DNSSEC Debugger - zen.yandex.ru

Domain Name:

Time: 2024-05-18 22:18:31 UTC

Analyzing DNSSEC problems for zen.yandex.ru

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 865 octets ;; HEADER SECTION ;; id = 36247 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to g.root-servers.net for zen.yandex.ru/A
	Received 691 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 691 octets ;; HEADER SECTION ;; id = 40735 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; zen.yandex.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 43786 8 2 3c59747544090bc74419d5f69e32d8c9b18ea48cbdaa33c09435619120ced431 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . FSlXx9yieuBVtX+moy4hQwLMdLsmUbEsxG5PwxgJiJW4/ZAb2IS6B+J+S3RPiP4G9fvc/wGh2lFi UkQU57TrMKQU8BrN01yifteus1VGu7qR8nxxKq3RARnbg3Sem2KMeRuwPmZRXqkXxz3VL3wuaMNp fjOCtBknzsE2sIIk9cR3fQxV5aClWxVqyOVrnEdxmqPYsuzXlw5eTkpAHVIFwM+UVo0eTSxDncix d9fMFLp64wkUTjyl0HKWs4/m0GudCSJSjGyOtyVAyW6ciX3RQj6ZZ8azrcV6oBP3aKe5l/v8Iw/q RaWQvZYMKzn5OkaDLj9DyseET1MLjgfvUC5EJw== ) ;; ADDITIONAL SECTION (11 records) f.dns.ripn.net. 172800 IN A 193.232.156.17 e.dns.ripn.net. 172800 IN A 193.232.142.17 d.dns.ripn.net. 172800 IN A 194.190.124.17 b.dns.ripn.net. 172800 IN A 194.85.252.62 a.dns.ripn.net. 172800 IN A 193.232.128.6 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for ru/DNSKEY
	Received 678 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 678 octets ;; HEADER SECTION ;; id = 45936 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 43786 8 2 3c59747544090bc74419d5f69e32d8c9b18ea48cbdaa33c09435619120ced431 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . FSlXx9yieuBVtX+moy4hQwLMdLsmUbEsxG5PwxgJiJW4/ZAb2IS6B+J+S3RPiP4G9fvc/wGh2lFi UkQU57TrMKQU8BrN01yifteus1VGu7qR8nxxKq3RARnbg3Sem2KMeRuwPmZRXqkXxz3VL3wuaMNp fjOCtBknzsE2sIIk9cR3fQxV5aClWxVqyOVrnEdxmqPYsuzXlw5eTkpAHVIFwM+UVo0eTSxDncix d9fMFLp64wkUTjyl0HKWs4/m0GudCSJSjGyOtyVAyW6ciX3RQj6ZZ8azrcV6oBP3aKe5l/v8Iw/q RaWQvZYMKzn5OkaDLj9DyseET1MLjgfvUC5EJw== ) ;; ADDITIONAL SECTION (11 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN A 194.85.252.62 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 d.dns.ripn.net. 172800 IN A 194.190.124.17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN A 193.232.142.17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN A 193.232.156.17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; { "EDNS-VERSION": 0 }
	Found child zone ru

	Checking DS between . and ru
	Query to j.root-servers.net for ru/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 366 octets ;; HEADER SECTION ;; id = 56639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DS ;; ANSWER SECTION (2 records) ru. 86400 IN DS ( 43786 8 2 3c59747544090bc74419d5f69e32d8c9b18ea48cbdaa33c09435619120ced431 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . FSlXx9yieuBVtX+moy4hQwLMdLsmUbEsxG5PwxgJiJW4/ZAb2IS6B+J+S3RPiP4G9fvc/wGh2lFi UkQU57TrMKQU8BrN01yifteus1VGu7qR8nxxKq3RARnbg3Sem2KMeRuwPmZRXqkXxz3VL3wuaMNp fjOCtBknzsE2sIIk9cR3fQxV5aClWxVqyOVrnEdxmqPYsuzXlw5eTkpAHVIFwM+UVo0eTSxDncix d9fMFLp64wkUTjyl0HKWs4/m0GudCSJSjGyOtyVAyW6ciX3RQj6ZZ8azrcV6oBP3aKe5l/v8Iw/q RaWQvZYMKzn5OkaDLj9DyseET1MLjgfvUC5EJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ru in the . zone
	DS=43786/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ru. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . FSlXx9yieuBVtX+moy4hQwLMdLsmUbEsxG5PwxgJiJW4/ZAb2IS6B+J+S3RPiP4G9fvc/wGh2lFi UkQU57TrMKQU8BrN01yifteus1VGu7qR8nxxKq3RARnbg3Sem2KMeRuwPmZRXqkXxz3VL3wuaMNp fjOCtBknzsE2sIIk9cR3fQxV5aClWxVqyOVrnEdxmqPYsuzXlw5eTkpAHVIFwM+UVo0eTSxDncix d9fMFLp64wkUTjyl0HKWs4/m0GudCSJSjGyOtyVAyW6ciX3RQj6ZZ8azrcV6oBP3aKe5l/v8Iw/q RaWQvZYMKzn5OkaDLj9DyseET1MLjgfvUC5EJw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=43786/SHA-256 is now in the chain-of-trust
	`ru. 86400 IN DS ( 43786 8 2 3c59747544090bc74419d5f69e32d8c9b18ea48cbdaa33c09435619120ced431 )`
	Query to d.dns.ripn.net for ru/DNSKEY
	Received 745 bytes from 194.190.124.17
	;; Response received from [194.190.124.17] 745 octets ;; HEADER SECTION ;; id = 27294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (3 records) ru. 345600 IN DNSKEY ( 257 3 8 AwEAAfcMZekGvFYkmt18Q8KIS+XX/7UBbpmIJ4hK3FNzErkJmiNPxq+sbM00NYJwY725QxoDwHPe K0JIybKW6s+U2+I7aBGJus/bvDklw0CMTDsG7HoJG+4sjq/jRPUQNwkOA/cNoiYjroqw7/GnB8DE AGE03gyxdZcxxU3BJKPZfds8DJYPBaDUO35g9I6+dLPXxHK6LFUFprkBtpqj13tJ/ptLyMSaivvi 3xrvJMqu/FWN6piMzu7uYmrSdv6s01y+0x6229sZ7ufSQ6E66gdTmXebDx8S8q70B4BmMZosrsHl f3uXVMMY72LnrQzbere2ecd95q+1VDMDXcXB/pT1/C0= ) ; Key ID = 43786 ru. 345600 IN DNSKEY ( 256 3 8 AwEAAbeVTo9Uiz/qUecTEKKWn7Nvt9gLx1NdGLNye9BvjmAqOXwK+2rWKj2Mz/M6VSRha3T3ZDZF GOkrzDvghe7VtzOClugZ/UkPr4AWYPYBHPPsjUlFkrg6G2D1adoCyXG5+xWD4WDfmd6NwkWNzp1O SUwhgyKBZhbAZBvQCdtr43bT ) ; Key ID = 50208 ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20240530000000 20240510000000 43786 ru. djUKlV9AkPOCyWXTsHmeHJnzDN6QGRvqG6qwxOhHN37U7TdFAzL2k85EYPCIdgsiky5k3R4VRkoY 2QKQa2f6HLjjqYAv3FRvynZY9AzHf9O6LRKy2zo+F2eR5E+Joypt2aNR0n8wlMHOzkVMXyrgLp41 RR1/ALm/hYVbfy3/PLMTMCjBIXBKL8LSpCmuM/OlCReIHmyvulW17kSGaz5QVHh3JQAXWA8VE5+k OHajwSNTKu/7FlAWRRQ7u3sRhajNveVkQeVYu9rAneYKBzOB7MX1QV8b/JxMjOaNixj+SDsBQ8nI +Laz5qpQ4e0KwI8+/JSNMFKpMSqW60zTANML1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ru
	`ru. 345600 IN DNSKEY ( 257 3 8 AwEAAfcMZekGvFYkmt18Q8KIS+XX/7UBbpmIJ4hK3FNzErkJmiNPxq+sbM00NYJwY725QxoDwHPe K0JIybKW6s+U2+I7aBGJus/bvDklw0CMTDsG7HoJG+4sjq/jRPUQNwkOA/cNoiYjroqw7/GnB8DE AGE03gyxdZcxxU3BJKPZfds8DJYPBaDUO35g9I6+dLPXxHK6LFUFprkBtpqj13tJ/ptLyMSaivvi 3xrvJMqu/FWN6piMzu7uYmrSdv6s01y+0x6229sZ7ufSQ6E66gdTmXebDx8S8q70B4BmMZosrsHl f3uXVMMY72LnrQzbere2ecd95q+1VDMDXcXB/pT1/C0= ) ; Key ID = 43786`
	`ru. 345600 IN DNSKEY ( 256 3 8 AwEAAbeVTo9Uiz/qUecTEKKWn7Nvt9gLx1NdGLNye9BvjmAqOXwK+2rWKj2Mz/M6VSRha3T3ZDZF GOkrzDvghe7VtzOClugZ/UkPr4AWYPYBHPPsjUlFkrg6G2D1adoCyXG5+xWD4WDfmd6NwkWNzp1O SUwhgyKBZhbAZBvQCdtr43bT ) ; Key ID = 50208`
	DNSKEY=43786/SEP is now in the chain-of-trust
	DS=43786/SHA-256 verifies DNSKEY=43786/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20240530000000 20240510000000 43786 ru. djUKlV9AkPOCyWXTsHmeHJnzDN6QGRvqG6qwxOhHN37U7TdFAzL2k85EYPCIdgsiky5k3R4VRkoY 2QKQa2f6HLjjqYAv3FRvynZY9AzHf9O6LRKy2zo+F2eR5E+Joypt2aNR0n8wlMHOzkVMXyrgLp41 RR1/ALm/hYVbfy3/PLMTMCjBIXBKL8LSpCmuM/OlCReIHmyvulW17kSGaz5QVHh3JQAXWA8VE5+k OHajwSNTKu/7FlAWRRQ7u3sRhajNveVkQeVYu9rAneYKBzOB7MX1QV8b/JxMjOaNixj+SDsBQ8nI +Laz5qpQ4e0KwI8+/JSNMFKpMSqW60zTANML1Q== )`
	RRSIG=43786 and DNSKEY=43786/SEP verifies the DNSKEY RRset
	DNSKEY=50208 is now in the chain-of-trust
	Query to b.dns.ripn.net for zen.yandex.ru/A
	Received 649 bytes from 194.85.252.62
	;; Response received from [194.85.252.62] 649 octets ;; HEADER SECTION ;; id = 52449 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; zen.yandex.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) yandex.ru. 345600 IN NS ns1.yandex.ru. yandex.ru. 345600 IN NS ns2.yandex.ru. j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN NSEC3 ( 1 1 0 - j21lulr2unpa28sere28ovnjnj67qp7v NS SOA RRSIG DNSKEY NSEC3PARAM ) j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20240622121321 20240516082009 50208 ru. ddSnMhB913RMi/sFgxhh2vvODx+QFRK+JFGbjyA4GnTwR6THBEo7MYPFhhnspjH7WSgrtJ3sHtaH u+2ouVKQOTtNDQlH+W/XlaewT71W3eRaR2H97ETOTYg24Yw9Mw3MkscQB7Z77rlU1AGzhZWciItk 8TFF0Bq34hoVAORwt3w= ) vjh3pplst1u7rjrum4a0th2p9e83m9p8.ru. 3600 IN NSEC3 ( 1 1 0 - vk39243ep2qksm771uic0pc4pdq983kl NS DS RRSIG ) vjh3pplst1u7rjrum4a0th2p9e83m9p8.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20240527073340 20240417081859 50208 ru. pDGS0RUgTCIHfJvyGOxIyjgXwTBAiv7U+/M3tep/U7AWCMHmZ70Ep4r8EnRuxnsGUOUl3jOBxNG9 ohEkOY0H9zIlbcS+kC76YzAI+1xXhOzgN8WkoinR21bY8wueWA1ruhjOJfYdtLjU8qB+Z4jstawF GArN7bMdocpO5lVa82c= ) ;; ADDITIONAL SECTION (5 records) ns1.yandex.ru. 345600 IN A 213.180.193.1 ns2.yandex.ru. 345600 IN A 93.158.134.1 ns1.yandex.ru. 345600 IN AAAA 2a02:6b8::1 ns2.yandex.ru. 345600 IN AAAA 2a02:6b8:0:1::1 ;; { "EDNS-VERSION": 0 }
	Query to e.dns.ripn.net for yandex.ru/DNSKEY
	Received 671 bytes from 193.232.142.17
	;; Response received from [193.232.142.17] 671 octets ;; HEADER SECTION ;; id = 55137 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; yandex.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) YANDEX.RU. 345600 IN NS ns1.yandex.RU. YANDEX.RU. 345600 IN NS ns2.yandex.RU. J20C0QKDHUA3CUMNKST289FF06U2SQ91.ru. 3600 IN NSEC3 ( 1 1 0 - j21lulr2unpa28sere28ovnjnj67qp7v NS SOA RRSIG DNSKEY NSEC3PARAM ) J20C0QKDHUA3CUMNKST289FF06U2SQ91.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20240622121321 20240516082009 50208 ru. ddSnMhB913RMi/sFgxhh2vvODx+QFRK+JFGbjyA4GnTwR6THBEo7MYPFhhnspjH7WSgrtJ3sHtaH u+2ouVKQOTtNDQlH+W/XlaewT71W3eRaR2H97ETOTYg24Yw9Mw3MkscQB7Z77rlU1AGzhZWciItk 8TFF0Bq34hoVAORwt3w= ) VJH3PPLST1U7RJRUM4A0TH2P9E83M9P8.ru. 3600 IN NSEC3 ( 1 1 0 - vk39243ep2qksm771uic0pc4pdq983kl NS DS RRSIG ) VJH3PPLST1U7RJRUM4A0TH2P9E83M9P8.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20240527073340 20240417081859 50208 ru. pDGS0RUgTCIHfJvyGOxIyjgXwTBAiv7U+/M3tep/U7AWCMHmZ70Ep4r8EnRuxnsGUOUl3jOBxNG9 ohEkOY0H9zIlbcS+kC76YzAI+1xXhOzgN8WkoinR21bY8wueWA1ruhjOJfYdtLjU8qB+Z4jstawF GArN7bMdocpO5lVa82c= ) ;; ADDITIONAL SECTION (5 records) ns2.YANDEX.RU. 345600 IN A 93.158.134.1 ns1.YANDEX.RU. 345600 IN A 213.180.193.1 ns2.YANDEX.RU. 345600 IN AAAA 2a02:6b8:0:1::1 ns1.YANDEX.RU. 345600 IN AAAA 2a02:6b8::1 ;; { "EDNS-VERSION": 0 }
	Found child zone yandex.ru

yandex.ru

	Checking DS between ru and yandex.ru
	Query to a.dns.ripn.net for yandex.ru/DS
	Received 752 bytes from 193.232.128.6
	;; Response received from [193.232.128.6] 752 octets ;; HEADER SECTION ;; id = 50437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; yandex.ru. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) J20C0QKDHUA3CUMNKST289FF06U2SQ91.ru. 3600 IN NSEC3 ( 1 1 0 - j21lulr2unpa28sere28ovnjnj67qp7v NS SOA RRSIG DNSKEY NSEC3PARAM ) J20C0QKDHUA3CUMNKST289FF06U2SQ91.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20240622121321 20240516082009 50208 ru. ddSnMhB913RMi/sFgxhh2vvODx+QFRK+JFGbjyA4GnTwR6THBEo7MYPFhhnspjH7WSgrtJ3sHtaH u+2ouVKQOTtNDQlH+W/XlaewT71W3eRaR2H97ETOTYg24Yw9Mw3MkscQB7Z77rlU1AGzhZWciItk 8TFF0Bq34hoVAORwt3w= ) ru. 3600 IN SOA ( a.dns.ripn.net. hostmaster.ripn.net. 4060161 ;serial 86400 ;refresh 14400 ;retry 2592000 ;expire 3600 ;minimum ) ru. 3600 IN RRSIG ( SOA 8 1 345600 20240627171528 20240518204510 50208 ru. nBUrmiP+GOBj4/R1ERM0gkkoxiRalTEvCKn7q0Kn8j3I2sIB3PWy4aB196i+k6tUk1BZcJSy/k+P vV41OpRfxTmSn+sUGho3luRiT1o7BJ/Ceaxh9ystg8O5NpXgLV5eeI9vlNpkqAX9tHpSNujOcHh1 Vqc25/kzxdNIQh3RHLo= ) VJH3PPLST1U7RJRUM4A0TH2P9E83M9P8.ru. 3600 IN NSEC3 ( 1 1 0 - vk39243ep2qksm771uic0pc4pdq983kl NS DS RRSIG ) VJH3PPLST1U7RJRUM4A0TH2P9E83M9P8.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20240527073340 20240417081859 50208 ru. pDGS0RUgTCIHfJvyGOxIyjgXwTBAiv7U+/M3tep/U7AWCMHmZ70Ep4r8EnRuxnsGUOUl3jOBxNG9 ohEkOY0H9zIlbcS+kC76YzAI+1xXhOzgN8WkoinR21bY8wueWA1ruhjOJfYdtLjU8qB+Z4jstawF GArN7bMdocpO5lVa82c= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for yandex.ru in the ru zone
	Query to ns1.yandex.RU for yandex.ru/DNSKEY
	Received 101 bytes from 213.180.193.1
	;; Response received from [213.180.193.1] 101 octets ;; HEADER SECTION ;; id = 7295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; yandex.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) yandex.ru. 900 IN SOA ( ns1.yandex.ru. sysadmin.yandex-team.ru. 2023033273 ;serial 600 ;refresh 300 ;retry 2592000 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns2.yandex.RU for zen.yandex.ru/A
	Received 78 bytes from 93.158.134.1
	;; Response received from [93.158.134.1] 78 octets ;; HEADER SECTION ;; id = 4544 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; zen.yandex.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (2 records) zen.yandex.ru. 3600 IN NS ns3.yandex.ru. zen.yandex.ru. 3600 IN NS ns4.yandex.ru. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.yandex.RU for zen.yandex.ru/DNSKEY
	Received 78 bytes from 213.180.193.1
	;; Response received from [213.180.193.1] 78 octets ;; HEADER SECTION ;; id = 26811 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; zen.yandex.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (2 records) zen.yandex.ru. 3600 IN NS ns3.yandex.ru. zen.yandex.ru. 3600 IN NS ns4.yandex.ru. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone zen.yandex.ru

zen.yandex.ru

	Checking DS between yandex.ru and zen.yandex.ru
	Query to ns1.yandex.RU for zen.yandex.ru/DS
	Received 105 bytes from 213.180.193.1
	;; Response received from [213.180.193.1] 105 octets ;; HEADER SECTION ;; id = 49427 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; zen.yandex.ru. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) yandex.ru. 900 IN SOA ( ns1.yandex.ru. sysadmin.yandex-team.ru. 2023033273 ;serial 600 ;refresh 300 ;retry 2592000 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for zen.yandex.ru in the yandex.ru zone
	Query to ns3.yandex.ru for zen.yandex.ru/DNSKEY
	Received 91 bytes from 87.250.250.1
	;; Response received from [87.250.250.1] 91 octets ;; HEADER SECTION ;; id = 58536 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; zen.yandex.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) zen.yandex.ru. 300 IN SOA ( ns3.yandex.ru. sysadmin.yandex.ru. 1716070713 ;serial 900 ;refresh 600 ;retry 3600000 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns3.yandex.ru for zen.yandex.ru/A
	Received 58 bytes from 87.250.250.1
	;; Response received from [87.250.250.1] 58 octets ;; HEADER SECTION ;; id = 16951 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; zen.yandex.ru. IN A ;; ANSWER SECTION (1 record) zen.yandex.ru. 600 IN A 87.250.254.116 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.yandex.ru is authoritative for zen.yandex.ru
	Query to ns4.yandex.ru for zen.yandex.ru/SOA
	Received 91 bytes from 77.88.21.1
	;; Response received from [77.88.21.1] 91 octets ;; HEADER SECTION ;; id = 44868 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; zen.yandex.ru. IN SOA ;; ANSWER SECTION (1 record) zen.yandex.ru. 600 IN SOA ( ns3.yandex.ru. sysadmin.yandex.ru. 1716070713 ;serial 900 ;refresh 600 ;retry 3600000 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.yandex.ru for zen.yandex.ru/A
	Received 58 bytes from 87.250.250.1
	;; Response received from [87.250.250.1] 58 octets ;; HEADER SECTION ;; id = 64174 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; zen.yandex.ru. IN A ;; ANSWER SECTION (1 record) zen.yandex.ru. 600 IN A 87.250.254.116 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	zen.yandex.ru A RR has value 87.250.254.116
	No RRSIGs found

zen.yandex.ru

	Query to ns4.yandex.ru for zen.yandex.ru/A
	Received 58 bytes from 77.88.21.1
	;; Response received from [77.88.21.1] 58 octets ;; HEADER SECTION ;; id = 40129 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; zen.yandex.ru. IN A ;; ANSWER SECTION (1 record) zen.yandex.ru. 600 IN A 87.250.254.116 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.yandex.ru is authoritative for zen.yandex.ru
	Query to ns4.yandex.ru for zen.yandex.ru/A
	Received 58 bytes from 77.88.21.1
	;; Response received from [77.88.21.1] 58 octets ;; HEADER SECTION ;; id = 7233 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; zen.yandex.ru. IN A ;; ANSWER SECTION (1 record) zen.yandex.ru. 600 IN A 87.250.254.116 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	zen.yandex.ru A RR has value 87.250.254.116
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test zen.yandex.ru at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: