DNSSEC Debugger

Domain Name:

Time: 2024-05-21 14:33:58 UTC

Analyzing DNSSEC problems for site

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 865 octets ;; HEADER SECTION ;; id = 51114 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to e.root-servers.net for site/A
	Received 660 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 660 octets ;; HEADER SECTION ;; id = 57031 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; site. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) site. 172800 IN NS a.nic.site. site. 172800 IN NS b.nic.site. site. 172800 IN NS e.nic.site. site. 172800 IN NS f.nic.site. site. 86400 IN DS ( 51676 8 2 883175f6f5c68ea81563b62d1b2b79b6a997d60dc6e20cc70afd0cd6b7e82f62 ) site. 86400 IN DS ( 51974 8 2 a06dc47457cc1185cf1b3a7cf6eccb84978de92939dd182beed9521509d0da7b ) site. 86400 IN RRSIG ( DS 8 1 86400 20240603050000 20240521040000 5613 . MgR74KzST1sQZN3/axgXBkL1J9EQhOw3YL3syd3HNXErEahYXfIA15xsdE9+mLrEzQOXpdOct8Ri cAgs+G03rywdEE6ta+7fl2ypzp7lBxGYSFc1QRksf8KFYsRB558E99ePF/2O8nvA3W5rM6Ub8RBA 5i9M9JAsotciezofcnWgfJVM5L+txFjSe8zZ02QkOAbJ5D59jUqynLbG/xjYb4XakCwqvsc5tjNa LL9CRD9UtNo970klzcN/5WZTGdYrFHB6bBaoLF3gfItD1o9aj/wT6Aa+dVgRL92JnMRw0uY4prsL ElL+yNtMDH41i/hI4jrAPq3tJ2sAgzELwBEOeA== ) ;; ADDITIONAL SECTION (9 records) a.nic.site. 172800 IN A 194.169.218.61 a.nic.site. 172800 IN AAAA 2001:67c:13cc::1:61 b.nic.site. 172800 IN A 185.24.64.61 b.nic.site. 172800 IN AAAA 2a04:2b00:13cc::1:61 e.nic.site. 172800 IN A 212.18.248.61 e.nic.site. 172800 IN AAAA 2a04:2b00:13ee::61 f.nic.site. 172800 IN A 212.18.249.61 f.nic.site. 172800 IN AAAA 2a04:2b00:13ff::61 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for site/DNSKEY
	Received 660 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 660 octets ;; HEADER SECTION ;; id = 33058 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; site. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) site. 172800 IN NS a.nic.site. site. 172800 IN NS b.nic.site. site. 172800 IN NS e.nic.site. site. 172800 IN NS f.nic.site. site. 86400 IN DS ( 51676 8 2 883175f6f5c68ea81563b62d1b2b79b6a997d60dc6e20cc70afd0cd6b7e82f62 ) site. 86400 IN DS ( 51974 8 2 a06dc47457cc1185cf1b3a7cf6eccb84978de92939dd182beed9521509d0da7b ) site. 86400 IN RRSIG ( DS 8 1 86400 20240603050000 20240521040000 5613 . MgR74KzST1sQZN3/axgXBkL1J9EQhOw3YL3syd3HNXErEahYXfIA15xsdE9+mLrEzQOXpdOct8Ri cAgs+G03rywdEE6ta+7fl2ypzp7lBxGYSFc1QRksf8KFYsRB558E99ePF/2O8nvA3W5rM6Ub8RBA 5i9M9JAsotciezofcnWgfJVM5L+txFjSe8zZ02QkOAbJ5D59jUqynLbG/xjYb4XakCwqvsc5tjNa LL9CRD9UtNo970klzcN/5WZTGdYrFHB6bBaoLF3gfItD1o9aj/wT6Aa+dVgRL92JnMRw0uY4prsL ElL+yNtMDH41i/hI4jrAPq3tJ2sAgzELwBEOeA== ) ;; ADDITIONAL SECTION (9 records) a.nic.site. 172800 IN A 194.169.218.61 b.nic.site. 172800 IN A 185.24.64.61 e.nic.site. 172800 IN A 212.18.248.61 f.nic.site. 172800 IN A 212.18.249.61 a.nic.site. 172800 IN AAAA 2001:67c:13cc::1:61 b.nic.site. 172800 IN AAAA 2a04:2b00:13cc::1:61 e.nic.site. 172800 IN AAAA 2a04:2b00:13ee::61 f.nic.site. 172800 IN AAAA 2a04:2b00:13ff::61 ;; { "EDNS-VERSION": 0 }
	Found child zone site

site

	Checking DS between . and site
	Query to f.root-servers.net for site/DS
	Received 416 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 416 octets ;; HEADER SECTION ;; id = 12944 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; site. IN DS ;; ANSWER SECTION (3 records) site. 86400 IN DS ( 51676 8 2 883175f6f5c68ea81563b62d1b2b79b6a997d60dc6e20cc70afd0cd6b7e82f62 ) site. 86400 IN DS ( 51974 8 2 a06dc47457cc1185cf1b3a7cf6eccb84978de92939dd182beed9521509d0da7b ) site. 86400 IN RRSIG ( DS 8 1 86400 20240603050000 20240521040000 5613 . MgR74KzST1sQZN3/axgXBkL1J9EQhOw3YL3syd3HNXErEahYXfIA15xsdE9+mLrEzQOXpdOct8Ri cAgs+G03rywdEE6ta+7fl2ypzp7lBxGYSFc1QRksf8KFYsRB558E99ePF/2O8nvA3W5rM6Ub8RBA 5i9M9JAsotciezofcnWgfJVM5L+txFjSe8zZ02QkOAbJ5D59jUqynLbG/xjYb4XakCwqvsc5tjNa LL9CRD9UtNo970klzcN/5WZTGdYrFHB6bBaoLF3gfItD1o9aj/wT6Aa+dVgRL92JnMRw0uY4prsL ElL+yNtMDH41i/hI4jrAPq3tJ2sAgzELwBEOeA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for site in the . zone
	DS=51676/SHA-256 has algorithm RSASHA256
	DS=51974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`site. 86400 IN RRSIG ( DS 8 1 86400 20240603050000 20240521040000 5613 . MgR74KzST1sQZN3/axgXBkL1J9EQhOw3YL3syd3HNXErEahYXfIA15xsdE9+mLrEzQOXpdOct8Ri cAgs+G03rywdEE6ta+7fl2ypzp7lBxGYSFc1QRksf8KFYsRB558E99ePF/2O8nvA3W5rM6Ub8RBA 5i9M9JAsotciezofcnWgfJVM5L+txFjSe8zZ02QkOAbJ5D59jUqynLbG/xjYb4XakCwqvsc5tjNa LL9CRD9UtNo970klzcN/5WZTGdYrFHB6bBaoLF3gfItD1o9aj/wT6Aa+dVgRL92JnMRw0uY4prsL ElL+yNtMDH41i/hI4jrAPq3tJ2sAgzELwBEOeA== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=51676/SHA-256 is now in the chain-of-trust
	DS=51974/SHA-256 is now in the chain-of-trust
	`site. 86400 IN DS ( 51676 8 2 883175f6f5c68ea81563b62d1b2b79b6a997d60dc6e20cc70afd0cd6b7e82f62 )`
	`site. 86400 IN DS ( 51974 8 2 a06dc47457cc1185cf1b3a7cf6eccb84978de92939dd182beed9521509d0da7b )`
	Query to a.nic.site for site/DNSKEY
	Received 749 bytes from 194.169.218.61
	;; Response received from [194.169.218.61] 749 octets ;; HEADER SECTION ;; id = 8610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; site. IN DNSKEY ;; ANSWER SECTION (3 records) site. 3600 IN DNSKEY ( 256 3 8 AwEAAbKz4P3ahP9eOe/qojYWGasYc/QewtPrrcLrHcgFH5mTQ3FMsHrii9d/ILIKWbR+XM3VqA6M R1LCtFUzvzXHFBiaQJ/4hgECrCNl0wC9hvoH0u1/nQJ52Kijya4aepuFEI1CTOo1c8H2iEKQSfwl OUB0j2kfRVcka4/STSPbyAYV ) ; Key ID = 24654 site. 3600 IN DNSKEY ( 257 3 8 AwEAAcOZwQRQH7XaekW+W0DPlHe9HRS6XQJ1l7scjRkwZuNHfI3ljXL8GU9Nn75uPW/CKERnsMmQ koXTdkFN6kPzCdK5rrDW/wJmP/Ss2xPEH/xEfdT7Pfw/hVlj257EUKDfi03JOc7S9Yj4Iw2lX8Jr /BKjVYDQhzGBK4B0BXBXNiC2ObSubLYWhQE5+/fDvZ/4j4onYSrsQMUtHTReEKGADpbySDLwKPvB UYRwxIE/QkNiHY49dKH0nZqNAP6UKqC7lO/CckUJIz0ubLutz+FryIt2YQ3z04CEVaX3L8b3muYb 4Y8N8Jp9ve13lMH3Hfv/KMQiPi3hPzfeYgIsrliEmO0= ) ; Key ID = 51974 site. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240614153541 20240515140541 51974 site. nshaBX5zDTHOP6kXxPIOK8Uj6a0ERBxXbmYr4YgAmCqvlqmQJgP7ESOuJuRAVYNs7YcfkuHsqsl9 +fMidN5IAnYbZLvbePCR2s9SHyME5ScX390rvGlsJVgpZPRDj0k8UpffDR6IeZRTudZ04mBXR+/3 wd3347eHdfJtvCnrvIAmPa/Qv+eNKsEtIFt6C7rd1ra88HDztfhYd2h7isrrZEAjvWgd29CE5bVm BDNN3ohSG3zWFg94Ir0Md2ASWTrw61H5MpNuOl0BNZKWDDq2SOq6Q6vs5DCxf9ELsHkE5LI4D255 ORg7zbrdLxOd10Rn2VMmPIhWGuasbG4TcRxhSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for site
	`site. 3600 IN DNSKEY ( 256 3 8 AwEAAbKz4P3ahP9eOe/qojYWGasYc/QewtPrrcLrHcgFH5mTQ3FMsHrii9d/ILIKWbR+XM3VqA6M R1LCtFUzvzXHFBiaQJ/4hgECrCNl0wC9hvoH0u1/nQJ52Kijya4aepuFEI1CTOo1c8H2iEKQSfwl OUB0j2kfRVcka4/STSPbyAYV ) ; Key ID = 24654`
	`site. 3600 IN DNSKEY ( 257 3 8 AwEAAcOZwQRQH7XaekW+W0DPlHe9HRS6XQJ1l7scjRkwZuNHfI3ljXL8GU9Nn75uPW/CKERnsMmQ koXTdkFN6kPzCdK5rrDW/wJmP/Ss2xPEH/xEfdT7Pfw/hVlj257EUKDfi03JOc7S9Yj4Iw2lX8Jr /BKjVYDQhzGBK4B0BXBXNiC2ObSubLYWhQE5+/fDvZ/4j4onYSrsQMUtHTReEKGADpbySDLwKPvB UYRwxIE/QkNiHY49dKH0nZqNAP6UKqC7lO/CckUJIz0ubLutz+FryIt2YQ3z04CEVaX3L8b3muYb 4Y8N8Jp9ve13lMH3Hfv/KMQiPi3hPzfeYgIsrliEmO0= ) ; Key ID = 51974`
	DNSKEY=51974/SEP is now in the chain-of-trust
	DS=51974/SHA-256 verifies DNSKEY=51974/SEP
	DS=51676/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`site. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240614153541 20240515140541 51974 site. nshaBX5zDTHOP6kXxPIOK8Uj6a0ERBxXbmYr4YgAmCqvlqmQJgP7ESOuJuRAVYNs7YcfkuHsqsl9 +fMidN5IAnYbZLvbePCR2s9SHyME5ScX390rvGlsJVgpZPRDj0k8UpffDR6IeZRTudZ04mBXR+/3 wd3347eHdfJtvCnrvIAmPa/Qv+eNKsEtIFt6C7rd1ra88HDztfhYd2h7isrrZEAjvWgd29CE5bVm BDNN3ohSG3zWFg94Ir0Md2ASWTrw61H5MpNuOl0BNZKWDDq2SOq6Q6vs5DCxf9ELsHkE5LI4D255 ORg7zbrdLxOd10Rn2VMmPIhWGuasbG4TcRxhSg== )`
	RRSIG=51974 and DNSKEY=51974/SEP verifies the DNSKEY RRset
	DNSKEY=24654 is now in the chain-of-trust
	Query to f.nic.site for site/A
	Received 506 bytes from 212.18.249.61
	;; Response received from [212.18.249.61] 506 octets ;; HEADER SECTION ;; id = 12078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; site. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) site. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 374403 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) site. 900 IN RRSIG ( SOA 8 1 900 20240620142506 20240521125506 24654 site. sQf8qYFPl0pAMra1o37hTXu+Lvaybe/4h76MJbfbjyW97s3lAlxbg+0NQvxP9/bGwIuFzGKlwDbM cvNloQJcE9Kjxl9kKqMYJEVwYOBLZrmcDCgq0wGweLf5dp7elCjtoGNyInvXGF6j1NdwlDQ8qNd1 oEUTQmFApF1YNuvC9Zw= ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN NSEC3 ( 1 1 0 - kkomg6nthm1tv5p2353cdv2uc5oipgg9 NS SOA RRSIG DNSKEY NSEC3PARAM ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN RRSIG ( NSEC3 8 2 900 20240614153541 20240515140541 24654 site. f9iQgCIiwdilBQhvZnlhYdvVcbEZZjs+YEkpLl3jxNlfVARYGur9nMmRf2dxHk8hYBerz6YSPH+P y6Xf2kDjGGpxFKg7JmIA8DM/UPFH/KinnLEucSpGSg2dkrShgvDzG1yr+t/ktJHsAsEz+8VNA0EA JwM3tg7Q78T3LJSrkp0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	f.nic.site is authoritative for site
	Found RRSIG signed by site zone
	Query to b.nic.site for site/SOA
	Received 494 bytes from 185.24.64.61
	;; Response received from [185.24.64.61] 494 octets ;; HEADER SECTION ;; id = 59580 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; site. IN SOA ;; ANSWER SECTION (2 records) site. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 374403 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) site. 900 IN RRSIG ( SOA 8 1 900 20240620142506 20240521125506 24654 site. sQf8qYFPl0pAMra1o37hTXu+Lvaybe/4h76MJbfbjyW97s3lAlxbg+0NQvxP9/bGwIuFzGKlwDbM cvNloQJcE9Kjxl9kKqMYJEVwYOBLZrmcDCgq0wGweLf5dp7elCjtoGNyInvXGF6j1NdwlDQ8qNd1 oEUTQmFApF1YNuvC9Zw= ) ;; AUTHORITY SECTION (5 records) site. 172800 IN NS f.nic.site. site. 172800 IN NS e.nic.site. site. 172800 IN NS a.nic.site. site. 172800 IN NS b.nic.site. site. 172800 IN RRSIG ( NS 8 1 172800 20240614153541 20240515140541 24654 site. FJn5fybvN59E03rfeBOEpVt3BicXfYlnIm70A39nCfWOXV7UWt8Z0pwRQqKu9BlWHem8nMU0rP5u 3gsmPPKfm07BpP3pNa9zSL2gha9Ye6Y3aToR3anAn6aIWh4HXYwuZVp1/5b+tN4B6SYK9a1bjjBV +YOEbjOB45hdPidwy00= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to e.nic.site for site/SOA
	Received 262 bytes from 212.18.248.61
	;; Response received from [212.18.248.61] 262 octets ;; HEADER SECTION ;; id = 5541 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; site. IN SOA ;; ANSWER SECTION (2 records) site. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 374403 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) site. 900 IN RRSIG ( SOA 8 1 900 20240620142506 20240521125506 24654 site. sQf8qYFPl0pAMra1o37hTXu+Lvaybe/4h76MJbfbjyW97s3lAlxbg+0NQvxP9/bGwIuFzGKlwDbM cvNloQJcE9Kjxl9kKqMYJEVwYOBLZrmcDCgq0wGweLf5dp7elCjtoGNyInvXGF6j1NdwlDQ8qNd1 oEUTQmFApF1YNuvC9Zw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.nic.site for site/SOA
	Received 262 bytes from 194.169.218.61
	;; Response received from [194.169.218.61] 262 octets ;; HEADER SECTION ;; id = 46807 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; site. IN SOA ;; ANSWER SECTION (2 records) site. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 374403 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) site. 900 IN RRSIG ( SOA 8 1 900 20240620142506 20240521125506 24654 site. sQf8qYFPl0pAMra1o37hTXu+Lvaybe/4h76MJbfbjyW97s3lAlxbg+0NQvxP9/bGwIuFzGKlwDbM cvNloQJcE9Kjxl9kKqMYJEVwYOBLZrmcDCgq0wGweLf5dp7elCjtoGNyInvXGF6j1NdwlDQ8qNd1 oEUTQmFApF1YNuvC9Zw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to f.nic.site for site/A
	Received 506 bytes from 212.18.249.61
	;; Response received from [212.18.249.61] 506 octets ;; HEADER SECTION ;; id = 28223 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; site. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) site. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 374403 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) site. 900 IN RRSIG ( SOA 8 1 900 20240620142506 20240521125506 24654 site. sQf8qYFPl0pAMra1o37hTXu+Lvaybe/4h76MJbfbjyW97s3lAlxbg+0NQvxP9/bGwIuFzGKlwDbM cvNloQJcE9Kjxl9kKqMYJEVwYOBLZrmcDCgq0wGweLf5dp7elCjtoGNyInvXGF6j1NdwlDQ8qNd1 oEUTQmFApF1YNuvC9Zw= ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN NSEC3 ( 1 1 0 - kkomg6nthm1tv5p2353cdv2uc5oipgg9 NS SOA RRSIG DNSKEY NSEC3PARAM ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN RRSIG ( NSEC3 8 2 900 20240614153541 20240515140541 24654 site. f9iQgCIiwdilBQhvZnlhYdvVcbEZZjs+YEkpLl3jxNlfVARYGur9nMmRf2dxHk8hYBerz6YSPH+P y6Xf2kDjGGpxFKg7JmIA8DM/UPFH/KinnLEucSpGSg2dkrShgvDzG1yr+t/ktJHsAsEz+8VNA0EA JwM3tg7Q78T3LJSrkp0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`site. 900 IN RRSIG ( SOA 8 1 900 20240620142506 20240521125506 24654 site. sQf8qYFPl0pAMra1o37hTXu+Lvaybe/4h76MJbfbjyW97s3lAlxbg+0NQvxP9/bGwIuFzGKlwDbM cvNloQJcE9Kjxl9kKqMYJEVwYOBLZrmcDCgq0wGweLf5dp7elCjtoGNyInvXGF6j1NdwlDQ8qNd1 oEUTQmFApF1YNuvC9Zw= )`
	RRSIG=24654 and DNSKEY=24654 verifies the SOA RRset

site

	Query to b.nic.site for site/A
	Received 506 bytes from 185.24.64.61
	;; Response received from [185.24.64.61] 506 octets ;; HEADER SECTION ;; id = 20001 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; site. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) site. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 374403 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) site. 900 IN RRSIG ( SOA 8 1 900 20240620142506 20240521125506 24654 site. sQf8qYFPl0pAMra1o37hTXu+Lvaybe/4h76MJbfbjyW97s3lAlxbg+0NQvxP9/bGwIuFzGKlwDbM cvNloQJcE9Kjxl9kKqMYJEVwYOBLZrmcDCgq0wGweLf5dp7elCjtoGNyInvXGF6j1NdwlDQ8qNd1 oEUTQmFApF1YNuvC9Zw= ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN NSEC3 ( 1 1 0 - kkomg6nthm1tv5p2353cdv2uc5oipgg9 NS SOA RRSIG DNSKEY NSEC3PARAM ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN RRSIG ( NSEC3 8 2 900 20240614153541 20240515140541 24654 site. f9iQgCIiwdilBQhvZnlhYdvVcbEZZjs+YEkpLl3jxNlfVARYGur9nMmRf2dxHk8hYBerz6YSPH+P y6Xf2kDjGGpxFKg7JmIA8DM/UPFH/KinnLEucSpGSg2dkrShgvDzG1yr+t/ktJHsAsEz+8VNA0EA JwM3tg7Q78T3LJSrkp0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	b.nic.site is authoritative for site
	Found RRSIG signed by site zone
	Query to b.nic.site for site/A
	Received 506 bytes from 185.24.64.61
	;; Response received from [185.24.64.61] 506 octets ;; HEADER SECTION ;; id = 54092 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; site. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) site. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 374403 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) site. 900 IN RRSIG ( SOA 8 1 900 20240620142506 20240521125506 24654 site. sQf8qYFPl0pAMra1o37hTXu+Lvaybe/4h76MJbfbjyW97s3lAlxbg+0NQvxP9/bGwIuFzGKlwDbM cvNloQJcE9Kjxl9kKqMYJEVwYOBLZrmcDCgq0wGweLf5dp7elCjtoGNyInvXGF6j1NdwlDQ8qNd1 oEUTQmFApF1YNuvC9Zw= ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN NSEC3 ( 1 1 0 - kkomg6nthm1tv5p2353cdv2uc5oipgg9 NS SOA RRSIG DNSKEY NSEC3PARAM ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN RRSIG ( NSEC3 8 2 900 20240614153541 20240515140541 24654 site. f9iQgCIiwdilBQhvZnlhYdvVcbEZZjs+YEkpLl3jxNlfVARYGur9nMmRf2dxHk8hYBerz6YSPH+P y6Xf2kDjGGpxFKg7JmIA8DM/UPFH/KinnLEucSpGSg2dkrShgvDzG1yr+t/ktJHsAsEz+8VNA0EA JwM3tg7Q78T3LJSrkp0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`site. 900 IN RRSIG ( SOA 8 1 900 20240620142506 20240521125506 24654 site. sQf8qYFPl0pAMra1o37hTXu+Lvaybe/4h76MJbfbjyW97s3lAlxbg+0NQvxP9/bGwIuFzGKlwDbM cvNloQJcE9Kjxl9kKqMYJEVwYOBLZrmcDCgq0wGweLf5dp7elCjtoGNyInvXGF6j1NdwlDQ8qNd1 oEUTQmFApF1YNuvC9Zw= )`
	RRSIG=24654 and DNSKEY=24654 verifies the SOA RRset

site

	Query to e.nic.site for site/A
	Received 506 bytes from 212.18.248.61
	;; Response received from [212.18.248.61] 506 octets ;; HEADER SECTION ;; id = 16826 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; site. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) site. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 374403 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN NSEC3 ( 1 1 0 - kkomg6nthm1tv5p2353cdv2uc5oipgg9 NS SOA RRSIG DNSKEY NSEC3PARAM ) site. 900 IN RRSIG ( SOA 8 1 900 20240620142506 20240521125506 24654 site. sQf8qYFPl0pAMra1o37hTXu+Lvaybe/4h76MJbfbjyW97s3lAlxbg+0NQvxP9/bGwIuFzGKlwDbM cvNloQJcE9Kjxl9kKqMYJEVwYOBLZrmcDCgq0wGweLf5dp7elCjtoGNyInvXGF6j1NdwlDQ8qNd1 oEUTQmFApF1YNuvC9Zw= ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN RRSIG ( NSEC3 8 2 900 20240614153541 20240515140541 24654 site. f9iQgCIiwdilBQhvZnlhYdvVcbEZZjs+YEkpLl3jxNlfVARYGur9nMmRf2dxHk8hYBerz6YSPH+P y6Xf2kDjGGpxFKg7JmIA8DM/UPFH/KinnLEucSpGSg2dkrShgvDzG1yr+t/ktJHsAsEz+8VNA0EA JwM3tg7Q78T3LJSrkp0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e.nic.site is authoritative for site
	Found RRSIG signed by site zone
	Query to e.nic.site for site/A
	Received 506 bytes from 212.18.248.61
	;; Response received from [212.18.248.61] 506 octets ;; HEADER SECTION ;; id = 23362 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; site. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) site. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 374403 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN NSEC3 ( 1 1 0 - kkomg6nthm1tv5p2353cdv2uc5oipgg9 NS SOA RRSIG DNSKEY NSEC3PARAM ) site. 900 IN RRSIG ( SOA 8 1 900 20240620142506 20240521125506 24654 site. sQf8qYFPl0pAMra1o37hTXu+Lvaybe/4h76MJbfbjyW97s3lAlxbg+0NQvxP9/bGwIuFzGKlwDbM cvNloQJcE9Kjxl9kKqMYJEVwYOBLZrmcDCgq0wGweLf5dp7elCjtoGNyInvXGF6j1NdwlDQ8qNd1 oEUTQmFApF1YNuvC9Zw= ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN RRSIG ( NSEC3 8 2 900 20240614153541 20240515140541 24654 site. f9iQgCIiwdilBQhvZnlhYdvVcbEZZjs+YEkpLl3jxNlfVARYGur9nMmRf2dxHk8hYBerz6YSPH+P y6Xf2kDjGGpxFKg7JmIA8DM/UPFH/KinnLEucSpGSg2dkrShgvDzG1yr+t/ktJHsAsEz+8VNA0EA JwM3tg7Q78T3LJSrkp0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`site. 900 IN RRSIG ( SOA 8 1 900 20240620142506 20240521125506 24654 site. sQf8qYFPl0pAMra1o37hTXu+Lvaybe/4h76MJbfbjyW97s3lAlxbg+0NQvxP9/bGwIuFzGKlwDbM cvNloQJcE9Kjxl9kKqMYJEVwYOBLZrmcDCgq0wGweLf5dp7elCjtoGNyInvXGF6j1NdwlDQ8qNd1 oEUTQmFApF1YNuvC9Zw= )`
	RRSIG=24654 and DNSKEY=24654 verifies the SOA RRset

site

	Query to a.nic.site for site/A
	Received 506 bytes from 194.169.218.61
	;; Response received from [194.169.218.61] 506 octets ;; HEADER SECTION ;; id = 31753 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; site. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) site. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 374403 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN NSEC3 ( 1 1 0 - kkomg6nthm1tv5p2353cdv2uc5oipgg9 NS SOA RRSIG DNSKEY NSEC3PARAM ) site. 900 IN RRSIG ( SOA 8 1 900 20240620142506 20240521125506 24654 site. sQf8qYFPl0pAMra1o37hTXu+Lvaybe/4h76MJbfbjyW97s3lAlxbg+0NQvxP9/bGwIuFzGKlwDbM cvNloQJcE9Kjxl9kKqMYJEVwYOBLZrmcDCgq0wGweLf5dp7elCjtoGNyInvXGF6j1NdwlDQ8qNd1 oEUTQmFApF1YNuvC9Zw= ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN RRSIG ( NSEC3 8 2 900 20240614153541 20240515140541 24654 site. f9iQgCIiwdilBQhvZnlhYdvVcbEZZjs+YEkpLl3jxNlfVARYGur9nMmRf2dxHk8hYBerz6YSPH+P y6Xf2kDjGGpxFKg7JmIA8DM/UPFH/KinnLEucSpGSg2dkrShgvDzG1yr+t/ktJHsAsEz+8VNA0EA JwM3tg7Q78T3LJSrkp0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a.nic.site is authoritative for site
	Found RRSIG signed by site zone
	Query to a.nic.site for site/A
	Received 506 bytes from 194.169.218.61
	;; Response received from [194.169.218.61] 506 octets ;; HEADER SECTION ;; id = 1123 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; site. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) site. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 374403 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN NSEC3 ( 1 1 0 - kkomg6nthm1tv5p2353cdv2uc5oipgg9 NS SOA RRSIG DNSKEY NSEC3PARAM ) site. 900 IN RRSIG ( SOA 8 1 900 20240620142506 20240521125506 24654 site. sQf8qYFPl0pAMra1o37hTXu+Lvaybe/4h76MJbfbjyW97s3lAlxbg+0NQvxP9/bGwIuFzGKlwDbM cvNloQJcE9Kjxl9kKqMYJEVwYOBLZrmcDCgq0wGweLf5dp7elCjtoGNyInvXGF6j1NdwlDQ8qNd1 oEUTQmFApF1YNuvC9Zw= ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 900 IN RRSIG ( NSEC3 8 2 900 20240614153541 20240515140541 24654 site. f9iQgCIiwdilBQhvZnlhYdvVcbEZZjs+YEkpLl3jxNlfVARYGur9nMmRf2dxHk8hYBerz6YSPH+P y6Xf2kDjGGpxFKg7JmIA8DM/UPFH/KinnLEucSpGSg2dkrShgvDzG1yr+t/ktJHsAsEz+8VNA0EA JwM3tg7Q78T3LJSrkp0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`site. 900 IN RRSIG ( SOA 8 1 900 20240620142506 20240521125506 24654 site. sQf8qYFPl0pAMra1o37hTXu+Lvaybe/4h76MJbfbjyW97s3lAlxbg+0NQvxP9/bGwIuFzGKlwDbM cvNloQJcE9Kjxl9kKqMYJEVwYOBLZrmcDCgq0wGweLf5dp7elCjtoGNyInvXGF6j1NdwlDQ8qNd1 oEUTQmFApF1YNuvC9Zw= )`
	RRSIG=24654 and DNSKEY=24654 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test site at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: