DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-05 16:50:17 UTC

Analyzing DNSSEC problems for ru.nl

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 12607 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to e.root-servers.net for ru.nl/A
	Received 559 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 559 octets ;; HEADER SECTION ;; id = 28173 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . Ol2uk6dMAZLO/CLg9Ui52iunnxxEHKFmUHr4MUxJD7aX2S2QlKhNOrH8XH13IVVsO9NnjDdh+Qe6 0qucaHdKBrvfjBtwEtTJsti4L29wK1WhQTGbDA7mTEnvk3se6eyn6eRC244FBWL/vVg9gw75/0mH 6m3wRxMYKc+K8s+GQ2n1SpuhS1BFCapwdHhi4EkIBVu9HLpT9xTeq73nxie5DwTaZFhyQ0rGkoWr a4jWpeJGkXDqb7VJknbgMdezBagqLGlrHW0Op7qCy0XgD6UubAoXyFdItMsrja5uYC1s1PotAJWI MXRTXwojGzvzwib3vodSQw1bMX9VD1yeilUGzA== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for nl/DNSKEY
	Received 556 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 556 octets ;; HEADER SECTION ;; id = 65252 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns4.dns.nl. nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . Ol2uk6dMAZLO/CLg9Ui52iunnxxEHKFmUHr4MUxJD7aX2S2QlKhNOrH8XH13IVVsO9NnjDdh+Qe6 0qucaHdKBrvfjBtwEtTJsti4L29wK1WhQTGbDA7mTEnvk3se6eyn6eRC244FBWL/vVg9gw75/0mH 6m3wRxMYKc+K8s+GQ2n1SpuhS1BFCapwdHhi4EkIBVu9HLpT9xTeq73nxie5DwTaZFhyQ0rGkoWr a4jWpeJGkXDqb7VJknbgMdezBagqLGlrHW0Op7qCy0XgD6UubAoXyFdItMsrja5uYC1s1PotAJWI MXRTXwojGzvzwib3vodSQw1bMX9VD1yeilUGzA== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Found child zone nl

	Checking DS between . and nl
	Query to m.root-servers.net for nl/DS
	Received 366 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 366 octets ;; HEADER SECTION ;; id = 13237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . Ol2uk6dMAZLO/CLg9Ui52iunnxxEHKFmUHr4MUxJD7aX2S2QlKhNOrH8XH13IVVsO9NnjDdh+Qe6 0qucaHdKBrvfjBtwEtTJsti4L29wK1WhQTGbDA7mTEnvk3se6eyn6eRC244FBWL/vVg9gw75/0mH 6m3wRxMYKc+K8s+GQ2n1SpuhS1BFCapwdHhi4EkIBVu9HLpT9xTeq73nxie5DwTaZFhyQ0rGkoWr a4jWpeJGkXDqb7VJknbgMdezBagqLGlrHW0Op7qCy0XgD6UubAoXyFdItMsrja5uYC1s1PotAJWI MXRTXwojGzvzwib3vodSQw1bMX9VD1yeilUGzA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nl in the . zone
	DS=17153/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . Ol2uk6dMAZLO/CLg9Ui52iunnxxEHKFmUHr4MUxJD7aX2S2QlKhNOrH8XH13IVVsO9NnjDdh+Qe6 0qucaHdKBrvfjBtwEtTJsti4L29wK1WhQTGbDA7mTEnvk3se6eyn6eRC244FBWL/vVg9gw75/0mH 6m3wRxMYKc+K8s+GQ2n1SpuhS1BFCapwdHhi4EkIBVu9HLpT9xTeq73nxie5DwTaZFhyQ0rGkoWr a4jWpeJGkXDqb7VJknbgMdezBagqLGlrHW0Op7qCy0XgD6UubAoXyFdItMsrja5uYC1s1PotAJWI MXRTXwojGzvzwib3vodSQw1bMX9VD1yeilUGzA== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=17153/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 )`
	Query to ns3.dns.nl for nl/DNSKEY
	Received 369 bytes from 194.0.25.24
	;; Response received from [194.0.25.24] 369 octets ;; HEADER SECTION ;; id = 6751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (4 records) nl. 3600 IN DNSKEY ( 256 3 13 ArhUNmeRU9NE4fAbORd6DjntZ0vDP3PoQotzRxGg/gdniUCSGp/naJdkcG5/Y9+SVE6f5h/NZCqG y2+Kh/FeEw== ) ; keytag 467 nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153 nl. 3600 IN DNSKEY ( 256 3 13 ObMZD0WbONw5/xzfY63W7kn4yVhtYwgu7pjE9L4TAMsaAEpDVhGmQ7fA373thjkjjZTdHuQYg33k mj8A3wqX7g== ) ; keytag 60847 nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260924173059 20260827113829 17153 nl. 26iZqMrZ/1ePUis3XOH3kUeIn+7Sx9ZtFjHwkh2al6dpeF0kSwsxItOhla3wzNXrg1IeYldoUHD5 v2kLRB3lsA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 13 ArhUNmeRU9NE4fAbORd6DjntZ0vDP3PoQotzRxGg/gdniUCSGp/naJdkcG5/Y9+SVE6f5h/NZCqG y2+Kh/FeEw== ) ; keytag 467`
	`nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153`
	`nl. 3600 IN DNSKEY ( 256 3 13 ObMZD0WbONw5/xzfY63W7kn4yVhtYwgu7pjE9L4TAMsaAEpDVhGmQ7fA373thjkjjZTdHuQYg33k mj8A3wqX7g== ) ; keytag 60847`
	DNSKEY=17153/SEP is now in the chain-of-trust
	DS=17153/SHA-256 verifies DNSKEY=17153/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260924173059 20260827113829 17153 nl. 26iZqMrZ/1ePUis3XOH3kUeIn+7Sx9ZtFjHwkh2al6dpeF0kSwsxItOhla3wzNXrg1IeYldoUHD5 v2kLRB3lsA== )`
	RRSIG=17153 and DNSKEY=17153/SEP verifies the DNSKEY RRset
	DNSKEY=467 is now in the chain-of-trust
	DNSKEY=60847 is now in the chain-of-trust
	Query to ns1.dns.nl for ru.nl/A
	Received 404 bytes from 194.0.28.53
	;; Response received from [194.0.28.53] 404 octets ;; HEADER SECTION ;; id = 49439 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru.nl. 3600 IN NS ns1.zurich.surf.net. ru.nl. 3600 IN NS ns1.surfnet.nl. ru.nl. 3600 IN NS ns3.ru.nl. ru.nl. 3600 IN NS ns4.ru.nl. ru.nl. 3600 IN DS ( 28744 8 2 cfbc56b85080e62239b47204ce52d62a8b2bc82eccc5cbec0744cf0c4989ee7b ) ru.nl. 3600 IN DS ( 45436 8 2 e7dade1959c1fbdc8affafbe07b773d9b57368fde05db61fbaaa70bbccad30ba ) ru.nl. 3600 IN RRSIG ( DS 13 2 3600 20261001050742 20260903073722 60847 nl. WkU4lu7AREa14FpyhU37fIPcK/JP62r5iLxQ+MjI/09AwQjBs+v7JvOi/pImsRfT7yLFcZfVyt9e PVWnTGtY/A== ) ;; ADDITIONAL SECTION (5 records) ns3.ru.nl. 3600 IN A 131.174.78.16 ns4.ru.nl. 3600 IN A 131.174.78.17 ns1.surfnet.nl. 3600 IN A 192.87.106.101 ns1.surfnet.nl. 3600 IN AAAA 2001:610:1:800a:192:87:106:101 ;; { "EDNS-VERSION": 0 }
	Query to ns3.dns.nl for ru.nl/DNSKEY
	Received 399 bytes from 194.0.25.24
	;; Response received from [194.0.25.24] 399 octets ;; HEADER SECTION ;; id = 20446 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru.nl. 3600 IN NS ns1.zurich.surf.net. ru.nl. 3600 IN NS ns1.surfnet.nl. ru.nl. 3600 IN NS ns3.ru.nl. ru.nl. 3600 IN NS ns4.ru.nl. ru.nl. 3600 IN DS ( 28744 8 2 cfbc56b85080e62239b47204ce52d62a8b2bc82eccc5cbec0744cf0c4989ee7b ) ru.nl. 3600 IN DS ( 45436 8 2 e7dade1959c1fbdc8affafbe07b773d9b57368fde05db61fbaaa70bbccad30ba ) ru.nl. 3600 IN RRSIG ( DS 13 2 3600 20261001050742 20260903073722 60847 nl. WkU4lu7AREa14FpyhU37fIPcK/JP62r5iLxQ+MjI/09AwQjBs+v7JvOi/pImsRfT7yLFcZfVyt9e PVWnTGtY/A== ) ;; ADDITIONAL SECTION (5 records) ns1.surfnet.nl. 3600 IN A 192.87.106.101 ns3.ru.nl. 3600 IN A 131.174.78.16 ns4.ru.nl. 3600 IN A 131.174.78.17 ns1.surfnet.nl. 3600 IN AAAA 2001:610:1:800a:192:87:106:101 ;; { "EDNS-VERSION": 0 }
	Found child zone ru.nl

ru.nl

	Checking DS between nl and ru.nl
	Query to ns1.dns.nl for ru.nl/DS
	Received 228 bytes from 194.0.28.53
	;; Response received from [194.0.28.53] 228 octets ;; HEADER SECTION ;; id = 16194 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN DS ;; ANSWER SECTION (3 records) ru.nl. 3600 IN DS ( 28744 8 2 cfbc56b85080e62239b47204ce52d62a8b2bc82eccc5cbec0744cf0c4989ee7b ) ru.nl. 3600 IN DS ( 45436 8 2 e7dade1959c1fbdc8affafbe07b773d9b57368fde05db61fbaaa70bbccad30ba ) ru.nl. 3600 IN RRSIG ( DS 13 2 3600 20261001050742 20260903073722 60847 nl. WkU4lu7AREa14FpyhU37fIPcK/JP62r5iLxQ+MjI/09AwQjBs+v7JvOi/pImsRfT7yLFcZfVyt9e PVWnTGtY/A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for ru.nl in the nl zone
	DS=28744/SHA-256 has algorithm RSASHA256
	DS=45436/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ru.nl. 3600 IN RRSIG ( DS 13 2 3600 20261001050742 20260903073722 60847 nl. WkU4lu7AREa14FpyhU37fIPcK/JP62r5iLxQ+MjI/09AwQjBs+v7JvOi/pImsRfT7yLFcZfVyt9e PVWnTGtY/A== )`
	RRSIG=60847 and DNSKEY=60847 verifies the DS RRset
	DS=28744/SHA-256 is now in the chain-of-trust
	DS=45436/SHA-256 is now in the chain-of-trust
	`ru.nl. 3600 IN DS ( 28744 8 2 cfbc56b85080e62239b47204ce52d62a8b2bc82eccc5cbec0744cf0c4989ee7b )`
	`ru.nl. 3600 IN DS ( 45436 8 2 e7dade1959c1fbdc8affafbe07b773d9b57368fde05db61fbaaa70bbccad30ba )`
	Query to ns3.ru.nl for ru.nl/DNSKEY
	Received 1229 bytes from 131.174.78.16
	;; Response received from [131.174.78.16] 1229 octets ;; HEADER SECTION ;; id = 48336 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN DNSKEY ;; ANSWER SECTION (6 records) ru.nl. 172800 IN DNSKEY ( 257 3 8 AwEAAbRuArckQYV1ew30HU8e2ybL3bl/eipr0zCIAtcX3P7/+7wJNJEYFIbIxriZ8eJlutYA1T54 iEsdRn0FduhxlvRn87X/CqKqhFb9acXn4qBkdS5d7o5eI0FCWjqZD2IfsliZUpFV986up5x88SnZ RhoHqQbDMA0wQQKsmjbrAITq/NbHQEBgyJfY1Z6tzlIXlexOuqElPu0SmMADT9OCEsbhvN43GL+D zz03O50Q5+NSRde51LPj7xKAfceAy1AbfBVB2jZOsYAkqI4XQpzQbJBEBxjyfgHHTHd0B3VKBAc+ OtRZ8fuEtA3YaMW9n/7ECcBZk9cLjtNd8uFlGiNWH/8= ) ; keytag 45436 ru.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAdsoYBDmm1g1mXcd36nMQonH5ZUptbN+FFVMXRFtDQo6m5LiiO88nwPwva1gy9rhTfLj9vkE kD8tuHrErFfb51olwSmoyG2naziM1H/iNmCqL0aDSbnYYDUGRTK0/g29Yy76pzxIXC6Dv8DuB+s3 VWJ661xGBOFM0w6ghZLFwZ/1 ) ; keytag 20316 ru.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAdB1dqRxFN8jrANMT4VlsMMiKE/IDGMUkKtvxWs9tIgTjRzPlF5+t/G223CoOk5gk3A6d0GQ BSTgYMQ21/jwiB5SqgMohtutG2OP/fxqlWFXBTUidOdZimXLA9MwnGjwdHQbWToirb2M+P+1Oo60 eHnG9TAU6KUe/tSZ4GipFrln ) ; keytag 30168 ru.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260908190250 20260904183118 20316 ru.nl. C1staQZL31VpfPWLopmgeQ+HypvI0vTF/n7H6RXmOGEjEotYc5VLUP5grQ6GuzhuURPgN8q+Zgrl GPJtnipn4wCYk5slUcbZbuc21T+0mawwzEHBVBQ+v1h7Sx2RV9e1UzEzsIv3FVRI0x2vEWYFLb5A +s5JrZ8CYRrzZUK0edU= ) ru.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260908190250 20260904183118 30168 ru.nl. V4SoPQeRBCLzZOeUfbJ3vQS3L2F8Yh27wirBcWE7AF6W4Alat8HklfIW+cbxBjUGYdYR23jcROBQ Zhfxg+ZAjbgftIZoDHQygZIpiHkRVhIlu4YVHTHUBppA9cJV/3sisd+DpNwtL73dCrEXcUtUWFbu JNvuhmfyvEl71Di/t44= ) ru.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260908190250 20260904183118 45436 ru.nl. KxW1v3eomkfx8j1cwExMuohG8Ln3zWFMf6KR+AO4/xS3N4pHcZlKoczqK95qrJEbTZYupl3WJfs9 TI+TZeDJf8po1ZtzD7evN6aT9aplXPDAn3o9aG2AIkj0sB8J0lHju1vFUOuxuQOqM0EPFmI5srWx zMDuADeDXyaxGpZoVUprW41OvZsq5xhMoVbrX2l6sevDZ/YUHkKCf/AipufTCw8gWIO2Xx0qFNQ8 AsjDFizCIRTQ0NvdGYlxl3cbUO6PUHbDNk9aQUUUAu9I/1ftbLyooXLUT+HuNiYYiWwRoDfT+E7j rQSfzYy7OFkjkxhp4mYEyZ9JOpFZZ4CiPE0Jjg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ru.nl
	`ru.nl. 172800 IN DNSKEY ( 257 3 8 AwEAAbRuArckQYV1ew30HU8e2ybL3bl/eipr0zCIAtcX3P7/+7wJNJEYFIbIxriZ8eJlutYA1T54 iEsdRn0FduhxlvRn87X/CqKqhFb9acXn4qBkdS5d7o5eI0FCWjqZD2IfsliZUpFV986up5x88SnZ RhoHqQbDMA0wQQKsmjbrAITq/NbHQEBgyJfY1Z6tzlIXlexOuqElPu0SmMADT9OCEsbhvN43GL+D zz03O50Q5+NSRde51LPj7xKAfceAy1AbfBVB2jZOsYAkqI4XQpzQbJBEBxjyfgHHTHd0B3VKBAc+ OtRZ8fuEtA3YaMW9n/7ECcBZk9cLjtNd8uFlGiNWH/8= ) ; keytag 45436`
	`ru.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAdsoYBDmm1g1mXcd36nMQonH5ZUptbN+FFVMXRFtDQo6m5LiiO88nwPwva1gy9rhTfLj9vkE kD8tuHrErFfb51olwSmoyG2naziM1H/iNmCqL0aDSbnYYDUGRTK0/g29Yy76pzxIXC6Dv8DuB+s3 VWJ661xGBOFM0w6ghZLFwZ/1 ) ; keytag 20316`
	`ru.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAdB1dqRxFN8jrANMT4VlsMMiKE/IDGMUkKtvxWs9tIgTjRzPlF5+t/G223CoOk5gk3A6d0GQ BSTgYMQ21/jwiB5SqgMohtutG2OP/fxqlWFXBTUidOdZimXLA9MwnGjwdHQbWToirb2M+P+1Oo60 eHnG9TAU6KUe/tSZ4GipFrln ) ; keytag 30168`
	DNSKEY=45436/SEP is now in the chain-of-trust
	DS=45436/SHA-256 verifies DNSKEY=45436/SEP
	DS=28744/SHA-256 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`ru.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260908190250 20260904183118 20316 ru.nl. C1staQZL31VpfPWLopmgeQ+HypvI0vTF/n7H6RXmOGEjEotYc5VLUP5grQ6GuzhuURPgN8q+Zgrl GPJtnipn4wCYk5slUcbZbuc21T+0mawwzEHBVBQ+v1h7Sx2RV9e1UzEzsIv3FVRI0x2vEWYFLb5A +s5JrZ8CYRrzZUK0edU= )`
	`ru.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260908190250 20260904183118 30168 ru.nl. V4SoPQeRBCLzZOeUfbJ3vQS3L2F8Yh27wirBcWE7AF6W4Alat8HklfIW+cbxBjUGYdYR23jcROBQ Zhfxg+ZAjbgftIZoDHQygZIpiHkRVhIlu4YVHTHUBppA9cJV/3sisd+DpNwtL73dCrEXcUtUWFbu JNvuhmfyvEl71Di/t44= )`
	`ru.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260908190250 20260904183118 45436 ru.nl. KxW1v3eomkfx8j1cwExMuohG8Ln3zWFMf6KR+AO4/xS3N4pHcZlKoczqK95qrJEbTZYupl3WJfs9 TI+TZeDJf8po1ZtzD7evN6aT9aplXPDAn3o9aG2AIkj0sB8J0lHju1vFUOuxuQOqM0EPFmI5srWx zMDuADeDXyaxGpZoVUprW41OvZsq5xhMoVbrX2l6sevDZ/YUHkKCf/AipufTCw8gWIO2Xx0qFNQ8 AsjDFizCIRTQ0NvdGYlxl3cbUO6PUHbDNk9aQUUUAu9I/1ftbLyooXLUT+HuNiYYiWwRoDfT+E7j rQSfzYy7OFkjkxhp4mYEyZ9JOpFZZ4CiPE0Jjg== )`
	RRSIG=20316 and DNSKEY=20316 verifies the DNSKEY RRset
	RRSIG=30168 and DNSKEY=30168 verifies the DNSKEY RRset
	RRSIG=45436 and DNSKEY=45436/SEP verifies the DNSKEY RRset
	DNSKEY=20316 is now in the chain-of-trust
	DNSKEY=30168 is now in the chain-of-trust
	Query to ns4.ru.nl for ru.nl/A
	Received 380 bytes from 131.174.78.17
	;; Response received from [131.174.78.17] 380 octets ;; HEADER SECTION ;; id = 63403 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN A ;; ANSWER SECTION (3 records) ru.nl. 600 IN A 131.174.78.60 ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 20316 ru.nl. aac1Ghl/UmPKAingxPPEzX7jcHOQL4mbZBqNCAN2CHRE/jerY2DhObRH9RxiLTG4GJ9DgoBRE4Fl RnPwk1bhvEqi2/MoMMGaipDtooaBS34ugKXZkdkDFJnrXg7Z1kss2b9uF93VhOfzIQoqkiq6ix6M Bzl/cG8NTe02EiVnGdQ= ) ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 30168 ru.nl. rwwp+scBWQXAKoLWELrdNaRmeITksmGT3aOS5oOiYyDGXFvv2i4x9C372o9RB0wtPUP2z5Xig8Dd tfYFDCgId182+CciEZ2xDt1jMo/vjIQAFOYIm3RiPGmPaJ8gnWkZ2X38T47kg9q8i7tVA94yfNKN /onVfkvhprVzsdbf3zY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.ru.nl is authoritative for ru.nl
	Found RRSIG signed by ru.nl zone
	Query to ns1.zurich.surf.net for ru.nl/SOA
	Received 414 bytes from 195.176.255.9
	;; Response received from [195.176.255.9] 414 octets ;; HEADER SECTION ;; id = 11205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN SOA ;; ANSWER SECTION (3 records) ru.nl. 28800 IN SOA ( ns3.ru.nl. netmaster.ru.nl. 2009559214 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 86400 ;minimum ) ru.nl. 28800 IN RRSIG ( SOA 8 2 28800 20260909163913 20260905153913 20316 ru.nl. KRK3DSpkBBSdk3xLJ07Zv0ajdVhQfYEyQJICNMrENIRGrOeepTIlKSeXfDCtVHHVsnHeJq5n4Hcq 2sP+Xs+O9JPKKRAU++j6m1/tWi9HlU/0IEjMw6ZXcGXz8ILCxyNzUH/dwCHMPyBwlzzpDnxnb1bD EqMj7NWOYAxFJcIXfdI= ) ru.nl. 28800 IN RRSIG ( SOA 8 2 28800 20260909163913 20260905153913 30168 ru.nl. QrDS1xdVfleBRtxzAyniij78vSXknMx7EG7cCNnAjtfJWcugiA+E0fJM41a8XKPKPTqgIprfik3S /w6lrWtHy8ShVtFhNREwOFLHcjRzHWf1DuK7GHmbXbNKYv+Ampe4Ye6XMLu/nfqhGdnRZUmcciYc N5irXedS58pzFxac4m0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.surfnet.nl for ru.nl/SOA
	Received 414 bytes from 192.87.106.101
	;; Response received from [192.87.106.101] 414 octets ;; HEADER SECTION ;; id = 13692 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN SOA ;; ANSWER SECTION (3 records) ru.nl. 28800 IN SOA ( ns3.ru.nl. netmaster.ru.nl. 2009559214 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 86400 ;minimum ) ru.nl. 28800 IN RRSIG ( SOA 8 2 28800 20260909163913 20260905153913 20316 ru.nl. KRK3DSpkBBSdk3xLJ07Zv0ajdVhQfYEyQJICNMrENIRGrOeepTIlKSeXfDCtVHHVsnHeJq5n4Hcq 2sP+Xs+O9JPKKRAU++j6m1/tWi9HlU/0IEjMw6ZXcGXz8ILCxyNzUH/dwCHMPyBwlzzpDnxnb1bD EqMj7NWOYAxFJcIXfdI= ) ru.nl. 28800 IN RRSIG ( SOA 8 2 28800 20260909163913 20260905153913 30168 ru.nl. QrDS1xdVfleBRtxzAyniij78vSXknMx7EG7cCNnAjtfJWcugiA+E0fJM41a8XKPKPTqgIprfik3S /w6lrWtHy8ShVtFhNREwOFLHcjRzHWf1DuK7GHmbXbNKYv+Ampe4Ye6XMLu/nfqhGdnRZUmcciYc N5irXedS58pzFxac4m0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.ru.nl for ru.nl/SOA
	Received 414 bytes from 131.174.78.16
	;; Response received from [131.174.78.16] 414 octets ;; HEADER SECTION ;; id = 20553 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN SOA ;; ANSWER SECTION (3 records) ru.nl. 28800 IN SOA ( ns3.ru.nl. netmaster.ru.nl. 2009559214 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 86400 ;minimum ) ru.nl. 28800 IN RRSIG ( SOA 8 2 28800 20260909163913 20260905153913 20316 ru.nl. KRK3DSpkBBSdk3xLJ07Zv0ajdVhQfYEyQJICNMrENIRGrOeepTIlKSeXfDCtVHHVsnHeJq5n4Hcq 2sP+Xs+O9JPKKRAU++j6m1/tWi9HlU/0IEjMw6ZXcGXz8ILCxyNzUH/dwCHMPyBwlzzpDnxnb1bD EqMj7NWOYAxFJcIXfdI= ) ru.nl. 28800 IN RRSIG ( SOA 8 2 28800 20260909163913 20260905153913 30168 ru.nl. QrDS1xdVfleBRtxzAyniij78vSXknMx7EG7cCNnAjtfJWcugiA+E0fJM41a8XKPKPTqgIprfik3S /w6lrWtHy8ShVtFhNREwOFLHcjRzHWf1DuK7GHmbXbNKYv+Ampe4Ye6XMLu/nfqhGdnRZUmcciYc N5irXedS58pzFxac4m0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.ru.nl for ru.nl/A
	ru.nl A RR has value 131.174.78.60
	Found 2 RRSIGs over A RRset
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 20316 ru.nl. aac1Ghl/UmPKAingxPPEzX7jcHOQL4mbZBqNCAN2CHRE/jerY2DhObRH9RxiLTG4GJ9DgoBRE4Fl RnPwk1bhvEqi2/MoMMGaipDtooaBS34ugKXZkdkDFJnrXg7Z1kss2b9uF93VhOfzIQoqkiq6ix6M Bzl/cG8NTe02EiVnGdQ= )`
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 30168 ru.nl. rwwp+scBWQXAKoLWELrdNaRmeITksmGT3aOS5oOiYyDGXFvv2i4x9C372o9RB0wtPUP2z5Xig8Dd tfYFDCgId182+CciEZ2xDt1jMo/vjIQAFOYIm3RiPGmPaJ8gnWkZ2X38T47kg9q8i7tVA94yfNKN /onVfkvhprVzsdbf3zY= )`
	RRSIG=20316 and DNSKEY=20316 verifies the A RRset
	RRSIG=30168 and DNSKEY=30168 verifies the A RRset

ru.nl

	Query to ns1.surfnet.nl for ru.nl/A
	Received 380 bytes from 192.87.106.101
	;; Response received from [192.87.106.101] 380 octets ;; HEADER SECTION ;; id = 62584 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN A ;; ANSWER SECTION (3 records) ru.nl. 600 IN A 131.174.78.60 ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 20316 ru.nl. aac1Ghl/UmPKAingxPPEzX7jcHOQL4mbZBqNCAN2CHRE/jerY2DhObRH9RxiLTG4GJ9DgoBRE4Fl RnPwk1bhvEqi2/MoMMGaipDtooaBS34ugKXZkdkDFJnrXg7Z1kss2b9uF93VhOfzIQoqkiq6ix6M Bzl/cG8NTe02EiVnGdQ= ) ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 30168 ru.nl. rwwp+scBWQXAKoLWELrdNaRmeITksmGT3aOS5oOiYyDGXFvv2i4x9C372o9RB0wtPUP2z5Xig8Dd tfYFDCgId182+CciEZ2xDt1jMo/vjIQAFOYIm3RiPGmPaJ8gnWkZ2X38T47kg9q8i7tVA94yfNKN /onVfkvhprVzsdbf3zY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.surfnet.nl is authoritative for ru.nl
	Found RRSIG signed by ru.nl zone
	Query to ns1.surfnet.nl for ru.nl/A
	ru.nl A RR has value 131.174.78.60
	Found 2 RRSIGs over A RRset
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 20316 ru.nl. aac1Ghl/UmPKAingxPPEzX7jcHOQL4mbZBqNCAN2CHRE/jerY2DhObRH9RxiLTG4GJ9DgoBRE4Fl RnPwk1bhvEqi2/MoMMGaipDtooaBS34ugKXZkdkDFJnrXg7Z1kss2b9uF93VhOfzIQoqkiq6ix6M Bzl/cG8NTe02EiVnGdQ= )`
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 30168 ru.nl. rwwp+scBWQXAKoLWELrdNaRmeITksmGT3aOS5oOiYyDGXFvv2i4x9C372o9RB0wtPUP2z5Xig8Dd tfYFDCgId182+CciEZ2xDt1jMo/vjIQAFOYIm3RiPGmPaJ8gnWkZ2X38T47kg9q8i7tVA94yfNKN /onVfkvhprVzsdbf3zY= )`
	RRSIG=20316 and DNSKEY=20316 verifies the A RRset
	RRSIG=30168 and DNSKEY=30168 verifies the A RRset

ru.nl

	Query to ns1.zurich.surf.net for ru.nl/A
	Received 380 bytes from 195.176.255.9
	;; Response received from [195.176.255.9] 380 octets ;; HEADER SECTION ;; id = 13806 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN A ;; ANSWER SECTION (3 records) ru.nl. 600 IN A 131.174.78.60 ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 20316 ru.nl. aac1Ghl/UmPKAingxPPEzX7jcHOQL4mbZBqNCAN2CHRE/jerY2DhObRH9RxiLTG4GJ9DgoBRE4Fl RnPwk1bhvEqi2/MoMMGaipDtooaBS34ugKXZkdkDFJnrXg7Z1kss2b9uF93VhOfzIQoqkiq6ix6M Bzl/cG8NTe02EiVnGdQ= ) ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 30168 ru.nl. rwwp+scBWQXAKoLWELrdNaRmeITksmGT3aOS5oOiYyDGXFvv2i4x9C372o9RB0wtPUP2z5Xig8Dd tfYFDCgId182+CciEZ2xDt1jMo/vjIQAFOYIm3RiPGmPaJ8gnWkZ2X38T47kg9q8i7tVA94yfNKN /onVfkvhprVzsdbf3zY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.zurich.surf.net is authoritative for ru.nl
	Found RRSIG signed by ru.nl zone
	Query to ns1.zurich.surf.net for ru.nl/A
	ru.nl A RR has value 131.174.78.60
	Found 2 RRSIGs over A RRset
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 20316 ru.nl. aac1Ghl/UmPKAingxPPEzX7jcHOQL4mbZBqNCAN2CHRE/jerY2DhObRH9RxiLTG4GJ9DgoBRE4Fl RnPwk1bhvEqi2/MoMMGaipDtooaBS34ugKXZkdkDFJnrXg7Z1kss2b9uF93VhOfzIQoqkiq6ix6M Bzl/cG8NTe02EiVnGdQ= )`
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 30168 ru.nl. rwwp+scBWQXAKoLWELrdNaRmeITksmGT3aOS5oOiYyDGXFvv2i4x9C372o9RB0wtPUP2z5Xig8Dd tfYFDCgId182+CciEZ2xDt1jMo/vjIQAFOYIm3RiPGmPaJ8gnWkZ2X38T47kg9q8i7tVA94yfNKN /onVfkvhprVzsdbf3zY= )`
	RRSIG=20316 and DNSKEY=20316 verifies the A RRset
	RRSIG=30168 and DNSKEY=30168 verifies the A RRset

ru.nl

	Query to ns3.ru.nl for ru.nl/A
	Received 380 bytes from 131.174.78.16
	;; Response received from [131.174.78.16] 380 octets ;; HEADER SECTION ;; id = 25561 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN A ;; ANSWER SECTION (3 records) ru.nl. 600 IN A 131.174.78.60 ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 20316 ru.nl. aac1Ghl/UmPKAingxPPEzX7jcHOQL4mbZBqNCAN2CHRE/jerY2DhObRH9RxiLTG4GJ9DgoBRE4Fl RnPwk1bhvEqi2/MoMMGaipDtooaBS34ugKXZkdkDFJnrXg7Z1kss2b9uF93VhOfzIQoqkiq6ix6M Bzl/cG8NTe02EiVnGdQ= ) ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 30168 ru.nl. rwwp+scBWQXAKoLWELrdNaRmeITksmGT3aOS5oOiYyDGXFvv2i4x9C372o9RB0wtPUP2z5Xig8Dd tfYFDCgId182+CciEZ2xDt1jMo/vjIQAFOYIm3RiPGmPaJ8gnWkZ2X38T47kg9q8i7tVA94yfNKN /onVfkvhprVzsdbf3zY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.ru.nl is authoritative for ru.nl
	Found RRSIG signed by ru.nl zone
	Query to ns3.ru.nl for ru.nl/A
	ru.nl A RR has value 131.174.78.60
	Found 2 RRSIGs over A RRset
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 20316 ru.nl. aac1Ghl/UmPKAingxPPEzX7jcHOQL4mbZBqNCAN2CHRE/jerY2DhObRH9RxiLTG4GJ9DgoBRE4Fl RnPwk1bhvEqi2/MoMMGaipDtooaBS34ugKXZkdkDFJnrXg7Z1kss2b9uF93VhOfzIQoqkiq6ix6M Bzl/cG8NTe02EiVnGdQ= )`
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260908170318 20260904162348 30168 ru.nl. rwwp+scBWQXAKoLWELrdNaRmeITksmGT3aOS5oOiYyDGXFvv2i4x9C372o9RB0wtPUP2z5Xig8Dd tfYFDCgId182+CciEZ2xDt1jMo/vjIQAFOYIm3RiPGmPaJ8gnWkZ2X38T47kg9q8i7tVA94yfNKN /onVfkvhprVzsdbf3zY= )`
	RRSIG=20316 and DNSKEY=20316 verifies the A RRset
	RRSIG=30168 and DNSKEY=30168 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ru.nl at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: