DNSSEC Analyzer - ripe.net

Domain Name:

Time: 2020-09-26 18:36:35 UTC, NTP stratum 4

Analyzing DNSSEC problems for ripe.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (1139 bytes) ;; HEADER SECTION ;; id = 32692 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	DNSKEY=26116 is now in the chain-of-trust
	Query to e.root-servers.net for ripe.net/A
	Received 1165 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (1165 bytes) ;; HEADER SECTION ;; id = 4615 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . G10V9kyXtqAisbu8RpFMS+dpqQ0Eo9zrXJ4tEXJCATAoOx4OvvgnmH/Kkwb9v45DkluNAZFOuvfA Hrv5fjahA37G5k6xi6BbRY/hit9fLmXZVm5QPYCYTF+DkvpQX3Dcv+JCfHcGjpBhBAziM3yRFsDt S80Zf90rL+Tg68kki+50muXazPSbZiXJxETSCBvRwgrUjhQttjyXeV0pj4XWv8Y+5dBThAOm67Kp qMDygcpA5HQ5b1dpNmszfx+7O5Gh/K5YaUw3kr/jVsqpsV4qwxo2H6JbHSLE1aycL+0WV+Ir1/S6 OohDbKOzbtSWwUUHBFqKRSbTth2EspqqvFE1SQ== ) ;; ADDITIONAL SECTION (27 records) l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to l.root-servers.net for net/DNSKEY
	Received 1160 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (1160 bytes) ;; HEADER SECTION ;; id = 61602 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . G10V9kyXtqAisbu8RpFMS+dpqQ0Eo9zrXJ4tEXJCATAoOx4OvvgnmH/Kkwb9v45DkluNAZFOuvfA Hrv5fjahA37G5k6xi6BbRY/hit9fLmXZVm5QPYCYTF+DkvpQX3Dcv+JCfHcGjpBhBAziM3yRFsDt S80Zf90rL+Tg68kki+50muXazPSbZiXJxETSCBvRwgrUjhQttjyXeV0pj4XWv8Y+5dBThAOm67Kp qMDygcpA5HQ5b1dpNmszfx+7O5Gh/K5YaUw3kr/jVsqpsV4qwxo2H6JbHSLE1aycL+0WV+Ir1/S6 OohDbKOzbtSWwUUHBFqKRSbTth2EspqqvFE1SQ== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to m.root-servers.net for net/DS
	Received 367 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (367 bytes) ;; HEADER SECTION ;; id = 37741 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . G10V9kyXtqAisbu8RpFMS+dpqQ0Eo9zrXJ4tEXJCATAoOx4OvvgnmH/Kkwb9v45DkluNAZFOuvfA Hrv5fjahA37G5k6xi6BbRY/hit9fLmXZVm5QPYCYTF+DkvpQX3Dcv+JCfHcGjpBhBAziM3yRFsDt S80Zf90rL+Tg68kki+50muXazPSbZiXJxETSCBvRwgrUjhQttjyXeV0pj4XWv8Y+5dBThAOm67Kp qMDygcpA5HQ5b1dpNmszfx+7O5Gh/K5YaUw3kr/jVsqpsV4qwxo2H6JbHSLE1aycL+0WV+Ir1/S6 OohDbKOzbtSWwUUHBFqKRSbTth2EspqqvFE1SQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . G10V9kyXtqAisbu8RpFMS+dpqQ0Eo9zrXJ4tEXJCATAoOx4OvvgnmH/Kkwb9v45DkluNAZFOuvfA Hrv5fjahA37G5k6xi6BbRY/hit9fLmXZVm5QPYCYTF+DkvpQX3Dcv+JCfHcGjpBhBAziM3yRFsDt S80Zf90rL+Tg68kki+50muXazPSbZiXJxETSCBvRwgrUjhQttjyXeV0pj4XWv8Y+5dBThAOm67Kp qMDygcpA5HQ5b1dpNmszfx+7O5Gh/K5YaUw3kr/jVsqpsV4qwxo2H6JbHSLE1aycL+0WV+Ir1/S6 OohDbKOzbtSWwUUHBFqKRSbTth2EspqqvFE1SQ== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to c.gtld-servers.net for net/DNSKEY
	Received 775 bytes from 192.26.92.30
	;; Answer received from 192.26.92.30 (775 bytes) ;; HEADER SECTION ;; id = 12540 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQPeYYme8NvhAl+0XjyGqHVep4Y1T2OrRmO+L3QGULBlOe571PnxI+gRyXCQmtN7WpoJxzALFSVB PsggqwOP+wnmCx8DZ49NHrfS7WbMtoYHTtiaIvHTjZZ88leuCtNLqfIH8N1Ax68Xnf4uKobYFgZX j0M2Zi7YI84iFkCpIyZk6VIiJpvpNgyCK5mWetPF2zmO2jXC8M045JIPam38reXD ) ; Key ID = 56519 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201006162830 20200921162330 35886 net. I5SEYkcn7b0OSaqHBPyBrR25ePbZAtjjZ/aH6+cFXT5fsUmy8PL/dCCRKgaic9EzeEE85xdSiXsE y4yYwII2YZVPQI+5u7O4MFpY37M1UkQ1rmQXBascJht4mccg9hgf5cegRpLtHwQPUaX5nlWFJgNo RUUroXue6Rp6PgtWAaqHqZDLvKFwlMyaIY/fBvPusWVqcLr45rqDB7YD9VUNmP9Q4Nrcy2Lsb99O qIjIVcy+SyqPqjrkM/PYkTNYQYaXtrVSxht0V6/aZp4YWLjxDJdotxu4JXJXHFGBRLev8i4Bi3T5 mAEU2E6IBU010cPmFUhXTwrHV/e4ip3dE6HA8g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQPeYYme8NvhAl+0XjyGqHVep4Y1T2OrRmO+L3QGULBlOe571PnxI+gRyXCQmtN7WpoJxzALFSVB PsggqwOP+wnmCx8DZ49NHrfS7WbMtoYHTtiaIvHTjZZ88leuCtNLqfIH8N1Ax68Xnf4uKobYFgZX j0M2Zi7YI84iFkCpIyZk6VIiJpvpNgyCK5mWetPF2zmO2jXC8M045JIPam38reXD ) ; Key ID = 56519`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201006162830 20200921162330 35886 net. I5SEYkcn7b0OSaqHBPyBrR25ePbZAtjjZ/aH6+cFXT5fsUmy8PL/dCCRKgaic9EzeEE85xdSiXsE y4yYwII2YZVPQI+5u7O4MFpY37M1UkQ1rmQXBascJht4mccg9hgf5cegRpLtHwQPUaX5nlWFJgNo RUUroXue6Rp6PgtWAaqHqZDLvKFwlMyaIY/fBvPusWVqcLr45rqDB7YD9VUNmP9Q4Nrcy2Lsb99O qIjIVcy+SyqPqjrkM/PYkTNYQYaXtrVSxht0V6/aZp4YWLjxDJdotxu4JXJXHFGBRLev8i4Bi3T5 mAEU2E6IBU010cPmFUhXTwrHV/e4ip3dE6HA8g== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=56519 is now in the chain-of-trust
	Query to b.gtld-servers.net for ripe.net/A
	Received 629 bytes from 192.33.14.30
	;; Answer received from 192.33.14.30 (629 bytes) ;; HEADER SECTION ;; id = 23297 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ripe.net. 172800 IN NS tinnie.arin.net. ripe.net. 172800 IN NS ns4.apnic.net. ripe.net. 172800 IN NS ns3.afrinic.net. ripe.net. 172800 IN NS manus.authdns.ripe.net. ripe.net. 172800 IN NS ns3.lacnic.net. ripe.net. 86400 IN DS ( 51356 8 2 9e5a6d4d413dc6d27e8d412e737dd87fe6ecfda7c4a14927a145dfdd05fc0a65 ) ripe.net. 86400 IN RRSIG ( DS 8 2 86400 20200930065620 20200923054620 56519 net. ef0DuSRwo/g1GCjFyjFBcnZb//IshGEPKo3KF2XfnP3HBaroaJgoglJcYd6vna0xSQAIoG57TOM4 XKivlbsoRBTdZ7g/zzimYulf8B2w+F5eWL6UvgY9lEghx9ekJUvzKkK+Ufp406PBybKlpDV8Th/4 SLw9pyOKyvrFCvPlhwLTvN08EvWGQv1a070rLviGL23jvBHMuy5QIB1O+nLNnw== ) ;; ADDITIONAL SECTION (11 records) tinnie.arin.net. 172800 IN A 199.212.0.53 tinnie.arin.net. 172800 IN AAAA 2001:500:13::c7d4:35 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 manus.authdns.ripe.net. 172800 IN A 193.0.9.7 manus.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::7 ns3.lacnic.net. 172800 IN A 200.3.13.14 ns3.lacnic.net. 172800 IN AAAA 2001:13c7:7002:3000::14 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.gtld-servers.net for ripe.net/DNSKEY
	Received 629 bytes from 192.12.94.30
	;; Answer received from 192.12.94.30 (629 bytes) ;; HEADER SECTION ;; id = 55575 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ripe.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ripe.net. 172800 IN NS tinnie.arin.net. ripe.net. 172800 IN NS ns4.apnic.net. ripe.net. 172800 IN NS ns3.afrinic.net. ripe.net. 172800 IN NS manus.authdns.ripe.net. ripe.net. 172800 IN NS ns3.lacnic.net. ripe.net. 86400 IN DS ( 51356 8 2 9e5a6d4d413dc6d27e8d412e737dd87fe6ecfda7c4a14927a145dfdd05fc0a65 ) ripe.net. 86400 IN RRSIG ( DS 8 2 86400 20200930065620 20200923054620 56519 net. ef0DuSRwo/g1GCjFyjFBcnZb//IshGEPKo3KF2XfnP3HBaroaJgoglJcYd6vna0xSQAIoG57TOM4 XKivlbsoRBTdZ7g/zzimYulf8B2w+F5eWL6UvgY9lEghx9ekJUvzKkK+Ufp406PBybKlpDV8Th/4 SLw9pyOKyvrFCvPlhwLTvN08EvWGQv1a070rLviGL23jvBHMuy5QIB1O+nLNnw== ) ;; ADDITIONAL SECTION (11 records) tinnie.arin.net. 172800 IN A 199.212.0.53 tinnie.arin.net. 172800 IN AAAA 2001:500:13::c7d4:35 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ns4.apnic.net. 172800 IN A 202.12.31.53 ns3.afrinic.net. 172800 IN AAAA 2001:500:14:6100:ad::1 ns3.afrinic.net. 172800 IN A 204.61.216.100 manus.authdns.ripe.net. 172800 IN A 193.0.9.7 manus.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::7 ns3.lacnic.net. 172800 IN A 200.3.13.14 ns3.lacnic.net. 172800 IN AAAA 2001:13c7:7002:3000::14 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ripe.net

ripe.net

	Checking DS between net and ripe.net
	Query to d.gtld-servers.net for ripe.net/DS
	Received 1268 bytes from 192.31.80.30
	;; Answer received from 192.31.80.30 (1268 bytes) ;; HEADER SECTION ;; id = 8987 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 14 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ripe.net. IN DS ;; ANSWER SECTION (2 records) ripe.net. 86400 IN DS ( 51356 8 2 9e5a6d4d413dc6d27e8d412e737dd87fe6ecfda7c4a14927a145dfdd05fc0a65 ) ripe.net. 86400 IN RRSIG ( DS 8 2 86400 20200930065620 20200923054620 56519 net. ef0DuSRwo/g1GCjFyjFBcnZb//IshGEPKo3KF2XfnP3HBaroaJgoglJcYd6vna0xSQAIoG57TOM4 XKivlbsoRBTdZ7g/zzimYulf8B2w+F5eWL6UvgY9lEghx9ekJUvzKkK+Ufp406PBybKlpDV8Th/4 SLw9pyOKyvrFCvPlhwLTvN08EvWGQv1a070rLviGL23jvBHMuy5QIB1O+nLNnw== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN RRSIG ( NS 8 1 172800 20201002065856 20200925054856 56519 net. ZnIHKWgpJXZrvp1GSeXV/zfYUrnhE9RrPv/gpSrWAm990MRqMU86a3NExrQpOlXEJN3ocC0dEzTw IkZSOQgNqHeVmQ9Bs7R67UafCTXgQSR8bbEeMSXp9nBfEZn/sTxNHg5Su9hQR6iOmHp6jT7DQLXU W8WkACAL/IG1xfhYcdmJZ8jhCl7SiRX4CwxiCsBjmIegWt7qhBaAhYT4X+rZgw== ) ;; ADDITIONAL SECTION (27 records) i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for ripe.net in the net zone
	DS=51356/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ripe.net. 86400 IN RRSIG ( DS 8 2 86400 20200930065620 20200923054620 56519 net. ef0DuSRwo/g1GCjFyjFBcnZb//IshGEPKo3KF2XfnP3HBaroaJgoglJcYd6vna0xSQAIoG57TOM4 XKivlbsoRBTdZ7g/zzimYulf8B2w+F5eWL6UvgY9lEghx9ekJUvzKkK+Ufp406PBybKlpDV8Th/4 SLw9pyOKyvrFCvPlhwLTvN08EvWGQv1a070rLviGL23jvBHMuy5QIB1O+nLNnw== )`
	RRSIG=56519 and DNSKEY=56519 verifies the DS RRset
	DS=51356/SHA-256 is now in the chain-of-trust
	`ripe.net. 86400 IN DS ( 51356 8 2 9e5a6d4d413dc6d27e8d412e737dd87fe6ecfda7c4a14927a145dfdd05fc0a65 )`
	Query to ns3.lacnic.net for ripe.net/DNSKEY
	Received 757 bytes from 200.3.13.14
	;; Answer received from 200.3.13.14 (757 bytes) ;; HEADER SECTION ;; id = 18952 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ripe.net. IN DNSKEY ;; ANSWER SECTION (3 records) ripe.net. 3600 IN DNSKEY ( 257 3 8 AwEAAb5IhmWq0JOokzX8AWFWqOxf/xVbIfvhjKBGneZRA3Pp/1vUp3bTQt3PRaagV2zIHUtU07+9 JrccaBcNXaRJebQtrnryqyeeZdt/tLndquXLkUcnaV6VRS5USCY5iHkVefbYlHeoshhpg9SujJ13 2JXKO6MQ7+eqis9XYB9/6rXNUoDKg5SlwHv6Yxys+03wf5DaFiEXnLek3fgdwd1fxsrw0IxImbxX p9qwHzv9Fszj1ZYk0LPUg77QKJrTe6MCq0gzi/PUBTwoRd3VxH6Ge9pvxIUJxg87WFPZuYbLFFXk 5s1Vjjmmy3Ca3Ou6TKbi2wTm+t6MnIk68KEJHxwbp7k= ) ; Key ID = 51356 ripe.net. 3600 IN DNSKEY ( 256 3 8 AwEAAbaIuvz2Uj9weo4zCksbSP4pUZLnteNE5EcOawyovF4/EWij9iAwCB1vgQnXqhI/YSjNLhEB b+4l0R61MVYyXr1qr4cSYU+EqKVcjIVk8ZWn//jXyxLfO3IAV9z1hXuTcyuTZTZvCe22xPXxrHDA bKS5GWHIbPw/pPseer0yRq8N ) ; Key ID = 58131 ripe.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201004025053 20200920012053 51356 ripe.net. LzAlvyBLtMt89xJvuUTGmcIH2LStQ0aLz0wvlVTLaa9Y9CwN4V6xYoZkMQYa1FM/9KztDyZ392qf cRs6O5myTyct9Jad3h91nf5riGpMyr3jjeI/vNGj022tFMy4n7T7DgukXBOkO7uQ3vs0x/8h63lf RKlKlV7ZxKOb42zTdhSboCh86w29xRgZGNGtMbtjO34JI5zIzEIfbbPujz09oRVaS2LIlwoNR0cq wJKTuGQEQjTE+WLIX8jvMQ+jOmshzC2WH4qSZ01um6EdSgOVBzgJeYDC4bethl7ITmi4HNs0jWdA OLx1yPx2B4PeWqd/6GmH2xI7Q47+Qu2pBKEyWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for ripe.net
	`ripe.net. 3600 IN DNSKEY ( 257 3 8 AwEAAb5IhmWq0JOokzX8AWFWqOxf/xVbIfvhjKBGneZRA3Pp/1vUp3bTQt3PRaagV2zIHUtU07+9 JrccaBcNXaRJebQtrnryqyeeZdt/tLndquXLkUcnaV6VRS5USCY5iHkVefbYlHeoshhpg9SujJ13 2JXKO6MQ7+eqis9XYB9/6rXNUoDKg5SlwHv6Yxys+03wf5DaFiEXnLek3fgdwd1fxsrw0IxImbxX p9qwHzv9Fszj1ZYk0LPUg77QKJrTe6MCq0gzi/PUBTwoRd3VxH6Ge9pvxIUJxg87WFPZuYbLFFXk 5s1Vjjmmy3Ca3Ou6TKbi2wTm+t6MnIk68KEJHxwbp7k= ) ; Key ID = 51356`
	`ripe.net. 3600 IN DNSKEY ( 256 3 8 AwEAAbaIuvz2Uj9weo4zCksbSP4pUZLnteNE5EcOawyovF4/EWij9iAwCB1vgQnXqhI/YSjNLhEB b+4l0R61MVYyXr1qr4cSYU+EqKVcjIVk8ZWn//jXyxLfO3IAV9z1hXuTcyuTZTZvCe22xPXxrHDA bKS5GWHIbPw/pPseer0yRq8N ) ; Key ID = 58131`
	DNSKEY=51356/SEP is now in the chain-of-trust
	DS=51356/SHA-256 verifies DNSKEY=51356/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ripe.net. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201004025053 20200920012053 51356 ripe.net. LzAlvyBLtMt89xJvuUTGmcIH2LStQ0aLz0wvlVTLaa9Y9CwN4V6xYoZkMQYa1FM/9KztDyZ392qf cRs6O5myTyct9Jad3h91nf5riGpMyr3jjeI/vNGj022tFMy4n7T7DgukXBOkO7uQ3vs0x/8h63lf RKlKlV7ZxKOb42zTdhSboCh86w29xRgZGNGtMbtjO34JI5zIzEIfbbPujz09oRVaS2LIlwoNR0cq wJKTuGQEQjTE+WLIX8jvMQ+jOmshzC2WH4qSZ01um6EdSgOVBzgJeYDC4bethl7ITmi4HNs0jWdA OLx1yPx2B4PeWqd/6GmH2xI7Q47+Qu2pBKEyWQ== )`
	RRSIG=51356 and DNSKEY=51356/SEP verifies the DNSKEY RRset
	DNSKEY=58131 is now in the chain-of-trust
	Query to ns3.lacnic.net for ripe.net/A
	Received 221 bytes from 200.3.13.14
	;; Answer received from 200.3.13.14 (221 bytes) ;; HEADER SECTION ;; id = 64095 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (2 records) ripe.net. 300 IN A 193.0.6.139 ripe.net. 300 IN RRSIG ( A 8 2 300 20201010015054 20200926002054 58131 ripe.net. qU8qs2RPziA/zs/LYyu3AVJe/WoFXN3Z797oKSLL28/smYj8ZWG/uvRxo+hxpB6IxmZA7wiZjLI7 hgXVMS3AbArVrcLh+4uVjDnFJG+fSa7VvgWtRMjtcaK1r/uhUYtZvlPJzy8jzJmByhcozlRYDZpO ktgRBAbp9/N46u+m6js= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ripe.net is authoritative for ripe.net
	Found RRSIG signed by ripe.net zone
	Query to ns3.lacnic.net for ripe.net/SOA
	Received 259 bytes from 200.3.13.14
	;; Answer received from 200.3.13.14 (259 bytes) ;; HEADER SECTION ;; id = 64922 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ripe.net. IN SOA ;; ANSWER SECTION (2 records) ripe.net. 3600 IN SOA ( manus.authdns.ripe.net. dns.ripe.net. 1586422418 ;serial 3600 ;refresh 600 ;retry 864000 ;expire 3600 ;minimum ) ripe.net. 3600 IN RRSIG ( SOA 8 2 3600 20201010165844 20200926152844 58131 ripe.net. cX7XA9BBwM8Zg0sslTk4EOD+TQ20Oww1WvlC+4zL4jY1mtixdTyEDIJoUNve11Qbugne+PbglJfI V4hxYyFEdMwcbyYHMDZlh89k8iXOhuCbGsRxnNcqaWpAv/ep1+2rP3lrwtz2R8sdeP2FIEWw3hry v/nBxvG6lOkuHRMfvq0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to manus.authdns.ripe.net for ripe.net/SOA
	Received 259 bytes from 193.0.9.7
	;; Answer received from 193.0.9.7 (259 bytes) ;; HEADER SECTION ;; id = 29706 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ripe.net. IN SOA ;; ANSWER SECTION (2 records) ripe.net. 3600 IN SOA ( manus.authdns.ripe.net. dns.ripe.net. 1586422418 ;serial 3600 ;refresh 600 ;retry 864000 ;expire 3600 ;minimum ) ripe.net. 3600 IN RRSIG ( SOA 8 2 3600 20201010165844 20200926152844 58131 ripe.net. cX7XA9BBwM8Zg0sslTk4EOD+TQ20Oww1WvlC+4zL4jY1mtixdTyEDIJoUNve11Qbugne+PbglJfI V4hxYyFEdMwcbyYHMDZlh89k8iXOhuCbGsRxnNcqaWpAv/ep1+2rP3lrwtz2R8sdeP2FIEWw3hry v/nBxvG6lOkuHRMfvq0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to tinnie.arin.net for ripe.net/SOA
	Received 259 bytes from 199.212.0.53
	;; Answer received from 199.212.0.53 (259 bytes) ;; HEADER SECTION ;; id = 11953 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ripe.net. IN SOA ;; ANSWER SECTION (2 records) ripe.net. 3600 IN SOA ( manus.authdns.ripe.net. dns.ripe.net. 1586422418 ;serial 3600 ;refresh 600 ;retry 864000 ;expire 3600 ;minimum ) ripe.net. 3600 IN RRSIG ( SOA 8 2 3600 20201010165844 20200926152844 58131 ripe.net. cX7XA9BBwM8Zg0sslTk4EOD+TQ20Oww1WvlC+4zL4jY1mtixdTyEDIJoUNve11Qbugne+PbglJfI V4hxYyFEdMwcbyYHMDZlh89k8iXOhuCbGsRxnNcqaWpAv/ep1+2rP3lrwtz2R8sdeP2FIEWw3hry v/nBxvG6lOkuHRMfvq0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.afrinic.net for ripe.net/SOA
	Received 942 bytes from 204.61.216.100
	;; Answer received from 204.61.216.100 (942 bytes) ;; HEADER SECTION ;; id = 14511 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ripe.net. IN SOA ;; ANSWER SECTION (2 records) ripe.net. 3600 IN SOA ( manus.authdns.ripe.net. dns.ripe.net. 1586422418 ;serial 3600 ;refresh 600 ;retry 864000 ;expire 3600 ;minimum ) ripe.net. 3600 IN RRSIG ( SOA 8 2 3600 20201010165844 20200926152844 58131 ripe.net. cX7XA9BBwM8Zg0sslTk4EOD+TQ20Oww1WvlC+4zL4jY1mtixdTyEDIJoUNve11Qbugne+PbglJfI V4hxYyFEdMwcbyYHMDZlh89k8iXOhuCbGsRxnNcqaWpAv/ep1+2rP3lrwtz2R8sdeP2FIEWw3hry v/nBxvG6lOkuHRMfvq0= ) ;; AUTHORITY SECTION (6 records) ripe.net. 86400 IN NS tinnie.arin.net. ripe.net. 86400 IN NS ns3.afrinic.net. ripe.net. 86400 IN NS manus.authdns.ripe.net. ripe.net. 86400 IN NS ns4.apnic.net. ripe.net. 86400 IN NS ns3.lacnic.net. ripe.net. 86400 IN RRSIG ( NS 8 2 86400 20201010015054 20200926002054 58131 ripe.net. pmelUHYNjw5za6JsaTguE9ztkkeUEia1/t3KJPfDyokhzAgNntFAlHKxQ+hSHSCWNrFKxSHjcRID l4JkK637+qaxJsqAw00Q2nVgZ0c4bmK3kYN2MauK9kHnPGyCbukA8vGbMqmB78OPPzOdAv00DLpm j1N/JoGyfl4f7cO/y7k= ) ;; ADDITIONAL SECTION (5 records) manus.authdns.ripe.net. 86400 IN A 193.0.9.7 manus.authdns.ripe.net. 86400 IN AAAA 2001:67c:e0::7 manus.authdns.ripe.net. 86400 IN RRSIG ( A 8 4 86400 20201010015054 20200926002054 58131 ripe.net. PbG4T0MTsppK8jd1gzLQO909uhILAm9lIXAA2nqcd65Ie+BKUpPQ2ZO2HnKpSJXU4WO8bnBNapOH Q1wU3PoTS+sEeOeRhU7H5f+pU7mBWW4o+ks861Onjcn3MUQypcw3d0yFxEzTqNVhdEVPtmT0NiUd D/pSB8KT+wYxDBfK/XU= ) manus.authdns.ripe.net. 86400 IN RRSIG ( AAAA 8 4 86400 20201010015054 20200926002054 58131 ripe.net. Ya7kNDMeYeKSgxAid6MZcfVUi6k0Uzltrs9TUN8MBYM5uu5bzJGqVv+eYqeq5GN332MvfZtqaVpp oFL73cbd57+6C8D2qiOGrS7wiYbqX8N8NiVt3dvUekbmNdWbHZ9J9qTx03ZAhMbGyqnDwcpDKGD5 /4+62llgML9ktiKLjUg= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns4.apnic.net for ripe.net/SOA
	Received 267 bytes from 202.12.31.53
	;; Answer received from 202.12.31.53 (267 bytes) ;; HEADER SECTION ;; id = 46820 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ripe.net. IN SOA ;; ANSWER SECTION (2 records) ripe.net. 3600 IN SOA ( manus.authdns.ripe.net. dns.ripe.net. 1586422418 ;serial 3600 ;refresh 600 ;retry 864000 ;expire 3600 ;minimum ) ripe.net. 3600 IN RRSIG ( SOA 8 2 3600 20201010165844 20200926152844 58131 ripe.net. cX7XA9BBwM8Zg0sslTk4EOD+TQ20Oww1WvlC+4zL4jY1mtixdTyEDIJoUNve11Qbugne+PbglJfI V4hxYyFEdMwcbyYHMDZlh89k8iXOhuCbGsRxnNcqaWpAv/ep1+2rP3lrwtz2R8sdeP2FIEWw3hry v/nBxvG6lOkuHRMfvq0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.lacnic.net for ripe.net/A
	Received 221 bytes from 200.3.13.14
	;; Answer received from 200.3.13.14 (221 bytes) ;; HEADER SECTION ;; id = 60755 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ripe.net. IN A ;; ANSWER SECTION (2 records) ripe.net. 300 IN A 193.0.6.139 ripe.net. 300 IN RRSIG ( A 8 2 300 20201010015054 20200926002054 58131 ripe.net. qU8qs2RPziA/zs/LYyu3AVJe/WoFXN3Z797oKSLL28/smYj8ZWG/uvRxo+hxpB6IxmZA7wiZjLI7 hgXVMS3AbArVrcLh+4uVjDnFJG+fSa7VvgWtRMjtcaK1r/uhUYtZvlPJzy8jzJmByhcozlRYDZpO ktgRBAbp9/N46u+m6js= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ripe.net A RR has value 193.0.6.139
	Found 1 RRSIGs over A RRset
	`ripe.net. 300 IN RRSIG ( A 8 2 300 20201010015054 20200926002054 58131 ripe.net. qU8qs2RPziA/zs/LYyu3AVJe/WoFXN3Z797oKSLL28/smYj8ZWG/uvRxo+hxpB6IxmZA7wiZjLI7 hgXVMS3AbArVrcLh+4uVjDnFJG+fSa7VvgWtRMjtcaK1r/uhUYtZvlPJzy8jzJmByhcozlRYDZpO ktgRBAbp9/N46u+m6js= )`
	RRSIG=58131 and DNSKEY=58131 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ripe.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: