DNSSEC Debugger - nwbc.gov

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-11-02 10:19:19 UTC

Analyzing DNSSEC problems for nwbc.gov

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 1459 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261121000000 20261031000000 38696 . UFkJYhexq5ZgfvP+oIz2WUJQgF8bhW8st3LnXtIBP0eRcSQXrYg7+luxwQYg+3iiZV2+BJPcNmf/ pDu+uNPaplkHPJLXh9WS0oEVZKUNk/0wk3A0XL5UOSTdPWn/IoTWWxyGxun+udV7eRQqVpRvSdlB FaqPWSDIDkX0QQIfye72TB4tsPBnA2iWDye6U157EcPBdNeKv4cfh1cAOlePIaxLs1NoNHIu/Zrq EY5zM+GNJ4Z72Tba09jYjz3ayBSPVinI64OYOORqZsYtuLXUrBdD6UWfV8Ljf3b0MGfBs7BoZYAJ xVyNr5CQF13CLw+4xrbMsmQWdTBqzp5iEtB9VA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261121000000 20261031000000 38696 . UFkJYhexq5ZgfvP+oIz2WUJQgF8bhW8st3LnXtIBP0eRcSQXrYg7+luxwQYg+3iiZV2+BJPcNmf/ pDu+uNPaplkHPJLXh9WS0oEVZKUNk/0wk3A0XL5UOSTdPWn/IoTWWxyGxun+udV7eRQqVpRvSdlB FaqPWSDIDkX0QQIfye72TB4tsPBnA2iWDye6U157EcPBdNeKv4cfh1cAOlePIaxLs1NoNHIu/Zrq EY5zM+GNJ4Z72Tba09jYjz3ayBSPVinI64OYOORqZsYtuLXUrBdD6UWfV8Ljf3b0MGfBs7BoZYAJ xVyNr5CQF13CLw+4xrbMsmQWdTBqzp5iEtB9VA== )`
	RRSIG=38696 and DNSKEY=38696/SEP verifies the DNSKEY RRset
	DNSKEY=8763 is now in the chain-of-trust
	Query to k.root-servers.net for nwbc.gov/A
	Received 615 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 615 octets ;; HEADER SECTION ;; id = 60595 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nwbc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20261115050000 20261102040000 8763 . Atr83dTW+gb2wpdGZ+WAiyKhaddx4Faiyyncq4iaDy5IMGa/uw7FQqKrG2AWL9Omum3qt92zldtx y4L9RZdVAfF/oln8tjK2imnB/eXG5CBEzAsStJCoTIsZeDERCeDZjBa86yT+Q45nWCYvh47ApVBG 2WAoItp7eL1dc8jxi7jTBjKCM7pKQ55rx0+fnQr1QJJK63J14hwWCsbJZ+wgJsM/STq8sR6a5YSR 1BKygk58qx8fr9dMXYwESB4mSKQ0PgRvU6baYWGaccyIGsh2dRCTjIJ/7EtPkgwqdnYVqpcRjTp0 zoL+lk/bYpyesnjN6DaYbF3GluV5jUqweGi0Tw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 610 octets ;; HEADER SECTION ;; id = 54520 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20261115050000 20261102040000 8763 . Atr83dTW+gb2wpdGZ+WAiyKhaddx4Faiyyncq4iaDy5IMGa/uw7FQqKrG2AWL9Omum3qt92zldtx y4L9RZdVAfF/oln8tjK2imnB/eXG5CBEzAsStJCoTIsZeDERCeDZjBa86yT+Q45nWCYvh47ApVBG 2WAoItp7eL1dc8jxi7jTBjKCM7pKQ55rx0+fnQr1QJJK63J14hwWCsbJZ+wgJsM/STq8sR6a5YSR 1BKygk58qx8fr9dMXYwESB4mSKQ0PgRvU6baYWGaccyIGsh2dRCTjIJ/7EtPkgwqdnYVqpcRjTp0 zoL+lk/bYpyesnjN6DaYbF3GluV5jUqweGi0Tw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to l.root-servers.net for gov/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 15645 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20261115050000 20261102040000 8763 . Atr83dTW+gb2wpdGZ+WAiyKhaddx4Faiyyncq4iaDy5IMGa/uw7FQqKrG2AWL9Omum3qt92zldtx y4L9RZdVAfF/oln8tjK2imnB/eXG5CBEzAsStJCoTIsZeDERCeDZjBa86yT+Q45nWCYvh47ApVBG 2WAoItp7eL1dc8jxi7jTBjKCM7pKQ55rx0+fnQr1QJJK63J14hwWCsbJZ+wgJsM/STq8sR6a5YSR 1BKygk58qx8fr9dMXYwESB4mSKQ0PgRvU6baYWGaccyIGsh2dRCTjIJ/7EtPkgwqdnYVqpcRjTp0 zoL+lk/bYpyesnjN6DaYbF3GluV5jUqweGi0Tw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20261115050000 20261102040000 8763 . Atr83dTW+gb2wpdGZ+WAiyKhaddx4Faiyyncq4iaDy5IMGa/uw7FQqKrG2AWL9Omum3qt92zldtx y4L9RZdVAfF/oln8tjK2imnB/eXG5CBEzAsStJCoTIsZeDERCeDZjBa86yT+Q45nWCYvh47ApVBG 2WAoItp7eL1dc8jxi7jTBjKCM7pKQ55rx0+fnQr1QJJK63J14hwWCsbJZ+wgJsM/STq8sR6a5YSR 1BKygk58qx8fr9dMXYwESB4mSKQ0PgRvU6baYWGaccyIGsh2dRCTjIJ/7EtPkgwqdnYVqpcRjTp0 zoL+lk/bYpyesnjN6DaYbF3GluV5jUqweGi0Tw== )`
	RRSIG=8763 and DNSKEY=8763 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 30389 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20261214110642 20261014110642 2536 gov. QcwaI/uc5swDGT6Qsg0AKv+P/1ZJfKLga9RsH+/N0UhldBx8RQnDb7CTGox8+a2LeAvVlBz8J+5C cpZDviuQ9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20261214110642 20261014110642 2536 gov. QcwaI/uc5swDGT6Qsg0AKv+P/1ZJfKLga9RsH+/N0UhldBx8RQnDb7CTGox8+a2LeAvVlBz8J+5C cpZDviuQ9A== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for nwbc.gov/A
	Received 464 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 464 octets ;; HEADER SECTION ;; id = 1697 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nwbc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) nwbc.gov. 10800 IN NS brahmaputra.sba.gov. nwbc.gov. 10800 IN NS dnieper.sba.gov. nwbc.gov. 10800 IN NS volturno.sba.gov. nwbc.gov. 10800 IN NS yamuna.sba.gov. nwbc.gov. 3600 IN DS 34912 8 1 6cc66ae4619afa649759bb02ddbcae594412aca6 nwbc.gov. 3600 IN DS ( 34912 8 2 13fa4e4835caf773d7bbd537786c9e1cb0905600d6488f7d5f77e1ee40d1a470 ) nwbc.gov. 3600 IN DS 59899 8 1 fc3dad508203a265b845cce94261076a63f9a907 nwbc.gov. 3600 IN DS ( 59899 8 2 bdf19d4035d86904a92df96600d32ab40de7082ecbac2a4617b18ff5c3be0656 ) nwbc.gov. 3600 IN RRSIG ( DS 13 2 3600 20261103111919 20261101091919 35496 gov. DvQiYKu4mS2I1DNmixP74qD5wJiTWn8hJH4DT0gqFJDCgZ0stRyokI2MbTeOT10kALqdHfphAeIV tsiUAoJq0g== ) ;; ADDITIONAL SECTION (5 records) brahmaputra.sba.gov. 3600 IN A 40.80.220.233 dnieper.sba.gov. 3600 IN A 40.90.247.199 volturno.sba.gov. 3600 IN A 40.80.220.253 yamuna.sba.gov. 3600 IN A 40.90.245.130 ;; { "EDNS-VERSION": 0 }
	Query to b.ns.gov for nwbc.gov/DNSKEY
	Received 464 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 464 octets ;; HEADER SECTION ;; id = 56842 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nwbc.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) nwbc.gov. 10800 IN NS brahmaputra.sba.gov. nwbc.gov. 10800 IN NS dnieper.sba.gov. nwbc.gov. 10800 IN NS volturno.sba.gov. nwbc.gov. 10800 IN NS yamuna.sba.gov. nwbc.gov. 3600 IN DS 34912 8 1 6cc66ae4619afa649759bb02ddbcae594412aca6 nwbc.gov. 3600 IN DS ( 34912 8 2 13fa4e4835caf773d7bbd537786c9e1cb0905600d6488f7d5f77e1ee40d1a470 ) nwbc.gov. 3600 IN DS 59899 8 1 fc3dad508203a265b845cce94261076a63f9a907 nwbc.gov. 3600 IN DS ( 59899 8 2 bdf19d4035d86904a92df96600d32ab40de7082ecbac2a4617b18ff5c3be0656 ) nwbc.gov. 3600 IN RRSIG ( DS 13 2 3600 20261103111919 20261101091919 35496 gov. EhqOZVVdeicVtWvdWkmAVkp+wsaFn9D19RpmsDb992YXIrz9v0IGbVkxC8SJ7Mu2YwCWHEs7d+TH uqhISNV54Q== ) ;; ADDITIONAL SECTION (5 records) brahmaputra.sba.gov. 3600 IN A 40.80.220.233 dnieper.sba.gov. 3600 IN A 40.90.247.199 volturno.sba.gov. 3600 IN A 40.80.220.253 yamuna.sba.gov. 3600 IN A 40.90.245.130 ;; { "EDNS-VERSION": 0 }
	Found child zone nwbc.gov

nwbc.gov

	Checking DS between gov and nwbc.gov
	Query to b.ns.gov for nwbc.gov/DS
	Received 304 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 304 octets ;; HEADER SECTION ;; id = 52502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nwbc.gov. IN DS ;; ANSWER SECTION (5 records) nwbc.gov. 3600 IN DS 34912 8 1 6cc66ae4619afa649759bb02ddbcae594412aca6 nwbc.gov. 3600 IN DS ( 34912 8 2 13fa4e4835caf773d7bbd537786c9e1cb0905600d6488f7d5f77e1ee40d1a470 ) nwbc.gov. 3600 IN DS 59899 8 1 fc3dad508203a265b845cce94261076a63f9a907 nwbc.gov. 3600 IN DS ( 59899 8 2 bdf19d4035d86904a92df96600d32ab40de7082ecbac2a4617b18ff5c3be0656 ) nwbc.gov. 3600 IN RRSIG ( DS 13 2 3600 20261103111919 20261101091919 35496 gov. FdbnYyE8qehB5vd8q5Qw42gApnbOHqQuhnKeQi1dqtS7D8L91JfE69i3FbO1JVSqGAekqfU30v8S TlkutsqBLA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DS records for nwbc.gov in the gov zone
	DS=34912/SHA-1 uses a deprecated digest algorithm
	DS=59899/SHA-1 uses a deprecated digest algorithm
	DS=34912/SHA-1 has algorithm RSASHA256
	DS=34912/SHA-256 has algorithm RSASHA256
	DS=59899/SHA-1 has algorithm RSASHA256
	DS=59899/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nwbc.gov. 3600 IN RRSIG ( DS 13 2 3600 20261103111919 20261101091919 35496 gov. FdbnYyE8qehB5vd8q5Qw42gApnbOHqQuhnKeQi1dqtS7D8L91JfE69i3FbO1JVSqGAekqfU30v8S TlkutsqBLA== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=34912/SHA-1 is now in the chain-of-trust
	DS=59899/SHA-1 is now in the chain-of-trust
	`nwbc.gov. 3600 IN DS 34912 8 1 6cc66ae4619afa649759bb02ddbcae594412aca6`
	`nwbc.gov. 3600 IN DS ( 34912 8 2 13fa4e4835caf773d7bbd537786c9e1cb0905600d6488f7d5f77e1ee40d1a470 )`
	`nwbc.gov. 3600 IN DS 59899 8 1 fc3dad508203a265b845cce94261076a63f9a907`
	`nwbc.gov. 3600 IN DS ( 59899 8 2 bdf19d4035d86904a92df96600d32ab40de7082ecbac2a4617b18ff5c3be0656 )`
	Query to yamuna.sba.gov for nwbc.gov/DNSKEY
	Received 1625 bytes from 40.90.245.130
	;; Response received from [40.90.245.130] 1625 octets ;; HEADER SECTION ;; id = 34642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 7 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nwbc.gov. IN DNSKEY ;; ANSWER SECTION (7 records) nwbc.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAen1n1rkDv+6ObCdcM1AtLLLFLDbmTdJ0y+RXLNIgNXLP315yCtu2T7Uy5ctq1Iw9I6zIvFF zmNI0m0wliA3VOhPWAHBKzS740gAKPm8b8OSDI6F15NK52E5sjAk62Jxpwk77w3RxbhttJjMPbl0 4mE1Ls1afjNmPG26AyRhzYpuMnezkD2QArKv+jPCCua0jbpR7P3E16JIx63a+UW5kgwA6VDBqIWV /r0bcSGV3L9GZvs0w9QVIiDrnV1J5zSt7ZiCSMHlqpqkjnUzhDo4SYqNuGcg2jy+CHtwRYX32kGC YUJJc3k6be6Bh03H4u0iINzLaCDZsS5UOjcj0qx0IEE= ) ; keytag 29384 nwbc.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAadUYVYP9AxP9Bj6PQuJHx8dDLF38jG7IEc2p0aMT9zsSUGvJmabnkRoOIR51OTsMTZOH7Ix 77DdvxBOdrOE1xVskborQ2GbBBCvLqYvFF/TIaon8pJmO0ECyhANsix617Ty6y5ETTYr3kazUPQR w6cNjyaqSlAGpNPwtn4JK0LtFzd3LLotb+ujdeBHScYCmYserO0VsFw2zED41mMAA7buJRYaPDEi tw6OY7ymOWbF/s8Dtfc+VPcfmYGxQLyjjcxEGpu0TmOgx6TeDNR27tSfN5ZcN1//gEH34jdseO/W mbSuzrs2zJN2DK0prNSkBUA+9iXUB5l2xQzfdpcT8AE= ) ; keytag 64604 nwbc.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAaGHLEJ1cqLtAjPTv75XjIrYyA9Nidg6RYnNk9jdzchp52F3fGZdpLzlAYXUpZ9OegtlnNKK rrXpjPALWhOT3U0N9Bz5L5XuWKiGpP9gtaXSRdQovDZgABdeFP9vfDPopvHkYvFoeratt4rzKV2d 5AQD/C/20Ye1HnGC506RneMLGABTCGoH7t92VpOEnY7VM2WNumiOvjldxy9cJaaP8thMXSDWs99/ 0XByQdsHngSj7xHYWQq2GN2vtTF1MsJiCFrfPuiQa+X2m2iWhZiTVi/iOjHv8DUYl+cqin4q+7yt sWut1yZgwbr5x4jao6mSGiAa4nD7jZ+bufoVFMV3xVk= ) ; keytag 59899 nwbc.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcU85Z7cVBdbyZUWq3USJVnZauTz+3I3B5fj42Ze9BHe7I5GOILs+1dnYPFiH5xRHm5NyXSI +CBeHRap/P7P+RuUvvdtouVNfqHSfRkmdDG4k/qiftHZRiqv/gW4hMBZOedu+pWGyDIRZkA6Allf xfvPkWwt1b3h7z6vqGcddRxj ) ; keytag 23688 nwbc.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbOSpRv1EprC2aCJtCOQxm1sNjzX+OpNv4DuCWwqyjakQS7s4EJfb97jVotyO+pmii19oGEs ltFjFUSxM4ZbIUUVm87pawUZlWM8YTYVOouS//KmIWTWZG42oA/IeD3eFbWb5RcXCH8JZ2YWx+0y Teaq6s1KUGhVbXat0mLNfghN ) ; keytag 17733 nwbc.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20261107050719 20261031040719 59899 nwbc.gov. KHoIlSSG/QAtKlnnEyukqceqyGXem+jJ6J1B9xvmHnb1WV8iRnnVuGJYQnsne6c/neJ+Es3bq2vk vm44mdUsS7rKBQpDQB8uPbvMlt3LNGqVQ/Tr9aKNUSbSBggDCz+w5Xav1Fcc/Q86JxOCo7uLxq9+ 2I9I84l1/3q6dYiGcp/zzwPLM00hL3VjL/WqYvtLWdxG7FdCbD/mB7wXe9G7vHKIaN4mfNLZrLi+ 1mJAr9/h5imlG6/X3iKXYod9hleMVg4KSZtU/8RDF6Bx/qZmxFkHnfaZ3fRNFCGJdwWcEDQD76vt sQr994wTmWzZDay0ZVHaUECZBtiKLwNSaGkgEw== ) nwbc.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20261107050719 20261031040719 23688 nwbc.gov. nv6YHOaXSpqBz3bJ7YLUcXe/hQNJJ1PYW/Wf/EP4Zm3nKM1PZavl5dttJN0JM/DYFRyHmM2PDMC4 x5HGLnvmDKnFPTG95AlyS/Oo7WOeU2/Jf2iJ9WBdn2MYtQ6KUgsJ7qu2vabc5DuxfsAu0W0IKy20 2mmwjzZS0p3AbGB8v94= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for nwbc.gov
	`nwbc.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAen1n1rkDv+6ObCdcM1AtLLLFLDbmTdJ0y+RXLNIgNXLP315yCtu2T7Uy5ctq1Iw9I6zIvFF zmNI0m0wliA3VOhPWAHBKzS740gAKPm8b8OSDI6F15NK52E5sjAk62Jxpwk77w3RxbhttJjMPbl0 4mE1Ls1afjNmPG26AyRhzYpuMnezkD2QArKv+jPCCua0jbpR7P3E16JIx63a+UW5kgwA6VDBqIWV /r0bcSGV3L9GZvs0w9QVIiDrnV1J5zSt7ZiCSMHlqpqkjnUzhDo4SYqNuGcg2jy+CHtwRYX32kGC YUJJc3k6be6Bh03H4u0iINzLaCDZsS5UOjcj0qx0IEE= ) ; keytag 29384`
	`nwbc.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAadUYVYP9AxP9Bj6PQuJHx8dDLF38jG7IEc2p0aMT9zsSUGvJmabnkRoOIR51OTsMTZOH7Ix 77DdvxBOdrOE1xVskborQ2GbBBCvLqYvFF/TIaon8pJmO0ECyhANsix617Ty6y5ETTYr3kazUPQR w6cNjyaqSlAGpNPwtn4JK0LtFzd3LLotb+ujdeBHScYCmYserO0VsFw2zED41mMAA7buJRYaPDEi tw6OY7ymOWbF/s8Dtfc+VPcfmYGxQLyjjcxEGpu0TmOgx6TeDNR27tSfN5ZcN1//gEH34jdseO/W mbSuzrs2zJN2DK0prNSkBUA+9iXUB5l2xQzfdpcT8AE= ) ; keytag 64604`
	`nwbc.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAaGHLEJ1cqLtAjPTv75XjIrYyA9Nidg6RYnNk9jdzchp52F3fGZdpLzlAYXUpZ9OegtlnNKK rrXpjPALWhOT3U0N9Bz5L5XuWKiGpP9gtaXSRdQovDZgABdeFP9vfDPopvHkYvFoeratt4rzKV2d 5AQD/C/20Ye1HnGC506RneMLGABTCGoH7t92VpOEnY7VM2WNumiOvjldxy9cJaaP8thMXSDWs99/ 0XByQdsHngSj7xHYWQq2GN2vtTF1MsJiCFrfPuiQa+X2m2iWhZiTVi/iOjHv8DUYl+cqin4q+7yt sWut1yZgwbr5x4jao6mSGiAa4nD7jZ+bufoVFMV3xVk= ) ; keytag 59899`
	`nwbc.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcU85Z7cVBdbyZUWq3USJVnZauTz+3I3B5fj42Ze9BHe7I5GOILs+1dnYPFiH5xRHm5NyXSI +CBeHRap/P7P+RuUvvdtouVNfqHSfRkmdDG4k/qiftHZRiqv/gW4hMBZOedu+pWGyDIRZkA6Allf xfvPkWwt1b3h7z6vqGcddRxj ) ; keytag 23688`
	`nwbc.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbOSpRv1EprC2aCJtCOQxm1sNjzX+OpNv4DuCWwqyjakQS7s4EJfb97jVotyO+pmii19oGEs ltFjFUSxM4ZbIUUVm87pawUZlWM8YTYVOouS//KmIWTWZG42oA/IeD3eFbWb5RcXCH8JZ2YWx+0y Teaq6s1KUGhVbXat0mLNfghN ) ; keytag 17733`
	DNSKEY=59899/SEP is now in the chain-of-trust
	DS=59899/SHA-1 verifies DNSKEY=59899/SEP
	DS=59899/SHA-256 verifies DNSKEY=59899/SEP
	DS=34912/SHA-1 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`nwbc.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20261107050719 20261031040719 59899 nwbc.gov. KHoIlSSG/QAtKlnnEyukqceqyGXem+jJ6J1B9xvmHnb1WV8iRnnVuGJYQnsne6c/neJ+Es3bq2vk vm44mdUsS7rKBQpDQB8uPbvMlt3LNGqVQ/Tr9aKNUSbSBggDCz+w5Xav1Fcc/Q86JxOCo7uLxq9+ 2I9I84l1/3q6dYiGcp/zzwPLM00hL3VjL/WqYvtLWdxG7FdCbD/mB7wXe9G7vHKIaN4mfNLZrLi+ 1mJAr9/h5imlG6/X3iKXYod9hleMVg4KSZtU/8RDF6Bx/qZmxFkHnfaZ3fRNFCGJdwWcEDQD76vt sQr994wTmWzZDay0ZVHaUECZBtiKLwNSaGkgEw== )`
	`nwbc.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20261107050719 20261031040719 23688 nwbc.gov. nv6YHOaXSpqBz3bJ7YLUcXe/hQNJJ1PYW/Wf/EP4Zm3nKM1PZavl5dttJN0JM/DYFRyHmM2PDMC4 x5HGLnvmDKnFPTG95AlyS/Oo7WOeU2/Jf2iJ9WBdn2MYtQ6KUgsJ7qu2vabc5DuxfsAu0W0IKy20 2mmwjzZS0p3AbGB8v94= )`
	RRSIG=59899 and DNSKEY=59899/SEP verifies the DNSKEY RRset
	RRSIG=23688 and DNSKEY=23688 verifies the DNSKEY RRset
	DNSKEY=29384/SEP is now in the chain-of-trust
	DNSKEY=64604/SEP is now in the chain-of-trust
	DNSKEY=23688 is now in the chain-of-trust
	DNSKEY=17733 is now in the chain-of-trust
	Query to dnieper.sba.gov for nwbc.gov/A
	Received 237 bytes from 40.90.247.199
	;; Response received from [40.90.247.199] 237 octets ;; HEADER SECTION ;; id = 11215 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nwbc.gov. IN A ;; ANSWER SECTION (3 records) nwbc.gov. 900 IN A 54.163.247.134 nwbc.gov. 600 IN A 3.213.193.163 nwbc.gov. 600 IN RRSIG ( A 8 2 600 20261108024306 20261029014306 23688 nwbc.gov. UZgtY6m1agKAhbwTEtgO8c6292PEIcIq7sYAMT7VfSf2cWyld2U9CE7akvZP1bCgKJGU4xyIXvGu F9tqughAAdfFFJxZh2VjsU3aMlj8NaDBbSxl+bt7CBv+OdNCnGG7wVD4HRY+JljFgo1p4kI24QkO CyzeyPS/M6maOuWLtc8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dnieper.sba.gov is authoritative for nwbc.gov
	Found RRSIG signed by nwbc.gov zone
	Query to brahmaputra.sba.gov for nwbc.gov/SOA
	Received 451 bytes from 40.80.220.233
	;; Response received from [40.80.220.233] 451 octets ;; HEADER SECTION ;; id = 14825 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nwbc.gov. IN SOA ;; ANSWER SECTION (2 records) nwbc.gov. 3600 IN SOA ( Brahmaputra.sba.gov. hostmaster.sba.gov. 1238 ;serial 900 ;refresh 600 ;retry 1209600 ;expire 900 ;minimum ) nwbc.gov. 3600 IN RRSIG ( SOA 8 2 3600 20261110050719 20261031040719 23688 nwbc.gov. gHcj91mNWSxnUDCJyICVobhLyWXRqXF90Ceh2ugATIOqOMacPKi8LjFVc3ZB5D1bEGfucP+P6orp ZnYZ3oaovDfHe0LKeHXhVYaQq9DM/VQjJA0WKcWnXFY7AGKJ7yC8tj0SKnYuSalQRAQmoqAHWP/c 1ZeiM45U7tZbZQ85WyU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (3 records) Brahmaputra.sba.gov. 3600 IN A 40.80.220.233 Brahmaputra.sba.gov. 3600 IN RRSIG ( A 8 3 3600 20261107095503 20261028085503 29776 sba.gov. AWFAE+XnZy3BnxNYSN+ar1LxGqjlETpcqwvjwUGKAwCIl+tcUJDVhGdo7UWOO49TCJej/Z7HIJyu UzRHQfgkpQMsjI6S15sGbIfvtgQXFyfyA89vAeZlO7QY0NO3rL0jt4Up7mg/r7pJKVIIWvmSKaIf 8ZXSd3DhZaY3V5eLmfA= ) ;; { "EDNS-VERSION": 0 }
	Query to yamuna.sba.gov for nwbc.gov/SOA
	Received 451 bytes from 40.90.245.130
	;; Response received from [40.90.245.130] 451 octets ;; HEADER SECTION ;; id = 15610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nwbc.gov. IN SOA ;; ANSWER SECTION (2 records) nwbc.gov. 3600 IN SOA ( Brahmaputra.sba.gov. hostmaster.sba.gov. 1238 ;serial 900 ;refresh 600 ;retry 1209600 ;expire 900 ;minimum ) nwbc.gov. 3600 IN RRSIG ( SOA 8 2 3600 20261110050719 20261031040719 23688 nwbc.gov. gHcj91mNWSxnUDCJyICVobhLyWXRqXF90Ceh2ugATIOqOMacPKi8LjFVc3ZB5D1bEGfucP+P6orp ZnYZ3oaovDfHe0LKeHXhVYaQq9DM/VQjJA0WKcWnXFY7AGKJ7yC8tj0SKnYuSalQRAQmoqAHWP/c 1ZeiM45U7tZbZQ85WyU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (3 records) Brahmaputra.sba.gov. 3600 IN A 40.80.220.233 Brahmaputra.sba.gov. 3600 IN RRSIG ( A 8 3 3600 20261107095503 20261028085503 29776 sba.gov. AWFAE+XnZy3BnxNYSN+ar1LxGqjlETpcqwvjwUGKAwCIl+tcUJDVhGdo7UWOO49TCJej/Z7HIJyu UzRHQfgkpQMsjI6S15sGbIfvtgQXFyfyA89vAeZlO7QY0NO3rL0jt4Up7mg/r7pJKVIIWvmSKaIf 8ZXSd3DhZaY3V5eLmfA= ) ;; { "EDNS-VERSION": 0 }
	Query to volturno.sba.gov for nwbc.gov/SOA
	Timeout querying volturno.sba.gov/40.80.220.253 for nwbc.gov/SOA
	All Queries to volturno.sba.gov for nwbc.gov/SOA timed out or failed
	Query to dnieper.sba.gov for nwbc.gov/A
	nwbc.gov A RR has value 54.163.247.134
	nwbc.gov A RR has value 3.213.193.163
	Found 1 RRSIGs over A RRset
	`nwbc.gov. 600 IN RRSIG ( A 8 2 600 20261108024306 20261029014306 23688 nwbc.gov. UZgtY6m1agKAhbwTEtgO8c6292PEIcIq7sYAMT7VfSf2cWyld2U9CE7akvZP1bCgKJGU4xyIXvGu F9tqughAAdfFFJxZh2VjsU3aMlj8NaDBbSxl+bt7CBv+OdNCnGG7wVD4HRY+JljFgo1p4kI24QkO CyzeyPS/M6maOuWLtc8= )`
	RRSIG=23688 and DNSKEY=23688 verifies the A RRset

nwbc.gov

	Query to yamuna.sba.gov for nwbc.gov/A
	Received 237 bytes from 40.90.245.130
	;; Response received from [40.90.245.130] 237 octets ;; HEADER SECTION ;; id = 30680 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nwbc.gov. IN A ;; ANSWER SECTION (3 records) nwbc.gov. 900 IN A 54.163.247.134 nwbc.gov. 600 IN A 3.213.193.163 nwbc.gov. 600 IN RRSIG ( A 8 2 600 20261108024306 20261029014306 23688 nwbc.gov. UZgtY6m1agKAhbwTEtgO8c6292PEIcIq7sYAMT7VfSf2cWyld2U9CE7akvZP1bCgKJGU4xyIXvGu F9tqughAAdfFFJxZh2VjsU3aMlj8NaDBbSxl+bt7CBv+OdNCnGG7wVD4HRY+JljFgo1p4kI24QkO CyzeyPS/M6maOuWLtc8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	yamuna.sba.gov is authoritative for nwbc.gov
	Found RRSIG signed by nwbc.gov zone
	Query to yamuna.sba.gov for nwbc.gov/A
	nwbc.gov A RR has value 54.163.247.134
	nwbc.gov A RR has value 3.213.193.163
	Found 1 RRSIGs over A RRset
	`nwbc.gov. 600 IN RRSIG ( A 8 2 600 20261108024306 20261029014306 23688 nwbc.gov. UZgtY6m1agKAhbwTEtgO8c6292PEIcIq7sYAMT7VfSf2cWyld2U9CE7akvZP1bCgKJGU4xyIXvGu F9tqughAAdfFFJxZh2VjsU3aMlj8NaDBbSxl+bt7CBv+OdNCnGG7wVD4HRY+JljFgo1p4kI24QkO CyzeyPS/M6maOuWLtc8= )`
	RRSIG=23688 and DNSKEY=23688 verifies the A RRset

nwbc.gov

	Query to brahmaputra.sba.gov for nwbc.gov/A
	Received 237 bytes from 40.80.220.233
	;; Response received from [40.80.220.233] 237 octets ;; HEADER SECTION ;; id = 25170 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nwbc.gov. IN A ;; ANSWER SECTION (3 records) nwbc.gov. 900 IN A 54.163.247.134 nwbc.gov. 600 IN A 3.213.193.163 nwbc.gov. 600 IN RRSIG ( A 8 2 600 20261108024306 20261029014306 23688 nwbc.gov. UZgtY6m1agKAhbwTEtgO8c6292PEIcIq7sYAMT7VfSf2cWyld2U9CE7akvZP1bCgKJGU4xyIXvGu F9tqughAAdfFFJxZh2VjsU3aMlj8NaDBbSxl+bt7CBv+OdNCnGG7wVD4HRY+JljFgo1p4kI24QkO CyzeyPS/M6maOuWLtc8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	brahmaputra.sba.gov is authoritative for nwbc.gov
	Found RRSIG signed by nwbc.gov zone
	Query to brahmaputra.sba.gov for nwbc.gov/A
	nwbc.gov A RR has value 54.163.247.134
	nwbc.gov A RR has value 3.213.193.163
	Found 1 RRSIGs over A RRset
	`nwbc.gov. 600 IN RRSIG ( A 8 2 600 20261108024306 20261029014306 23688 nwbc.gov. UZgtY6m1agKAhbwTEtgO8c6292PEIcIq7sYAMT7VfSf2cWyld2U9CE7akvZP1bCgKJGU4xyIXvGu F9tqughAAdfFFJxZh2VjsU3aMlj8NaDBbSxl+bt7CBv+OdNCnGG7wVD4HRY+JljFgo1p4kI24QkO CyzeyPS/M6maOuWLtc8= )`
	RRSIG=23688 and DNSKEY=23688 verifies the A RRset

nwbc.gov

No response from nwbc.gov nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nwbc.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: