DNSSEC Analyzer - unibe.ch

Domain Name:

Time: 2023-06-08 14:38:05 UTC, NTP stratum 4

Analyzing DNSSEC problems for unibe.ch

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (865 octets) ;; HEADER SECTION ;; id = 6399 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=60955 is now in the chain-of-trust
	Query to c.root-servers.net for unibe.ch/A
	Received 678 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (678 octets) ;; HEADER SECTION ;; id = 49734 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 86400 IN DS ( 10 13 2 0e175543a74d9083ea977bab2bee98a771995f80982fb796b2b0b9cc6413d1a6 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . Mc47n0fKtxxR3mntBQCHrRhazoAEmHS6mQNv03jIHcZD8VSP8UWf74iJvbLxuTlIiSmtkXPntrMT LH75OKZJ/kfG4wsQnfT9RBePo1sKPoNo8BnZrlxk1hvp9zhJ02Tlt5mHC74h3OqSWUXX4sdye7Lt 5Xp6F+sLbNOu5nqIJxXUd/q1zyWrmaseUVZWFWu/dLdbfQ1cySGQAubzpjeNtznaauxsKxYn0DLF vPaGsaiRSOafGsMaq4q2b5Lb4y5LRqkaywLbMR0cjgXAJdKU5mElOc0D5nuciDfxeTgtLjQgQcv+ igN92NgotbF+WzchAUXxJ4N+qihXbW4kbYMMnQ== ) ;; ADDITIONAL SECTION (11 records) f.nic.ch. 172800 IN A 194.146.106.10 e.nic.ch. 172800 IN A 194.0.17.1 d.nic.ch. 172800 IN A 194.0.25.39 b.nic.ch. 172800 IN A 130.59.31.43 a.nic.ch. 172800 IN A 130.59.31.41 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 e.nic.ch. 172800 IN AAAA 2001:678:3::1 d.nic.ch. 172800 IN AAAA 2001:678:20::39 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to h.root-servers.net for ch/DNSKEY
	Received 670 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (670 octets) ;; HEADER SECTION ;; id = 49274 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 10 13 2 0e175543a74d9083ea977bab2bee98a771995f80982fb796b2b0b9cc6413d1a6 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . Mc47n0fKtxxR3mntBQCHrRhazoAEmHS6mQNv03jIHcZD8VSP8UWf74iJvbLxuTlIiSmtkXPntrMT LH75OKZJ/kfG4wsQnfT9RBePo1sKPoNo8BnZrlxk1hvp9zhJ02Tlt5mHC74h3OqSWUXX4sdye7Lt 5Xp6F+sLbNOu5nqIJxXUd/q1zyWrmaseUVZWFWu/dLdbfQ1cySGQAubzpjeNtznaauxsKxYn0DLF vPaGsaiRSOafGsMaq4q2b5Lb4y5LRqkaywLbMR0cjgXAJdKU5mElOc0D5nuciDfxeTgtLjQgQcv+ igN92NgotbF+WzchAUXxJ4N+qihXbW4kbYMMnQ== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 d.nic.ch. 172800 IN A 194.0.25.39 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone ch

	Checking DS between . and ch
	Query to h.root-servers.net for ch/DS
	Received 366 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (366 octets) ;; HEADER SECTION ;; id = 8431 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 10 13 2 0e175543a74d9083ea977bab2bee98a771995f80982fb796b2b0b9cc6413d1a6 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . Mc47n0fKtxxR3mntBQCHrRhazoAEmHS6mQNv03jIHcZD8VSP8UWf74iJvbLxuTlIiSmtkXPntrMT LH75OKZJ/kfG4wsQnfT9RBePo1sKPoNo8BnZrlxk1hvp9zhJ02Tlt5mHC74h3OqSWUXX4sdye7Lt 5Xp6F+sLbNOu5nqIJxXUd/q1zyWrmaseUVZWFWu/dLdbfQ1cySGQAubzpjeNtznaauxsKxYn0DLF vPaGsaiRSOafGsMaq4q2b5Lb4y5LRqkaywLbMR0cjgXAJdKU5mElOc0D5nuciDfxeTgtLjQgQcv+ igN92NgotbF+WzchAUXxJ4N+qihXbW4kbYMMnQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for ch in the . zone
	DS=10/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . Mc47n0fKtxxR3mntBQCHrRhazoAEmHS6mQNv03jIHcZD8VSP8UWf74iJvbLxuTlIiSmtkXPntrMT LH75OKZJ/kfG4wsQnfT9RBePo1sKPoNo8BnZrlxk1hvp9zhJ02Tlt5mHC74h3OqSWUXX4sdye7Lt 5Xp6F+sLbNOu5nqIJxXUd/q1zyWrmaseUVZWFWu/dLdbfQ1cySGQAubzpjeNtznaauxsKxYn0DLF vPaGsaiRSOafGsMaq4q2b5Lb4y5LRqkaywLbMR0cjgXAJdKU5mElOc0D5nuciDfxeTgtLjQgQcv+ igN92NgotbF+WzchAUXxJ4N+qihXbW4kbYMMnQ== )`
	RRSIG=60955 and DNSKEY=60955 verifies the DS RRset
	DS=10/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 10 13 2 0e175543a74d9083ea977bab2bee98a771995f80982fb796b2b0b9cc6413d1a6 )`
	Query to f.nic.ch for ch/DNSKEY
	Received 369 bytes from 194.146.106.10
	;; Response received from 194.146.106.10 (369 octets) ;; HEADER SECTION ;; id = 31784 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 256 3 13 EnqzGwgwVspBk9Lh/MgCF2ic71tA4SyLgEVmemMRCb1YaK8/ymPT8Tk2BBWrTND4mFhXmDllLDA2 jYFFgYHeWQ== ) ; Key ID = 8616 ch. 86400 IN DNSKEY ( 256 3 13 lNLiYlgANQXxrVQcNDqP731cnCTFBaGaup/fXdW4PtjtBbWq5z1F4AO1ZO28yAAWxX9bm3zcJrnC kWNLCQmBEg== ) ; Key ID = 43749 ch. 86400 IN DNSKEY ( 257 3 13 C9YRPNzK5s10/5ViPyG2R/I5yDCoI2FpTLSDp+/KVC8wZdH0imcF8lske2IepJ60val66rO69Tvy Km1kXg19fg== ) ; Key ID = 10 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20230714100909 20230529090909 10 ch. bQFL6Mxh1d5x1921y23M9wfu+dMv6kS+yB7Aa6EvajX2bhbvD7UIX5DLPGo4EaFWm7bMZGwLS9YC 7oUCeVD3IQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 256 3 13 EnqzGwgwVspBk9Lh/MgCF2ic71tA4SyLgEVmemMRCb1YaK8/ymPT8Tk2BBWrTND4mFhXmDllLDA2 jYFFgYHeWQ== ) ; Key ID = 8616`
	`ch. 86400 IN DNSKEY ( 256 3 13 lNLiYlgANQXxrVQcNDqP731cnCTFBaGaup/fXdW4PtjtBbWq5z1F4AO1ZO28yAAWxX9bm3zcJrnC kWNLCQmBEg== ) ; Key ID = 43749`
	`ch. 86400 IN DNSKEY ( 257 3 13 C9YRPNzK5s10/5ViPyG2R/I5yDCoI2FpTLSDp+/KVC8wZdH0imcF8lske2IepJ60val66rO69Tvy Km1kXg19fg== ) ; Key ID = 10`
	DNSKEY=10/SEP is now in the chain-of-trust
	DS=10/SHA-256 verifies DNSKEY=10/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20230714100909 20230529090909 10 ch. bQFL6Mxh1d5x1921y23M9wfu+dMv6kS+yB7Aa6EvajX2bhbvD7UIX5DLPGo4EaFWm7bMZGwLS9YC 7oUCeVD3IQ== )`
	RRSIG=10 and DNSKEY=10/SEP verifies the DNSKEY RRset
	DNSKEY=8616 is now in the chain-of-trust
	DNSKEY=43749 is now in the chain-of-trust
	Query to f.nic.ch for unibe.ch/A
	Received 381 bytes from 194.146.106.10
	;; Response received from 194.146.106.10 (381 octets) ;; HEADER SECTION ;; id = 57283 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) unibe.ch. 3600 IN NS ns1.unibe.ch. unibe.ch. 3600 IN NS ns2.unibe.ch. unibe.ch. 3600 IN NS scsnms.switch.ch. unibe.ch. 3600 IN DS ( 63826 8 2 7151df3779a77112c27b8b9ab3d262bf4449f6ef17a8a623ed013124b176e828 ) unibe.ch. 3600 IN RRSIG ( DS 13 2 3600 20230702130308 20230602130252 43749 ch. Uu+K8ilYgpVH81sg9AEtCG47jj2h8ndKzMlKNvBPkYfwBgBGqPPwEo1/n5RSDNHru0oQbLg3ZE/A yogJ85wtqg== ) ;; ADDITIONAL SECTION (7 records) scsnms.switch.ch. 3600 IN A 130.59.31.26 ns2.unibe.ch. 3600 IN A 130.92.9.53 ns1.unibe.ch. 3600 IN A 130.92.9.52 scsnms.switch.ch. 3600 IN AAAA 2001:620:0:ff::a7 ns2.unibe.ch. 3600 IN AAAA 2001:620:400:9::53 ns1.unibe.ch. 3600 IN AAAA 2001:620:400:9::52 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to a.nic.ch for unibe.ch/DNSKEY
	Received 381 bytes from 130.59.31.41
	;; Response received from 130.59.31.41 (381 octets) ;; HEADER SECTION ;; id = 34941 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; unibe.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) unibe.ch. 3600 IN NS ns2.unibe.ch. unibe.ch. 3600 IN NS ns1.unibe.ch. unibe.ch. 3600 IN NS scsnms.switch.ch. unibe.ch. 3600 IN DS ( 63826 8 2 7151df3779a77112c27b8b9ab3d262bf4449f6ef17a8a623ed013124b176e828 ) unibe.ch. 3600 IN RRSIG ( DS 13 2 3600 20230702130308 20230602130252 43749 ch. Uu+K8ilYgpVH81sg9AEtCG47jj2h8ndKzMlKNvBPkYfwBgBGqPPwEo1/n5RSDNHru0oQbLg3ZE/A yogJ85wtqg== ) ;; ADDITIONAL SECTION (7 records) scsnms.switch.ch. 3600 IN A 130.59.31.26 ns2.unibe.ch. 3600 IN A 130.92.9.53 ns1.unibe.ch. 3600 IN A 130.92.9.52 scsnms.switch.ch. 3600 IN AAAA 2001:620:0:ff::a7 ns2.unibe.ch. 3600 IN AAAA 2001:620:400:9::53 ns1.unibe.ch. 3600 IN AAAA 2001:620:400:9::52 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone unibe.ch

unibe.ch

	Checking DS between ch and unibe.ch
	Query to a.nic.ch for unibe.ch/DS
	Received 183 bytes from 130.59.31.41
	;; Response received from 130.59.31.41 (183 octets) ;; HEADER SECTION ;; id = 58671 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; unibe.ch. IN DS ;; ANSWER SECTION (2 records) unibe.ch. 3600 IN DS ( 63826 8 2 7151df3779a77112c27b8b9ab3d262bf4449f6ef17a8a623ed013124b176e828 ) unibe.ch. 3600 IN RRSIG ( DS 13 2 3600 20230702130308 20230602130252 43749 ch. Uu+K8ilYgpVH81sg9AEtCG47jj2h8ndKzMlKNvBPkYfwBgBGqPPwEo1/n5RSDNHru0oQbLg3ZE/A yogJ85wtqg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for unibe.ch in the ch zone
	DS=63826/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`unibe.ch. 3600 IN RRSIG ( DS 13 2 3600 20230702130308 20230602130252 43749 ch. Uu+K8ilYgpVH81sg9AEtCG47jj2h8ndKzMlKNvBPkYfwBgBGqPPwEo1/n5RSDNHru0oQbLg3ZE/A yogJ85wtqg== )`
	RRSIG=43749 and DNSKEY=43749 verifies the DS RRset
	DS=63826/SHA-256 is now in the chain-of-trust
	`unibe.ch. 3600 IN DS ( 63826 8 2 7151df3779a77112c27b8b9ab3d262bf4449f6ef17a8a623ed013124b176e828 )`
	Query to ns1.unibe.ch for unibe.ch/DNSKEY
	Received 1457 bytes from 130.92.9.52
	;; Response received from 130.92.9.52 (1457 octets) ;; HEADER SECTION ;; id = 38574 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unibe.ch. IN DNSKEY ;; ANSWER SECTION (5 records) unibe.ch. 907200 IN DNSKEY ( 257 3 8 AwEAAbu6YikrruCdMPvreAcurJVJDqEc204tgkFQrTlCmDP8vkdRAX0t4i/hFl6udPVeFstsMV/7 SLBagtb49dCyUftiCsipiojwpX/bn2OcJnPQbXHZ1UK7qevQqNkqxUZIeBBFmSPaGm+DPPYFlOBs avM1+CoXin4d/PyvKr+tAA8AFJjNVH1TUKi56piwn4ehPCFr/OIlHvbByTitRKAiqsA9alnL4Ka+ 859RIAfnt16q5/KuXADXY+1B4KKkIKcNRpfEQB5zCaisy9VSRHH/9SOoSvrSOy9JVCJKq/XOQ2wr 37mNZeis8Oi2WHWgUHk4vqcL0WpwHU0og3OIhP7HO20= ) ; Key ID = 63826 unibe.ch. 907200 IN DNSKEY ( 256 3 8 AwEAAeuBXXDzQRU+DnSfZrUgrrHjxjG2Y0M2FURcktWMyo0ZVfqTutykyT1DlPS+rmRlOJ4VfLBF yzBCKQyLg/hT3nFWpGGVGDhygDy2XShth1gWX6o7uQyWrt7kZFBNMJfj7NTkYgq9JBO/njkimQcO bCxslccj4BWNjqU2zrc17wfN28V/6g1P96985o7jt1Q3BPJh4qpmfVlSdJYC4zJuKbynEcsBtvSf rp8r+ZsEvCsaMCDe8hVY0h+vSdegm6NvTgCuXpuaBhfY6Rvg0KkHC+IYY0UkiI4hofQeOj5YiU03 foy1Pi5jqX3PMOQMNNk6/U8O2mtbapl3JD7jrEOyKbc= ) ; Key ID = 56958 unibe.ch. 907200 IN DNSKEY ( 256 3 8 AwEAAcc5ZmGpbfpOmODr9EdCkmYk4xHMyWjqiSjuWUB6wuaEunCXJ3SGz50uHqHTG4IwOMyeEWeR S/CFJmYQuz9kB9nk93tJ6pk/8Ih/S447WRTY8xxZpC+509pTwum8o0KHtll472uQaiFMpkq8UT1Z uRFxCNvzvrB/2ATskJtOVm5OzfTrD3IgyFB/we/uhBp4n7M1PEGMXLDGNZXfAmwgwuSN7ylGOI/D EQu+/VpMloal034eYNIjyCuH2PBD7zo9KE1Q7HbUIuesbpiJAJLLCZbTdugyurVHnmQ42TDeEa4i 8EH+Ek+Y5Kk+z421hBE508pDHh8T8g7HK8+Hy4VUZ70= ) ; Key ID = 10155 unibe.ch. 907200 IN RRSIG ( DNSKEY 8 2 907200 20230626023008 20230605014725 10155 unibe.ch. gw2PdJwIBJrI2B4nnBKGRKdSm2WWunzhHkhLW55Jm8vQRSSmkBz+o4liLmJiyWytbnNIqHeeiBeg N4KKnUOXEDirXDmq2SmcGJh2/GuHyPQ6Hd8itoaHM6GYiDFr+YAeiIFjWKEBGv8MfxPkF5hw2XGl 4c0U2VnMk7kQE6QJ/VJkyd6c8WYUqesXCnX8+PxjW55BtNq070YVMExtenCqbpfUHjy5aOgeP0Yj Jzjz1hNraBT8M5tFbrtufiCjIGbv5cCFKgPi8jSlZ/UhBjtvhYAP+VRjJlJUQO9PoMaMQ4f2dQv2 drEWjWCkOI+ZNEVrFS5+dM9DE5r6OizPan4jIA== ) unibe.ch. 907200 IN RRSIG ( DNSKEY 8 2 907200 20230626023008 20230605014725 63826 unibe.ch. COzjKRSrYDkUNVdTNJ1QpjptHFHxt3dxtQW8eQNd/qCh1CjbmYwbuKC+ujZrwu/LV/lyp89IuSVW n/8h2axrlDVp4jMYpX5PgF99D6ky6pM6jiI6Zj2BmxxCxkTO1d5JuJglcf7WoDUHf0J4gykTN73V zyUXa9i/xLVK0yQ9ZNVup8paiH6bdAhNguKBThOoRcY/5XedbQn0/xW+9VhF+nqNW3Hi0jyAmrbE lFoQVGOnvqQiSyXE0yBZm4+R541lwL1yHCFetqAsXTLIBv5d0cHUyvhbn4ZYFV9GtpsNCjmVfv3k z7IUsF7GbNwYOEdflNAA/e0sz0ohIYsIS6U6ug== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Found 3 DNSKEY records for unibe.ch
	`unibe.ch. 907200 IN DNSKEY ( 257 3 8 AwEAAbu6YikrruCdMPvreAcurJVJDqEc204tgkFQrTlCmDP8vkdRAX0t4i/hFl6udPVeFstsMV/7 SLBagtb49dCyUftiCsipiojwpX/bn2OcJnPQbXHZ1UK7qevQqNkqxUZIeBBFmSPaGm+DPPYFlOBs avM1+CoXin4d/PyvKr+tAA8AFJjNVH1TUKi56piwn4ehPCFr/OIlHvbByTitRKAiqsA9alnL4Ka+ 859RIAfnt16q5/KuXADXY+1B4KKkIKcNRpfEQB5zCaisy9VSRHH/9SOoSvrSOy9JVCJKq/XOQ2wr 37mNZeis8Oi2WHWgUHk4vqcL0WpwHU0og3OIhP7HO20= ) ; Key ID = 63826`
	`unibe.ch. 907200 IN DNSKEY ( 256 3 8 AwEAAeuBXXDzQRU+DnSfZrUgrrHjxjG2Y0M2FURcktWMyo0ZVfqTutykyT1DlPS+rmRlOJ4VfLBF yzBCKQyLg/hT3nFWpGGVGDhygDy2XShth1gWX6o7uQyWrt7kZFBNMJfj7NTkYgq9JBO/njkimQcO bCxslccj4BWNjqU2zrc17wfN28V/6g1P96985o7jt1Q3BPJh4qpmfVlSdJYC4zJuKbynEcsBtvSf rp8r+ZsEvCsaMCDe8hVY0h+vSdegm6NvTgCuXpuaBhfY6Rvg0KkHC+IYY0UkiI4hofQeOj5YiU03 foy1Pi5jqX3PMOQMNNk6/U8O2mtbapl3JD7jrEOyKbc= ) ; Key ID = 56958`
	`unibe.ch. 907200 IN DNSKEY ( 256 3 8 AwEAAcc5ZmGpbfpOmODr9EdCkmYk4xHMyWjqiSjuWUB6wuaEunCXJ3SGz50uHqHTG4IwOMyeEWeR S/CFJmYQuz9kB9nk93tJ6pk/8Ih/S447WRTY8xxZpC+509pTwum8o0KHtll472uQaiFMpkq8UT1Z uRFxCNvzvrB/2ATskJtOVm5OzfTrD3IgyFB/we/uhBp4n7M1PEGMXLDGNZXfAmwgwuSN7ylGOI/D EQu+/VpMloal034eYNIjyCuH2PBD7zo9KE1Q7HbUIuesbpiJAJLLCZbTdugyurVHnmQ42TDeEa4i 8EH+Ek+Y5Kk+z421hBE508pDHh8T8g7HK8+Hy4VUZ70= ) ; Key ID = 10155`
	DNSKEY=63826/SEP is now in the chain-of-trust
	DS=63826/SHA-256 verifies DNSKEY=63826/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`unibe.ch. 907200 IN RRSIG ( DNSKEY 8 2 907200 20230626023008 20230605014725 10155 unibe.ch. gw2PdJwIBJrI2B4nnBKGRKdSm2WWunzhHkhLW55Jm8vQRSSmkBz+o4liLmJiyWytbnNIqHeeiBeg N4KKnUOXEDirXDmq2SmcGJh2/GuHyPQ6Hd8itoaHM6GYiDFr+YAeiIFjWKEBGv8MfxPkF5hw2XGl 4c0U2VnMk7kQE6QJ/VJkyd6c8WYUqesXCnX8+PxjW55BtNq070YVMExtenCqbpfUHjy5aOgeP0Yj Jzjz1hNraBT8M5tFbrtufiCjIGbv5cCFKgPi8jSlZ/UhBjtvhYAP+VRjJlJUQO9PoMaMQ4f2dQv2 drEWjWCkOI+ZNEVrFS5+dM9DE5r6OizPan4jIA== )`
	`unibe.ch. 907200 IN RRSIG ( DNSKEY 8 2 907200 20230626023008 20230605014725 63826 unibe.ch. COzjKRSrYDkUNVdTNJ1QpjptHFHxt3dxtQW8eQNd/qCh1CjbmYwbuKC+ujZrwu/LV/lyp89IuSVW n/8h2axrlDVp4jMYpX5PgF99D6ky6pM6jiI6Zj2BmxxCxkTO1d5JuJglcf7WoDUHf0J4gykTN73V zyUXa9i/xLVK0yQ9ZNVup8paiH6bdAhNguKBThOoRcY/5XedbQn0/xW+9VhF+nqNW3Hi0jyAmrbE lFoQVGOnvqQiSyXE0yBZm4+R541lwL1yHCFetqAsXTLIBv5d0cHUyvhbn4ZYFV9GtpsNCjmVfv3k z7IUsF7GbNwYOEdflNAA/e0sz0ohIYsIS6U6ug== )`
	RRSIG=10155 and DNSKEY=10155 verifies the DNSKEY RRset
	RRSIG=63826 and DNSKEY=63826/SEP verifies the DNSKEY RRset
	DNSKEY=56958 is now in the chain-of-trust
	DNSKEY=10155 is now in the chain-of-trust
	Query to ns1.unibe.ch for unibe.ch/A
	Received 1093 bytes from 130.92.9.52
	;; Response received from 130.92.9.52 (1093 octets) ;; HEADER SECTION ;; id = 42615 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (2 records) unibe.ch. 3600 IN A 130.92.250.18 unibe.ch. 3600 IN RRSIG ( A 8 2 3600 20230625170603 20230604160705 10155 unibe.ch. fA438nZBl4HrEALZX+C/2Rt94rb7bSFK8S7TM77OjtfOGedLcRDtYv8hbAtbxzpq25bybm7kNoxE 9xd7tJWWnQ5LK3HzKu/oMXNUmjd1mzLO7V1AjLQQ5VPZ6dslQYP6dyccSp8ClC2qOEa8q0YN3qmU fM7u0VCzfefG4sDseWQ80gLV9SjJGUI5idAvUpTbK6WoEiMqu2W+GZaE1WFEab/HwTFhz49xDNLY hyxKf5TRFmFTNloNBlsrkEdy9vLU+mcWLKFVv8Lg+n+vFYyoK3yrqfAr1ySn2zZslHNoKvs+Iq/g OTniABrO0C7Rd8SJJ7GpZkS/2FVKqMxbbzNefg== ) ;; AUTHORITY SECTION (4 records) unibe.ch. 28800 IN NS ns2.unibe.ch. unibe.ch. 28800 IN NS ns1.unibe.ch. unibe.ch. 28800 IN NS scsnms.switch.ch. unibe.ch. 28800 IN RRSIG ( NS 8 2 28800 20230625195151 20230604190414 10155 unibe.ch. Z7Xqe5zB7XziFQqoyBBjep0j9zPHEUYs8M/Fyj0CIpcIu62fAUoRoZdId8BdXKv2HEY80eLVlzqM TV1QA76+wJLdDh+e9USsUigWchOF3Sj460/O2lZMq64tKN8n/4GUwRhGLoBpRYYTUONyP9yKCXSI sGrUGLNqfYqB1v6VeT6bC2uFs7P2mpOB6A42RmXz3hxhtyk3HHZj8Pngs8D726VPzg0vVyKjRavu yK6/Jk6j785wfSc8ms4PCtNx+8gS0roTulnxWfZNci814P6D0vN/CitTILBi2jAA5pCPYp9oi8PR 5M32AB8Ic/6F9NfEYHz7vtIGOLlcGVX9JWE2lg== ) ;; ADDITIONAL SECTION (6 records) ns2.unibe.ch. 28800 IN A 130.92.9.53 ns1.unibe.ch. 28800 IN A 130.92.9.52 ns2.unibe.ch. 28800 IN AAAA 2001:620:400:9::53 ns1.unibe.ch. 28800 IN AAAA 2001:620:400:9::52 ns2.unibe.ch. 28800 IN RRSIG ( A 8 3 28800 20230625202830 20230604195618 10155 unibe.ch. rD4nHLXOCZuMFPyRD2Z32hYc35v9d20qPfAbEqZHdjsRRGBSKHR2Qjusvh7pwYSZBh/R8F8vmdby z3hPdP+nRa7vIDXz+BJpDaJkNi+PYK8LpF4SXG5w1F3FF8tu744rtdKLbUaVAdj3b+HjxgYzh3wp Y45TkbVMGeRHLGng0bUjCFCdqmz2gV7zDwGtret2bciVSJpGGgCPkualNSlW9mf1vEFYUcvU6UrU zL+bRtlarxElgRNtk19G6pnGCeqPq1Qp/bYTbFJQ5r5n4C1EV54md01KETBANNb5rEn97ljRJUMM Wl9Q3VsTakoC+tNw6Krc5PiVDZ3UcyuftEEU2w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns1.unibe.ch is authoritative for unibe.ch
	Found RRSIG signed by unibe.ch zone
	Query to scsnms.switch.ch for unibe.ch/SOA
	Received 394 bytes from 130.59.31.26
	;; Response received from 130.59.31.26 (394 octets) ;; HEADER SECTION ;; id = 30078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; unibe.ch. IN SOA ;; ANSWER SECTION (2 records) unibe.ch. 28800 IN SOA ( ib-gridmaster.unibe.ch. hostmaster.unibe.ch. 1020291 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 60 ;minimum ) unibe.ch. 28800 IN RRSIG ( SOA 8 2 28800 20230629141940 20230608131940 10155 unibe.ch. HZhzjPlWwg0udX/hVkIsQur/MEibY5D5kJ90dlUPr4EpoUfHMKZiYe5y5Jz/OSd8mMo5BOjECmDj l2dyR5L2aMgeBrKc8fONnmooFQwofevS/ghWy6ofC3Aew/jHnMywBlTbY5CIEyEqfuJ7e7vCE9tF 5u02LB5GAX6jRn4cV5QLNgqHxJ64pwOXn9fGmEHk/GKX0JSXyMur7LOAPFPKmQeRsLgW8ZLxb9Ah CKiu8xTHH3wWwSMHvUQZg859LTDlzlgBo6GZs/z5qtAs8e4JV+irk6nQkw/K2EXwJB9ocMdbc6tt /nkv8j2NKX0RHvei2YNf6GJBsMVD0JyQdNTeJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.unibe.ch for unibe.ch/SOA
	Received 1138 bytes from 130.92.9.53
	;; Response received from 130.92.9.53 (1138 octets) ;; HEADER SECTION ;; id = 27349 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unibe.ch. IN SOA ;; ANSWER SECTION (2 records) unibe.ch. 28800 IN SOA ( ib-gridmaster.unibe.ch. hostmaster.unibe.ch. 1020291 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 60 ;minimum ) unibe.ch. 28800 IN RRSIG ( SOA 8 2 28800 20230629141940 20230608131940 10155 unibe.ch. HZhzjPlWwg0udX/hVkIsQur/MEibY5D5kJ90dlUPr4EpoUfHMKZiYe5y5Jz/OSd8mMo5BOjECmDj l2dyR5L2aMgeBrKc8fONnmooFQwofevS/ghWy6ofC3Aew/jHnMywBlTbY5CIEyEqfuJ7e7vCE9tF 5u02LB5GAX6jRn4cV5QLNgqHxJ64pwOXn9fGmEHk/GKX0JSXyMur7LOAPFPKmQeRsLgW8ZLxb9Ah CKiu8xTHH3wWwSMHvUQZg859LTDlzlgBo6GZs/z5qtAs8e4JV+irk6nQkw/K2EXwJB9ocMdbc6tt /nkv8j2NKX0RHvei2YNf6GJBsMVD0JyQdNTeJg== ) ;; AUTHORITY SECTION (4 records) unibe.ch. 28800 IN NS scsnms.switch.ch. unibe.ch. 28800 IN NS ns1.unibe.ch. unibe.ch. 28800 IN NS ns2.unibe.ch. unibe.ch. 28800 IN RRSIG ( NS 8 2 28800 20230625195151 20230604190414 10155 unibe.ch. Z7Xqe5zB7XziFQqoyBBjep0j9zPHEUYs8M/Fyj0CIpcIu62fAUoRoZdId8BdXKv2HEY80eLVlzqM TV1QA76+wJLdDh+e9USsUigWchOF3Sj460/O2lZMq64tKN8n/4GUwRhGLoBpRYYTUONyP9yKCXSI sGrUGLNqfYqB1v6VeT6bC2uFs7P2mpOB6A42RmXz3hxhtyk3HHZj8Pngs8D726VPzg0vVyKjRavu yK6/Jk6j785wfSc8ms4PCtNx+8gS0roTulnxWfZNci814P6D0vN/CitTILBi2jAA5pCPYp9oi8PR 5M32AB8Ic/6F9NfEYHz7vtIGOLlcGVX9JWE2lg== ) ;; ADDITIONAL SECTION (6 records) ns2.unibe.ch. 28800 IN A 130.92.9.53 ns1.unibe.ch. 28800 IN A 130.92.9.52 ns2.unibe.ch. 28800 IN AAAA 2001:620:400:9::53 ns1.unibe.ch. 28800 IN AAAA 2001:620:400:9::52 ns2.unibe.ch. 28800 IN RRSIG ( A 8 3 28800 20230625202830 20230604195618 10155 unibe.ch. rD4nHLXOCZuMFPyRD2Z32hYc35v9d20qPfAbEqZHdjsRRGBSKHR2Qjusvh7pwYSZBh/R8F8vmdby z3hPdP+nRa7vIDXz+BJpDaJkNi+PYK8LpF4SXG5w1F3FF8tu744rtdKLbUaVAdj3b+HjxgYzh3wp Y45TkbVMGeRHLGng0bUjCFCdqmz2gV7zDwGtret2bciVSJpGGgCPkualNSlW9mf1vEFYUcvU6UrU zL+bRtlarxElgRNtk19G6pnGCeqPq1Qp/bYTbFJQ5r5n4C1EV54md01KETBANNb5rEn97ljRJUMM Wl9Q3VsTakoC+tNw6Krc5PiVDZ3UcyuftEEU2w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to ns1.unibe.ch for unibe.ch/A
	Received 1093 bytes from 130.92.9.52
	;; Response received from 130.92.9.52 (1093 octets) ;; HEADER SECTION ;; id = 16300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (2 records) unibe.ch. 3600 IN A 130.92.250.18 unibe.ch. 3600 IN RRSIG ( A 8 2 3600 20230625170603 20230604160705 10155 unibe.ch. fA438nZBl4HrEALZX+C/2Rt94rb7bSFK8S7TM77OjtfOGedLcRDtYv8hbAtbxzpq25bybm7kNoxE 9xd7tJWWnQ5LK3HzKu/oMXNUmjd1mzLO7V1AjLQQ5VPZ6dslQYP6dyccSp8ClC2qOEa8q0YN3qmU fM7u0VCzfefG4sDseWQ80gLV9SjJGUI5idAvUpTbK6WoEiMqu2W+GZaE1WFEab/HwTFhz49xDNLY hyxKf5TRFmFTNloNBlsrkEdy9vLU+mcWLKFVv8Lg+n+vFYyoK3yrqfAr1ySn2zZslHNoKvs+Iq/g OTniABrO0C7Rd8SJJ7GpZkS/2FVKqMxbbzNefg== ) ;; AUTHORITY SECTION (4 records) unibe.ch. 28800 IN NS scsnms.switch.ch. unibe.ch. 28800 IN NS ns1.unibe.ch. unibe.ch. 28800 IN NS ns2.unibe.ch. unibe.ch. 28800 IN RRSIG ( NS 8 2 28800 20230625195151 20230604190414 10155 unibe.ch. Z7Xqe5zB7XziFQqoyBBjep0j9zPHEUYs8M/Fyj0CIpcIu62fAUoRoZdId8BdXKv2HEY80eLVlzqM TV1QA76+wJLdDh+e9USsUigWchOF3Sj460/O2lZMq64tKN8n/4GUwRhGLoBpRYYTUONyP9yKCXSI sGrUGLNqfYqB1v6VeT6bC2uFs7P2mpOB6A42RmXz3hxhtyk3HHZj8Pngs8D726VPzg0vVyKjRavu yK6/Jk6j785wfSc8ms4PCtNx+8gS0roTulnxWfZNci814P6D0vN/CitTILBi2jAA5pCPYp9oi8PR 5M32AB8Ic/6F9NfEYHz7vtIGOLlcGVX9JWE2lg== ) ;; ADDITIONAL SECTION (6 records) ns2.unibe.ch. 28800 IN A 130.92.9.53 ns1.unibe.ch. 28800 IN A 130.92.9.52 ns2.unibe.ch. 28800 IN AAAA 2001:620:400:9::53 ns1.unibe.ch. 28800 IN AAAA 2001:620:400:9::52 ns2.unibe.ch. 28800 IN RRSIG ( A 8 3 28800 20230625202830 20230604195618 10155 unibe.ch. rD4nHLXOCZuMFPyRD2Z32hYc35v9d20qPfAbEqZHdjsRRGBSKHR2Qjusvh7pwYSZBh/R8F8vmdby z3hPdP+nRa7vIDXz+BJpDaJkNi+PYK8LpF4SXG5w1F3FF8tu744rtdKLbUaVAdj3b+HjxgYzh3wp Y45TkbVMGeRHLGng0bUjCFCdqmz2gV7zDwGtret2bciVSJpGGgCPkualNSlW9mf1vEFYUcvU6UrU zL+bRtlarxElgRNtk19G6pnGCeqPq1Qp/bYTbFJQ5r5n4C1EV54md01KETBANNb5rEn97ljRJUMM Wl9Q3VsTakoC+tNw6Krc5PiVDZ3UcyuftEEU2w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	unibe.ch A RR has value 130.92.250.18
	Found 1 RRSIGs over A RRset
	`unibe.ch. 3600 IN RRSIG ( A 8 2 3600 20230625170603 20230604160705 10155 unibe.ch. fA438nZBl4HrEALZX+C/2Rt94rb7bSFK8S7TM77OjtfOGedLcRDtYv8hbAtbxzpq25bybm7kNoxE 9xd7tJWWnQ5LK3HzKu/oMXNUmjd1mzLO7V1AjLQQ5VPZ6dslQYP6dyccSp8ClC2qOEa8q0YN3qmU fM7u0VCzfefG4sDseWQ80gLV9SjJGUI5idAvUpTbK6WoEiMqu2W+GZaE1WFEab/HwTFhz49xDNLY hyxKf5TRFmFTNloNBlsrkEdy9vLU+mcWLKFVv8Lg+n+vFYyoK3yrqfAr1ySn2zZslHNoKvs+Iq/g OTniABrO0C7Rd8SJJ7GpZkS/2FVKqMxbbzNefg== )`
	RRSIG=10155 and DNSKEY=10155 verifies the A RRset

unibe.ch

	Query to scsnms.switch.ch for unibe.ch/A
	Received 349 bytes from 130.59.31.26
	;; Response received from 130.59.31.26 (349 octets) ;; HEADER SECTION ;; id = 41981 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (2 records) unibe.ch. 3600 IN A 130.92.250.18 unibe.ch. 3600 IN RRSIG ( A 8 2 3600 20230625170603 20230604160705 10155 unibe.ch. fA438nZBl4HrEALZX+C/2Rt94rb7bSFK8S7TM77OjtfOGedLcRDtYv8hbAtbxzpq25bybm7kNoxE 9xd7tJWWnQ5LK3HzKu/oMXNUmjd1mzLO7V1AjLQQ5VPZ6dslQYP6dyccSp8ClC2qOEa8q0YN3qmU fM7u0VCzfefG4sDseWQ80gLV9SjJGUI5idAvUpTbK6WoEiMqu2W+GZaE1WFEab/HwTFhz49xDNLY hyxKf5TRFmFTNloNBlsrkEdy9vLU+mcWLKFVv8Lg+n+vFYyoK3yrqfAr1ySn2zZslHNoKvs+Iq/g OTniABrO0C7Rd8SJJ7GpZkS/2FVKqMxbbzNefg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	scsnms.switch.ch is authoritative for unibe.ch
	Found RRSIG signed by unibe.ch zone
	Query to scsnms.switch.ch for unibe.ch/A
	Received 349 bytes from 130.59.31.26
	;; Response received from 130.59.31.26 (349 octets) ;; HEADER SECTION ;; id = 26543 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (2 records) unibe.ch. 3600 IN A 130.92.250.18 unibe.ch. 3600 IN RRSIG ( A 8 2 3600 20230625170603 20230604160705 10155 unibe.ch. fA438nZBl4HrEALZX+C/2Rt94rb7bSFK8S7TM77OjtfOGedLcRDtYv8hbAtbxzpq25bybm7kNoxE 9xd7tJWWnQ5LK3HzKu/oMXNUmjd1mzLO7V1AjLQQ5VPZ6dslQYP6dyccSp8ClC2qOEa8q0YN3qmU fM7u0VCzfefG4sDseWQ80gLV9SjJGUI5idAvUpTbK6WoEiMqu2W+GZaE1WFEab/HwTFhz49xDNLY hyxKf5TRFmFTNloNBlsrkEdy9vLU+mcWLKFVv8Lg+n+vFYyoK3yrqfAr1ySn2zZslHNoKvs+Iq/g OTniABrO0C7Rd8SJJ7GpZkS/2FVKqMxbbzNefg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	unibe.ch A RR has value 130.92.250.18
	Found 1 RRSIGs over A RRset
	`unibe.ch. 3600 IN RRSIG ( A 8 2 3600 20230625170603 20230604160705 10155 unibe.ch. fA438nZBl4HrEALZX+C/2Rt94rb7bSFK8S7TM77OjtfOGedLcRDtYv8hbAtbxzpq25bybm7kNoxE 9xd7tJWWnQ5LK3HzKu/oMXNUmjd1mzLO7V1AjLQQ5VPZ6dslQYP6dyccSp8ClC2qOEa8q0YN3qmU fM7u0VCzfefG4sDseWQ80gLV9SjJGUI5idAvUpTbK6WoEiMqu2W+GZaE1WFEab/HwTFhz49xDNLY hyxKf5TRFmFTNloNBlsrkEdy9vLU+mcWLKFVv8Lg+n+vFYyoK3yrqfAr1ySn2zZslHNoKvs+Iq/g OTniABrO0C7Rd8SJJ7GpZkS/2FVKqMxbbzNefg== )`
	RRSIG=10155 and DNSKEY=10155 verifies the A RRset

unibe.ch

	Query to ns2.unibe.ch for unibe.ch/A
	Received 1093 bytes from 130.92.9.53
	;; Response received from 130.92.9.53 (1093 octets) ;; HEADER SECTION ;; id = 61822 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (2 records) unibe.ch. 3600 IN A 130.92.250.18 unibe.ch. 3600 IN RRSIG ( A 8 2 3600 20230625170603 20230604160705 10155 unibe.ch. fA438nZBl4HrEALZX+C/2Rt94rb7bSFK8S7TM77OjtfOGedLcRDtYv8hbAtbxzpq25bybm7kNoxE 9xd7tJWWnQ5LK3HzKu/oMXNUmjd1mzLO7V1AjLQQ5VPZ6dslQYP6dyccSp8ClC2qOEa8q0YN3qmU fM7u0VCzfefG4sDseWQ80gLV9SjJGUI5idAvUpTbK6WoEiMqu2W+GZaE1WFEab/HwTFhz49xDNLY hyxKf5TRFmFTNloNBlsrkEdy9vLU+mcWLKFVv8Lg+n+vFYyoK3yrqfAr1ySn2zZslHNoKvs+Iq/g OTniABrO0C7Rd8SJJ7GpZkS/2FVKqMxbbzNefg== ) ;; AUTHORITY SECTION (4 records) unibe.ch. 28800 IN NS ns2.unibe.ch. unibe.ch. 28800 IN NS ns1.unibe.ch. unibe.ch. 28800 IN NS scsnms.switch.ch. unibe.ch. 28800 IN RRSIG ( NS 8 2 28800 20230625195151 20230604190414 10155 unibe.ch. Z7Xqe5zB7XziFQqoyBBjep0j9zPHEUYs8M/Fyj0CIpcIu62fAUoRoZdId8BdXKv2HEY80eLVlzqM TV1QA76+wJLdDh+e9USsUigWchOF3Sj460/O2lZMq64tKN8n/4GUwRhGLoBpRYYTUONyP9yKCXSI sGrUGLNqfYqB1v6VeT6bC2uFs7P2mpOB6A42RmXz3hxhtyk3HHZj8Pngs8D726VPzg0vVyKjRavu yK6/Jk6j785wfSc8ms4PCtNx+8gS0roTulnxWfZNci814P6D0vN/CitTILBi2jAA5pCPYp9oi8PR 5M32AB8Ic/6F9NfEYHz7vtIGOLlcGVX9JWE2lg== ) ;; ADDITIONAL SECTION (6 records) ns2.unibe.ch. 28800 IN A 130.92.9.53 ns1.unibe.ch. 28800 IN A 130.92.9.52 ns2.unibe.ch. 28800 IN AAAA 2001:620:400:9::53 ns1.unibe.ch. 28800 IN AAAA 2001:620:400:9::52 ns2.unibe.ch. 28800 IN RRSIG ( A 8 3 28800 20230625202830 20230604195618 10155 unibe.ch. rD4nHLXOCZuMFPyRD2Z32hYc35v9d20qPfAbEqZHdjsRRGBSKHR2Qjusvh7pwYSZBh/R8F8vmdby z3hPdP+nRa7vIDXz+BJpDaJkNi+PYK8LpF4SXG5w1F3FF8tu744rtdKLbUaVAdj3b+HjxgYzh3wp Y45TkbVMGeRHLGng0bUjCFCdqmz2gV7zDwGtret2bciVSJpGGgCPkualNSlW9mf1vEFYUcvU6UrU zL+bRtlarxElgRNtk19G6pnGCeqPq1Qp/bYTbFJQ5r5n4C1EV54md01KETBANNb5rEn97ljRJUMM Wl9Q3VsTakoC+tNw6Krc5PiVDZ3UcyuftEEU2w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns2.unibe.ch is authoritative for unibe.ch
	Found RRSIG signed by unibe.ch zone
	Query to ns2.unibe.ch for unibe.ch/A
	Received 1093 bytes from 130.92.9.53
	;; Response received from 130.92.9.53 (1093 octets) ;; HEADER SECTION ;; id = 55378 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (2 records) unibe.ch. 3600 IN A 130.92.250.18 unibe.ch. 3600 IN RRSIG ( A 8 2 3600 20230625170603 20230604160705 10155 unibe.ch. fA438nZBl4HrEALZX+C/2Rt94rb7bSFK8S7TM77OjtfOGedLcRDtYv8hbAtbxzpq25bybm7kNoxE 9xd7tJWWnQ5LK3HzKu/oMXNUmjd1mzLO7V1AjLQQ5VPZ6dslQYP6dyccSp8ClC2qOEa8q0YN3qmU fM7u0VCzfefG4sDseWQ80gLV9SjJGUI5idAvUpTbK6WoEiMqu2W+GZaE1WFEab/HwTFhz49xDNLY hyxKf5TRFmFTNloNBlsrkEdy9vLU+mcWLKFVv8Lg+n+vFYyoK3yrqfAr1ySn2zZslHNoKvs+Iq/g OTniABrO0C7Rd8SJJ7GpZkS/2FVKqMxbbzNefg== ) ;; AUTHORITY SECTION (4 records) unibe.ch. 28800 IN NS scsnms.switch.ch. unibe.ch. 28800 IN NS ns1.unibe.ch. unibe.ch. 28800 IN NS ns2.unibe.ch. unibe.ch. 28800 IN RRSIG ( NS 8 2 28800 20230625195151 20230604190414 10155 unibe.ch. Z7Xqe5zB7XziFQqoyBBjep0j9zPHEUYs8M/Fyj0CIpcIu62fAUoRoZdId8BdXKv2HEY80eLVlzqM TV1QA76+wJLdDh+e9USsUigWchOF3Sj460/O2lZMq64tKN8n/4GUwRhGLoBpRYYTUONyP9yKCXSI sGrUGLNqfYqB1v6VeT6bC2uFs7P2mpOB6A42RmXz3hxhtyk3HHZj8Pngs8D726VPzg0vVyKjRavu yK6/Jk6j785wfSc8ms4PCtNx+8gS0roTulnxWfZNci814P6D0vN/CitTILBi2jAA5pCPYp9oi8PR 5M32AB8Ic/6F9NfEYHz7vtIGOLlcGVX9JWE2lg== ) ;; ADDITIONAL SECTION (6 records) ns2.unibe.ch. 28800 IN A 130.92.9.53 ns1.unibe.ch. 28800 IN A 130.92.9.52 ns2.unibe.ch. 28800 IN AAAA 2001:620:400:9::53 ns1.unibe.ch. 28800 IN AAAA 2001:620:400:9::52 ns2.unibe.ch. 28800 IN RRSIG ( A 8 3 28800 20230625202830 20230604195618 10155 unibe.ch. rD4nHLXOCZuMFPyRD2Z32hYc35v9d20qPfAbEqZHdjsRRGBSKHR2Qjusvh7pwYSZBh/R8F8vmdby z3hPdP+nRa7vIDXz+BJpDaJkNi+PYK8LpF4SXG5w1F3FF8tu744rtdKLbUaVAdj3b+HjxgYzh3wp Y45TkbVMGeRHLGng0bUjCFCdqmz2gV7zDwGtret2bciVSJpGGgCPkualNSlW9mf1vEFYUcvU6UrU zL+bRtlarxElgRNtk19G6pnGCeqPq1Qp/bYTbFJQ5r5n4C1EV54md01KETBANNb5rEn97ljRJUMM Wl9Q3VsTakoC+tNw6Krc5PiVDZ3UcyuftEEU2w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	unibe.ch A RR has value 130.92.250.18
	Found 1 RRSIGs over A RRset
	`unibe.ch. 3600 IN RRSIG ( A 8 2 3600 20230625170603 20230604160705 10155 unibe.ch. fA438nZBl4HrEALZX+C/2Rt94rb7bSFK8S7TM77OjtfOGedLcRDtYv8hbAtbxzpq25bybm7kNoxE 9xd7tJWWnQ5LK3HzKu/oMXNUmjd1mzLO7V1AjLQQ5VPZ6dslQYP6dyccSp8ClC2qOEa8q0YN3qmU fM7u0VCzfefG4sDseWQ80gLV9SjJGUI5idAvUpTbK6WoEiMqu2W+GZaE1WFEab/HwTFhz49xDNLY hyxKf5TRFmFTNloNBlsrkEdy9vLU+mcWLKFVv8Lg+n+vFYyoK3yrqfAr1ySn2zZslHNoKvs+Iq/g OTniABrO0C7Rd8SJJ7GpZkS/2FVKqMxbbzNefg== )`
	RRSIG=10155 and DNSKEY=10155 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test unibe.ch at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: