DNSSEC Debugger - ripe.net

Domain Name:

Time: 2026-01-23 11:35:40 UTC

Analyzing DNSSEC problems for ripe.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1141 octets ;; HEADER SECTION ;; id = 49241 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260211000000 20260121000000 20326 . EBetGA/PKYoAlq56mQMDn03GRImGJtuP7+VneaBFBz6bKPYOkJCeH+iWyvbdHc2EdpdPwod/fNV2 buvubzluWs2ORvqpr/w3awExDRBLgjuGRo8LyRlPG/utQh2tmjC5t5CzPKKtUOjKcotmlYgfV+pQ CT1zqZfavyxYJXMGILkSVcQe+3rraAvzXQoZzMfewQZOJrhyFfKtugkpOLWCuWg5/dKleyYB8G4r EWDPhywRt+GSlOgFWhNYTHhEpZsSA6vnb3FTtIgu7CqlDD1zOTrIFuiv7L8cFizHm542Bm69lbzg QGJGdgSwOGAe4Aj55UXMdRobYUdhoWOsdGOJKA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260211000000 20260121000000 20326 . EBetGA/PKYoAlq56mQMDn03GRImGJtuP7+VneaBFBz6bKPYOkJCeH+iWyvbdHc2EdpdPwod/fNV2 buvubzluWs2ORvqpr/w3awExDRBLgjuGRo8LyRlPG/utQh2tmjC5t5CzPKKtUOjKcotmlYgfV+pQ CT1zqZfavyxYJXMGILkSVcQe+3rraAvzXQoZzMfewQZOJrhyFfKtugkpOLWCuWg5/dKleyYB8G4r EWDPhywRt+GSlOgFWhNYTHhEpZsSA6vnb3FTtIgu7CqlDD1zOTrIFuiv7L8cFizHm542Bm69lbzg QGJGdgSwOGAe4Aj55UXMdRobYUdhoWOsdGOJKA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to g.root-servers.net for ripe.net/A
	Received 1168 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1168 octets ;; HEADER SECTION ;; id = 63021 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . PBwaI2JGM8q3pJQhCyqbeVU+o1jg+zz4YrOOSwGC46DZf/hRm1tFzz0euv+JeydcISLeCwbyqOV/ guo9OYQVvXeTv3YxvucH32cQIZek/0pOLyx2APfgrj02OHNb6XptYCth6qH+ZGp5j95A9ncfEZwi pU7hTvAkkpMZpC5vWrejH3i/6QjjrgEuokNxQet4XmGjXZEyHlyUKaIMzek3Ok+0Ua9Vkw0QIObZ uNO+0eU1R9rsXMBuRxUdtIx/QFiKNthdgfLgOLi2jtHGQJm8Ujh3w88lz74VEFQWIpnqvR+ypLxw RLkGgk0XtHyKcVPie0h+YXcg3oqj2WhUn/ncbg== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for net/DNSKEY
	Received 1163 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1163 octets ;; HEADER SECTION ;; id = 44796 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . PBwaI2JGM8q3pJQhCyqbeVU+o1jg+zz4YrOOSwGC46DZf/hRm1tFzz0euv+JeydcISLeCwbyqOV/ guo9OYQVvXeTv3YxvucH32cQIZek/0pOLyx2APfgrj02OHNb6XptYCth6qH+ZGp5j95A9ncfEZwi pU7hTvAkkpMZpC5vWrejH3i/6QjjrgEuokNxQet4XmGjXZEyHlyUKaIMzek3Ok+0Ua9Vkw0QIObZ uNO+0eU1R9rsXMBuRxUdtIx/QFiKNthdgfLgOLi2jtHGQJm8Ujh3w88lz74VEFQWIpnqvR+ypLxw RLkGgk0XtHyKcVPie0h+YXcg3oqj2WhUn/ncbg== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to l.root-servers.net for net/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 31482 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . PBwaI2JGM8q3pJQhCyqbeVU+o1jg+zz4YrOOSwGC46DZf/hRm1tFzz0euv+JeydcISLeCwbyqOV/ guo9OYQVvXeTv3YxvucH32cQIZek/0pOLyx2APfgrj02OHNb6XptYCth6qH+ZGp5j95A9ncfEZwi pU7hTvAkkpMZpC5vWrejH3i/6QjjrgEuokNxQet4XmGjXZEyHlyUKaIMzek3Ok+0Ua9Vkw0QIObZ uNO+0eU1R9rsXMBuRxUdtIx/QFiKNthdgfLgOLi2jtHGQJm8Ujh3w88lz74VEFQWIpnqvR+ypLxw RLkGgk0XtHyKcVPie0h+YXcg3oqj2WhUn/ncbg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . PBwaI2JGM8q3pJQhCyqbeVU+o1jg+zz4YrOOSwGC46DZf/hRm1tFzz0euv+JeydcISLeCwbyqOV/ guo9OYQVvXeTv3YxvucH32cQIZek/0pOLyx2APfgrj02OHNb6XptYCth6qH+ZGp5j95A9ncfEZwi pU7hTvAkkpMZpC5vWrejH3i/6QjjrgEuokNxQet4XmGjXZEyHlyUKaIMzek3Ok+0Ua9Vkw0QIObZ uNO+0eU1R9rsXMBuRxUdtIx/QFiKNthdgfLgOLi2jtHGQJm8Ujh3w88lz74VEFQWIpnqvR+ypLxw RLkGgk0XtHyKcVPie0h+YXcg3oqj2WhUn/ncbg== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to e.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.12.94.30
	;; Response received from [192.12.94.30] 291 octets ;; HEADER SECTION ;; id = 54742 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331 net. 86400 IN DNSKEY ( 256 3 13 BN7nE5EGXvYfX/r9qihm5MU9BR6KTHLb/TcRXIXZcCwDj24ftYx+nRW6ca9/wHZ3NnOZ5uSG/GRE drzpVVepUg== ) ; keytag 44109 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260201151035 20260117150535 37331 net. tusjhUXspzUZAMcTChSheuzdzPCqASil3dZu+nSo0VirchZcD7hBtIV1fBGIy3dlUJmHHl7gRVWd 2TyAGjpbgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; keytag 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 BN7nE5EGXvYfX/r9qihm5MU9BR6KTHLb/TcRXIXZcCwDj24ftYx+nRW6ca9/wHZ3NnOZ5uSG/GRE drzpVVepUg== ) ; keytag 44109`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260201151035 20260117150535 37331 net. tusjhUXspzUZAMcTChSheuzdzPCqASil3dZu+nSo0VirchZcD7hBtIV1fBGIy3dlUJmHHl7gRVWd 2TyAGjpbgw== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=44109 is now in the chain-of-trust
	Query to e.gtld-servers.net for ripe.net/A
	Received 532 bytes from 192.12.94.30
	;; Response received from [192.12.94.30] 532 octets ;; HEADER SECTION ;; id = 39133 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ripe.net. 172800 IN NS ns4.apnic.net. ripe.net. 172800 IN NS ns3.afrinic.net. ripe.net. 172800 IN NS manus.authdns.ripe.net. ripe.net. 172800 IN NS ns3.lacnic.net. ripe.net. 172800 IN NS rirns.arin.net. ripe.net. 86400 IN DS ( 38758 13 2 ca4a0df4d38781d7b0f3574c6d39ef04a6b81fd44cff223f9fd20974168cc3f0 ) ripe.net. 86400 IN RRSIG ( DS 13 2 86400 20260130032627 20260123021627 44109 net. bDSibyP54VgSKXGBjsjrqBWD7+nb2Otd7cB7ydF3iB+gKeie7RzGLcsKcshqmOI89x1RQZTE4jgH J4m1tpou+A== ) ;; ADDITIONAL SECTION (11 records) ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 manus.authdns.ripe.net. 172800 IN A 193.0.9.7 manus.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::7 ns3.lacnic.net. 172800 IN A 200.3.13.14 ns3.lacnic.net. 172800 IN AAAA 2001:13c7:7002:3000::14 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Query to h.gtld-servers.net for ripe.net/DNSKEY
	Received 532 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 532 octets ;; HEADER SECTION ;; id = 61476 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ripe.net. 172800 IN NS ns4.apnic.net. ripe.net. 172800 IN NS ns3.afrinic.net. ripe.net. 172800 IN NS manus.authdns.ripe.net. ripe.net. 172800 IN NS ns3.lacnic.net. ripe.net. 172800 IN NS rirns.arin.net. ripe.net. 86400 IN DS ( 38758 13 2 ca4a0df4d38781d7b0f3574c6d39ef04a6b81fd44cff223f9fd20974168cc3f0 ) ripe.net. 86400 IN RRSIG ( DS 13 2 86400 20260130032627 20260123021627 44109 net. bDSibyP54VgSKXGBjsjrqBWD7+nb2Otd7cB7ydF3iB+gKeie7RzGLcsKcshqmOI89x1RQZTE4jgH J4m1tpou+A== ) ;; ADDITIONAL SECTION (11 records) ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 manus.authdns.ripe.net. 172800 IN A 193.0.9.7 manus.authdns.ripe.net. 172800 IN AAAA 2a13:27c0:30::7 ns3.lacnic.net. 172800 IN A 200.3.13.14 ns3.lacnic.net. 172800 IN AAAA 2001:13c7:7002:3000::14 rirns.arin.net. 172800 IN A 199.253.249.53 rirns.arin.net. 172800 IN AAAA 2620:38:2000::53 ;; { "EDNS-VERSION": 0 }
	Found child zone ripe.net

ripe.net

	Checking DS between net and ripe.net
	Query to i.gtld-servers.net for ripe.net/DS
	Received 1076 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 1076 octets ;; HEADER SECTION ;; id = 17527 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN DS ;; ANSWER SECTION (2 records) ripe.net. 86400 IN DS ( 38758 13 2 ca4a0df4d38781d7b0f3574c6d39ef04a6b81fd44cff223f9fd20974168cc3f0 ) ripe.net. 86400 IN RRSIG ( DS 13 2 86400 20260130032627 20260123021627 44109 net. bDSibyP54VgSKXGBjsjrqBWD7+nb2Otd7cB7ydF3iB+gKeie7RzGLcsKcshqmOI89x1RQZTE4jgH J4m1tpou+A== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20260128032917 20260121021917 44109 net. DXM95J/5Tf7MnFkxXRUR2sANOXtTO+8YkMARza8RnU/eQlTk9ZmHoGJ11fDWJkoQNTPr+HmdEgnX WQxbnwxDEA== ) ;; ADDITIONAL SECTION (27 records) g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ripe.net in the net zone
	DS=38758/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ripe.net. 86400 IN RRSIG ( DS 13 2 86400 20260130032627 20260123021627 44109 net. bDSibyP54VgSKXGBjsjrqBWD7+nb2Otd7cB7ydF3iB+gKeie7RzGLcsKcshqmOI89x1RQZTE4jgH J4m1tpou+A== )`
	RRSIG=44109 and DNSKEY=44109 verifies the DS RRset
	DS=38758/SHA-256 is now in the chain-of-trust
	`ripe.net. 86400 IN DS ( 38758 13 2 ca4a0df4d38781d7b0f3574c6d39ef04a6b81fd44cff223f9fd20974168cc3f0 )`
	Query to ns3.lacnic.net for ripe.net/DNSKEY
	Received 221 bytes from 200.3.13.14
	;; Response received from [200.3.13.14] 221 octets ;; HEADER SECTION ;; id = 39392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN DNSKEY ;; ANSWER SECTION (2 records) ripe.net. 3600 IN DNSKEY ( 257 3 13 4B8M2xy+tpeawuCLScNGrrJFGcg258PPa8OoqoAvtXI9JO7O0N6oSzZgXbmWdfnXKnrGzs2auEfq 56X+u6MpOA== ) ; keytag 38758 ripe.net. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260205133944 20260122120944 38758 ripe.net. niUqp4+/F8T1rACdo6S40bSoCknfH83z8geqrQlZdcfQqTaB1H2IcEIQNH0I4RUQzEo4nG1JEamz 0IVxcaG/ew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for ripe.net
	`ripe.net. 3600 IN DNSKEY ( 257 3 13 4B8M2xy+tpeawuCLScNGrrJFGcg258PPa8OoqoAvtXI9JO7O0N6oSzZgXbmWdfnXKnrGzs2auEfq 56X+u6MpOA== ) ; keytag 38758`
	DNSKEY=38758/SEP is now in the chain-of-trust
	DS=38758/SHA-256 verifies DNSKEY=38758/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ripe.net. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260205133944 20260122120944 38758 ripe.net. niUqp4+/F8T1rACdo6S40bSoCknfH83z8geqrQlZdcfQqTaB1H2IcEIQNH0I4RUQzEo4nG1JEamz 0IVxcaG/ew== )`
	RRSIG=38758 and DNSKEY=38758/SEP verifies the DNSKEY RRset
	Query to rirns.arin.net for ripe.net/A
	Received 157 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 157 octets ;; HEADER SECTION ;; id = 23771 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (2 records) ripe.net. 300 IN A 193.0.11.51 ripe.net. 300 IN RRSIG ( A 13 2 300 20260205133944 20260122120944 38758 ripe.net. MRVdIqeV7iRea886RhsIZWsqdu/lUHpBIwwRGKL4Fvv67/oHUPehmsQzPDAINUy01mj94g5KDeW9 MkzrVNG1HQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rirns.arin.net is authoritative for ripe.net
	Found RRSIG signed by ripe.net zone
	Query to ns3.afrinic.net for ripe.net/SOA
	Received 685 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 685 octets ;; HEADER SECTION ;; id = 14597 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN SOA ;; ANSWER SECTION (2 records) ripe.net. 3600 IN SOA ( manus.authdns.ripe.net. dns.ripe.net. 1769156842 ;serial 3600 ;refresh 600 ;retry 864000 ;expire 3600 ;minimum ) ripe.net. 3600 IN RRSIG ( SOA 13 2 3600 20260206082722 20260123065722 38758 ripe.net. SI5U6+EhM2MzCeWHl9iSif+dr5MMtl7/lJbE8aAKJMHxxgdy6W/Y/EUu2Dl4WBmFG3dgkOeS0/XE ZHMYmFP/UA== ) ;; AUTHORITY SECTION (6 records) ripe.net. 86400 IN NS ns4.apnic.net. ripe.net. 86400 IN NS ns3.lacnic.net. ripe.net. 86400 IN NS ns3.afrinic.net. ripe.net. 86400 IN NS rirns.arin.net. ripe.net. 86400 IN NS manus.authdns.ripe.net. ripe.net. 86400 IN RRSIG ( NS 13 2 86400 20260205133944 20260122120944 38758 ripe.net. EVzbxewYMUVqps86BVtq3ecD3kaq/0mo4Q+hFGSIvet5XDp76s8T92WLRGvm63rRcER6MtAeFFtQ cGJU1mvN/A== ) ;; ADDITIONAL SECTION (5 records) manus.authdns.ripe.net. 86400 IN A 193.0.9.7 manus.authdns.ripe.net. 86400 IN AAAA 2a13:27c0:30::7 manus.authdns.ripe.net. 86400 IN RRSIG ( A 13 4 86400 20260205133944 20260122120944 38758 ripe.net. Mjgl6D0U3S1dmdmQKgRVOs5IHQb36ntdQQzl1vuersnNF/5tc7WgCnVhfpaK6mTOPkB4pq2HwErV VzuYB0cA9w== ) manus.authdns.ripe.net. 86400 IN RRSIG ( AAAA 13 4 86400 20260205133944 20260122120944 38758 ripe.net. tSHaDsnhAHTVxxydDsg0L6aguuppTj1EyREVr2LXTzFFbU/dZJ7Gg8L92tlSyHaQbig6gNLKTelr SyITwt3+lg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns4.apnic.net for ripe.net/SOA
	Received 203 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 203 octets ;; HEADER SECTION ;; id = 11284 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN SOA ;; ANSWER SECTION (2 records) ripe.net. 3600 IN SOA ( manus.authdns.ripe.net. dns.ripe.net. 1769165182 ;serial 3600 ;refresh 600 ;retry 864000 ;expire 3600 ;minimum ) ripe.net. 3600 IN RRSIG ( SOA 13 2 3600 20260206104622 20260123091622 38758 ripe.net. Pj7mr5RwZptRv/IgjyMJsmqoWdmvHbjEOb7EV+RSUyJ8P/rg/awDifEPxCS5XshC8NC4RyLyCWiS pFowXXJb2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.apnic.net serial (1769165182) differs from ns3.afrinic.net serial (1769156842)
	Query to ns3.lacnic.net for ripe.net/SOA
	Received 203 bytes from 200.3.13.14
	;; Response received from [200.3.13.14] 203 octets ;; HEADER SECTION ;; id = 36471 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN SOA ;; ANSWER SECTION (2 records) ripe.net. 3600 IN SOA ( manus.authdns.ripe.net. dns.ripe.net. 1769165182 ;serial 3600 ;refresh 600 ;retry 864000 ;expire 3600 ;minimum ) ripe.net. 3600 IN RRSIG ( SOA 13 2 3600 20260206104622 20260123091622 38758 ripe.net. Pj7mr5RwZptRv/IgjyMJsmqoWdmvHbjEOb7EV+RSUyJ8P/rg/awDifEPxCS5XshC8NC4RyLyCWiS pFowXXJb2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.lacnic.net serial (1769165182) differs from ns3.afrinic.net serial (1769156842)
	Query to manus.authdns.ripe.net for ripe.net/SOA
	Received 195 bytes from 193.0.9.7
	;; Response received from [193.0.9.7] 195 octets ;; HEADER SECTION ;; id = 15181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN SOA ;; ANSWER SECTION (2 records) ripe.net. 3600 IN SOA ( manus.authdns.ripe.net. dns.ripe.net. 1769165182 ;serial 3600 ;refresh 600 ;retry 864000 ;expire 3600 ;minimum ) ripe.net. 3600 IN RRSIG ( SOA 13 2 3600 20260206104622 20260123091622 38758 ripe.net. Pj7mr5RwZptRv/IgjyMJsmqoWdmvHbjEOb7EV+RSUyJ8P/rg/awDifEPxCS5XshC8NC4RyLyCWiS pFowXXJb2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	manus.authdns.ripe.net serial (1769165182) differs from ns3.afrinic.net serial (1769156842)
	Query to rirns.arin.net for ripe.net/A
	Received 157 bytes from 199.253.249.53
	;; Response received from [199.253.249.53] 157 octets ;; HEADER SECTION ;; id = 32123 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (2 records) ripe.net. 300 IN A 193.0.11.51 ripe.net. 300 IN RRSIG ( A 13 2 300 20260205133944 20260122120944 38758 ripe.net. MRVdIqeV7iRea886RhsIZWsqdu/lUHpBIwwRGKL4Fvv67/oHUPehmsQzPDAINUy01mj94g5KDeW9 MkzrVNG1HQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ripe.net A RR has value 193.0.11.51
	Found 1 RRSIGs over A RRset
	`ripe.net. 300 IN RRSIG ( A 13 2 300 20260205133944 20260122120944 38758 ripe.net. MRVdIqeV7iRea886RhsIZWsqdu/lUHpBIwwRGKL4Fvv67/oHUPehmsQzPDAINUy01mj94g5KDeW9 MkzrVNG1HQ== )`
	RRSIG=38758 and DNSKEY=38758/SEP verifies the A RRset

ripe.net

	Query to manus.authdns.ripe.net for ripe.net/A
	Received 157 bytes from 193.0.9.7
	;; Response received from [193.0.9.7] 157 octets ;; HEADER SECTION ;; id = 51417 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (2 records) ripe.net. 300 IN A 193.0.11.51 ripe.net. 300 IN RRSIG ( A 13 2 300 20260205133944 20260122120944 38758 ripe.net. MRVdIqeV7iRea886RhsIZWsqdu/lUHpBIwwRGKL4Fvv67/oHUPehmsQzPDAINUy01mj94g5KDeW9 MkzrVNG1HQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	manus.authdns.ripe.net is authoritative for ripe.net
	Found RRSIG signed by ripe.net zone
	Query to manus.authdns.ripe.net for ripe.net/A
	Received 157 bytes from 193.0.9.7
	;; Response received from [193.0.9.7] 157 octets ;; HEADER SECTION ;; id = 34545 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (2 records) ripe.net. 300 IN A 193.0.11.51 ripe.net. 300 IN RRSIG ( A 13 2 300 20260205133944 20260122120944 38758 ripe.net. MRVdIqeV7iRea886RhsIZWsqdu/lUHpBIwwRGKL4Fvv67/oHUPehmsQzPDAINUy01mj94g5KDeW9 MkzrVNG1HQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ripe.net A RR has value 193.0.11.51
	Found 1 RRSIGs over A RRset
	`ripe.net. 300 IN RRSIG ( A 13 2 300 20260205133944 20260122120944 38758 ripe.net. MRVdIqeV7iRea886RhsIZWsqdu/lUHpBIwwRGKL4Fvv67/oHUPehmsQzPDAINUy01mj94g5KDeW9 MkzrVNG1HQ== )`
	RRSIG=38758 and DNSKEY=38758/SEP verifies the A RRset

ripe.net

	Query to ns4.apnic.net for ripe.net/A
	Received 157 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 157 octets ;; HEADER SECTION ;; id = 47788 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (2 records) ripe.net. 300 IN A 193.0.11.51 ripe.net. 300 IN RRSIG ( A 13 2 300 20260205133944 20260122120944 38758 ripe.net. MRVdIqeV7iRea886RhsIZWsqdu/lUHpBIwwRGKL4Fvv67/oHUPehmsQzPDAINUy01mj94g5KDeW9 MkzrVNG1HQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.apnic.net is authoritative for ripe.net
	Found RRSIG signed by ripe.net zone
	Query to ns4.apnic.net for ripe.net/A
	Received 157 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 157 octets ;; HEADER SECTION ;; id = 61071 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (2 records) ripe.net. 300 IN A 193.0.11.51 ripe.net. 300 IN RRSIG ( A 13 2 300 20260205133944 20260122120944 38758 ripe.net. MRVdIqeV7iRea886RhsIZWsqdu/lUHpBIwwRGKL4Fvv67/oHUPehmsQzPDAINUy01mj94g5KDeW9 MkzrVNG1HQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ripe.net A RR has value 193.0.11.51
	Found 1 RRSIGs over A RRset
	`ripe.net. 300 IN RRSIG ( A 13 2 300 20260205133944 20260122120944 38758 ripe.net. MRVdIqeV7iRea886RhsIZWsqdu/lUHpBIwwRGKL4Fvv67/oHUPehmsQzPDAINUy01mj94g5KDeW9 MkzrVNG1HQ== )`
	RRSIG=38758 and DNSKEY=38758/SEP verifies the A RRset

ripe.net

	Query to ns3.afrinic.net for ripe.net/A
	Received 661 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 661 octets ;; HEADER SECTION ;; id = 29887 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (2 records) ripe.net. 300 IN A 193.0.11.51 ripe.net. 300 IN RRSIG ( A 13 2 300 20260205133944 20260122120944 38758 ripe.net. MRVdIqeV7iRea886RhsIZWsqdu/lUHpBIwwRGKL4Fvv67/oHUPehmsQzPDAINUy01mj94g5KDeW9 MkzrVNG1HQ== ) ;; AUTHORITY SECTION (6 records) ripe.net. 86400 IN NS ns3.lacnic.net. ripe.net. 86400 IN NS ns4.apnic.net. ripe.net. 86400 IN NS ns3.afrinic.net. ripe.net. 86400 IN NS rirns.arin.net. ripe.net. 86400 IN NS manus.authdns.ripe.net. ripe.net. 86400 IN RRSIG ( NS 13 2 86400 20260205133944 20260122120944 38758 ripe.net. EVzbxewYMUVqps86BVtq3ecD3kaq/0mo4Q+hFGSIvet5XDp76s8T92WLRGvm63rRcER6MtAeFFtQ cGJU1mvN/A== ) ;; ADDITIONAL SECTION (5 records) manus.authdns.ripe.net. 86400 IN A 193.0.9.7 manus.authdns.ripe.net. 86400 IN AAAA 2a13:27c0:30::7 manus.authdns.ripe.net. 86400 IN RRSIG ( A 13 4 86400 20260205133944 20260122120944 38758 ripe.net. Mjgl6D0U3S1dmdmQKgRVOs5IHQb36ntdQQzl1vuersnNF/5tc7WgCnVhfpaK6mTOPkB4pq2HwErV VzuYB0cA9w== ) manus.authdns.ripe.net. 86400 IN RRSIG ( AAAA 13 4 86400 20260205133944 20260122120944 38758 ripe.net. tSHaDsnhAHTVxxydDsg0L6aguuppTj1EyREVr2LXTzFFbU/dZJ7Gg8L92tlSyHaQbig6gNLKTelr SyITwt3+lg== ) ;; { "EDNS-VERSION": 0 }
	ns3.afrinic.net is authoritative for ripe.net
	Found RRSIG signed by ripe.net zone
	Query to ns3.afrinic.net for ripe.net/A
	Received 661 bytes from 204.61.216.100
	;; Response received from [204.61.216.100] 661 octets ;; HEADER SECTION ;; id = 16622 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (2 records) ripe.net. 300 IN A 193.0.11.51 ripe.net. 300 IN RRSIG ( A 13 2 300 20260205133944 20260122120944 38758 ripe.net. MRVdIqeV7iRea886RhsIZWsqdu/lUHpBIwwRGKL4Fvv67/oHUPehmsQzPDAINUy01mj94g5KDeW9 MkzrVNG1HQ== ) ;; AUTHORITY SECTION (6 records) ripe.net. 86400 IN NS ns3.afrinic.net. ripe.net. 86400 IN NS manus.authdns.ripe.net. ripe.net. 86400 IN NS ns3.lacnic.net. ripe.net. 86400 IN NS ns4.apnic.net. ripe.net. 86400 IN NS rirns.arin.net. ripe.net. 86400 IN RRSIG ( NS 13 2 86400 20260205133944 20260122120944 38758 ripe.net. EVzbxewYMUVqps86BVtq3ecD3kaq/0mo4Q+hFGSIvet5XDp76s8T92WLRGvm63rRcER6MtAeFFtQ cGJU1mvN/A== ) ;; ADDITIONAL SECTION (5 records) manus.authdns.ripe.net. 86400 IN A 193.0.9.7 manus.authdns.ripe.net. 86400 IN AAAA 2a13:27c0:30::7 manus.authdns.ripe.net. 86400 IN RRSIG ( A 13 4 86400 20260205133944 20260122120944 38758 ripe.net. Mjgl6D0U3S1dmdmQKgRVOs5IHQb36ntdQQzl1vuersnNF/5tc7WgCnVhfpaK6mTOPkB4pq2HwErV VzuYB0cA9w== ) manus.authdns.ripe.net. 86400 IN RRSIG ( AAAA 13 4 86400 20260205133944 20260122120944 38758 ripe.net. tSHaDsnhAHTVxxydDsg0L6aguuppTj1EyREVr2LXTzFFbU/dZJ7Gg8L92tlSyHaQbig6gNLKTelr SyITwt3+lg== ) ;; { "EDNS-VERSION": 0 }
	ripe.net A RR has value 193.0.11.51
	Found 1 RRSIGs over A RRset
	`ripe.net. 300 IN RRSIG ( A 13 2 300 20260205133944 20260122120944 38758 ripe.net. MRVdIqeV7iRea886RhsIZWsqdu/lUHpBIwwRGKL4Fvv67/oHUPehmsQzPDAINUy01mj94g5KDeW9 MkzrVNG1HQ== )`
	RRSIG=38758 and DNSKEY=38758/SEP verifies the A RRset

ripe.net

	Query to ns3.lacnic.net for ripe.net/A
	Received 157 bytes from 200.3.13.14
	;; Response received from [200.3.13.14] 157 octets ;; HEADER SECTION ;; id = 47123 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (2 records) ripe.net. 300 IN A 193.0.11.51 ripe.net. 300 IN RRSIG ( A 13 2 300 20260205133944 20260122120944 38758 ripe.net. MRVdIqeV7iRea886RhsIZWsqdu/lUHpBIwwRGKL4Fvv67/oHUPehmsQzPDAINUy01mj94g5KDeW9 MkzrVNG1HQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.lacnic.net is authoritative for ripe.net
	Found RRSIG signed by ripe.net zone
	Query to ns3.lacnic.net for ripe.net/A
	Received 157 bytes from 200.3.13.14
	;; Response received from [200.3.13.14] 157 octets ;; HEADER SECTION ;; id = 25020 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (2 records) ripe.net. 300 IN A 193.0.11.51 ripe.net. 300 IN RRSIG ( A 13 2 300 20260205133944 20260122120944 38758 ripe.net. MRVdIqeV7iRea886RhsIZWsqdu/lUHpBIwwRGKL4Fvv67/oHUPehmsQzPDAINUy01mj94g5KDeW9 MkzrVNG1HQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ripe.net A RR has value 193.0.11.51
	Found 1 RRSIGs over A RRset
	`ripe.net. 300 IN RRSIG ( A 13 2 300 20260205133944 20260122120944 38758 ripe.net. MRVdIqeV7iRea886RhsIZWsqdu/lUHpBIwwRGKL4Fvv67/oHUPehmsQzPDAINUy01mj94g5KDeW9 MkzrVNG1HQ== )`
	RRSIG=38758 and DNSKEY=38758/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ripe.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: