Skip to content

Instantly share code, notes, and snippets.

@bortzmeyer

bortzmeyer/root-rollover.md

Created October 11, 2018 13:14
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save bortzmeyer/dc1b6bed26275335b4186e23e7cd214d to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save bortzmeyer/dc1b6bed26275335b4186e23e7cd214d to your computer and use it in GitHub Desktop.
Download ZIP
Root DNSKEY rollover
Raw
root-rollover.md

Before :

% dig +tcp +dnssec @a.root-servers.net DNSKEY .

; <<>> DiG 9.10.3-P4-Debian <<>> +tcp +dnssec @a.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60720
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
;; QUESTION SECTION:
;.			IN DNSKEY

;; ANSWER SECTION:
.			172800 IN DNSKEY 256 3 8 (
				AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7
				sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YCCSDKuZXpDPuf
				++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2
				Dn8S2vvo/PxW9PKQsyLbtd8PcwWglHgReBVp7kEv/Dd+
				3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4r
				QRkFstMX1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB
				/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7WGur
				ogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78=
				) ; ZSK; alg = RSASHA256; key id = 2134
.			172800 IN DNSKEY 256 3 8 (
				AwEAAfaifSqh+9ItxYRCwuiY0FY2NkaEwd/zmyVvakix
				DgTOkgG/PUzlEauAiKzlxGwezjqbKFPSwrY3qHmbbsST
				Y6G8hZtna8k26eCwy59Chh573cu8qtBkmUIXMYG3fSdl
				UReP+uhBWBfKI2aGwhRmQYR0zSmg7PGOde34c/rOItK1
				ebJhjTAJ6TmnON7qMfk/lKvH4qOvYtzstLhr7Pn9ZOVL
				x/WUKQpU/nEyFyTduRbz1nZqkp6yMuHwWVsABK8lUYXS
				aUrDAsuMSldhafmR/A15BxNhv9M7mzJj7UH2RVME9JbY
				inBEzWwW9GpnY+ZmBWgZiRVTaDuemCTJ5ZJWLRs=
				) ; ZSK; alg = RSASHA256; key id = 41656
.			172800 IN DNSKEY 257 3 8 (
				AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
				bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
				/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
				JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
				oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
				LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
				Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
				LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
				) ; KSK; alg = RSASHA256; key id = 19036
.			172800 IN DNSKEY 257 3 8 (
				AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO
				iW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN
				7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5
				LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8
				efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7
				pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLY
				A4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws
				9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
				) ; KSK; alg = RSASHA256; key id = 20326
.			172800 IN RRSIG	DNSKEY 8 0 172800 (
				20181022000000 20181001000000 19036 .
				LT/Gof2lit8FK1XVBHqPAc+OlHsqVgvbmHrgXw6ArAPQ
				a0AlmLkqJOQ/TJ/UVC7JKcpOkzElYDDWe87JpluxuXHE
				kENg2Tn/WywOLGmZOc65nSVR2loD6NPA4rCWnv/aBfs/
				5FP0cWc+qwnJO0H+70Go4Z/efBImhxqPsmK5/Lc6oM89
				eiwsYvttNxU+tTNmDig1OF0BfHfi07p3MtW18hg11rx1
				E7mNiC/qu8BWF/v+diMdEpXf/gk0MRSnHBakvRyySzs8
				BPVeXuWo7Iesdhl4JJ71bSpDTqDyI5wW/msvdRM3RBWa
				vPvuoQLIYrDZ76I32RmuvMnVB7j+fzefaQ== )

;; Query time: 117 msec
;; SERVER: 2001:503:ba3e::2:30#53(2001:503:ba3e::2:30)
;; WHEN: Thu Oct 11 13:13:04 UTC 2018
;; MSG SIZE  rcvd: 1414
@bortzmeyer

bortzmeyer commented Oct 11, 2018

Copy link
Copy Markdown
Author

Before, with RIPE Atlas probes:

%  blaeu-resolve -q DNSKEY -r 1000 --ednssize 4096 --displayvalidation  . 
[256 3 8 aweaadp440e6mz7c+vl4spd0ltv2qnc8 5dtw64j0rdd7ss/zwxwdj3qres2vkdo0 oxlmqv 256 3 8 aweaafaifsqh+9itxyrcwuiy0fy2nkae wd/zmyvvakixdgtokgg/puzleauaikzl xgwezj 257 3 8 aweaaagaiklvzrpc6ia7gezahor+9w29 euxhjhvvloyqbsew0o8gccjffvqutf6v 58fljw 257 3 8 aweaaaz/tam8ytn4mfeh5eyi96wsvext bavkmgjzkktoiw1vkibzxef3+/4rgwoq 7hrxri] : 381 occurrences 
[] : 2 occurrences 
[TIMEOUT(S)] : 13 occurrences 
[ (Authentic Data flag)   (TRUNCATED May have to use --ednssize) ] : 20 occurrences 
[ERROR: NXDOMAIN] : 4 occurrences 
[256 3 8 aweaacmhlrufffa/nzog3s0ez9kdal9g 1guefgoqvd2hmzwb1gx5af+oovsyg95r eb++ij 257 3 8 aweaaaq+qqsddhbyq/dfr5/u23qcdnoq jzjybcsfjrgnldy2+vy+ubhuiz0hg1xk 5d+dk7] : 1 occurrences 
[ (TRUNCATED May have to use --ednssize)  256 3 8 aweaadp440e6mz7c+vl4spd0ltv2qnc8 5dtw64j0rdd7ss/zwxwdj3qres2vkdo0 oxlmqv 256 3 8 aweaafaifsqh+9itxyrcwuiy0fy2nkae wd/zmyvvakixdgtokgg/puzleauaikzl xgwezj 257 3 8 aweaaagaiklvzrpc6ia7gezahor+9w29 euxhjhvvloyqbsew0o8gccjffvqutf6v 58fljw 257 3 8 aweaaaz/tam8ytn4mfeh5eyi96wsvext bavkmgjzkktoiw1vkibzxef3+/4rgwoq 7hrxri] : 1 occurrences 
[ (Authentic Data flag)  256 3 8 aweaadp440e6mz7c+vl4spd0ltv2qnc8 5dtw64j0rdd7ss/zwxwdj3qres2vkdo0 oxlmqv 256 3 8 aweaafaifsqh+9itxyrcwuiy0fy2nkae wd/zmyvvakixdgtokgg/puzleauaikzl xgwezj 257 3 8 aweaaagaiklvzrpc6ia7gezahor+9w29 euxhjhvvloyqbsew0o8gccjffvqutf6v 58fljw 257 3 8 aweaaaz/tam8ytn4mfeh5eyi96wsvext bavkmgjzkktoiw1vkibzxef3+/4rgwoq 7hrxri] : 535 occurrences 
[ERROR: FORMERR] : 3 occurrences 
[ERROR: SERVFAIL] : 2 occurrences 
[ (TRUNCATED May have to use --ednssize) ] : 14 occurrences 
[ (Authentic Data flag)   (TRUNCATED May have to use --ednssize)  256 3 8 aweaadp440e6mz7c+vl4spd0ltv2qnc8 5dtw64j0rdd7ss/zwxwdj3qres2vkdo0 oxlmqv 256 3 8 aweaafaifsqh+9itxyrcwuiy0fy2nkae wd/zmyvvakixdgtokgg/puzleauaikzl xgwezj 257 3 8 aweaaagaiklvzrpc6ia7gezahor+9w29 euxhjhvvloyqbsew0o8gccjffvqutf6v 58fljw 257 3 8 aweaaaz/tam8ytn4mfeh5eyi96wsvext bavkmgjzkktoiw1vkibzxef3+/4rgwoq 7hrxri] : 1 occurrences 
Test #16457608 done at 2018-10-11T14:30:19Z

@bortzmeyer

bortzmeyer commented Oct 11, 2018

Copy link
Copy Markdown
Author

After

% for letter in a b c d e f g h  i j k l m; do
echo ${letter}.ROOT-SERVERS.NET ; dig +tcp +dnssec @${letter}.root-servers.net DNSKEY .
done
a.ROOT-SERVERS.NET

; <<>> DiG 9.10.3-P4-Debian <<>> +tcp +dnssec @a.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26468
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;.			IN DNSKEY

;; ANSWER SECTION:
.			172800 IN DNSKEY 257 3 8 (
				AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
				bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
				/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
				JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
				oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
				LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
				Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
				LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
				) ; KSK; alg = RSASHA256; key id = 19036
.			172800 IN DNSKEY 256 3 8 (
				AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7
				sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YCCSDKuZXpDPuf
				++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2
				Dn8S2vvo/PxW9PKQsyLbtd8PcwWglHgReBVp7kEv/Dd+
				3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4r
				QRkFstMX1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB
				/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7WGur
				ogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78=
				) ; ZSK; alg = RSASHA256; key id = 2134
.			172800 IN DNSKEY 257 3 8 (
				AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO
				iW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN
				7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5
				LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8
				efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7
				pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLY
				A4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws
				9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
				) ; KSK; alg = RSASHA256; key id = 20326
.			172800 IN RRSIG	DNSKEY 8 0 172800 (
				20181101000000 20181011000000 20326 .
				M/LTswhCjuJUTvX1CFqC+TiJ4Fez7AROa5mM+1AI2MJ+
				zLHhr3JaMxyydFLWrBHR0056Hz7hNqQ9i63hGeiR6uMf
				anF0jIRb9XqgGP8nY37T8ESpS1UiM9rJn4b40RFqDSEv
				uFdd4hGwK3EX0snOCLdUT8JezxtreXI0RilmqDC2g44T
				AKyFw+Is9Qwl+k6+fbMQ/atA8adANbYgyuHfiwQCCUtX
				RaTCpRgQtsAz9izO0VYIGeHIoJta0demAIrLCOHNVH2o
				gHTqMEQ18VqUNzTd0aGURACBdS7PeP2KogPD7N8Q970O
				84TFmO4ahPIvqO+milCn5OQTbbgsjHqY6Q== )

;; Query time: 115 msec
;; SERVER: 2001:503:ba3e::2:30#53(2001:503:ba3e::2:30)
;; WHEN: Thu Oct 11 16:00:32 UTC 2018
;; MSG SIZE  rcvd: 1139

b.ROOT-SERVERS.NET

; <<>> DiG 9.10.3-P4-Debian <<>> +tcp +dnssec @b.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57457
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;.			IN DNSKEY

;; ANSWER SECTION:
.			172800 IN DNSKEY 257 3 8 (
				AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO
				iW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN
				7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5
				LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8
				efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7
				pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLY
				A4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws
				9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
				) ; KSK; alg = RSASHA256; key id = 20326
.			172800 IN DNSKEY 257 3 8 (
				AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
				bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
				/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
				JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
				oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
				LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
				Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
				LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
				) ; KSK; alg = RSASHA256; key id = 19036
.			172800 IN DNSKEY 256 3 8 (
				AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7
				sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YCCSDKuZXpDPuf
				++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2
				Dn8S2vvo/PxW9PKQsyLbtd8PcwWglHgReBVp7kEv/Dd+
				3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4r
				QRkFstMX1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB
				/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7WGur
				ogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78=
				) ; ZSK; alg = RSASHA256; key id = 2134
.			172800 IN RRSIG	DNSKEY 8 0 172800 (
				20181101000000 20181011000000 20326 .
				M/LTswhCjuJUTvX1CFqC+TiJ4Fez7AROa5mM+1AI2MJ+
				zLHhr3JaMxyydFLWrBHR0056Hz7hNqQ9i63hGeiR6uMf
				anF0jIRb9XqgGP8nY37T8ESpS1UiM9rJn4b40RFqDSEv
				uFdd4hGwK3EX0snOCLdUT8JezxtreXI0RilmqDC2g44T
				AKyFw+Is9Qwl+k6+fbMQ/atA8adANbYgyuHfiwQCCUtX
				RaTCpRgQtsAz9izO0VYIGeHIoJta0demAIrLCOHNVH2o
				gHTqMEQ18VqUNzTd0aGURACBdS7PeP2KogPD7N8Q970O
				84TFmO4ahPIvqO+milCn5OQTbbgsjHqY6Q== )

;; Query time: 117 msec
;; SERVER: 2001:500:200::b#53(2001:500:200::b)
;; WHEN: Thu Oct 11 16:00:32 UTC 2018
;; MSG SIZE  rcvd: 1139

c.ROOT-SERVERS.NET

; <<>> DiG 9.10.3-P4-Debian <<>> +tcp +dnssec @c.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46891
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;.			IN DNSKEY

;; ANSWER SECTION:
.			172800 IN DNSKEY 257 3 8 (
				AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO
				iW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN
				7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5
				LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8
				efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7
				pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLY
				A4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws
				9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
				) ; KSK; alg = RSASHA256; key id = 20326
.			172800 IN DNSKEY 256 3 8 (
				AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7
				sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YCCSDKuZXpDPuf
				++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2
				Dn8S2vvo/PxW9PKQsyLbtd8PcwWglHgReBVp7kEv/Dd+
				3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4r
				QRkFstMX1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB
				/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7WGur
				ogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78=
				) ; ZSK; alg = RSASHA256; key id = 2134
.			172800 IN DNSKEY 257 3 8 (
				AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
				bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
				/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
				JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
				oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
				LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
				Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
				LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
				) ; KSK; alg = RSASHA256; key id = 19036
.			172800 IN RRSIG	DNSKEY 8 0 172800 (
				20181101000000 20181011000000 20326 .
				M/LTswhCjuJUTvX1CFqC+TiJ4Fez7AROa5mM+1AI2MJ+
				zLHhr3JaMxyydFLWrBHR0056Hz7hNqQ9i63hGeiR6uMf
				anF0jIRb9XqgGP8nY37T8ESpS1UiM9rJn4b40RFqDSEv
				uFdd4hGwK3EX0snOCLdUT8JezxtreXI0RilmqDC2g44T
				AKyFw+Is9Qwl+k6+fbMQ/atA8adANbYgyuHfiwQCCUtX
				RaTCpRgQtsAz9izO0VYIGeHIoJta0demAIrLCOHNVH2o
				gHTqMEQ18VqUNzTd0aGURACBdS7PeP2KogPD7N8Q970O
				84TFmO4ahPIvqO+milCn5OQTbbgsjHqY6Q== )

;; Query time: 5 msec
;; SERVER: 2001:500:2::c#53(2001:500:2::c)
;; WHEN: Thu Oct 11 16:00:32 UTC 2018
;; MSG SIZE  rcvd: 1139

d.ROOT-SERVERS.NET

; <<>> DiG 9.10.3-P4-Debian <<>> +tcp +dnssec @d.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60565
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1450
;; QUESTION SECTION:
;.			IN DNSKEY

;; ANSWER SECTION:
.			172800 IN DNSKEY 256 3 8 (
				AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7
				sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YCCSDKuZXpDPuf
				++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2
				Dn8S2vvo/PxW9PKQsyLbtd8PcwWglHgReBVp7kEv/Dd+
				3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4r
				QRkFstMX1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB
				/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7WGur
				ogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78=
				) ; ZSK; alg = RSASHA256; key id = 2134
.			172800 IN DNSKEY 257 3 8 (
				AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
				bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
				/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
				JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
				oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
				LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
				Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
				LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
				) ; KSK; alg = RSASHA256; key id = 19036
.			172800 IN DNSKEY 257 3 8 (
				AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO
				iW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN
				7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5
				LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8
				efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7
				pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLY
				A4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws
				9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
				) ; KSK; alg = RSASHA256; key id = 20326
.			172800 IN RRSIG	DNSKEY 8 0 172800 (
				20181101000000 20181011000000 20326 .
				M/LTswhCjuJUTvX1CFqC+TiJ4Fez7AROa5mM+1AI2MJ+
				zLHhr3JaMxyydFLWrBHR0056Hz7hNqQ9i63hGeiR6uMf
				anF0jIRb9XqgGP8nY37T8ESpS1UiM9rJn4b40RFqDSEv
				uFdd4hGwK3EX0snOCLdUT8JezxtreXI0RilmqDC2g44T
				AKyFw+Is9Qwl+k6+fbMQ/atA8adANbYgyuHfiwQCCUtX
				RaTCpRgQtsAz9izO0VYIGeHIoJta0demAIrLCOHNVH2o
				gHTqMEQ18VqUNzTd0aGURACBdS7PeP2KogPD7N8Q970O
				84TFmO4ahPIvqO+milCn5OQTbbgsjHqY6Q== )

;; Query time: 91 msec
;; SERVER: 2001:500:2d::d#53(2001:500:2d::d)
;; WHEN: Thu Oct 11 16:00:32 UTC 2018
;; MSG SIZE  rcvd: 1139

e.ROOT-SERVERS.NET

; <<>> DiG 9.10.3-P4-Debian <<>> +tcp +dnssec @e.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63171
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;.			IN DNSKEY

;; ANSWER SECTION:
.			172800 IN DNSKEY 257 3 8 (
				AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO
				iW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN
				7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5
				LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8
				efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7
				pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLY
				A4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws
				9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
				) ; KSK; alg = RSASHA256; key id = 20326
.			172800 IN DNSKEY 256 3 8 (
				AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7
				sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YCCSDKuZXpDPuf
				++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2
				Dn8S2vvo/PxW9PKQsyLbtd8PcwWglHgReBVp7kEv/Dd+
				3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4r
				QRkFstMX1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB
				/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7WGur
				ogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78=
				) ; ZSK; alg = RSASHA256; key id = 2134
.			172800 IN DNSKEY 257 3 8 (
				AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
				bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
				/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
				JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
				oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
				LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
				Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
				LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
				) ; KSK; alg = RSASHA256; key id = 19036
.			172800 IN RRSIG	DNSKEY 8 0 172800 (
				20181101000000 20181011000000 20326 .
				M/LTswhCjuJUTvX1CFqC+TiJ4Fez7AROa5mM+1AI2MJ+
				zLHhr3JaMxyydFLWrBHR0056Hz7hNqQ9i63hGeiR6uMf
				anF0jIRb9XqgGP8nY37T8ESpS1UiM9rJn4b40RFqDSEv
				uFdd4hGwK3EX0snOCLdUT8JezxtreXI0RilmqDC2g44T
				AKyFw+Is9Qwl+k6+fbMQ/atA8adANbYgyuHfiwQCCUtX
				RaTCpRgQtsAz9izO0VYIGeHIoJta0demAIrLCOHNVH2o
				gHTqMEQ18VqUNzTd0aGURACBdS7PeP2KogPD7N8Q970O
				84TFmO4ahPIvqO+milCn5OQTbbgsjHqY6Q== )

;; Query time: 18 msec
;; SERVER: 2001:500:a8::e#53(2001:500:a8::e)
;; WHEN: Thu Oct 11 16:00:32 UTC 2018
;; MSG SIZE  rcvd: 1139

f.ROOT-SERVERS.NET

; <<>> DiG 9.10.3-P4-Debian <<>> +tcp +dnssec @f.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23872
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 65535
;; QUESTION SECTION:
;.			IN DNSKEY

;; ANSWER SECTION:
.			172800 IN DNSKEY 256 3 8 (
				AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7
				sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YCCSDKuZXpDPuf
				++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2
				Dn8S2vvo/PxW9PKQsyLbtd8PcwWglHgReBVp7kEv/Dd+
				3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4r
				QRkFstMX1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB
				/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7WGur
				ogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78=
				) ; ZSK; alg = RSASHA256; key id = 2134
.			172800 IN DNSKEY 256 3 8 (
				AwEAAfaifSqh+9ItxYRCwuiY0FY2NkaEwd/zmyVvakix
				DgTOkgG/PUzlEauAiKzlxGwezjqbKFPSwrY3qHmbbsST
				Y6G8hZtna8k26eCwy59Chh573cu8qtBkmUIXMYG3fSdl
				UReP+uhBWBfKI2aGwhRmQYR0zSmg7PGOde34c/rOItK1
				ebJhjTAJ6TmnON7qMfk/lKvH4qOvYtzstLhr7Pn9ZOVL
				x/WUKQpU/nEyFyTduRbz1nZqkp6yMuHwWVsABK8lUYXS
				aUrDAsuMSldhafmR/A15BxNhv9M7mzJj7UH2RVME9JbY
				inBEzWwW9GpnY+ZmBWgZiRVTaDuemCTJ5ZJWLRs=
				) ; ZSK; alg = RSASHA256; key id = 41656
.			172800 IN DNSKEY 257 3 8 (
				AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
				bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
				/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
				JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
				oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
				LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
				Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
				LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
				) ; KSK; alg = RSASHA256; key id = 19036
.			172800 IN DNSKEY 257 3 8 (
				AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO
				iW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN
				7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5
				LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8
				efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7
				pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLY
				A4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws
				9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
				) ; KSK; alg = RSASHA256; key id = 20326
.			172800 IN RRSIG	DNSKEY 8 0 172800 (
				20181022000000 20181001000000 19036 .
				LT/Gof2lit8FK1XVBHqPAc+OlHsqVgvbmHrgXw6ArAPQ
				a0AlmLkqJOQ/TJ/UVC7JKcpOkzElYDDWe87JpluxuXHE
				kENg2Tn/WywOLGmZOc65nSVR2loD6NPA4rCWnv/aBfs/
				5FP0cWc+qwnJO0H+70Go4Z/efBImhxqPsmK5/Lc6oM89
				eiwsYvttNxU+tTNmDig1OF0BfHfi07p3MtW18hg11rx1
				E7mNiC/qu8BWF/v+diMdEpXf/gk0MRSnHBakvRyySzs8
				BPVeXuWo7Iesdhl4JJ71bSpDTqDyI5wW/msvdRM3RBWa
				vPvuoQLIYrDZ76I32RmuvMnVB7j+fzefaQ== )

;; Query time: 5 msec
;; SERVER: 2001:500:2f::f#53(2001:500:2f::f)
;; WHEN: Thu Oct 11 16:00:32 UTC 2018
;; MSG SIZE  rcvd: 1414

g.ROOT-SERVERS.NET

; <<>> DiG 9.10.3-P4-Debian <<>> +tcp +dnssec @g.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5730
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;.			IN DNSKEY

;; ANSWER SECTION:
.			172800 IN DNSKEY 257 3 8 (
				AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
				bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
				/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
				JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
				oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
				LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
				Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
				LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
				) ; KSK; alg = RSASHA256; key id = 19036
.			172800 IN DNSKEY 257 3 8 (
				AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO
				iW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN
				7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5
				LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8
				efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7
				pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLY
				A4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws
				9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
				) ; KSK; alg = RSASHA256; key id = 20326
.			172800 IN DNSKEY 256 3 8 (
				AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7
				sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YCCSDKuZXpDPuf
				++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2
				Dn8S2vvo/PxW9PKQsyLbtd8PcwWglHgReBVp7kEv/Dd+
				3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4r
				QRkFstMX1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB
				/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7WGur
				ogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78=
				) ; ZSK; alg = RSASHA256; key id = 2134
.			172800 IN RRSIG	DNSKEY 8 0 172800 (
				20181101000000 20181011000000 20326 .
				M/LTswhCjuJUTvX1CFqC+TiJ4Fez7AROa5mM+1AI2MJ+
				zLHhr3JaMxyydFLWrBHR0056Hz7hNqQ9i63hGeiR6uMf
				anF0jIRb9XqgGP8nY37T8ESpS1UiM9rJn4b40RFqDSEv
				uFdd4hGwK3EX0snOCLdUT8JezxtreXI0RilmqDC2g44T
				AKyFw+Is9Qwl+k6+fbMQ/atA8adANbYgyuHfiwQCCUtX
				RaTCpRgQtsAz9izO0VYIGeHIoJta0demAIrLCOHNVH2o
				gHTqMEQ18VqUNzTd0aGURACBdS7PeP2KogPD7N8Q970O
				84TFmO4ahPIvqO+milCn5OQTbbgsjHqY6Q== )

;; Query time: 91 msec
;; SERVER: 2001:500:12::d0d#53(2001:500:12::d0d)
;; WHEN: Thu Oct 11 16:00:33 UTC 2018
;; MSG SIZE  rcvd: 1139

h.ROOT-SERVERS.NET

; <<>> DiG 9.10.3-P4-Debian <<>> +tcp +dnssec @h.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2824
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;.			IN DNSKEY

;; ANSWER SECTION:
.			172800 IN DNSKEY 256 3 8 (
				AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7
				sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YCCSDKuZXpDPuf
				++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2
				Dn8S2vvo/PxW9PKQsyLbtd8PcwWglHgReBVp7kEv/Dd+
				3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4r
				QRkFstMX1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB
				/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7WGur
				ogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78=
				) ; ZSK; alg = RSASHA256; key id = 2134
.			172800 IN DNSKEY 257 3 8 (
				AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
				bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
				/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
				JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
				oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
				LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
				Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
				LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
				) ; KSK; alg = RSASHA256; key id = 19036
.			172800 IN DNSKEY 257 3 8 (
				AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO
				iW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN
				7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5
				LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8
				efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7
				pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLY
				A4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws
				9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
				) ; KSK; alg = RSASHA256; key id = 20326
.			172800 IN RRSIG	DNSKEY 8 0 172800 (
				20181101000000 20181011000000 20326 .
				M/LTswhCjuJUTvX1CFqC+TiJ4Fez7AROa5mM+1AI2MJ+
				zLHhr3JaMxyydFLWrBHR0056Hz7hNqQ9i63hGeiR6uMf
				anF0jIRb9XqgGP8nY37T8ESpS1UiM9rJn4b40RFqDSEv
				uFdd4hGwK3EX0snOCLdUT8JezxtreXI0RilmqDC2g44T
				AKyFw+Is9Qwl+k6+fbMQ/atA8adANbYgyuHfiwQCCUtX
				RaTCpRgQtsAz9izO0VYIGeHIoJta0demAIrLCOHNVH2o
				gHTqMEQ18VqUNzTd0aGURACBdS7PeP2KogPD7N8Q970O
				84TFmO4ahPIvqO+milCn5OQTbbgsjHqY6Q== )

;; Query time: 94 msec
;; SERVER: 2001:500:1::53#53(2001:500:1::53)
;; WHEN: Thu Oct 11 16:00:33 UTC 2018
;; MSG SIZE  rcvd: 1139

i.ROOT-SERVERS.NET

; <<>> DiG 9.10.3-P4-Debian <<>> +tcp +dnssec @i.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42767
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;.			IN DNSKEY

;; ANSWER SECTION:
.			172800 IN DNSKEY 256 3 8 (
				AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7
				sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YCCSDKuZXpDPuf
				++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2
				Dn8S2vvo/PxW9PKQsyLbtd8PcwWglHgReBVp7kEv/Dd+
				3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4r
				QRkFstMX1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB
				/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7WGur
				ogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78=
				) ; ZSK; alg = RSASHA256; key id = 2134
.			172800 IN DNSKEY 257 3 8 (
				AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO
				iW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN
				7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5
				LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8
				efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7
				pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLY
				A4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws
				9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
				) ; KSK; alg = RSASHA256; key id = 20326
.			172800 IN DNSKEY 256 3 8 (
				AwEAAfaifSqh+9ItxYRCwuiY0FY2NkaEwd/zmyVvakix
				DgTOkgG/PUzlEauAiKzlxGwezjqbKFPSwrY3qHmbbsST
				Y6G8hZtna8k26eCwy59Chh573cu8qtBkmUIXMYG3fSdl
				UReP+uhBWBfKI2aGwhRmQYR0zSmg7PGOde34c/rOItK1
				ebJhjTAJ6TmnON7qMfk/lKvH4qOvYtzstLhr7Pn9ZOVL
				x/WUKQpU/nEyFyTduRbz1nZqkp6yMuHwWVsABK8lUYXS
				aUrDAsuMSldhafmR/A15BxNhv9M7mzJj7UH2RVME9JbY
				inBEzWwW9GpnY+ZmBWgZiRVTaDuemCTJ5ZJWLRs=
				) ; ZSK; alg = RSASHA256; key id = 41656
.			172800 IN DNSKEY 257 3 8 (
				AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
				bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
				/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
				JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
				oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
				LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
				Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
				LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
				) ; KSK; alg = RSASHA256; key id = 19036
.			172800 IN RRSIG	DNSKEY 8 0 172800 (
				20181022000000 20181001000000 19036 .
				LT/Gof2lit8FK1XVBHqPAc+OlHsqVgvbmHrgXw6ArAPQ
				a0AlmLkqJOQ/TJ/UVC7JKcpOkzElYDDWe87JpluxuXHE
				kENg2Tn/WywOLGmZOc65nSVR2loD6NPA4rCWnv/aBfs/
				5FP0cWc+qwnJO0H+70Go4Z/efBImhxqPsmK5/Lc6oM89
				eiwsYvttNxU+tTNmDig1OF0BfHfi07p3MtW18hg11rx1
				E7mNiC/qu8BWF/v+diMdEpXf/gk0MRSnHBakvRyySzs8
				BPVeXuWo7Iesdhl4JJ71bSpDTqDyI5wW/msvdRM3RBWa
				vPvuoQLIYrDZ76I32RmuvMnVB7j+fzefaQ== )

;; Query time: 18 msec
;; SERVER: 2001:7fe::53#53(2001:7fe::53)
;; WHEN: Thu Oct 11 16:00:33 UTC 2018
;; MSG SIZE  rcvd: 1414

j.ROOT-SERVERS.NET

; <<>> DiG 9.10.3-P4-Debian <<>> +tcp +dnssec @j.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52189
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
;; QUESTION SECTION:
;.			IN DNSKEY

;; ANSWER SECTION:
.			172800 IN DNSKEY 256 3 8 (
				AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7
				sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YCCSDKuZXpDPuf
				++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2
				Dn8S2vvo/PxW9PKQsyLbtd8PcwWglHgReBVp7kEv/Dd+
				3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4r
				QRkFstMX1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB
				/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7WGur
				ogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78=
				) ; ZSK; alg = RSASHA256; key id = 2134
.			172800 IN DNSKEY 256 3 8 (
				AwEAAfaifSqh+9ItxYRCwuiY0FY2NkaEwd/zmyVvakix
				DgTOkgG/PUzlEauAiKzlxGwezjqbKFPSwrY3qHmbbsST
				Y6G8hZtna8k26eCwy59Chh573cu8qtBkmUIXMYG3fSdl
				UReP+uhBWBfKI2aGwhRmQYR0zSmg7PGOde34c/rOItK1
				ebJhjTAJ6TmnON7qMfk/lKvH4qOvYtzstLhr7Pn9ZOVL
				x/WUKQpU/nEyFyTduRbz1nZqkp6yMuHwWVsABK8lUYXS
				aUrDAsuMSldhafmR/A15BxNhv9M7mzJj7UH2RVME9JbY
				inBEzWwW9GpnY+ZmBWgZiRVTaDuemCTJ5ZJWLRs=
				) ; ZSK; alg = RSASHA256; key id = 41656
.			172800 IN DNSKEY 257 3 8 (
				AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
				bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
				/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
				JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
				oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
				LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
				Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
				LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
				) ; KSK; alg = RSASHA256; key id = 19036
.			172800 IN DNSKEY 257 3 8 (
				AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO
				iW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN
				7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5
				LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8
				efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7
				pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLY
				A4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws
				9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
				) ; KSK; alg = RSASHA256; key id = 20326
.			172800 IN RRSIG	DNSKEY 8 0 172800 (
				20181022000000 20181001000000 19036 .
				LT/Gof2lit8FK1XVBHqPAc+OlHsqVgvbmHrgXw6ArAPQ
				a0AlmLkqJOQ/TJ/UVC7JKcpOkzElYDDWe87JpluxuXHE
				kENg2Tn/WywOLGmZOc65nSVR2loD6NPA4rCWnv/aBfs/
				5FP0cWc+qwnJO0H+70Go4Z/efBImhxqPsmK5/Lc6oM89
				eiwsYvttNxU+tTNmDig1OF0BfHfi07p3MtW18hg11rx1
				E7mNiC/qu8BWF/v+diMdEpXf/gk0MRSnHBakvRyySzs8
				BPVeXuWo7Iesdhl4JJ71bSpDTqDyI5wW/msvdRM3RBWa
				vPvuoQLIYrDZ76I32RmuvMnVB7j+fzefaQ== )

;; Query time: 14 msec
;; SERVER: 2001:503:c27::2:30#53(2001:503:c27::2:30)
;; WHEN: Thu Oct 11 16:00:33 UTC 2018
;; MSG SIZE  rcvd: 1414

k.ROOT-SERVERS.NET

; <<>> DiG 9.10.3-P4-Debian <<>> +tcp +dnssec @k.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55004
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;.			IN DNSKEY

;; ANSWER SECTION:
.			172800 IN DNSKEY 256 3 8 (
				AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7
				sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YCCSDKuZXpDPuf
				++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2
				Dn8S2vvo/PxW9PKQsyLbtd8PcwWglHgReBVp7kEv/Dd+
				3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4r
				QRkFstMX1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB
				/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7WGur
				ogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78=
				) ; ZSK; alg = RSASHA256; key id = 2134
.			172800 IN DNSKEY 257 3 8 (
				AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
				bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
				/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
				JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
				oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
				LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
				Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
				LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
				) ; KSK; alg = RSASHA256; key id = 19036
.			172800 IN DNSKEY 257 3 8 (
				AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO
				iW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN
				7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5
				LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8
				efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7
				pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLY
				A4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws
				9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
				) ; KSK; alg = RSASHA256; key id = 20326
.			172800 IN RRSIG	DNSKEY 8 0 172800 (
				20181101000000 20181011000000 20326 .
				M/LTswhCjuJUTvX1CFqC+TiJ4Fez7AROa5mM+1AI2MJ+
				zLHhr3JaMxyydFLWrBHR0056Hz7hNqQ9i63hGeiR6uMf
				anF0jIRb9XqgGP8nY37T8ESpS1UiM9rJn4b40RFqDSEv
				uFdd4hGwK3EX0snOCLdUT8JezxtreXI0RilmqDC2g44T
				AKyFw+Is9Qwl+k6+fbMQ/atA8adANbYgyuHfiwQCCUtX
				RaTCpRgQtsAz9izO0VYIGeHIoJta0demAIrLCOHNVH2o
				gHTqMEQ18VqUNzTd0aGURACBdS7PeP2KogPD7N8Q970O
				84TFmO4ahPIvqO+milCn5OQTbbgsjHqY6Q== )

;; Query time: 19 msec
;; SERVER: 2001:7fd::1#53(2001:7fd::1)
;; WHEN: Thu Oct 11 16:00:33 UTC 2018
;; MSG SIZE  rcvd: 1139

l.ROOT-SERVERS.NET

; <<>> DiG 9.10.3-P4-Debian <<>> +tcp +dnssec @l.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24076
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;.			IN DNSKEY

;; ANSWER SECTION:
.			172800 IN DNSKEY 256 3 8 (
				AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7
				sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YCCSDKuZXpDPuf
				++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2
				Dn8S2vvo/PxW9PKQsyLbtd8PcwWglHgReBVp7kEv/Dd+
				3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4r
				QRkFstMX1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB
				/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7WGur
				ogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78=
				) ; ZSK; alg = RSASHA256; key id = 2134
.			172800 IN DNSKEY 256 3 8 (
				AwEAAfaifSqh+9ItxYRCwuiY0FY2NkaEwd/zmyVvakix
				DgTOkgG/PUzlEauAiKzlxGwezjqbKFPSwrY3qHmbbsST
				Y6G8hZtna8k26eCwy59Chh573cu8qtBkmUIXMYG3fSdl
				UReP+uhBWBfKI2aGwhRmQYR0zSmg7PGOde34c/rOItK1
				ebJhjTAJ6TmnON7qMfk/lKvH4qOvYtzstLhr7Pn9ZOVL
				x/WUKQpU/nEyFyTduRbz1nZqkp6yMuHwWVsABK8lUYXS
				aUrDAsuMSldhafmR/A15BxNhv9M7mzJj7UH2RVME9JbY
				inBEzWwW9GpnY+ZmBWgZiRVTaDuemCTJ5ZJWLRs=
				) ; ZSK; alg = RSASHA256; key id = 41656
.			172800 IN DNSKEY 257 3 8 (
				AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
				bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
				/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
				JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
				oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
				LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
				Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
				LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
				) ; KSK; alg = RSASHA256; key id = 19036
.			172800 IN DNSKEY 257 3 8 (
				AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO
				iW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN
				7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5
				LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8
				efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7
				pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLY
				A4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws
				9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
				) ; KSK; alg = RSASHA256; key id = 20326
.			172800 IN RRSIG	DNSKEY 8 0 172800 (
				20181022000000 20181001000000 19036 .
				LT/Gof2lit8FK1XVBHqPAc+OlHsqVgvbmHrgXw6ArAPQ
				a0AlmLkqJOQ/TJ/UVC7JKcpOkzElYDDWe87JpluxuXHE
				kENg2Tn/WywOLGmZOc65nSVR2loD6NPA4rCWnv/aBfs/
				5FP0cWc+qwnJO0H+70Go4Z/efBImhxqPsmK5/Lc6oM89
				eiwsYvttNxU+tTNmDig1OF0BfHfi07p3MtW18hg11rx1
				E7mNiC/qu8BWF/v+diMdEpXf/gk0MRSnHBakvRyySzs8
				BPVeXuWo7Iesdhl4JJ71bSpDTqDyI5wW/msvdRM3RBWa
				vPvuoQLIYrDZ76I32RmuvMnVB7j+fzefaQ== )

;; Query time: 12 msec
;; SERVER: 2001:500:9f::42#53(2001:500:9f::42)
;; WHEN: Thu Oct 11 16:00:33 UTC 2018
;; MSG SIZE  rcvd: 1414

m.ROOT-SERVERS.NET

; <<>> DiG 9.10.3-P4-Debian <<>> +tcp +dnssec @m.root-servers.net DNSKEY .
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37278
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;.			IN DNSKEY

;; ANSWER SECTION:
.			172800 IN DNSKEY 256 3 8 (
				AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7
				sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YCCSDKuZXpDPuf
				++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2
				Dn8S2vvo/PxW9PKQsyLbtd8PcwWglHgReBVp7kEv/Dd+
				3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4r
				QRkFstMX1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB
				/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7WGur
				ogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78=
				) ; ZSK; alg = RSASHA256; key id = 2134
.			172800 IN DNSKEY 257 3 8 (
				AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO
				iW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN
				7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5
				LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8
				efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7
				pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLY
				A4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws
				9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
				) ; KSK; alg = RSASHA256; key id = 20326
.			172800 IN DNSKEY 257 3 8 (
				AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
				bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
				/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
				JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
				oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
				LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
				Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
				LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
				) ; KSK; alg = RSASHA256; key id = 19036
.			172800 IN RRSIG	DNSKEY 8 0 172800 (
				20181101000000 20181011000000 20326 .
				M/LTswhCjuJUTvX1CFqC+TiJ4Fez7AROa5mM+1AI2MJ+
				zLHhr3JaMxyydFLWrBHR0056Hz7hNqQ9i63hGeiR6uMf
				anF0jIRb9XqgGP8nY37T8ESpS1UiM9rJn4b40RFqDSEv
				uFdd4hGwK3EX0snOCLdUT8JezxtreXI0RilmqDC2g44T
				AKyFw+Is9Qwl+k6+fbMQ/atA8adANbYgyuHfiwQCCUtX
				RaTCpRgQtsAz9izO0VYIGeHIoJta0demAIrLCOHNVH2o
				gHTqMEQ18VqUNzTd0aGURACBdS7PeP2KogPD7N8Q970O
				84TFmO4ahPIvqO+milCn5OQTbbgsjHqY6Q== )

;; Query time: 25 msec
;; SERVER: 2001:dc3::35#53(2001:dc3::35)
;; WHEN: Thu Oct 11 16:00:33 UTC 2018
;; MSG SIZE  rcvd: 1139

@bortzmeyer

bortzmeyer commented Oct 11, 2018

Copy link
Copy Markdown
Author

Not immediate:

% date -u; check-soa -i .
Thu Oct 11 16:02:07 UTC 2018
a.root-servers.net.
	198.41.0.4: OK: 2018101100 (11 ms)
	2001:503:ba3e::2:30: OK: 2018101100 (11 ms)
b.root-servers.net.
	2001:500:200::b: OK: 2018101100 (105 ms)
	199.9.14.201: OK: 2018101100 (135 ms)
c.root-servers.net.
	192.33.4.12: OK: 2018101100 (3 ms)
	2001:500:2::c: OK: 2018101100 (21 ms)
d.root-servers.net.
	199.7.91.13: OK: 2018101100 (1 ms)
	2001:500:2d::d: OK: 2018101100 (91 ms)
e.root-servers.net.
	192.203.230.10: OK: 2018101001 (5 ms)
	2001:500:a8::e: OK: 2018101001 (6 ms)
f.root-servers.net.
	2001:500:2f::f: OK: 2018101100 (4 ms)
	192.5.5.241: OK: 2018101100 (4 ms)
g.root-servers.net.
	2001:500:12::d0d: OK: 2018101100 (85 ms)
	192.112.36.4: OK: 2018101100 (122 ms)
h.root-servers.net.
	2001:500:1::53: OK: 2018101100 (80 ms)
	198.97.190.53: OK: 2018101100 (81 ms)
i.root-servers.net.
	2001:7fe::53: OK: 2018101100 (14 ms)
	192.36.148.17: OK: 2018101100 (15 ms)
j.root-servers.net.
	2001:503:c27::2:30: OK: 2018101100 (17 ms)
	192.58.128.30: OK: 2018101100 (154 ms)
k.root-servers.net.
	2001:7fd::1: OK: 2018101100 (9 ms)
	193.0.14.129: OK: 2018101100 (9 ms)
l.root-servers.net.
	199.7.83.42: OK: 2018101001 (18 ms)
	2001:500:9f::42: OK: 2018101001 (18 ms)
m.root-servers.net.
	2001:dc3::35: OK: 2018101100 (1 ms)
	202.12.27.33: OK: 2018101100 (10 ms)

@bortzmeyer

bortzmeyer commented Oct 11, 2018

Copy link
Copy Markdown
Author

http://dnsviz.net/d/root/W790OA/dnssec/

@bortzmeyer

bortzmeyer commented Oct 11, 2018

Copy link
Copy Markdown
Author

After the roll, the Atlas probes:

 % blaeu-resolve -q DNSKEY -r 1000 --ednssize 4096 --displayvalidation  .
[ (Authentic Data flag)   (TRUNCATED May have to use --ednssize)  256 3 8 aweaadp440e6mz7c+vl4spd0ltv2qnc8 5dtw64j0rdd7ss/zwxwdj3qres2vkdo0 oxlmqv 256 3 8 aweaafaifsqh+9itxyrcwuiy0fy2nkae wd/zmyvvakixdgtokgg/puzleauaikzl xgwezj 257 3 8 aweaaagaiklvzrpc6ia7gezahor+9w29 euxhjhvvloyqbsew0o8gccjffvqutf6v 58fljw 257 3 8 aweaaaz/tam8ytn4mfeh5eyi96wsvext bavkmgjzkktoiw1vkibzxef3+/4rgwoq 7hrxri] : 3 occurrences 
[ (TRUNCATED May have to use --ednssize)  257 3 8 aweaaaz/tam8ytn4mfeh5eyi96wsvext bavkmgjzkktoiw1vkibzxef3+/4rgwoq 7hrxri] : 1 occurrences 
[ (Authentic Data flag)  256 3 8 aweaadp440e6mz7c+vl4spd0ltv2qnc8 5dtw64j0rdd7ss/zwxwdj3qres2vkdo0 oxlmqv 257 3 8 aweaaagaiklvzrpc6ia7gezahor+9w29 euxhjhvvloyqbsew0o8gccjffvqutf6v 58fljw 257 3 8 aweaaaz/tam8ytn4mfeh5eyi96wsvext bavkmgjzkktoiw1vkibzxef3+/4rgwoq 7hrxri] : 6 occurrences 
[ (Authentic Data flag)   (TRUNCATED May have to use --ednssize) ] : 23 occurrences 
[ (Authentic Data flag)  256 3 8 aweaadp440e6mz7c+vl4spd0ltv2qnc8 5dtw64j0rdd7ss/zwxwdj3qres2vkdo0 oxlmqv 256 3 8 aweaafaifsqh+9itxyrcwuiy0fy2nkae wd/zmyvvakixdgtokgg/puzleauaikzl xgwezj 257 3 8 aweaaagaiklvzrpc6ia7gezahor+9w29 euxhjhvvloyqbsew0o8gccjffvqutf6v 58fljw 257 3 8 aweaaaz/tam8ytn4mfeh5eyi96wsvext bavkmgjzkktoiw1vkibzxef3+/4rgwoq 7hrxri] : 530 occurrences 
[ (TRUNCATED May have to use --ednssize)  256 3 8 aweaadp440e6mz7c+vl4spd0ltv2qnc8 5dtw64j0rdd7ss/zwxwdj3qres2vkdo0 oxlmqv] : 1 occurrences 
[ERROR: FORMERR] : 4 occurrences 
[256 3 8 aweaacmhlrufffa/nzog3s0ez9kdal9g 1guefgoqvd2hmzwb1gx5af+oovsyg95r eb++ij 257 3 8 aweaaaq+qqsddhbyq/dfr5/u23qcdnoq jzjybcsfjrgnldy2+vy+ubhuiz0hg1xk 5d+dk7] : 1 occurrences 
[ERROR: SERVFAIL] : 1 occurrences 
[ERROR: NXDOMAIN] : 1 occurrences 
[ (TRUNCATED May have to use --ednssize)  256 3 8 aweaadp440e6mz7c+vl4spd0ltv2qnc8 5dtw64j0rdd7ss/zwxwdj3qres2vkdo0 oxlmqv 256 3 8 aweaafaifsqh+9itxyrcwuiy0fy2nkae wd/zmyvvakixdgtokgg/puzleauaikzl xgwezj 257 3 8 aweaaagaiklvzrpc6ia7gezahor+9w29 euxhjhvvloyqbsew0o8gccjffvqutf6v 58fljw 257 3 8 aweaaaz/tam8ytn4mfeh5eyi96wsvext bavkmgjzkktoiw1vkibzxef3+/4rgwoq 7hrxri] : 1 occurrences 
[TIMEOUT(S)] : 9 occurrences 
[256 3 8 aweaadp440e6mz7c+vl4spd0ltv2qnc8 5dtw64j0rdd7ss/zwxwdj3qres2vkdo0 oxlmqv 257 3 8 aweaaagaiklvzrpc6ia7gezahor+9w29 euxhjhvvloyqbsew0o8gccjffvqutf6v 58fljw 257 3 8 aweaaaz/tam8ytn4mfeh5eyi96wsvext bavkmgjzkktoiw1vkibzxef3+/4rgwoq 7hrxri] : 8 occurrences 
[256 3 8 aweaadp440e6mz7c+vl4spd0ltv2qnc8 5dtw64j0rdd7ss/zwxwdj3qres2vkdo0 oxlmqv 256 3 8 aweaafaifsqh+9itxyrcwuiy0fy2nkae wd/zmyvvakixdgtokgg/puzleauaikzl xgwezj 257 3 8 aweaaagaiklvzrpc6ia7gezahor+9w29 euxhjhvvloyqbsew0o8gccjffvqutf6v 58fljw 257 3 8 aweaaaz/tam8ytn4mfeh5eyi96wsvext bavkmgjzkktoiw1vkibzxef3+/4rgwoq 7hrxri] : 370 occurrences 
[ (TRUNCATED May have to use --ednssize) ] : 14 occurrences 
Test #16458570 done at 2018-10-11T16:02:43Z

@bortzmeyer

bortzmeyer commented Oct 11, 2018

Copy link
Copy Markdown
Author

The last DNSviz test before the rollover: http://dnsviz.net/d/root/W79zYQ/dnssec/
DNSviz issues during the transition (may be because it mixed results from different root servers) : http://dnsviz.net/d/root/W79z2Q/dnssec/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment