DNSSEC Debugger - tudelft.nl

Domain Name:

Time: 2026-01-23 11:33:46 UTC

Analyzing DNSSEC problems for tudelft.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1141 octets ;; HEADER SECTION ;; id = 62326 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260211000000 20260121000000 20326 . EBetGA/PKYoAlq56mQMDn03GRImGJtuP7+VneaBFBz6bKPYOkJCeH+iWyvbdHc2EdpdPwod/fNV2 buvubzluWs2ORvqpr/w3awExDRBLgjuGRo8LyRlPG/utQh2tmjC5t5CzPKKtUOjKcotmlYgfV+pQ CT1zqZfavyxYJXMGILkSVcQe+3rraAvzXQoZzMfewQZOJrhyFfKtugkpOLWCuWg5/dKleyYB8G4r EWDPhywRt+GSlOgFWhNYTHhEpZsSA6vnb3FTtIgu7CqlDD1zOTrIFuiv7L8cFizHm542Bm69lbzg QGJGdgSwOGAe4Aj55UXMdRobYUdhoWOsdGOJKA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260211000000 20260121000000 20326 . EBetGA/PKYoAlq56mQMDn03GRImGJtuP7+VneaBFBz6bKPYOkJCeH+iWyvbdHc2EdpdPwod/fNV2 buvubzluWs2ORvqpr/w3awExDRBLgjuGRo8LyRlPG/utQh2tmjC5t5CzPKKtUOjKcotmlYgfV+pQ CT1zqZfavyxYJXMGILkSVcQe+3rraAvzXQoZzMfewQZOJrhyFfKtugkpOLWCuWg5/dKleyYB8G4r EWDPhywRt+GSlOgFWhNYTHhEpZsSA6vnb3FTtIgu7CqlDD1zOTrIFuiv7L8cFizHm542Bm69lbzg QGJGdgSwOGAe4Aj55UXMdRobYUdhoWOsdGOJKA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to b.root-servers.net for tudelft.nl/A
	Received 564 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 564 octets ;; HEADER SECTION ;; id = 35766 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . MRN4FzMitzQJnY+t7VX18aSCKcV3tbIRVOXh3+sjwPfcEUkJ66vQKPCRv+MvCId53sJt9hlWmaHf Ad/ytvzPLbz/YFnpWef3QDfkLphk9BLNDHtiwyqlk6MWXySg8/t2g5J9opJ0RP9UCdeAz1B6cCOg mQRh/gXy1G2oUNZe1IxX5TanCIQA18Cu9SEAwBy01+qWDmiDC3xb2eq/T/0xBAT7KsIOWPwXO1+y XzGQDCjY1f0QVsEi3bkQNvT7ACzyfnGwORCKXqg4WPgz5AXuB2kyjP1OFhj9sTbOK6UW5POU2z9h 7t5HYxN2qxJQqe48FPq9ygnw62D/gMY8N/Hi8Q== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for nl/DNSKEY
	Received 556 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 556 octets ;; HEADER SECTION ;; id = 46539 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . MRN4FzMitzQJnY+t7VX18aSCKcV3tbIRVOXh3+sjwPfcEUkJ66vQKPCRv+MvCId53sJt9hlWmaHf Ad/ytvzPLbz/YFnpWef3QDfkLphk9BLNDHtiwyqlk6MWXySg8/t2g5J9opJ0RP9UCdeAz1B6cCOg mQRh/gXy1G2oUNZe1IxX5TanCIQA18Cu9SEAwBy01+qWDmiDC3xb2eq/T/0xBAT7KsIOWPwXO1+y XzGQDCjY1f0QVsEi3bkQNvT7ACzyfnGwORCKXqg4WPgz5AXuB2kyjP1OFhj9sTbOK6UW5POU2z9h 7t5HYxN2qxJQqe48FPq9ygnw62D/gMY8N/Hi8Q== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Found child zone nl

	Checking DS between . and nl
	Query to b.root-servers.net for nl/DS
	Received 366 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 366 octets ;; HEADER SECTION ;; id = 50028 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . MRN4FzMitzQJnY+t7VX18aSCKcV3tbIRVOXh3+sjwPfcEUkJ66vQKPCRv+MvCId53sJt9hlWmaHf Ad/ytvzPLbz/YFnpWef3QDfkLphk9BLNDHtiwyqlk6MWXySg8/t2g5J9opJ0RP9UCdeAz1B6cCOg mQRh/gXy1G2oUNZe1IxX5TanCIQA18Cu9SEAwBy01+qWDmiDC3xb2eq/T/0xBAT7KsIOWPwXO1+y XzGQDCjY1f0QVsEi3bkQNvT7ACzyfnGwORCKXqg4WPgz5AXuB2kyjP1OFhj9sTbOK6UW5POU2z9h 7t5HYxN2qxJQqe48FPq9ygnw62D/gMY8N/Hi8Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nl in the . zone
	DS=17153/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . MRN4FzMitzQJnY+t7VX18aSCKcV3tbIRVOXh3+sjwPfcEUkJ66vQKPCRv+MvCId53sJt9hlWmaHf Ad/ytvzPLbz/YFnpWef3QDfkLphk9BLNDHtiwyqlk6MWXySg8/t2g5J9opJ0RP9UCdeAz1B6cCOg mQRh/gXy1G2oUNZe1IxX5TanCIQA18Cu9SEAwBy01+qWDmiDC3xb2eq/T/0xBAT7KsIOWPwXO1+y XzGQDCjY1f0QVsEi3bkQNvT7ACzyfnGwORCKXqg4WPgz5AXuB2kyjP1OFhj9sTbOK6UW5POU2z9h 7t5HYxN2qxJQqe48FPq9ygnw62D/gMY8N/Hi8Q== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=17153/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 )`
	Query to ns3.dns.nl for nl/DNSKEY
	Received 289 bytes from 194.0.25.24
	;; Response received from [194.0.25.24] 289 octets ;; HEADER SECTION ;; id = 10925 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 256 3 13 37hUmkOyt4LJeZLqM3xvlKK5kt0H8Yz5AuV6i7A+v2kbFezJCKrBpDPaiQz9Z10isbuIWEohqwE3 ax/oQMH4Hw== ) ; keytag 37807 nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153 nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260202012206 20260119060720 17153 nl. LAslyNxNOhAubI4VLeCK9ws2jTRzsIA7s2cDMqSOF0VEjjh2nR9Tol6fL6cd58JxqYpWrxiEpK0g pAwBx4Zspg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 13 37hUmkOyt4LJeZLqM3xvlKK5kt0H8Yz5AuV6i7A+v2kbFezJCKrBpDPaiQz9Z10isbuIWEohqwE3 ax/oQMH4Hw== ) ; keytag 37807`
	`nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153`
	DNSKEY=17153/SEP is now in the chain-of-trust
	DS=17153/SHA-256 verifies DNSKEY=17153/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260202012206 20260119060720 17153 nl. LAslyNxNOhAubI4VLeCK9ws2jTRzsIA7s2cDMqSOF0VEjjh2nR9Tol6fL6cd58JxqYpWrxiEpK0g pAwBx4Zspg== )`
	RRSIG=17153 and DNSKEY=17153/SEP verifies the DNSKEY RRset
	DNSKEY=37807 is now in the chain-of-trust
	Query to ns3.dns.nl for tudelft.nl/A
	Received 418 bytes from 194.0.25.24
	;; Response received from [194.0.25.24] 418 octets ;; HEADER SECTION ;; id = 62812 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) tudelft.nl. 3600 IN NS ns1.zurich.surf.net. tudelft.nl. 3600 IN NS ns1.surfnet.nl. tudelft.nl. 3600 IN NS ns1.tudelft.nl. tudelft.nl. 3600 IN NS ns2.surfnet.nl. tudelft.nl. 3600 IN NS ns2.tudelft.nl. tudelft.nl. 3600 IN DS ( 58121 8 2 3c1ca6a6e37b56e628186ed991750682b8476915eab7963d329309e897baf49e ) tudelft.nl. 3600 IN RRSIG ( DS 13 2 3600 20260203101038 20260120053818 37807 nl. GVsIiEZYAMdsDY7CqJuyHFt/ScmvPCd/Lu5zSQEYjnld7ZQ2WK5fS9tVcpAfjQ7aUoIK8umPA+ex 64lf0Pnz/w== ) ;; ADDITIONAL SECTION (7 records) ns1.surfnet.nl. 3600 IN A 192.87.106.101 ns1.tudelft.nl. 3600 IN A 130.161.180.1 ns2.surfnet.nl. 3600 IN A 192.87.36.2 ns2.tudelft.nl. 3600 IN A 130.161.180.65 ns1.surfnet.nl. 3600 IN AAAA 2001:610:1:800a:192:87:106:101 ns2.surfnet.nl. 3600 IN AAAA 2001:610:3:200a:192:87:36:2 ;; { "EDNS-VERSION": 0 }
	Query to ns1.dns.nl for tudelft.nl/DNSKEY
	Received 444 bytes from 194.0.28.53
	;; Response received from [194.0.28.53] 444 octets ;; HEADER SECTION ;; id = 33918 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) tudelft.nl. 3600 IN NS ns1.zurich.surf.net. tudelft.nl. 3600 IN NS ns1.surfnet.nl. tudelft.nl. 3600 IN NS ns1.tudelft.nl. tudelft.nl. 3600 IN NS ns2.surfnet.nl. tudelft.nl. 3600 IN NS ns2.tudelft.nl. tudelft.nl. 3600 IN DS ( 58121 8 2 3c1ca6a6e37b56e628186ed991750682b8476915eab7963d329309e897baf49e ) tudelft.nl. 3600 IN RRSIG ( DS 13 2 3600 20260203101038 20260120053818 37807 nl. GVsIiEZYAMdsDY7CqJuyHFt/ScmvPCd/Lu5zSQEYjnld7ZQ2WK5fS9tVcpAfjQ7aUoIK8umPA+ex 64lf0Pnz/w== ) ;; ADDITIONAL SECTION (7 records) ns1.tudelft.nl. 3600 IN A 130.161.180.1 ns2.tudelft.nl. 3600 IN A 130.161.180.65 ns1.surfnet.nl. 3600 IN A 192.87.106.101 ns1.surfnet.nl. 3600 IN AAAA 2001:610:1:800a:192:87:106:101 ns2.surfnet.nl. 3600 IN A 192.87.36.2 ns2.surfnet.nl. 3600 IN AAAA 2001:610:3:200a:192:87:36:2 ;; { "EDNS-VERSION": 0 }
	Found child zone tudelft.nl

tudelft.nl

	Checking DS between nl and tudelft.nl
	Query to ns3.dns.nl for tudelft.nl/DS
	Received 185 bytes from 194.0.25.24
	;; Response received from [194.0.25.24] 185 octets ;; HEADER SECTION ;; id = 11019 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN DS ;; ANSWER SECTION (2 records) tudelft.nl. 3600 IN DS ( 58121 8 2 3c1ca6a6e37b56e628186ed991750682b8476915eab7963d329309e897baf49e ) tudelft.nl. 3600 IN RRSIG ( DS 13 2 3600 20260203101038 20260120053818 37807 nl. GVsIiEZYAMdsDY7CqJuyHFt/ScmvPCd/Lu5zSQEYjnld7ZQ2WK5fS9tVcpAfjQ7aUoIK8umPA+ex 64lf0Pnz/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for tudelft.nl in the nl zone
	DS=58121/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`tudelft.nl. 3600 IN RRSIG ( DS 13 2 3600 20260203101038 20260120053818 37807 nl. GVsIiEZYAMdsDY7CqJuyHFt/ScmvPCd/Lu5zSQEYjnld7ZQ2WK5fS9tVcpAfjQ7aUoIK8umPA+ex 64lf0Pnz/w== )`
	RRSIG=37807 and DNSKEY=37807 verifies the DS RRset
	DS=58121/SHA-256 is now in the chain-of-trust
	`tudelft.nl. 3600 IN DS ( 58121 8 2 3c1ca6a6e37b56e628186ed991750682b8476915eab7963d329309e897baf49e )`
	Query to ns2.tudelft.nl for tudelft.nl/DNSKEY
	Received 1079 bytes from 130.161.180.65
	;; Response received from [130.161.180.65] 1079 octets ;; HEADER SECTION ;; id = 5070 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN DNSKEY ;; ANSWER SECTION (5 records) tudelft.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAd9LVnfIKM56n3nJV4EXGg8z/EGAbG54ZqDNcvF/+5VdCx04FVQ2HUcVJ5m66rq276L7TBB6 1EbBbyV/RI4Z4ntCUOkyCljvWIqmXzP189UzUWaoD3ELng7DjpQkqMbw01NEkdRAZBGCblZd50g/ AGJaKU/Yv1F03GaMw35h2UCd ) ; keytag 14931 tudelft.nl. 172800 IN DNSKEY ( 257 3 8 AwEAAc1+rmVTGuAp+dno+QuwpNO9gST4VdT3QyqtU1hzh8kfW3sUXXfONi28ugqJtS/uKvGU4n73 PVZ7Bh4JIt6v6E4ZTBVTTBt4WyM+mumYUBbh6LRYbPkzWHTh4Yb0kfcvgXN6wZoMJiBw7nzz/zLz +U5i+XfeET3Du0LHl9zdhb2x+zZOc4FnQDgntEo/f1EVGatqzh0AtvhgOqWYX7TUYNZQHO26YbAl +CchChx3NJTNvnbhvs/1cBBUKSaes4Li+F0bjlgtpd1ZBvb1bogrNllGpLYtRqU2qc2Y6KWa5OrI hJsy0nkwaKzvjgJoUeHR5NsADXUiZb0Uv8tXwtA8U8E= ) ; keytag 58121 tudelft.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAdIreIPAWwrP9Im6NPGCdoxV8j7HtqpdWrJQ8F01rLkYR+VgxTrJoucxgm0Zqxq5sVqjlokt ycZUnFRFAxDUkO4KubiYhmBX2YxaWbKc1PUIF6Oz0ssPz54Wl493LeC3cqQ/gA0/264HDEwX46dC eAEe6dtu9iRxnsPILf7bbJOt ) ; keytag 33705 tudelft.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260126210242 20260122201253 14931 tudelft.nl. Ks6mJGlQcn8x2Eed5BIyMEqTs7Flkx5kGAhpC6VNnz2u3MoFuvOHmv8oNrM0I7nucWYNjGrm/mSL 4JFWDeuYn6hqNhbJfjD57Pa9AI9gljQGokNMdKDOuLt97zICYHDuRuKifWulD8ufzX7+sLb6tdOD 3qkc1IipEr6UTwBifTY= ) tudelft.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260126210242 20260122201253 58121 tudelft.nl. q/l1PJhGgybks7iPstBiECBvvPNS74apr7RuqcCeKgRQp1iw9St6JitmL9FzKnUTjwRXR7N1T6H8 AB+h/ebtyVF6BfwPZWFIt+cD3devqVDH4ZEEeQyIZ3bxYkoXvPOd5Ke/SWlmGuNrLvKslqYu0q/+ wVeTzwxxuDxja6c8ptLcwTQEsH3JBJakiKnk43B1OlJ1R9SSN6a2aZ6xKNv2FpKdgqy5A3y6azrA JJp5mka92zuqTd/CVPnhh1+uTFX8IbIzL9JinFX1Eqo5Jmqn9eTB2BMcYezTp0xi7VrlDzamlKpd Z+QEO4K866MO5Ryj24AJIjtVtYJoKonlhsnvdw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for tudelft.nl
	`tudelft.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAd9LVnfIKM56n3nJV4EXGg8z/EGAbG54ZqDNcvF/+5VdCx04FVQ2HUcVJ5m66rq276L7TBB6 1EbBbyV/RI4Z4ntCUOkyCljvWIqmXzP189UzUWaoD3ELng7DjpQkqMbw01NEkdRAZBGCblZd50g/ AGJaKU/Yv1F03GaMw35h2UCd ) ; keytag 14931`
	`tudelft.nl. 172800 IN DNSKEY ( 257 3 8 AwEAAc1+rmVTGuAp+dno+QuwpNO9gST4VdT3QyqtU1hzh8kfW3sUXXfONi28ugqJtS/uKvGU4n73 PVZ7Bh4JIt6v6E4ZTBVTTBt4WyM+mumYUBbh6LRYbPkzWHTh4Yb0kfcvgXN6wZoMJiBw7nzz/zLz +U5i+XfeET3Du0LHl9zdhb2x+zZOc4FnQDgntEo/f1EVGatqzh0AtvhgOqWYX7TUYNZQHO26YbAl +CchChx3NJTNvnbhvs/1cBBUKSaes4Li+F0bjlgtpd1ZBvb1bogrNllGpLYtRqU2qc2Y6KWa5OrI hJsy0nkwaKzvjgJoUeHR5NsADXUiZb0Uv8tXwtA8U8E= ) ; keytag 58121`
	`tudelft.nl. 172800 IN DNSKEY ( 256 3 8 AwEAAdIreIPAWwrP9Im6NPGCdoxV8j7HtqpdWrJQ8F01rLkYR+VgxTrJoucxgm0Zqxq5sVqjlokt ycZUnFRFAxDUkO4KubiYhmBX2YxaWbKc1PUIF6Oz0ssPz54Wl493LeC3cqQ/gA0/264HDEwX46dC eAEe6dtu9iRxnsPILf7bbJOt ) ; keytag 33705`
	DNSKEY=58121/SEP is now in the chain-of-trust
	DS=58121/SHA-256 verifies DNSKEY=58121/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`tudelft.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260126210242 20260122201253 14931 tudelft.nl. Ks6mJGlQcn8x2Eed5BIyMEqTs7Flkx5kGAhpC6VNnz2u3MoFuvOHmv8oNrM0I7nucWYNjGrm/mSL 4JFWDeuYn6hqNhbJfjD57Pa9AI9gljQGokNMdKDOuLt97zICYHDuRuKifWulD8ufzX7+sLb6tdOD 3qkc1IipEr6UTwBifTY= )`
	`tudelft.nl. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260126210242 20260122201253 58121 tudelft.nl. q/l1PJhGgybks7iPstBiECBvvPNS74apr7RuqcCeKgRQp1iw9St6JitmL9FzKnUTjwRXR7N1T6H8 AB+h/ebtyVF6BfwPZWFIt+cD3devqVDH4ZEEeQyIZ3bxYkoXvPOd5Ke/SWlmGuNrLvKslqYu0q/+ wVeTzwxxuDxja6c8ptLcwTQEsH3JBJakiKnk43B1OlJ1R9SSN6a2aZ6xKNv2FpKdgqy5A3y6azrA JJp5mka92zuqTd/CVPnhh1+uTFX8IbIzL9JinFX1Eqo5Jmqn9eTB2BMcYezTp0xi7VrlDzamlKpd Z+QEO4K866MO5Ryj24AJIjtVtYJoKonlhsnvdw== )`
	RRSIG=14931 and DNSKEY=14931 verifies the DNSKEY RRset
	RRSIG=58121 and DNSKEY=58121/SEP verifies the DNSKEY RRset
	DNSKEY=14931 is now in the chain-of-trust
	DNSKEY=33705 is now in the chain-of-trust
	Query to ns2.tudelft.nl for tudelft.nl/A
	Received 225 bytes from 130.161.180.65
	;; Response received from [130.161.180.65] 225 octets ;; HEADER SECTION ;; id = 34107 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN A ;; ANSWER SECTION (2 records) tudelft.nl. 600 IN A 130.161.128.82 tudelft.nl. 600 IN RRSIG ( A 8 2 600 20260126124329 20260122115000 14931 tudelft.nl. q0cFlu8hSef8Em+Rw0fAbOZFpoUHwdl+lBYehMFPSGO/9PcRjHl0Q3DdIFgIqwnvCJQK5YGC+6LL m7HOT64qsRTQd91h52EcFlHCsXkeiXmx5L8yS7zbg3T6VNvIpvlj8+Yxknzqyfx3zB4888B6SDcf K96zSKfKdjMNvRjI+5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.tudelft.nl is authoritative for tudelft.nl
	Found RRSIG signed by tudelft.nl zone
	Query to ns1.zurich.surf.net for tudelft.nl/SOA
	Received 260 bytes from 195.176.255.9
	;; Response received from [195.176.255.9] 260 octets ;; HEADER SECTION ;; id = 36365 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN SOA ;; ANSWER SECTION (2 records) tudelft.nl. 3600 IN SOA ( ns1.tudelft.nl. hostmaster.tudelft.nl. 2024396561 ;serial 36000 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) tudelft.nl. 3600 IN RRSIG ( SOA 8 2 3600 20260127113210 20260123103210 14931 tudelft.nl. d8AkRMAyhZADzJE44atJ7eSVzNKInsASA/5+BCni8xduUTT1bnkrSkxY8OG7bzLR+pvZlzf58DxT tUVgytLqrFKXeKoWipNR7U2cmG7F7/hgv5KO78L7vlv2NCYC1wTQpPvlO9K3XoL0WIHk++7E9Qqx oxoKASKs2CXoKqSQe3s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.surfnet.nl for tudelft.nl/SOA
	Received 260 bytes from 192.87.106.101
	;; Response received from [192.87.106.101] 260 octets ;; HEADER SECTION ;; id = 37316 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN SOA ;; ANSWER SECTION (2 records) tudelft.nl. 3600 IN SOA ( ns1.tudelft.nl. hostmaster.tudelft.nl. 2024396561 ;serial 36000 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) tudelft.nl. 3600 IN RRSIG ( SOA 8 2 3600 20260127113210 20260123103210 14931 tudelft.nl. d8AkRMAyhZADzJE44atJ7eSVzNKInsASA/5+BCni8xduUTT1bnkrSkxY8OG7bzLR+pvZlzf58DxT tUVgytLqrFKXeKoWipNR7U2cmG7F7/hgv5KO78L7vlv2NCYC1wTQpPvlO9K3XoL0WIHk++7E9Qqx oxoKASKs2CXoKqSQe3s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.tudelft.nl for tudelft.nl/SOA
	Received 260 bytes from 130.161.180.1
	;; Response received from [130.161.180.1] 260 octets ;; HEADER SECTION ;; id = 17922 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN SOA ;; ANSWER SECTION (2 records) tudelft.nl. 3600 IN SOA ( ns1.tudelft.nl. hostmaster.tudelft.nl. 2024396561 ;serial 36000 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) tudelft.nl. 3600 IN RRSIG ( SOA 8 2 3600 20260127113210 20260123103210 14931 tudelft.nl. d8AkRMAyhZADzJE44atJ7eSVzNKInsASA/5+BCni8xduUTT1bnkrSkxY8OG7bzLR+pvZlzf58DxT tUVgytLqrFKXeKoWipNR7U2cmG7F7/hgv5KO78L7vlv2NCYC1wTQpPvlO9K3XoL0WIHk++7E9Qqx oxoKASKs2CXoKqSQe3s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.surfnet.nl for tudelft.nl/SOA
	Received 260 bytes from 192.87.36.2
	;; Response received from [192.87.36.2] 260 octets ;; HEADER SECTION ;; id = 41695 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN SOA ;; ANSWER SECTION (2 records) tudelft.nl. 3600 IN SOA ( ns1.tudelft.nl. hostmaster.tudelft.nl. 2024396561 ;serial 36000 ;refresh 3600 ;retry 2419200 ;expire 3600 ;minimum ) tudelft.nl. 3600 IN RRSIG ( SOA 8 2 3600 20260127113210 20260123103210 14931 tudelft.nl. d8AkRMAyhZADzJE44atJ7eSVzNKInsASA/5+BCni8xduUTT1bnkrSkxY8OG7bzLR+pvZlzf58DxT tUVgytLqrFKXeKoWipNR7U2cmG7F7/hgv5KO78L7vlv2NCYC1wTQpPvlO9K3XoL0WIHk++7E9Qqx oxoKASKs2CXoKqSQe3s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.tudelft.nl for tudelft.nl/A
	Received 225 bytes from 130.161.180.65
	;; Response received from [130.161.180.65] 225 octets ;; HEADER SECTION ;; id = 28364 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN A ;; ANSWER SECTION (2 records) tudelft.nl. 600 IN A 130.161.128.82 tudelft.nl. 600 IN RRSIG ( A 8 2 600 20260126124329 20260122115000 14931 tudelft.nl. q0cFlu8hSef8Em+Rw0fAbOZFpoUHwdl+lBYehMFPSGO/9PcRjHl0Q3DdIFgIqwnvCJQK5YGC+6LL m7HOT64qsRTQd91h52EcFlHCsXkeiXmx5L8yS7zbg3T6VNvIpvlj8+Yxknzqyfx3zB4888B6SDcf K96zSKfKdjMNvRjI+5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tudelft.nl A RR has value 130.161.128.82
	Found 1 RRSIGs over A RRset
	`tudelft.nl. 600 IN RRSIG ( A 8 2 600 20260126124329 20260122115000 14931 tudelft.nl. q0cFlu8hSef8Em+Rw0fAbOZFpoUHwdl+lBYehMFPSGO/9PcRjHl0Q3DdIFgIqwnvCJQK5YGC+6LL m7HOT64qsRTQd91h52EcFlHCsXkeiXmx5L8yS7zbg3T6VNvIpvlj8+Yxknzqyfx3zB4888B6SDcf K96zSKfKdjMNvRjI+5o= )`
	RRSIG=14931 and DNSKEY=14931 verifies the A RRset

tudelft.nl

	Query to ns1.tudelft.nl for tudelft.nl/A
	Received 225 bytes from 130.161.180.1
	;; Response received from [130.161.180.1] 225 octets ;; HEADER SECTION ;; id = 11061 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN A ;; ANSWER SECTION (2 records) tudelft.nl. 600 IN A 130.161.128.82 tudelft.nl. 600 IN RRSIG ( A 8 2 600 20260126124329 20260122115000 14931 tudelft.nl. q0cFlu8hSef8Em+Rw0fAbOZFpoUHwdl+lBYehMFPSGO/9PcRjHl0Q3DdIFgIqwnvCJQK5YGC+6LL m7HOT64qsRTQd91h52EcFlHCsXkeiXmx5L8yS7zbg3T6VNvIpvlj8+Yxknzqyfx3zB4888B6SDcf K96zSKfKdjMNvRjI+5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.tudelft.nl is authoritative for tudelft.nl
	Found RRSIG signed by tudelft.nl zone
	Query to ns1.tudelft.nl for tudelft.nl/A
	Received 225 bytes from 130.161.180.1
	;; Response received from [130.161.180.1] 225 octets ;; HEADER SECTION ;; id = 17291 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN A ;; ANSWER SECTION (2 records) tudelft.nl. 600 IN A 130.161.128.82 tudelft.nl. 600 IN RRSIG ( A 8 2 600 20260126124329 20260122115000 14931 tudelft.nl. q0cFlu8hSef8Em+Rw0fAbOZFpoUHwdl+lBYehMFPSGO/9PcRjHl0Q3DdIFgIqwnvCJQK5YGC+6LL m7HOT64qsRTQd91h52EcFlHCsXkeiXmx5L8yS7zbg3T6VNvIpvlj8+Yxknzqyfx3zB4888B6SDcf K96zSKfKdjMNvRjI+5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tudelft.nl A RR has value 130.161.128.82
	Found 1 RRSIGs over A RRset
	`tudelft.nl. 600 IN RRSIG ( A 8 2 600 20260126124329 20260122115000 14931 tudelft.nl. q0cFlu8hSef8Em+Rw0fAbOZFpoUHwdl+lBYehMFPSGO/9PcRjHl0Q3DdIFgIqwnvCJQK5YGC+6LL m7HOT64qsRTQd91h52EcFlHCsXkeiXmx5L8yS7zbg3T6VNvIpvlj8+Yxknzqyfx3zB4888B6SDcf K96zSKfKdjMNvRjI+5o= )`
	RRSIG=14931 and DNSKEY=14931 verifies the A RRset

tudelft.nl

	Query to ns1.surfnet.nl for tudelft.nl/A
	Received 225 bytes from 192.87.106.101
	;; Response received from [192.87.106.101] 225 octets ;; HEADER SECTION ;; id = 8935 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN A ;; ANSWER SECTION (2 records) tudelft.nl. 600 IN A 130.161.128.82 tudelft.nl. 600 IN RRSIG ( A 8 2 600 20260126124329 20260122115000 14931 tudelft.nl. q0cFlu8hSef8Em+Rw0fAbOZFpoUHwdl+lBYehMFPSGO/9PcRjHl0Q3DdIFgIqwnvCJQK5YGC+6LL m7HOT64qsRTQd91h52EcFlHCsXkeiXmx5L8yS7zbg3T6VNvIpvlj8+Yxknzqyfx3zB4888B6SDcf K96zSKfKdjMNvRjI+5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.surfnet.nl is authoritative for tudelft.nl
	Found RRSIG signed by tudelft.nl zone
	Query to ns1.surfnet.nl for tudelft.nl/A
	Received 225 bytes from 192.87.106.101
	;; Response received from [192.87.106.101] 225 octets ;; HEADER SECTION ;; id = 40242 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN A ;; ANSWER SECTION (2 records) tudelft.nl. 600 IN A 130.161.128.82 tudelft.nl. 600 IN RRSIG ( A 8 2 600 20260126124329 20260122115000 14931 tudelft.nl. q0cFlu8hSef8Em+Rw0fAbOZFpoUHwdl+lBYehMFPSGO/9PcRjHl0Q3DdIFgIqwnvCJQK5YGC+6LL m7HOT64qsRTQd91h52EcFlHCsXkeiXmx5L8yS7zbg3T6VNvIpvlj8+Yxknzqyfx3zB4888B6SDcf K96zSKfKdjMNvRjI+5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tudelft.nl A RR has value 130.161.128.82
	Found 1 RRSIGs over A RRset
	`tudelft.nl. 600 IN RRSIG ( A 8 2 600 20260126124329 20260122115000 14931 tudelft.nl. q0cFlu8hSef8Em+Rw0fAbOZFpoUHwdl+lBYehMFPSGO/9PcRjHl0Q3DdIFgIqwnvCJQK5YGC+6LL m7HOT64qsRTQd91h52EcFlHCsXkeiXmx5L8yS7zbg3T6VNvIpvlj8+Yxknzqyfx3zB4888B6SDcf K96zSKfKdjMNvRjI+5o= )`
	RRSIG=14931 and DNSKEY=14931 verifies the A RRset

tudelft.nl

	Query to ns1.zurich.surf.net for tudelft.nl/A
	Received 225 bytes from 195.176.255.9
	;; Response received from [195.176.255.9] 225 octets ;; HEADER SECTION ;; id = 63641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN A ;; ANSWER SECTION (2 records) tudelft.nl. 600 IN A 130.161.128.82 tudelft.nl. 600 IN RRSIG ( A 8 2 600 20260126124329 20260122115000 14931 tudelft.nl. q0cFlu8hSef8Em+Rw0fAbOZFpoUHwdl+lBYehMFPSGO/9PcRjHl0Q3DdIFgIqwnvCJQK5YGC+6LL m7HOT64qsRTQd91h52EcFlHCsXkeiXmx5L8yS7zbg3T6VNvIpvlj8+Yxknzqyfx3zB4888B6SDcf K96zSKfKdjMNvRjI+5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.zurich.surf.net is authoritative for tudelft.nl
	Found RRSIG signed by tudelft.nl zone
	Query to ns1.zurich.surf.net for tudelft.nl/A
	Received 225 bytes from 195.176.255.9
	;; Response received from [195.176.255.9] 225 octets ;; HEADER SECTION ;; id = 3839 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN A ;; ANSWER SECTION (2 records) tudelft.nl. 600 IN A 130.161.128.82 tudelft.nl. 600 IN RRSIG ( A 8 2 600 20260126124329 20260122115000 14931 tudelft.nl. q0cFlu8hSef8Em+Rw0fAbOZFpoUHwdl+lBYehMFPSGO/9PcRjHl0Q3DdIFgIqwnvCJQK5YGC+6LL m7HOT64qsRTQd91h52EcFlHCsXkeiXmx5L8yS7zbg3T6VNvIpvlj8+Yxknzqyfx3zB4888B6SDcf K96zSKfKdjMNvRjI+5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tudelft.nl A RR has value 130.161.128.82
	Found 1 RRSIGs over A RRset
	`tudelft.nl. 600 IN RRSIG ( A 8 2 600 20260126124329 20260122115000 14931 tudelft.nl. q0cFlu8hSef8Em+Rw0fAbOZFpoUHwdl+lBYehMFPSGO/9PcRjHl0Q3DdIFgIqwnvCJQK5YGC+6LL m7HOT64qsRTQd91h52EcFlHCsXkeiXmx5L8yS7zbg3T6VNvIpvlj8+Yxknzqyfx3zB4888B6SDcf K96zSKfKdjMNvRjI+5o= )`
	RRSIG=14931 and DNSKEY=14931 verifies the A RRset

tudelft.nl

	Query to ns2.surfnet.nl for tudelft.nl/A
	Received 225 bytes from 192.87.36.2
	;; Response received from [192.87.36.2] 225 octets ;; HEADER SECTION ;; id = 36172 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN A ;; ANSWER SECTION (2 records) tudelft.nl. 600 IN A 130.161.128.82 tudelft.nl. 600 IN RRSIG ( A 8 2 600 20260126124329 20260122115000 14931 tudelft.nl. q0cFlu8hSef8Em+Rw0fAbOZFpoUHwdl+lBYehMFPSGO/9PcRjHl0Q3DdIFgIqwnvCJQK5YGC+6LL m7HOT64qsRTQd91h52EcFlHCsXkeiXmx5L8yS7zbg3T6VNvIpvlj8+Yxknzqyfx3zB4888B6SDcf K96zSKfKdjMNvRjI+5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.surfnet.nl is authoritative for tudelft.nl
	Found RRSIG signed by tudelft.nl zone
	Query to ns2.surfnet.nl for tudelft.nl/A
	Received 225 bytes from 192.87.36.2
	;; Response received from [192.87.36.2] 225 octets ;; HEADER SECTION ;; id = 38912 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tudelft.nl. IN A ;; ANSWER SECTION (2 records) tudelft.nl. 600 IN A 130.161.128.82 tudelft.nl. 600 IN RRSIG ( A 8 2 600 20260126124329 20260122115000 14931 tudelft.nl. q0cFlu8hSef8Em+Rw0fAbOZFpoUHwdl+lBYehMFPSGO/9PcRjHl0Q3DdIFgIqwnvCJQK5YGC+6LL m7HOT64qsRTQd91h52EcFlHCsXkeiXmx5L8yS7zbg3T6VNvIpvlj8+Yxknzqyfx3zB4888B6SDcf K96zSKfKdjMNvRjI+5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tudelft.nl A RR has value 130.161.128.82
	Found 1 RRSIGs over A RRset
	`tudelft.nl. 600 IN RRSIG ( A 8 2 600 20260126124329 20260122115000 14931 tudelft.nl. q0cFlu8hSef8Em+Rw0fAbOZFpoUHwdl+lBYehMFPSGO/9PcRjHl0Q3DdIFgIqwnvCJQK5YGC+6LL m7HOT64qsRTQd91h52EcFlHCsXkeiXmx5L8yS7zbg3T6VNvIpvlj8+Yxknzqyfx3zB4888B6SDcf K96zSKfKdjMNvRjI+5o= )`
	RRSIG=14931 and DNSKEY=14931 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test tudelft.nl at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: