DNSSEC Debugger - unibe.ch

Domain Name:

Time: 2025-10-28 10:31:07 UTC

Analyzing DNSSEC problems for unibe.ch

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 57576 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251111000000 20251021000000 20326 . qu+HIDWi0ILo1qOR9j+Z8KZsBjm3N+xbTPm0UrqtVgtDmcuA0BF/m4zEQ/Wf32rCnGxW2tlrw0lq Lqpf/+1UtsfFhNCp6c88XVI19sLyeJwgAK0dYjZtSzObkArDsU9YHmKfB8ai18AN4XHD6Op1G5Io RJsNYsAyWg6GOkuaFspxV9L+ddDhjRhCmDKl3vHcRc9PscgwI47Y5hJgucB0uVbK1XbiQmAg8qqB 0YiVdyWknzL3VYkbdpyMYTlBXuLY9cW2bWrclP6nAnLNJ2BuyXBKOKXYvPCLEeu6hkmBJc6twAJK rGtEZaETWnYUFUgUj3bQHKYLgInclkXIEtF7gQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251111000000 20251021000000 20326 . qu+HIDWi0ILo1qOR9j+Z8KZsBjm3N+xbTPm0UrqtVgtDmcuA0BF/m4zEQ/Wf32rCnGxW2tlrw0lq Lqpf/+1UtsfFhNCp6c88XVI19sLyeJwgAK0dYjZtSzObkArDsU9YHmKfB8ai18AN4XHD6Op1G5Io RJsNYsAyWg6GOkuaFspxV9L+ddDhjRhCmDKl3vHcRc9PscgwI47Y5hJgucB0uVbK1XbiQmAg8qqB 0YiVdyWknzL3VYkbdpyMYTlBXuLY9cW2bWrclP6nAnLNJ2BuyXBKOKXYvPCLEeu6hkmBJc6twAJK rGtEZaETWnYUFUgUj3bQHKYLgInclkXIEtF7gQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to l.root-servers.net for unibe.ch/A
	Received 676 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 676 octets ;; HEADER SECTION ;; id = 62129 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 14051 13 2 abf0b9c56282f0558d59b5eef0f881b7db4f39043972411fdb06e66593a9e8b1 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20251110050000 20251028040000 61809 . u+nAYvL+kuR524ViPi4DT3G65CSjlBUBW7GSUNP9iEPSnDZ3usW4t2w+MABdsRMOClG4VoLlwBA2 PozeAi1zdQNc3Tk5IvIduBa6XzAHa7EpOzjBdkls4Zh790YyI/bT2tlihXDHs+m2fBWDeaLUDpVr Ae8Nx107Z2n8IsG+bilYsXUTJhERg2b/HpGnu1N2U1HgHCx+HQFvx/0Hl8tbXYJ0WFbTb6ppi3Zj EG/Pm9CRNgJEZ/blymvq8/xtdrfOCQr1Q1t+2R9txwL/DRKBMoAd0igS4c2wwiFvkaVl80L7cM6M pWKWMJl2eY7/XNLeMA3i3HH5SoxvSsizwCxxPQ== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 d.nic.ch. 172800 IN A 194.0.25.39 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for ch/DNSKEY
	Received 672 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 672 octets ;; HEADER SECTION ;; id = 37995 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 86400 IN DS ( 14051 13 2 abf0b9c56282f0558d59b5eef0f881b7db4f39043972411fdb06e66593a9e8b1 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20251110050000 20251028040000 61809 . u+nAYvL+kuR524ViPi4DT3G65CSjlBUBW7GSUNP9iEPSnDZ3usW4t2w+MABdsRMOClG4VoLlwBA2 PozeAi1zdQNc3Tk5IvIduBa6XzAHa7EpOzjBdkls4Zh790YyI/bT2tlihXDHs+m2fBWDeaLUDpVr Ae8Nx107Z2n8IsG+bilYsXUTJhERg2b/HpGnu1N2U1HgHCx+HQFvx/0Hl8tbXYJ0WFbTb6ppi3Zj EG/Pm9CRNgJEZ/blymvq8/xtdrfOCQr1Q1t+2R9txwL/DRKBMoAd0igS4c2wwiFvkaVl80L7cM6M pWKWMJl2eY7/XNLeMA3i3HH5SoxvSsizwCxxPQ== ) ;; ADDITIONAL SECTION (11 records) f.nic.ch. 172800 IN A 194.146.106.10 e.nic.ch. 172800 IN A 194.0.17.1 d.nic.ch. 172800 IN A 194.0.25.39 b.nic.ch. 172800 IN A 130.59.31.43 a.nic.ch. 172800 IN A 130.59.31.41 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 e.nic.ch. 172800 IN AAAA 2001:678:3::1 d.nic.ch. 172800 IN AAAA 2001:678:20::39 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 ;; { "EDNS-VERSION": 0 }
	Found child zone ch

	Checking DS between . and ch
	Query to f.root-servers.net for ch/DS
	Received 366 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 366 octets ;; HEADER SECTION ;; id = 20142 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 14051 13 2 abf0b9c56282f0558d59b5eef0f881b7db4f39043972411fdb06e66593a9e8b1 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20251110050000 20251028040000 61809 . u+nAYvL+kuR524ViPi4DT3G65CSjlBUBW7GSUNP9iEPSnDZ3usW4t2w+MABdsRMOClG4VoLlwBA2 PozeAi1zdQNc3Tk5IvIduBa6XzAHa7EpOzjBdkls4Zh790YyI/bT2tlihXDHs+m2fBWDeaLUDpVr Ae8Nx107Z2n8IsG+bilYsXUTJhERg2b/HpGnu1N2U1HgHCx+HQFvx/0Hl8tbXYJ0WFbTb6ppi3Zj EG/Pm9CRNgJEZ/blymvq8/xtdrfOCQr1Q1t+2R9txwL/DRKBMoAd0igS4c2wwiFvkaVl80L7cM6M pWKWMJl2eY7/XNLeMA3i3HH5SoxvSsizwCxxPQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ch in the . zone
	DS=14051/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20251110050000 20251028040000 61809 . u+nAYvL+kuR524ViPi4DT3G65CSjlBUBW7GSUNP9iEPSnDZ3usW4t2w+MABdsRMOClG4VoLlwBA2 PozeAi1zdQNc3Tk5IvIduBa6XzAHa7EpOzjBdkls4Zh790YyI/bT2tlihXDHs+m2fBWDeaLUDpVr Ae8Nx107Z2n8IsG+bilYsXUTJhERg2b/HpGnu1N2U1HgHCx+HQFvx/0Hl8tbXYJ0WFbTb6ppi3Zj EG/Pm9CRNgJEZ/blymvq8/xtdrfOCQr1Q1t+2R9txwL/DRKBMoAd0igS4c2wwiFvkaVl80L7cM6M pWKWMJl2eY7/XNLeMA3i3HH5SoxvSsizwCxxPQ== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=14051/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 14051 13 2 abf0b9c56282f0558d59b5eef0f881b7db4f39043972411fdb06e66593a9e8b1 )`
	Query to a.nic.ch for ch/DNSKEY
	Received 369 bytes from 130.59.31.41
	;; Response received from [130.59.31.41] 369 octets ;; HEADER SECTION ;; id = 41027 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 256 3 13 6h/HZ+ETZKPV8E7ZLNixMuSqRI/CHuUYAsHQ7c99x2s1JAG66T2Pjs6G9ItbJxr826+/xHazVqsA THZG9TDN+Q== ) ; keytag 50332 ch. 86400 IN DNSKEY ( 257 3 13 z6UllGdnGdbzYkhjl1gHlJ9gm/cSid3z1J41nkpm2pzSexfPaugDCstdx4z/hVlRPv007RQOuD12 qpOrKGfPog== ) ; keytag 14051 ch. 86400 IN DNSKEY ( 256 3 13 bYr1xeERaO+Z6O/cpQEb2PCd+iKwM6JnRmDngsTk2hNoEeejWttNtBY0JaLwuIIIOQf9jQPb8dmB xQZC+eJSQw== ) ; keytag 44426 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20251130100909 20251015090909 14051 ch. PgBF7RkJqKycDRsusazxhMszxuFNO5oPJMFImwclQW3J4YecM+kZpPmacuBX6njiL4uNdc+NKwDJ xueivpNFEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 256 3 13 6h/HZ+ETZKPV8E7ZLNixMuSqRI/CHuUYAsHQ7c99x2s1JAG66T2Pjs6G9ItbJxr826+/xHazVqsA THZG9TDN+Q== ) ; keytag 50332`
	`ch. 86400 IN DNSKEY ( 257 3 13 z6UllGdnGdbzYkhjl1gHlJ9gm/cSid3z1J41nkpm2pzSexfPaugDCstdx4z/hVlRPv007RQOuD12 qpOrKGfPog== ) ; keytag 14051`
	`ch. 86400 IN DNSKEY ( 256 3 13 bYr1xeERaO+Z6O/cpQEb2PCd+iKwM6JnRmDngsTk2hNoEeejWttNtBY0JaLwuIIIOQf9jQPb8dmB xQZC+eJSQw== ) ; keytag 44426`
	DNSKEY=14051/SEP is now in the chain-of-trust
	DS=14051/SHA-256 verifies DNSKEY=14051/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20251130100909 20251015090909 14051 ch. PgBF7RkJqKycDRsusazxhMszxuFNO5oPJMFImwclQW3J4YecM+kZpPmacuBX6njiL4uNdc+NKwDJ xueivpNFEQ== )`
	RRSIG=14051 and DNSKEY=14051/SEP verifies the DNSKEY RRset
	DNSKEY=50332 is now in the chain-of-trust
	DNSKEY=44426 is now in the chain-of-trust
	Query to a.nic.ch for unibe.ch/A
	Received 379 bytes from 130.59.31.41
	;; Response received from [130.59.31.41] 379 octets ;; HEADER SECTION ;; id = 57839 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) unibe.ch. 3600 IN NS ns1.unibe.ch. unibe.ch. 3600 IN NS scsnms.switch.ch. unibe.ch. 3600 IN NS ns2.unibe.ch. unibe.ch. 3600 IN DS ( 42220 8 2 86d99bd5d8088df945681a93404b08a4bd47d273fdc7653bc7c4f9e8268c6cab ) unibe.ch. 3600 IN RRSIG ( DS 13 2 3600 20251126201331 20251027191542 50332 ch. 5xCxAgkWskVROLhSbp72Ms90Ndy9LHc7c6Y+iZDPW9WnlJboWF6MOLBcgJ7ViMT5tiWj5Ogb6w5g uNExyujtZw== ) ;; ADDITIONAL SECTION (7 records) ns1.unibe.ch. 3600 IN A 130.92.9.52 ns2.unibe.ch. 3600 IN A 130.92.9.53 scsnms.switch.ch. 3600 IN A 130.59.31.26 ns1.unibe.ch. 3600 IN AAAA 2001:620:400:9::52 ns2.unibe.ch. 3600 IN AAAA 2001:620:400:9::53 scsnms.switch.ch. 3600 IN AAAA 2001:620:0:ff::a7 ;; { "EDNS-VERSION": 0 }
	Query to a.nic.ch for unibe.ch/DNSKEY
	Received 379 bytes from 130.59.31.41
	;; Response received from [130.59.31.41] 379 octets ;; HEADER SECTION ;; id = 21572 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unibe.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) unibe.ch. 3600 IN NS scsnms.switch.ch. unibe.ch. 3600 IN NS ns2.unibe.ch. unibe.ch. 3600 IN NS ns1.unibe.ch. unibe.ch. 3600 IN DS ( 42220 8 2 86d99bd5d8088df945681a93404b08a4bd47d273fdc7653bc7c4f9e8268c6cab ) unibe.ch. 3600 IN RRSIG ( DS 13 2 3600 20251126201331 20251027191542 50332 ch. 5xCxAgkWskVROLhSbp72Ms90Ndy9LHc7c6Y+iZDPW9WnlJboWF6MOLBcgJ7ViMT5tiWj5Ogb6w5g uNExyujtZw== ) ;; ADDITIONAL SECTION (7 records) ns1.unibe.ch. 3600 IN A 130.92.9.52 ns2.unibe.ch. 3600 IN A 130.92.9.53 scsnms.switch.ch. 3600 IN A 130.59.31.26 ns1.unibe.ch. 3600 IN AAAA 2001:620:400:9::52 ns2.unibe.ch. 3600 IN AAAA 2001:620:400:9::53 scsnms.switch.ch. 3600 IN AAAA 2001:620:0:ff::a7 ;; { "EDNS-VERSION": 0 }
	Found child zone unibe.ch

unibe.ch

	Checking DS between ch and unibe.ch
	Query to b.nic.ch for unibe.ch/DS
	Received 183 bytes from 130.59.31.43
	;; Response received from [130.59.31.43] 183 octets ;; HEADER SECTION ;; id = 36669 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unibe.ch. IN DS ;; ANSWER SECTION (2 records) unibe.ch. 3600 IN DS ( 42220 8 2 86d99bd5d8088df945681a93404b08a4bd47d273fdc7653bc7c4f9e8268c6cab ) unibe.ch. 3600 IN RRSIG ( DS 13 2 3600 20251126201331 20251027191542 50332 ch. 5xCxAgkWskVROLhSbp72Ms90Ndy9LHc7c6Y+iZDPW9WnlJboWF6MOLBcgJ7ViMT5tiWj5Ogb6w5g uNExyujtZw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for unibe.ch in the ch zone
	DS=42220/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`unibe.ch. 3600 IN RRSIG ( DS 13 2 3600 20251126201331 20251027191542 50332 ch. 5xCxAgkWskVROLhSbp72Ms90Ndy9LHc7c6Y+iZDPW9WnlJboWF6MOLBcgJ7ViMT5tiWj5Ogb6w5g uNExyujtZw== )`
	RRSIG=50332 and DNSKEY=50332 verifies the DS RRset
	DS=42220/SHA-256 is now in the chain-of-trust
	`unibe.ch. 3600 IN DS ( 42220 8 2 86d99bd5d8088df945681a93404b08a4bd47d273fdc7653bc7c4f9e8268c6cab )`
	Query to scsnms.switch.ch for unibe.ch/DNSKEY
	Received 1457 bytes from 130.59.31.26
	;; Response received from [130.59.31.26] 1457 octets ;; HEADER SECTION ;; id = 42438 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unibe.ch. IN DNSKEY ;; ANSWER SECTION (5 records) unibe.ch. 907200 IN DNSKEY ( 256 3 8 AwEAAcLbBfvH23Q3vs77RuhBaGDY+hqDxfkU9EBDL92VYIh+QZ4uIPE7DuMYuaU6VGPIEevUI6Zo NPX6byqXyrfhblgv0mSyRG/J2IIuAhZJk88//ZUF2GUhpDRaHnunkAZm8Ig0lewgS2UhjZZbd/et tde4Rag2pyV25tj6NbyAN5zRvXL2ZGIzhTuxvdZk6nu+bAwr6kWMxM7ZJZNBnnFGt9RXuqIsmnqu tt+oNrPyPJBC8M5A59wfENqB9mkj4kVxdpbH5SBN9F5Py1xh7zzsleHIaqpQfqB9Fs1o4zBeNHae tvP5tyuWZ4NRqZBqIv+3C+Zfeuv6Sm5hpIBXoX5NBak= ) ; keytag 42055 unibe.ch. 907200 IN DNSKEY ( 256 3 8 AwEAAdFOdXDOdopi1zlOP97MuzoVxx2fraAWlgy1N95N5ph9n/G9ynOhLJbS2GiE3FE0ingzZHG5 Nr8m2GSRVXR6s8D/ebjGZjqT93EIYmEv3Px3d5xfowxggQgDafEtjlNO1z2Hjvd6V8a5kJX8FaQA Gfg7d+0y0/dBAD2OFSn85zo5HFM3sOyKPgR313/u9ela3AQTc8ileDP/zAOY6RisYsDr3ymucIuz vmJ+Do0WK+Y3Yrjj6mJy2G+Ev2pbA6Gqb08/AT3qLvffBZjFxkS7zAId2aFUYSiybCzjMtWApuwg 0eEawuhMwRRbiizDPFnx08Gx3k/x4KtW10/sTIixsfM= ) ; keytag 46800 unibe.ch. 907200 IN DNSKEY ( 257 3 8 AwEAAd5MgJJ6HMd4JY6PtXj6vXsuXmYGKznOugoHwjXazrz8sybhTQjufc7gMN5SMy+kXo/ZAPcb zobtRR7zz2SLpTzmnWUY2ht7fMsAwXUH+K6IQT6Kpt+2GztfG0SEeHDmYM0yyqVvjTJvfwKD2hWa rdNVPzOzlVZ9FkJ2/qqkBvhPeaTFgaQctCh8NMzCcDs0EUFNrH8aBqpI6TCuoeVNW+6SHuhcHFIS 9NpQCEzUIpWev8IzQ4BwlnqjAgp3LQkTk91Ig5VXApOknguXy4VzlRKqLgZoKPWmYKd6DsDjQafz u/myNUg11XCb7qbhccuXnay11rcWTJMF+Eu5J3u2RA8= ) ; keytag 42220 unibe.ch. 907200 IN RRSIG ( DNSKEY 8 2 907200 20251112215409 20251022205409 42220 unibe.ch. GjUtmhH7gsoygehsTFTE49Iflv/HbdnvlXqCu4+BR+FaKOoHvYh0FOulMuE7l9caJgyq7XrS0Aag RrzIzh5DJUYdLc4+VBKHW7ONxKS2ndj9T9RcO7aPhVZOMRIrfsvmKuKBB7nxxNQrSPEnwZyLqqmq HsOGYMdp4ryNe1sHTP7oauPqx7D5jtLMMAJ/rWkAKQn/xf7YzdsSSSUPHZnlrw5Z7Hqg4wHrkVXZ y3j36u7oAxDw3kGlzj5e1g1D6dEOspvVNlsCt4jx9wsur/Xl/HDm3d4B8CjTmH3433C7M7Coao2n QmhQtQDGiCeOd2U9ze5qkVjzM+B3txohjraGPw== ) unibe.ch. 907200 IN RRSIG ( DNSKEY 8 2 907200 20251112215409 20251022205409 46800 unibe.ch. bHNGsIApH8A1LwWkBz77g5ClLhSZXqajliw5cVIX0OUTEVP8wAS7Xls6iELCR42alotCtUz4HksU COTUxQZohiAYnfw/0To7zRApsAfZrhXfWPtphEI/IJOpvRAkXGVXVhVuadML0AQWSADcv5xV/J9h LMpz+klXxjhyZ36Ho7deUmphdDdOKxtWf11SbXrJiieuEqTZkyIsSgUzz+CiOOgL2SwyaGMPwmZH 1cG0UTNUQKCYDr71HtD/onVYKHVbmmKG7/GBn6YhrJ01UbB+PvjtmTfGXWJdgC5hXen0yqGTu4QL Slis/fjouT31Xv4TNBFlCbJCv0VW9zjMjb2CrQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for unibe.ch
	`unibe.ch. 907200 IN DNSKEY ( 256 3 8 AwEAAcLbBfvH23Q3vs77RuhBaGDY+hqDxfkU9EBDL92VYIh+QZ4uIPE7DuMYuaU6VGPIEevUI6Zo NPX6byqXyrfhblgv0mSyRG/J2IIuAhZJk88//ZUF2GUhpDRaHnunkAZm8Ig0lewgS2UhjZZbd/et tde4Rag2pyV25tj6NbyAN5zRvXL2ZGIzhTuxvdZk6nu+bAwr6kWMxM7ZJZNBnnFGt9RXuqIsmnqu tt+oNrPyPJBC8M5A59wfENqB9mkj4kVxdpbH5SBN9F5Py1xh7zzsleHIaqpQfqB9Fs1o4zBeNHae tvP5tyuWZ4NRqZBqIv+3C+Zfeuv6Sm5hpIBXoX5NBak= ) ; keytag 42055`
	`unibe.ch. 907200 IN DNSKEY ( 256 3 8 AwEAAdFOdXDOdopi1zlOP97MuzoVxx2fraAWlgy1N95N5ph9n/G9ynOhLJbS2GiE3FE0ingzZHG5 Nr8m2GSRVXR6s8D/ebjGZjqT93EIYmEv3Px3d5xfowxggQgDafEtjlNO1z2Hjvd6V8a5kJX8FaQA Gfg7d+0y0/dBAD2OFSn85zo5HFM3sOyKPgR313/u9ela3AQTc8ileDP/zAOY6RisYsDr3ymucIuz vmJ+Do0WK+Y3Yrjj6mJy2G+Ev2pbA6Gqb08/AT3qLvffBZjFxkS7zAId2aFUYSiybCzjMtWApuwg 0eEawuhMwRRbiizDPFnx08Gx3k/x4KtW10/sTIixsfM= ) ; keytag 46800`
	`unibe.ch. 907200 IN DNSKEY ( 257 3 8 AwEAAd5MgJJ6HMd4JY6PtXj6vXsuXmYGKznOugoHwjXazrz8sybhTQjufc7gMN5SMy+kXo/ZAPcb zobtRR7zz2SLpTzmnWUY2ht7fMsAwXUH+K6IQT6Kpt+2GztfG0SEeHDmYM0yyqVvjTJvfwKD2hWa rdNVPzOzlVZ9FkJ2/qqkBvhPeaTFgaQctCh8NMzCcDs0EUFNrH8aBqpI6TCuoeVNW+6SHuhcHFIS 9NpQCEzUIpWev8IzQ4BwlnqjAgp3LQkTk91Ig5VXApOknguXy4VzlRKqLgZoKPWmYKd6DsDjQafz u/myNUg11XCb7qbhccuXnay11rcWTJMF+Eu5J3u2RA8= ) ; keytag 42220`
	DNSKEY=42220/SEP is now in the chain-of-trust
	DS=42220/SHA-256 verifies DNSKEY=42220/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`unibe.ch. 907200 IN RRSIG ( DNSKEY 8 2 907200 20251112215409 20251022205409 42220 unibe.ch. GjUtmhH7gsoygehsTFTE49Iflv/HbdnvlXqCu4+BR+FaKOoHvYh0FOulMuE7l9caJgyq7XrS0Aag RrzIzh5DJUYdLc4+VBKHW7ONxKS2ndj9T9RcO7aPhVZOMRIrfsvmKuKBB7nxxNQrSPEnwZyLqqmq HsOGYMdp4ryNe1sHTP7oauPqx7D5jtLMMAJ/rWkAKQn/xf7YzdsSSSUPHZnlrw5Z7Hqg4wHrkVXZ y3j36u7oAxDw3kGlzj5e1g1D6dEOspvVNlsCt4jx9wsur/Xl/HDm3d4B8CjTmH3433C7M7Coao2n QmhQtQDGiCeOd2U9ze5qkVjzM+B3txohjraGPw== )`
	`unibe.ch. 907200 IN RRSIG ( DNSKEY 8 2 907200 20251112215409 20251022205409 46800 unibe.ch. bHNGsIApH8A1LwWkBz77g5ClLhSZXqajliw5cVIX0OUTEVP8wAS7Xls6iELCR42alotCtUz4HksU COTUxQZohiAYnfw/0To7zRApsAfZrhXfWPtphEI/IJOpvRAkXGVXVhVuadML0AQWSADcv5xV/J9h LMpz+klXxjhyZ36Ho7deUmphdDdOKxtWf11SbXrJiieuEqTZkyIsSgUzz+CiOOgL2SwyaGMPwmZH 1cG0UTNUQKCYDr71HtD/onVYKHVbmmKG7/GBn6YhrJ01UbB+PvjtmTfGXWJdgC5hXen0yqGTu4QL Slis/fjouT31Xv4TNBFlCbJCv0VW9zjMjb2CrQ== )`
	RRSIG=42220 and DNSKEY=42220/SEP verifies the DNSKEY RRset
	RRSIG=46800 and DNSKEY=46800 verifies the DNSKEY RRset
	DNSKEY=42055 is now in the chain-of-trust
	DNSKEY=46800 is now in the chain-of-trust
	Query to scsnms.switch.ch for unibe.ch/A
	Received 349 bytes from 130.59.31.26
	;; Response received from [130.59.31.26] 349 octets ;; HEADER SECTION ;; id = 19821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (2 records) unibe.ch. 28800 IN A 130.92.232.93 unibe.ch. 28800 IN RRSIG ( A 8 2 28800 20251117235409 20251027230525 46800 unibe.ch. ygPt4wyFuogtXwbDROz21k3/bbnmBTCxFlmF17Ul4u3Kmy3coqdnz56QRv/Td3s/8f3PMSFEqqJq M/++siz1DYUY6cLuL9de/NcpVcBVu82zbuJHWT1HkBgIgNgEM3rDuVfwmcmCCt4lPs/FvLND4Z8e 1p80ErOoj83qJ/+MoL7AB3cavZK+vVreLcBleGD8QrqPicSaORGOleCn7QkyUlprTgtfYLGGQukI pH52oy1M2/W97K99/2JvU1nAq4F8xGCYXNI2jd2LEbZYVozuMg8Q9sNLWyJxGOfNZpIij/HCikGt oNv0V2mMmxn8EiKJYlx/IZsXnhA4ay4livL97Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	scsnms.switch.ch is authoritative for unibe.ch
	Found RRSIG signed by unibe.ch zone
	Query to ns2.unibe.ch for unibe.ch/SOA
	Received 394 bytes from 130.92.9.53
	;; Response received from [130.92.9.53] 394 octets ;; HEADER SECTION ;; id = 13242 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unibe.ch. IN SOA ;; ANSWER SECTION (2 records) unibe.ch. 28800 IN SOA ( ib-gridmaster.unibe.ch. hostmaster.unibe.ch. 1278228 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 60 ;minimum ) unibe.ch. 28800 IN RRSIG ( SOA 8 2 28800 20251118101733 20251028091733 46800 unibe.ch. ta4xZNubsgjQW5TfGl0WWvApsAZPD1y+cQcHUGJ+B9bjBSIZR5IQ0CuL9Un5mHR0u6fvhisw7hA9 nVt6p8DzqPWj0myia0AkoWkKtjd7zk5hwEHQ4l+iQYPYwWYEms3JUJBRZ8Rv7e2OIp1/SF4MkLmj /lgElMSEW8yIMJ4O/kcuvZiqh2WAWPVrW9v3NB7Aq0wZ7MX5jHioxVt/PBQTeNSuCknQ1AYXXhNz YJ9Iqp2N52olspPEjyPsoZ8AkrJAG84vXMq1YzLcID5++oDO322EJ/WeHI4a/Ip5iN+oXPupBXU4 P4ux93dbAWRKphitTkLOY0bI6etO0Lb2rExUYw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.unibe.ch for unibe.ch/SOA
	Received 394 bytes from 130.92.9.52
	;; Response received from [130.92.9.52] 394 octets ;; HEADER SECTION ;; id = 65119 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unibe.ch. IN SOA ;; ANSWER SECTION (2 records) unibe.ch. 28800 IN SOA ( ib-gridmaster.unibe.ch. hostmaster.unibe.ch. 1278228 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 60 ;minimum ) unibe.ch. 28800 IN RRSIG ( SOA 8 2 28800 20251118101733 20251028091733 46800 unibe.ch. ta4xZNubsgjQW5TfGl0WWvApsAZPD1y+cQcHUGJ+B9bjBSIZR5IQ0CuL9Un5mHR0u6fvhisw7hA9 nVt6p8DzqPWj0myia0AkoWkKtjd7zk5hwEHQ4l+iQYPYwWYEms3JUJBRZ8Rv7e2OIp1/SF4MkLmj /lgElMSEW8yIMJ4O/kcuvZiqh2WAWPVrW9v3NB7Aq0wZ7MX5jHioxVt/PBQTeNSuCknQ1AYXXhNz YJ9Iqp2N52olspPEjyPsoZ8AkrJAG84vXMq1YzLcID5++oDO322EJ/WeHI4a/Ip5iN+oXPupBXU4 P4ux93dbAWRKphitTkLOY0bI6etO0Lb2rExUYw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to scsnms.switch.ch for unibe.ch/A
	Received 349 bytes from 130.59.31.26
	;; Response received from [130.59.31.26] 349 octets ;; HEADER SECTION ;; id = 24300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (2 records) unibe.ch. 28800 IN A 130.92.232.93 unibe.ch. 28800 IN RRSIG ( A 8 2 28800 20251117235409 20251027230525 46800 unibe.ch. ygPt4wyFuogtXwbDROz21k3/bbnmBTCxFlmF17Ul4u3Kmy3coqdnz56QRv/Td3s/8f3PMSFEqqJq M/++siz1DYUY6cLuL9de/NcpVcBVu82zbuJHWT1HkBgIgNgEM3rDuVfwmcmCCt4lPs/FvLND4Z8e 1p80ErOoj83qJ/+MoL7AB3cavZK+vVreLcBleGD8QrqPicSaORGOleCn7QkyUlprTgtfYLGGQukI pH52oy1M2/W97K99/2JvU1nAq4F8xGCYXNI2jd2LEbZYVozuMg8Q9sNLWyJxGOfNZpIij/HCikGt oNv0V2mMmxn8EiKJYlx/IZsXnhA4ay4livL97Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	unibe.ch A RR has value 130.92.232.93
	Found 1 RRSIGs over A RRset
	`unibe.ch. 28800 IN RRSIG ( A 8 2 28800 20251117235409 20251027230525 46800 unibe.ch. ygPt4wyFuogtXwbDROz21k3/bbnmBTCxFlmF17Ul4u3Kmy3coqdnz56QRv/Td3s/8f3PMSFEqqJq M/++siz1DYUY6cLuL9de/NcpVcBVu82zbuJHWT1HkBgIgNgEM3rDuVfwmcmCCt4lPs/FvLND4Z8e 1p80ErOoj83qJ/+MoL7AB3cavZK+vVreLcBleGD8QrqPicSaORGOleCn7QkyUlprTgtfYLGGQukI pH52oy1M2/W97K99/2JvU1nAq4F8xGCYXNI2jd2LEbZYVozuMg8Q9sNLWyJxGOfNZpIij/HCikGt oNv0V2mMmxn8EiKJYlx/IZsXnhA4ay4livL97Q== )`
	RRSIG=46800 and DNSKEY=46800 verifies the A RRset

unibe.ch

	Query to ns2.unibe.ch for unibe.ch/A
	Received 349 bytes from 130.92.9.53
	;; Response received from [130.92.9.53] 349 octets ;; HEADER SECTION ;; id = 6870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (2 records) unibe.ch. 28800 IN A 130.92.232.93 unibe.ch. 28800 IN RRSIG ( A 8 2 28800 20251117235409 20251027230525 46800 unibe.ch. ygPt4wyFuogtXwbDROz21k3/bbnmBTCxFlmF17Ul4u3Kmy3coqdnz56QRv/Td3s/8f3PMSFEqqJq M/++siz1DYUY6cLuL9de/NcpVcBVu82zbuJHWT1HkBgIgNgEM3rDuVfwmcmCCt4lPs/FvLND4Z8e 1p80ErOoj83qJ/+MoL7AB3cavZK+vVreLcBleGD8QrqPicSaORGOleCn7QkyUlprTgtfYLGGQukI pH52oy1M2/W97K99/2JvU1nAq4F8xGCYXNI2jd2LEbZYVozuMg8Q9sNLWyJxGOfNZpIij/HCikGt oNv0V2mMmxn8EiKJYlx/IZsXnhA4ay4livL97Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.unibe.ch is authoritative for unibe.ch
	Found RRSIG signed by unibe.ch zone
	Query to ns2.unibe.ch for unibe.ch/A
	Received 349 bytes from 130.92.9.53
	;; Response received from [130.92.9.53] 349 octets ;; HEADER SECTION ;; id = 14851 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (2 records) unibe.ch. 28800 IN A 130.92.232.93 unibe.ch. 28800 IN RRSIG ( A 8 2 28800 20251117235409 20251027230525 46800 unibe.ch. ygPt4wyFuogtXwbDROz21k3/bbnmBTCxFlmF17Ul4u3Kmy3coqdnz56QRv/Td3s/8f3PMSFEqqJq M/++siz1DYUY6cLuL9de/NcpVcBVu82zbuJHWT1HkBgIgNgEM3rDuVfwmcmCCt4lPs/FvLND4Z8e 1p80ErOoj83qJ/+MoL7AB3cavZK+vVreLcBleGD8QrqPicSaORGOleCn7QkyUlprTgtfYLGGQukI pH52oy1M2/W97K99/2JvU1nAq4F8xGCYXNI2jd2LEbZYVozuMg8Q9sNLWyJxGOfNZpIij/HCikGt oNv0V2mMmxn8EiKJYlx/IZsXnhA4ay4livL97Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	unibe.ch A RR has value 130.92.232.93
	Found 1 RRSIGs over A RRset
	`unibe.ch. 28800 IN RRSIG ( A 8 2 28800 20251117235409 20251027230525 46800 unibe.ch. ygPt4wyFuogtXwbDROz21k3/bbnmBTCxFlmF17Ul4u3Kmy3coqdnz56QRv/Td3s/8f3PMSFEqqJq M/++siz1DYUY6cLuL9de/NcpVcBVu82zbuJHWT1HkBgIgNgEM3rDuVfwmcmCCt4lPs/FvLND4Z8e 1p80ErOoj83qJ/+MoL7AB3cavZK+vVreLcBleGD8QrqPicSaORGOleCn7QkyUlprTgtfYLGGQukI pH52oy1M2/W97K99/2JvU1nAq4F8xGCYXNI2jd2LEbZYVozuMg8Q9sNLWyJxGOfNZpIij/HCikGt oNv0V2mMmxn8EiKJYlx/IZsXnhA4ay4livL97Q== )`
	RRSIG=46800 and DNSKEY=46800 verifies the A RRset

unibe.ch

	Query to ns1.unibe.ch for unibe.ch/A
	Received 349 bytes from 130.92.9.52
	;; Response received from [130.92.9.52] 349 octets ;; HEADER SECTION ;; id = 9019 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (2 records) unibe.ch. 28800 IN A 130.92.232.93 unibe.ch. 28800 IN RRSIG ( A 8 2 28800 20251117235409 20251027230525 46800 unibe.ch. ygPt4wyFuogtXwbDROz21k3/bbnmBTCxFlmF17Ul4u3Kmy3coqdnz56QRv/Td3s/8f3PMSFEqqJq M/++siz1DYUY6cLuL9de/NcpVcBVu82zbuJHWT1HkBgIgNgEM3rDuVfwmcmCCt4lPs/FvLND4Z8e 1p80ErOoj83qJ/+MoL7AB3cavZK+vVreLcBleGD8QrqPicSaORGOleCn7QkyUlprTgtfYLGGQukI pH52oy1M2/W97K99/2JvU1nAq4F8xGCYXNI2jd2LEbZYVozuMg8Q9sNLWyJxGOfNZpIij/HCikGt oNv0V2mMmxn8EiKJYlx/IZsXnhA4ay4livL97Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.unibe.ch is authoritative for unibe.ch
	Found RRSIG signed by unibe.ch zone
	Query to ns1.unibe.ch for unibe.ch/A
	Received 349 bytes from 130.92.9.52
	;; Response received from [130.92.9.52] 349 octets ;; HEADER SECTION ;; id = 24910 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unibe.ch. IN A ;; ANSWER SECTION (2 records) unibe.ch. 28800 IN A 130.92.232.93 unibe.ch. 28800 IN RRSIG ( A 8 2 28800 20251117235409 20251027230525 46800 unibe.ch. ygPt4wyFuogtXwbDROz21k3/bbnmBTCxFlmF17Ul4u3Kmy3coqdnz56QRv/Td3s/8f3PMSFEqqJq M/++siz1DYUY6cLuL9de/NcpVcBVu82zbuJHWT1HkBgIgNgEM3rDuVfwmcmCCt4lPs/FvLND4Z8e 1p80ErOoj83qJ/+MoL7AB3cavZK+vVreLcBleGD8QrqPicSaORGOleCn7QkyUlprTgtfYLGGQukI pH52oy1M2/W97K99/2JvU1nAq4F8xGCYXNI2jd2LEbZYVozuMg8Q9sNLWyJxGOfNZpIij/HCikGt oNv0V2mMmxn8EiKJYlx/IZsXnhA4ay4livL97Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	unibe.ch A RR has value 130.92.232.93
	Found 1 RRSIGs over A RRset
	`unibe.ch. 28800 IN RRSIG ( A 8 2 28800 20251117235409 20251027230525 46800 unibe.ch. ygPt4wyFuogtXwbDROz21k3/bbnmBTCxFlmF17Ul4u3Kmy3coqdnz56QRv/Td3s/8f3PMSFEqqJq M/++siz1DYUY6cLuL9de/NcpVcBVu82zbuJHWT1HkBgIgNgEM3rDuVfwmcmCCt4lPs/FvLND4Z8e 1p80ErOoj83qJ/+MoL7AB3cavZK+vVreLcBleGD8QrqPicSaORGOleCn7QkyUlprTgtfYLGGQukI pH52oy1M2/W97K99/2JvU1nAq4F8xGCYXNI2jd2LEbZYVozuMg8Q9sNLWyJxGOfNZpIij/HCikGt oNv0V2mMmxn8EiKJYlx/IZsXnhA4ay4livL97Q== )`
	RRSIG=46800 and DNSKEY=46800 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test unibe.ch at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: