DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-17 08:24:35 UTC

Analyzing DNSSEC problems for ru.nl

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 41009 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to a.root-servers.net for ru.nl/A
	Received 559 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 559 octets ;; HEADER SECTION ;; id = 50533 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . iLYILQC4pMXm7UmlXqjcPc1sweeFjP+FcPRvzK0Ms6MgTKReKU0EUBTmYoKQvfzzR3huqG17qpP/ gCeuKehgCU30R4yje09Vmaghi5rI2qIHOmEvL1xdKnRFA4Um5NsqYZU3o0xVdlk2FuTj78nlaLTn +C0MwvmiThtwg9wRG+9GHqjcqdNY6Ht1q9k8D/jYvWWBLR773etmED2nZhXFkgzDHyjhvNd8+4RC /xqrN6Tlg0RiXY5XbF0O6wqntli5oZbXv14HWi7Y8eainXqRQJ4zl1EaXol5R2lMVoWu5nAd+xNR zSzS12o4KeyAngyzigB4kjJpO5e+r/g9ENLGKA== ) ;; ADDITIONAL SECTION (7 records) ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns4.dns.nl. 172800 IN A 185.159.199.200 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for nl/DNSKEY
	Received 556 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 556 octets ;; HEADER SECTION ;; id = 18495 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . iLYILQC4pMXm7UmlXqjcPc1sweeFjP+FcPRvzK0Ms6MgTKReKU0EUBTmYoKQvfzzR3huqG17qpP/ gCeuKehgCU30R4yje09Vmaghi5rI2qIHOmEvL1xdKnRFA4Um5NsqYZU3o0xVdlk2FuTj78nlaLTn +C0MwvmiThtwg9wRG+9GHqjcqdNY6Ht1q9k8D/jYvWWBLR773etmED2nZhXFkgzDHyjhvNd8+4RC /xqrN6Tlg0RiXY5XbF0O6wqntli5oZbXv14HWi7Y8eainXqRQJ4zl1EaXol5R2lMVoWu5nAd+xNR zSzS12o4KeyAngyzigB4kjJpO5e+r/g9ENLGKA== ) ;; ADDITIONAL SECTION (7 records) ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns4.dns.nl. 172800 IN A 185.159.199.200 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Found child zone nl

	Checking DS between . and nl
	Query to i.root-servers.net for nl/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 44300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . iLYILQC4pMXm7UmlXqjcPc1sweeFjP+FcPRvzK0Ms6MgTKReKU0EUBTmYoKQvfzzR3huqG17qpP/ gCeuKehgCU30R4yje09Vmaghi5rI2qIHOmEvL1xdKnRFA4Um5NsqYZU3o0xVdlk2FuTj78nlaLTn +C0MwvmiThtwg9wRG+9GHqjcqdNY6Ht1q9k8D/jYvWWBLR773etmED2nZhXFkgzDHyjhvNd8+4RC /xqrN6Tlg0RiXY5XbF0O6wqntli5oZbXv14HWi7Y8eainXqRQJ4zl1EaXol5R2lMVoWu5nAd+xNR zSzS12o4KeyAngyzigB4kjJpO5e+r/g9ENLGKA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nl in the . zone
	DS=17153/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . iLYILQC4pMXm7UmlXqjcPc1sweeFjP+FcPRvzK0Ms6MgTKReKU0EUBTmYoKQvfzzR3huqG17qpP/ gCeuKehgCU30R4yje09Vmaghi5rI2qIHOmEvL1xdKnRFA4Um5NsqYZU3o0xVdlk2FuTj78nlaLTn +C0MwvmiThtwg9wRG+9GHqjcqdNY6Ht1q9k8D/jYvWWBLR773etmED2nZhXFkgzDHyjhvNd8+4RC /xqrN6Tlg0RiXY5XbF0O6wqntli5oZbXv14HWi7Y8eainXqRQJ4zl1EaXol5R2lMVoWu5nAd+xNR zSzS12o4KeyAngyzigB4kjJpO5e+r/g9ENLGKA== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=17153/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 )`
	Query to ns4.dns.nl for nl/DNSKEY
	Received 289 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 289 octets ;; HEADER SECTION ;; id = 52860 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153 nl. 3600 IN DNSKEY ( 256 3 13 K6vIyw43NeqqIe4vXEskU84cusiwHji866W22QpDbFTRQk1h1xJq4qDIpPpWNHZ86mWGvw7W3nD1 5Lb/wrCAyw== ) ; keytag 41543 nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260501231306 20260404030720 17153 nl. 0NIr2m9oYAWnr560ZBE26DEUR1we3xsIbebiZ/kU7Xx6dMgq99wVrKvFujTL41i870adW6VaiBI6 EGAF+polYA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153`
	`nl. 3600 IN DNSKEY ( 256 3 13 K6vIyw43NeqqIe4vXEskU84cusiwHji866W22QpDbFTRQk1h1xJq4qDIpPpWNHZ86mWGvw7W3nD1 5Lb/wrCAyw== ) ; keytag 41543`
	DNSKEY=17153/SEP is now in the chain-of-trust
	DS=17153/SHA-256 verifies DNSKEY=17153/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260501231306 20260404030720 17153 nl. 0NIr2m9oYAWnr560ZBE26DEUR1we3xsIbebiZ/kU7Xx6dMgq99wVrKvFujTL41i870adW6VaiBI6 EGAF+polYA== )`
	RRSIG=17153 and DNSKEY=17153/SEP verifies the DNSKEY RRset
	DNSKEY=41543 is now in the chain-of-trust
	Query to ns1.dns.nl for ru.nl/A
	Received 404 bytes from 194.0.28.53
	;; Response received from [194.0.28.53] 404 octets ;; HEADER SECTION ;; id = 23381 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru.nl. 3600 IN NS ns1.zurich.surf.net. ru.nl. 3600 IN NS ns1.surfnet.nl. ru.nl. 3600 IN NS ns3.ru.nl. ru.nl. 3600 IN NS ns4.ru.nl. ru.nl. 3600 IN DS ( 28744 8 2 cfbc56b85080e62239b47204ce52d62a8b2bc82eccc5cbec0744cf0c4989ee7b ) ru.nl. 3600 IN DS ( 45436 8 2 e7dade1959c1fbdc8affafbe07b773d9b57368fde05db61fbaaa70bbccad30ba ) ru.nl. 3600 IN RRSIG ( DS 13 2 3600 20260501193754 20260403103753 41543 nl. RRnaXI8S9XNJUKDrhHU51KrmTPjPN/nrmziDvq5fCYMp86SFOmrJR9oG72ip0XwSopVOjIkt93Nm QzN8Ctum5g== ) ;; ADDITIONAL SECTION (5 records) ns3.ru.nl. 3600 IN A 131.174.78.16 ns4.ru.nl. 3600 IN A 131.174.78.17 ns1.surfnet.nl. 3600 IN A 192.87.106.101 ns1.surfnet.nl. 3600 IN AAAA 2001:610:1:800a:192:87:106:101 ;; { "EDNS-VERSION": 0 }
	Query to ns3.dns.nl for ru.nl/DNSKEY
	Received 399 bytes from 194.0.25.24
	;; Response received from [194.0.25.24] 399 octets ;; HEADER SECTION ;; id = 29473 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru.nl. 3600 IN NS ns1.zurich.surf.net. ru.nl. 3600 IN NS ns1.surfnet.nl. ru.nl. 3600 IN NS ns3.ru.nl. ru.nl. 3600 IN NS ns4.ru.nl. ru.nl. 3600 IN DS ( 28744 8 2 cfbc56b85080e62239b47204ce52d62a8b2bc82eccc5cbec0744cf0c4989ee7b ) ru.nl. 3600 IN DS ( 45436 8 2 e7dade1959c1fbdc8affafbe07b773d9b57368fde05db61fbaaa70bbccad30ba ) ru.nl. 3600 IN RRSIG ( DS 13 2 3600 20260501193754 20260403103753 41543 nl. RRnaXI8S9XNJUKDrhHU51KrmTPjPN/nrmziDvq5fCYMp86SFOmrJR9oG72ip0XwSopVOjIkt93Nm QzN8Ctum5g== ) ;; ADDITIONAL SECTION (5 records) ns1.surfnet.nl. 3600 IN A 192.87.106.101 ns3.ru.nl. 3600 IN A 131.174.78.16 ns4.ru.nl. 3600 IN A 131.174.78.17 ns1.surfnet.nl. 3600 IN AAAA 2001:610:1:800a:192:87:106:101 ;; { "EDNS-VERSION": 0 }
	Found child zone ru.nl

ru.nl

	Checking DS between nl and ru.nl
	Query to ns4.dns.nl for ru.nl/DS
	Received 228 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 228 octets ;; HEADER SECTION ;; id = 42959 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN DS ;; ANSWER SECTION (3 records) ru.nl. 3600 IN DS ( 45436 8 2 e7dade1959c1fbdc8affafbe07b773d9b57368fde05db61fbaaa70bbccad30ba ) ru.nl. 3600 IN DS ( 28744 8 2 cfbc56b85080e62239b47204ce52d62a8b2bc82eccc5cbec0744cf0c4989ee7b ) ru.nl. 3600 IN RRSIG ( DS 13 2 3600 20260501193754 20260403103753 41543 nl. RRnaXI8S9XNJUKDrhHU51KrmTPjPN/nrmziDvq5fCYMp86SFOmrJR9oG72ip0XwSopVOjIkt93Nm QzN8Ctum5g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for ru.nl in the nl zone
	DS=45436/SHA-256 has algorithm RSASHA256
	DS=28744/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ru.nl. 3600 IN RRSIG ( DS 13 2 3600 20260501193754 20260403103753 41543 nl. RRnaXI8S9XNJUKDrhHU51KrmTPjPN/nrmziDvq5fCYMp86SFOmrJR9oG72ip0XwSopVOjIkt93Nm QzN8Ctum5g== )`
	RRSIG=41543 and DNSKEY=41543 verifies the DS RRset
	DS=45436/SHA-256 is now in the chain-of-trust
	DS=28744/SHA-256 is now in the chain-of-trust
	`ru.nl. 3600 IN DS ( 45436 8 2 e7dade1959c1fbdc8affafbe07b773d9b57368fde05db61fbaaa70bbccad30ba )`
	`ru.nl. 3600 IN DS ( 28744 8 2 cfbc56b85080e62239b47204ce52d62a8b2bc82eccc5cbec0744cf0c4989ee7b )`
	Query to ns1.surfnet.nl for ru.nl/DNSKEY
	Received 1229 bytes from 192.87.106.101
	;; Response received from [192.87.106.101] 1229 octets ;; HEADER SECTION ;; id = 11709 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN DNSKEY ;; ANSWER SECTION (6 records) ru.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAdcfqF4JLOCg1Jay8VnreS8vc6UdGrkP6ltWYxBtFnWy3rDL3Qc9cWly77wrZ4iHdzWHaTiS IKVdsOsqwBnAFbqNAw7ZRATjjgTu/Gex9Fc62XktZJt+liPS8MGIto8NRxWATXBgjscHdCB6If0T eW9t+oWRdEpej6fnJkqkHNhz ) ; keytag 60745 ru.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAdxycsXN12zHVYUonXHGudaAJfkJ/AfNDGJTcId/PiSqumcSVgiXGeaRaBirPFWMR1QjChwo qRV5SYM2O2KNScmpauQTU60K1qw0FS6+ooxT9n65kAj3a/EX9aiKyNA3R4E0GSW6UGKWNQORs3u2 oVJ3+ggpnfPofU8VCF4e/tTb ) ; keytag 59608 ru.nl. 172800 IN DNSKEY ( 257 3 8 AwEAAbRuArckQYV1ew30HU8e2ybL3bl/eipr0zCIAtcX3P7/+7wJNJEYFIbIxriZ8eJlutYA1T54 iEsdRn0FduhxlvRn87X/CqKqhFb9acXn4qBkdS5d7o5eI0FCWjqZD2IfsliZUpFV986up5x88SnZ RhoHqQbDMA0wQQKsmjbrAITq/NbHQEBgyJfY1Z6tzlIXlexOuqElPu0SmMADT9OCEsbhvN43GL+D zz03O50Q5+NSRde51LPj7xKAfceAy1AbfBVB2jZOsYAkqI4XQpzQbJBEBxjyfgHHTHd0B3VKBAc+ OtRZ8fuEtA3YaMW9n/7ECcBZk9cLjtNd8uFlGiNWH/8= ) ; keytag 45436 ru.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260420101314 20260416093657 45436 ru.nl. PDuCgqkZShy2a98xZ/mQF/5F2ngZpR4aylwTENud4lIqSNJXilvzYzdJM50EoXFLCT5pxxyeHZjz 7jb4H8XpA3TUwu+X+BKt5EK87G8ZNMzxMrwmmu9DSyqGxwO3gOYjD6aAX9fDs7wImxKnGYHUMD0f I5c7Rv65RjhxF5+Axy0kRyYvElBGjmH2ACnACp7szMTaxapsQM37e1YT2q5Cw0M+tSQF66ImYstW 2jyS+rgVwy+JPLgAhFTcCQK0u6TSN+hLdXC0nZH9yk4LGTRRRF5yrmdUNjm/9Jia33mCuFjFEOv0 NX+z1KUCEJ+GCMGw4CDgwtvj6isXgGktZbrk2w== ) ru.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260420101314 20260416093657 59608 ru.nl. rrBKuYqX3sBGW0ouZcupaEjjkOkIHhtAbLhFxCsIAGlFNm8Yu1umf6NpH3bBxSsJGQOkiIYHaBb3 /aGD/cYcYUPl4k3kgzU4MYaLZkL8EHBjWL7J5ZOgsZvfNqEI0yT5JMHQ8nKwsmXTe0Qi1eKSJ9Ey cO4OD6YxcKjd+r8J9Lo= ) ru.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260420101314 20260416093657 60745 ru.nl. ET5AtxY+jgg4crZyoJeHI5d8+x1X2V85SaJC2dYjDsaPI91tNdg8nD4UeMRn5TTeRGhgoOK21oID c21o10PqM7YDOEVou1wbWgi1qcdUVa5KJl3rS+q2fny2b8Yu2FOMfB53r2z+Q1INoPExh9PRCZtM lyC4KoXVRc72s1LnJS8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ru.nl
	`ru.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAdcfqF4JLOCg1Jay8VnreS8vc6UdGrkP6ltWYxBtFnWy3rDL3Qc9cWly77wrZ4iHdzWHaTiS IKVdsOsqwBnAFbqNAw7ZRATjjgTu/Gex9Fc62XktZJt+liPS8MGIto8NRxWATXBgjscHdCB6If0T eW9t+oWRdEpej6fnJkqkHNhz ) ; keytag 60745`
	`ru.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAdxycsXN12zHVYUonXHGudaAJfkJ/AfNDGJTcId/PiSqumcSVgiXGeaRaBirPFWMR1QjChwo qRV5SYM2O2KNScmpauQTU60K1qw0FS6+ooxT9n65kAj3a/EX9aiKyNA3R4E0GSW6UGKWNQORs3u2 oVJ3+ggpnfPofU8VCF4e/tTb ) ; keytag 59608`
	`ru.nl. 172800 IN DNSKEY ( 257 3 8 AwEAAbRuArckQYV1ew30HU8e2ybL3bl/eipr0zCIAtcX3P7/+7wJNJEYFIbIxriZ8eJlutYA1T54 iEsdRn0FduhxlvRn87X/CqKqhFb9acXn4qBkdS5d7o5eI0FCWjqZD2IfsliZUpFV986up5x88SnZ RhoHqQbDMA0wQQKsmjbrAITq/NbHQEBgyJfY1Z6tzlIXlexOuqElPu0SmMADT9OCEsbhvN43GL+D zz03O50Q5+NSRde51LPj7xKAfceAy1AbfBVB2jZOsYAkqI4XQpzQbJBEBxjyfgHHTHd0B3VKBAc+ OtRZ8fuEtA3YaMW9n/7ECcBZk9cLjtNd8uFlGiNWH/8= ) ; keytag 45436`
	DNSKEY=45436/SEP is now in the chain-of-trust
	DS=45436/SHA-256 verifies DNSKEY=45436/SEP
	DS=28744/SHA-256 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`ru.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260420101314 20260416093657 45436 ru.nl. PDuCgqkZShy2a98xZ/mQF/5F2ngZpR4aylwTENud4lIqSNJXilvzYzdJM50EoXFLCT5pxxyeHZjz 7jb4H8XpA3TUwu+X+BKt5EK87G8ZNMzxMrwmmu9DSyqGxwO3gOYjD6aAX9fDs7wImxKnGYHUMD0f I5c7Rv65RjhxF5+Axy0kRyYvElBGjmH2ACnACp7szMTaxapsQM37e1YT2q5Cw0M+tSQF66ImYstW 2jyS+rgVwy+JPLgAhFTcCQK0u6TSN+hLdXC0nZH9yk4LGTRRRF5yrmdUNjm/9Jia33mCuFjFEOv0 NX+z1KUCEJ+GCMGw4CDgwtvj6isXgGktZbrk2w== )`
	`ru.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260420101314 20260416093657 59608 ru.nl. rrBKuYqX3sBGW0ouZcupaEjjkOkIHhtAbLhFxCsIAGlFNm8Yu1umf6NpH3bBxSsJGQOkiIYHaBb3 /aGD/cYcYUPl4k3kgzU4MYaLZkL8EHBjWL7J5ZOgsZvfNqEI0yT5JMHQ8nKwsmXTe0Qi1eKSJ9Ey cO4OD6YxcKjd+r8J9Lo= )`
	`ru.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260420101314 20260416093657 60745 ru.nl. ET5AtxY+jgg4crZyoJeHI5d8+x1X2V85SaJC2dYjDsaPI91tNdg8nD4UeMRn5TTeRGhgoOK21oID c21o10PqM7YDOEVou1wbWgi1qcdUVa5KJl3rS+q2fny2b8Yu2FOMfB53r2z+Q1INoPExh9PRCZtM lyC4KoXVRc72s1LnJS8= )`
	RRSIG=45436 and DNSKEY=45436/SEP verifies the DNSKEY RRset
	RRSIG=59608 and DNSKEY=59608 verifies the DNSKEY RRset
	RRSIG=60745 and DNSKEY=60745 verifies the DNSKEY RRset
	DNSKEY=60745 is now in the chain-of-trust
	DNSKEY=59608 is now in the chain-of-trust
	Query to ns1.zurich.surf.net for ru.nl/A
	Received 380 bytes from 195.176.255.9
	;; Response received from [195.176.255.9] 380 octets ;; HEADER SECTION ;; id = 60620 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN A ;; ANSWER SECTION (3 records) ru.nl. 600 IN A 131.174.78.60 ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 59608 ru.nl. atWgSNgPtz1YBTbdWMUQhSX2j0p5nuDipMGPPffXRHifZ2WFiFEQukIMwYr7nITvxTZvArFPG34S B1QeKtkRTG04onBOnMxrmikHYywF9+uqfhZTE4xxUVOvKqK3m/ndgEUijWw50CMBMb8SG9yWCZSX XwfqL2ttoXbq4B77zWg= ) ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 60745 ru.nl. ck3g2Mx70P1z3GdKZSm6R3IAPQ3j9oj+P9xGeWVHyulXk204cjMexrNcL67h8vhqHWYzk3A43HSc j3PQMWqRp8xE0GpKXIQq5tIe2uHZGLkPVA+mGY/gVA0oUduBgpr3mxQKrgZAvQCZ64GQyEY+t22/ qY1QTaRh/ZqkX286b00= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.zurich.surf.net is authoritative for ru.nl
	Found RRSIG signed by ru.nl zone
	Query to ns1.surfnet.nl for ru.nl/SOA
	Received 414 bytes from 192.87.106.101
	;; Response received from [192.87.106.101] 414 octets ;; HEADER SECTION ;; id = 6777 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN SOA ;; ANSWER SECTION (3 records) ru.nl. 28800 IN SOA ( ns3.ru.nl. netmaster.ru.nl. 2009534200 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 86400 ;minimum ) ru.nl. 28800 IN RRSIG ( SOA 8 2 28800 20260421082431 20260417072431 59608 ru.nl. IRNKG2lCEMAcAcZ+hFzWETEJVzl8olfmbU67r53Tnxbbp12QAr9eRe83JcL2eseUWb+G8je3ovOF CioMUDNc12v0JAslZAGoKKGrXEJSkNSvy2ymh71rnKfgLjXcA0oxnAxEm1jmSClNjUIKqQTqzvUc PAKc/EPctogw/xDxt0s= ) ru.nl. 28800 IN RRSIG ( SOA 8 2 28800 20260421082431 20260417072431 60745 ru.nl. RFkZm9jXcRrUOjoAGxyZ8m3KCgRQc2A4ioixEAHc0tzOa9qkpX5k9BI2cO516zWVN5BV0BvatXpn rsfuVCU7zGZ4m8r2wzb76yfkaxkfCiWk/rFny4oyFIJCMw05jckOKUyGhy3tIRWZH3pG8L2pf+fW PLfRoL4idnxNzWsaMmo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.ru.nl for ru.nl/SOA
	Received 414 bytes from 131.174.78.17
	;; Response received from [131.174.78.17] 414 octets ;; HEADER SECTION ;; id = 55479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN SOA ;; ANSWER SECTION (3 records) ru.nl. 28800 IN SOA ( ns3.ru.nl. netmaster.ru.nl. 2009534200 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 86400 ;minimum ) ru.nl. 28800 IN RRSIG ( SOA 8 2 28800 20260421082431 20260417072431 59608 ru.nl. IRNKG2lCEMAcAcZ+hFzWETEJVzl8olfmbU67r53Tnxbbp12QAr9eRe83JcL2eseUWb+G8je3ovOF CioMUDNc12v0JAslZAGoKKGrXEJSkNSvy2ymh71rnKfgLjXcA0oxnAxEm1jmSClNjUIKqQTqzvUc PAKc/EPctogw/xDxt0s= ) ru.nl. 28800 IN RRSIG ( SOA 8 2 28800 20260421082431 20260417072431 60745 ru.nl. RFkZm9jXcRrUOjoAGxyZ8m3KCgRQc2A4ioixEAHc0tzOa9qkpX5k9BI2cO516zWVN5BV0BvatXpn rsfuVCU7zGZ4m8r2wzb76yfkaxkfCiWk/rFny4oyFIJCMw05jckOKUyGhy3tIRWZH3pG8L2pf+fW PLfRoL4idnxNzWsaMmo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.ru.nl for ru.nl/SOA
	Received 414 bytes from 131.174.78.16
	;; Response received from [131.174.78.16] 414 octets ;; HEADER SECTION ;; id = 13195 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN SOA ;; ANSWER SECTION (3 records) ru.nl. 28800 IN SOA ( ns3.ru.nl. netmaster.ru.nl. 2009534200 ;serial 3600 ;refresh 360 ;retry 604800 ;expire 86400 ;minimum ) ru.nl. 28800 IN RRSIG ( SOA 8 2 28800 20260421082431 20260417072431 59608 ru.nl. IRNKG2lCEMAcAcZ+hFzWETEJVzl8olfmbU67r53Tnxbbp12QAr9eRe83JcL2eseUWb+G8je3ovOF CioMUDNc12v0JAslZAGoKKGrXEJSkNSvy2ymh71rnKfgLjXcA0oxnAxEm1jmSClNjUIKqQTqzvUc PAKc/EPctogw/xDxt0s= ) ru.nl. 28800 IN RRSIG ( SOA 8 2 28800 20260421082431 20260417072431 60745 ru.nl. RFkZm9jXcRrUOjoAGxyZ8m3KCgRQc2A4ioixEAHc0tzOa9qkpX5k9BI2cO516zWVN5BV0BvatXpn rsfuVCU7zGZ4m8r2wzb76yfkaxkfCiWk/rFny4oyFIJCMw05jckOKUyGhy3tIRWZH3pG8L2pf+fW PLfRoL4idnxNzWsaMmo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.zurich.surf.net for ru.nl/A
	ru.nl A RR has value 131.174.78.60
	Found 2 RRSIGs over A RRset
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 59608 ru.nl. atWgSNgPtz1YBTbdWMUQhSX2j0p5nuDipMGPPffXRHifZ2WFiFEQukIMwYr7nITvxTZvArFPG34S B1QeKtkRTG04onBOnMxrmikHYywF9+uqfhZTE4xxUVOvKqK3m/ndgEUijWw50CMBMb8SG9yWCZSX XwfqL2ttoXbq4B77zWg= )`
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 60745 ru.nl. ck3g2Mx70P1z3GdKZSm6R3IAPQ3j9oj+P9xGeWVHyulXk204cjMexrNcL67h8vhqHWYzk3A43HSc j3PQMWqRp8xE0GpKXIQq5tIe2uHZGLkPVA+mGY/gVA0oUduBgpr3mxQKrgZAvQCZ64GQyEY+t22/ qY1QTaRh/ZqkX286b00= )`
	RRSIG=59608 and DNSKEY=59608 verifies the A RRset
	RRSIG=60745 and DNSKEY=60745 verifies the A RRset

ru.nl

	Query to ns4.ru.nl for ru.nl/A
	Received 380 bytes from 131.174.78.17
	;; Response received from [131.174.78.17] 380 octets ;; HEADER SECTION ;; id = 22139 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN A ;; ANSWER SECTION (3 records) ru.nl. 600 IN A 131.174.78.60 ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 59608 ru.nl. atWgSNgPtz1YBTbdWMUQhSX2j0p5nuDipMGPPffXRHifZ2WFiFEQukIMwYr7nITvxTZvArFPG34S B1QeKtkRTG04onBOnMxrmikHYywF9+uqfhZTE4xxUVOvKqK3m/ndgEUijWw50CMBMb8SG9yWCZSX XwfqL2ttoXbq4B77zWg= ) ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 60745 ru.nl. ck3g2Mx70P1z3GdKZSm6R3IAPQ3j9oj+P9xGeWVHyulXk204cjMexrNcL67h8vhqHWYzk3A43HSc j3PQMWqRp8xE0GpKXIQq5tIe2uHZGLkPVA+mGY/gVA0oUduBgpr3mxQKrgZAvQCZ64GQyEY+t22/ qY1QTaRh/ZqkX286b00= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.ru.nl is authoritative for ru.nl
	Found RRSIG signed by ru.nl zone
	Query to ns4.ru.nl for ru.nl/A
	ru.nl A RR has value 131.174.78.60
	Found 2 RRSIGs over A RRset
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 59608 ru.nl. atWgSNgPtz1YBTbdWMUQhSX2j0p5nuDipMGPPffXRHifZ2WFiFEQukIMwYr7nITvxTZvArFPG34S B1QeKtkRTG04onBOnMxrmikHYywF9+uqfhZTE4xxUVOvKqK3m/ndgEUijWw50CMBMb8SG9yWCZSX XwfqL2ttoXbq4B77zWg= )`
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 60745 ru.nl. ck3g2Mx70P1z3GdKZSm6R3IAPQ3j9oj+P9xGeWVHyulXk204cjMexrNcL67h8vhqHWYzk3A43HSc j3PQMWqRp8xE0GpKXIQq5tIe2uHZGLkPVA+mGY/gVA0oUduBgpr3mxQKrgZAvQCZ64GQyEY+t22/ qY1QTaRh/ZqkX286b00= )`
	RRSIG=59608 and DNSKEY=59608 verifies the A RRset
	RRSIG=60745 and DNSKEY=60745 verifies the A RRset

ru.nl

	Query to ns1.surfnet.nl for ru.nl/A
	Received 380 bytes from 192.87.106.101
	;; Response received from [192.87.106.101] 380 octets ;; HEADER SECTION ;; id = 57312 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN A ;; ANSWER SECTION (3 records) ru.nl. 600 IN A 131.174.78.60 ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 59608 ru.nl. atWgSNgPtz1YBTbdWMUQhSX2j0p5nuDipMGPPffXRHifZ2WFiFEQukIMwYr7nITvxTZvArFPG34S B1QeKtkRTG04onBOnMxrmikHYywF9+uqfhZTE4xxUVOvKqK3m/ndgEUijWw50CMBMb8SG9yWCZSX XwfqL2ttoXbq4B77zWg= ) ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 60745 ru.nl. ck3g2Mx70P1z3GdKZSm6R3IAPQ3j9oj+P9xGeWVHyulXk204cjMexrNcL67h8vhqHWYzk3A43HSc j3PQMWqRp8xE0GpKXIQq5tIe2uHZGLkPVA+mGY/gVA0oUduBgpr3mxQKrgZAvQCZ64GQyEY+t22/ qY1QTaRh/ZqkX286b00= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.surfnet.nl is authoritative for ru.nl
	Found RRSIG signed by ru.nl zone
	Query to ns1.surfnet.nl for ru.nl/A
	ru.nl A RR has value 131.174.78.60
	Found 2 RRSIGs over A RRset
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 59608 ru.nl. atWgSNgPtz1YBTbdWMUQhSX2j0p5nuDipMGPPffXRHifZ2WFiFEQukIMwYr7nITvxTZvArFPG34S B1QeKtkRTG04onBOnMxrmikHYywF9+uqfhZTE4xxUVOvKqK3m/ndgEUijWw50CMBMb8SG9yWCZSX XwfqL2ttoXbq4B77zWg= )`
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 60745 ru.nl. ck3g2Mx70P1z3GdKZSm6R3IAPQ3j9oj+P9xGeWVHyulXk204cjMexrNcL67h8vhqHWYzk3A43HSc j3PQMWqRp8xE0GpKXIQq5tIe2uHZGLkPVA+mGY/gVA0oUduBgpr3mxQKrgZAvQCZ64GQyEY+t22/ qY1QTaRh/ZqkX286b00= )`
	RRSIG=59608 and DNSKEY=59608 verifies the A RRset
	RRSIG=60745 and DNSKEY=60745 verifies the A RRset

ru.nl

	Query to ns3.ru.nl for ru.nl/A
	Received 380 bytes from 131.174.78.16
	;; Response received from [131.174.78.16] 380 octets ;; HEADER SECTION ;; id = 13001 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru.nl. IN A ;; ANSWER SECTION (3 records) ru.nl. 600 IN A 131.174.78.60 ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 59608 ru.nl. atWgSNgPtz1YBTbdWMUQhSX2j0p5nuDipMGPPffXRHifZ2WFiFEQukIMwYr7nITvxTZvArFPG34S B1QeKtkRTG04onBOnMxrmikHYywF9+uqfhZTE4xxUVOvKqK3m/ndgEUijWw50CMBMb8SG9yWCZSX XwfqL2ttoXbq4B77zWg= ) ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 60745 ru.nl. ck3g2Mx70P1z3GdKZSm6R3IAPQ3j9oj+P9xGeWVHyulXk204cjMexrNcL67h8vhqHWYzk3A43HSc j3PQMWqRp8xE0GpKXIQq5tIe2uHZGLkPVA+mGY/gVA0oUduBgpr3mxQKrgZAvQCZ64GQyEY+t22/ qY1QTaRh/ZqkX286b00= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.ru.nl is authoritative for ru.nl
	Found RRSIG signed by ru.nl zone
	Query to ns3.ru.nl for ru.nl/A
	ru.nl A RR has value 131.174.78.60
	Found 2 RRSIGs over A RRset
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 59608 ru.nl. atWgSNgPtz1YBTbdWMUQhSX2j0p5nuDipMGPPffXRHifZ2WFiFEQukIMwYr7nITvxTZvArFPG34S B1QeKtkRTG04onBOnMxrmikHYywF9+uqfhZTE4xxUVOvKqK3m/ndgEUijWw50CMBMb8SG9yWCZSX XwfqL2ttoXbq4B77zWg= )`
	`ru.nl. 600 IN RRSIG ( A 8 2 600 20260420115701 20260416110043 60745 ru.nl. ck3g2Mx70P1z3GdKZSm6R3IAPQ3j9oj+P9xGeWVHyulXk204cjMexrNcL67h8vhqHWYzk3A43HSc j3PQMWqRp8xE0GpKXIQq5tIe2uHZGLkPVA+mGY/gVA0oUduBgpr3mxQKrgZAvQCZ64GQyEY+t22/ qY1QTaRh/ZqkX286b00= )`
	RRSIG=59608 and DNSKEY=59608 verifies the A RRset
	RRSIG=60745 and DNSKEY=60745 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ru.nl at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: