DNSSEC Debugger - ring.nlnog.net

Domain Name:

Time: 2026-02-21 20:19:45 UTC

Analyzing DNSSEC problems for ring.nlnog.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1139 octets ;; HEADER SECTION ;; id = 23271 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to b.root-servers.net for ring.nlnog.net/A
	Received 1171 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1171 octets ;; HEADER SECTION ;; id = 54484 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260306170000 20260221160000 21831 . Di2R6OSLmPVMVyk1nHZPra27/el21Lnns9DiSPfykw2RwslvzHjUIV9bmSxO0vmAxhRfDtEa483T UjLqv7M5bg7KZrUdnJUmew/dlQRmCbr4TZaygmZK7mjG7S8Xx8DiD3rEu+jM94wa2ozEYqKQ45/z wlX5RN/0TzhNvV2u79bYj2FfHWcUqFJW8s2MrUAN0JVMdUPwhsvLnn/QiMuQeAcTEWzWhg6uUnnt LRaF/hY07lhsJ8Fux9+h57GmZxz4Pp5o7NzhFH5tB+2Hfg81n9UZUvK9fYqmViFCd6imP9YjhBkZ C3spezt6XfLsqPPJJIieGLpJxi5oqaDNLzE5xQ== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for net/DNSKEY
	Received 1163 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1163 octets ;; HEADER SECTION ;; id = 32883 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260306170000 20260221160000 21831 . Di2R6OSLmPVMVyk1nHZPra27/el21Lnns9DiSPfykw2RwslvzHjUIV9bmSxO0vmAxhRfDtEa483T UjLqv7M5bg7KZrUdnJUmew/dlQRmCbr4TZaygmZK7mjG7S8Xx8DiD3rEu+jM94wa2ozEYqKQ45/z wlX5RN/0TzhNvV2u79bYj2FfHWcUqFJW8s2MrUAN0JVMdUPwhsvLnn/QiMuQeAcTEWzWhg6uUnnt LRaF/hY07lhsJ8Fux9+h57GmZxz4Pp5o7NzhFH5tB+2Hfg81n9UZUvK9fYqmViFCd6imP9YjhBkZ C3spezt6XfLsqPPJJIieGLpJxi5oqaDNLzE5xQ== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to b.root-servers.net for net/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 38395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260306170000 20260221160000 21831 . Di2R6OSLmPVMVyk1nHZPra27/el21Lnns9DiSPfykw2RwslvzHjUIV9bmSxO0vmAxhRfDtEa483T UjLqv7M5bg7KZrUdnJUmew/dlQRmCbr4TZaygmZK7mjG7S8Xx8DiD3rEu+jM94wa2ozEYqKQ45/z wlX5RN/0TzhNvV2u79bYj2FfHWcUqFJW8s2MrUAN0JVMdUPwhsvLnn/QiMuQeAcTEWzWhg6uUnnt LRaF/hY07lhsJ8Fux9+h57GmZxz4Pp5o7NzhFH5tB+2Hfg81n9UZUvK9fYqmViFCd6imP9YjhBkZ C3spezt6XfLsqPPJJIieGLpJxi5oqaDNLzE5xQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20260306170000 20260221160000 21831 . Di2R6OSLmPVMVyk1nHZPra27/el21Lnns9DiSPfykw2RwslvzHjUIV9bmSxO0vmAxhRfDtEa483T UjLqv7M5bg7KZrUdnJUmew/dlQRmCbr4TZaygmZK7mjG7S8Xx8DiD3rEu+jM94wa2ozEYqKQ45/z wlX5RN/0TzhNvV2u79bYj2FfHWcUqFJW8s2MrUAN0JVMdUPwhsvLnn/QiMuQeAcTEWzWhg6uUnnt LRaF/hY07lhsJ8Fux9+h57GmZxz4Pp5o7NzhFH5tB+2Hfg81n9UZUvK9fYqmViFCd6imP9YjhBkZ C3spezt6XfLsqPPJJIieGLpJxi5oqaDNLzE5xQ== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to f.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.35.51.30
	;; Response received from [192.35.51.30] 291 octets ;; HEADER SECTION ;; id = 62501 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 BN7nE5EGXvYfX/r9qihm5MU9BR6KTHLb/TcRXIXZcCwDj24ftYx+nRW6ca9/wHZ3NnOZ5uSG/GRE drzpVVepUg== ) ; keytag 44109 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260303151035 20260216150535 37331 net. 6eg7iN0zQt1A6IT/JbzT58qxh1hv7lrDvIgufitpe/Ds95t4D0fT8wlw8Eq6Zj+0FTB8dDYn5o4M UhgxYJQlKw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 BN7nE5EGXvYfX/r9qihm5MU9BR6KTHLb/TcRXIXZcCwDj24ftYx+nRW6ca9/wHZ3NnOZ5uSG/GRE drzpVVepUg== ) ; keytag 44109`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260303151035 20260216150535 37331 net. 6eg7iN0zQt1A6IT/JbzT58qxh1hv7lrDvIgufitpe/Ds95t4D0fT8wlw8Eq6Zj+0FTB8dDYn5o4M UhgxYJQlKw== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=44109 is now in the chain-of-trust
	Query to a.gtld-servers.net for ring.nlnog.net/A
	Received 243 bytes from 192.5.6.30
	;; Response received from [192.5.6.30] 243 octets ;; HEADER SECTION ;; id = 44071 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nlnog.net. 172800 IN NS ns1.desec.io. nlnog.net. 172800 IN NS ns2.desec.org. nlnog.net. 86400 IN DS ( 49892 13 2 57bfdd7cb0fe9f4f52dc7ba5bb564ef5091353a747fd8c87da5313885bdc4ee3 ) nlnog.net. 86400 IN RRSIG ( DS 13 2 86400 20260226033010 20260219022010 44109 net. Q7bp9R7fB/t+bYXewpZZ41d2Hhv66p4YTGi9Fwy4QnqXJweXPdhMrtgq67L2IJAUCkQZfwfreWCb 5RguGV7UAw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.gtld-servers.net for nlnog.net/DNSKEY
	Received 238 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 238 octets ;; HEADER SECTION ;; id = 39696 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nlnog.net. 172800 IN NS ns1.desec.io. nlnog.net. 172800 IN NS ns2.desec.org. nlnog.net. 86400 IN DS ( 49892 13 2 57bfdd7cb0fe9f4f52dc7ba5bb564ef5091353a747fd8c87da5313885bdc4ee3 ) nlnog.net. 86400 IN RRSIG ( DS 13 2 86400 20260226033010 20260219022010 44109 net. Q7bp9R7fB/t+bYXewpZZ41d2Hhv66p4YTGi9Fwy4QnqXJweXPdhMrtgq67L2IJAUCkQZfwfreWCb 5RguGV7UAw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone nlnog.net

nlnog.net

	Checking DS between net and nlnog.net
	Query to d.gtld-servers.net for nlnog.net/DS
	Received 1077 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 1077 octets ;; HEADER SECTION ;; id = 19069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nlnog.net. IN DS ;; ANSWER SECTION (2 records) nlnog.net. 86400 IN DS ( 49892 13 2 57bfdd7cb0fe9f4f52dc7ba5bb564ef5091353a747fd8c87da5313885bdc4ee3 ) nlnog.net. 86400 IN RRSIG ( DS 13 2 86400 20260226033010 20260219022010 44109 net. Q7bp9R7fB/t+bYXewpZZ41d2Hhv66p4YTGi9Fwy4QnqXJweXPdhMrtgq67L2IJAUCkQZfwfreWCb 5RguGV7UAw== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20260225033114 20260218022114 44109 net. V7vA/s2PTfj0ip+l4q/jW7PTUtbwTJp65kHVRW4LqgdJ3TgUwTPyYwH67MqWOxADIeBW1YVjZQ9M XzRpUyHSTQ== ) ;; ADDITIONAL SECTION (27 records) f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nlnog.net in the net zone
	DS=49892/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nlnog.net. 86400 IN RRSIG ( DS 13 2 86400 20260226033010 20260219022010 44109 net. Q7bp9R7fB/t+bYXewpZZ41d2Hhv66p4YTGi9Fwy4QnqXJweXPdhMrtgq67L2IJAUCkQZfwfreWCb 5RguGV7UAw== )`
	RRSIG=44109 and DNSKEY=44109 verifies the DS RRset
	DS=49892/SHA-256 is now in the chain-of-trust
	`nlnog.net. 86400 IN DS ( 49892 13 2 57bfdd7cb0fe9f4f52dc7ba5bb564ef5091353a747fd8c87da5313885bdc4ee3 )`
	Query to ns2.desec.org for nlnog.net/DNSKEY
	Received 223 bytes from 157.53.224.1
	;; Response received from [157.53.224.1] 223 octets ;; HEADER SECTION ;; id = 1131 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nlnog.net. IN DNSKEY ;; ANSWER SECTION (2 records) nlnog.net. 3600 IN DNSKEY ( 257 3 13 izfY4vFTRUE0sNSg1octHZ2nFGxPBt9tKkzd8huWictxx46LLjUz6VRK4DHkOKzizdDXjbB7xrCE PIu7L+oEkg== ) ; keytag 49892 nlnog.net. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260305000000 20260212000000 49892 nlnog.net. E/TRHSK4BSRcnI1oNYIaLtmrOGb9oGkxwrUyRFPYwfcMSCMTZU0482SLOwg8/6CbspTvRcvQUm3f /sQjTnbyLA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for nlnog.net
	`nlnog.net. 3600 IN DNSKEY ( 257 3 13 izfY4vFTRUE0sNSg1octHZ2nFGxPBt9tKkzd8huWictxx46LLjUz6VRK4DHkOKzizdDXjbB7xrCE PIu7L+oEkg== ) ; keytag 49892`
	DNSKEY=49892/SEP is now in the chain-of-trust
	DS=49892/SHA-256 verifies DNSKEY=49892/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nlnog.net. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260305000000 20260212000000 49892 nlnog.net. E/TRHSK4BSRcnI1oNYIaLtmrOGb9oGkxwrUyRFPYwfcMSCMTZU0482SLOwg8/6CbspTvRcvQUm3f /sQjTnbyLA== )`
	RRSIG=49892 and DNSKEY=49892/SEP verifies the DNSKEY RRset
	Query to ns1.desec.io for ring.nlnog.net/A
	Received 418 bytes from 45.54.76.1
	;; Response received from [45.54.76.1] 418 octets ;; HEADER SECTION ;; id = 21626 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ring.nlnog.net. 86400 IN NS ns.rodecker.nl. ring.nlnog.net. 86400 IN NS ns01.infra.ring.nlnog.net. ring.nlnog.net. 86400 IN NS auth1.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth2.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth3.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth4.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth5.ns.gin.ntt.net. ring.nlnog.net. 86400 IN DS ( 41746 8 2 0b5713506eecd741b24486ecdc44f4627eea258605b8f4a27cc031c41b26acb2 ) ring.nlnog.net. 86400 IN RRSIG ( DS 13 3 86400 20260305000000 20260212000000 49892 nlnog.net. mUBrNFo4JDPi823eBRe54eh2kHwQwZwHSQS42zliVP1rQhzHf3Y9I2fbP1aIlNEdThkfxOzVU6/M BqoMb3dIfg== ) ;; ADDITIONAL SECTION (3 records) ns01.infra.ring.nlnog.net. 3600 IN A 185.107.224.27 ns01.infra.ring.nlnog.net. 3600 IN AAAA 2a00:f10:400:2:4b3:4aff:fe00:707 ;; { "EDNS-VERSION": 0 }
	Query to ns2.desec.org for ring.nlnog.net/DNSKEY
	Received 418 bytes from 157.53.224.1
	;; Response received from [157.53.224.1] 418 octets ;; HEADER SECTION ;; id = 46219 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ring.nlnog.net. 86400 IN NS ns.rodecker.nl. ring.nlnog.net. 86400 IN NS ns01.infra.ring.nlnog.net. ring.nlnog.net. 86400 IN NS auth1.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth2.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth3.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth4.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS auth5.ns.gin.ntt.net. ring.nlnog.net. 86400 IN DS ( 41746 8 2 0b5713506eecd741b24486ecdc44f4627eea258605b8f4a27cc031c41b26acb2 ) ring.nlnog.net. 86400 IN RRSIG ( DS 13 3 86400 20260305000000 20260212000000 49892 nlnog.net. mUBrNFo4JDPi823eBRe54eh2kHwQwZwHSQS42zliVP1rQhzHf3Y9I2fbP1aIlNEdThkfxOzVU6/M BqoMb3dIfg== ) ;; ADDITIONAL SECTION (3 records) ns01.infra.ring.nlnog.net. 3600 IN A 185.107.224.27 ns01.infra.ring.nlnog.net. 3600 IN AAAA 2a00:f10:400:2:4b3:4aff:fe00:707 ;; { "EDNS-VERSION": 0 }
	Found child zone ring.nlnog.net

ring.nlnog.net

	Checking DS between nlnog.net and ring.nlnog.net
	Query to ns1.desec.io for ring.nlnog.net/DS
	Received 196 bytes from 45.54.76.1
	;; Response received from [45.54.76.1] 196 octets ;; HEADER SECTION ;; id = 37611 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN DS ;; ANSWER SECTION (2 records) ring.nlnog.net. 86400 IN DS ( 41746 8 2 0b5713506eecd741b24486ecdc44f4627eea258605b8f4a27cc031c41b26acb2 ) ring.nlnog.net. 86400 IN RRSIG ( DS 13 3 86400 20260305000000 20260212000000 49892 nlnog.net. mUBrNFo4JDPi823eBRe54eh2kHwQwZwHSQS42zliVP1rQhzHf3Y9I2fbP1aIlNEdThkfxOzVU6/M BqoMb3dIfg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ring.nlnog.net in the nlnog.net zone
	DS=41746/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ring.nlnog.net. 86400 IN RRSIG ( DS 13 3 86400 20260305000000 20260212000000 49892 nlnog.net. mUBrNFo4JDPi823eBRe54eh2kHwQwZwHSQS42zliVP1rQhzHf3Y9I2fbP1aIlNEdThkfxOzVU6/M BqoMb3dIfg== )`
	RRSIG=49892 and DNSKEY=49892/SEP verifies the DS RRset
	DS=41746/SHA-256 is now in the chain-of-trust
	`ring.nlnog.net. 86400 IN DS ( 41746 8 2 0b5713506eecd741b24486ecdc44f4627eea258605b8f4a27cc031c41b26acb2 )`
	Query to ns.rodecker.nl for ring.nlnog.net/DNSKEY
	Received 917 bytes from 78.47.208.123
	;; Response received from [78.47.208.123] 917 octets ;; HEADER SECTION ;; id = 7127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN DNSKEY ;; ANSWER SECTION (4 records) ring.nlnog.net. 900 IN DNSKEY ( 256 3 8 AwEAAcUOikoqaAXlNmWlDuuQYKhtAPC3KFfGDNH9fijxLiKONVV3kxFuugadr1eQQZDMRf/Z8xeP AA4EQnp9lrI/HeZ54qda8TYoWnqHVXo6fvzvO6Mu/CI3yzzgVDW1zHxhluAbA5MziC1zSD5bGYM4 whaq4qc9Wk/KDjdbMS4JR8Hp ) ; keytag 45046 ring.nlnog.net. 900 IN DNSKEY ( 256 3 8 AwEAAcg4SKX2aD/mj12xgIxXsMJ4tWKZ2CUZSjmZTJYBQQUwX7FtROW8DrQbDV8VAQvLxzrqLTNH 0iJITPzg5vtLRB1Ano3Dh5JhnstXMXDTaZ/Fo4FkMWdhoWBDspCXRVjgWutGi2y0wXphagBal3yC Dzv4i3b3K87KMpJVFOyzYqiz ) ; keytag 65139 ring.nlnog.net. 900 IN DNSKEY ( 257 3 8 AwEAAcykcQckvJ7sRnntoU5yT+PATVNIH/WJZJae+gw+visGuOrKrqF8KzCRUa+YiqV7UiI8g5Q7 d+yOR5CZIYjIh99eLpt7ePh10Hp5oZpCUZqb9jZFQZLqgfpby6vN6yin808JjzrWtxz597X8hyW7 kOvE79JP6mNnpe8O6MObQffj74hoHo14pWHFy2X3ojcPKzgRrwE5H2AkawWBTEp578knau6AnDDq cV7qvUEXozjA91d/oNZMfOzJj6+iE+g8N4Gjss0BnZ1eIJNUBngw2ZFKrbX2sWg0gsXbT1OleAME hStm38vm/r0XHL6zLVFB5mHjMVd1TpZhNxmrPdOr4ws= ) ; keytag 41746 ring.nlnog.net. 900 IN RRSIG ( DNSKEY 8 3 900 20260305000000 20260212000000 41746 ring.nlnog.net. zHYnZC/3+MObtE4E0NhKRVbrOxfW5FYMbQfcp8PA+J+D1hYSW60Ils+OiWDXGEWcs/NnE5P+mW1b v2VZnN49yBJUea64PD/XKEA/3kL3Qb5zic5qHvbOx1iKD2yMj/6V3o/2V45hXUn4ZznDMU+0Hhmc hkbYU4HY08lB2V0V6iG5hAtt199oURGRA3M0lw6R7YKENNyHWKAbtX6Xc59DpQuzM0Hu/JeOZiaM JpPSCk8X11yJc+TWlpFWKce4SslcPP+87l+23tLQo9xGaBE6XgeFUhuw9xS4tFmk77f4rZTDPvFE Ho/xC/8LU06Z7CITv127yDXws+atY79EuEGKyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ring.nlnog.net
	`ring.nlnog.net. 900 IN DNSKEY ( 256 3 8 AwEAAcUOikoqaAXlNmWlDuuQYKhtAPC3KFfGDNH9fijxLiKONVV3kxFuugadr1eQQZDMRf/Z8xeP AA4EQnp9lrI/HeZ54qda8TYoWnqHVXo6fvzvO6Mu/CI3yzzgVDW1zHxhluAbA5MziC1zSD5bGYM4 whaq4qc9Wk/KDjdbMS4JR8Hp ) ; keytag 45046`
	`ring.nlnog.net. 900 IN DNSKEY ( 256 3 8 AwEAAcg4SKX2aD/mj12xgIxXsMJ4tWKZ2CUZSjmZTJYBQQUwX7FtROW8DrQbDV8VAQvLxzrqLTNH 0iJITPzg5vtLRB1Ano3Dh5JhnstXMXDTaZ/Fo4FkMWdhoWBDspCXRVjgWutGi2y0wXphagBal3yC Dzv4i3b3K87KMpJVFOyzYqiz ) ; keytag 65139`
	`ring.nlnog.net. 900 IN DNSKEY ( 257 3 8 AwEAAcykcQckvJ7sRnntoU5yT+PATVNIH/WJZJae+gw+visGuOrKrqF8KzCRUa+YiqV7UiI8g5Q7 d+yOR5CZIYjIh99eLpt7ePh10Hp5oZpCUZqb9jZFQZLqgfpby6vN6yin808JjzrWtxz597X8hyW7 kOvE79JP6mNnpe8O6MObQffj74hoHo14pWHFy2X3ojcPKzgRrwE5H2AkawWBTEp578knau6AnDDq cV7qvUEXozjA91d/oNZMfOzJj6+iE+g8N4Gjss0BnZ1eIJNUBngw2ZFKrbX2sWg0gsXbT1OleAME hStm38vm/r0XHL6zLVFB5mHjMVd1TpZhNxmrPdOr4ws= ) ; keytag 41746`
	DNSKEY=41746/SEP is now in the chain-of-trust
	DS=41746/SHA-256 verifies DNSKEY=41746/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ring.nlnog.net. 900 IN RRSIG ( DNSKEY 8 3 900 20260305000000 20260212000000 41746 ring.nlnog.net. zHYnZC/3+MObtE4E0NhKRVbrOxfW5FYMbQfcp8PA+J+D1hYSW60Ils+OiWDXGEWcs/NnE5P+mW1b v2VZnN49yBJUea64PD/XKEA/3kL3Qb5zic5qHvbOx1iKD2yMj/6V3o/2V45hXUn4ZznDMU+0Hhmc hkbYU4HY08lB2V0V6iG5hAtt199oURGRA3M0lw6R7YKENNyHWKAbtX6Xc59DpQuzM0Hu/JeOZiaM JpPSCk8X11yJc+TWlpFWKce4SslcPP+87l+23tLQo9xGaBE6XgeFUhuw9xS4tFmk77f4rZTDPvFE Ho/xC/8LU06Z7CITv127yDXws+atY79EuEGKyg== )`
	RRSIG=41746 and DNSKEY=41746/SEP verifies the DNSKEY RRset
	DNSKEY=45046 is now in the chain-of-trust
	DNSKEY=65139 is now in the chain-of-trust
	Query to ns01.infra.ring.nlnog.net for ring.nlnog.net/A
	Received 233 bytes from 185.107.224.27
	;; Response received from [185.107.224.27] 233 octets ;; HEADER SECTION ;; id = 40639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) ring.nlnog.net. 600 IN A 185.66.250.169 ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns01.infra.ring.nlnog.net is authoritative for ring.nlnog.net
	Found RRSIG signed by ring.nlnog.net zone
	Query to auth1.ns.gin.ntt.net for ring.nlnog.net/SOA
	Received 276 bytes from 129.250.35.229
	;; Response received from [129.250.35.229] 276 octets ;; HEADER SECTION ;; id = 11084 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1771647241 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260305000000 20260212000000 45046 ring.nlnog.net. p3c8/1eoINcDjEob+jEnW/V9lmoh0mqFiVXMcpLnGzvIePdddHyTm9hcD9EN9RCNqHB4FP6+51wi 61W+pOB2wXjwnGA1efF0DGKK1h8h9Y25SGY6jczmWLflZ4yM4nWkX15xj4FD0yc0xKe7zwCNVZ7B bRwuVn0T/jPOB00L4qU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth5.ns.gin.ntt.net for ring.nlnog.net/SOA
	Received 276 bytes from 116.51.22.180
	;; Response received from [116.51.22.180] 276 octets ;; HEADER SECTION ;; id = 20604 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1771647241 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260305000000 20260212000000 45046 ring.nlnog.net. p3c8/1eoINcDjEob+jEnW/V9lmoh0mqFiVXMcpLnGzvIePdddHyTm9hcD9EN9RCNqHB4FP6+51wi 61W+pOB2wXjwnGA1efF0DGKK1h8h9Y25SGY6jczmWLflZ4yM4nWkX15xj4FD0yc0xKe7zwCNVZ7B bRwuVn0T/jPOB00L4qU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth3.ns.gin.ntt.net for ring.nlnog.net/SOA
	Received 276 bytes from 129.250.31.21
	;; Response received from [129.250.31.21] 276 octets ;; HEADER SECTION ;; id = 19545 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1771647241 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260305000000 20260212000000 45046 ring.nlnog.net. p3c8/1eoINcDjEob+jEnW/V9lmoh0mqFiVXMcpLnGzvIePdddHyTm9hcD9EN9RCNqHB4FP6+51wi 61W+pOB2wXjwnGA1efF0DGKK1h8h9Y25SGY6jczmWLflZ4yM4nWkX15xj4FD0yc0xKe7zwCNVZ7B bRwuVn0T/jPOB00L4qU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth4.ns.gin.ntt.net for ring.nlnog.net/SOA
	Received 276 bytes from 213.130.47.21
	;; Response received from [213.130.47.21] 276 octets ;; HEADER SECTION ;; id = 34878 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1771647241 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260305000000 20260212000000 45046 ring.nlnog.net. p3c8/1eoINcDjEob+jEnW/V9lmoh0mqFiVXMcpLnGzvIePdddHyTm9hcD9EN9RCNqHB4FP6+51wi 61W+pOB2wXjwnGA1efF0DGKK1h8h9Y25SGY6jczmWLflZ4yM4nWkX15xj4FD0yc0xKe7zwCNVZ7B bRwuVn0T/jPOB00L4qU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth2.ns.gin.ntt.net for ring.nlnog.net/SOA
	Received 276 bytes from 69.36.249.35
	;; Response received from [69.36.249.35] 276 octets ;; HEADER SECTION ;; id = 40727 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1771647241 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260305000000 20260212000000 45046 ring.nlnog.net. p3c8/1eoINcDjEob+jEnW/V9lmoh0mqFiVXMcpLnGzvIePdddHyTm9hcD9EN9RCNqHB4FP6+51wi 61W+pOB2wXjwnGA1efF0DGKK1h8h9Y25SGY6jczmWLflZ4yM4nWkX15xj4FD0yc0xKe7zwCNVZ7B bRwuVn0T/jPOB00L4qU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns.rodecker.nl for ring.nlnog.net/SOA
	Received 995 bytes from 78.47.208.123
	;; Response received from [78.47.208.123] 995 octets ;; HEADER SECTION ;; id = 64022 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN SOA ;; ANSWER SECTION (2 records) ring.nlnog.net. 3600 IN SOA ( ns01.infra.ring.nlnog.net. ring-admins.ring.nlnog.net. 1771647241 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) ring.nlnog.net. 3600 IN RRSIG ( SOA 8 3 3600 20260305000000 20260212000000 45046 ring.nlnog.net. p3c8/1eoINcDjEob+jEnW/V9lmoh0mqFiVXMcpLnGzvIePdddHyTm9hcD9EN9RCNqHB4FP6+51wi 61W+pOB2wXjwnGA1efF0DGKK1h8h9Y25SGY6jczmWLflZ4yM4nWkX15xj4FD0yc0xKe7zwCNVZ7B bRwuVn0T/jPOB00L4qU= ) ;; AUTHORITY SECTION (8 records) ring.nlnog.net. 600 IN NS auth1.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth2.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth3.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth4.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth5.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS ns.rodecker.nl. ring.nlnog.net. 86400 IN NS ns01.infra.ring.nlnog.net. ring.nlnog.net. 86400 IN RRSIG ( NS 8 3 86400 20260305000000 20260212000000 45046 ring.nlnog.net. sQsMsqo6TsTNz/bXmlBvZleLRDMzu+JyawHgWFFMif2wl13g9NzTTRQ0TIFPIqBRj12rH+As4lhS zPYwNpBf1ACiDCKqTtb8X3hxwFxxJUw9W/IS3sydAv/NOYEgkMm6RH0ZyKk6S9wntIi16gOH+rFG UsAZu4TenrA8mD61S5o= ) ;; ADDITIONAL SECTION (5 records) ns01.infra.ring.nlnog.net. 600 IN A 185.107.224.27 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( A 8 5 600 20260305000000 20260212000000 45046 ring.nlnog.net. cNoqhBBD6A/lSmJrJMWWh3q4FekgBqx8vrofFxtlGpl1LhDVI7R1Q9PtZ6zv+ISnOThhQQsk4A9r Ogavrxlviu6Hk9aOSPuiMs+Qsd0WWVLkDKj2sY2CRJYeNt1nNLm9H/Pnctel3v5s+HqTvJDHLXSW gJKXKNG8ntuQWwKbDrk= ) ns01.infra.ring.nlnog.net. 600 IN AAAA 2a00:f10:400:2:4b3:4aff:fe00:707 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( AAAA 8 5 600 20260305000000 20260212000000 45046 ring.nlnog.net. Hgli7eXWP6bCHXrPz83INXOvmCqHCzuTCbN6P5iTIhRtoDy8TFk50XtZ8Neflws3LXLeOEAqB3Hh /kzgKRJETYldjStozaTK4qOh90wPIVCLabjiqgsv4opLyNA48pz75RtGM9gTKRYbQfYAEGsw3FAz 9LyLvFIShcUlg/A0HMI= ) ;; { "EDNS-VERSION": 0 }
	Query to ns01.infra.ring.nlnog.net for ring.nlnog.net/A
	Received 233 bytes from 185.107.224.27
	;; Response received from [185.107.224.27] 233 octets ;; HEADER SECTION ;; id = 6227 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) ring.nlnog.net. 600 IN A 185.66.250.169 ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ring.nlnog.net A RR has value 185.66.250.169
	Found 1 RRSIGs over A RRset
	`ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to auth3.ns.gin.ntt.net for ring.nlnog.net/A
	Received 233 bytes from 129.250.31.21
	;; Response received from [129.250.31.21] 233 octets ;; HEADER SECTION ;; id = 29814 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) ring.nlnog.net. 600 IN A 185.66.250.169 ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth3.ns.gin.ntt.net is authoritative for ring.nlnog.net
	Found RRSIG signed by ring.nlnog.net zone
	Query to auth3.ns.gin.ntt.net for ring.nlnog.net/A
	Received 233 bytes from 129.250.31.21
	;; Response received from [129.250.31.21] 233 octets ;; HEADER SECTION ;; id = 40394 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) ring.nlnog.net. 600 IN A 185.66.250.169 ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ring.nlnog.net A RR has value 185.66.250.169
	Found 1 RRSIGs over A RRset
	`ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to auth1.ns.gin.ntt.net for ring.nlnog.net/A
	Received 233 bytes from 129.250.35.229
	;; Response received from [129.250.35.229] 233 octets ;; HEADER SECTION ;; id = 1030 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) ring.nlnog.net. 600 IN A 185.66.250.169 ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth1.ns.gin.ntt.net is authoritative for ring.nlnog.net
	Found RRSIG signed by ring.nlnog.net zone
	Query to auth1.ns.gin.ntt.net for ring.nlnog.net/A
	Received 233 bytes from 129.250.35.229
	;; Response received from [129.250.35.229] 233 octets ;; HEADER SECTION ;; id = 10767 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) ring.nlnog.net. 600 IN A 185.66.250.169 ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ring.nlnog.net A RR has value 185.66.250.169
	Found 1 RRSIGs over A RRset
	`ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to auth2.ns.gin.ntt.net for ring.nlnog.net/A
	Received 233 bytes from 69.36.249.35
	;; Response received from [69.36.249.35] 233 octets ;; HEADER SECTION ;; id = 50181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) ring.nlnog.net. 600 IN A 185.66.250.169 ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth2.ns.gin.ntt.net is authoritative for ring.nlnog.net
	Found RRSIG signed by ring.nlnog.net zone
	Query to auth2.ns.gin.ntt.net for ring.nlnog.net/A
	Received 233 bytes from 69.36.249.35
	;; Response received from [69.36.249.35] 233 octets ;; HEADER SECTION ;; id = 51288 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) ring.nlnog.net. 600 IN A 185.66.250.169 ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ring.nlnog.net A RR has value 185.66.250.169
	Found 1 RRSIGs over A RRset
	`ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to ns.rodecker.nl for ring.nlnog.net/A
	Received 963 bytes from 78.47.208.123
	;; Response received from [78.47.208.123] 963 octets ;; HEADER SECTION ;; id = 2209 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) ring.nlnog.net. 600 IN A 185.66.250.169 ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= ) ;; AUTHORITY SECTION (8 records) ring.nlnog.net. 600 IN NS auth1.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth2.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth3.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth4.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth5.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS ns.rodecker.nl. ring.nlnog.net. 86400 IN NS ns01.infra.ring.nlnog.net. ring.nlnog.net. 86400 IN RRSIG ( NS 8 3 86400 20260305000000 20260212000000 45046 ring.nlnog.net. sQsMsqo6TsTNz/bXmlBvZleLRDMzu+JyawHgWFFMif2wl13g9NzTTRQ0TIFPIqBRj12rH+As4lhS zPYwNpBf1ACiDCKqTtb8X3hxwFxxJUw9W/IS3sydAv/NOYEgkMm6RH0ZyKk6S9wntIi16gOH+rFG UsAZu4TenrA8mD61S5o= ) ;; ADDITIONAL SECTION (5 records) ns01.infra.ring.nlnog.net. 600 IN A 185.107.224.27 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( A 8 5 600 20260305000000 20260212000000 45046 ring.nlnog.net. cNoqhBBD6A/lSmJrJMWWh3q4FekgBqx8vrofFxtlGpl1LhDVI7R1Q9PtZ6zv+ISnOThhQQsk4A9r Ogavrxlviu6Hk9aOSPuiMs+Qsd0WWVLkDKj2sY2CRJYeNt1nNLm9H/Pnctel3v5s+HqTvJDHLXSW gJKXKNG8ntuQWwKbDrk= ) ns01.infra.ring.nlnog.net. 600 IN AAAA 2a00:f10:400:2:4b3:4aff:fe00:707 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( AAAA 8 5 600 20260305000000 20260212000000 45046 ring.nlnog.net. Hgli7eXWP6bCHXrPz83INXOvmCqHCzuTCbN6P5iTIhRtoDy8TFk50XtZ8Neflws3LXLeOEAqB3Hh /kzgKRJETYldjStozaTK4qOh90wPIVCLabjiqgsv4opLyNA48pz75RtGM9gTKRYbQfYAEGsw3FAz 9LyLvFIShcUlg/A0HMI= ) ;; { "EDNS-VERSION": 0 }
	ns.rodecker.nl is authoritative for ring.nlnog.net
	Found RRSIG signed by ring.nlnog.net zone
	Query to ns.rodecker.nl for ring.nlnog.net/A
	Received 963 bytes from 78.47.208.123
	;; Response received from [78.47.208.123] 963 octets ;; HEADER SECTION ;; id = 2223 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) ring.nlnog.net. 600 IN A 185.66.250.169 ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= ) ;; AUTHORITY SECTION (8 records) ring.nlnog.net. 600 IN NS auth1.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth2.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth3.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth4.ns.gin.ntt.net. ring.nlnog.net. 600 IN NS auth5.ns.gin.ntt.net. ring.nlnog.net. 86400 IN NS ns.rodecker.nl. ring.nlnog.net. 86400 IN NS ns01.infra.ring.nlnog.net. ring.nlnog.net. 86400 IN RRSIG ( NS 8 3 86400 20260305000000 20260212000000 45046 ring.nlnog.net. sQsMsqo6TsTNz/bXmlBvZleLRDMzu+JyawHgWFFMif2wl13g9NzTTRQ0TIFPIqBRj12rH+As4lhS zPYwNpBf1ACiDCKqTtb8X3hxwFxxJUw9W/IS3sydAv/NOYEgkMm6RH0ZyKk6S9wntIi16gOH+rFG UsAZu4TenrA8mD61S5o= ) ;; ADDITIONAL SECTION (5 records) ns01.infra.ring.nlnog.net. 600 IN A 185.107.224.27 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( A 8 5 600 20260305000000 20260212000000 45046 ring.nlnog.net. cNoqhBBD6A/lSmJrJMWWh3q4FekgBqx8vrofFxtlGpl1LhDVI7R1Q9PtZ6zv+ISnOThhQQsk4A9r Ogavrxlviu6Hk9aOSPuiMs+Qsd0WWVLkDKj2sY2CRJYeNt1nNLm9H/Pnctel3v5s+HqTvJDHLXSW gJKXKNG8ntuQWwKbDrk= ) ns01.infra.ring.nlnog.net. 600 IN AAAA 2a00:f10:400:2:4b3:4aff:fe00:707 ns01.infra.ring.nlnog.net. 600 IN RRSIG ( AAAA 8 5 600 20260305000000 20260212000000 45046 ring.nlnog.net. Hgli7eXWP6bCHXrPz83INXOvmCqHCzuTCbN6P5iTIhRtoDy8TFk50XtZ8Neflws3LXLeOEAqB3Hh /kzgKRJETYldjStozaTK4qOh90wPIVCLabjiqgsv4opLyNA48pz75RtGM9gTKRYbQfYAEGsw3FAz 9LyLvFIShcUlg/A0HMI= ) ;; { "EDNS-VERSION": 0 }
	ring.nlnog.net A RR has value 185.66.250.169
	Found 1 RRSIGs over A RRset
	`ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to auth5.ns.gin.ntt.net for ring.nlnog.net/A
	Received 233 bytes from 116.51.22.180
	;; Response received from [116.51.22.180] 233 octets ;; HEADER SECTION ;; id = 56151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) ring.nlnog.net. 600 IN A 185.66.250.169 ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth5.ns.gin.ntt.net is authoritative for ring.nlnog.net
	Found RRSIG signed by ring.nlnog.net zone
	Query to auth5.ns.gin.ntt.net for ring.nlnog.net/A
	Received 233 bytes from 116.51.22.180
	;; Response received from [116.51.22.180] 233 octets ;; HEADER SECTION ;; id = 12103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) ring.nlnog.net. 600 IN A 185.66.250.169 ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ring.nlnog.net A RR has value 185.66.250.169
	Found 1 RRSIGs over A RRset
	`ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

ring.nlnog.net

	Query to auth4.ns.gin.ntt.net for ring.nlnog.net/A
	Received 233 bytes from 213.130.47.21
	;; Response received from [213.130.47.21] 233 octets ;; HEADER SECTION ;; id = 16551 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) ring.nlnog.net. 600 IN A 185.66.250.169 ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth4.ns.gin.ntt.net is authoritative for ring.nlnog.net
	Found RRSIG signed by ring.nlnog.net zone
	Query to auth4.ns.gin.ntt.net for ring.nlnog.net/A
	Received 233 bytes from 213.130.47.21
	;; Response received from [213.130.47.21] 233 octets ;; HEADER SECTION ;; id = 53848 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ring.nlnog.net. IN A ;; ANSWER SECTION (2 records) ring.nlnog.net. 600 IN A 185.66.250.169 ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ring.nlnog.net A RR has value 185.66.250.169
	Found 1 RRSIGs over A RRset
	`ring.nlnog.net. 600 IN RRSIG ( A 8 3 600 20260305000000 20260212000000 45046 ring.nlnog.net. pKapLmu9RaDknDXznEZcloJWxIKeKGRN/EGeZlZtFpu2bpwNG2IrHcSOcH+/tKdo00e5Kl4aueQx ONn8cdXavt+pojGfeQ4Qcp8wd7aXTG/BqAZ8TLrs8pAzw2QDRU8FiAKK345EseEHHI6+Pvc32svb MNBP0Ol+K8JJvDf5S90= )`
	RRSIG=45046 and DNSKEY=45046 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ring.nlnog.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: