DNSSEC Analyzer - yandex.ru

Domain Name:

Time: 2022-01-28 19:41:15 UTC, NTP stratum 16

Analyzing DNSSEC problems for yandex.ru

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (865 octets) ;; HEADER SECTION ;; id = 42211 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=9799 is now in the chain-of-trust
	Query to h.root-servers.net for yandex.ru/A
	Received 685 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (685 octets) ;; HEADER SECTION ;; id = 22450 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; yandex.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 7729 8 2 c035871113bb7c70c1fbfc1c9bfdfa9781733348d54f7ef9a4ad021aa00336f3 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . AIfeUCdJENV9WWpYz7Vp3rJZ5bjaxgBHKI+tUxqzwLv3+X9R/EB9AVTKhEGoHW7CXvR6qnSyOFYc 3JDfP/S3HX4GtHi+jIkxzV0OQMKU/Whg9ay7qOmAxLO2cR396S/ZtsMhLbnMAww0e1tI8ZCJ0c+N on17M5Dd2QuZZKE99AYAlyscFnQq5AjeqrJaOVGfE2p5RnQO78LLgda6L/VfBD23fMfcvkpJsAfB 8ZNdNvMpm6PPJtiWUN5+cnHHCmvt8EKiabCsKB1LY0saUr/pZHYSpe5eaYHLHlljn2Xdn7d5hufx BySP7Q+zp3sKpq2LzpSH3QN2rlWnCJIApuxQGA== ) ;; ADDITIONAL SECTION (11 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 b.dns.ripn.net. 172800 IN A 194.85.252.62 d.dns.ripn.net. 172800 IN A 194.190.124.17 e.dns.ripn.net. 172800 IN A 193.232.142.17 f.dns.ripn.net. 172800 IN A 193.232.156.17 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to f.root-servers.net for ru/DNSKEY
	Received 678 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (678 octets) ;; HEADER SECTION ;; id = 25918 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 7729 8 2 c035871113bb7c70c1fbfc1c9bfdfa9781733348d54f7ef9a4ad021aa00336f3 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . AIfeUCdJENV9WWpYz7Vp3rJZ5bjaxgBHKI+tUxqzwLv3+X9R/EB9AVTKhEGoHW7CXvR6qnSyOFYc 3JDfP/S3HX4GtHi+jIkxzV0OQMKU/Whg9ay7qOmAxLO2cR396S/ZtsMhLbnMAww0e1tI8ZCJ0c+N on17M5Dd2QuZZKE99AYAlyscFnQq5AjeqrJaOVGfE2p5RnQO78LLgda6L/VfBD23fMfcvkpJsAfB 8ZNdNvMpm6PPJtiWUN5+cnHHCmvt8EKiabCsKB1LY0saUr/pZHYSpe5eaYHLHlljn2Xdn7d5hufx BySP7Q+zp3sKpq2LzpSH3QN2rlWnCJIApuxQGA== ) ;; ADDITIONAL SECTION (11 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN A 194.85.252.62 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 d.dns.ripn.net. 172800 IN A 194.190.124.17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN A 193.232.142.17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN A 193.232.156.17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone ru

	Checking DS between . and ru
	Query to g.root-servers.net for ru/DS
	Received 366 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (366 octets) ;; HEADER SECTION ;; id = 26381 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ru. IN DS ;; ANSWER SECTION (2 records) ru. 86400 IN DS ( 7729 8 2 c035871113bb7c70c1fbfc1c9bfdfa9781733348d54f7ef9a4ad021aa00336f3 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . AIfeUCdJENV9WWpYz7Vp3rJZ5bjaxgBHKI+tUxqzwLv3+X9R/EB9AVTKhEGoHW7CXvR6qnSyOFYc 3JDfP/S3HX4GtHi+jIkxzV0OQMKU/Whg9ay7qOmAxLO2cR396S/ZtsMhLbnMAww0e1tI8ZCJ0c+N on17M5Dd2QuZZKE99AYAlyscFnQq5AjeqrJaOVGfE2p5RnQO78LLgda6L/VfBD23fMfcvkpJsAfB 8ZNdNvMpm6PPJtiWUN5+cnHHCmvt8EKiabCsKB1LY0saUr/pZHYSpe5eaYHLHlljn2Xdn7d5hufx BySP7Q+zp3sKpq2LzpSH3QN2rlWnCJIApuxQGA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for ru in the . zone
	DS=7729/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ru. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . AIfeUCdJENV9WWpYz7Vp3rJZ5bjaxgBHKI+tUxqzwLv3+X9R/EB9AVTKhEGoHW7CXvR6qnSyOFYc 3JDfP/S3HX4GtHi+jIkxzV0OQMKU/Whg9ay7qOmAxLO2cR396S/ZtsMhLbnMAww0e1tI8ZCJ0c+N on17M5Dd2QuZZKE99AYAlyscFnQq5AjeqrJaOVGfE2p5RnQO78LLgda6L/VfBD23fMfcvkpJsAfB 8ZNdNvMpm6PPJtiWUN5+cnHHCmvt8EKiabCsKB1LY0saUr/pZHYSpe5eaYHLHlljn2Xdn7d5hufx BySP7Q+zp3sKpq2LzpSH3QN2rlWnCJIApuxQGA== )`
	RRSIG=9799 and DNSKEY=9799 verifies the DS RRset
	DS=7729/SHA-256 is now in the chain-of-trust
	`ru. 86400 IN DS ( 7729 8 2 c035871113bb7c70c1fbfc1c9bfdfa9781733348d54f7ef9a4ad021aa00336f3 )`
	Query to a.dns.ripn.net for ru/DNSKEY
	Received 745 bytes from 193.232.128.6
	;; Response received from 193.232.128.6 (745 octets) ;; HEADER SECTION ;; id = 42061 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (3 records) ru. 345600 IN DNSKEY ( 256 3 8 AwEAAacTV2aHjtEUFXrvMvMkX/Ecj0+45+xybwuTuuV00/vv+ZnrB1+bwv25huQf6VKfk/p4SiS6 wr8OVv3EhqbF5EqPUyJQAJ+hLz1pVlQ0mOQ4h/KvSdMZ+DN6R2JxPNA8weTUjtICbhfgFAe7awL4 MkGxK/USWVJA7yH3ejVw/03l ) ; Key ID = 52638 ru. 345600 IN DNSKEY ( 257 3 8 AwEAAbWa34eVeT+94nyvL/yYKqj6cgAL3mRDqTS/7K9tO1yXNeci5e/s6oJTCGlU7NRKtEgsd71f tNWWZ100XPenyajRJHBkcMneBQbQxKa0lsXzwmlIcYexH2SLgwTpaP59jrKgo8PQfbUGJyC9S1KK 1VA0P67bLlWpY65MamrkkFLG7qstGwWcZenG79jngnMUh51QeKoqIaNJMsZMrbiIHG8XzDU9+G33 fqPJl34iA0ITOeqEIca/QaxjZ/5lQNYOFScUOBE46wnDOUiKXikIme/HOcw9IIIT6/UBxXuSn4TO DPAzlvUVLULzSSSJJZoId6lxbd6jMlkbN/hUzPbSNKk= ) ; Key ID = 7729 ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20220217000000 20220128000000 7729 ru. ejLvNUQY3XdarNfydPn/2Hsq1VKGX7eWNFRzOqZK5+xjwKu+BlLysZo4OtvtXUloVdBniAjbqAL3 /1zHqSY4c7gJ4865mSNxfOfRjLPCEueBovi5y4cHCyMJiLGjDnQ4npO11Jvtvb6KiYmdsKTlqG+D 3OE/QEOdY9akFOmZ9fdQzwqq6ZGNkX0f8TH468njh+0C8dfOhYKDl0s9ofh9APr1jaO0v2yOj+y0 YywWkEsMnuHio2+iSvQS6ByuWyEp025xsKnQdcZ9PjMrwqmupAkPH+NCELL0/uvbWg3DTtik5o+L cyHJhDBFZF7W6drM7ghBULD8cZOm3o5moQp7Og== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for ru
	`ru. 345600 IN DNSKEY ( 256 3 8 AwEAAacTV2aHjtEUFXrvMvMkX/Ecj0+45+xybwuTuuV00/vv+ZnrB1+bwv25huQf6VKfk/p4SiS6 wr8OVv3EhqbF5EqPUyJQAJ+hLz1pVlQ0mOQ4h/KvSdMZ+DN6R2JxPNA8weTUjtICbhfgFAe7awL4 MkGxK/USWVJA7yH3ejVw/03l ) ; Key ID = 52638`
	`ru. 345600 IN DNSKEY ( 257 3 8 AwEAAbWa34eVeT+94nyvL/yYKqj6cgAL3mRDqTS/7K9tO1yXNeci5e/s6oJTCGlU7NRKtEgsd71f tNWWZ100XPenyajRJHBkcMneBQbQxKa0lsXzwmlIcYexH2SLgwTpaP59jrKgo8PQfbUGJyC9S1KK 1VA0P67bLlWpY65MamrkkFLG7qstGwWcZenG79jngnMUh51QeKoqIaNJMsZMrbiIHG8XzDU9+G33 fqPJl34iA0ITOeqEIca/QaxjZ/5lQNYOFScUOBE46wnDOUiKXikIme/HOcw9IIIT6/UBxXuSn4TO DPAzlvUVLULzSSSJJZoId6lxbd6jMlkbN/hUzPbSNKk= ) ; Key ID = 7729`
	DNSKEY=7729/SEP is now in the chain-of-trust
	DS=7729/SHA-256 verifies DNSKEY=7729/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20220217000000 20220128000000 7729 ru. ejLvNUQY3XdarNfydPn/2Hsq1VKGX7eWNFRzOqZK5+xjwKu+BlLysZo4OtvtXUloVdBniAjbqAL3 /1zHqSY4c7gJ4865mSNxfOfRjLPCEueBovi5y4cHCyMJiLGjDnQ4npO11Jvtvb6KiYmdsKTlqG+D 3OE/QEOdY9akFOmZ9fdQzwqq6ZGNkX0f8TH468njh+0C8dfOhYKDl0s9ofh9APr1jaO0v2yOj+y0 YywWkEsMnuHio2+iSvQS6ByuWyEp025xsKnQdcZ9PjMrwqmupAkPH+NCELL0/uvbWg3DTtik5o+L cyHJhDBFZF7W6drM7ghBULD8cZOm3o5moQp7Og== )`
	RRSIG=7729 and DNSKEY=7729/SEP verifies the DNSKEY RRset
	DNSKEY=52638 is now in the chain-of-trust
	Query to b.dns.ripn.net for yandex.ru/A
	Received 697 bytes from 194.85.252.62
	;; Response received from 194.85.252.62 (697 octets) ;; HEADER SECTION ;; id = 18441 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; yandex.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) YANDEX.RU. 345600 IN NS ns9.z5h64q92x9.net. YANDEX.RU. 345600 IN NS ns2.yandex.RU. YANDEX.RU. 345600 IN NS ns1.yandex.RU. TDUI9D4JKUDS8B9T86GJ39PGFLCNLGM5.ru. 3600 IN NSEC3 ( 1 1 3 00ff te33kgtaqu9m5crq3ibsilqu11gfgttt NS SOA RRSIG DNSKEY NSEC3PARAM ) TDUI9D4JKUDS8B9T86GJ39PGFLCNLGM5.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20220222095308 20220112161852 52638 ru. VUaFOknJbxhgwCbHrS0/0XrrYcnh6NUs3tUpRnaCVUObbcAG0bkagG/AW0WKc+/9Ya/U5Rl7WRoB VzVNnqLiHAVaUsgioft+0leT4V+lEIZY6/6ZZ+3KB1dkBsUnAwlPHzznEN2vsl4izD2mSE6RimEx hnwuA87xmqySi+3eRg8= ) QB1554GDSJ49V8QICUISNR7GFTJC5VCA.ru. 3600 IN NSEC3 ( 1 1 3 00ff qbgac635cjf8gc7mbo6llo752ai67eiq NS DS RRSIG ) QB1554GDSJ49V8QICUISNR7GFTJC5VCA.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20220220062452 20220117041854 52638 ru. XEWkyfdaIhhp3f/WAAkIDEpWxSz016shBNOqprNdyX1Xk65gWuw33/ExW7ysXjdRIkC+3EsYYqyI yYtrHODBITwB8fqJNblRXg1yBf5d7/AFdOYemspprWmNpUFv8IrYyydPuDCZ+WZeYpOfVB4LUsoX A+G1U9ee5LpduqFLuB4= ) ;; ADDITIONAL SECTION (5 records) ns1.yandex.RU. 345600 IN A 213.180.193.1 ns2.yandex.RU. 345600 IN A 93.158.134.1 ns1.yandex.RU. 345600 IN AAAA 2a02:6b8::1 ns2.yandex.RU. 345600 IN AAAA 2a02:6b8:0:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.dns.ripn.net for yandex.ru/DNSKEY
	Received 681 bytes from 194.85.252.62
	;; Response received from 194.85.252.62 (681 octets) ;; HEADER SECTION ;; id = 63961 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; yandex.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) yandex.ru. 345600 IN NS ns1.yandex.ru. yandex.ru. 345600 IN NS ns2.yandex.ru. yandex.ru. 345600 IN NS ns9.z5h64q92x9.net. tdui9d4jkuds8b9t86gj39pgflcnlgm5.ru. 3600 IN NSEC3 ( 1 1 3 00ff te33kgtaqu9m5crq3ibsilqu11gfgttt NS SOA RRSIG DNSKEY NSEC3PARAM ) tdui9d4jkuds8b9t86gj39pgflcnlgm5.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20220222095308 20220112161852 52638 ru. VUaFOknJbxhgwCbHrS0/0XrrYcnh6NUs3tUpRnaCVUObbcAG0bkagG/AW0WKc+/9Ya/U5Rl7WRoB VzVNnqLiHAVaUsgioft+0leT4V+lEIZY6/6ZZ+3KB1dkBsUnAwlPHzznEN2vsl4izD2mSE6RimEx hnwuA87xmqySi+3eRg8= ) qb1554gdsj49v8qicuisnr7gftjc5vca.ru. 3600 IN NSEC3 ( 1 1 3 00ff qbgac635cjf8gc7mbo6llo752ai67eiq NS DS RRSIG ) qb1554gdsj49v8qicuisnr7gftjc5vca.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20220220062452 20220117041854 52638 ru. XEWkyfdaIhhp3f/WAAkIDEpWxSz016shBNOqprNdyX1Xk65gWuw33/ExW7ysXjdRIkC+3EsYYqyI yYtrHODBITwB8fqJNblRXg1yBf5d7/AFdOYemspprWmNpUFv8IrYyydPuDCZ+WZeYpOfVB4LUsoX A+G1U9ee5LpduqFLuB4= ) ;; ADDITIONAL SECTION (5 records) ns1.yandex.ru. 345600 IN A 213.180.193.1 ns2.yandex.ru. 345600 IN A 93.158.134.1 ns1.yandex.ru. 345600 IN AAAA 2a02:6b8::1 ns2.yandex.ru. 345600 IN AAAA 2a02:6b8:0:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone yandex.ru

yandex.ru

	Checking DS between ru and yandex.ru
	Query to f.dns.ripn.net for yandex.ru/DS
	Received 748 bytes from 193.232.156.17
	;; Response received from 193.232.156.17 (748 octets) ;; HEADER SECTION ;; id = 61241 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; yandex.ru. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) TDUI9D4JKUDS8B9T86GJ39PGFLCNLGM5.ru. 3600 IN NSEC3 ( 1 1 3 00ff te33kgtaqu9m5crq3ibsilqu11gfgttt NS SOA RRSIG DNSKEY NSEC3PARAM ) TDUI9D4JKUDS8B9T86GJ39PGFLCNLGM5.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20220222095308 20220112161852 52638 ru. VUaFOknJbxhgwCbHrS0/0XrrYcnh6NUs3tUpRnaCVUObbcAG0bkagG/AW0WKc+/9Ya/U5Rl7WRoB VzVNnqLiHAVaUsgioft+0leT4V+lEIZY6/6ZZ+3KB1dkBsUnAwlPHzznEN2vsl4izD2mSE6RimEx hnwuA87xmqySi+3eRg8= ) ru. 3600 IN SOA ( a.dns.ripn.net. hostmaster.ripn.net. 4050075 ;serial 86400 ;refresh 14400 ;retry 2592000 ;expire 3600 ;minimum ) ru. 3600 IN RRSIG ( SOA 8 1 345600 20220301004711 20220128181925 52638 ru. WoU+CUz3l0B7I0yB8Ephwfd9AnyK5QRWEkeY8533aTFntpztu0MJPPXMBDf8Lqhb5IvSTmQvNV+A B/blPehLplKm3mz73iqMH2BQATlJoWwwT3VEoUhFpzmtRJa01JReL7bWWPtbJexOxA6fylkgYAyM 50Yk6FyISX1eRY5ZPLY= ) QB1554GDSJ49V8QICUISNR7GFTJC5VCA.ru. 3600 IN NSEC3 ( 1 1 3 00ff qbgac635cjf8gc7mbo6llo752ai67eiq NS DS RRSIG ) QB1554GDSJ49V8QICUISNR7GFTJC5VCA.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20220220062452 20220117041854 52638 ru. XEWkyfdaIhhp3f/WAAkIDEpWxSz016shBNOqprNdyX1Xk65gWuw33/ExW7ysXjdRIkC+3EsYYqyI yYtrHODBITwB8fqJNblRXg1yBf5d7/AFdOYemspprWmNpUFv8IrYyydPuDCZ+WZeYpOfVB4LUsoX A+G1U9ee5LpduqFLuB4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for yandex.ru in the ru zone
	Query to ns1.yandex.ru for yandex.ru/DNSKEY
	Received 101 bytes from 213.180.193.1
	;; Response received from 213.180.193.1 (101 octets) ;; HEADER SECTION ;; id = 22189 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; yandex.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) yandex.ru. 900 IN SOA ( ns1.yandex.ru. sysadmin.yandex-team.ru. 2022012849 ;serial 600 ;refresh 300 ;retry 2592000 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns1.yandex.ru for yandex.ru/A
	Received 258 bytes from 213.180.193.1
	;; Response received from 213.180.193.1 (258 octets) ;; HEADER SECTION ;; id = 25070 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 3 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; yandex.ru. IN A ;; ANSWER SECTION (4 records) yandex.ru. 300 IN A 5.255.255.80 yandex.ru. 300 IN A 77.88.55.50 yandex.ru. 300 IN A 5.255.255.88 yandex.ru. 300 IN A 77.88.55.55 ;; AUTHORITY SECTION (3 records) yandex.ru. 345600 IN NS ns1.yandex.ru. yandex.ru. 345600 IN NS ns2.yandex.ru. yandex.ru. 345600 IN NS ns9.z5h64q92x9.net. ;; ADDITIONAL SECTION (5 records) ns1.yandex.ru. 345600 IN A 213.180.193.1 ns2.yandex.ru. 345600 IN A 93.158.134.1 ns1.yandex.ru. 3600 IN AAAA 2a02:6b8::1 ns2.yandex.ru. 3600 IN AAAA 2a02:6b8:0:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.yandex.ru is authoritative for yandex.ru
	Query to ns2.yandex.ru for yandex.ru/SOA
	Received 253 bytes from 93.158.134.1
	;; Response received from 93.158.134.1 (253 octets) ;; HEADER SECTION ;; id = 60572 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; yandex.ru. IN SOA ;; ANSWER SECTION (1 record) yandex.ru. 3600 IN SOA ( ns1.yandex.ru. sysadmin.yandex-team.ru. 2022012849 ;serial 600 ;refresh 300 ;retry 2592000 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (3 records) yandex.ru. 345600 IN NS ns1.yandex.ru. yandex.ru. 345600 IN NS ns2.yandex.ru. yandex.ru. 345600 IN NS ns9.z5h64q92x9.net. ;; ADDITIONAL SECTION (5 records) ns1.yandex.ru. 345600 IN A 213.180.193.1 ns2.yandex.ru. 345600 IN A 93.158.134.1 ns1.yandex.ru. 3600 IN AAAA 2a02:6b8::1 ns2.yandex.ru. 3600 IN AAAA 2a02:6b8:0:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns9.z5h64q92x9.net for yandex.ru/SOA
	Received 253 bytes from 80.239.201.9
	;; Response received from 80.239.201.9 (253 octets) ;; HEADER SECTION ;; id = 56283 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; yandex.ru. IN SOA ;; ANSWER SECTION (1 record) yandex.ru. 3600 IN SOA ( ns1.yandex.ru. sysadmin.yandex-team.ru. 2022012849 ;serial 600 ;refresh 300 ;retry 2592000 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (3 records) yandex.ru. 345600 IN NS ns9.z5h64q92x9.net. yandex.ru. 345600 IN NS ns2.yandex.ru. yandex.ru. 345600 IN NS ns1.yandex.ru. ;; ADDITIONAL SECTION (5 records) ns1.yandex.ru. 345600 IN A 213.180.193.1 ns2.yandex.ru. 345600 IN A 93.158.134.1 ns1.yandex.ru. 3600 IN AAAA 2a02:6b8::1 ns2.yandex.ru. 3600 IN AAAA 2a02:6b8:0:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.yandex.ru for yandex.ru/A
	Received 258 bytes from 213.180.193.1
	;; Response received from 213.180.193.1 (258 octets) ;; HEADER SECTION ;; id = 19973 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 3 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; yandex.ru. IN A ;; ANSWER SECTION (4 records) yandex.ru. 300 IN A 77.88.55.55 yandex.ru. 300 IN A 77.88.55.50 yandex.ru. 300 IN A 5.255.255.80 yandex.ru. 300 IN A 5.255.255.88 ;; AUTHORITY SECTION (3 records) yandex.ru. 345600 IN NS ns2.yandex.ru. yandex.ru. 345600 IN NS ns1.yandex.ru. yandex.ru. 345600 IN NS ns9.z5h64q92x9.net. ;; ADDITIONAL SECTION (5 records) ns1.yandex.ru. 345600 IN A 213.180.193.1 ns2.yandex.ru. 345600 IN A 93.158.134.1 ns1.yandex.ru. 3600 IN AAAA 2a02:6b8::1 ns2.yandex.ru. 3600 IN AAAA 2a02:6b8:0:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	yandex.ru A RR has value 77.88.55.55
	yandex.ru A RR has value 77.88.55.50
	yandex.ru A RR has value 5.255.255.80
	yandex.ru A RR has value 5.255.255.88
	No RRSIGs found

yandex.ru

	Query to ns2.yandex.ru for yandex.ru/A
	Received 258 bytes from 93.158.134.1
	;; Response received from 93.158.134.1 (258 octets) ;; HEADER SECTION ;; id = 63586 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 3 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; yandex.ru. IN A ;; ANSWER SECTION (4 records) yandex.ru. 300 IN A 77.88.55.50 yandex.ru. 300 IN A 5.255.255.80 yandex.ru. 300 IN A 5.255.255.88 yandex.ru. 300 IN A 77.88.55.55 ;; AUTHORITY SECTION (3 records) yandex.ru. 345600 IN NS ns9.z5h64q92x9.net. yandex.ru. 345600 IN NS ns2.yandex.ru. yandex.ru. 345600 IN NS ns1.yandex.ru. ;; ADDITIONAL SECTION (5 records) ns1.yandex.ru. 345600 IN A 213.180.193.1 ns2.yandex.ru. 345600 IN A 93.158.134.1 ns1.yandex.ru. 3600 IN AAAA 2a02:6b8::1 ns2.yandex.ru. 3600 IN AAAA 2a02:6b8:0:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns2.yandex.ru is authoritative for yandex.ru
	Query to ns2.yandex.ru for yandex.ru/A
	Received 258 bytes from 93.158.134.1
	;; Response received from 93.158.134.1 (258 octets) ;; HEADER SECTION ;; id = 1599 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 3 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; yandex.ru. IN A ;; ANSWER SECTION (4 records) yandex.ru. 300 IN A 5.255.255.88 yandex.ru. 300 IN A 77.88.55.55 yandex.ru. 300 IN A 5.255.255.80 yandex.ru. 300 IN A 77.88.55.50 ;; AUTHORITY SECTION (3 records) yandex.ru. 345600 IN NS ns1.yandex.ru. yandex.ru. 345600 IN NS ns2.yandex.ru. yandex.ru. 345600 IN NS ns9.z5h64q92x9.net. ;; ADDITIONAL SECTION (5 records) ns1.yandex.ru. 345600 IN A 213.180.193.1 ns2.yandex.ru. 345600 IN A 93.158.134.1 ns1.yandex.ru. 3600 IN AAAA 2a02:6b8::1 ns2.yandex.ru. 3600 IN AAAA 2a02:6b8:0:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	yandex.ru A RR has value 5.255.255.88
	yandex.ru A RR has value 77.88.55.55
	yandex.ru A RR has value 5.255.255.80
	yandex.ru A RR has value 77.88.55.50
	No RRSIGs found

yandex.ru

	Query to ns9.z5h64q92x9.net for yandex.ru/A
	Received 258 bytes from 154.47.36.189
	;; Response received from 154.47.36.189 (258 octets) ;; HEADER SECTION ;; id = 29434 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 3 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; yandex.ru. IN A ;; ANSWER SECTION (4 records) yandex.ru. 300 IN A 5.255.255.88 yandex.ru. 300 IN A 5.255.255.80 yandex.ru. 300 IN A 77.88.55.55 yandex.ru. 300 IN A 77.88.55.50 ;; AUTHORITY SECTION (3 records) yandex.ru. 345600 IN NS ns2.yandex.ru. yandex.ru. 345600 IN NS ns1.yandex.ru. yandex.ru. 345600 IN NS ns9.z5h64q92x9.net. ;; ADDITIONAL SECTION (5 records) ns1.yandex.ru. 345600 IN A 213.180.193.1 ns2.yandex.ru. 345600 IN A 93.158.134.1 ns1.yandex.ru. 3600 IN AAAA 2a02:6b8::1 ns2.yandex.ru. 3600 IN AAAA 2a02:6b8:0:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns9.z5h64q92x9.net is authoritative for yandex.ru
	Query to ns9.z5h64q92x9.net for yandex.ru/A
	Received 258 bytes from 154.47.36.189
	;; Response received from 154.47.36.189 (258 octets) ;; HEADER SECTION ;; id = 57911 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 3 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; yandex.ru. IN A ;; ANSWER SECTION (4 records) yandex.ru. 300 IN A 5.255.255.80 yandex.ru. 300 IN A 77.88.55.55 yandex.ru. 300 IN A 77.88.55.50 yandex.ru. 300 IN A 5.255.255.88 ;; AUTHORITY SECTION (3 records) yandex.ru. 345600 IN NS ns1.yandex.ru. yandex.ru. 345600 IN NS ns2.yandex.ru. yandex.ru. 345600 IN NS ns9.z5h64q92x9.net. ;; ADDITIONAL SECTION (5 records) ns1.yandex.ru. 345600 IN A 213.180.193.1 ns2.yandex.ru. 345600 IN A 93.158.134.1 ns1.yandex.ru. 3600 IN AAAA 2a02:6b8::1 ns2.yandex.ru. 3600 IN AAAA 2a02:6b8:0:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	yandex.ru A RR has value 5.255.255.80
	yandex.ru A RR has value 77.88.55.55
	yandex.ru A RR has value 77.88.55.50
	yandex.ru A RR has value 5.255.255.88
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test yandex.ru at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: