DNSSEC Debugger - www.iana.org

Domain Name:

Time: 2026-02-25 05:17:44 UTC

Analyzing DNSSEC problems for www.iana.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 21705 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260313000000 20260220000000 20326 . JZtm46fb0oPZQLxBUHYEG5Fv0arLLlu7lUpYjsEPdGrggxWWMbB/rA0CbLCsZ0+rk84t5BvOtfPd mBDhJiDQhzJSRK8l8u0roT79KnJU81H+Hdzg+/095yK9djpihg/72I9UyJO3UU1SIdmxzriTE15z Tz/QrKKLME3vp5lBSPkggMMrRkKNW2rpL1JgD6bsXNqJLEHTfpNRGX0EbEKW9VKK27rXxXFa3r0X V2mvOrNiDOCN1nl1YTHWOkuNGxpKlv+kDwrDyGs5Z8WJb4gm47O1xOijfna5dzlEXAjqahKboJsF kMHrQdSnYG0XcTdxhAAMnQjbxDfBEeowXrOt8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to m.root-servers.net for www.iana.org/A
	Received 784 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 784 octets ;; HEADER SECTION ;; id = 47148 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.iana.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20260309210000 20260224200000 21831 . NTuYRRPfXPSH6soCzhW6hibvHdbu26JuIqgtc+CGcfb5p8L/8nrHl4UBRPb8Zgp+3lbSdFxzEAag tf72Sp4WW/tJydWR2sA6/Jrd00j/dHI2f2vYhOAB4nJk+aBr3vgaBG2ecjR5i0pqTNyufUW8UIRH e/tIlKAcmOnUZwjSz9KGCVrhKi6mfpTD+ILWbKEOAe6vfW4BSqJbWdOQ1YY0lagpa9u8Pluef0Nx Rel2CUAZu66pcygBEEqJ4OcNtAlIKfOIka7Tt6tfgBKKP3L5+/djTH4K2ykiNYDYBgqiaWwBxnkk Ff0JJ03kQuY3CYGSf4rQqfMsiE5ShkvIooWmcw== ) ;; ADDITIONAL SECTION (13 records) d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for org/DNSKEY
	Received 772 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 772 octets ;; HEADER SECTION ;; id = 833 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20260309210000 20260224200000 21831 . NTuYRRPfXPSH6soCzhW6hibvHdbu26JuIqgtc+CGcfb5p8L/8nrHl4UBRPb8Zgp+3lbSdFxzEAag tf72Sp4WW/tJydWR2sA6/Jrd00j/dHI2f2vYhOAB4nJk+aBr3vgaBG2ecjR5i0pqTNyufUW8UIRH e/tIlKAcmOnUZwjSz9KGCVrhKi6mfpTD+ILWbKEOAe6vfW4BSqJbWdOQ1YY0lagpa9u8Pluef0Nx Rel2CUAZu66pcygBEEqJ4OcNtAlIKfOIka7Tt6tfgBKKP3L5+/djTH4K2ykiNYDYBgqiaWwBxnkk Ff0JJ03kQuY3CYGSf4rQqfMsiE5ShkvIooWmcw== ) ;; ADDITIONAL SECTION (13 records) d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 ;; { "EDNS-VERSION": 0 }
	Found child zone org

org

	Checking DS between . and org
	Query to k.root-servers.net for org/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 29579 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20260309210000 20260224200000 21831 . NTuYRRPfXPSH6soCzhW6hibvHdbu26JuIqgtc+CGcfb5p8L/8nrHl4UBRPb8Zgp+3lbSdFxzEAag tf72Sp4WW/tJydWR2sA6/Jrd00j/dHI2f2vYhOAB4nJk+aBr3vgaBG2ecjR5i0pqTNyufUW8UIRH e/tIlKAcmOnUZwjSz9KGCVrhKi6mfpTD+ILWbKEOAe6vfW4BSqJbWdOQ1YY0lagpa9u8Pluef0Nx Rel2CUAZu66pcygBEEqJ4OcNtAlIKfOIka7Tt6tfgBKKP3L5+/djTH4K2ykiNYDYBgqiaWwBxnkk Ff0JJ03kQuY3CYGSf4rQqfMsiE5ShkvIooWmcw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20260309210000 20260224200000 21831 . NTuYRRPfXPSH6soCzhW6hibvHdbu26JuIqgtc+CGcfb5p8L/8nrHl4UBRPb8Zgp+3lbSdFxzEAag tf72Sp4WW/tJydWR2sA6/Jrd00j/dHI2f2vYhOAB4nJk+aBr3vgaBG2ecjR5i0pqTNyufUW8UIRH e/tIlKAcmOnUZwjSz9KGCVrhKi6mfpTD+ILWbKEOAe6vfW4BSqJbWdOQ1YY0lagpa9u8Pluef0Nx Rel2CUAZu66pcygBEEqJ4OcNtAlIKfOIka7Tt6tfgBKKP3L5+/djTH4K2ykiNYDYBgqiaWwBxnkk Ff0JJ03kQuY3CYGSf4rQqfMsiE5ShkvIooWmcw== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to b2.org.afilias-nst.org for org/DNSKEY
	Received 895 bytes from 199.249.120.1
	;; Response received from [199.249.120.1] 895 octets ;; HEADER SECTION ;; id = 62783 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 3600 IN DNSKEY ( 256 3 8 AwEAAdDC/yWsWN6hNe3zy8geeYzTB4JvcvpSWr1H0+DyLcdxnR5a/tCNe1cIsi7U0ns9dt9ZN9ne CGX/r5NOzcGmCfhywmaSqxfRhOur1XLEw2fT31bAadkqTTGkM2cCI7nE1bQIATK/sDSfamKM5IQT HErgotU15ltZmcdtlJF4SIgD ) ; keytag 29805 org. 3600 IN DNSKEY ( 256 3 8 AwEAAfCN1yguCELJYujNmis5cjZFEW4UcxwSitTh7m1RYMEHTjhSCCzeMZ+UrpNIxLDLwAtWCcAQ PoLuQdbhbMBo17pkK2UF26k+WKLN4Ieyw8SsAFScQkf+K7wCYJ4fRJgpsvZgRYBwzpsfQjm26Jd8 B7olV02AnvxUHuPo1QeGz0Dd ) ; keytag 64164 org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; keytag 26974 org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260310152741 20260217142741 26974 org. 6pMcREfx3s46nHADt14K7YHxzMlz8R2fnwnusjfPWcXb3KnhfmOk/Fdztfc8XsVYFyZutAevSdOK WvBUz/pA9BWwmL+AT2q1B76ZMp4hRvzmnKsqMIyYWG+XfFDDOZ5ejM8uBDfduKWWWj59X69ga/YX TZs1QPlXJdYuSq8DJ2yiOz/qrVVMHxF/H/OHqD6CRGAehr6QLaaKYFzbdBGXUTMqNvc9EJZBQeId 2moGdR0D89iw06mqi51Awodt8Rpx8TUFfSIDVxP/xhyCRZheTjJQy7mtvSCCbJK7RYHjGqiuEbzO qxfr8SwTMlmmnMizKzRIuigrKfYkS76vOsAN4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for org
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAdDC/yWsWN6hNe3zy8geeYzTB4JvcvpSWr1H0+DyLcdxnR5a/tCNe1cIsi7U0ns9dt9ZN9ne CGX/r5NOzcGmCfhywmaSqxfRhOur1XLEw2fT31bAadkqTTGkM2cCI7nE1bQIATK/sDSfamKM5IQT HErgotU15ltZmcdtlJF4SIgD ) ; keytag 29805`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAfCN1yguCELJYujNmis5cjZFEW4UcxwSitTh7m1RYMEHTjhSCCzeMZ+UrpNIxLDLwAtWCcAQ PoLuQdbhbMBo17pkK2UF26k+WKLN4Ieyw8SsAFScQkf+K7wCYJ4fRJgpsvZgRYBwzpsfQjm26Jd8 B7olV02AnvxUHuPo1QeGz0Dd ) ; keytag 64164`
	`org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; keytag 26974`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260310152741 20260217142741 26974 org. 6pMcREfx3s46nHADt14K7YHxzMlz8R2fnwnusjfPWcXb3KnhfmOk/Fdztfc8XsVYFyZutAevSdOK WvBUz/pA9BWwmL+AT2q1B76ZMp4hRvzmnKsqMIyYWG+XfFDDOZ5ejM8uBDfduKWWWj59X69ga/YX TZs1QPlXJdYuSq8DJ2yiOz/qrVVMHxF/H/OHqD6CRGAehr6QLaaKYFzbdBGXUTMqNvc9EJZBQeId 2moGdR0D89iw06mqi51Awodt8Rpx8TUFfSIDVxP/xhyCRZheTjJQy7mtvSCCbJK7RYHjGqiuEbzO qxfr8SwTMlmmnMizKzRIuigrKfYkS76vOsAN4A== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=29805 is now in the chain-of-trust
	DNSKEY=64164 is now in the chain-of-trust
	Query to a0.org.afilias-nst.info for www.iana.org/A
	Received 383 bytes from 199.19.56.1
	;; Response received from [199.19.56.1] 383 octets ;; HEADER SECTION ;; id = 57175 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.iana.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) iana.org. 3600 IN NS a.iana-servers.net. iana.org. 3600 IN NS ns.icann.org. iana.org. 3600 IN NS c.iana-servers.net. iana.org. 3600 IN NS b.iana-servers.net. iana.org. 3600 IN DS ( 2234 13 2 005b228ce3dad3486f713ebb9bb6f96a53839bd0e2f5a999d3400e1b7355ce8c ) iana.org. 3600 IN RRSIG ( DS 8 2 3600 20260310152741 20260217142741 64164 org. LpSt+rzUf9U/1k9krZYEg3LeIzeg9RizbZe16LvMCSUrWmchCWLkGmUAVdxOz0JqKRnxxgUuPUlH fRMYz0u//Xd8ZwXzSYcsFy5GBa3c9ZX4ruIsLqpCPV5YaCDYBTLHn78kfnpfQlUDzLeDLLhilq/Y tM311KddqBlwxOt+cVM= ) ;; ADDITIONAL SECTION (3 records) ns.icann.org. 3600 IN A 199.4.138.53 ns.icann.org. 3600 IN AAAA 2001:500:89::53 ;; { "EDNS-VERSION": 0 }
	Query to a2.org.afilias-nst.info for iana.org/DNSKEY
	Received 379 bytes from 199.249.112.1
	;; Response received from [199.249.112.1] 379 octets ;; HEADER SECTION ;; id = 42798 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iana.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) iana.org. 3600 IN NS a.iana-servers.net. iana.org. 3600 IN NS ns.icann.org. iana.org. 3600 IN NS c.iana-servers.net. iana.org. 3600 IN NS b.iana-servers.net. iana.org. 3600 IN DS ( 2234 13 2 005b228ce3dad3486f713ebb9bb6f96a53839bd0e2f5a999d3400e1b7355ce8c ) iana.org. 3600 IN RRSIG ( DS 8 2 3600 20260310152741 20260217142741 64164 org. LpSt+rzUf9U/1k9krZYEg3LeIzeg9RizbZe16LvMCSUrWmchCWLkGmUAVdxOz0JqKRnxxgUuPUlH fRMYz0u//Xd8ZwXzSYcsFy5GBa3c9ZX4ruIsLqpCPV5YaCDYBTLHn78kfnpfQlUDzLeDLLhilq/Y tM311KddqBlwxOt+cVM= ) ;; ADDITIONAL SECTION (3 records) ns.icann.org. 3600 IN A 199.4.138.53 ns.icann.org. 3600 IN AAAA 2001:500:89::53 ;; { "EDNS-VERSION": 0 }
	Found child zone iana.org

iana.org

	Checking DS between org and iana.org
	Query to a2.org.afilias-nst.info for iana.org/DS
	Received 248 bytes from 199.249.112.1
	;; Response received from [199.249.112.1] 248 octets ;; HEADER SECTION ;; id = 48055 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iana.org. IN DS ;; ANSWER SECTION (2 records) iana.org. 3600 IN DS ( 2234 13 2 005b228ce3dad3486f713ebb9bb6f96a53839bd0e2f5a999d3400e1b7355ce8c ) iana.org. 3600 IN RRSIG ( DS 8 2 3600 20260310152741 20260217142741 64164 org. LpSt+rzUf9U/1k9krZYEg3LeIzeg9RizbZe16LvMCSUrWmchCWLkGmUAVdxOz0JqKRnxxgUuPUlH fRMYz0u//Xd8ZwXzSYcsFy5GBa3c9ZX4ruIsLqpCPV5YaCDYBTLHn78kfnpfQlUDzLeDLLhilq/Y tM311KddqBlwxOt+cVM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for iana.org in the org zone
	DS=2234/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`iana.org. 3600 IN RRSIG ( DS 8 2 3600 20260310152741 20260217142741 64164 org. LpSt+rzUf9U/1k9krZYEg3LeIzeg9RizbZe16LvMCSUrWmchCWLkGmUAVdxOz0JqKRnxxgUuPUlH fRMYz0u//Xd8ZwXzSYcsFy5GBa3c9ZX4ruIsLqpCPV5YaCDYBTLHn78kfnpfQlUDzLeDLLhilq/Y tM311KddqBlwxOt+cVM= )`
	RRSIG=64164 and DNSKEY=64164 verifies the DS RRset
	DS=2234/SHA-256 is now in the chain-of-trust
	`iana.org. 3600 IN DS ( 2234 13 2 005b228ce3dad3486f713ebb9bb6f96a53839bd0e2f5a999d3400e1b7355ce8c )`
	Query to ns.icann.org for iana.org/DNSKEY
	Received 301 bytes from 199.4.138.53
	;; Response received from [199.4.138.53] 301 octets ;; HEADER SECTION ;; id = 44977 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; iana.org. IN DNSKEY ;; ANSWER SECTION (3 records) iana.org. 3600 IN DNSKEY ( 256 3 13 KSBWp/MlJh1jws6KiNfh34TIUGoj6HDiNuVjVGa5C4vWJEg/YTSG0JIZ0vp1y9qaqXXj9BIBMog6 OmX8YQur0A== ) ; keytag 60289 iana.org. 3600 IN DNSKEY ( 257 3 13 ShmRDG25b0nhrnRcBavHgaSO+vmS+46ZiZ+lQJd3UWXQrl/NWSg+CBBaqSTBD1N9eHthbudy+9Qq EocCRUcHKg== ) ; keytag 2234 iana.org. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260317021605 20260224063420 2234 iana.org. 6uciWfZQ+Uj5ixb4NOd6RJWwIBq2Y7QlVoY+WadHNaYX0y9Qoa8G8JpHYv71guk2so2EDouC6EK+ sCLgkwo9eQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for iana.org
	`iana.org. 3600 IN DNSKEY ( 256 3 13 KSBWp/MlJh1jws6KiNfh34TIUGoj6HDiNuVjVGa5C4vWJEg/YTSG0JIZ0vp1y9qaqXXj9BIBMog6 OmX8YQur0A== ) ; keytag 60289`
	`iana.org. 3600 IN DNSKEY ( 257 3 13 ShmRDG25b0nhrnRcBavHgaSO+vmS+46ZiZ+lQJd3UWXQrl/NWSg+CBBaqSTBD1N9eHthbudy+9Qq EocCRUcHKg== ) ; keytag 2234`
	DNSKEY=2234/SEP is now in the chain-of-trust
	DS=2234/SHA-256 verifies DNSKEY=2234/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`iana.org. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260317021605 20260224063420 2234 iana.org. 6uciWfZQ+Uj5ixb4NOd6RJWwIBq2Y7QlVoY+WadHNaYX0y9Qoa8G8JpHYv71guk2so2EDouC6EK+ sCLgkwo9eQ== )`
	RRSIG=2234 and DNSKEY=2234/SEP verifies the DNSKEY RRset
	DNSKEY=60289 is now in the chain-of-trust
	Query to b.iana-servers.net for www.iana.org/A
	Received 1160 bytes from 199.43.133.53
	;; Response received from [199.43.133.53] 1160 octets ;; HEADER SECTION ;; id = 62404 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.iana.org. IN A ;; ANSWER SECTION (2 records) www.iana.org. 3600 IN CNAME ianawww.vip.icann.org. www.iana.org. 3600 IN RRSIG ( CNAME 13 3 3600 20260315101810 20260222190459 60289 iana.org. 4J/S5/ZqlXTMjLjwQ2y657H7a8FBVlmFgk/dWC4kdpPJmnleWxSsiwrXeyOPpAYfms3lvoshqFzM kgqxddo9pg== ) ;; AUTHORITY SECTION (5 records) vip.icann.org. 3600 IN NS gtm1.dc.icann.org. vip.icann.org. 3600 IN NS gtm1.lax.icann.org. vip.icann.org. 3600 IN NS gtm1.mdr.icann.org. vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 13 3 3600 20260310135713 20260217150652 33637 icann.org. QxDAIw0FQ+x8jZ/rrYzM+u7+gehwNn9zRHvcmt2j3UiZuEABrRGiYM3gtaEtXnwHJ2KL4j+21e9S Qxz299Pc3Q== ) ;; ADDITIONAL SECTION (13 records) gtm1.dc.icann.org. 3600 IN A 192.0.47.252 gtm1.dc.icann.org. 3600 IN RRSIG ( A 13 4 3600 20260312063040 20260219005346 33637 icann.org. VFSetfauJqKl7dWrEgPDi3zSEtBxqgxD+e55MMB2Lak0TGKUXhQyvG7mI1fw00nKjDMJbuqqjRgs 3xqTakaxpw== ) gtm1.lax.icann.org. 3600 IN A 192.0.32.252 gtm1.lax.icann.org. 3600 IN RRSIG ( A 13 4 3600 20260312040645 20260218185346 33637 icann.org. pWvWLr+e7mcnxzZ1eH6/Q00OUFP4KugtBNnp6QCcEP9Wc1yZEw3iyrpkuuk5EjD+ID2MWjSITNvK giAcyoEawg== ) gtm1.mdr.icann.org. 3600 IN A 192.0.36.252 gtm1.mdr.icann.org. 3600 IN RRSIG ( A 13 4 3600 20260313131957 20260220130100 33637 icann.org. A6v7E96JtmKavQmXVPrLyOzwosB14/dQYryBbXQwKidIxacdEQef+IHiotlsLnuhVjnCkAAWvfXD iK1EVgnXKw== ) gtm1.dc.icann.org. 3600 IN AAAA 2620:0:2830:296::252 gtm1.dc.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20260312001515 20260219005346 33637 icann.org. CzU+9kJDCRgk90xKWi+LCoxMBQTTp4rr96Gve50/uNIxPsRGVe2+9TIlV0ZlxKyaTFyxwGo05mEY I+cWqTylUw== ) gtm1.lax.icann.org. 3600 IN AAAA 2620:0:2d0:296::252 gtm1.lax.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20260311223017 20260219035756 33637 icann.org. MM0GHlQb4iAxFAG+4OL5cHgRT43pUxZAM2+Ke5PgipvT8dwElyIf34PJKNlxoNr1dpgzrgAfn5Hr Ln7SEK4G4A== ) gtm1.mdr.icann.org. 3600 IN AAAA 2620:0:2ed0:296::252 gtm1.mdr.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20260311223420 20260218165346 33637 icann.org. IgixJQWjkSEtqr9sWr3/6iNXzIYRXFOWrZ6Ej8ygvSj/YCqUGiiknG6JmaT1hLnnGsvjiAc9GTa1 SrnquA+XFQ== ) ;; { "EDNS-VERSION": 0 }
	b.iana-servers.net is authoritative for www.iana.org
	Query to ns.icann.org for www.iana.org/DNSKEY
	Received 1160 bytes from 199.4.138.53
	;; Response received from [199.4.138.53] 1160 octets ;; HEADER SECTION ;; id = 26415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.iana.org. IN DNSKEY ;; ANSWER SECTION (2 records) www.iana.org. 3600 IN CNAME ianawww.vip.icann.org. www.iana.org. 3600 IN RRSIG ( CNAME 13 3 3600 20260315101810 20260222190459 60289 iana.org. 4J/S5/ZqlXTMjLjwQ2y657H7a8FBVlmFgk/dWC4kdpPJmnleWxSsiwrXeyOPpAYfms3lvoshqFzM kgqxddo9pg== ) ;; AUTHORITY SECTION (5 records) vip.icann.org. 3600 IN NS gtm1.dc.icann.org. vip.icann.org. 3600 IN NS gtm1.lax.icann.org. vip.icann.org. 3600 IN NS gtm1.mdr.icann.org. vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 13 3 3600 20260310135713 20260217150652 33637 icann.org. QxDAIw0FQ+x8jZ/rrYzM+u7+gehwNn9zRHvcmt2j3UiZuEABrRGiYM3gtaEtXnwHJ2KL4j+21e9S Qxz299Pc3Q== ) ;; ADDITIONAL SECTION (13 records) gtm1.dc.icann.org. 3600 IN A 192.0.47.252 gtm1.dc.icann.org. 3600 IN RRSIG ( A 13 4 3600 20260312063040 20260219005346 33637 icann.org. VFSetfauJqKl7dWrEgPDi3zSEtBxqgxD+e55MMB2Lak0TGKUXhQyvG7mI1fw00nKjDMJbuqqjRgs 3xqTakaxpw== ) gtm1.lax.icann.org. 3600 IN A 192.0.32.252 gtm1.lax.icann.org. 3600 IN RRSIG ( A 13 4 3600 20260312040645 20260218185346 33637 icann.org. pWvWLr+e7mcnxzZ1eH6/Q00OUFP4KugtBNnp6QCcEP9Wc1yZEw3iyrpkuuk5EjD+ID2MWjSITNvK giAcyoEawg== ) gtm1.mdr.icann.org. 3600 IN A 192.0.36.252 gtm1.mdr.icann.org. 3600 IN RRSIG ( A 13 4 3600 20260313131957 20260220130100 33637 icann.org. A6v7E96JtmKavQmXVPrLyOzwosB14/dQYryBbXQwKidIxacdEQef+IHiotlsLnuhVjnCkAAWvfXD iK1EVgnXKw== ) gtm1.dc.icann.org. 3600 IN AAAA 2620:0:2830:296::252 gtm1.dc.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20260312001515 20260219005346 33637 icann.org. CzU+9kJDCRgk90xKWi+LCoxMBQTTp4rr96Gve50/uNIxPsRGVe2+9TIlV0ZlxKyaTFyxwGo05mEY I+cWqTylUw== ) gtm1.lax.icann.org. 3600 IN AAAA 2620:0:2d0:296::252 gtm1.lax.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20260311223017 20260219035756 33637 icann.org. MM0GHlQb4iAxFAG+4OL5cHgRT43pUxZAM2+Ke5PgipvT8dwElyIf34PJKNlxoNr1dpgzrgAfn5Hr Ln7SEK4G4A== ) gtm1.mdr.icann.org. 3600 IN AAAA 2620:0:2ed0:296::252 gtm1.mdr.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20260311223420 20260218165346 33637 icann.org. IgixJQWjkSEtqr9sWr3/6iNXzIYRXFOWrZ6Ej8ygvSj/YCqUGiiknG6JmaT1hLnnGsvjiAc9GTa1 SrnquA+XFQ== ) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by iana.org zone
	www.iana.org is a CNAME to ianawww.vip.icann.org
	Found 1 RRSIGs over CNAME RRset
	`www.iana.org. 3600 IN RRSIG ( CNAME 13 3 3600 20260315101810 20260222190459 60289 iana.org. 4J/S5/ZqlXTMjLjwQ2y657H7a8FBVlmFgk/dWC4kdpPJmnleWxSsiwrXeyOPpAYfms3lvoshqFzM kgqxddo9pg== )`
	RRSIG=60289 and DNSKEY=60289 verifies the CNAME RRset

org

	Query to a2.org.afilias-nst.info for ianawww.vip.icann.org/A
	Received 396 bytes from 199.249.112.1
	;; Response received from [199.249.112.1] 396 octets ;; HEADER SECTION ;; id = 28390 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) icann.org. 3600 IN NS a.icann-servers.net. icann.org. 3600 IN NS b.icann-servers.net. icann.org. 3600 IN NS c.icann-servers.net. icann.org. 3600 IN NS ns.icann.org. icann.org. 3600 IN DS ( 20149 13 2 cf066bceadb799a27b62e3e82dc2e4da314c1807db98f13d82f0043b1418cf4e ) icann.org. 3600 IN RRSIG ( DS 8 2 3600 20260310152741 20260217142741 64164 org. pKFkyftfOHBoRxSw7ippAAo6NFIyIGHns9+9+GEHAeuWWBYzDrBAx+QdkrbJLxiecBHuZbons8hb UQPTU2th6peQ3bMs5JC0V+LGj0kmizJdMNASHKAZHVHia19pAcXr3JU2BIhOI7nruGKGh7bNtzXf 9eO4F4ebMF+bFe8l+NQ= ) ;; ADDITIONAL SECTION (3 records) ns.icann.org. 3600 IN A 199.4.138.53 ns.icann.org. 3600 IN AAAA 2001:500:89::53 ;; { "EDNS-VERSION": 0 }
	Query to a0.org.afilias-nst.info for icann.org/DNSKEY
	Received 375 bytes from 199.19.56.1
	;; Response received from [199.19.56.1] 375 octets ;; HEADER SECTION ;; id = 5506 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) icann.org. 3600 IN NS a.icann-servers.net. icann.org. 3600 IN NS c.icann-servers.net. icann.org. 3600 IN NS ns.icann.org. icann.org. 3600 IN NS b.icann-servers.net. icann.org. 3600 IN DS ( 20149 13 2 cf066bceadb799a27b62e3e82dc2e4da314c1807db98f13d82f0043b1418cf4e ) icann.org. 3600 IN RRSIG ( DS 8 2 3600 20260310152741 20260217142741 64164 org. pKFkyftfOHBoRxSw7ippAAo6NFIyIGHns9+9+GEHAeuWWBYzDrBAx+QdkrbJLxiecBHuZbons8hb UQPTU2th6peQ3bMs5JC0V+LGj0kmizJdMNASHKAZHVHia19pAcXr3JU2BIhOI7nruGKGh7bNtzXf 9eO4F4ebMF+bFe8l+NQ= ) ;; ADDITIONAL SECTION (3 records) ns.icann.org. 3600 IN A 199.4.138.53 ns.icann.org. 3600 IN AAAA 2001:500:89::53 ;; { "EDNS-VERSION": 0 }
	Found child zone icann.org

icann.org

	Checking DS between org and icann.org
	Query to b2.org.afilias-nst.org for icann.org/DS
	Received 249 bytes from 199.249.120.1
	;; Response received from [199.249.120.1] 249 octets ;; HEADER SECTION ;; id = 57482 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; icann.org. IN DS ;; ANSWER SECTION (2 records) icann.org. 3600 IN DS ( 20149 13 2 cf066bceadb799a27b62e3e82dc2e4da314c1807db98f13d82f0043b1418cf4e ) icann.org. 3600 IN RRSIG ( DS 8 2 3600 20260310152741 20260217142741 64164 org. pKFkyftfOHBoRxSw7ippAAo6NFIyIGHns9+9+GEHAeuWWBYzDrBAx+QdkrbJLxiecBHuZbons8hb UQPTU2th6peQ3bMs5JC0V+LGj0kmizJdMNASHKAZHVHia19pAcXr3JU2BIhOI7nruGKGh7bNtzXf 9eO4F4ebMF+bFe8l+NQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for icann.org in the org zone
	DS=20149/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`icann.org. 3600 IN RRSIG ( DS 8 2 3600 20260310152741 20260217142741 64164 org. pKFkyftfOHBoRxSw7ippAAo6NFIyIGHns9+9+GEHAeuWWBYzDrBAx+QdkrbJLxiecBHuZbons8hb UQPTU2th6peQ3bMs5JC0V+LGj0kmizJdMNASHKAZHVHia19pAcXr3JU2BIhOI7nruGKGh7bNtzXf 9eO4F4ebMF+bFe8l+NQ= )`
	RRSIG=64164 and DNSKEY=64164 verifies the DS RRset
	DS=20149/SHA-256 is now in the chain-of-trust
	`icann.org. 3600 IN DS ( 20149 13 2 cf066bceadb799a27b62e3e82dc2e4da314c1807db98f13d82f0043b1418cf4e )`
	Query to c.icann-servers.net for icann.org/DNSKEY
	Received 383 bytes from 199.43.134.53
	;; Response received from [199.43.134.53] 383 octets ;; HEADER SECTION ;; id = 14153 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; icann.org. IN DNSKEY ;; ANSWER SECTION (4 records) icann.org. 3600 IN DNSKEY ( 256 3 13 Ep2r8mYIjypK1U0789ot85LV198OvarxARq3sXA6EVELcSQNTfva5f3gVv5eAAvQyZHpb7lITqeK giDmiyiqaQ== ) ; keytag 33637 icann.org. 3600 IN DNSKEY ( 257 3 13 d25y9HFMnvNDVXria3ODfdcjUwA6S0MjGnOftautpQ9Aztpc95MKKNo7uUgH6qQDwqvD2ycNYQJS q75K3YuW8A== ) ; keytag 20149 icann.org. 3600 IN DNSKEY ( 256 3 13 bNtIwnsUDKZTat3YdNyZpfzJfg3wOXpyhm1CLFirxAPaduqks/rPMHJxBg+oxv16E/vd2jtwz84v qT8aHfG9NQ== ) ; keytag 63999 icann.org. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260314174714 20260221134208 20149 icann.org. VUjf5B/UEspFWhwMmLaWohK1++xB/TpkOGHeMyIHWOFzdOPt5EASzlgwqvsFYb7zcd2Ss3ZJQHKV KORNfRb6Hw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for icann.org
	`icann.org. 3600 IN DNSKEY ( 256 3 13 Ep2r8mYIjypK1U0789ot85LV198OvarxARq3sXA6EVELcSQNTfva5f3gVv5eAAvQyZHpb7lITqeK giDmiyiqaQ== ) ; keytag 33637`
	`icann.org. 3600 IN DNSKEY ( 257 3 13 d25y9HFMnvNDVXria3ODfdcjUwA6S0MjGnOftautpQ9Aztpc95MKKNo7uUgH6qQDwqvD2ycNYQJS q75K3YuW8A== ) ; keytag 20149`
	`icann.org. 3600 IN DNSKEY ( 256 3 13 bNtIwnsUDKZTat3YdNyZpfzJfg3wOXpyhm1CLFirxAPaduqks/rPMHJxBg+oxv16E/vd2jtwz84v qT8aHfG9NQ== ) ; keytag 63999`
	DNSKEY=20149/SEP is now in the chain-of-trust
	DS=20149/SHA-256 verifies DNSKEY=20149/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`icann.org. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260314174714 20260221134208 20149 icann.org. VUjf5B/UEspFWhwMmLaWohK1++xB/TpkOGHeMyIHWOFzdOPt5EASzlgwqvsFYb7zcd2Ss3ZJQHKV KORNfRb6Hw== )`
	RRSIG=20149 and DNSKEY=20149/SEP verifies the DNSKEY RRset
	DNSKEY=33637 is now in the chain-of-trust
	DNSKEY=63999 is now in the chain-of-trust
	Query to ns.icann.org for ianawww.vip.icann.org/A
	Received 1033 bytes from 199.4.138.53
	;; Response received from [199.4.138.53] 1033 octets ;; HEADER SECTION ;; id = 11996 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) vip.icann.org. 3600 IN NS gtm1.dc.icann.org. vip.icann.org. 3600 IN NS gtm1.lax.icann.org. vip.icann.org. 3600 IN NS gtm1.mdr.icann.org. vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 13 3 3600 20260310135713 20260217150652 33637 icann.org. QxDAIw0FQ+x8jZ/rrYzM+u7+gehwNn9zRHvcmt2j3UiZuEABrRGiYM3gtaEtXnwHJ2KL4j+21e9S Qxz299Pc3Q== ) ;; ADDITIONAL SECTION (13 records) gtm1.dc.icann.org. 3600 IN A 192.0.47.252 gtm1.dc.icann.org. 3600 IN RRSIG ( A 13 4 3600 20260312063040 20260219005346 33637 icann.org. VFSetfauJqKl7dWrEgPDi3zSEtBxqgxD+e55MMB2Lak0TGKUXhQyvG7mI1fw00nKjDMJbuqqjRgs 3xqTakaxpw== ) gtm1.lax.icann.org. 3600 IN A 192.0.32.252 gtm1.lax.icann.org. 3600 IN RRSIG ( A 13 4 3600 20260312040645 20260218185346 33637 icann.org. pWvWLr+e7mcnxzZ1eH6/Q00OUFP4KugtBNnp6QCcEP9Wc1yZEw3iyrpkuuk5EjD+ID2MWjSITNvK giAcyoEawg== ) gtm1.mdr.icann.org. 3600 IN A 192.0.36.252 gtm1.mdr.icann.org. 3600 IN RRSIG ( A 13 4 3600 20260313131957 20260220130100 33637 icann.org. A6v7E96JtmKavQmXVPrLyOzwosB14/dQYryBbXQwKidIxacdEQef+IHiotlsLnuhVjnCkAAWvfXD iK1EVgnXKw== ) gtm1.dc.icann.org. 3600 IN AAAA 2620:0:2830:296::252 gtm1.dc.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20260312001515 20260219005346 33637 icann.org. CzU+9kJDCRgk90xKWi+LCoxMBQTTp4rr96Gve50/uNIxPsRGVe2+9TIlV0ZlxKyaTFyxwGo05mEY I+cWqTylUw== ) gtm1.lax.icann.org. 3600 IN AAAA 2620:0:2d0:296::252 gtm1.lax.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20260311223017 20260219035756 33637 icann.org. MM0GHlQb4iAxFAG+4OL5cHgRT43pUxZAM2+Ke5PgipvT8dwElyIf34PJKNlxoNr1dpgzrgAfn5Hr Ln7SEK4G4A== ) gtm1.mdr.icann.org. 3600 IN AAAA 2620:0:2ed0:296::252 gtm1.mdr.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20260311223420 20260218165346 33637 icann.org. IgixJQWjkSEtqr9sWr3/6iNXzIYRXFOWrZ6Ej8ygvSj/YCqUGiiknG6JmaT1hLnnGsvjiAc9GTa1 SrnquA+XFQ== ) ;; { "EDNS-VERSION": 0 }
	Query to c.icann-servers.net for vip.icann.org/DNSKEY
	Received 1025 bytes from 199.43.134.53
	;; Response received from [199.43.134.53] 1025 octets ;; HEADER SECTION ;; id = 60111 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) vip.icann.org. 3600 IN NS gtm1.mdr.icann.org. vip.icann.org. 3600 IN NS gtm1.lax.icann.org. vip.icann.org. 3600 IN NS gtm1.dc.icann.org. vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 13 3 3600 20260310135713 20260217150652 33637 icann.org. QxDAIw0FQ+x8jZ/rrYzM+u7+gehwNn9zRHvcmt2j3UiZuEABrRGiYM3gtaEtXnwHJ2KL4j+21e9S Qxz299Pc3Q== ) ;; ADDITIONAL SECTION (13 records) gtm1.dc.icann.org. 3600 IN A 192.0.47.252 gtm1.lax.icann.org. 3600 IN A 192.0.32.252 gtm1.mdr.icann.org. 3600 IN A 192.0.36.252 gtm1.dc.icann.org. 3600 IN AAAA 2620:0:2830:296::252 gtm1.lax.icann.org. 3600 IN AAAA 2620:0:2d0:296::252 gtm1.mdr.icann.org. 3600 IN AAAA 2620:0:2ed0:296::252 gtm1.dc.icann.org. 3600 IN RRSIG ( A 13 4 3600 20260312063040 20260219005346 33637 icann.org. VFSetfauJqKl7dWrEgPDi3zSEtBxqgxD+e55MMB2Lak0TGKUXhQyvG7mI1fw00nKjDMJbuqqjRgs 3xqTakaxpw== ) gtm1.dc.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20260312001515 20260219005346 33637 icann.org. CzU+9kJDCRgk90xKWi+LCoxMBQTTp4rr96Gve50/uNIxPsRGVe2+9TIlV0ZlxKyaTFyxwGo05mEY I+cWqTylUw== ) gtm1.lax.icann.org. 3600 IN RRSIG ( A 13 4 3600 20260312040645 20260218185346 33637 icann.org. pWvWLr+e7mcnxzZ1eH6/Q00OUFP4KugtBNnp6QCcEP9Wc1yZEw3iyrpkuuk5EjD+ID2MWjSITNvK giAcyoEawg== ) gtm1.lax.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20260311223017 20260219035756 33637 icann.org. MM0GHlQb4iAxFAG+4OL5cHgRT43pUxZAM2+Ke5PgipvT8dwElyIf34PJKNlxoNr1dpgzrgAfn5Hr Ln7SEK4G4A== ) gtm1.mdr.icann.org. 3600 IN RRSIG ( A 13 4 3600 20260313131957 20260220130100 33637 icann.org. A6v7E96JtmKavQmXVPrLyOzwosB14/dQYryBbXQwKidIxacdEQef+IHiotlsLnuhVjnCkAAWvfXD iK1EVgnXKw== ) gtm1.mdr.icann.org. 3600 IN RRSIG ( AAAA 13 4 3600 20260311223420 20260218165346 33637 icann.org. IgixJQWjkSEtqr9sWr3/6iNXzIYRXFOWrZ6Ej8ygvSj/YCqUGiiknG6JmaT1hLnnGsvjiAc9GTa1 SrnquA+XFQ== ) ;; { "EDNS-VERSION": 0 }
	Found child zone vip.icann.org

vip.icann.org

	Checking DS between icann.org and vip.icann.org
	Query to ns.icann.org for vip.icann.org/DS
	Received 195 bytes from 199.4.138.53
	;; Response received from [199.4.138.53] 195 octets ;; HEADER SECTION ;; id = 55149 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN DS ;; ANSWER SECTION (2 records) vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 ) vip.icann.org. 3600 IN RRSIG ( DS 13 3 3600 20260310135713 20260217150652 33637 icann.org. QxDAIw0FQ+x8jZ/rrYzM+u7+gehwNn9zRHvcmt2j3UiZuEABrRGiYM3gtaEtXnwHJ2KL4j+21e9S Qxz299Pc3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for vip.icann.org in the icann.org zone
	DS=6025/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`vip.icann.org. 3600 IN RRSIG ( DS 13 3 3600 20260310135713 20260217150652 33637 icann.org. QxDAIw0FQ+x8jZ/rrYzM+u7+gehwNn9zRHvcmt2j3UiZuEABrRGiYM3gtaEtXnwHJ2KL4j+21e9S Qxz299Pc3Q== )`
	RRSIG=33637 and DNSKEY=33637 verifies the DS RRset
	DS=6025/SHA-256 is now in the chain-of-trust
	`vip.icann.org. 3600 IN DS ( 6025 8 2 4daafdc62528cefc8c8f52b50d70d822115bd9c0f6662a6505603ef18401fe49 )`
	Query to gtm1.mdr.icann.org for vip.icann.org/DNSKEY
	Received 940 bytes from 192.0.36.252
	;; Response received from [192.0.36.252] 940 octets ;; HEADER SECTION ;; id = 13335 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN DNSKEY ;; ANSWER SECTION (4 records) vip.icann.org. 3600 IN DNSKEY ( 257 3 8 AwEAAa8hgHkq4/7LtCF+DQ71ZrBhMV1TLpMf8qV3uPkkBig73b5z88C+HovqSm300B0RLKVy8/Jy 5qjXh7GMTjkGyspIRbmUPVXwXxjuWlLWbeGXE7OzgT87mxXvRyWYdpclWp50eVvwkLXu5h8dKQU6 IKxKfBXiqcK4cVCZIDtMCx3wqERKCs83q5y0t0fVdl5ZH8yR4TEFgA0L4SROHbUO+je6XUgBUskO w2eTS1ukpeU6owa8zr+fpN0lpZahzjmZ9NpPda8Btn0HVhbghdU5Ykrt1v3IPn98v/MMtSXD2Bei JjWrsQPVS3CJ9WfD81j/bAYf1D5crMcuenrFcGBfgPk= ) ; keytag 6025 vip.icann.org. 3600 IN DNSKEY ( 256 3 8 AwEAAaacq8t+MwiciIK9TF0i0oUSvJ8OkXYEE7kLdcf+ez2+G4D2PvJIieQVEqL12OUlLm/Uea9+ zO2vRA+R/LjAmlkWcEPNvL0jbgxVz1vv8py2ETTbTfsWVMiMRdvVM9+oM2o8aVUoNaCdgAzWln3B AQOJO10UAoltURYKdL0XAjG1 ) ; keytag 35346 vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20260301161136 20260222151136 6025 vip.icann.org. gaWo0zuln8UVUjW8k9ZVOyS6s9gaSMjFNuMiHsAsaLyGWj3Ivi6mJnEdyX4wM8rGjUtcwnN93bdy SkbiSmzQLfJRR38NCg5ouueqECXUMABRmCJsQEeNy2cbq9yiXtWuS8086/Vm9CNGBJV9nOherRr+ wayNHKtjw3LTYF+1L25w0xo4Yr+A+rmr5DCPpL7+VEwFxywwJGAYsUlZiu/2F9cuTAu9ikzxHVTR jMnfGM6Bl3xTQtRPf0iupJitbsUmKKy2GxCBjUCkd8uP2sT3nI7BUS9tmso69rZuTJb3QksuCmC+ q1dLeQhO+Ohc1+VCgYztXH/UrQDBQKjUKnjIZQ== ) vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20260301161136 20260222151136 35346 vip.icann.org. X0KNH1IvwDA6D850w5vBpGu4waD4tfTyTlbqU+yeDovC01KvZLKH2qhcNSlLr14kyCnSGZq/ckP8 j5O6el60Ifp1e9OZ/dRRolFCQV6XuCNXdTNg+Y4RbpsYQef2I8lhxzOPgRPC9ej0WW32MWDVcfD+ 8UFipcXLJVinFkAAh1k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for vip.icann.org
	`vip.icann.org. 3600 IN DNSKEY ( 257 3 8 AwEAAa8hgHkq4/7LtCF+DQ71ZrBhMV1TLpMf8qV3uPkkBig73b5z88C+HovqSm300B0RLKVy8/Jy 5qjXh7GMTjkGyspIRbmUPVXwXxjuWlLWbeGXE7OzgT87mxXvRyWYdpclWp50eVvwkLXu5h8dKQU6 IKxKfBXiqcK4cVCZIDtMCx3wqERKCs83q5y0t0fVdl5ZH8yR4TEFgA0L4SROHbUO+je6XUgBUskO w2eTS1ukpeU6owa8zr+fpN0lpZahzjmZ9NpPda8Btn0HVhbghdU5Ykrt1v3IPn98v/MMtSXD2Bei JjWrsQPVS3CJ9WfD81j/bAYf1D5crMcuenrFcGBfgPk= ) ; keytag 6025`
	`vip.icann.org. 3600 IN DNSKEY ( 256 3 8 AwEAAaacq8t+MwiciIK9TF0i0oUSvJ8OkXYEE7kLdcf+ez2+G4D2PvJIieQVEqL12OUlLm/Uea9+ zO2vRA+R/LjAmlkWcEPNvL0jbgxVz1vv8py2ETTbTfsWVMiMRdvVM9+oM2o8aVUoNaCdgAzWln3B AQOJO10UAoltURYKdL0XAjG1 ) ; keytag 35346`
	DNSKEY=6025/SEP is now in the chain-of-trust
	DS=6025/SHA-256 verifies DNSKEY=6025/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20260301161136 20260222151136 6025 vip.icann.org. gaWo0zuln8UVUjW8k9ZVOyS6s9gaSMjFNuMiHsAsaLyGWj3Ivi6mJnEdyX4wM8rGjUtcwnN93bdy SkbiSmzQLfJRR38NCg5ouueqECXUMABRmCJsQEeNy2cbq9yiXtWuS8086/Vm9CNGBJV9nOherRr+ wayNHKtjw3LTYF+1L25w0xo4Yr+A+rmr5DCPpL7+VEwFxywwJGAYsUlZiu/2F9cuTAu9ikzxHVTR jMnfGM6Bl3xTQtRPf0iupJitbsUmKKy2GxCBjUCkd8uP2sT3nI7BUS9tmso69rZuTJb3QksuCmC+ q1dLeQhO+Ohc1+VCgYztXH/UrQDBQKjUKnjIZQ== )`
	`vip.icann.org. 3600 IN RRSIG ( DNSKEY 8 3 3600 20260301161136 20260222151136 35346 vip.icann.org. X0KNH1IvwDA6D850w5vBpGu4waD4tfTyTlbqU+yeDovC01KvZLKH2qhcNSlLr14kyCnSGZq/ckP8 j5O6el60Ifp1e9OZ/dRRolFCQV6XuCNXdTNg+Y4RbpsYQef2I8lhxzOPgRPC9ej0WW32MWDVcfD+ 8UFipcXLJVinFkAAh1k= )`
	RRSIG=6025 and DNSKEY=6025/SEP verifies the DNSKEY RRset
	RRSIG=35346 and DNSKEY=35346 verifies the DNSKEY RRset
	DNSKEY=35346 is now in the chain-of-trust
	Query to gtm1.mdr.icann.org for ianawww.vip.icann.org/A
	Received 239 bytes from 192.0.36.252
	;; Response received from [192.0.36.252] 239 octets ;; HEADER SECTION ;; id = 10724 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (2 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20260227161142 20260220151142 35346 vip.icann.org. QBakGUpyUZWkOHOz9ZpU+/H8Ac29q+HrkjmGey58qN11LWwpUL7Xx2gk7riopiiPHBt9rmtPhrqX ZWvi+51IT4WTIVzHUS+NrZsSszNYnNQOVfdaR3cJkDU/ykCLLDxmLcxDSikgnPXqw6Hmtmpvx2Ol Xxtz6wJc0ymFjPSJ3LE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	gtm1.mdr.icann.org is authoritative for ianawww.vip.icann.org
	Query to gtm1.mdr.icann.org for ianawww.vip.icann.org/DNSKEY
	Received 539 bytes from 192.0.36.252
	;; Response received from [192.0.36.252] 539 octets ;; HEADER SECTION ;; id = 61555 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) vip.icann.org. 60 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2026012001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20260301111302 20260222101302 35346 vip.icann.org. UBkZjNcbPBvt0Q1pBn4Fsn88gbVKlHOV3DbsG17akk52+K4YLQifKsGeF/nXKgAEuE7lsMJ5qpeK eWevcFHVSuOqs41GaveXg89rcFRamKaz/xvbOeFc0wyMtoJePcGUaMfGW7XxMMB3u4A80V0f/P1p ViO8hhiq8loqLEINHPI= ) d506kjdns408f0i98kq79h3h8pumvvok.vip.icann.org. 60 IN NSEC3 ( 1 0 1 5d1389f4eb2a2bc4 d506kjdns408f0i98kq79h3h8pumvvol A MX TXT AAAA RRSIG ) d506kjdns408f0i98kq79h3h8pumvvok.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20260304030722 20260225020722 35346 vip.icann.org. dBF/9p//xuvt7XM73YFOy0NkbUjgfiy5bj9F3A7CNyAZ+PiCchN29nH7lKJtnRnyI2BzdOxYBX/n khzrdgsvmQW4WABYLE/STATZ9vreTtCeYVEy/aYzRbSQmM3JPVR446bpGYdFo89/7tzCuqavrlub uqwyJ4E6udIQfBjQQdw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by vip.icann.org zone
	Query to gtm1.dc.icann.org for vip.icann.org/SOA
	Received 503 bytes from 192.0.47.252
	;; Response received from [192.0.47.252] 503 octets ;; HEADER SECTION ;; id = 13564 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN SOA ;; ANSWER SECTION (2 records) vip.icann.org. 600 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2026012001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 600 IN RRSIG ( SOA 8 3 600 20260301142238 20260222132238 35346 vip.icann.org. Htl4gOunyAg5jh86FAOz7L0HceqQ1wlsktXjEXQp7iwl9fVNqq/LmSUcnFXIyubIKj3+IlvmdPSY eGjpPg6jIqDC5Eq+fOOu6SjAH4hWfQR2wMrbw5oqUgN1DYrgY84yzB3mfOmFClSdW+rzCdZiVw38 lKeZxkgemS+Qok+ORAk= ) ;; AUTHORITY SECTION (4 records) vip.icann.org. 600 IN NS gtm1.mdr.icann.org. vip.icann.org. 600 IN NS gtm1.lax.icann.org. vip.icann.org. 600 IN NS gtm1.dc.icann.org. vip.icann.org. 600 IN RRSIG ( NS 8 3 600 20260302110500 20260223100500 35346 vip.icann.org. OnKCpxUeDa0oOrQghAFD1k6V8a1GBw5jLjSNI5LZ2woYaF5W1ofyhJrcQUkPx1G0pS12PbOCna/c mHMS+x0dg+JJ/ck15APIZjgfMzRIaUdj6u24JIV7QNFuLAVnXF4IphXdtlgcDoDAQ2AABu7RwHDV vbUpw3CVXxocmDLmlxU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to gtm1.lax.icann.org for vip.icann.org/SOA
	Received 503 bytes from 192.0.32.252
	;; Response received from [192.0.32.252] 503 octets ;; HEADER SECTION ;; id = 22585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; vip.icann.org. IN SOA ;; ANSWER SECTION (2 records) vip.icann.org. 600 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2026012001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 600 IN RRSIG ( SOA 8 3 600 20260301203402 20260222193402 35346 vip.icann.org. mscQDbIobc4VEd3h7b2P7E8uAgne8Ap+IFmD5s7lTDXijC8K/lStFojmtEfwaig2/pkhZwhhZMvU QfemyTkP556pnXLLSE6I8esqCLzoLQbUUYODblTb4VN9NhJHRBurHDLWTnOTeNgA9zBBovg4XvA4 3s9H7LzUa/iPLIs00F4= ) ;; AUTHORITY SECTION (4 records) vip.icann.org. 600 IN NS gtm1.lax.icann.org. vip.icann.org. 600 IN NS gtm1.dc.icann.org. vip.icann.org. 600 IN NS gtm1.mdr.icann.org. vip.icann.org. 600 IN RRSIG ( NS 8 3 600 20260227161142 20260220151142 35346 vip.icann.org. VLE8/pTTb/3XOj50Mc0lq0iOkHlc5CvLkmz+utX549L9oLzylOTer405gkIRsCAMkh3oEYRUo2F5 cQXYJoVVTMG2Va1SHTsBxavZe+/FBR75LPRJkvY54RqGD5tqP4rAm/bPFkqBcDJIKKYgVfEpCbJ2 UFEbWILm7RcIU+KA/8M= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to gtm1.mdr.icann.org for ianawww.vip.icann.org/A
	Received 239 bytes from 192.0.36.252
	;; Response received from [192.0.36.252] 239 octets ;; HEADER SECTION ;; id = 29992 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (2 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20260227161142 20260220151142 35346 vip.icann.org. QBakGUpyUZWkOHOz9ZpU+/H8Ac29q+HrkjmGey58qN11LWwpUL7Xx2gk7riopiiPHBt9rmtPhrqX ZWvi+51IT4WTIVzHUS+NrZsSszNYnNQOVfdaR3cJkDU/ykCLLDxmLcxDSikgnPXqw6Hmtmpvx2Ol Xxtz6wJc0ymFjPSJ3LE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ianawww.vip.icann.org A RR has value 192.0.46.8
	Found 1 RRSIGs over A RRset
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20260227161142 20260220151142 35346 vip.icann.org. QBakGUpyUZWkOHOz9ZpU+/H8Ac29q+HrkjmGey58qN11LWwpUL7Xx2gk7riopiiPHBt9rmtPhrqX ZWvi+51IT4WTIVzHUS+NrZsSszNYnNQOVfdaR3cJkDU/ykCLLDxmLcxDSikgnPXqw6Hmtmpvx2Ol Xxtz6wJc0ymFjPSJ3LE= )`
	RRSIG=35346 and DNSKEY=35346 verifies the A RRset

vip.icann.org

	Query to gtm1.dc.icann.org for ianawww.vip.icann.org/A
	Received 239 bytes from 192.0.47.252
	;; Response received from [192.0.47.252] 239 octets ;; HEADER SECTION ;; id = 12432 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (2 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20260302110500 20260223100500 35346 vip.icann.org. fv/Slnug5AoZ2YCsHe9VVl0GZUH9Y5/ngWgx/kz7ADze5n+S9lGWYR8QbZbK4Y7YR0mWJwngXpsE l0Dn7f/BwjhLgXIBSqe0wMSyK8ARnkox4ipGHUAHLoHW5raiOUJCzAF+ePXp5eCg4SfLZy1cOLx3 VXl3p1ro9tEDS8fXI6g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	gtm1.dc.icann.org is authoritative for ianawww.vip.icann.org
	Query to gtm1.lax.icann.org for ianawww.vip.icann.org/DNSKEY
	Received 539 bytes from 192.0.32.252
	;; Response received from [192.0.32.252] 539 octets ;; HEADER SECTION ;; id = 60814 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) vip.icann.org. 60 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2026012001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20260301111300 20260222101300 35346 vip.icann.org. ekE5MPLAIszJ9rv934SvQgPEMELJsbImnGD2+HkWX58RlMz8o0b09ehkWZB0DKemiN9dClhck3MH +IAu+XIC3J2RrM7SHJiLrg4405aMVHjMHgf+oefcpyNTzaUvquoMiEbnT7shVPS6gFYTiW5B0axZ QxmllvCRWgkVmaiX+kE= ) je4csa5p44pb6isauecqldd2tqn14a4a.vip.icann.org. 60 IN NSEC3 ( 1 0 1 d18892e4ac45ea02 je4csa5p44pb6isauecqldd2tqn14a4b A MX TXT AAAA RRSIG ) je4csa5p44pb6isauecqldd2tqn14a4a.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20260304044343 20260225034343 35346 vip.icann.org. aiZRvUyy6/J3m7kUbRZzH9Lklysh3dUkjY9HCtam1lYVcRo05xaIcyU9dXayRD19kRPjgAM+/+O0 z87j7Kjnn6BHXpIfbgXoMJ36Z+dEgm3w2o0iNt26Y6REK4Yw9PAAzwljBw+XX37rOYb6BvBK9ZZr hQvaEa80v8/bi6y8Z8I= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by vip.icann.org zone
	Query to gtm1.dc.icann.org for ianawww.vip.icann.org/A
	Received 239 bytes from 192.0.47.252
	;; Response received from [192.0.47.252] 239 octets ;; HEADER SECTION ;; id = 53528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (2 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20260302110500 20260223100500 35346 vip.icann.org. fv/Slnug5AoZ2YCsHe9VVl0GZUH9Y5/ngWgx/kz7ADze5n+S9lGWYR8QbZbK4Y7YR0mWJwngXpsE l0Dn7f/BwjhLgXIBSqe0wMSyK8ARnkox4ipGHUAHLoHW5raiOUJCzAF+ePXp5eCg4SfLZy1cOLx3 VXl3p1ro9tEDS8fXI6g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ianawww.vip.icann.org A RR has value 192.0.46.8
	Found 1 RRSIGs over A RRset
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20260302110500 20260223100500 35346 vip.icann.org. fv/Slnug5AoZ2YCsHe9VVl0GZUH9Y5/ngWgx/kz7ADze5n+S9lGWYR8QbZbK4Y7YR0mWJwngXpsE l0Dn7f/BwjhLgXIBSqe0wMSyK8ARnkox4ipGHUAHLoHW5raiOUJCzAF+ePXp5eCg4SfLZy1cOLx3 VXl3p1ro9tEDS8fXI6g= )`
	RRSIG=35346 and DNSKEY=35346 verifies the A RRset

vip.icann.org

	Query to gtm1.lax.icann.org for ianawww.vip.icann.org/A
	Received 239 bytes from 192.0.32.252
	;; Response received from [192.0.32.252] 239 octets ;; HEADER SECTION ;; id = 25459 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (2 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20260227161142 20260220151142 35346 vip.icann.org. QBakGUpyUZWkOHOz9ZpU+/H8Ac29q+HrkjmGey58qN11LWwpUL7Xx2gk7riopiiPHBt9rmtPhrqX ZWvi+51IT4WTIVzHUS+NrZsSszNYnNQOVfdaR3cJkDU/ykCLLDxmLcxDSikgnPXqw6Hmtmpvx2Ol Xxtz6wJc0ymFjPSJ3LE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	gtm1.lax.icann.org is authoritative for ianawww.vip.icann.org
	Query to gtm1.lax.icann.org for ianawww.vip.icann.org/DNSKEY
	Received 539 bytes from 192.0.32.252
	;; Response received from [192.0.32.252] 539 octets ;; HEADER SECTION ;; id = 22214 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) vip.icann.org. 60 IN SOA ( gtm1.lax.icann.org. hostmaster.gtm1.lax.icann.org. 2026012001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) vip.icann.org. 60 IN RRSIG ( SOA 8 3 60 20260301111300 20260222101300 35346 vip.icann.org. ekE5MPLAIszJ9rv934SvQgPEMELJsbImnGD2+HkWX58RlMz8o0b09ehkWZB0DKemiN9dClhck3MH +IAu+XIC3J2RrM7SHJiLrg4405aMVHjMHgf+oefcpyNTzaUvquoMiEbnT7shVPS6gFYTiW5B0axZ QxmllvCRWgkVmaiX+kE= ) je4csa5p44pb6isauecqldd2tqn14a4a.vip.icann.org. 60 IN NSEC3 ( 1 0 1 d18892e4ac45ea02 je4csa5p44pb6isauecqldd2tqn14a4b A MX TXT AAAA RRSIG ) je4csa5p44pb6isauecqldd2tqn14a4a.vip.icann.org. 60 IN RRSIG ( NSEC3 8 4 60 20260304044343 20260225034343 35346 vip.icann.org. aiZRvUyy6/J3m7kUbRZzH9Lklysh3dUkjY9HCtam1lYVcRo05xaIcyU9dXayRD19kRPjgAM+/+O0 z87j7Kjnn6BHXpIfbgXoMJ36Z+dEgm3w2o0iNt26Y6REK4Yw9PAAzwljBw+XX37rOYb6BvBK9ZZr hQvaEa80v8/bi6y8Z8I= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by vip.icann.org zone
	Query to gtm1.lax.icann.org for ianawww.vip.icann.org/A
	Received 239 bytes from 192.0.32.252
	;; Response received from [192.0.32.252] 239 octets ;; HEADER SECTION ;; id = 62976 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ianawww.vip.icann.org. IN A ;; ANSWER SECTION (2 records) ianawww.vip.icann.org. 30 IN A 192.0.46.8 ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20260227161142 20260220151142 35346 vip.icann.org. QBakGUpyUZWkOHOz9ZpU+/H8Ac29q+HrkjmGey58qN11LWwpUL7Xx2gk7riopiiPHBt9rmtPhrqX ZWvi+51IT4WTIVzHUS+NrZsSszNYnNQOVfdaR3cJkDU/ykCLLDxmLcxDSikgnPXqw6Hmtmpvx2Ol Xxtz6wJc0ymFjPSJ3LE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ianawww.vip.icann.org A RR has value 192.0.46.8
	Found 1 RRSIGs over A RRset
	`ianawww.vip.icann.org. 30 IN RRSIG ( A 8 4 30 20260227161142 20260220151142 35346 vip.icann.org. QBakGUpyUZWkOHOz9ZpU+/H8Ac29q+HrkjmGey58qN11LWwpUL7Xx2gk7riopiiPHBt9rmtPhrqX ZWvi+51IT4WTIVzHUS+NrZsSszNYnNQOVfdaR3cJkDU/ykCLLDxmLcxDSikgnPXqw6Hmtmpvx2Ol Xxtz6wJc0ymFjPSJ3LE= )`
	RRSIG=35346 and DNSKEY=35346 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.iana.org at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: