DNSSEC Debugger - redpilllinpro01.ring.nlnog.net

Domain Name:

Time: 2026-01-16 06:44:45 UTC

Analyzing DNSSEC problems for redpilllinpro01.ring.nlnog.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1139 octets ;; HEADER SECTION ;; id = 37926 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to i.root-servers.net for redpilllinpro01.ring.nlnog.net/A
	Received 1193 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1193 octets ;; HEADER SECTION ;; id = 33834 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . LsJRos7mtszWtDJEBsVp1btqcXBcSK2Ygwu0Wx+syW1AU9Ic8Lqnm6pahXzuaGo2d8YqZP2C5FO2 4/qFWQc7+IWD4ofGGmsh+bXhv80AHpSiBWNnnaeH1pQvv0rWpoR5tBjzMi0Kc/BgHM5KgrZN7zj0 DkQL58ve2ZDTE2oJA7sFOjQ2OStGcusDGeIb4abCmOZvDDcwbaVDfyjcCxVxzLYVgpn3mMe9RXZL 3/qgiCxTqB5gnowF3YPJDDahNt/OYc4FTCC1fmvt7bt3hJyax9YmaKEDeN9ErAe5c+CR8J2dS3Fe wbfW+OtU0OqudYMVhV45+30iF2Qgre06uVWdew== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for net/DNSKEY
	Received 1160 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1160 octets ;; HEADER SECTION ;; id = 51050 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . LsJRos7mtszWtDJEBsVp1btqcXBcSK2Ygwu0Wx+syW1AU9Ic8Lqnm6pahXzuaGo2d8YqZP2C5FO2 4/qFWQc7+IWD4ofGGmsh+bXhv80AHpSiBWNnnaeH1pQvv0rWpoR5tBjzMi0Kc/BgHM5KgrZN7zj0 DkQL58ve2ZDTE2oJA7sFOjQ2OStGcusDGeIb4abCmOZvDDcwbaVDfyjcCxVxzLYVgpn3mMe9RXZL 3/qgiCxTqB5gnowF3YPJDDahNt/OYc4FTCC1fmvt7bt3hJyax9YmaKEDeN9ErAe5c+CR8J2dS3Fe wbfW+OtU0OqudYMVhV45+30iF2Qgre06uVWdew== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to b.root-servers.net for net/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 46305 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . LsJRos7mtszWtDJEBsVp1btqcXBcSK2Ygwu0Wx+syW1AU9Ic8Lqnm6pahXzuaGo2d8YqZP2C5FO2 4/qFWQc7+IWD4ofGGmsh+bXhv80AHpSiBWNnnaeH1pQvv0rWpoR5tBjzMi0Kc/BgHM5KgrZN7zj0 DkQL58ve2ZDTE2oJA7sFOjQ2OStGcusDGeIb4abCmOZvDDcwbaVDfyjcCxVxzLYVgpn3mMe9RXZL 3/qgiCxTqB5gnowF3YPJDDahNt/OYc4FTCC1fmvt7bt3hJyax9YmaKEDeN9ErAe5c+CR8J2dS3Fe wbfW+OtU0OqudYMVhV45+30iF2Qgre06uVWdew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20260129050000 20260116040000 21831 . LsJRos7mtszWtDJEBsVp1btqcXBcSK2Ygwu0Wx+syW1AU9Ic8Lqnm6pahXzuaGo2d8YqZP2C5FO2 4/qFWQc7+IWD4ofGGmsh+bXhv80AHpSiBWNnnaeH1pQvv0rWpoR5tBjzMi0Kc/BgHM5KgrZN7zj0 DkQL58ve2ZDTE2oJA7sFOjQ2OStGcusDGeIb4abCmOZvDDcwbaVDfyjcCxVxzLYVgpn3mMe9RXZL 3/qgiCxTqB5gnowF3YPJDDahNt/OYc4FTCC1fmvt7bt3hJyax9YmaKEDeN9ErAe5c+CR8J2dS3Fe wbfW+OtU0OqudYMVhV45+30iF2Qgre06uVWdew== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to c.gtld-servers.net for net/DNSKEY
	Received 371 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 371 octets ;; HEADER SECTION ;; id = 56283 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (4 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 n1/xo9dFf3KM3jYGnOXOzhVK5LsgTqM4BnTeyBLml4GNNYgs/Wmr3YA8pvodMthc1wD4nH7wL5vY Tag4cROQJg== ) ; keytag 17133 net. 86400 IN DNSKEY ( 256 3 13 BN7nE5EGXvYfX/r9qihm5MU9BR6KTHLb/TcRXIXZcCwDj24ftYx+nRW6ca9/wHZ3NnOZ5uSG/GRE drzpVVepUg== ) ; keytag 44109 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260122151035 20260107150535 37331 net. t984o+DLwBtXVPt5s/6tmdsut2847DIOZS/0rJCiKbFeFWqYlO9MWCBJWnL7gAHDOI/+SnC+DBZG 0nvN6mmBEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 n1/xo9dFf3KM3jYGnOXOzhVK5LsgTqM4BnTeyBLml4GNNYgs/Wmr3YA8pvodMthc1wD4nH7wL5vY Tag4cROQJg== ) ; keytag 17133`
	`net. 86400 IN DNSKEY ( 256 3 13 BN7nE5EGXvYfX/r9qihm5MU9BR6KTHLb/TcRXIXZcCwDj24ftYx+nRW6ca9/wHZ3NnOZ5uSG/GRE drzpVVepUg== ) ; keytag 44109`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260122151035 20260107150535 37331 net. t984o+DLwBtXVPt5s/6tmdsut2847DIOZS/0rJCiKbFeFWqYlO9MWCBJWnL7gAHDOI/+SnC+DBZG 0nvN6mmBEA== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=17133 is now in the chain-of-trust
	DNSKEY=44109 is now in the chain-of-trust
	Query to i.gtld-servers.net for redpilllinpro01.ring.nlnog.net/A
	Received 259 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 259 octets ;; HEADER SECTION ;; id = 22643 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nlnog.net. 172800 IN NS ns1.desec.io. nlnog.net. 172800 IN NS ns2.desec.org. nlnog.net. 86400 IN DS ( 49892 13 2 57bfdd7cb0fe9f4f52dc7ba5bb564ef5091353a747fd8c87da5313885bdc4ee3 ) nlnog.net. 86400 IN RRSIG ( DS 13 2 86400 20260121032902 20260114021902 17133 net. VRhDA91JHa5r+DHzPIltpl25ZJV4lQstcnTDvAXd3S/uca5LM42tr4CSKjwR9t92K3RArMMbDlel YgimPd48NA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to j.gtld-servers.net for nlnog.net/DNSKEY
	Received 238 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 238 octets ;; HEADER SECTION ;; id = 32025 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nlnog.net. 172800 IN NS ns1.desec.io. nlnog.net. 172800 IN NS ns2.desec.org. nlnog.net. 86400 IN DS ( 49892 13 2 57bfdd7cb0fe9f4f52dc7ba5bb564ef5091353a747fd8c87da5313885bdc4ee3 ) nlnog.net. 86400 IN RRSIG ( DS 13 2 86400 20260121032902 20260114021902 17133 net. VRhDA91JHa5r+DHzPIltpl25ZJV4lQstcnTDvAXd3S/uca5LM42tr4CSKjwR9t92K3RArMMbDlel YgimPd48NA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone nlnog.net

nlnog.net

	Checking DS between net and nlnog.net
	Query to e.gtld-servers.net for nlnog.net/DS
	Received 1077 bytes from 192.12.94.30
	;; Response received from [192.12.94.30] 1077 octets ;; HEADER SECTION ;; id = 18846 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nlnog.net. IN DS ;; ANSWER SECTION (2 records) nlnog.net. 86400 IN DS ( 49892 13 2 57bfdd7cb0fe9f4f52dc7ba5bb564ef5091353a747fd8c87da5313885bdc4ee3 ) nlnog.net. 86400 IN RRSIG ( DS 13 2 86400 20260121032902 20260114021902 17133 net. VRhDA91JHa5r+DHzPIltpl25ZJV4lQstcnTDvAXd3S/uca5LM42tr4CSKjwR9t92K3RArMMbDlel YgimPd48NA== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20260120032842 20260113021842 17133 net. OXuco6Gn9Gncx9e+WPd8EUWolsdRbNS6Zlwp8oZs0AdhkvZhkwzYn4bsTmpEsURxEUm33Qhhun2x BPAlOdEfAg== ) ;; ADDITIONAL SECTION (27 records) g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nlnog.net in the net zone
	DS=49892/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nlnog.net. 86400 IN RRSIG ( DS 13 2 86400 20260121032902 20260114021902 17133 net. VRhDA91JHa5r+DHzPIltpl25ZJV4lQstcnTDvAXd3S/uca5LM42tr4CSKjwR9t92K3RArMMbDlel YgimPd48NA== )`
	RRSIG=17133 and DNSKEY=17133 verifies the DS RRset
	DS=49892/SHA-256 is now in the chain-of-trust
	`nlnog.net. 86400 IN DS ( 49892 13 2 57bfdd7cb0fe9f4f52dc7ba5bb564ef5091353a747fd8c87da5313885bdc4ee3 )`
	Query to ns1.desec.io for nlnog.net/DNSKEY
	Received 223 bytes from 45.54.76.1
	;; Response received from [45.54.76.1] 223 octets ;; HEADER SECTION ;; id = 7119 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nlnog.net. IN DNSKEY ;; ANSWER SECTION (2 records) nlnog.net. 3600 IN DNSKEY ( 257 3 13 izfY4vFTRUE0sNSg1octHZ2nFGxPBt9tKkzd8huWictxx46LLjUz6VRK4DHkOKzizdDXjbB7xrCE PIu7L+oEkg== ) ; keytag 49892 nlnog.net. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260129000000 20260108000000 49892 nlnog.net. L6HziJZXzKRUKEaKlFDN5sEZFNHV6/VUfsoOe74BMojuPGZ5unnwaNiWjXSlgyiCftm5l86aj/nc gm6soDP61g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for nlnog.net
	`nlnog.net. 3600 IN DNSKEY ( 257 3 13 izfY4vFTRUE0sNSg1octHZ2nFGxPBt9tKkzd8huWictxx46LLjUz6VRK4DHkOKzizdDXjbB7xrCE PIu7L+oEkg== ) ; keytag 49892`
	DNSKEY=49892/SEP is now in the chain-of-trust
	DS=49892/SHA-256 verifies DNSKEY=49892/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nlnog.net. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260129000000 20260108000000 49892 nlnog.net. L6HziJZXzKRUKEaKlFDN5sEZFNHV6/VUfsoOe74BMojuPGZ5unnwaNiWjXSlgyiCftm5l86aj/nc gm6soDP61g== )`
	RRSIG=49892 and DNSKEY=49892/SEP verifies the DNSKEY RRset
	Query to ns1.desec.io for redpilllinpro01.ring.nlnog.net/A
	Received 420 bytes from 45.54.76.1
	;; Response received from [45.54.76.1] 420 octets ;; HEADER SECTION ;; id = 43641 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ring.nlnog.net. 86400 IN NS auth1.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth2.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth3.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth4.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth5.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS ns.rodecker.nl. ring.nlnog.net. 86400 IN NS ns01.infra.ring.nlnog.net. ring.nlnog.net. 86400 IN DS ( 41746 8 2 0b5713506eecd741b24486ecdc44f4627eea258605b8f4a27cc031c41b26acb2 ) ring.nlnog.net. 86400 IN RRSIG ( DS 13 3 86400 20260129000000 20260108000000 49892 nlnog.net. 4vbVM7U7WbWhVfYzzhCOWumBjsY6SLns1kKydTOSh29y4IYVbJFeFE0ImoNhrzPJb9YtjHMQpiRm n2EVsS4H8w== ) ;; ADDITIONAL SECTION (3 records) ns01.infra.ring.nlnog.net. 3600 IN A 185.107.224.27 ns01.infra.ring.nlnog.net. 3600 IN AAAA 2a00:f10:400:2:4b3:4aff:fe00:707 ;; { "EDNS-VERSION": 0 }
	Query to ns1.desec.io for ring.nlnog.net/DNSKEY
	Received 404 bytes from 45.54.76.1
	;; Response received from [45.54.76.1] 404 octets ;; HEADER SECTION ;; id = 12876 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ring.nlnog.net. 86400 IN NS auth1.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth2.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth3.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth4.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth5.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS ns.rodecker.nl. ring.nlnog.net. 86400 IN NS ns01.infra.ring.nlnog.net. ring.nlnog.net. 86400 IN DS ( 41746 8 2 0b5713506eecd741b24486ecdc44f4627eea258605b8f4a27cc031c41b26acb2 ) ring.nlnog.net. 86400 IN RRSIG ( DS 13 3 86400 20260129000000 20260108000000 49892 nlnog.net. 4vbVM7U7WbWhVfYzzhCOWumBjsY6SLns1kKydTOSh29y4IYVbJFeFE0ImoNhrzPJb9YtjHMQpiRm n2EVsS4H8w== ) ;; ADDITIONAL SECTION (3 records) ns01.infra.ring.nlnog.net. 3600 IN A 185.107.224.27 ns01.infra.ring.nlnog.net. 3600 IN AAAA 2a00:f10:400:2:4b3:4aff:fe00:707 ;; { "EDNS-VERSION": 0 }
	Found child zone ring.nlnog.net

ring.nlnog.net

	Checking DS between nlnog.net and ring.nlnog.net
	Query to ns2.desec.org for ring.nlnog.net/DS
	Received 196 bytes from 157.53.224.1
	;; Response received from [157.53.224.1] 196 octets ;; HEADER SECTION ;; id = 12634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN DS ;; ANSWER SECTION (2 records) ring.nlnog.net. 86400 IN DS ( 41746 8 2 0b5713506eecd741b24486ecdc44f4627eea258605b8f4a27cc031c41b26acb2 ) ring.nlnog.net. 86400 IN RRSIG ( DS 13 3 86400 20260129000000 20260108000000 49892 nlnog.net. 4vbVM7U7WbWhVfYzzhCOWumBjsY6SLns1kKydTOSh29y4IYVbJFeFE0ImoNhrzPJb9YtjHMQpiRm n2EVsS4H8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ring.nlnog.net in the nlnog.net zone
	DS=41746/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ring.nlnog.net. 86400 IN RRSIG ( DS 13 3 86400 20260129000000 20260108000000 49892 nlnog.net. 4vbVM7U7WbWhVfYzzhCOWumBjsY6SLns1kKydTOSh29y4IYVbJFeFE0ImoNhrzPJb9YtjHMQpiRm n2EVsS4H8w== )`
	RRSIG=49892 and DNSKEY=49892/SEP verifies the DS RRset
	DS=41746/SHA-256 is now in the chain-of-trust
	`ring.nlnog.net. 86400 IN DS ( 41746 8 2 0b5713506eecd741b24486ecdc44f4627eea258605b8f4a27cc031c41b26acb2 )`
	Query to ns.rodecker.nl for ring.nlnog.net/DNSKEY
	Received 917 bytes from 78.47.208.123
	;; Response received from [78.47.208.123] 917 octets ;; HEADER SECTION ;; id = 54989 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (4 records) ring.nlnog.net. 900 IN DNSKEY ( 256 3 8 AwEAAcUOikoqaAXlNmWlDuuQYKhtAPC3KFfGDNH9fijxLiKONVV3kxFuugadr1eQQZDMRf/Z8xeP AA4EQnp9lrI/HeZ54qda8TYoWnqHVXo6fvzvO6Mu/CI3yzzgVDW1zHxhluAbA5MziC1zSD5bGYM4 whaq4qc9Wk/KDjdbMS4JR8Hp ) ; keytag 45046 ring.nlnog.net. 900 IN DNSKEY ( 256 3 8 AwEAAcg4SKX2aD/mj12xgIxXsMJ4tWKZ2CUZSjmZTJYBQQUwX7FtROW8DrQbDV8VAQvLxzrqLTNH 0iJITPzg5vtLRB1Ano3Dh5JhnstXMXDTaZ/Fo4FkMWdhoWBDspCXRVjgWutGi2y0wXphagBal3yC Dzv4i3b3K87KMpJVFOyzYqiz ) ; keytag 65139 ring.nlnog.net. 900 IN DNSKEY ( 257 3 8 AwEAAcykcQckvJ7sRnntoU5yT+PATVNIH/WJZJae+gw+visGuOrKrqF8KzCRUa+YiqV7UiI8g5Q7 d+yOR5CZIYjIh99eLpt7ePh10Hp5oZpCUZqb9jZFQZLqgfpby6vN6yin808JjzrWtxz597X8hyW7 kOvE79JP6mNnpe8O6MObQffj74hoHo14pWHFy2X3ojcPKzgRrwE5H2AkawWBTEp578knau6AnDDq cV7qvUEXozjA91d/oNZMfOzJj6+iE+g8N4Gjss0BnZ1eIJNUBngw2ZFKrbX2sWg0gsXbT1OleAME hStm38vm/r0XHL6zLVFB5mHjMVd1TpZhNxmrPdOr4ws= ) ; keytag 41746 ring.nlnog.net. 900 IN RRSIG ( DNSKEY 8 3 900 20260129000000 20260108000000 41746 ring.nlnog.net. oCYV0WEGCULONrzkA6AGJlBnX7fUfNFYxTp781Z3epoDc3NLhecPhwPbMMDG4Ap1v/8rn1k5xwi9 UZlcW1aXS1IqAPAnFRcB58C6niEVW2Ed1zlLkvypiMVC0JuZUh/NiycPD1mMYOPzVr/ry+884E3X jEjoD23j1YVZEb5fnFXd8lyDoOIQ4RYfV+UlkPHKC3CtZZC58glFGGb8EmxSS3EwBYNCODLbb1Wj FU5pHIz9BOYwNu4Vrp8/8k7rsJkMBHhn/xhw7fMht8Siy3HK2LNsNMZS5u7+uUUCmZte79DbmwtG YR4D9kM6Ilbh0Dgq4ZWttOM7FlxfdDpKvM56kg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ring.nlnog.net
	`ring.nlnog.net. 900 IN DNSKEY ( 256 3 8 AwEAAcUOikoqaAXlNmWlDuuQYKhtAPC3KFfGDNH9fijxLiKONVV3kxFuugadr1eQQZDMRf/Z8xeP AA4EQnp9lrI/HeZ54qda8TYoWnqHVXo6fvzvO6Mu/CI3yzzgVDW1zHxhluAbA5MziC1zSD5bGYM4 whaq4qc9Wk/KDjdbMS4JR8Hp ) ; keytag 45046`
	`ring.nlnog.net. 900 IN DNSKEY ( 256 3 8 AwEAAcg4SKX2aD/mj12xgIxXsMJ4tWKZ2CUZSjmZTJYBQQUwX7FtROW8DrQbDV8VAQvLxzrqLTNH 0iJITPzg5vtLRB1Ano3Dh5JhnstXMXDTaZ/Fo4FkMWdhoWBDspCXRVjgWutGi2y0wXphagBal3yC Dzv4i3b3K87KMpJVFOyzYqiz ) ; keytag 65139`
	`ring.nlnog.net. 900 IN DNSKEY ( 257 3 8 AwEAAcykcQckvJ7sRnntoU5yT+PATVNIH/WJZJae+gw+visGuOrKrqF8KzCRUa+YiqV7UiI8g5Q7 d+yOR5CZIYjIh99eLpt7ePh10Hp5oZpCUZqb9jZFQZLqgfpby6vN6yin808JjzrWtxz597X8hyW7 kOvE79JP6mNnpe8O6MObQffj74hoHo14pWHFy2X3ojcPKzgRrwE5H2AkawWBTEp578knau6AnDDq cV7qvUEXozjA91d/oNZMfOzJj6+iE+g8N4Gjss0BnZ1eIJNUBngw2ZFKrbX2sWg0gsXbT1OleAME hStm38vm/r0XHL6zLVFB5mHjMVd1TpZhNxmrPdOr4ws= ) ; keytag 41746`
	DNSKEY=41746/SEP is now in the chain-of-trust
	DS=41746/SHA-256 verifies DNSKEY=41746/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ring.nlnog.net. 900 IN RRSIG ( DNSKEY 8 3 900 20260129000000 20260108000000 41746 ring.nlnog.net. oCYV0WEGCULONrzkA6AGJlBnX7fUfNFYxTp781Z3epoDc3NLhecPhwPbMMDG4Ap1v/8rn1k5xwi9 UZlcW1aXS1IqAPAnFRcB58C6niEVW2Ed1zlLkvypiMVC0JuZUh/NiycPD1mMYOPzVr/ry+884E3X jEjoD23j1YVZEb5fnFXd8lyDoOIQ4RYfV+UlkPHKC3CtZZC58glFGGb8EmxSS3EwBYNCODLbb1Wj FU5pHIz9BOYwNu4Vrp8/8k7rsJkMBHhn/xhw7fMht8Siy3HK2LNsNMZS5u7+uUUCmZte79DbmwtG YR4D9kM6Ilbh0Dgq4ZWttOM7FlxfdDpKvM56kg== )`
	RRSIG=41746 and DNSKEY=41746/SEP verifies the DNSKEY RRset
	DNSKEY=45046 is now in the chain-of-trust
	DNSKEY=65139 is now in the chain-of-trust
	Query to auth4.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 213.130.47.21
	;; Response received from [213.130.47.21] 249 octets ;; HEADER SECTION ;; id = 4358 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth4.ns.gin.ntt.net is authoritative for redpilllinpro01.ring.nlnog.net
	Query to ns01.infra.ring.nlnog.net for redpilllinpro01.ring.nlnog.net/DNSKEY
	Received 512 bytes from 185.107.224.27
	;; Response received from [185.107.224.27] 512 octets ;; HEADER SECTION ;; id = 37692 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ring.nlnog.net. 900 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1768536842 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 900 IN RRSIG ( SOA 8 3 3600 20260129000000 20260108000000 45046 ring.nlnog.net. WaCpu/ymBnHySYOWPLyctV6XTTcWvVBqNNSI0gYgekJDDSXMaNSrNdT+Z2DAKrz1eMlm8xMJa+4H SgvL8EyH/jD2H760orfYWpZfTJi1WssTc4sYPrMnBXvzL6JEnDhRtJNJ2IQ3tQBfkTRmYPExoxHV e2JstzlSkb5MLA3/umI= ) redpilllinpro01.ring.nlnog.net. 900 IN NSEC ( retarus01.ring.nlnog.net. A AAAA LOC SSHFP RRSIG NSEC ) redpilllinpro01.ring.nlnog.net. 900 IN RRSIG ( NSEC 8 4 900 20260129000000 20260108000000 45046 ring.nlnog.net. uIocP/X1h9/xaWAj/YUsnnRSNgEw58AE5LMjHKUjf7gJFyGmYhGz4vAp+v7+nCgOvn0LJhmV30NY IwbiYfIs8MuH2tQ4fdXKp5YDuxPuBONr4M9dNQ65hr590d7TLULSUBBgNdYRXaXAO3FvlNDgvy6H 7zjwp7GtgNLlBYvlvq4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ring.nlnog.net zone
	Query to ns01.infra.ring.nlnog.net for ring.nlnog.net/SOA
	Received 276 bytes from 185.107.224.27
	;; Response received from [185.107.224.27] 276 octets ;; HEADER SECTION ;; id = 55018 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260129000000 20260108000000 45046 ring.nlnog.net. WaCpu/ymBnHySYOWPLyctV6XTTcWvVBqNNSI0gYgekJDDSXMaNSrNdT+Z2DAKrz1eMlm8xMJa+4H SgvL8EyH/jD2H760orfYWpZfTJi1WssTc4sYPrMnBXvzL6JEnDhRtJNJ2IQ3tQBfkTRmYPExoxHV e2JstzlSkb5MLA3/umI= ) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1768536842 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth5.ns.gin.ntt.net for ring.nlnog.net/SOA
	Received 276 bytes from 116.51.22.180
	;; Response received from [116.51.22.180] 276 octets ;; HEADER SECTION ;; id = 55229 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1768536842 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260129000000 20260108000000 45046 ring.nlnog.net. WaCpu/ymBnHySYOWPLyctV6XTTcWvVBqNNSI0gYgekJDDSXMaNSrNdT+Z2DAKrz1eMlm8xMJa+4H SgvL8EyH/jD2H760orfYWpZfTJi1WssTc4sYPrMnBXvzL6JEnDhRtJNJ2IQ3tQBfkTRmYPExoxHV e2JstzlSkb5MLA3/umI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns.rodecker.nl for ring.nlnog.net/SOA
	Received 995 bytes from 78.47.208.123
	;; Response received from [78.47.208.123] 995 octets ;; HEADER SECTION ;; id = 7005 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1768536842 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260129000000 20260108000000 45046 ring.nlnog.net. WaCpu/ymBnHySYOWPLyctV6XTTcWvVBqNNSI0gYgekJDDSXMaNSrNdT+Z2DAKrz1eMlm8xMJa+4H SgvL8EyH/jD2H760orfYWpZfTJi1WssTc4sYPrMnBXvzL6JEnDhRtJNJ2IQ3tQBfkTRmYPExoxHV e2JstzlSkb5MLA3/umI= ) ;; AUTHORITY SECTION (8 records) ring.nlnog.net. 600 IN NS auth1.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth2.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth3.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth4.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth5.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS ns.rodecker.nl. ring.nlnog.net. 86400 IN NS ns01.infra.ring.nlnog.net. ring.nlnog.net. 86400 IN RRSIG ( NS 8 3 86400 20260129000000 20260108000000 45046 ring.nlnog.net. Zk+p01Vti6N20fVY3Ykt3FtpO2FXnqXYZJo2kYPgl09ve7D4xPo8Llc2EJFwhznmUJxXJLhR20VJ EM0iMm7yA+7zfJk0a5sUJIRZGFXoy2preZDXBvb5+8S1Je5cjLEe2Vh3Zdq0/QyLCi4Nx83SwPS8 KSG3Wk7AHtQNQHIDSbw= ) ;; ADDITIONAL SECTION (5 records) ns01.infra.ring.nlnog.net. 600 IN A 185.107.224.27 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( A 8 5 600 20260129000000 20260108000000 45046 ring.nlnog.net. KvtHizGq6hofMgc0zelN75Vy6fxrTv55KdwH6wvOUWgb5HqF/PuED/Xa/myo2M5G6uDeh8FIjqPl x2ZI0JNXsntgYAzN0sNCjOyX2QgQhoDCdahBT5Hc3PxMKXlU0JN4XMQl/AfXjI0u3//QHOykY/V+ e+y+3VRnS/sxduj55j0= ) ns01.infra.ring.nlnog.net. 600 IN AAAA 2a00:f10:400:2:4b3:4aff:fe00:707 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( AAAA 8 5 600 20260129000000 20260108000000 45046 ring.nlnog.net. W0y7/HpFJqe14q1ngGnTgaZV0e9GArhqd1YaX9oVpYXk5fXpy+/cjQ7tFCUyqceZxdFdMPh+KzXy Evdr+0ZIegy+wWgfSRUCp3UHWPlBFIsf8oVIqzADt8LZgnPm13IaqjXjPvTUpc4+Tz+3mtxrPkWt +fVnYAxW7l2IqTok47E= ) ;; { "EDNS-VERSION": 0 }
	Query to auth2.ns.gin.ntt.net for ring.nlnog.net/SOA
	Received 276 bytes from 69.36.249.35
	;; Response received from [69.36.249.35] 276 octets ;; HEADER SECTION ;; id = 23169 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1768536842 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260129000000 20260108000000 45046 ring.nlnog.net. WaCpu/ymBnHySYOWPLyctV6XTTcWvVBqNNSI0gYgekJDDSXMaNSrNdT+Z2DAKrz1eMlm8xMJa+4H SgvL8EyH/jD2H760orfYWpZfTJi1WssTc4sYPrMnBXvzL6JEnDhRtJNJ2IQ3tQBfkTRmYPExoxHV e2JstzlSkb5MLA3/umI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth1.ns.gin.ntt.net for ring.nlnog.net/SOA
	Received 276 bytes from 129.250.35.229
	;; Response received from [129.250.35.229] 276 octets ;; HEADER SECTION ;; id = 51417 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1768536842 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260129000000 20260108000000 45046 ring.nlnog.net. WaCpu/ymBnHySYOWPLyctV6XTTcWvVBqNNSI0gYgekJDDSXMaNSrNdT+Z2DAKrz1eMlm8xMJa+4H SgvL8EyH/jD2H760orfYWpZfTJi1WssTc4sYPrMnBXvzL6JEnDhRtJNJ2IQ3tQBfkTRmYPExoxHV e2JstzlSkb5MLA3/umI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth3.ns.gin.ntt.net for ring.nlnog.net/SOA
	Received 276 bytes from 129.250.31.21
	;; Response received from [129.250.31.21] 276 octets ;; HEADER SECTION ;; id = 32081 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1768536842 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260129000000 20260108000000 45046 ring.nlnog.net. WaCpu/ymBnHySYOWPLyctV6XTTcWvVBqNNSI0gYgekJDDSXMaNSrNdT+Z2DAKrz1eMlm8xMJa+4H SgvL8EyH/jD2H760orfYWpZfTJi1WssTc4sYPrMnBXvzL6JEnDhRtJNJ2IQ3tQBfkTRmYPExoxHV e2JstzlSkb5MLA3/umI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth4.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 213.130.47.21
	;; Response received from [213.130.47.21] 249 octets ;; HEADER SECTION ;; id = 45705 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	redpilllinpro01.ring.nlnog.net A RR has value 87.238.49.250
	Found 1 RRSIGs over A RRset
	`redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to auth1.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 129.250.35.229
	;; Response received from [129.250.35.229] 249 octets ;; HEADER SECTION ;; id = 48831 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth1.ns.gin.ntt.net is authoritative for redpilllinpro01.ring.nlnog.net
	Query to auth5.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/DNSKEY
	Received 512 bytes from 116.51.22.180
	;; Response received from [116.51.22.180] 512 octets ;; HEADER SECTION ;; id = 37448 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ring.nlnog.net. 900 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1768536842 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 900 IN RRSIG ( SOA 8 3 3600 20260129000000 20260108000000 45046 ring.nlnog.net. WaCpu/ymBnHySYOWPLyctV6XTTcWvVBqNNSI0gYgekJDDSXMaNSrNdT+Z2DAKrz1eMlm8xMJa+4H SgvL8EyH/jD2H760orfYWpZfTJi1WssTc4sYPrMnBXvzL6JEnDhRtJNJ2IQ3tQBfkTRmYPExoxHV e2JstzlSkb5MLA3/umI= ) redpilllinpro01.ring.nlnog.net. 900 IN NSEC ( retarus01.ring.nlnog.net. A AAAA LOC SSHFP RRSIG NSEC ) redpilllinpro01.ring.nlnog.net. 900 IN RRSIG ( NSEC 8 4 900 20260129000000 20260108000000 45046 ring.nlnog.net. uIocP/X1h9/xaWAj/YUsnnRSNgEw58AE5LMjHKUjf7gJFyGmYhGz4vAp+v7+nCgOvn0LJhmV30NY IwbiYfIs8MuH2tQ4fdXKp5YDuxPuBONr4M9dNQ65hr590d7TLULSUBBgNdYRXaXAO3FvlNDgvy6H 7zjwp7GtgNLlBYvlvq4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ring.nlnog.net zone
	Query to auth1.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 129.250.35.229
	;; Response received from [129.250.35.229] 249 octets ;; HEADER SECTION ;; id = 27715 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	redpilllinpro01.ring.nlnog.net A RR has value 87.238.49.250
	Found 1 RRSIGs over A RRset
	`redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to ns.rodecker.nl for redpilllinpro01.ring.nlnog.net/A
	Received 979 bytes from 78.47.208.123
	;; Response received from [78.47.208.123] 979 octets ;; HEADER SECTION ;; id = 38399 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= ) ;; AUTHORITY SECTION (8 records) ring.nlnog.net. 600 IN NS auth1.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth2.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth3.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth4.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth5.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS ns.rodecker.nl. ring.nlnog.net. 86400 IN NS ns01.infra.ring.nlnog.net. ring.nlnog.net. 86400 IN RRSIG ( NS 8 3 86400 20260129000000 20260108000000 45046 ring.nlnog.net. Zk+p01Vti6N20fVY3Ykt3FtpO2FXnqXYZJo2kYPgl09ve7D4xPo8Llc2EJFwhznmUJxXJLhR20VJ EM0iMm7yA+7zfJk0a5sUJIRZGFXoy2preZDXBvb5+8S1Je5cjLEe2Vh3Zdq0/QyLCi4Nx83SwPS8 KSG3Wk7AHtQNQHIDSbw= ) ;; ADDITIONAL SECTION (5 records) ns01.infra.ring.nlnog.net. 600 IN A 185.107.224.27 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( A 8 5 600 20260129000000 20260108000000 45046 ring.nlnog.net. KvtHizGq6hofMgc0zelN75Vy6fxrTv55KdwH6wvOUWgb5HqF/PuED/Xa/myo2M5G6uDeh8FIjqPl x2ZI0JNXsntgYAzN0sNCjOyX2QgQhoDCdahBT5Hc3PxMKXlU0JN4XMQl/AfXjI0u3//QHOykY/V+ e+y+3VRnS/sxduj55j0= ) ns01.infra.ring.nlnog.net. 600 IN AAAA 2a00:f10:400:2:4b3:4aff:fe00:707 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( AAAA 8 5 600 20260129000000 20260108000000 45046 ring.nlnog.net. W0y7/HpFJqe14q1ngGnTgaZV0e9GArhqd1YaX9oVpYXk5fXpy+/cjQ7tFCUyqceZxdFdMPh+KzXy Evdr+0ZIegy+wWgfSRUCp3UHWPlBFIsf8oVIqzADt8LZgnPm13IaqjXjPvTUpc4+Tz+3mtxrPkWt +fVnYAxW7l2IqTok47E= ) ;; { "EDNS-VERSION": 0 }
	ns.rodecker.nl is authoritative for redpilllinpro01.ring.nlnog.net
	Query to auth5.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/DNSKEY
	Received 512 bytes from 116.51.22.180
	;; Response received from [116.51.22.180] 512 octets ;; HEADER SECTION ;; id = 39603 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ring.nlnog.net. 900 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1768536842 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 900 IN RRSIG ( SOA 8 3 3600 20260129000000 20260108000000 45046 ring.nlnog.net. WaCpu/ymBnHySYOWPLyctV6XTTcWvVBqNNSI0gYgekJDDSXMaNSrNdT+Z2DAKrz1eMlm8xMJa+4H SgvL8EyH/jD2H760orfYWpZfTJi1WssTc4sYPrMnBXvzL6JEnDhRtJNJ2IQ3tQBfkTRmYPExoxHV e2JstzlSkb5MLA3/umI= ) redpilllinpro01.ring.nlnog.net. 900 IN NSEC ( retarus01.ring.nlnog.net. A AAAA LOC SSHFP RRSIG NSEC ) redpilllinpro01.ring.nlnog.net. 900 IN RRSIG ( NSEC 8 4 900 20260129000000 20260108000000 45046 ring.nlnog.net. uIocP/X1h9/xaWAj/YUsnnRSNgEw58AE5LMjHKUjf7gJFyGmYhGz4vAp+v7+nCgOvn0LJhmV30NY IwbiYfIs8MuH2tQ4fdXKp5YDuxPuBONr4M9dNQ65hr590d7TLULSUBBgNdYRXaXAO3FvlNDgvy6H 7zjwp7GtgNLlBYvlvq4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ring.nlnog.net zone
	Query to ns.rodecker.nl for redpilllinpro01.ring.nlnog.net/A
	Received 979 bytes from 78.47.208.123
	;; Response received from [78.47.208.123] 979 octets ;; HEADER SECTION ;; id = 46808 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= ) ;; AUTHORITY SECTION (8 records) ring.nlnog.net. 600 IN NS auth1.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth2.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth3.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth4.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth5.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS ns.rodecker.nl. ring.nlnog.net. 86400 IN NS ns01.infra.ring.nlnog.net. ring.nlnog.net. 86400 IN RRSIG ( NS 8 3 86400 20260129000000 20260108000000 45046 ring.nlnog.net. Zk+p01Vti6N20fVY3Ykt3FtpO2FXnqXYZJo2kYPgl09ve7D4xPo8Llc2EJFwhznmUJxXJLhR20VJ EM0iMm7yA+7zfJk0a5sUJIRZGFXoy2preZDXBvb5+8S1Je5cjLEe2Vh3Zdq0/QyLCi4Nx83SwPS8 KSG3Wk7AHtQNQHIDSbw= ) ;; ADDITIONAL SECTION (5 records) ns01.infra.ring.nlnog.net. 600 IN A 185.107.224.27 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( A 8 5 600 20260129000000 20260108000000 45046 ring.nlnog.net. KvtHizGq6hofMgc0zelN75Vy6fxrTv55KdwH6wvOUWgb5HqF/PuED/Xa/myo2M5G6uDeh8FIjqPl x2ZI0JNXsntgYAzN0sNCjOyX2QgQhoDCdahBT5Hc3PxMKXlU0JN4XMQl/AfXjI0u3//QHOykY/V+ e+y+3VRnS/sxduj55j0= ) ns01.infra.ring.nlnog.net. 600 IN AAAA 2a00:f10:400:2:4b3:4aff:fe00:707 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( AAAA 8 5 600 20260129000000 20260108000000 45046 ring.nlnog.net. W0y7/HpFJqe14q1ngGnTgaZV0e9GArhqd1YaX9oVpYXk5fXpy+/cjQ7tFCUyqceZxdFdMPh+KzXy Evdr+0ZIegy+wWgfSRUCp3UHWPlBFIsf8oVIqzADt8LZgnPm13IaqjXjPvTUpc4+Tz+3mtxrPkWt +fVnYAxW7l2IqTok47E= ) ;; { "EDNS-VERSION": 0 }
	redpilllinpro01.ring.nlnog.net A RR has value 87.238.49.250
	Found 1 RRSIGs over A RRset
	`redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to auth5.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 116.51.22.180
	;; Response received from [116.51.22.180] 249 octets ;; HEADER SECTION ;; id = 9413 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth5.ns.gin.ntt.net is authoritative for redpilllinpro01.ring.nlnog.net
	Query to ns01.infra.ring.nlnog.net for redpilllinpro01.ring.nlnog.net/DNSKEY
	Received 512 bytes from 185.107.224.27
	;; Response received from [185.107.224.27] 512 octets ;; HEADER SECTION ;; id = 43431 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ring.nlnog.net. 900 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1768536842 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 900 IN RRSIG ( SOA 8 3 3600 20260129000000 20260108000000 45046 ring.nlnog.net. WaCpu/ymBnHySYOWPLyctV6XTTcWvVBqNNSI0gYgekJDDSXMaNSrNdT+Z2DAKrz1eMlm8xMJa+4H SgvL8EyH/jD2H760orfYWpZfTJi1WssTc4sYPrMnBXvzL6JEnDhRtJNJ2IQ3tQBfkTRmYPExoxHV e2JstzlSkb5MLA3/umI= ) redpilllinpro01.ring.nlnog.net. 900 IN NSEC ( retarus01.ring.nlnog.net. A AAAA LOC SSHFP RRSIG NSEC ) redpilllinpro01.ring.nlnog.net. 900 IN RRSIG ( NSEC 8 4 900 20260129000000 20260108000000 45046 ring.nlnog.net. uIocP/X1h9/xaWAj/YUsnnRSNgEw58AE5LMjHKUjf7gJFyGmYhGz4vAp+v7+nCgOvn0LJhmV30NY IwbiYfIs8MuH2tQ4fdXKp5YDuxPuBONr4M9dNQ65hr590d7TLULSUBBgNdYRXaXAO3FvlNDgvy6H 7zjwp7GtgNLlBYvlvq4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ring.nlnog.net zone
	Query to auth5.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 116.51.22.180
	;; Response received from [116.51.22.180] 249 octets ;; HEADER SECTION ;; id = 19393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	redpilllinpro01.ring.nlnog.net A RR has value 87.238.49.250
	Found 1 RRSIGs over A RRset
	`redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to ns01.infra.ring.nlnog.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 185.107.224.27
	;; Response received from [185.107.224.27] 249 octets ;; HEADER SECTION ;; id = 51691 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns01.infra.ring.nlnog.net is authoritative for redpilllinpro01.ring.nlnog.net
	Query to auth2.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/DNSKEY
	Received 512 bytes from 69.36.249.35
	;; Response received from [69.36.249.35] 512 octets ;; HEADER SECTION ;; id = 7197 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ring.nlnog.net. 900 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1768536842 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 900 IN RRSIG ( SOA 8 3 3600 20260129000000 20260108000000 45046 ring.nlnog.net. WaCpu/ymBnHySYOWPLyctV6XTTcWvVBqNNSI0gYgekJDDSXMaNSrNdT+Z2DAKrz1eMlm8xMJa+4H SgvL8EyH/jD2H760orfYWpZfTJi1WssTc4sYPrMnBXvzL6JEnDhRtJNJ2IQ3tQBfkTRmYPExoxHV e2JstzlSkb5MLA3/umI= ) redpilllinpro01.ring.nlnog.net. 900 IN NSEC ( retarus01.ring.nlnog.net. A AAAA LOC SSHFP RRSIG NSEC ) redpilllinpro01.ring.nlnog.net. 900 IN RRSIG ( NSEC 8 4 900 20260129000000 20260108000000 45046 ring.nlnog.net. uIocP/X1h9/xaWAj/YUsnnRSNgEw58AE5LMjHKUjf7gJFyGmYhGz4vAp+v7+nCgOvn0LJhmV30NY IwbiYfIs8MuH2tQ4fdXKp5YDuxPuBONr4M9dNQ65hr590d7TLULSUBBgNdYRXaXAO3FvlNDgvy6H 7zjwp7GtgNLlBYvlvq4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ring.nlnog.net zone
	Query to ns01.infra.ring.nlnog.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 185.107.224.27
	;; Response received from [185.107.224.27] 249 octets ;; HEADER SECTION ;; id = 39776 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	redpilllinpro01.ring.nlnog.net A RR has value 87.238.49.250
	Found 1 RRSIGs over A RRset
	`redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to auth3.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 129.250.31.21
	;; Response received from [129.250.31.21] 249 octets ;; HEADER SECTION ;; id = 44287 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth3.ns.gin.ntt.net is authoritative for redpilllinpro01.ring.nlnog.net
	Query to auth2.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/DNSKEY
	Received 512 bytes from 69.36.249.35
	;; Response received from [69.36.249.35] 512 octets ;; HEADER SECTION ;; id = 53242 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ring.nlnog.net. 900 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1768536842 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 900 IN RRSIG ( SOA 8 3 3600 20260129000000 20260108000000 45046 ring.nlnog.net. WaCpu/ymBnHySYOWPLyctV6XTTcWvVBqNNSI0gYgekJDDSXMaNSrNdT+Z2DAKrz1eMlm8xMJa+4H SgvL8EyH/jD2H760orfYWpZfTJi1WssTc4sYPrMnBXvzL6JEnDhRtJNJ2IQ3tQBfkTRmYPExoxHV e2JstzlSkb5MLA3/umI= ) redpilllinpro01.ring.nlnog.net. 900 IN NSEC ( retarus01.ring.nlnog.net. A AAAA LOC SSHFP RRSIG NSEC ) redpilllinpro01.ring.nlnog.net. 900 IN RRSIG ( NSEC 8 4 900 20260129000000 20260108000000 45046 ring.nlnog.net. uIocP/X1h9/xaWAj/YUsnnRSNgEw58AE5LMjHKUjf7gJFyGmYhGz4vAp+v7+nCgOvn0LJhmV30NY IwbiYfIs8MuH2tQ4fdXKp5YDuxPuBONr4M9dNQ65hr590d7TLULSUBBgNdYRXaXAO3FvlNDgvy6H 7zjwp7GtgNLlBYvlvq4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ring.nlnog.net zone
	Query to auth3.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 129.250.31.21
	;; Response received from [129.250.31.21] 249 octets ;; HEADER SECTION ;; id = 9501 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	redpilllinpro01.ring.nlnog.net A RR has value 87.238.49.250
	Found 1 RRSIGs over A RRset
	`redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to auth2.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 69.36.249.35
	;; Response received from [69.36.249.35] 249 octets ;; HEADER SECTION ;; id = 11286 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth2.ns.gin.ntt.net is authoritative for redpilllinpro01.ring.nlnog.net
	Query to auth2.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/DNSKEY
	Received 512 bytes from 69.36.249.35
	;; Response received from [69.36.249.35] 512 octets ;; HEADER SECTION ;; id = 12075 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ring.nlnog.net. 900 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1768536842 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 900 IN RRSIG ( SOA 8 3 3600 20260129000000 20260108000000 45046 ring.nlnog.net. WaCpu/ymBnHySYOWPLyctV6XTTcWvVBqNNSI0gYgekJDDSXMaNSrNdT+Z2DAKrz1eMlm8xMJa+4H SgvL8EyH/jD2H760orfYWpZfTJi1WssTc4sYPrMnBXvzL6JEnDhRtJNJ2IQ3tQBfkTRmYPExoxHV e2JstzlSkb5MLA3/umI= ) redpilllinpro01.ring.nlnog.net. 900 IN NSEC ( retarus01.ring.nlnog.net. A AAAA LOC SSHFP RRSIG NSEC ) redpilllinpro01.ring.nlnog.net. 900 IN RRSIG ( NSEC 8 4 900 20260129000000 20260108000000 45046 ring.nlnog.net. uIocP/X1h9/xaWAj/YUsnnRSNgEw58AE5LMjHKUjf7gJFyGmYhGz4vAp+v7+nCgOvn0LJhmV30NY IwbiYfIs8MuH2tQ4fdXKp5YDuxPuBONr4M9dNQ65hr590d7TLULSUBBgNdYRXaXAO3FvlNDgvy6H 7zjwp7GtgNLlBYvlvq4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ring.nlnog.net zone
	Query to auth2.ns.gin.ntt.net for redpilllinpro01.ring.nlnog.net/A
	Received 249 bytes from 69.36.249.35
	;; Response received from [69.36.249.35] 249 octets ;; HEADER SECTION ;; id = 11944 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; redpilllinpro01.ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) redpilllinpro01.ring.nlnog.net. 600 IN A 87.238.49.250 redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	redpilllinpro01.ring.nlnog.net A RR has value 87.238.49.250
	Found 1 RRSIGs over A RRset
	`redpilllinpro01.ring.nlnog.net. 600 IN RRSIG ( A 8 4 600 20260129000000 20260108000000 45046 ring.nlnog.net. pnRsjyHWrIXf6wa/26Hto4lntVwdgmh/IBZ5xL1PzddPVJyaW6tIX9kgBUUkCQEeJF81v/2LtEDd 2uAzWlhKS2boBpz5y9A5Ba1uzF/mWbtanDV8cm7SZRfHkFU+KvvnOL0TANLu/r92JNxZReA0IrDo 7DmTzPE6uFefJjL9dlk= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test redpilllinpro01.ring.nlnog.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: