DNSSEC Debugger - rediris.es

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-20 09:22:41 UTC

Analyzing DNSSEC problems for rediris.es

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1414 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1414 octets ;; HEADER SECTION ;; id = 34554 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261010000000 20260919000000 20326 . SeT2U+BKi7S4R7OPnQ0EBjS6DtsNPasISEAE3iOUQWl552IWiqHLBYkZOa5au73wjV5oH9vQleMB gtIQleByqX74kORDKMmx+EIhhDmiNOf9w33OqM4+s0Etem28QjqQ9e4QgsKI6N39HDMedL31iybJ n6ghPcDT73IyzgTs6mtyV+Lpu1ZqH1yXNNB34YsEzgquGDKU7QkAlQMupqKlZOhJC2pj4724Fzjr MXq68MYAitHMmfnrm2/iqP8i0jIrIQgIl4mVOO4VxMZEsQa+ESJWEBQJ3Fu3jLRII/xIEq1qXb8F 87yhBvKhzuyLfQGaKttdkN9oudecqKuNezNp0g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261010000000 20260919000000 20326 . SeT2U+BKi7S4R7OPnQ0EBjS6DtsNPasISEAE3iOUQWl552IWiqHLBYkZOa5au73wjV5oH9vQleMB gtIQleByqX74kORDKMmx+EIhhDmiNOf9w33OqM4+s0Etem28QjqQ9e4QgsKI6N39HDMedL31iybJ n6ghPcDT73IyzgTs6mtyV+Lpu1ZqH1yXNNB34YsEzgquGDKU7QkAlQMupqKlZOhJC2pj4724Fzjr MXq68MYAitHMmfnrm2/iqP8i0jIrIQgIl4mVOO4VxMZEsQa+ESJWEBQJ3Fu3jLRII/xIEq1qXb8F 87yhBvKhzuyLfQGaKttdkN9oudecqKuNezNp0g== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=8763 is now in the chain-of-trust
	DNSKEY=57780 is now in the chain-of-trust
	Query to i.root-servers.net for rediris.es/A
	Received 618 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 618 octets ;; HEADER SECTION ;; id = 61092 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rediris.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS c.nic.es. es. 172800 IN NS a.nic.es. es. 172800 IN NS h.nic.es. es. 172800 IN NS g.nic.es. es. 86400 IN DS ( 54404 8 2 c130df280cd8ebb99c8b6c8335b9fd5f1d709641494e044c8085b1ac21833b47 ) es. 86400 IN RRSIG ( DS 8 1 86400 20261003050000 20260920040000 57780 . YoUjaYrWSZHdQtH4RMsmxNrqnBLtspaE4NGAzBUFzlaUBOPEPwA5u6Y7jP2U52L1ZBotSQtwKDbm Xqv3QxD48tCE93jJoU3g1TVAngoXvSpVsuwe9K15ly9UTYEzJB6GKT2DOtYjRVX5UtT7VaoqylmN zmXAIhh2rbzSis25Q2hdj6WS86vu6FaFEeS0c7XsnZJDXWxGLeQvX5MEuyVcVsqGzhS4MQ0SoR1U aZ/pG6IzKHd2bExzaK1Xsdn79xp9LB3PQ0pT7w0ge/5GQopuZoV1ChVIILS3j1iIdshW3X9mT24N YRMpjc/OirkRbqWsZ71j0OJwu58YVaPyq/sklg== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 c.nic.es. 172800 IN A 194.0.34.53 g.nic.es. 172800 IN A 204.61.217.1 h.nic.es. 172800 IN A 194.0.33.53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for es/DNSKEY
	Received 610 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 610 octets ;; HEADER SECTION ;; id = 51738 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 54404 8 2 c130df280cd8ebb99c8b6c8335b9fd5f1d709641494e044c8085b1ac21833b47 ) es. 86400 IN RRSIG ( DS 8 1 86400 20261003050000 20260920040000 57780 . YoUjaYrWSZHdQtH4RMsmxNrqnBLtspaE4NGAzBUFzlaUBOPEPwA5u6Y7jP2U52L1ZBotSQtwKDbm Xqv3QxD48tCE93jJoU3g1TVAngoXvSpVsuwe9K15ly9UTYEzJB6GKT2DOtYjRVX5UtT7VaoqylmN zmXAIhh2rbzSis25Q2hdj6WS86vu6FaFEeS0c7XsnZJDXWxGLeQvX5MEuyVcVsqGzhS4MQ0SoR1U aZ/pG6IzKHd2bExzaK1Xsdn79xp9LB3PQ0pT7w0ge/5GQopuZoV1ChVIILS3j1iIdshW3X9mT24N YRMpjc/OirkRbqWsZ71j0OJwu58YVaPyq/sklg== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 c.nic.es. 172800 IN A 194.0.34.53 g.nic.es. 172800 IN A 204.61.217.1 h.nic.es. 172800 IN A 194.0.33.53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; { "EDNS-VERSION": 0 }
	Found child zone es

	Checking DS between . and es
	Query to a.root-servers.net for es/DS
	Received 366 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 366 octets ;; HEADER SECTION ;; id = 9401 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; es. IN DS ;; ANSWER SECTION (2 records) es. 86400 IN DS ( 54404 8 2 c130df280cd8ebb99c8b6c8335b9fd5f1d709641494e044c8085b1ac21833b47 ) es. 86400 IN RRSIG ( DS 8 1 86400 20261003050000 20260920040000 57780 . YoUjaYrWSZHdQtH4RMsmxNrqnBLtspaE4NGAzBUFzlaUBOPEPwA5u6Y7jP2U52L1ZBotSQtwKDbm Xqv3QxD48tCE93jJoU3g1TVAngoXvSpVsuwe9K15ly9UTYEzJB6GKT2DOtYjRVX5UtT7VaoqylmN zmXAIhh2rbzSis25Q2hdj6WS86vu6FaFEeS0c7XsnZJDXWxGLeQvX5MEuyVcVsqGzhS4MQ0SoR1U aZ/pG6IzKHd2bExzaK1Xsdn79xp9LB3PQ0pT7w0ge/5GQopuZoV1ChVIILS3j1iIdshW3X9mT24N YRMpjc/OirkRbqWsZ71j0OJwu58YVaPyq/sklg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for es in the . zone
	DS=54404/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`es. 86400 IN RRSIG ( DS 8 1 86400 20261003050000 20260920040000 57780 . YoUjaYrWSZHdQtH4RMsmxNrqnBLtspaE4NGAzBUFzlaUBOPEPwA5u6Y7jP2U52L1ZBotSQtwKDbm Xqv3QxD48tCE93jJoU3g1TVAngoXvSpVsuwe9K15ly9UTYEzJB6GKT2DOtYjRVX5UtT7VaoqylmN zmXAIhh2rbzSis25Q2hdj6WS86vu6FaFEeS0c7XsnZJDXWxGLeQvX5MEuyVcVsqGzhS4MQ0SoR1U aZ/pG6IzKHd2bExzaK1Xsdn79xp9LB3PQ0pT7w0ge/5GQopuZoV1ChVIILS3j1iIdshW3X9mT24N YRMpjc/OirkRbqWsZ71j0OJwu58YVaPyq/sklg== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=54404/SHA-256 is now in the chain-of-trust
	`es. 86400 IN DS ( 54404 8 2 c130df280cd8ebb99c8b6c8335b9fd5f1d709641494e044c8085b1ac21833b47 )`
	Query to g.nic.es for es/DNSKEY
	Received 873 bytes from 204.61.217.1
	;; Response received from [204.61.217.1] 873 octets ;; HEADER SECTION ;; id = 18481 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (3 records) es. 86400 IN DNSKEY ( 256 3 8 AwEAAa6pIoHWeOa1jJOgEjE64T91B37zSCTGp6iPBo5qH+o7U7DRDyL7LqnTUnbzK6EtsDltOVc8 CJJDgF/J0wMFeHnXo71rhlqncSmareJptRT/ZuStXN07rugunnPa59i0KB63y6k38yyVWMyada5/ vtW67aSyIIhwdlk2md3LIH/qkD6eX3DQlahBiXnZOtunmaoGexyaMnbTLJsqelCIy+iR8bcArJnn FZQt29RHq0ghZete/h+CrKocLV1/55sIbyuXU/5kjD7ouacadN/i4moNQNSdUcXRQi48IWWFhaKi ZZacZKPHBp90OTgh31ZKIV0ot6uEWiaL3vMlK/68pfU= ) ; keytag 18030 es. 86400 IN DNSKEY ( 257 3 8 AwEAAa5NdXYbSw7Xsd5m3k15HRCjmQaywwqvVrYtP9c9dB+vs2lCpRO8A5pxfSeHWzEswSRwIAUk avrM4cGFfSTajM4fYqc+Kfi1LIBErqa+K4YUvQ8w0kLk/Jh57RPeXjSb1kAyxKMqY7ODLH1hBc/I 9Mg0pVCi5MJ7L4RxIpiQy6Hq7DudX5/nvpgZ2oZT6fP34k2t0QfcT7TdC7NyOf+YCtoLCCfjybi3 m/NL79perMF6RQy7LBXXi+nKAMhfNcg0MaBziH+AnH8Sa4VitB8W6iC4SL8iCs7q5cFB0Ys3afaE bU+AXKL+MgS3TD6aDfWD7llSweMEPyGTV+ve89lCXb8= ) ; keytag 54404 es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20261003153412 20260919150731 54404 es. qJFrmurJ5Ow3SnDMMUV6dsuA8GIG3BcJBuf6+2uGr1iomwQr+VziOFZ8mWHjj+1E1DOP/6DF9ZNq jsXub2iJox8lSTy+oo7AFITekiSFcswgWRfa53bH827c1exo2mCIxCaEz8lg3LaGVaqgEIjhO7WP wzX87UhWmXfIqd2tNEruWVfo3UWc17QuVVfyLuAa4O7f7cpICbOf+IJOlI0C/aLVgce8OYB801Pn mjGWw0JW/bqECGpy9PGtvkAmarz3cN6TKYGOPw1V4nCUZsnMlhJhQgQTBI70XJMEEiQOyaFWWtEF wFBgGbXAJq6yMk3bMMPcSFXLwcJglPZ/wNvU9g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for es
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAa6pIoHWeOa1jJOgEjE64T91B37zSCTGp6iPBo5qH+o7U7DRDyL7LqnTUnbzK6EtsDltOVc8 CJJDgF/J0wMFeHnXo71rhlqncSmareJptRT/ZuStXN07rugunnPa59i0KB63y6k38yyVWMyada5/ vtW67aSyIIhwdlk2md3LIH/qkD6eX3DQlahBiXnZOtunmaoGexyaMnbTLJsqelCIy+iR8bcArJnn FZQt29RHq0ghZete/h+CrKocLV1/55sIbyuXU/5kjD7ouacadN/i4moNQNSdUcXRQi48IWWFhaKi ZZacZKPHBp90OTgh31ZKIV0ot6uEWiaL3vMlK/68pfU= ) ; keytag 18030`
	`es. 86400 IN DNSKEY ( 257 3 8 AwEAAa5NdXYbSw7Xsd5m3k15HRCjmQaywwqvVrYtP9c9dB+vs2lCpRO8A5pxfSeHWzEswSRwIAUk avrM4cGFfSTajM4fYqc+Kfi1LIBErqa+K4YUvQ8w0kLk/Jh57RPeXjSb1kAyxKMqY7ODLH1hBc/I 9Mg0pVCi5MJ7L4RxIpiQy6Hq7DudX5/nvpgZ2oZT6fP34k2t0QfcT7TdC7NyOf+YCtoLCCfjybi3 m/NL79perMF6RQy7LBXXi+nKAMhfNcg0MaBziH+AnH8Sa4VitB8W6iC4SL8iCs7q5cFB0Ys3afaE bU+AXKL+MgS3TD6aDfWD7llSweMEPyGTV+ve89lCXb8= ) ; keytag 54404`
	DNSKEY=54404/SEP is now in the chain-of-trust
	DS=54404/SHA-256 verifies DNSKEY=54404/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20261003153412 20260919150731 54404 es. qJFrmurJ5Ow3SnDMMUV6dsuA8GIG3BcJBuf6+2uGr1iomwQr+VziOFZ8mWHjj+1E1DOP/6DF9ZNq jsXub2iJox8lSTy+oo7AFITekiSFcswgWRfa53bH827c1exo2mCIxCaEz8lg3LaGVaqgEIjhO7WP wzX87UhWmXfIqd2tNEruWVfo3UWc17QuVVfyLuAa4O7f7cpICbOf+IJOlI0C/aLVgce8OYB801Pn mjGWw0JW/bqECGpy9PGtvkAmarz3cN6TKYGOPw1V4nCUZsnMlhJhQgQTBI70XJMEEiQOyaFWWtEF wFBgGbXAJq6yMk3bMMPcSFXLwcJglPZ/wNvU9g== )`
	RRSIG=54404 and DNSKEY=54404/SEP verifies the DNSKEY RRset
	DNSKEY=18030 is now in the chain-of-trust
	Query to g.nic.es for rediris.es/A
	Received 595 bytes from 204.61.217.1
	;; Response received from [204.61.217.1] 595 octets ;; HEADER SECTION ;; id = 65142 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rediris.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) rediris.es. 86400 IN NS chico.rediris.es. rediris.es. 86400 IN NS ns02.fccn.pt. rediris.es. 86400 IN NS sun.rediris.es. rediris.es. 86400 IN NS scsnms.switch.ch. rediris.es. 86400 IN DS 18739 8 1 fae92a298df5b776bb603fce3e033b7ec55c0b98 rediris.es. 86400 IN DS ( 18739 8 2 7ab62e59309f945313a8e6d35262aa691e6d1c2a7479d63405b54f88ddfc2d89 ) rediris.es. 86400 IN RRSIG ( DS 8 2 86400 20260922180105 20260908230745 18030 es. hsIMHR8LuKK/6rZVfLED2nyZHseJBw8m6zoCfkabCrrqZgn+STnbCsLQFPet8Bi0Dn4+aL+b+0Aa WfBF28dUYsrbAmZFYLtUag+UTTrpcFZzZH185qMjaO8FppUP1bvbmtlQoGu6JTpup8q6OLM2exyJ 9UwE6Y+p35kEbvLrxPshtr/X2zsVhGp44TyFBkLYAheAEzo4/WH4ypj+1T3uvE1GYLU9iCtGwlSW bZOh4uaBZe57dFYIUyRETj1a+hPrmeLPy4sXhWkVRS0BQt3JmsIxYwMjIsezxCvQWejo25USHRwa WIstz40iCnsH1RxqbZW/5XnMyzarf1Jk9t05JA== ) ;; ADDITIONAL SECTION (5 records) chico.rediris.es. 86400 IN A 162.219.54.2 sun.rediris.es. 86400 IN A 199.184.182.1 chico.rediris.es. 86400 IN AAAA 2620:10a:80eb::2 sun.rediris.es. 86400 IN AAAA 2620:171:808::1 ;; { "EDNS-VERSION": 0 }
	Query to c.nic.es for rediris.es/DNSKEY
	Received 605 bytes from 194.0.34.53
	;; Response received from [194.0.34.53] 605 octets ;; HEADER SECTION ;; id = 27197 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rediris.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) rediris.es. 86400 IN NS sun.rediris.es. rediris.es. 86400 IN NS ns02.fccn.pt. rediris.es. 86400 IN NS chico.rediris.es. rediris.es. 86400 IN NS scsnms.switch.ch. rediris.es. 86400 IN DS 18739 8 1 fae92a298df5b776bb603fce3e033b7ec55c0b98 rediris.es. 86400 IN DS ( 18739 8 2 7ab62e59309f945313a8e6d35262aa691e6d1c2a7479d63405b54f88ddfc2d89 ) rediris.es. 86400 IN RRSIG ( DS 8 2 86400 20260922180105 20260908230745 18030 es. hsIMHR8LuKK/6rZVfLED2nyZHseJBw8m6zoCfkabCrrqZgn+STnbCsLQFPet8Bi0Dn4+aL+b+0Aa WfBF28dUYsrbAmZFYLtUag+UTTrpcFZzZH185qMjaO8FppUP1bvbmtlQoGu6JTpup8q6OLM2exyJ 9UwE6Y+p35kEbvLrxPshtr/X2zsVhGp44TyFBkLYAheAEzo4/WH4ypj+1T3uvE1GYLU9iCtGwlSW bZOh4uaBZe57dFYIUyRETj1a+hPrmeLPy4sXhWkVRS0BQt3JmsIxYwMjIsezxCvQWejo25USHRwa WIstz40iCnsH1RxqbZW/5XnMyzarf1Jk9t05JA== ) ;; ADDITIONAL SECTION (5 records) sun.rediris.es. 86400 IN A 199.184.182.1 sun.rediris.es. 86400 IN AAAA 2620:171:808::1 chico.rediris.es. 86400 IN A 162.219.54.2 chico.rediris.es. 86400 IN AAAA 2620:10a:80eb::2 ;; { "EDNS-VERSION": 0 }
	Found child zone rediris.es

rediris.es

	Checking DS between es and rediris.es
	Query to h.nic.es for rediris.es/DS
	Received 413 bytes from 194.0.33.53
	;; Response received from [194.0.33.53] 413 octets ;; HEADER SECTION ;; id = 21561 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rediris.es. IN DS ;; ANSWER SECTION (3 records) rediris.es. 86400 IN DS 18739 8 1 fae92a298df5b776bb603fce3e033b7ec55c0b98 rediris.es. 86400 IN DS ( 18739 8 2 7ab62e59309f945313a8e6d35262aa691e6d1c2a7479d63405b54f88ddfc2d89 ) rediris.es. 86400 IN RRSIG ( DS 8 2 86400 20260922180105 20260908230745 18030 es. hsIMHR8LuKK/6rZVfLED2nyZHseJBw8m6zoCfkabCrrqZgn+STnbCsLQFPet8Bi0Dn4+aL+b+0Aa WfBF28dUYsrbAmZFYLtUag+UTTrpcFZzZH185qMjaO8FppUP1bvbmtlQoGu6JTpup8q6OLM2exyJ 9UwE6Y+p35kEbvLrxPshtr/X2zsVhGp44TyFBkLYAheAEzo4/WH4ypj+1T3uvE1GYLU9iCtGwlSW bZOh4uaBZe57dFYIUyRETj1a+hPrmeLPy4sXhWkVRS0BQt3JmsIxYwMjIsezxCvQWejo25USHRwa WIstz40iCnsH1RxqbZW/5XnMyzarf1Jk9t05JA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for rediris.es in the es zone
	DS=18739/SHA-1 uses a deprecated digest algorithm
	DS=18739/SHA-1 has algorithm RSASHA256
	DS=18739/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`rediris.es. 86400 IN RRSIG ( DS 8 2 86400 20260922180105 20260908230745 18030 es. hsIMHR8LuKK/6rZVfLED2nyZHseJBw8m6zoCfkabCrrqZgn+STnbCsLQFPet8Bi0Dn4+aL+b+0Aa WfBF28dUYsrbAmZFYLtUag+UTTrpcFZzZH185qMjaO8FppUP1bvbmtlQoGu6JTpup8q6OLM2exyJ 9UwE6Y+p35kEbvLrxPshtr/X2zsVhGp44TyFBkLYAheAEzo4/WH4ypj+1T3uvE1GYLU9iCtGwlSW bZOh4uaBZe57dFYIUyRETj1a+hPrmeLPy4sXhWkVRS0BQt3JmsIxYwMjIsezxCvQWejo25USHRwa WIstz40iCnsH1RxqbZW/5XnMyzarf1Jk9t05JA== )`
	RRSIG=18030 and DNSKEY=18030 verifies the DS RRset
	DS=18739/SHA-1 is now in the chain-of-trust
	`rediris.es. 86400 IN DS 18739 8 1 fae92a298df5b776bb603fce3e033b7ec55c0b98`
	`rediris.es. 86400 IN DS ( 18739 8 2 7ab62e59309f945313a8e6d35262aa691e6d1c2a7479d63405b54f88ddfc2d89 )`
	Query to sun.rediris.es for rediris.es/DNSKEY
	Received 1401 bytes from 199.184.182.1
	;; Response received from [199.184.182.1] 1401 octets ;; HEADER SECTION ;; id = 60769 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rediris.es. IN DNSKEY ;; ANSWER SECTION (3 records) rediris.es. 7200 IN DNSKEY ( 256 3 8 AwEAAe15x30wBZe8cD6vxBQllsNj/bv6I0sMsH0jzdWQoyz8ElxGiSk/Me7vTXA5fTNVBTNVK7ds ATuBemfjsnz2RSCXeeFsSs1+Y14GI+2+AAceXrXNex6Ts5PVDcZNtk+YF6RLaGuYoPESX6R/bYcq Y49xDNg/6FrPzocDVw4p82EXl4Bf/1G1nXbgTqigD4TcREXFct8k0xO5D3TFaSelHVHmqCmx/s2h jWwJk8jV6YfgUqko2MlQHH+nlBlubG7SH0/rnPzaXblDyfp2NmObcNeW5F+8IQLrmeY6gq060ELD FPhkbZOD+rOHKl84qXS6/UFydXQVh/EW5dRWIIHP8+8= ) ; keytag 1548 rediris.es. 7200 IN DNSKEY ( 257 3 8 AwEAAb4xrgeYyxIq9QaaNJ6YwYlDylWEuuLLR99Bx1MGqVb0ErcGVDXBfF0ll+p0wecc/4b0ZILF Vw7ikeRy1D3VDYOVwrExuSxmhjVuWSec1RYtVHZeSX/ZthV6lRNN9v+qJE44gxef8JDUkNwv885I eor4Oxc089ypJpGyKBVIMLW22RkHnrSIf4A4h3gW8IHjvUSWHGtdIQzKDlMuS7YACxyQRDbms66B IXM4JlhOisE1n6JIf6mhHj8B5qOO1OCil1vIu33i5cjXF8RaDTawHVUm56N1zxSsvKdrod0mbOXP fcy9HbmwfuAefcAYpeW8w2XoiP8/LIT2Il5MtOhfO0qMI3Nb7zldw5i6ZRMaL2NirlzR5W1qRBQk 6UTAWKpIJpMXNZ49bj70uhIWA9z0WdZdjVTcxPgyQy7lZLlIb1syZBygpPvZ89Is5T3i/ps37gkH jWkl5Q+J2hN7gjnqZnnEzNwXPqBVCPocwFuPcpicy6tUNB/hXrZyW5IZetMNZi6V2UjhGSwXExtW RF8Dol+A4YGYn+61KCZEim/M8Lep8QFMDmrl27xstJ/EiKC+8O3JsAxf84O8l8NX3CKXT/+YdOLJ sVYzUbTtBZJbZ8SQT6sHuEFGjWNYleIAhJnOyaj6MZprKkRrVPUb/DglLeSSv3wF9mMvOF45x9vy gvs1 ) ; keytag 18739 rediris.es. 7200 IN RRSIG ( DNSKEY 8 2 7200 20261020031657 20260920023249 18739 rediris.es. pnG45dqxK14qNhD1tD2KIG69LAdYu1p9eH38dCFgSsUaU8B1nXu7QZOShKoUTsubzrSryb2G+ism oBj5xKExq0SeRoM05nhfmQJqzq2lesLm7a0WSoSkjx+wF7xxGZS4PNWENFRLjkNMKWK5OV6O57qA pv6TOpICbXy24FZsnCodId9/qU8Xckvva4idAleSTntyY4qwUuy6ZOL2uzS0nW5g5l6TDc3mAo6N g0FRFOqPqE2W8usN51eixsgp5xNWc9fNWn0oChqiD2HCRJ1/iiHv+eRlVSi7goDlwZseDAfunuLH 6jQASJ542t9DIGBS+HQe6uwOxfIqJxcAp1HExGQAyTMyw+J5HWNxl7gMUgPLH6GqqyagWG8gTBtj 2wAL1jmqGn6CQ6LBpbgFaBMNq8isQ5mJ1RHdopsQF3npGfrYVGgMbkMpaUhpegFx6QwwwbA0i/D4 JZ9CDyjcMI+jUIKg1/GKC0aB9tqlpU31D2BXeEDLkk1H5U7GzJDjCwsyClYg3cArffu8rxe43N0+ BqSPhf9UzONtKJ/W/vnz+p6k+ejGbemi1LVk15wRZgeS2BRDi8rLKt2EAaN3W/j7o9DKgSFEhyfl IRNb+3ObLH4sdWp/D1kFERYYo8+3rVYoY7CmqmmjIhFwoAsGAdjUyVte6t4jYtqYTJXg3qGWvsA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for rediris.es
	`rediris.es. 7200 IN DNSKEY ( 256 3 8 AwEAAe15x30wBZe8cD6vxBQllsNj/bv6I0sMsH0jzdWQoyz8ElxGiSk/Me7vTXA5fTNVBTNVK7ds ATuBemfjsnz2RSCXeeFsSs1+Y14GI+2+AAceXrXNex6Ts5PVDcZNtk+YF6RLaGuYoPESX6R/bYcq Y49xDNg/6FrPzocDVw4p82EXl4Bf/1G1nXbgTqigD4TcREXFct8k0xO5D3TFaSelHVHmqCmx/s2h jWwJk8jV6YfgUqko2MlQHH+nlBlubG7SH0/rnPzaXblDyfp2NmObcNeW5F+8IQLrmeY6gq060ELD FPhkbZOD+rOHKl84qXS6/UFydXQVh/EW5dRWIIHP8+8= ) ; keytag 1548`
	rediris.es. 7200 IN DNSKEY ( 257 3 8 AwEAAb4xrgeYyxIq9QaaNJ6YwYlDylWEuuLLR99Bx1MGqVb0ErcGVDXBfF0ll+p0wecc/4b0ZILF Vw7ikeRy1D3VDYOVwrExuSxmhjVuWSec1RYtVHZeSX/ZthV6lRNN9v+qJE44gxef8JDUkNwv885I eor4Oxc089ypJpGyKBVIMLW22RkHnrSIf4A4h3gW8IHjvUSWHGtdIQzKDlMuS7YACxyQRDbms66B IXM4JlhOisE1n6JIf6mhHj8B5qOO1OCil1vIu33i5cjXF8RaDTawHVUm56N1zxSsvKdrod0mbOXP fcy9HbmwfuAefcAYpeW8w2XoiP8/LIT2Il5MtOhfO0qMI3Nb7zldw5i6ZRMaL2NirlzR5W1qRBQk 6UTAWKpIJpMXNZ49bj70uhIWA9z0WdZdjVTcxPgyQy7lZLlIb1syZBygpPvZ89Is5T3i/ps37gkH jWkl5Q+J2hN7gjnqZnnEzNwXPqBVCPocwFuPcpicy6tUNB/hXrZyW5IZetMNZi6V2UjhGSwXExtW RF8Dol+A4YGYn+61KCZEim/M8Lep8QFMDmrl27xstJ/EiKC+8O3JsAxf84O8l8NX3CKXT/+YdOLJ sVYzUbTtBZJbZ8SQT6sHuEFGjWNYleIAhJnOyaj6MZprKkRrVPUb/DglLeSSv3wF9mMvOF45x9vy gvs1 ) ; keytag 18739
	DNSKEY=18739/SEP is now in the chain-of-trust
	DS=18739/SHA-1 verifies DNSKEY=18739/SEP
	DS=18739/SHA-256 verifies DNSKEY=18739/SEP
	Found 1 RRSIGs over DNSKEY RRset
	rediris.es. 7200 IN RRSIG ( DNSKEY 8 2 7200 20261020031657 20260920023249 18739 rediris.es. pnG45dqxK14qNhD1tD2KIG69LAdYu1p9eH38dCFgSsUaU8B1nXu7QZOShKoUTsubzrSryb2G+ism oBj5xKExq0SeRoM05nhfmQJqzq2lesLm7a0WSoSkjx+wF7xxGZS4PNWENFRLjkNMKWK5OV6O57qA pv6TOpICbXy24FZsnCodId9/qU8Xckvva4idAleSTntyY4qwUuy6ZOL2uzS0nW5g5l6TDc3mAo6N g0FRFOqPqE2W8usN51eixsgp5xNWc9fNWn0oChqiD2HCRJ1/iiHv+eRlVSi7goDlwZseDAfunuLH 6jQASJ542t9DIGBS+HQe6uwOxfIqJxcAp1HExGQAyTMyw+J5HWNxl7gMUgPLH6GqqyagWG8gTBtj 2wAL1jmqGn6CQ6LBpbgFaBMNq8isQ5mJ1RHdopsQF3npGfrYVGgMbkMpaUhpegFx6QwwwbA0i/D4 JZ9CDyjcMI+jUIKg1/GKC0aB9tqlpU31D2BXeEDLkk1H5U7GzJDjCwsyClYg3cArffu8rxe43N0+ BqSPhf9UzONtKJ/W/vnz+p6k+ejGbemi1LVk15wRZgeS2BRDi8rLKt2EAaN3W/j7o9DKgSFEhyfl IRNb+3ObLH4sdWp/D1kFERYYo8+3rVYoY7CmqmmjIhFwoAsGAdjUyVte6t4jYtqYTJXg3qGWvsA= )
	RRSIG=18739 and DNSKEY=18739/SEP verifies the DNSKEY RRset
	DNSKEY=1548 is now in the chain-of-trust
	Query to chico.rediris.es for rediris.es/A
	Received 353 bytes from 162.219.54.2
	;; Response received from [162.219.54.2] 353 octets ;; HEADER SECTION ;; id = 8803 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rediris.es. IN A ;; ANSWER SECTION (2 records) rediris.es. 7200 IN A 130.206.13.20 rediris.es. 7200 IN RRSIG ( A 8 2 7200 20261020060019 20260920054707 1548 rediris.es. s7Ujf8crNjjRy6JreK/p+So5+HdMWV9gcqY7LYseEQSDPlQLf0ldz/OWVjyX7Wrj/koS/jrSCQqO dfuJvfYmhsIFR2Ewec7R+GaNoDAj0u9nt5DnEI++Ap9Iy8OFyQ2UPAXfmt47EOXcwoh2EXAgOAjg 077nmfrGLMbNoE5zD6I9RvTdrGrbBfmSyE/TPvjMWT59HcoxfzHEoRmh0RYBBYVOPV/W55kMRfPB mXplgZEmuR0DcOLW13vT1qtFQUDzk7MoycAXNccq/0y0joXp/Za47HxAyZsEo9RPjP/3dKyVGPgg 9hMT88utpOrVoUF4V7bPb77BjMMWBUp4K7UJzQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	chico.rediris.es is authoritative for rediris.es
	Found RRSIG signed by rediris.es zone
	Query to ns02.fccn.pt for rediris.es/SOA
	Received 1162 bytes from 193.136.2.228
	;; Response received from [193.136.2.228] 1162 octets ;; HEADER SECTION ;; id = 40968 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rediris.es. IN SOA ;; ANSWER SECTION (2 records) rediris.es. 7200 IN SOA ( sun.rediris.es. hostmaster.rediris.es. 2026096200 ;serial 14400 ;refresh 7200 ;retry 2419200 ;expire 7200 ;minimum ) rediris.es. 7200 IN RRSIG ( SOA 8 2 7200 20261020091451 20260920081451 1548 rediris.es. 57tR+po+VgNwyWigVLmS6dcNSK/U8y4vsBQZusQCZxxzMPUEH9pbwynqZN5K3W87JRtO6M2kIPWD 0pWc7D4RpDgk6lJ+5Evx8yRIMNVDfN3uc7Wi0bEF8CFiAZDYB8LuwugXquQ8zWqs20kRhYXMYMHZ Z5nfJHEZXSkUuBVckiv3zwsYp5EONpE8j+RELvhAJbFchCAblZ61YGlKe/X8F4XxnW6VBhy/KUWD 6Ko48Xe1P+DuugdKPbdy3T8XfSu61YHLiCUrnMKSFGsp38sVxHMAj6bxLtutWWB1+rV/w0Ctp+GM sfLz32ltE88CAFxKZmsXzbZGnx5npmr4gBdFMw== ) ;; AUTHORITY SECTION (5 records) rediris.es. 7200 IN NS sun.rediris.es. rediris.es. 7200 IN NS ns02.fccn.pt. rediris.es. 7200 IN NS chico.rediris.es. rediris.es. 7200 IN NS scsnms.switch.ch. rediris.es. 7200 IN RRSIG ( NS 8 2 7200 20261020032958 20260920030048 1548 rediris.es. UbYV6E86lOxiGwct6LnUwcF7ltYUqek+Ec/xgGwsqfAlEkY+0qJR3tMuwFgd5C++hdUYY4NFd8RW zOiRYwaALB/E9XaH/f4ynnRRTZic6R1Ml262us+zimmJD/9Unu5q7ZyS2sWTTOm0+7IXLbyJx6aZ 3gH7qbxNQPaw3rtO7K1F1EyCwzJlK6u/PYise8rFrTl/M+KDpwsdkfKRxk/BO6tasAtH+2MsiyXe TOPnVW8Gkkw1XUBZmlEBGgNxcdLLr0xzrlBpwjSIyCMsFvx62G8dunmwHEDSjka/zaKswoQK/98K aaot9nYqyINiKcO0QsauDJzkjdxJ/ev48yAyCw== ) ;; ADDITIONAL SECTION (6 records) sun.rediris.es. 28800 IN A 199.184.182.1 chico.rediris.es. 28800 IN A 162.219.54.2 sun.rediris.es. 7200 IN AAAA 2620:171:808::1 chico.rediris.es. 7200 IN AAAA 2620:10a:80eb::2 sun.rediris.es. 28800 IN RRSIG ( A 8 3 28800 20261020030837 20260920022651 1548 rediris.es. SOrBbugwQZojhFJ+dK479irBmQnm9TlWcSvn5Aa66fP450yGfrWPWUOFe00D+W/dRfq5tcrNNlz2 L+VngsbTRYXRRvMEEvp0DRVBCCPkYxZU8ol/3hqXrRn8mjs7maNMFi/j5S+9yTRltZc1LKQnUtsE imS1BbWqmBzEh+4+Hs3uzIY67HhIcTCyGSxozZFW8wtPVDOpVD8F/pIinc+N2b7phcaDI4+svXjg Emw/WeN4ndW1ZDoWnAijjATI9QJALwDXOCOYjn4z0Sv8X7Z/mpEVqncdmyFAwZ2N/d8AUvtbLWKn vaepm7+uPOC/MNXLJxNUhRHtelfMZ3eg7rZVmg== ) ;; { "EDNS-VERSION": 0 }
	Query to sun.rediris.es for rediris.es/SOA
	Received 1090 bytes from 199.184.182.1
	;; Response received from [199.184.182.1] 1090 octets ;; HEADER SECTION ;; id = 49208 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rediris.es. IN SOA ;; ANSWER SECTION (2 records) rediris.es. 7200 IN SOA ( sun.rediris.es. hostmaster.rediris.es. 2026096200 ;serial 14400 ;refresh 7200 ;retry 2419200 ;expire 7200 ;minimum ) rediris.es. 7200 IN RRSIG ( SOA 8 2 7200 20261020091451 20260920081451 1548 rediris.es. 57tR+po+VgNwyWigVLmS6dcNSK/U8y4vsBQZusQCZxxzMPUEH9pbwynqZN5K3W87JRtO6M2kIPWD 0pWc7D4RpDgk6lJ+5Evx8yRIMNVDfN3uc7Wi0bEF8CFiAZDYB8LuwugXquQ8zWqs20kRhYXMYMHZ Z5nfJHEZXSkUuBVckiv3zwsYp5EONpE8j+RELvhAJbFchCAblZ61YGlKe/X8F4XxnW6VBhy/KUWD 6Ko48Xe1P+DuugdKPbdy3T8XfSu61YHLiCUrnMKSFGsp38sVxHMAj6bxLtutWWB1+rV/w0Ctp+GM sfLz32ltE88CAFxKZmsXzbZGnx5npmr4gBdFMw== ) ;; AUTHORITY SECTION (5 records) rediris.es. 7200 IN NS sun.rediris.es. rediris.es. 7200 IN NS ns02.fccn.pt. rediris.es. 7200 IN NS chico.rediris.es. rediris.es. 7200 IN NS scsnms.switch.ch. rediris.es. 7200 IN RRSIG ( NS 8 2 7200 20261020032958 20260920030048 1548 rediris.es. UbYV6E86lOxiGwct6LnUwcF7ltYUqek+Ec/xgGwsqfAlEkY+0qJR3tMuwFgd5C++hdUYY4NFd8RW zOiRYwaALB/E9XaH/f4ynnRRTZic6R1Ml262us+zimmJD/9Unu5q7ZyS2sWTTOm0+7IXLbyJx6aZ 3gH7qbxNQPaw3rtO7K1F1EyCwzJlK6u/PYise8rFrTl/M+KDpwsdkfKRxk/BO6tasAtH+2MsiyXe TOPnVW8Gkkw1XUBZmlEBGgNxcdLLr0xzrlBpwjSIyCMsFvx62G8dunmwHEDSjka/zaKswoQK/98K aaot9nYqyINiKcO0QsauDJzkjdxJ/ev48yAyCw== ) ;; ADDITIONAL SECTION (3 records) sun.rediris.es. 28800 IN A 199.184.182.1 sun.rediris.es. 28800 IN RRSIG ( A 8 3 28800 20261020030837 20260920022651 1548 rediris.es. SOrBbugwQZojhFJ+dK479irBmQnm9TlWcSvn5Aa66fP450yGfrWPWUOFe00D+W/dRfq5tcrNNlz2 L+VngsbTRYXRRvMEEvp0DRVBCCPkYxZU8ol/3hqXrRn8mjs7maNMFi/j5S+9yTRltZc1LKQnUtsE imS1BbWqmBzEh+4+Hs3uzIY67HhIcTCyGSxozZFW8wtPVDOpVD8F/pIinc+N2b7phcaDI4+svXjg Emw/WeN4ndW1ZDoWnAijjATI9QJALwDXOCOYjn4z0Sv8X7Z/mpEVqncdmyFAwZ2N/d8AUvtbLWKn vaepm7+uPOC/MNXLJxNUhRHtelfMZ3eg7rZVmg== ) ;; { "EDNS-VERSION": 0 }
	Query to scsnms.switch.ch for rediris.es/SOA
	Received 388 bytes from 130.59.31.26
	;; Response received from [130.59.31.26] 388 octets ;; HEADER SECTION ;; id = 60809 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rediris.es. IN SOA ;; ANSWER SECTION (2 records) rediris.es. 7200 IN SOA ( sun.rediris.es. hostmaster.rediris.es. 2026096200 ;serial 14400 ;refresh 7200 ;retry 2419200 ;expire 7200 ;minimum ) rediris.es. 7200 IN RRSIG ( SOA 8 2 7200 20261020091451 20260920081451 1548 rediris.es. 57tR+po+VgNwyWigVLmS6dcNSK/U8y4vsBQZusQCZxxzMPUEH9pbwynqZN5K3W87JRtO6M2kIPWD 0pWc7D4RpDgk6lJ+5Evx8yRIMNVDfN3uc7Wi0bEF8CFiAZDYB8LuwugXquQ8zWqs20kRhYXMYMHZ Z5nfJHEZXSkUuBVckiv3zwsYp5EONpE8j+RELvhAJbFchCAblZ61YGlKe/X8F4XxnW6VBhy/KUWD 6Ko48Xe1P+DuugdKPbdy3T8XfSu61YHLiCUrnMKSFGsp38sVxHMAj6bxLtutWWB1+rV/w0Ctp+GM sfLz32ltE88CAFxKZmsXzbZGnx5npmr4gBdFMw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to chico.rediris.es for rediris.es/A
	rediris.es A RR has value 130.206.13.20
	Found 1 RRSIGs over A RRset
	`rediris.es. 7200 IN RRSIG ( A 8 2 7200 20261020060019 20260920054707 1548 rediris.es. s7Ujf8crNjjRy6JreK/p+So5+HdMWV9gcqY7LYseEQSDPlQLf0ldz/OWVjyX7Wrj/koS/jrSCQqO dfuJvfYmhsIFR2Ewec7R+GaNoDAj0u9nt5DnEI++Ap9Iy8OFyQ2UPAXfmt47EOXcwoh2EXAgOAjg 077nmfrGLMbNoE5zD6I9RvTdrGrbBfmSyE/TPvjMWT59HcoxfzHEoRmh0RYBBYVOPV/W55kMRfPB mXplgZEmuR0DcOLW13vT1qtFQUDzk7MoycAXNccq/0y0joXp/Za47HxAyZsEo9RPjP/3dKyVGPgg 9hMT88utpOrVoUF4V7bPb77BjMMWBUp4K7UJzQ== )`
	RRSIG=1548 and DNSKEY=1548 verifies the A RRset

rediris.es

	Query to ns02.fccn.pt for rediris.es/A
	Received 1131 bytes from 193.136.2.228
	;; Response received from [193.136.2.228] 1131 octets ;; HEADER SECTION ;; id = 24278 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rediris.es. IN A ;; ANSWER SECTION (2 records) rediris.es. 7200 IN A 130.206.13.20 rediris.es. 7200 IN RRSIG ( A 8 2 7200 20261020060019 20260920054707 1548 rediris.es. s7Ujf8crNjjRy6JreK/p+So5+HdMWV9gcqY7LYseEQSDPlQLf0ldz/OWVjyX7Wrj/koS/jrSCQqO dfuJvfYmhsIFR2Ewec7R+GaNoDAj0u9nt5DnEI++Ap9Iy8OFyQ2UPAXfmt47EOXcwoh2EXAgOAjg 077nmfrGLMbNoE5zD6I9RvTdrGrbBfmSyE/TPvjMWT59HcoxfzHEoRmh0RYBBYVOPV/W55kMRfPB mXplgZEmuR0DcOLW13vT1qtFQUDzk7MoycAXNccq/0y0joXp/Za47HxAyZsEo9RPjP/3dKyVGPgg 9hMT88utpOrVoUF4V7bPb77BjMMWBUp4K7UJzQ== ) ;; AUTHORITY SECTION (5 records) rediris.es. 7200 IN NS scsnms.switch.ch. rediris.es. 7200 IN NS chico.rediris.es. rediris.es. 7200 IN NS sun.rediris.es. rediris.es. 7200 IN NS ns02.fccn.pt. rediris.es. 7200 IN RRSIG ( NS 8 2 7200 20261020032958 20260920030048 1548 rediris.es. UbYV6E86lOxiGwct6LnUwcF7ltYUqek+Ec/xgGwsqfAlEkY+0qJR3tMuwFgd5C++hdUYY4NFd8RW zOiRYwaALB/E9XaH/f4ynnRRTZic6R1Ml262us+zimmJD/9Unu5q7ZyS2sWTTOm0+7IXLbyJx6aZ 3gH7qbxNQPaw3rtO7K1F1EyCwzJlK6u/PYise8rFrTl/M+KDpwsdkfKRxk/BO6tasAtH+2MsiyXe TOPnVW8Gkkw1XUBZmlEBGgNxcdLLr0xzrlBpwjSIyCMsFvx62G8dunmwHEDSjka/zaKswoQK/98K aaot9nYqyINiKcO0QsauDJzkjdxJ/ev48yAyCw== ) ;; ADDITIONAL SECTION (6 records) sun.rediris.es. 28800 IN A 199.184.182.1 chico.rediris.es. 28800 IN A 162.219.54.2 sun.rediris.es. 7200 IN AAAA 2620:171:808::1 chico.rediris.es. 7200 IN AAAA 2620:10a:80eb::2 sun.rediris.es. 28800 IN RRSIG ( A 8 3 28800 20261020030837 20260920022651 1548 rediris.es. SOrBbugwQZojhFJ+dK479irBmQnm9TlWcSvn5Aa66fP450yGfrWPWUOFe00D+W/dRfq5tcrNNlz2 L+VngsbTRYXRRvMEEvp0DRVBCCPkYxZU8ol/3hqXrRn8mjs7maNMFi/j5S+9yTRltZc1LKQnUtsE imS1BbWqmBzEh+4+Hs3uzIY67HhIcTCyGSxozZFW8wtPVDOpVD8F/pIinc+N2b7phcaDI4+svXjg Emw/WeN4ndW1ZDoWnAijjATI9QJALwDXOCOYjn4z0Sv8X7Z/mpEVqncdmyFAwZ2N/d8AUvtbLWKn vaepm7+uPOC/MNXLJxNUhRHtelfMZ3eg7rZVmg== ) ;; { "EDNS-VERSION": 0 }
	ns02.fccn.pt is authoritative for rediris.es
	Found RRSIG signed by rediris.es zone
	Query to ns02.fccn.pt for rediris.es/A
	rediris.es A RR has value 130.206.13.20
	Found 1 RRSIGs over A RRset
	`rediris.es. 7200 IN RRSIG ( A 8 2 7200 20261020060019 20260920054707 1548 rediris.es. s7Ujf8crNjjRy6JreK/p+So5+HdMWV9gcqY7LYseEQSDPlQLf0ldz/OWVjyX7Wrj/koS/jrSCQqO dfuJvfYmhsIFR2Ewec7R+GaNoDAj0u9nt5DnEI++Ap9Iy8OFyQ2UPAXfmt47EOXcwoh2EXAgOAjg 077nmfrGLMbNoE5zD6I9RvTdrGrbBfmSyE/TPvjMWT59HcoxfzHEoRmh0RYBBYVOPV/W55kMRfPB mXplgZEmuR0DcOLW13vT1qtFQUDzk7MoycAXNccq/0y0joXp/Za47HxAyZsEo9RPjP/3dKyVGPgg 9hMT88utpOrVoUF4V7bPb77BjMMWBUp4K7UJzQ== )`
	RRSIG=1548 and DNSKEY=1548 verifies the A RRset

rediris.es

	Query to sun.rediris.es for rediris.es/A
	Received 1059 bytes from 199.184.182.1
	;; Response received from [199.184.182.1] 1059 octets ;; HEADER SECTION ;; id = 55847 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rediris.es. IN A ;; ANSWER SECTION (2 records) rediris.es. 7200 IN A 130.206.13.20 rediris.es. 7200 IN RRSIG ( A 8 2 7200 20261020060019 20260920054707 1548 rediris.es. s7Ujf8crNjjRy6JreK/p+So5+HdMWV9gcqY7LYseEQSDPlQLf0ldz/OWVjyX7Wrj/koS/jrSCQqO dfuJvfYmhsIFR2Ewec7R+GaNoDAj0u9nt5DnEI++Ap9Iy8OFyQ2UPAXfmt47EOXcwoh2EXAgOAjg 077nmfrGLMbNoE5zD6I9RvTdrGrbBfmSyE/TPvjMWT59HcoxfzHEoRmh0RYBBYVOPV/W55kMRfPB mXplgZEmuR0DcOLW13vT1qtFQUDzk7MoycAXNccq/0y0joXp/Za47HxAyZsEo9RPjP/3dKyVGPgg 9hMT88utpOrVoUF4V7bPb77BjMMWBUp4K7UJzQ== ) ;; AUTHORITY SECTION (5 records) rediris.es. 7200 IN NS sun.rediris.es. rediris.es. 7200 IN NS ns02.fccn.pt. rediris.es. 7200 IN NS chico.rediris.es. rediris.es. 7200 IN NS scsnms.switch.ch. rediris.es. 7200 IN RRSIG ( NS 8 2 7200 20261020032958 20260920030048 1548 rediris.es. UbYV6E86lOxiGwct6LnUwcF7ltYUqek+Ec/xgGwsqfAlEkY+0qJR3tMuwFgd5C++hdUYY4NFd8RW zOiRYwaALB/E9XaH/f4ynnRRTZic6R1Ml262us+zimmJD/9Unu5q7ZyS2sWTTOm0+7IXLbyJx6aZ 3gH7qbxNQPaw3rtO7K1F1EyCwzJlK6u/PYise8rFrTl/M+KDpwsdkfKRxk/BO6tasAtH+2MsiyXe TOPnVW8Gkkw1XUBZmlEBGgNxcdLLr0xzrlBpwjSIyCMsFvx62G8dunmwHEDSjka/zaKswoQK/98K aaot9nYqyINiKcO0QsauDJzkjdxJ/ev48yAyCw== ) ;; ADDITIONAL SECTION (3 records) sun.rediris.es. 28800 IN A 199.184.182.1 sun.rediris.es. 28800 IN RRSIG ( A 8 3 28800 20261020030837 20260920022651 1548 rediris.es. SOrBbugwQZojhFJ+dK479irBmQnm9TlWcSvn5Aa66fP450yGfrWPWUOFe00D+W/dRfq5tcrNNlz2 L+VngsbTRYXRRvMEEvp0DRVBCCPkYxZU8ol/3hqXrRn8mjs7maNMFi/j5S+9yTRltZc1LKQnUtsE imS1BbWqmBzEh+4+Hs3uzIY67HhIcTCyGSxozZFW8wtPVDOpVD8F/pIinc+N2b7phcaDI4+svXjg Emw/WeN4ndW1ZDoWnAijjATI9QJALwDXOCOYjn4z0Sv8X7Z/mpEVqncdmyFAwZ2N/d8AUvtbLWKn vaepm7+uPOC/MNXLJxNUhRHtelfMZ3eg7rZVmg== ) ;; { "EDNS-VERSION": 0 }
	sun.rediris.es is authoritative for rediris.es
	Found RRSIG signed by rediris.es zone
	Query to sun.rediris.es for rediris.es/A
	rediris.es A RR has value 130.206.13.20
	Found 1 RRSIGs over A RRset
	`rediris.es. 7200 IN RRSIG ( A 8 2 7200 20261020060019 20260920054707 1548 rediris.es. s7Ujf8crNjjRy6JreK/p+So5+HdMWV9gcqY7LYseEQSDPlQLf0ldz/OWVjyX7Wrj/koS/jrSCQqO dfuJvfYmhsIFR2Ewec7R+GaNoDAj0u9nt5DnEI++Ap9Iy8OFyQ2UPAXfmt47EOXcwoh2EXAgOAjg 077nmfrGLMbNoE5zD6I9RvTdrGrbBfmSyE/TPvjMWT59HcoxfzHEoRmh0RYBBYVOPV/W55kMRfPB mXplgZEmuR0DcOLW13vT1qtFQUDzk7MoycAXNccq/0y0joXp/Za47HxAyZsEo9RPjP/3dKyVGPgg 9hMT88utpOrVoUF4V7bPb77BjMMWBUp4K7UJzQ== )`
	RRSIG=1548 and DNSKEY=1548 verifies the A RRset

rediris.es

	Query to scsnms.switch.ch for rediris.es/A
	Received 353 bytes from 130.59.31.26
	;; Response received from [130.59.31.26] 353 octets ;; HEADER SECTION ;; id = 23663 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rediris.es. IN A ;; ANSWER SECTION (2 records) rediris.es. 7200 IN A 130.206.13.20 rediris.es. 7200 IN RRSIG ( A 8 2 7200 20261020060019 20260920054707 1548 rediris.es. s7Ujf8crNjjRy6JreK/p+So5+HdMWV9gcqY7LYseEQSDPlQLf0ldz/OWVjyX7Wrj/koS/jrSCQqO dfuJvfYmhsIFR2Ewec7R+GaNoDAj0u9nt5DnEI++Ap9Iy8OFyQ2UPAXfmt47EOXcwoh2EXAgOAjg 077nmfrGLMbNoE5zD6I9RvTdrGrbBfmSyE/TPvjMWT59HcoxfzHEoRmh0RYBBYVOPV/W55kMRfPB mXplgZEmuR0DcOLW13vT1qtFQUDzk7MoycAXNccq/0y0joXp/Za47HxAyZsEo9RPjP/3dKyVGPgg 9hMT88utpOrVoUF4V7bPb77BjMMWBUp4K7UJzQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	scsnms.switch.ch is authoritative for rediris.es
	Found RRSIG signed by rediris.es zone
	Query to scsnms.switch.ch for rediris.es/A
	rediris.es A RR has value 130.206.13.20
	Found 1 RRSIGs over A RRset
	`rediris.es. 7200 IN RRSIG ( A 8 2 7200 20261020060019 20260920054707 1548 rediris.es. s7Ujf8crNjjRy6JreK/p+So5+HdMWV9gcqY7LYseEQSDPlQLf0ldz/OWVjyX7Wrj/koS/jrSCQqO dfuJvfYmhsIFR2Ewec7R+GaNoDAj0u9nt5DnEI++Ap9Iy8OFyQ2UPAXfmt47EOXcwoh2EXAgOAjg 077nmfrGLMbNoE5zD6I9RvTdrGrbBfmSyE/TPvjMWT59HcoxfzHEoRmh0RYBBYVOPV/W55kMRfPB mXplgZEmuR0DcOLW13vT1qtFQUDzk7MoycAXNccq/0y0joXp/Za47HxAyZsEo9RPjP/3dKyVGPgg 9hMT88utpOrVoUF4V7bPb77BjMMWBUp4K7UJzQ== )`
	RRSIG=1548 and DNSKEY=1548 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test rediris.es at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: