DNSSEC Debugger

Domain Name:

Time: 2026-04-14 14:02:58 UTC

Analyzing DNSSEC problems for ssa.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1139 octets ;; HEADER SECTION ;; id = 36682 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to b.root-servers.net for ssa.gov/A
	Received 614 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 614 octets ;; HEADER SECTION ;; id = 39873 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260427050000 20260414040000 54393 . Oe6KUC/dRj8pQkOhY1vjmQxNt3pYMHgpenKMbZelt5Vo2AXpu4HbQilEZHmDKjP70qxz0DJ/EujE AGBGZllflGS9msZstOqrOrxXQbyJuxA3lhaPXRi0NAR7YPfEJ1fPvXCtzeJP5Bdo/7BxSpyMIsdJ x4lCF2bE1ZjhERRM0kGQPR2AyaHQLSM8u+InIJNPIUYOmdhMSdhAGEHPXnecnGaoN82T8cNGQGw1 /rcjuKFiFKslQepMRE4qxVZqZcTbe4vQxg2k7wxacYhbT5wQtFtb8hoXKSUYp+4r2C5jca7ApRAD tydVm2wOTP8b+JR1jdcAGyFPkOQkCf7i84zu0Q== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for gov/DNSKEY
	Received 610 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 610 octets ;; HEADER SECTION ;; id = 41079 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260427050000 20260414040000 54393 . Oe6KUC/dRj8pQkOhY1vjmQxNt3pYMHgpenKMbZelt5Vo2AXpu4HbQilEZHmDKjP70qxz0DJ/EujE AGBGZllflGS9msZstOqrOrxXQbyJuxA3lhaPXRi0NAR7YPfEJ1fPvXCtzeJP5Bdo/7BxSpyMIsdJ x4lCF2bE1ZjhERRM0kGQPR2AyaHQLSM8u+InIJNPIUYOmdhMSdhAGEHPXnecnGaoN82T8cNGQGw1 /rcjuKFiFKslQepMRE4qxVZqZcTbe4vQxg2k7wxacYhbT5wQtFtb8hoXKSUYp+4r2C5jca7ApRAD tydVm2wOTP8b+JR1jdcAGyFPkOQkCf7i84zu0Q== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to j.root-servers.net for gov/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 52279 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260427050000 20260414040000 54393 . Oe6KUC/dRj8pQkOhY1vjmQxNt3pYMHgpenKMbZelt5Vo2AXpu4HbQilEZHmDKjP70qxz0DJ/EujE AGBGZllflGS9msZstOqrOrxXQbyJuxA3lhaPXRi0NAR7YPfEJ1fPvXCtzeJP5Bdo/7BxSpyMIsdJ x4lCF2bE1ZjhERRM0kGQPR2AyaHQLSM8u+InIJNPIUYOmdhMSdhAGEHPXnecnGaoN82T8cNGQGw1 /rcjuKFiFKslQepMRE4qxVZqZcTbe4vQxg2k7wxacYhbT5wQtFtb8hoXKSUYp+4r2C5jca7ApRAD tydVm2wOTP8b+JR1jdcAGyFPkOQkCf7i84zu0Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260427050000 20260414040000 54393 . Oe6KUC/dRj8pQkOhY1vjmQxNt3pYMHgpenKMbZelt5Vo2AXpu4HbQilEZHmDKjP70qxz0DJ/EujE AGBGZllflGS9msZstOqrOrxXQbyJuxA3lhaPXRi0NAR7YPfEJ1fPvXCtzeJP5Bdo/7BxSpyMIsdJ x4lCF2bE1ZjhERRM0kGQPR2AyaHQLSM8u+InIJNPIUYOmdhMSdhAGEHPXnecnGaoN82T8cNGQGw1 /rcjuKFiFKslQepMRE4qxVZqZcTbe4vQxg2k7wxacYhbT5wQtFtb8hoXKSUYp+4r2C5jca7ApRAD tydVm2wOTP8b+JR1jdcAGyFPkOQkCf7i84zu0Q== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 47834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for ssa.gov/A
	Received 435 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 435 octets ;; HEADER SECTION ;; id = 61577 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ssa.gov. 10800 IN NS dns1.ssa.gov. ssa.gov. 10800 IN NS dns2.ssa.gov. ssa.gov. 10800 IN NS dns5.ssa.gov. ssa.gov. 10800 IN NS dns6.ssa.gov. ssa.gov. 3600 IN DS ( 53984 13 2 3b095e69c5d339e5b396f89c38518849501ee346791f245e4847098d26ddb0d4 ) ssa.gov. 3600 IN RRSIG ( DS 13 2 3600 20260415150258 20260413130258 35496 gov. e8oE0yiRuldZQI60shc49t9tmgEkLaKBKfCZr9ddVJUeV5gs6ZAdXM9f6Wq3J9oAkEgg3xB5tp2R /f/+5TBq8w== ) ;; ADDITIONAL SECTION (9 records) dns1.ssa.gov. 3600 IN A 137.200.43.8 dns1.ssa.gov. 3600 IN AAAA 2001:1930:d07:1::8 dns2.ssa.gov. 3600 IN A 137.200.43.9 dns2.ssa.gov. 3600 IN AAAA 2001:1930:d07:1::9 dns5.ssa.gov. 3600 IN A 137.200.4.30 dns5.ssa.gov. 3600 IN AAAA 2001:1930:e03::c dns6.ssa.gov. 3600 IN A 137.200.4.31 dns6.ssa.gov. 3600 IN AAAA 2001:1930:e03::d ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for ssa.gov/DNSKEY
	Received 435 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 435 octets ;; HEADER SECTION ;; id = 36115 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ssa.gov. 10800 IN NS dns1.ssa.gov. ssa.gov. 10800 IN NS dns2.ssa.gov. ssa.gov. 10800 IN NS dns5.ssa.gov. ssa.gov. 10800 IN NS dns6.ssa.gov. ssa.gov. 3600 IN DS ( 53984 13 2 3b095e69c5d339e5b396f89c38518849501ee346791f245e4847098d26ddb0d4 ) ssa.gov. 3600 IN RRSIG ( DS 13 2 3600 20260415150258 20260413130258 35496 gov. X8XUR0jYV7XjVbv9bYljmqeWZB5vcQyKA/7g+YTG/jGDA2Ku8qk5Q3IeTWFljjbnSw/OikLVLvgi XuIuaX6YmQ== ) ;; ADDITIONAL SECTION (9 records) dns1.ssa.gov. 3600 IN A 137.200.43.8 dns1.ssa.gov. 3600 IN AAAA 2001:1930:d07:1::8 dns2.ssa.gov. 3600 IN A 137.200.43.9 dns2.ssa.gov. 3600 IN AAAA 2001:1930:d07:1::9 dns5.ssa.gov. 3600 IN A 137.200.4.30 dns5.ssa.gov. 3600 IN AAAA 2001:1930:e03::c dns6.ssa.gov. 3600 IN A 137.200.4.31 dns6.ssa.gov. 3600 IN AAAA 2001:1930:e03::d ;; { "EDNS-VERSION": 0 }
	Found child zone ssa.gov

ssa.gov

	Checking DS between gov and ssa.gov
	Query to a.ns.gov for ssa.gov/DS
	Received 183 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 183 octets ;; HEADER SECTION ;; id = 12718 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN DS ;; ANSWER SECTION (2 records) ssa.gov. 3600 IN DS ( 53984 13 2 3b095e69c5d339e5b396f89c38518849501ee346791f245e4847098d26ddb0d4 ) ssa.gov. 3600 IN RRSIG ( DS 13 2 3600 20260415150258 20260413130258 35496 gov. o2OtO/tFUj0gU/nh8s7WT+jRVD2YE0xCNNHKWhVsQuS6rTm+pKrm39I+q3sZ6RO7NuInTnA2A3nu NtC7rcxNJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ssa.gov in the gov zone
	DS=53984/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ssa.gov. 3600 IN RRSIG ( DS 13 2 3600 20260415150258 20260413130258 35496 gov. o2OtO/tFUj0gU/nh8s7WT+jRVD2YE0xCNNHKWhVsQuS6rTm+pKrm39I+q3sZ6RO7NuInTnA2A3nu NtC7rcxNJw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=53984/SHA-256 is now in the chain-of-trust
	`ssa.gov. 3600 IN DS ( 53984 13 2 3b095e69c5d339e5b396f89c38518849501ee346791f245e4847098d26ddb0d4 )`
	Query to dns1.ssa.gov for ssa.gov/DNSKEY
	Received 402 bytes from 137.200.43.8
	;; Response received from [137.200.43.8] 402 octets ;; HEADER SECTION ;; id = 33066 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN DNSKEY ;; ANSWER SECTION (4 records) ssa.gov. 36000 IN DNSKEY ( 257 3 13 KLB9hO5mz1LBNTZ90ejY/ISZ5YmEXSH+ED/jVqcCR+7vrOiMg6tOfXp/gPlCf47LLryPYHUU8Gcf wQIF3O070g== ) ; keytag 53984 ssa.gov. 36000 IN DNSKEY ( 256 3 13 O5O0h4yNsGZoEwiQvxtwfBnC21G5thdim5/iyqgJbYXCz4GpV6hx7CH0Gr0ED3RA4XiwoWC7Mv7/ xNp1p6dwzQ== ) ; keytag 1809 ssa.gov. 36000 IN RRSIG ( DNSKEY 13 2 36000 20260430233417 20260331230105 1809 ssa.gov. Yu7BluIDp77NGsEYy04NDbs8bH+4XSI+soNj9fvfcxMQRENpW9QGbUBC23uSwwCKAJqWDdxjoZln 1P7kOA9egA== ) ssa.gov. 36000 IN RRSIG ( DNSKEY 13 2 36000 20260430233417 20260331230105 53984 ssa.gov. l+iXXYZpjtwZUuc9rdGk/XP+tgIm19xB1U4wlHpjnJascKfNg+azJ4/PstuU1F2ilXZzKsZqIqNq Xyyp4Ae8IA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ssa.gov
	`ssa.gov. 36000 IN DNSKEY ( 257 3 13 KLB9hO5mz1LBNTZ90ejY/ISZ5YmEXSH+ED/jVqcCR+7vrOiMg6tOfXp/gPlCf47LLryPYHUU8Gcf wQIF3O070g== ) ; keytag 53984`
	`ssa.gov. 36000 IN DNSKEY ( 256 3 13 O5O0h4yNsGZoEwiQvxtwfBnC21G5thdim5/iyqgJbYXCz4GpV6hx7CH0Gr0ED3RA4XiwoWC7Mv7/ xNp1p6dwzQ== ) ; keytag 1809`
	DNSKEY=53984/SEP is now in the chain-of-trust
	DS=53984/SHA-256 verifies DNSKEY=53984/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`ssa.gov. 36000 IN RRSIG ( DNSKEY 13 2 36000 20260430233417 20260331230105 1809 ssa.gov. Yu7BluIDp77NGsEYy04NDbs8bH+4XSI+soNj9fvfcxMQRENpW9QGbUBC23uSwwCKAJqWDdxjoZln 1P7kOA9egA== )`
	`ssa.gov. 36000 IN RRSIG ( DNSKEY 13 2 36000 20260430233417 20260331230105 53984 ssa.gov. l+iXXYZpjtwZUuc9rdGk/XP+tgIm19xB1U4wlHpjnJascKfNg+azJ4/PstuU1F2ilXZzKsZqIqNq Xyyp4Ae8IA== )`
	RRSIG=1809 and DNSKEY=1809 verifies the DNSKEY RRset
	RRSIG=53984 and DNSKEY=53984/SEP verifies the DNSKEY RRset
	DNSKEY=1809 is now in the chain-of-trust
	Query to dns2.ssa.gov for ssa.gov/A
	Received 1144 bytes from 137.200.43.9
	;; Response received from [137.200.43.9] 1144 octets ;; HEADER SECTION ;; id = 37403 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN A ;; ANSWER SECTION (3 records) ssa.gov. 300 IN A 137.200.39.62 ssa.gov. 300 IN A 137.200.4.21 ssa.gov. 300 IN RRSIG ( A 13 2 300 20260423210907 20260324203519 1809 ssa.gov. GrSYUzlRVG/2oohuC/qVddEvsbsLx2afSVzFAOB3tBLu9HnHf7AloEJyDrOKKRAuIrO4leOfjnw0 LqhrOj1YuA== ) ;; AUTHORITY SECTION (5 records) ssa.gov. 36000 IN NS dns6.ssa.gov. ssa.gov. 36000 IN NS dns2.ssa.gov. ssa.gov. 36000 IN NS dns1.ssa.gov. ssa.gov. 36000 IN NS dns5.ssa.gov. ssa.gov. 36000 IN RRSIG ( NS 13 2 36000 20260423210907 20260324203519 1809 ssa.gov. KGIlTtWHLNgFHpZmgr2ZxeR2Yc1MlXp4+pJ0viqKXhwymGsojY3HnYzxUt8qpyHyHZIksf9sxHiJ QWNS2yq4qw== ) ;; ADDITIONAL SECTION (15 records) dns1.ssa.gov. 60 IN A 137.200.43.8 dns2.ssa.gov. 36000 IN A 137.200.43.9 dns5.ssa.gov. 36000 IN A 137.200.4.30 dns6.ssa.gov. 36000 IN A 137.200.4.31 dns1.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::8 dns2.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::9 dns5.ssa.gov. 36000 IN AAAA 2001:1930:e03::c dns6.ssa.gov. 36000 IN AAAA 2001:1930:e03::d dns1.ssa.gov. 60 IN RRSIG ( A 13 3 60 20260505154936 20260405154121 1809 ssa.gov. TYFLIAobMc0DCng3cUB7ao+LydyUXphAaZ4qfmvzxBldMdM7CxsxHokf25eye3XGuF6Ovzuqx/Zq +Zc/BYyvxw== ) dns1.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260505154936 20260405154121 1809 ssa.gov. jwhWNLWvZj9cgs/CDRFrScSsyOUJIa798kL0O6h57WFnajXaw9ji5ZYkL5y+NSIQcYkZiUNTjZPu OsKmYPrMWw== ) dns2.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. r+LidATB+QjGcOGupb2qr3DsXU2RUo8fp37RbKqbBLGqpqexcKj8/GSHO+4440Fy/gJNKoUmC5KT /g0cRo9GJg== ) dns2.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. g0Y/XSmX3LKO0E9tr6/vlg1yaBfjrsDlR7FNDzU09S/Mtibbyx2Sp77kdCf9AXKAsQs22e/AhPvd 38JxbJci5w== ) dns5.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. /4DqvsZtIrE0PziJY3m6Bqu4u7vXH6cDBTVqTC+Q7Z7t/YZVAWRlv2FvGAbbGtfGFIFIryJ/y5mJ BZrfCb6M3g== ) dns5.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. 0i1t92dFzab33VQ624ddAO+sxRSkkVY+rl6MHqZ3wmCO7KWtAKZ1czvHRdlpZtM7T/YIIrDcEGNc cu9nF0tUfg== ) ;; { "EDNS-VERSION": 0 }
	dns2.ssa.gov is authoritative for ssa.gov
	Found RRSIG signed by ssa.gov zone
	Query to dns6.ssa.gov for ssa.gov/SOA
	Received 1159 bytes from 137.200.4.31
	;; Response received from [137.200.4.31] 1159 octets ;; HEADER SECTION ;; id = 61141 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN SOA ;; ANSWER SECTION (2 records) ssa.gov. 3600 IN SOA ( dns1.ssa.gov. dnsfwadmin.ssa.gov. 2022089750 ;serial 3600 ;refresh 600 ;retry 1209600 ;expire 14400 ;minimum ) ssa.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260514134643 20260414124643 1809 ssa.gov. QZIjDJCm9rAi4rH3I1Ap4vQGyl8yhm4VRy798+R2nWjTEVPIaHJVuw2yZOXEwafe6nI8jkxVb1bL Gz1atURkrA== ) ;; AUTHORITY SECTION (5 records) ssa.gov. 36000 IN NS dns1.ssa.gov. ssa.gov. 36000 IN NS dns5.ssa.gov. ssa.gov. 36000 IN NS dns2.ssa.gov. ssa.gov. 36000 IN NS dns6.ssa.gov. ssa.gov. 36000 IN RRSIG ( NS 13 2 36000 20260423210907 20260324203519 1809 ssa.gov. KGIlTtWHLNgFHpZmgr2ZxeR2Yc1MlXp4+pJ0viqKXhwymGsojY3HnYzxUt8qpyHyHZIksf9sxHiJ QWNS2yq4qw== ) ;; ADDITIONAL SECTION (15 records) dns1.ssa.gov. 60 IN A 137.200.43.8 dns2.ssa.gov. 36000 IN A 137.200.43.9 dns5.ssa.gov. 36000 IN A 137.200.4.30 dns6.ssa.gov. 36000 IN A 137.200.4.31 dns1.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::8 dns2.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::9 dns5.ssa.gov. 36000 IN AAAA 2001:1930:e03::c dns6.ssa.gov. 36000 IN AAAA 2001:1930:e03::d dns1.ssa.gov. 60 IN RRSIG ( A 13 3 60 20260505154936 20260405154121 1809 ssa.gov. TYFLIAobMc0DCng3cUB7ao+LydyUXphAaZ4qfmvzxBldMdM7CxsxHokf25eye3XGuF6Ovzuqx/Zq +Zc/BYyvxw== ) dns1.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260505154936 20260405154121 1809 ssa.gov. jwhWNLWvZj9cgs/CDRFrScSsyOUJIa798kL0O6h57WFnajXaw9ji5ZYkL5y+NSIQcYkZiUNTjZPu OsKmYPrMWw== ) dns2.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. r+LidATB+QjGcOGupb2qr3DsXU2RUo8fp37RbKqbBLGqpqexcKj8/GSHO+4440Fy/gJNKoUmC5KT /g0cRo9GJg== ) dns2.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. g0Y/XSmX3LKO0E9tr6/vlg1yaBfjrsDlR7FNDzU09S/Mtibbyx2Sp77kdCf9AXKAsQs22e/AhPvd 38JxbJci5w== ) dns5.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. /4DqvsZtIrE0PziJY3m6Bqu4u7vXH6cDBTVqTC+Q7Z7t/YZVAWRlv2FvGAbbGtfGFIFIryJ/y5mJ BZrfCb6M3g== ) dns5.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. 0i1t92dFzab33VQ624ddAO+sxRSkkVY+rl6MHqZ3wmCO7KWtAKZ1czvHRdlpZtM7T/YIIrDcEGNc cu9nF0tUfg== ) ;; { "EDNS-VERSION": 0 }
	Query to dns5.ssa.gov for ssa.gov/SOA
	Received 1159 bytes from 137.200.4.30
	;; Response received from [137.200.4.30] 1159 octets ;; HEADER SECTION ;; id = 35219 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN SOA ;; ANSWER SECTION (2 records) ssa.gov. 3600 IN SOA ( dns1.ssa.gov. dnsfwadmin.ssa.gov. 2022089750 ;serial 3600 ;refresh 600 ;retry 1209600 ;expire 14400 ;minimum ) ssa.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260514134643 20260414124643 1809 ssa.gov. QZIjDJCm9rAi4rH3I1Ap4vQGyl8yhm4VRy798+R2nWjTEVPIaHJVuw2yZOXEwafe6nI8jkxVb1bL Gz1atURkrA== ) ;; AUTHORITY SECTION (5 records) ssa.gov. 36000 IN NS dns1.ssa.gov. ssa.gov. 36000 IN NS dns2.ssa.gov. ssa.gov. 36000 IN NS dns5.ssa.gov. ssa.gov. 36000 IN NS dns6.ssa.gov. ssa.gov. 36000 IN RRSIG ( NS 13 2 36000 20260423210907 20260324203519 1809 ssa.gov. KGIlTtWHLNgFHpZmgr2ZxeR2Yc1MlXp4+pJ0viqKXhwymGsojY3HnYzxUt8qpyHyHZIksf9sxHiJ QWNS2yq4qw== ) ;; ADDITIONAL SECTION (15 records) dns1.ssa.gov. 60 IN A 137.200.43.8 dns2.ssa.gov. 36000 IN A 137.200.43.9 dns5.ssa.gov. 36000 IN A 137.200.4.30 dns6.ssa.gov. 36000 IN A 137.200.4.31 dns1.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::8 dns2.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::9 dns5.ssa.gov. 36000 IN AAAA 2001:1930:e03::c dns6.ssa.gov. 36000 IN AAAA 2001:1930:e03::d dns1.ssa.gov. 60 IN RRSIG ( A 13 3 60 20260505154936 20260405154121 1809 ssa.gov. TYFLIAobMc0DCng3cUB7ao+LydyUXphAaZ4qfmvzxBldMdM7CxsxHokf25eye3XGuF6Ovzuqx/Zq +Zc/BYyvxw== ) dns1.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260505154936 20260405154121 1809 ssa.gov. jwhWNLWvZj9cgs/CDRFrScSsyOUJIa798kL0O6h57WFnajXaw9ji5ZYkL5y+NSIQcYkZiUNTjZPu OsKmYPrMWw== ) dns2.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. r+LidATB+QjGcOGupb2qr3DsXU2RUo8fp37RbKqbBLGqpqexcKj8/GSHO+4440Fy/gJNKoUmC5KT /g0cRo9GJg== ) dns2.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. g0Y/XSmX3LKO0E9tr6/vlg1yaBfjrsDlR7FNDzU09S/Mtibbyx2Sp77kdCf9AXKAsQs22e/AhPvd 38JxbJci5w== ) dns5.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. /4DqvsZtIrE0PziJY3m6Bqu4u7vXH6cDBTVqTC+Q7Z7t/YZVAWRlv2FvGAbbGtfGFIFIryJ/y5mJ BZrfCb6M3g== ) dns5.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. 0i1t92dFzab33VQ624ddAO+sxRSkkVY+rl6MHqZ3wmCO7KWtAKZ1czvHRdlpZtM7T/YIIrDcEGNc cu9nF0tUfg== ) ;; { "EDNS-VERSION": 0 }
	Query to dns1.ssa.gov for ssa.gov/SOA
	Received 1159 bytes from 137.200.43.8
	;; Response received from [137.200.43.8] 1159 octets ;; HEADER SECTION ;; id = 971 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN SOA ;; ANSWER SECTION (2 records) ssa.gov. 3600 IN SOA ( dns1.ssa.gov. dnsfwadmin.ssa.gov. 2022089750 ;serial 3600 ;refresh 600 ;retry 1209600 ;expire 14400 ;minimum ) ssa.gov. 3600 IN RRSIG ( SOA 13 2 3600 20260514134643 20260414124643 1809 ssa.gov. QZIjDJCm9rAi4rH3I1Ap4vQGyl8yhm4VRy798+R2nWjTEVPIaHJVuw2yZOXEwafe6nI8jkxVb1bL Gz1atURkrA== ) ;; AUTHORITY SECTION (5 records) ssa.gov. 36000 IN NS dns2.ssa.gov. ssa.gov. 36000 IN NS dns1.ssa.gov. ssa.gov. 36000 IN NS dns6.ssa.gov. ssa.gov. 36000 IN NS dns5.ssa.gov. ssa.gov. 36000 IN RRSIG ( NS 13 2 36000 20260423210907 20260324203519 1809 ssa.gov. KGIlTtWHLNgFHpZmgr2ZxeR2Yc1MlXp4+pJ0viqKXhwymGsojY3HnYzxUt8qpyHyHZIksf9sxHiJ QWNS2yq4qw== ) ;; ADDITIONAL SECTION (15 records) dns1.ssa.gov. 60 IN A 137.200.43.8 dns2.ssa.gov. 36000 IN A 137.200.43.9 dns5.ssa.gov. 36000 IN A 137.200.4.30 dns6.ssa.gov. 36000 IN A 137.200.4.31 dns1.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::8 dns2.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::9 dns5.ssa.gov. 36000 IN AAAA 2001:1930:e03::c dns6.ssa.gov. 36000 IN AAAA 2001:1930:e03::d dns1.ssa.gov. 60 IN RRSIG ( A 13 3 60 20260505154936 20260405154121 1809 ssa.gov. TYFLIAobMc0DCng3cUB7ao+LydyUXphAaZ4qfmvzxBldMdM7CxsxHokf25eye3XGuF6Ovzuqx/Zq +Zc/BYyvxw== ) dns1.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260505154936 20260405154121 1809 ssa.gov. jwhWNLWvZj9cgs/CDRFrScSsyOUJIa798kL0O6h57WFnajXaw9ji5ZYkL5y+NSIQcYkZiUNTjZPu OsKmYPrMWw== ) dns2.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. r+LidATB+QjGcOGupb2qr3DsXU2RUo8fp37RbKqbBLGqpqexcKj8/GSHO+4440Fy/gJNKoUmC5KT /g0cRo9GJg== ) dns2.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. g0Y/XSmX3LKO0E9tr6/vlg1yaBfjrsDlR7FNDzU09S/Mtibbyx2Sp77kdCf9AXKAsQs22e/AhPvd 38JxbJci5w== ) dns5.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. /4DqvsZtIrE0PziJY3m6Bqu4u7vXH6cDBTVqTC+Q7Z7t/YZVAWRlv2FvGAbbGtfGFIFIryJ/y5mJ BZrfCb6M3g== ) dns5.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. 0i1t92dFzab33VQ624ddAO+sxRSkkVY+rl6MHqZ3wmCO7KWtAKZ1czvHRdlpZtM7T/YIIrDcEGNc cu9nF0tUfg== ) ;; { "EDNS-VERSION": 0 }
	Query to dns2.ssa.gov for ssa.gov/A
	Received 1144 bytes from 137.200.43.9
	;; Response received from [137.200.43.9] 1144 octets ;; HEADER SECTION ;; id = 32830 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN A ;; ANSWER SECTION (3 records) ssa.gov. 300 IN A 137.200.39.62 ssa.gov. 300 IN A 137.200.4.21 ssa.gov. 300 IN RRSIG ( A 13 2 300 20260423210907 20260324203519 1809 ssa.gov. GrSYUzlRVG/2oohuC/qVddEvsbsLx2afSVzFAOB3tBLu9HnHf7AloEJyDrOKKRAuIrO4leOfjnw0 LqhrOj1YuA== ) ;; AUTHORITY SECTION (5 records) ssa.gov. 36000 IN NS dns1.ssa.gov. ssa.gov. 36000 IN NS dns2.ssa.gov. ssa.gov. 36000 IN NS dns5.ssa.gov. ssa.gov. 36000 IN NS dns6.ssa.gov. ssa.gov. 36000 IN RRSIG ( NS 13 2 36000 20260423210907 20260324203519 1809 ssa.gov. KGIlTtWHLNgFHpZmgr2ZxeR2Yc1MlXp4+pJ0viqKXhwymGsojY3HnYzxUt8qpyHyHZIksf9sxHiJ QWNS2yq4qw== ) ;; ADDITIONAL SECTION (15 records) dns1.ssa.gov. 60 IN A 137.200.43.8 dns2.ssa.gov. 36000 IN A 137.200.43.9 dns5.ssa.gov. 36000 IN A 137.200.4.30 dns6.ssa.gov. 36000 IN A 137.200.4.31 dns1.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::8 dns2.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::9 dns5.ssa.gov. 36000 IN AAAA 2001:1930:e03::c dns6.ssa.gov. 36000 IN AAAA 2001:1930:e03::d dns1.ssa.gov. 60 IN RRSIG ( A 13 3 60 20260505154936 20260405154121 1809 ssa.gov. TYFLIAobMc0DCng3cUB7ao+LydyUXphAaZ4qfmvzxBldMdM7CxsxHokf25eye3XGuF6Ovzuqx/Zq +Zc/BYyvxw== ) dns1.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260505154936 20260405154121 1809 ssa.gov. jwhWNLWvZj9cgs/CDRFrScSsyOUJIa798kL0O6h57WFnajXaw9ji5ZYkL5y+NSIQcYkZiUNTjZPu OsKmYPrMWw== ) dns2.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. r+LidATB+QjGcOGupb2qr3DsXU2RUo8fp37RbKqbBLGqpqexcKj8/GSHO+4440Fy/gJNKoUmC5KT /g0cRo9GJg== ) dns2.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. g0Y/XSmX3LKO0E9tr6/vlg1yaBfjrsDlR7FNDzU09S/Mtibbyx2Sp77kdCf9AXKAsQs22e/AhPvd 38JxbJci5w== ) dns5.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. /4DqvsZtIrE0PziJY3m6Bqu4u7vXH6cDBTVqTC+Q7Z7t/YZVAWRlv2FvGAbbGtfGFIFIryJ/y5mJ BZrfCb6M3g== ) dns5.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. 0i1t92dFzab33VQ624ddAO+sxRSkkVY+rl6MHqZ3wmCO7KWtAKZ1czvHRdlpZtM7T/YIIrDcEGNc cu9nF0tUfg== ) ;; { "EDNS-VERSION": 0 }
	ssa.gov A RR has value 137.200.39.62
	ssa.gov A RR has value 137.200.4.21
	Found 1 RRSIGs over A RRset
	`ssa.gov. 300 IN RRSIG ( A 13 2 300 20260423210907 20260324203519 1809 ssa.gov. GrSYUzlRVG/2oohuC/qVddEvsbsLx2afSVzFAOB3tBLu9HnHf7AloEJyDrOKKRAuIrO4leOfjnw0 LqhrOj1YuA== )`
	RRSIG=1809 and DNSKEY=1809 verifies the A RRset

ssa.gov

	Query to dns5.ssa.gov for ssa.gov/A
	Received 1144 bytes from 137.200.4.30
	;; Response received from [137.200.4.30] 1144 octets ;; HEADER SECTION ;; id = 7274 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN A ;; ANSWER SECTION (3 records) ssa.gov. 300 IN A 137.200.4.21 ssa.gov. 300 IN A 137.200.39.62 ssa.gov. 300 IN RRSIG ( A 13 2 300 20260423210907 20260324203519 1809 ssa.gov. GrSYUzlRVG/2oohuC/qVddEvsbsLx2afSVzFAOB3tBLu9HnHf7AloEJyDrOKKRAuIrO4leOfjnw0 LqhrOj1YuA== ) ;; AUTHORITY SECTION (5 records) ssa.gov. 36000 IN NS dns5.ssa.gov. ssa.gov. 36000 IN NS dns1.ssa.gov. ssa.gov. 36000 IN NS dns2.ssa.gov. ssa.gov. 36000 IN NS dns6.ssa.gov. ssa.gov. 36000 IN RRSIG ( NS 13 2 36000 20260423210907 20260324203519 1809 ssa.gov. KGIlTtWHLNgFHpZmgr2ZxeR2Yc1MlXp4+pJ0viqKXhwymGsojY3HnYzxUt8qpyHyHZIksf9sxHiJ QWNS2yq4qw== ) ;; ADDITIONAL SECTION (15 records) dns1.ssa.gov. 60 IN A 137.200.43.8 dns2.ssa.gov. 36000 IN A 137.200.43.9 dns5.ssa.gov. 36000 IN A 137.200.4.30 dns6.ssa.gov. 36000 IN A 137.200.4.31 dns1.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::8 dns2.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::9 dns5.ssa.gov. 36000 IN AAAA 2001:1930:e03::c dns6.ssa.gov. 36000 IN AAAA 2001:1930:e03::d dns1.ssa.gov. 60 IN RRSIG ( A 13 3 60 20260505154936 20260405154121 1809 ssa.gov. TYFLIAobMc0DCng3cUB7ao+LydyUXphAaZ4qfmvzxBldMdM7CxsxHokf25eye3XGuF6Ovzuqx/Zq +Zc/BYyvxw== ) dns1.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260505154936 20260405154121 1809 ssa.gov. jwhWNLWvZj9cgs/CDRFrScSsyOUJIa798kL0O6h57WFnajXaw9ji5ZYkL5y+NSIQcYkZiUNTjZPu OsKmYPrMWw== ) dns2.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. r+LidATB+QjGcOGupb2qr3DsXU2RUo8fp37RbKqbBLGqpqexcKj8/GSHO+4440Fy/gJNKoUmC5KT /g0cRo9GJg== ) dns2.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. g0Y/XSmX3LKO0E9tr6/vlg1yaBfjrsDlR7FNDzU09S/Mtibbyx2Sp77kdCf9AXKAsQs22e/AhPvd 38JxbJci5w== ) dns5.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. /4DqvsZtIrE0PziJY3m6Bqu4u7vXH6cDBTVqTC+Q7Z7t/YZVAWRlv2FvGAbbGtfGFIFIryJ/y5mJ BZrfCb6M3g== ) dns5.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. 0i1t92dFzab33VQ624ddAO+sxRSkkVY+rl6MHqZ3wmCO7KWtAKZ1czvHRdlpZtM7T/YIIrDcEGNc cu9nF0tUfg== ) ;; { "EDNS-VERSION": 0 }
	dns5.ssa.gov is authoritative for ssa.gov
	Found RRSIG signed by ssa.gov zone
	Query to dns5.ssa.gov for ssa.gov/A
	Received 1144 bytes from 137.200.4.30
	;; Response received from [137.200.4.30] 1144 octets ;; HEADER SECTION ;; id = 57147 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN A ;; ANSWER SECTION (3 records) ssa.gov. 300 IN A 137.200.4.21 ssa.gov. 300 IN A 137.200.39.62 ssa.gov. 300 IN RRSIG ( A 13 2 300 20260423210907 20260324203519 1809 ssa.gov. GrSYUzlRVG/2oohuC/qVddEvsbsLx2afSVzFAOB3tBLu9HnHf7AloEJyDrOKKRAuIrO4leOfjnw0 LqhrOj1YuA== ) ;; AUTHORITY SECTION (5 records) ssa.gov. 36000 IN NS dns6.ssa.gov. ssa.gov. 36000 IN NS dns5.ssa.gov. ssa.gov. 36000 IN NS dns1.ssa.gov. ssa.gov. 36000 IN NS dns2.ssa.gov. ssa.gov. 36000 IN RRSIG ( NS 13 2 36000 20260423210907 20260324203519 1809 ssa.gov. KGIlTtWHLNgFHpZmgr2ZxeR2Yc1MlXp4+pJ0viqKXhwymGsojY3HnYzxUt8qpyHyHZIksf9sxHiJ QWNS2yq4qw== ) ;; ADDITIONAL SECTION (15 records) dns1.ssa.gov. 60 IN A 137.200.43.8 dns2.ssa.gov. 36000 IN A 137.200.43.9 dns5.ssa.gov. 36000 IN A 137.200.4.30 dns6.ssa.gov. 36000 IN A 137.200.4.31 dns1.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::8 dns2.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::9 dns5.ssa.gov. 36000 IN AAAA 2001:1930:e03::c dns6.ssa.gov. 36000 IN AAAA 2001:1930:e03::d dns1.ssa.gov. 60 IN RRSIG ( A 13 3 60 20260505154936 20260405154121 1809 ssa.gov. TYFLIAobMc0DCng3cUB7ao+LydyUXphAaZ4qfmvzxBldMdM7CxsxHokf25eye3XGuF6Ovzuqx/Zq +Zc/BYyvxw== ) dns1.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260505154936 20260405154121 1809 ssa.gov. jwhWNLWvZj9cgs/CDRFrScSsyOUJIa798kL0O6h57WFnajXaw9ji5ZYkL5y+NSIQcYkZiUNTjZPu OsKmYPrMWw== ) dns2.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. r+LidATB+QjGcOGupb2qr3DsXU2RUo8fp37RbKqbBLGqpqexcKj8/GSHO+4440Fy/gJNKoUmC5KT /g0cRo9GJg== ) dns2.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. g0Y/XSmX3LKO0E9tr6/vlg1yaBfjrsDlR7FNDzU09S/Mtibbyx2Sp77kdCf9AXKAsQs22e/AhPvd 38JxbJci5w== ) dns5.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. /4DqvsZtIrE0PziJY3m6Bqu4u7vXH6cDBTVqTC+Q7Z7t/YZVAWRlv2FvGAbbGtfGFIFIryJ/y5mJ BZrfCb6M3g== ) dns5.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. 0i1t92dFzab33VQ624ddAO+sxRSkkVY+rl6MHqZ3wmCO7KWtAKZ1czvHRdlpZtM7T/YIIrDcEGNc cu9nF0tUfg== ) ;; { "EDNS-VERSION": 0 }
	ssa.gov A RR has value 137.200.4.21
	ssa.gov A RR has value 137.200.39.62
	Found 1 RRSIGs over A RRset
	`ssa.gov. 300 IN RRSIG ( A 13 2 300 20260423210907 20260324203519 1809 ssa.gov. GrSYUzlRVG/2oohuC/qVddEvsbsLx2afSVzFAOB3tBLu9HnHf7AloEJyDrOKKRAuIrO4leOfjnw0 LqhrOj1YuA== )`
	RRSIG=1809 and DNSKEY=1809 verifies the A RRset

ssa.gov

	Query to dns6.ssa.gov for ssa.gov/A
	Received 1144 bytes from 137.200.4.31
	;; Response received from [137.200.4.31] 1144 octets ;; HEADER SECTION ;; id = 24596 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN A ;; ANSWER SECTION (3 records) ssa.gov. 300 IN A 137.200.4.21 ssa.gov. 300 IN A 137.200.39.62 ssa.gov. 300 IN RRSIG ( A 13 2 300 20260423210907 20260324203519 1809 ssa.gov. GrSYUzlRVG/2oohuC/qVddEvsbsLx2afSVzFAOB3tBLu9HnHf7AloEJyDrOKKRAuIrO4leOfjnw0 LqhrOj1YuA== ) ;; AUTHORITY SECTION (5 records) ssa.gov. 36000 IN NS dns5.ssa.gov. ssa.gov. 36000 IN NS dns6.ssa.gov. ssa.gov. 36000 IN NS dns1.ssa.gov. ssa.gov. 36000 IN NS dns2.ssa.gov. ssa.gov. 36000 IN RRSIG ( NS 13 2 36000 20260423210907 20260324203519 1809 ssa.gov. KGIlTtWHLNgFHpZmgr2ZxeR2Yc1MlXp4+pJ0viqKXhwymGsojY3HnYzxUt8qpyHyHZIksf9sxHiJ QWNS2yq4qw== ) ;; ADDITIONAL SECTION (15 records) dns1.ssa.gov. 60 IN A 137.200.43.8 dns2.ssa.gov. 36000 IN A 137.200.43.9 dns5.ssa.gov. 36000 IN A 137.200.4.30 dns6.ssa.gov. 36000 IN A 137.200.4.31 dns1.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::8 dns2.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::9 dns5.ssa.gov. 36000 IN AAAA 2001:1930:e03::c dns6.ssa.gov. 36000 IN AAAA 2001:1930:e03::d dns1.ssa.gov. 60 IN RRSIG ( A 13 3 60 20260505154936 20260405154121 1809 ssa.gov. TYFLIAobMc0DCng3cUB7ao+LydyUXphAaZ4qfmvzxBldMdM7CxsxHokf25eye3XGuF6Ovzuqx/Zq +Zc/BYyvxw== ) dns1.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260505154936 20260405154121 1809 ssa.gov. jwhWNLWvZj9cgs/CDRFrScSsyOUJIa798kL0O6h57WFnajXaw9ji5ZYkL5y+NSIQcYkZiUNTjZPu OsKmYPrMWw== ) dns2.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. r+LidATB+QjGcOGupb2qr3DsXU2RUo8fp37RbKqbBLGqpqexcKj8/GSHO+4440Fy/gJNKoUmC5KT /g0cRo9GJg== ) dns2.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. g0Y/XSmX3LKO0E9tr6/vlg1yaBfjrsDlR7FNDzU09S/Mtibbyx2Sp77kdCf9AXKAsQs22e/AhPvd 38JxbJci5w== ) dns5.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. /4DqvsZtIrE0PziJY3m6Bqu4u7vXH6cDBTVqTC+Q7Z7t/YZVAWRlv2FvGAbbGtfGFIFIryJ/y5mJ BZrfCb6M3g== ) dns5.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. 0i1t92dFzab33VQ624ddAO+sxRSkkVY+rl6MHqZ3wmCO7KWtAKZ1czvHRdlpZtM7T/YIIrDcEGNc cu9nF0tUfg== ) ;; { "EDNS-VERSION": 0 }
	dns6.ssa.gov is authoritative for ssa.gov
	Found RRSIG signed by ssa.gov zone
	Query to dns6.ssa.gov for ssa.gov/A
	Received 1144 bytes from 137.200.4.31
	;; Response received from [137.200.4.31] 1144 octets ;; HEADER SECTION ;; id = 46856 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN A ;; ANSWER SECTION (3 records) ssa.gov. 300 IN A 137.200.4.21 ssa.gov. 300 IN A 137.200.39.62 ssa.gov. 300 IN RRSIG ( A 13 2 300 20260423210907 20260324203519 1809 ssa.gov. GrSYUzlRVG/2oohuC/qVddEvsbsLx2afSVzFAOB3tBLu9HnHf7AloEJyDrOKKRAuIrO4leOfjnw0 LqhrOj1YuA== ) ;; AUTHORITY SECTION (5 records) ssa.gov. 36000 IN NS dns6.ssa.gov. ssa.gov. 36000 IN NS dns2.ssa.gov. ssa.gov. 36000 IN NS dns1.ssa.gov. ssa.gov. 36000 IN NS dns5.ssa.gov. ssa.gov. 36000 IN RRSIG ( NS 13 2 36000 20260423210907 20260324203519 1809 ssa.gov. KGIlTtWHLNgFHpZmgr2ZxeR2Yc1MlXp4+pJ0viqKXhwymGsojY3HnYzxUt8qpyHyHZIksf9sxHiJ QWNS2yq4qw== ) ;; ADDITIONAL SECTION (15 records) dns1.ssa.gov. 60 IN A 137.200.43.8 dns2.ssa.gov. 36000 IN A 137.200.43.9 dns5.ssa.gov. 36000 IN A 137.200.4.30 dns6.ssa.gov. 36000 IN A 137.200.4.31 dns1.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::8 dns2.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::9 dns5.ssa.gov. 36000 IN AAAA 2001:1930:e03::c dns6.ssa.gov. 36000 IN AAAA 2001:1930:e03::d dns1.ssa.gov. 60 IN RRSIG ( A 13 3 60 20260505154936 20260405154121 1809 ssa.gov. TYFLIAobMc0DCng3cUB7ao+LydyUXphAaZ4qfmvzxBldMdM7CxsxHokf25eye3XGuF6Ovzuqx/Zq +Zc/BYyvxw== ) dns1.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260505154936 20260405154121 1809 ssa.gov. jwhWNLWvZj9cgs/CDRFrScSsyOUJIa798kL0O6h57WFnajXaw9ji5ZYkL5y+NSIQcYkZiUNTjZPu OsKmYPrMWw== ) dns2.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. r+LidATB+QjGcOGupb2qr3DsXU2RUo8fp37RbKqbBLGqpqexcKj8/GSHO+4440Fy/gJNKoUmC5KT /g0cRo9GJg== ) dns2.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. g0Y/XSmX3LKO0E9tr6/vlg1yaBfjrsDlR7FNDzU09S/Mtibbyx2Sp77kdCf9AXKAsQs22e/AhPvd 38JxbJci5w== ) dns5.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. /4DqvsZtIrE0PziJY3m6Bqu4u7vXH6cDBTVqTC+Q7Z7t/YZVAWRlv2FvGAbbGtfGFIFIryJ/y5mJ BZrfCb6M3g== ) dns5.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. 0i1t92dFzab33VQ624ddAO+sxRSkkVY+rl6MHqZ3wmCO7KWtAKZ1czvHRdlpZtM7T/YIIrDcEGNc cu9nF0tUfg== ) ;; { "EDNS-VERSION": 0 }
	ssa.gov A RR has value 137.200.4.21
	ssa.gov A RR has value 137.200.39.62
	Found 1 RRSIGs over A RRset
	`ssa.gov. 300 IN RRSIG ( A 13 2 300 20260423210907 20260324203519 1809 ssa.gov. GrSYUzlRVG/2oohuC/qVddEvsbsLx2afSVzFAOB3tBLu9HnHf7AloEJyDrOKKRAuIrO4leOfjnw0 LqhrOj1YuA== )`
	RRSIG=1809 and DNSKEY=1809 verifies the A RRset

ssa.gov

	Query to dns1.ssa.gov for ssa.gov/A
	Received 1144 bytes from 137.200.43.8
	;; Response received from [137.200.43.8] 1144 octets ;; HEADER SECTION ;; id = 51957 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN A ;; ANSWER SECTION (3 records) ssa.gov. 300 IN A 137.200.4.21 ssa.gov. 300 IN A 137.200.39.62 ssa.gov. 300 IN RRSIG ( A 13 2 300 20260423210907 20260324203519 1809 ssa.gov. GrSYUzlRVG/2oohuC/qVddEvsbsLx2afSVzFAOB3tBLu9HnHf7AloEJyDrOKKRAuIrO4leOfjnw0 LqhrOj1YuA== ) ;; AUTHORITY SECTION (5 records) ssa.gov. 36000 IN NS dns1.ssa.gov. ssa.gov. 36000 IN NS dns6.ssa.gov. ssa.gov. 36000 IN NS dns5.ssa.gov. ssa.gov. 36000 IN NS dns2.ssa.gov. ssa.gov. 36000 IN RRSIG ( NS 13 2 36000 20260423210907 20260324203519 1809 ssa.gov. KGIlTtWHLNgFHpZmgr2ZxeR2Yc1MlXp4+pJ0viqKXhwymGsojY3HnYzxUt8qpyHyHZIksf9sxHiJ QWNS2yq4qw== ) ;; ADDITIONAL SECTION (15 records) dns1.ssa.gov. 60 IN A 137.200.43.8 dns2.ssa.gov. 36000 IN A 137.200.43.9 dns5.ssa.gov. 36000 IN A 137.200.4.30 dns6.ssa.gov. 36000 IN A 137.200.4.31 dns1.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::8 dns2.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::9 dns5.ssa.gov. 36000 IN AAAA 2001:1930:e03::c dns6.ssa.gov. 36000 IN AAAA 2001:1930:e03::d dns1.ssa.gov. 60 IN RRSIG ( A 13 3 60 20260505154936 20260405154121 1809 ssa.gov. TYFLIAobMc0DCng3cUB7ao+LydyUXphAaZ4qfmvzxBldMdM7CxsxHokf25eye3XGuF6Ovzuqx/Zq +Zc/BYyvxw== ) dns1.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260505154936 20260405154121 1809 ssa.gov. jwhWNLWvZj9cgs/CDRFrScSsyOUJIa798kL0O6h57WFnajXaw9ji5ZYkL5y+NSIQcYkZiUNTjZPu OsKmYPrMWw== ) dns2.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. r+LidATB+QjGcOGupb2qr3DsXU2RUo8fp37RbKqbBLGqpqexcKj8/GSHO+4440Fy/gJNKoUmC5KT /g0cRo9GJg== ) dns2.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. g0Y/XSmX3LKO0E9tr6/vlg1yaBfjrsDlR7FNDzU09S/Mtibbyx2Sp77kdCf9AXKAsQs22e/AhPvd 38JxbJci5w== ) dns5.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. /4DqvsZtIrE0PziJY3m6Bqu4u7vXH6cDBTVqTC+Q7Z7t/YZVAWRlv2FvGAbbGtfGFIFIryJ/y5mJ BZrfCb6M3g== ) dns5.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. 0i1t92dFzab33VQ624ddAO+sxRSkkVY+rl6MHqZ3wmCO7KWtAKZ1czvHRdlpZtM7T/YIIrDcEGNc cu9nF0tUfg== ) ;; { "EDNS-VERSION": 0 }
	dns1.ssa.gov is authoritative for ssa.gov
	Found RRSIG signed by ssa.gov zone
	Query to dns1.ssa.gov for ssa.gov/A
	Received 1144 bytes from 137.200.43.8
	;; Response received from [137.200.43.8] 1144 octets ;; HEADER SECTION ;; id = 28718 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 5 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ssa.gov. IN A ;; ANSWER SECTION (3 records) ssa.gov. 300 IN A 137.200.39.62 ssa.gov. 300 IN A 137.200.4.21 ssa.gov. 300 IN RRSIG ( A 13 2 300 20260423210907 20260324203519 1809 ssa.gov. GrSYUzlRVG/2oohuC/qVddEvsbsLx2afSVzFAOB3tBLu9HnHf7AloEJyDrOKKRAuIrO4leOfjnw0 LqhrOj1YuA== ) ;; AUTHORITY SECTION (5 records) ssa.gov. 36000 IN NS dns6.ssa.gov. ssa.gov. 36000 IN NS dns5.ssa.gov. ssa.gov. 36000 IN NS dns1.ssa.gov. ssa.gov. 36000 IN NS dns2.ssa.gov. ssa.gov. 36000 IN RRSIG ( NS 13 2 36000 20260423210907 20260324203519 1809 ssa.gov. KGIlTtWHLNgFHpZmgr2ZxeR2Yc1MlXp4+pJ0viqKXhwymGsojY3HnYzxUt8qpyHyHZIksf9sxHiJ QWNS2yq4qw== ) ;; ADDITIONAL SECTION (15 records) dns1.ssa.gov. 60 IN A 137.200.43.8 dns2.ssa.gov. 36000 IN A 137.200.43.9 dns5.ssa.gov. 36000 IN A 137.200.4.30 dns6.ssa.gov. 36000 IN A 137.200.4.31 dns1.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::8 dns2.ssa.gov. 36000 IN AAAA 2001:1930:d07:1::9 dns5.ssa.gov. 36000 IN AAAA 2001:1930:e03::c dns6.ssa.gov. 36000 IN AAAA 2001:1930:e03::d dns1.ssa.gov. 60 IN RRSIG ( A 13 3 60 20260505154936 20260405154121 1809 ssa.gov. TYFLIAobMc0DCng3cUB7ao+LydyUXphAaZ4qfmvzxBldMdM7CxsxHokf25eye3XGuF6Ovzuqx/Zq +Zc/BYyvxw== ) dns1.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260505154936 20260405154121 1809 ssa.gov. jwhWNLWvZj9cgs/CDRFrScSsyOUJIa798kL0O6h57WFnajXaw9ji5ZYkL5y+NSIQcYkZiUNTjZPu OsKmYPrMWw== ) dns2.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. r+LidATB+QjGcOGupb2qr3DsXU2RUo8fp37RbKqbBLGqpqexcKj8/GSHO+4440Fy/gJNKoUmC5KT /g0cRo9GJg== ) dns2.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260512033911 20260412030156 1809 ssa.gov. g0Y/XSmX3LKO0E9tr6/vlg1yaBfjrsDlR7FNDzU09S/Mtibbyx2Sp77kdCf9AXKAsQs22e/AhPvd 38JxbJci5w== ) dns5.ssa.gov. 36000 IN RRSIG ( A 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. /4DqvsZtIrE0PziJY3m6Bqu4u7vXH6cDBTVqTC+Q7Z7t/YZVAWRlv2FvGAbbGtfGFIFIryJ/y5mJ BZrfCb6M3g== ) dns5.ssa.gov. 36000 IN RRSIG ( AAAA 13 3 36000 20260430103215 20260331095145 1809 ssa.gov. 0i1t92dFzab33VQ624ddAO+sxRSkkVY+rl6MHqZ3wmCO7KWtAKZ1czvHRdlpZtM7T/YIIrDcEGNc cu9nF0tUfg== ) ;; { "EDNS-VERSION": 0 }
	ssa.gov A RR has value 137.200.39.62
	ssa.gov A RR has value 137.200.4.21
	Found 1 RRSIGs over A RRset
	`ssa.gov. 300 IN RRSIG ( A 13 2 300 20260423210907 20260324203519 1809 ssa.gov. GrSYUzlRVG/2oohuC/qVddEvsbsLx2afSVzFAOB3tBLu9HnHf7AloEJyDrOKKRAuIrO4leOfjnw0 LqhrOj1YuA== )`
	RRSIG=1809 and DNSKEY=1809 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ssa.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: