aLK7k0tbUR6s= ) redpilllinpro01.ring.nlnog.net. 900 IN NSEC ( retarus01.ring.nlnog.net. A AAAA LOC SSHFP RRSIG NSEC ) redpilllinpro01.ring.nlnog.net. 900 IN RRSIG ( NSEC 8 4 900 20260730000000 20260709000000 45046 ring.nlnog.net. fmq4VDiOp/v8dS9IgRxs5MjqHQPJnZMIqZMNuo7LS4xaZLrcsVVSMdvBtJYOv2FIPtRwMoiSmbqp HAqmVUgczEZG+/l9o/9HiAPsmc2SoYxEoCRp3dsUPGHTcg1SENV6E+/z76OM3Q5vzPvpzpW+VtMn BU/KZytwnWG+bWymkOA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ring.nlnog.net zone
	Query to auth1.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	redpilllinpro01.ring.nlnog.net A RR has value 87.238.49.250
	Found 1 RRSIGs over A RRset
	`redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260730000000 20260709000000 45046 ring.nlnog.net. e3Mir/3Ol2DDcwp8EqlqE1f5iJe9QkGoSfcqcUro1CGt3uVBWTmMWp17i6y5FHdXLv1M5gPuRn2r 8QqK+n+kOULJx1j1ZLZMC9MDAA3Bc3T9EfmC4VQpXbxf5KHYAbQbmRJIvGJ/IP76gRgk7qJ1Z97x azvE2vte358Vrw6Y2Is= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to ns01.infra.ring.nlnog.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 185.107.224.27
	;; Response received from [185.107.224.27] 249 octets ;; HEADER SECTION ;; id = 40864 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260730000000 20260709000000 45046 ring.nlnog.net. e3Mir/3Ol2DDcwp8EqlqE1f5iJe9QkGoSfcqcUro1CGt3uVBWTmMWp17i6y5FHdXLv1M5gPuRn2r 8QqK+n+kOULJx1j1ZLZMC9MDAA3Bc3T9EfmC4VQpXbxf5KHYAbQbmRJIvGJ/IP76gRgk7qJ1Z97x azvE2vte358Vrw6Y2Is= ) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns01.infra.ring.nlnog.net is authoritative for redpilllinpro01.ring.nlnog.net
	Query to auth4.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/DNSKEY
	Received 512 bytes from 213.130.47.21
	;; Response received from [213.130.47.21] 512 octets ;; HEADER SECTION ;; id = 13884 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ring.nlnog.net. 900 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1784607242 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 900 IN RRSIG ( SOA 8 3 3600 20260730000000 20260709000000 45046 ring.nlnog.net. T51MJHo41ePkiqkxHEe0bZSMTxhb1gAezDF3xMzC5vynvfefDRtjKZIE/URIfQVZx0zTcRZQAdhs AfMpJlVKzjrnspWLTCNQHcQDpaKCA+ILP5Bl3IsgpJsBZU2K263UMIhr6q8WOWgJZ52SC2wgWo71 KMenwH/aLK7k0tbUR6s= ) redpilllinpro01.ring.nlnog.net. 900 IN NSEC ( retarus01.ring.nlnog.net. A AAAA LOC SSHFP RRSIG NSEC ) redpilllinpro01.ring.nlnog.net. 900 IN RRSIG ( NSEC 8 4 900 20260730000000 20260709000000 45046 ring.nlnog.net. fmq4VDiOp/v8dS9IgRxs5MjqHQPJnZMIqZMNuo7LS4xaZLrcsVVSMdvBtJYOv2FIPtRwMoiSmbqp HAqmVUgczEZG+/l9o/9HiAPsmc2SoYxEoCRp3dsUPGHTcg1SENV6E+/z76OM3Q5vzPvpzpW+VtMn BU/KZytwnWG+bWymkOA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ring.nlnog.net zone
	Query to ns01.infra.ring.nlnog.net for redpilllinpro01.ring.nlnog.net/A
	redpilllinpro01.ring.nlnog.net A RR has value 87.238.49.250
	Found 1 RRSIGs over A RRset
	`redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260730000000 20260709000000 45046 ring.nlnog.net. e3Mir/3Ol2DDcwp8EqlqE1f5iJe9QkGoSfcqcUro1CGt3uVBWTmMWp17i6y5FHdXLv1M5gPuRn2r 8QqK+n+kOULJx1j1ZLZMC9MDAA3Bc3T9EfmC4VQpXbxf5KHYAbQbmRJIvGJ/IP76gRgk7qJ1Z97x azvE2vte358Vrw6Y2Is= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to auth4.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 213.130.47.21
	;; Response received from [213.130.47.21] 249 octets ;; HEADER SECTION ;; id = 39618 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260730000000 20260709000000 45046 ring.nlnog.net. e3Mir/3Ol2DDcwp8EqlqE1f5iJe9QkGoSfcqcUro1CGt3uVBWTmMWp17i6y5FHdXLv1M5gPuRn2r 8QqK+n+kOULJx1j1ZLZMC9MDAA3Bc3T9EfmC4VQpXbxf5KHYAbQbmRJIvGJ/IP76gRgk7qJ1Z97x azvE2vte358Vrw6Y2Is= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth4.ns.gin.ntt.net is authoritative for redpilllinpro01.ring.nlnog.net
	Query to auth4.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/DNSKEY
	Found RRSIG signed by ring.nlnog.net zone
	Query to auth4.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	redpilllinpro01.ring.nlnog.net A RR has value 87.238.49.250
	Found 1 RRSIGs over A RRset
	`redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260730000000 20260709000000 45046 ring.nlnog.net. e3Mir/3Ol2DDcwp8EqlqE1f5iJe9QkGoSfcqcUro1CGt3uVBWTmMWp17i6y5FHdXLv1M5gPuRn2r 8QqK+n+kOULJx1j1ZLZMC9MDAA3Bc3T9EfmC4VQpXbxf5KHYAbQbmRJIvGJ/IP76gRgk7qJ1Z97x azvE2vte358Vrw6Y2Is= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test redpilllinpro01.ring.nlnog.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: