DNSSEC Analyzer

Domain Name:

Time: 2022-06-26 08:59:12 UTC, NTP stratum 16

Analyzing DNSSEC problems for nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (1139 octets) ;; HEADER SECTION ;; id = 45990 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220711000000 20220620000000 20326 . CpFdBbv0lZXwIPLDhPn959HSJfQ4vp8r97A/rN0SPFlS4fQigB3EDXz0oeg2ENRPMn6HmrZpp0vB KMKfCXf3oC/4tioT7m18+xA05quW5+h/vJaOA0Iw7zOhTpQr1hTVaUwj/d0NV9JaCqZabjtj7ClN E/+aOBaCdVSXpy3re0WUk7FianexlLd5pL09RHGlH5eRyp8hAt5HqwrUvONfm7zgkhtO8RPtJSjN R5ZB9HDrcjDHiYzkbuw300LTphtzryG/XKwnQqv6E0iL+M6d4g7h9IQWpmM1lyjVM2sgZYGDPnBb N9kgNUCiF6HUHV12LmAJteZAQI65qARGFwADYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220711000000 20220620000000 20326 . CpFdBbv0lZXwIPLDhPn959HSJfQ4vp8r97A/rN0SPFlS4fQigB3EDXz0oeg2ENRPMn6HmrZpp0vB KMKfCXf3oC/4tioT7m18+xA05quW5+h/vJaOA0Iw7zOhTpQr1hTVaUwj/d0NV9JaCqZabjtj7ClN E/+aOBaCdVSXpy3re0WUk7FianexlLd5pL09RHGlH5eRyp8hAt5HqwrUvONfm7zgkhtO8RPtJSjN R5ZB9HDrcjDHiYzkbuw300LTphtzryG/XKwnQqv6E0iL+M6d4g7h9IQWpmM1lyjVM2sgZYGDPnBb N9kgNUCiF6HUHV12LmAJteZAQI65qARGFwADYg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	DNSKEY=47671 is now in the chain-of-trust
	Query to e.root-servers.net for nl/A
	Received 618 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (618 octets) ;; HEADER SECTION ;; id = 56123 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20220709050000 20220626040000 47671 . ZZv3LCFkZ4NSbSTI4bSh6eWt8pYvt8U/hNeXu+atQZKdm6s8MIkVxqMc0UNg04Ea9HcwwoaUk24w 74DkDqKZXngIzl9t9Ex4V6HLTQvo/nI/vjQlt8Izql45qXJV4La72Yeh3qV/+jbzBpJWwE2mEpO3 xCXQTt4excnvbQXSf2hVZkkBEoZk021sw1wVkHMiwe/FJHCy+STTUQ+7yLbhfydGG/AyRGumXOGk eyo7lq3Lq++D57wqFrC2nUeQnMMM6oxwU+3RZoiF40v4HLgDYI/jiVSMy50b8531P0AO8QHNVoQZ /HWjiTJl6Z1RwGMNCJFMW9x9TzB4EENkSv4Naw== ) ;; ADDITIONAL SECTION (9 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.root-servers.net for nl/DNSKEY
	Received 618 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (618 octets) ;; HEADER SECTION ;; id = 30265 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20220709050000 20220626040000 47671 . ZZv3LCFkZ4NSbSTI4bSh6eWt8pYvt8U/hNeXu+atQZKdm6s8MIkVxqMc0UNg04Ea9HcwwoaUk24w 74DkDqKZXngIzl9t9Ex4V6HLTQvo/nI/vjQlt8Izql45qXJV4La72Yeh3qV/+jbzBpJWwE2mEpO3 xCXQTt4excnvbQXSf2hVZkkBEoZk021sw1wVkHMiwe/FJHCy+STTUQ+7yLbhfydGG/AyRGumXOGk eyo7lq3Lq++D57wqFrC2nUeQnMMM6oxwU+3RZoiF40v4HLgDYI/jiVSMy50b8531P0AO8QHNVoQZ /HWjiTJl6Z1RwGMNCJFMW9x9TzB4EENkSv4Naw== ) ;; ADDITIONAL SECTION (9 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to j.root-servers.net for nl/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (366 octets) ;; HEADER SECTION ;; id = 47403 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20220709050000 20220626040000 47671 . ZZv3LCFkZ4NSbSTI4bSh6eWt8pYvt8U/hNeXu+atQZKdm6s8MIkVxqMc0UNg04Ea9HcwwoaUk24w 74DkDqKZXngIzl9t9Ex4V6HLTQvo/nI/vjQlt8Izql45qXJV4La72Yeh3qV/+jbzBpJWwE2mEpO3 xCXQTt4excnvbQXSf2hVZkkBEoZk021sw1wVkHMiwe/FJHCy+STTUQ+7yLbhfydGG/AyRGumXOGk eyo7lq3Lq++D57wqFrC2nUeQnMMM6oxwU+3RZoiF40v4HLgDYI/jiVSMy50b8531P0AO8QHNVoQZ /HWjiTJl6Z1RwGMNCJFMW9x9TzB4EENkSv4Naw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for nl in the . zone
	DS=34112/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20220709050000 20220626040000 47671 . ZZv3LCFkZ4NSbSTI4bSh6eWt8pYvt8U/hNeXu+atQZKdm6s8MIkVxqMc0UNg04Ea9HcwwoaUk24w 74DkDqKZXngIzl9t9Ex4V6HLTQvo/nI/vjQlt8Izql45qXJV4La72Yeh3qV/+jbzBpJWwE2mEpO3 xCXQTt4excnvbQXSf2hVZkkBEoZk021sw1wVkHMiwe/FJHCy+STTUQ+7yLbhfydGG/AyRGumXOGk eyo7lq3Lq++D57wqFrC2nUeQnMMM6oxwU+3RZoiF40v4HLgDYI/jiVSMy50b8531P0AO8QHNVoQZ /HWjiTJl6Z1RwGMNCJFMW9x9TzB4EENkSv4Naw== )`
	RRSIG=47671 and DNSKEY=47671 verifies the DS RRset
	DS=34112/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 )`
	Query to ns4.dns.nl for nl/DNSKEY
	Received 745 bytes from 185.159.199.200
	;; Response received from 185.159.199.200 (745 octets) ;; HEADER SECTION ;; id = 38857 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbVRL6Pj4lz4xhTBugdRk+uDDS+C7cuBohzSCwrOtFxVs5UYHKdteItn8zl+c8X9UmYDnBJU mffZHkMZDtMoUAe9t2WVVknFxKCQhpyBuVk/FGOUyUjPefawaKdT4+Hsk/lbfOq9b2pYms4T4s5P X9n2oiuJ+SyCzST3s8a4ZOVN ) ; Key ID = 53551 nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112 nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220706124138 20220622200734 34112 nl. PPEIElLXXWyHEkQ9IdhBQCcaAwl6J0vLS2qSvbV/sZFZ3LtI1Y8QwW6tiW+psCpCviYr1NZemeaq /fZudfI6wyudofDJNurvoUBfTKqL4KOQ1vxy1EI55363Iiv9FGAQieZ0DSRRyGJHFYefzSBOM1FJ 3Skajv+D1rTbS+tfY5eLvpXnCBXJ+CWGTKAtvTxzuSR1GvTYaeVa3N//CJD7bJG3OO+XH+p9GpHj a85znpc+fAoD73X/6ZuHthzk6nZpTi1XGCdNmyLN/rkXZFbznNcr9nq3ixsnP6z6qIwXfUVYyk8J 2nucGURlOe4KBorEkgiUgBGtQ7HgYgtLm2iWNQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbVRL6Pj4lz4xhTBugdRk+uDDS+C7cuBohzSCwrOtFxVs5UYHKdteItn8zl+c8X9UmYDnBJU mffZHkMZDtMoUAe9t2WVVknFxKCQhpyBuVk/FGOUyUjPefawaKdT4+Hsk/lbfOq9b2pYms4T4s5P X9n2oiuJ+SyCzST3s8a4ZOVN ) ; Key ID = 53551`
	`nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112`
	DNSKEY=34112/SEP is now in the chain-of-trust
	DS=34112/SHA-256 verifies DNSKEY=34112/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220706124138 20220622200734 34112 nl. PPEIElLXXWyHEkQ9IdhBQCcaAwl6J0vLS2qSvbV/sZFZ3LtI1Y8QwW6tiW+psCpCviYr1NZemeaq /fZudfI6wyudofDJNurvoUBfTKqL4KOQ1vxy1EI55363Iiv9FGAQieZ0DSRRyGJHFYefzSBOM1FJ 3Skajv+D1rTbS+tfY5eLvpXnCBXJ+CWGTKAtvTxzuSR1GvTYaeVa3N//CJD7bJG3OO+XH+p9GpHj a85znpc+fAoD73X/6ZuHthzk6nZpTi1XGCdNmyLN/rkXZFbznNcr9nq3ixsnP6z6qIwXfUVYyk8J 2nucGURlOe4KBorEkgiUgBGtQ7HgYgtLm2iWNQ== )`
	RRSIG=34112 and DNSKEY=34112/SEP verifies the DNSKEY RRset
	DNSKEY=53551 is now in the chain-of-trust
	Query to ns2.dns.nl for nl/A
	Received 518 bytes from 194.146.106.42
	;; Response received from 194.146.106.42 (518 octets) ;; HEADER SECTION ;; id = 19795 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nl. 600 IN SOA ( ns1.dns.nl. hostmaster.domain-registry.nl. 2022062617 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 600 ;minimum ) nl. 600 IN RRSIG ( SOA 8 1 3600 20220710135907 20220626063800 53551 nl. m816zN0fkPt9lWNLXHI/sgMPfvPsz7n6YgrFRCS1KNs4XPmp3MRokcoumPMdyy2wgp/buHkjGS8B FVWhBCvwoygavbNsa/zuDqUWIK33yTsJIuI/+USNx/LXVP/77cq1QvMHbTeFqC+ONpTN0F/bnR3r tXYkl1Jq1r4Tb1WhaaQ= ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN NSEC3 ( 1 1 5 12e16b4ea289c4aa l253n1qjter9i13g1j23co0jmrf5m67n NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN RRSIG ( NSEC3 8 2 600 20220706222322 20220623073734 53551 nl. FGL4QHQLvxXBj5I5O+zxKqJmyBGw4qxry26jcPwUUjORi4JnPGSDzbWpFehTn0XQSBsvjEGZvJVn wxmw2bVUMW1rYm69yvBj3ntOR+9K5S5yBk9WYtecEiDnRaRGnLINvaUj8gw3l9j6pa/APrdPAzYT wJVLokNbNMDm4o8yIFQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.dns.nl is authoritative for nl
	Found RRSIG signed by nl zone
	Query to ns3.dns.nl for nl/SOA
	Received 264 bytes from 194.0.25.24
	;; Response received from 194.0.25.24 (264 octets) ;; HEADER SECTION ;; id = 51565 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN SOA ;; ANSWER SECTION (2 records) nl. 3600 IN SOA ( ns1.dns.nl. hostmaster.domain-registry.nl. 2022062617 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 600 ;minimum ) nl. 3600 IN RRSIG ( SOA 8 1 3600 20220710135907 20220626063800 53551 nl. m816zN0fkPt9lWNLXHI/sgMPfvPsz7n6YgrFRCS1KNs4XPmp3MRokcoumPMdyy2wgp/buHkjGS8B FVWhBCvwoygavbNsa/zuDqUWIK33yTsJIuI/+USNx/LXVP/77cq1QvMHbTeFqC+ONpTN0F/bnR3r tXYkl1Jq1r4Tb1WhaaQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Query to ns1.dns.nl for nl/SOA
	Received 264 bytes from 194.0.28.53
	;; Response received from 194.0.28.53 (264 octets) ;; HEADER SECTION ;; id = 53356 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN SOA ;; ANSWER SECTION (2 records) nl. 3600 IN SOA ( ns1.dns.nl. hostmaster.domain-registry.nl. 2022062617 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 600 ;minimum ) nl. 3600 IN RRSIG ( SOA 8 1 3600 20220710135907 20220626063800 53551 nl. m816zN0fkPt9lWNLXHI/sgMPfvPsz7n6YgrFRCS1KNs4XPmp3MRokcoumPMdyy2wgp/buHkjGS8B FVWhBCvwoygavbNsa/zuDqUWIK33yTsJIuI/+USNx/LXVP/77cq1QvMHbTeFqC+ONpTN0F/bnR3r tXYkl1Jq1r4Tb1WhaaQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns4.dns.nl for nl/SOA
	Received 264 bytes from 185.159.199.200
	;; Response received from 185.159.199.200 (264 octets) ;; HEADER SECTION ;; id = 23507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN SOA ;; ANSWER SECTION (2 records) nl. 3600 IN SOA ( ns1.dns.nl. hostmaster.domain-registry.nl. 2022062617 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 600 ;minimum ) nl. 3600 IN RRSIG ( SOA 8 1 3600 20220710135907 20220626063800 53551 nl. m816zN0fkPt9lWNLXHI/sgMPfvPsz7n6YgrFRCS1KNs4XPmp3MRokcoumPMdyy2wgp/buHkjGS8B FVWhBCvwoygavbNsa/zuDqUWIK33yTsJIuI/+USNx/LXVP/77cq1QvMHbTeFqC+ONpTN0F/bnR3r tXYkl1Jq1r4Tb1WhaaQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.dns.nl for nl/A
	Received 518 bytes from 194.146.106.42
	;; Response received from 194.146.106.42 (518 octets) ;; HEADER SECTION ;; id = 19631 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nl. 600 IN SOA ( ns1.dns.nl. hostmaster.domain-registry.nl. 2022062617 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 600 ;minimum ) nl. 600 IN RRSIG ( SOA 8 1 3600 20220710135907 20220626063800 53551 nl. m816zN0fkPt9lWNLXHI/sgMPfvPsz7n6YgrFRCS1KNs4XPmp3MRokcoumPMdyy2wgp/buHkjGS8B FVWhBCvwoygavbNsa/zuDqUWIK33yTsJIuI/+USNx/LXVP/77cq1QvMHbTeFqC+ONpTN0F/bnR3r tXYkl1Jq1r4Tb1WhaaQ= ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN NSEC3 ( 1 1 5 12e16b4ea289c4aa l253n1qjter9i13g1j23co0jmrf5m67n NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN RRSIG ( NSEC3 8 2 600 20220706222322 20220623073734 53551 nl. FGL4QHQLvxXBj5I5O+zxKqJmyBGw4qxry26jcPwUUjORi4JnPGSDzbWpFehTn0XQSBsvjEGZvJVn wxmw2bVUMW1rYm69yvBj3ntOR+9K5S5yBk9WYtecEiDnRaRGnLINvaUj8gw3l9j6pa/APrdPAzYT wJVLokNbNMDm4o8yIFQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`nl. 600 IN RRSIG ( SOA 8 1 3600 20220710135907 20220626063800 53551 nl. m816zN0fkPt9lWNLXHI/sgMPfvPsz7n6YgrFRCS1KNs4XPmp3MRokcoumPMdyy2wgp/buHkjGS8B FVWhBCvwoygavbNsa/zuDqUWIK33yTsJIuI/+USNx/LXVP/77cq1QvMHbTeFqC+ONpTN0F/bnR3r tXYkl1Jq1r4Tb1WhaaQ= )`
	RRSIG=53551 and DNSKEY=53551 verifies the SOA RRset

	Query to ns4.dns.nl for nl/A
	Received 518 bytes from 185.159.199.200
	;; Response received from 185.159.199.200 (518 octets) ;; HEADER SECTION ;; id = 41190 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nl. 600 IN SOA ( ns1.dns.nl. hostmaster.domain-registry.nl. 2022062617 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 600 ;minimum ) nl. 600 IN RRSIG ( SOA 8 1 3600 20220710135907 20220626063800 53551 nl. m816zN0fkPt9lWNLXHI/sgMPfvPsz7n6YgrFRCS1KNs4XPmp3MRokcoumPMdyy2wgp/buHkjGS8B FVWhBCvwoygavbNsa/zuDqUWIK33yTsJIuI/+USNx/LXVP/77cq1QvMHbTeFqC+ONpTN0F/bnR3r tXYkl1Jq1r4Tb1WhaaQ= ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN NSEC3 ( 1 1 5 12e16b4ea289c4aa l253n1qjter9i13g1j23co0jmrf5m67n NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN RRSIG ( NSEC3 8 2 600 20220706222322 20220623073734 53551 nl. FGL4QHQLvxXBj5I5O+zxKqJmyBGw4qxry26jcPwUUjORi4JnPGSDzbWpFehTn0XQSBsvjEGZvJVn wxmw2bVUMW1rYm69yvBj3ntOR+9K5S5yBk9WYtecEiDnRaRGnLINvaUj8gw3l9j6pa/APrdPAzYT wJVLokNbNMDm4o8yIFQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns4.dns.nl is authoritative for nl
	Found RRSIG signed by nl zone
	Query to ns4.dns.nl for nl/A
	Received 518 bytes from 185.159.199.200
	;; Response received from 185.159.199.200 (518 octets) ;; HEADER SECTION ;; id = 49316 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nl. 600 IN SOA ( ns1.dns.nl. hostmaster.domain-registry.nl. 2022062617 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 600 ;minimum ) nl. 600 IN RRSIG ( SOA 8 1 3600 20220710135907 20220626063800 53551 nl. m816zN0fkPt9lWNLXHI/sgMPfvPsz7n6YgrFRCS1KNs4XPmp3MRokcoumPMdyy2wgp/buHkjGS8B FVWhBCvwoygavbNsa/zuDqUWIK33yTsJIuI/+USNx/LXVP/77cq1QvMHbTeFqC+ONpTN0F/bnR3r tXYkl1Jq1r4Tb1WhaaQ= ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN NSEC3 ( 1 1 5 12e16b4ea289c4aa l253n1qjter9i13g1j23co0jmrf5m67n NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN RRSIG ( NSEC3 8 2 600 20220706222322 20220623073734 53551 nl. FGL4QHQLvxXBj5I5O+zxKqJmyBGw4qxry26jcPwUUjORi4JnPGSDzbWpFehTn0XQSBsvjEGZvJVn wxmw2bVUMW1rYm69yvBj3ntOR+9K5S5yBk9WYtecEiDnRaRGnLINvaUj8gw3l9j6pa/APrdPAzYT wJVLokNbNMDm4o8yIFQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`nl. 600 IN RRSIG ( SOA 8 1 3600 20220710135907 20220626063800 53551 nl. m816zN0fkPt9lWNLXHI/sgMPfvPsz7n6YgrFRCS1KNs4XPmp3MRokcoumPMdyy2wgp/buHkjGS8B FVWhBCvwoygavbNsa/zuDqUWIK33yTsJIuI/+USNx/LXVP/77cq1QvMHbTeFqC+ONpTN0F/bnR3r tXYkl1Jq1r4Tb1WhaaQ= )`
	RRSIG=53551 and DNSKEY=53551 verifies the SOA RRset

	Query to ns3.dns.nl for nl/A
	Received 514 bytes from 194.0.25.24
	;; Response received from 194.0.25.24 (514 octets) ;; HEADER SECTION ;; id = 41338 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nl. 600 IN SOA ( ns1.dns.nl. hostmaster.domain-registry.nl. 2022062617 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 600 ;minimum ) nl. 600 IN RRSIG ( SOA 8 1 3600 20220710135907 20220626063800 53551 nl. m816zN0fkPt9lWNLXHI/sgMPfvPsz7n6YgrFRCS1KNs4XPmp3MRokcoumPMdyy2wgp/buHkjGS8B FVWhBCvwoygavbNsa/zuDqUWIK33yTsJIuI/+USNx/LXVP/77cq1QvMHbTeFqC+ONpTN0F/bnR3r tXYkl1Jq1r4Tb1WhaaQ= ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN NSEC3 ( 1 1 5 12e16b4ea289c4aa l253n1qjter9i13g1j23co0jmrf5m67n NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN RRSIG ( NSEC3 8 2 600 20220706222322 20220623073734 53551 nl. FGL4QHQLvxXBj5I5O+zxKqJmyBGw4qxry26jcPwUUjORi4JnPGSDzbWpFehTn0XQSBsvjEGZvJVn wxmw2bVUMW1rYm69yvBj3ntOR+9K5S5yBk9WYtecEiDnRaRGnLINvaUj8gw3l9j6pa/APrdPAzYT wJVLokNbNMDm4o8yIFQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	ns3.dns.nl is authoritative for nl
	Found RRSIG signed by nl zone
	Query to ns3.dns.nl for nl/A
	Received 514 bytes from 194.0.25.24
	;; Response received from 194.0.25.24 (514 octets) ;; HEADER SECTION ;; id = 60981 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nl. 600 IN SOA ( ns1.dns.nl. hostmaster.domain-registry.nl. 2022062617 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 600 ;minimum ) nl. 600 IN RRSIG ( SOA 8 1 3600 20220710135907 20220626063800 53551 nl. m816zN0fkPt9lWNLXHI/sgMPfvPsz7n6YgrFRCS1KNs4XPmp3MRokcoumPMdyy2wgp/buHkjGS8B FVWhBCvwoygavbNsa/zuDqUWIK33yTsJIuI/+USNx/LXVP/77cq1QvMHbTeFqC+ONpTN0F/bnR3r tXYkl1Jq1r4Tb1WhaaQ= ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN NSEC3 ( 1 1 5 12e16b4ea289c4aa l253n1qjter9i13g1j23co0jmrf5m67n NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN RRSIG ( NSEC3 8 2 600 20220706222322 20220623073734 53551 nl. FGL4QHQLvxXBj5I5O+zxKqJmyBGw4qxry26jcPwUUjORi4JnPGSDzbWpFehTn0XQSBsvjEGZvJVn wxmw2bVUMW1rYm69yvBj3ntOR+9K5S5yBk9WYtecEiDnRaRGnLINvaUj8gw3l9j6pa/APrdPAzYT wJVLokNbNMDm4o8yIFQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`nl. 600 IN RRSIG ( SOA 8 1 3600 20220710135907 20220626063800 53551 nl. m816zN0fkPt9lWNLXHI/sgMPfvPsz7n6YgrFRCS1KNs4XPmp3MRokcoumPMdyy2wgp/buHkjGS8B FVWhBCvwoygavbNsa/zuDqUWIK33yTsJIuI/+USNx/LXVP/77cq1QvMHbTeFqC+ONpTN0F/bnR3r tXYkl1Jq1r4Tb1WhaaQ= )`
	RRSIG=53551 and DNSKEY=53551 verifies the SOA RRset

	Query to ns1.dns.nl for nl/A
	Received 514 bytes from 194.0.28.53
	;; Response received from 194.0.28.53 (514 octets) ;; HEADER SECTION ;; id = 20935 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nl. 600 IN SOA ( ns1.dns.nl. hostmaster.domain-registry.nl. 2022062617 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 600 ;minimum ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN NSEC3 ( 1 1 5 12e16b4ea289c4aa l253n1qjter9i13g1j23co0jmrf5m67n NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) nl. 600 IN RRSIG ( SOA 8 1 3600 20220710135907 20220626063800 53551 nl. m816zN0fkPt9lWNLXHI/sgMPfvPsz7n6YgrFRCS1KNs4XPmp3MRokcoumPMdyy2wgp/buHkjGS8B FVWhBCvwoygavbNsa/zuDqUWIK33yTsJIuI/+USNx/LXVP/77cq1QvMHbTeFqC+ONpTN0F/bnR3r tXYkl1Jq1r4Tb1WhaaQ= ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN RRSIG ( NSEC3 8 2 600 20220706222322 20220623073734 53551 nl. FGL4QHQLvxXBj5I5O+zxKqJmyBGw4qxry26jcPwUUjORi4JnPGSDzbWpFehTn0XQSBsvjEGZvJVn wxmw2bVUMW1rYm69yvBj3ntOR+9K5S5yBk9WYtecEiDnRaRGnLINvaUj8gw3l9j6pa/APrdPAzYT wJVLokNbNMDm4o8yIFQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.dns.nl is authoritative for nl
	Found RRSIG signed by nl zone
	Query to ns1.dns.nl for nl/A
	Received 514 bytes from 194.0.28.53
	;; Response received from 194.0.28.53 (514 octets) ;; HEADER SECTION ;; id = 15876 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nl. 600 IN SOA ( ns1.dns.nl. hostmaster.domain-registry.nl. 2022062617 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 600 ;minimum ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN NSEC3 ( 1 1 5 12e16b4ea289c4aa l253n1qjter9i13g1j23co0jmrf5m67n NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) nl. 600 IN RRSIG ( SOA 8 1 3600 20220710135907 20220626063800 53551 nl. m816zN0fkPt9lWNLXHI/sgMPfvPsz7n6YgrFRCS1KNs4XPmp3MRokcoumPMdyy2wgp/buHkjGS8B FVWhBCvwoygavbNsa/zuDqUWIK33yTsJIuI/+USNx/LXVP/77cq1QvMHbTeFqC+ONpTN0F/bnR3r tXYkl1Jq1r4Tb1WhaaQ= ) l253j50a1skaglvuhrvs1q8q7bj1bn85.nl. 600 IN RRSIG ( NSEC3 8 2 600 20220706222322 20220623073734 53551 nl. FGL4QHQLvxXBj5I5O+zxKqJmyBGw4qxry26jcPwUUjORi4JnPGSDzbWpFehTn0XQSBsvjEGZvJVn wxmw2bVUMW1rYm69yvBj3ntOR+9K5S5yBk9WYtecEiDnRaRGnLINvaUj8gw3l9j6pa/APrdPAzYT wJVLokNbNMDm4o8yIFQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`nl. 600 IN RRSIG ( SOA 8 1 3600 20220710135907 20220626063800 53551 nl. m816zN0fkPt9lWNLXHI/sgMPfvPsz7n6YgrFRCS1KNs4XPmp3MRokcoumPMdyy2wgp/buHkjGS8B FVWhBCvwoygavbNsa/zuDqUWIK33yTsJIuI/+USNx/LXVP/77cq1QvMHbTeFqC+ONpTN0F/bnR3r tXYkl1Jq1r4Tb1WhaaQ= )`
	RRSIG=53551 and DNSKEY=53551 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: