DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-05-16 03:03:22 UTC

Analyzing DNSSEC problems for ac.uk

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1139 octets ;; HEADER SECTION ;; id = 32460 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260601000000 20260511000000 20326 . Psn+BsMNwRdKsw1pSQPmOm/QeUqgjveusWdT5NL9sOxccMKpzbYOgLqYNmJsOrAjj0MDy0/X/xbU gAGdRVuOt9mv4yk+TaBs7rpd0IgDZu++2bIAvxu3W82fKEKpJqLucDiPu1l+GKZ87zRYrJrQZZWk 01LmCEIIED9P62/QbhdDVIG3ZdcvXQpRPjWyQOom2tZ0APZ+59PyOxjNMgnOaeoAD8QWZ+iKVY8k o2GRoHRqrzEq46SGDh1YuFxuw67oG7mn+Mt2b9HUjYWgQCvBRSUMb4XRxhNnKQiOS4ECEXCDozMD yXk8727l6bFK0THkaFEqW64F/5CAL8adNRyUoQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260601000000 20260511000000 20326 . Psn+BsMNwRdKsw1pSQPmOm/QeUqgjveusWdT5NL9sOxccMKpzbYOgLqYNmJsOrAjj0MDy0/X/xbU gAGdRVuOt9mv4yk+TaBs7rpd0IgDZu++2bIAvxu3W82fKEKpJqLucDiPu1l+GKZ87zRYrJrQZZWk 01LmCEIIED9P62/QbhdDVIG3ZdcvXQpRPjWyQOom2tZ0APZ+59PyOxjNMgnOaeoAD8QWZ+iKVY8k o2GRoHRqrzEq46SGDh1YuFxuw67oG7mn+Mt2b9HUjYWgQCvBRSUMb4XRxhNnKQiOS4ECEXCDozMD yXk8727l6bFK0THkaFEqW64F/5CAL8adNRyUoQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to g.root-servers.net for ac.uk/A
	Received 875 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 875 octets ;; HEADER SECTION ;; id = 54844 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS dns4.nic.uk. uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . XBsu0qHVWpUgcya6MhanTvwvJlupbX3sNHZMXmJY+Lree+qS6Q7PRZN7k9I4w/vaWT82B6T0e39U eOjt0DbPZb3W7WBuvyPSwJlrmWx0S8lLWrIlDnxhf5Elm04w2xLuiMLxNDkFifPkS0LHWN/zl209 iuCn01S++ssQDR67sAuSPpvnMtCZ8N6nCqWSe5DsKhyR0w/IoyYjUBw/Wq3EH/fKPsHF3IYYLiad kXqX5KgyE7QJtPCb+1+Ynn1AbtcjQs+3++HymBTTsxomp048tVU2A4xP84zkBmZFRTc9ZfAIMhmh c13uoEDle0EMZdyPbr6Uj/dVOxABa1U5e5F+Vg== ) ;; ADDITIONAL SECTION (17 records) dns4.nic.uk. 172800 IN A 43.230.48.1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns1.nic.uk. 172800 IN A 213.248.216.1 nsd.nic.uk. 172800 IN A 156.154.103.3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsa.nic.uk. 172800 IN A 156.154.100.3 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for uk/DNSKEY
	Received 870 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 870 octets ;; HEADER SECTION ;; id = 51271 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . XBsu0qHVWpUgcya6MhanTvwvJlupbX3sNHZMXmJY+Lree+qS6Q7PRZN7k9I4w/vaWT82B6T0e39U eOjt0DbPZb3W7WBuvyPSwJlrmWx0S8lLWrIlDnxhf5Elm04w2xLuiMLxNDkFifPkS0LHWN/zl209 iuCn01S++ssQDR67sAuSPpvnMtCZ8N6nCqWSe5DsKhyR0w/IoyYjUBw/Wq3EH/fKPsHF3IYYLiad kXqX5KgyE7QJtPCb+1+Ynn1AbtcjQs+3++HymBTTsxomp048tVU2A4xP84zkBmZFRTc9ZfAIMhmh c13uoEDle0EMZdyPbr6Uj/dVOxABa1U5e5F+Vg== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsd.nic.uk. 172800 IN A 156.154.103.3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns4.nic.uk. 172800 IN A 43.230.48.1 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Found child zone uk

	Checking DS between . and uk
	Query to a.root-servers.net for uk/DS
	Received 366 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 366 octets ;; HEADER SECTION ;; id = 41219 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DS ;; ANSWER SECTION (2 records) uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . XBsu0qHVWpUgcya6MhanTvwvJlupbX3sNHZMXmJY+Lree+qS6Q7PRZN7k9I4w/vaWT82B6T0e39U eOjt0DbPZb3W7WBuvyPSwJlrmWx0S8lLWrIlDnxhf5Elm04w2xLuiMLxNDkFifPkS0LHWN/zl209 iuCn01S++ssQDR67sAuSPpvnMtCZ8N6nCqWSe5DsKhyR0w/IoyYjUBw/Wq3EH/fKPsHF3IYYLiad kXqX5KgyE7QJtPCb+1+Ynn1AbtcjQs+3++HymBTTsxomp048tVU2A4xP84zkBmZFRTc9ZfAIMhmh c13uoEDle0EMZdyPbr6Uj/dVOxABa1U5e5F+Vg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for uk in the . zone
	DS=43876/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uk. 86400 IN RRSIG ( DS 8 1 86400 20260528170000 20260515160000 54393 . XBsu0qHVWpUgcya6MhanTvwvJlupbX3sNHZMXmJY+Lree+qS6Q7PRZN7k9I4w/vaWT82B6T0e39U eOjt0DbPZb3W7WBuvyPSwJlrmWx0S8lLWrIlDnxhf5Elm04w2xLuiMLxNDkFifPkS0LHWN/zl209 iuCn01S++ssQDR67sAuSPpvnMtCZ8N6nCqWSe5DsKhyR0w/IoyYjUBw/Wq3EH/fKPsHF3IYYLiad kXqX5KgyE7QJtPCb+1+Ynn1AbtcjQs+3++HymBTTsxomp048tVU2A4xP84zkBmZFRTc9ZfAIMhmh c13uoEDle0EMZdyPbr6Uj/dVOxABa1U5e5F+Vg== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=43876/SHA-256 is now in the chain-of-trust
	`uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 )`
	Query to dns2.nic.uk for uk/DNSKEY
	Received 745 bytes from 103.49.80.1
	;; Response received from [103.49.80.1] 745 octets ;; HEADER SECTION ;; id = 7721 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (3 records) uk. 7200 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056 uk. 7200 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876 uk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20260618003111 20260514000242 43876 uk. nIjoVnP18A1tzun87+3ranZGFYdeew1SJngvPBvKDVqw4z/n384yi06SSqJPhM7Z+9drqmONuK3X qx9NKS/9NLAx0rsF7DGN5Va8esMKoWScO8DLtiSAirDBJ1/jzJmHKJBkOQATKuYsJjIACpwaegXr E0P/NqZiEALjJfVhsAPKq0alM6MZIGL0O+tGdcWZIjQkWKSLzG7ouc3aGwpw4Ym7BZi+GRki1jme Ujw+eu8A2lh9EYOfN54RYu7cYzmeAmCH2ahIYZD9yyvkt7qYU4Px4yUgtOB2hUwe7qNQMlxorI6s cyn2+tA08NdVwiLyxjhtGRwJGou6XCnTvrzxQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for uk
	`uk. 7200 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056`
	`uk. 7200 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876`
	DNSKEY=43876/SEP is now in the chain-of-trust
	DS=43876/SHA-256 verifies DNSKEY=43876/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`uk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20260618003111 20260514000242 43876 uk. nIjoVnP18A1tzun87+3ranZGFYdeew1SJngvPBvKDVqw4z/n384yi06SSqJPhM7Z+9drqmONuK3X qx9NKS/9NLAx0rsF7DGN5Va8esMKoWScO8DLtiSAirDBJ1/jzJmHKJBkOQATKuYsJjIACpwaegXr E0P/NqZiEALjJfVhsAPKq0alM6MZIGL0O+tGdcWZIjQkWKSLzG7ouc3aGwpw4Ym7BZi+GRki1jme Ujw+eu8A2lh9EYOfN54RYu7cYzmeAmCH2ahIYZD9yyvkt7qYU4Px4yUgtOB2hUwe7qNQMlxorI6s cyn2+tA08NdVwiLyxjhtGRwJGou6XCnTvrzxQA== )`
	RRSIG=43876 and DNSKEY=43876/SEP verifies the DNSKEY RRset
	DNSKEY=43056 is now in the chain-of-trust
	Query to nsb.nic.uk for ac.uk/A
	Received 406 bytes from 156.154.101.3
	;; Response received from [156.154.101.3] 406 octets ;; HEADER SECTION ;; id = 48094 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ac.uk. 172800 IN NS ns1.surfnet.nl. ac.uk. 172800 IN NS ns0.ja.net. ac.uk. 172800 IN NS dns-3.dfn.de. ac.uk. 172800 IN NS ns2.ja.net. ac.uk. 172800 IN NS ns4.ja.net. ac.uk. 172800 IN NS ns3.ja.net. ac.uk. 172800 IN NS auth03.ns.uu.net. ac.uk. 300 IN DS ( 45874 8 2 a1dc9af78c8bf46cf074f60e5ec1cbdb5c29a40991ff54c78abdd3b99cd49d2f ) ac.uk. 300 IN RRSIG ( DS 8 2 300 20260617212252 20260513211219 43056 uk. Ouhe6NVLQebcMEPD2tSLLr0jNdLJiTKrycinbPSLy7Om6Ntn0hMoWsPCJkf11KAB2x6WNhUbwmUh GY/FHo5d1aez1RRfS8FoL78ejvTw0FLknJb8aaHcJuFmH0s0HdqTFZgYg7jMkuWGNz3iaX873Ung irZ1h28pMAdikOMho5g= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsa.nic.uk for ac.uk/DNSKEY
	Received 406 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 406 octets ;; HEADER SECTION ;; id = 52764 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ac.uk. 172800 IN NS ns4.ja.net. ac.uk. 172800 IN NS ns1.surfnet.nl. ac.uk. 172800 IN NS auth03.ns.uu.net. ac.uk. 172800 IN NS dns-3.dfn.de. ac.uk. 172800 IN NS ns0.ja.net. ac.uk. 172800 IN NS ns3.ja.net. ac.uk. 172800 IN NS ns2.ja.net. ac.uk. 300 IN DS ( 45874 8 2 a1dc9af78c8bf46cf074f60e5ec1cbdb5c29a40991ff54c78abdd3b99cd49d2f ) ac.uk. 300 IN RRSIG ( DS 8 2 300 20260617212252 20260513211219 43056 uk. Ouhe6NVLQebcMEPD2tSLLr0jNdLJiTKrycinbPSLy7Om6Ntn0hMoWsPCJkf11KAB2x6WNhUbwmUh GY/FHo5d1aez1RRfS8FoL78ejvTw0FLknJb8aaHcJuFmH0s0HdqTFZgYg7jMkuWGNz3iaX873Ung irZ1h28pMAdikOMho5g= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ac.uk

ac.uk

	Checking DS between uk and ac.uk
	Query to dns3.nic.uk for ac.uk/DS
	Received 244 bytes from 213.248.220.1
	;; Response received from [213.248.220.1] 244 octets ;; HEADER SECTION ;; id = 22624 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN DS ;; ANSWER SECTION (2 records) ac.uk. 300 IN DS ( 45874 8 2 a1dc9af78c8bf46cf074f60e5ec1cbdb5c29a40991ff54c78abdd3b99cd49d2f ) ac.uk. 300 IN RRSIG ( DS 8 2 300 20260617212252 20260513211219 43056 uk. Ouhe6NVLQebcMEPD2tSLLr0jNdLJiTKrycinbPSLy7Om6Ntn0hMoWsPCJkf11KAB2x6WNhUbwmUh GY/FHo5d1aez1RRfS8FoL78ejvTw0FLknJb8aaHcJuFmH0s0HdqTFZgYg7jMkuWGNz3iaX873Ung irZ1h28pMAdikOMho5g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ac.uk in the uk zone
	DS=45874/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ac.uk. 300 IN RRSIG ( DS 8 2 300 20260617212252 20260513211219 43056 uk. Ouhe6NVLQebcMEPD2tSLLr0jNdLJiTKrycinbPSLy7Om6Ntn0hMoWsPCJkf11KAB2x6WNhUbwmUh GY/FHo5d1aez1RRfS8FoL78ejvTw0FLknJb8aaHcJuFmH0s0HdqTFZgYg7jMkuWGNz3iaX873Ung irZ1h28pMAdikOMho5g= )`
	RRSIG=43056 and DNSKEY=43056 verifies the DS RRset
	DS=45874/SHA-256 is now in the chain-of-trust
	`ac.uk. 300 IN DS ( 45874 8 2 a1dc9af78c8bf46cf074f60e5ec1cbdb5c29a40991ff54c78abdd3b99cd49d2f )`
	Query to ns1.surfnet.nl for ac.uk/DNSKEY
	Received 916 bytes from 192.87.106.101
	;; Response received from [192.87.106.101] 916 octets ;; HEADER SECTION ;; id = 39978 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN DNSKEY ;; ANSWER SECTION (4 records) ac.uk. 86400 IN DNSKEY ( 257 3 8 AwEAAcRUqVbteWeQQRCJuw/jtFNGiVpBV02+LjRdLJkPvI+m4WhR+0VCX5IXdTqTrOeOU+y2vqkb BHgRNHx3USVUgXsnWKg92i0sgce3OvKGihf3ubYFiKBTryIXHeIOia0m5gsszSGVdIWRddB3fZHH ZkZJO82YCxwLGLPYM1JStiSxQfJ5gZJeLzJ5PgAikS4A5tryj7RTYiPbXVq3UMAUi86A7wjfBUWv XYbdiJQtSIxxfDiyoHkSZUpCr35h3PVk/LKV5ZfKHaluKp9OOl9hAC2rUmi6vJEIyhWwCBFZ6G4C lRiqyHlpb27nLl0K024YYF+8N2sbo7SyhvfgKgKuaQc= ) ; keytag 45874 ac.uk. 86400 IN DNSKEY ( 256 3 8 AwEAAcyVZbpNcH4RNvspl/SIsWAqR8mMMR+fh7yP5GTh/dQljnWZoBc+r/oV4EQetlbD8DFJ7QcG Kg5YOPJm2IUywzU6JoTiMlPIGQgmptEfrqFeQ5GPbXx/izrmPVp+KKyFApJIe0Uf65DzZhkTDhL1 /Xb1fdrd4q4vlRIQPIJaYkrv ) ; keytag 5800 ac.uk. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260614130703 20260515130703 5800 ac.uk. gOocFDY38A0hCf26Ggxb5qasoMapijRVPLAkiLXl5IkS5ja8SrfCJjtwiRVrbIMDkjoXwK8qMODG QEqwYPPvJPoLRer9aZ9wfU15L0Z35CT/eJQG78TDjDCtDcJDT8HuaidCyCSpaGNcYilkdg8MaODQ T1PO9jpNIR8OYNGUvh8= ) ac.uk. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260614130703 20260515130703 45874 ac.uk. RdYFFUFyz6mp8/wQC+guOLCoSmHyPoq1dxCFlr9yiX9QyecaFePMVMuePSO23c8iLfMvALBbQBiZ kvBBhnIi6NV1TkuR4Lh0fFJVTNF0A2AerHpmyQHGlbC0yfkLz+eAmHXMn4Rt/S+jLahBNEjW0af1 YrIQjjKUzCAj0nfkquuQc8/08rtaDLnRC7WE7qjPlYCvTfIExbL21uDt7uKf0IHxs1Hnzae186gS jubccipjxPQ/w9OFiQHvrZAZTlkrUUVeLk+u0YNY+ts4DcnLWMkg39kT+QrIkkcFtgfSFBVEPzmU aLsBCaPAA4k5eJlXwHTBCv4UTmfFQtw3Zkp63w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ac.uk
	`ac.uk. 86400 IN DNSKEY ( 257 3 8 AwEAAcRUqVbteWeQQRCJuw/jtFNGiVpBV02+LjRdLJkPvI+m4WhR+0VCX5IXdTqTrOeOU+y2vqkb BHgRNHx3USVUgXsnWKg92i0sgce3OvKGihf3ubYFiKBTryIXHeIOia0m5gsszSGVdIWRddB3fZHH ZkZJO82YCxwLGLPYM1JStiSxQfJ5gZJeLzJ5PgAikS4A5tryj7RTYiPbXVq3UMAUi86A7wjfBUWv XYbdiJQtSIxxfDiyoHkSZUpCr35h3PVk/LKV5ZfKHaluKp9OOl9hAC2rUmi6vJEIyhWwCBFZ6G4C lRiqyHlpb27nLl0K024YYF+8N2sbo7SyhvfgKgKuaQc= ) ; keytag 45874`
	`ac.uk. 86400 IN DNSKEY ( 256 3 8 AwEAAcyVZbpNcH4RNvspl/SIsWAqR8mMMR+fh7yP5GTh/dQljnWZoBc+r/oV4EQetlbD8DFJ7QcG Kg5YOPJm2IUywzU6JoTiMlPIGQgmptEfrqFeQ5GPbXx/izrmPVp+KKyFApJIe0Uf65DzZhkTDhL1 /Xb1fdrd4q4vlRIQPIJaYkrv ) ; keytag 5800`
	DNSKEY=45874/SEP is now in the chain-of-trust
	DS=45874/SHA-256 verifies DNSKEY=45874/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`ac.uk. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260614130703 20260515130703 5800 ac.uk. gOocFDY38A0hCf26Ggxb5qasoMapijRVPLAkiLXl5IkS5ja8SrfCJjtwiRVrbIMDkjoXwK8qMODG QEqwYPPvJPoLRer9aZ9wfU15L0Z35CT/eJQG78TDjDCtDcJDT8HuaidCyCSpaGNcYilkdg8MaODQ T1PO9jpNIR8OYNGUvh8= )`
	`ac.uk. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260614130703 20260515130703 45874 ac.uk. RdYFFUFyz6mp8/wQC+guOLCoSmHyPoq1dxCFlr9yiX9QyecaFePMVMuePSO23c8iLfMvALBbQBiZ kvBBhnIi6NV1TkuR4Lh0fFJVTNF0A2AerHpmyQHGlbC0yfkLz+eAmHXMn4Rt/S+jLahBNEjW0af1 YrIQjjKUzCAj0nfkquuQc8/08rtaDLnRC7WE7qjPlYCvTfIExbL21uDt7uKf0IHxs1Hnzae186gS jubccipjxPQ/w9OFiQHvrZAZTlkrUUVeLk+u0YNY+ts4DcnLWMkg39kT+QrIkkcFtgfSFBVEPzmU aLsBCaPAA4k5eJlXwHTBCv4UTmfFQtw3Zkp63w== )`
	RRSIG=5800 and DNSKEY=5800 verifies the DNSKEY RRset
	RRSIG=45874 and DNSKEY=45874/SEP verifies the DNSKEY RRset
	DNSKEY=5800 is now in the chain-of-trust
	Query to ns4.ja.net for ac.uk/A
	Received 501 bytes from 193.62.157.66
	;; Response received from [193.62.157.66] 501 octets ;; HEADER SECTION ;; id = 49606 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.uk. 14400 IN SOA ( ns0.ja.net. operations.ja.net. 2026051560 ;serial 28800 ;refresh 7200 ;retry 3600000 ;expire 14400 ;minimum ) ac.uk. 14400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= ) QIDFFN5JROI5OGI7JPCSKCBPDLNMGNUQ.ac.uk. 14400 IN NSEC3 ( 1 0 0 - qigombgcmp833cus54k25ltmp036jcrt NS SOA RRSIG DNSKEY NSEC3PARAM ) QIDFFN5JROI5OGI7JPCSKCBPDLNMGNUQ.ac.uk. 14400 IN RRSIG ( NSEC3 8 3 14400 20260614130703 20260515130703 5800 ac.uk. xqvw3pbgoWAQ3gw0aM1iOIyLrdILw/ePCuKiiOkVxi7zdNKXp6VLd4+Fh5o10Zjd0lL6EYRAMYa1 2agIF4TvSTtL2vh0bstwUh/vQ07tiZrddzdcmD05H9nq7yQsg+EG+oi2Ot/+OHOD5ggs5GfPAK0i UvGtO8qwocmWb7PhLHo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.ja.net is authoritative for ac.uk
	Found RRSIG signed by ac.uk zone
	Query to dns-3.dfn.de for ac.uk/SOA
	Received 570 bytes from 193.174.75.58
	;; Response received from [193.174.75.58] 570 octets ;; HEADER SECTION ;; id = 25090 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN SOA ;; ANSWER SECTION (2 records) ac.uk. 86400 IN SOA ( ns0.ja.net. operations.ja.net. 2026051560 ;serial 28800 ;refresh 7200 ;retry 3600000 ;expire 14400 ;minimum ) ac.uk. 86400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= ) ;; AUTHORITY SECTION (8 records) ac.uk. 86400 IN NS auth03.ns.uu.net. ac.uk. 86400 IN NS ns1.surfnet.nl. ac.uk. 86400 IN NS dns-3.dfn.de. ac.uk. 86400 IN NS ns2.ja.net. ac.uk. 86400 IN NS ns4.ja.net. ac.uk. 86400 IN NS ns3.ja.net. ac.uk. 86400 IN NS ns0.ja.net. ac.uk. 86400 IN RRSIG ( NS 8 2 86400 20260614130703 20260515130703 5800 ac.uk. jwT8V1V8HGIwWMh3MzjaT9oDnZqrvcOnxf6pV/D6h2sad104vNI2xbD+kJ/mMuigukaEkGcEWkg3 QtMBujKr3Vig91G5erEcTPHAD0dqoYhFL9Y7oWnPFQTp5nCi7HGtqFO2Le0Tjw3lkcfrUiaFSQJx XxVC4PJKXbMviyhyw5k= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.ja.net for ac.uk/SOA
	Received 573 bytes from 193.63.105.17
	;; Response received from [193.63.105.17] 573 octets ;; HEADER SECTION ;; id = 4296 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN SOA ;; ANSWER SECTION (2 records) ac.uk. 86400 IN SOA ( ns0.ja.net. operations.ja.net. 2026051560 ;serial 28800 ;refresh 7200 ;retry 3600000 ;expire 14400 ;minimum ) ac.uk. 86400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= ) ;; AUTHORITY SECTION (8 records) ac.uk. 86400 IN NS ns4.ja.net. ac.uk. 86400 IN NS ns3.ja.net. ac.uk. 86400 IN NS ns0.ja.net. ac.uk. 86400 IN NS ns1.surfnet.nl. ac.uk. 86400 IN NS auth03.ns.uu.net. ac.uk. 86400 IN NS dns-3.dfn.de. ac.uk. 86400 IN NS ns2.ja.net. ac.uk. 86400 IN RRSIG ( NS 8 2 86400 20260614130703 20260515130703 5800 ac.uk. jwT8V1V8HGIwWMh3MzjaT9oDnZqrvcOnxf6pV/D6h2sad104vNI2xbD+kJ/mMuigukaEkGcEWkg3 QtMBujKr3Vig91G5erEcTPHAD0dqoYhFL9Y7oWnPFQTp5nCi7HGtqFO2Le0Tjw3lkcfrUiaFSQJx XxVC4PJKXbMviyhyw5k= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.surfnet.nl for ac.uk/SOA
	Received 256 bytes from 192.87.106.101
	;; Response received from [192.87.106.101] 256 octets ;; HEADER SECTION ;; id = 63348 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN SOA ;; ANSWER SECTION (2 records) ac.uk. 86400 IN SOA ( ns0.ja.net. operations.ja.net. 2026051560 ;serial 28800 ;refresh 7200 ;retry 3600000 ;expire 14400 ;minimum ) ac.uk. 86400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth03.ns.uu.net for ac.uk/SOA
	Received 256 bytes from 198.6.1.83
	;; Response received from [198.6.1.83] 256 octets ;; HEADER SECTION ;; id = 12450 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN SOA ;; ANSWER SECTION (2 records) ac.uk. 86400 IN SOA ( ns0.ja.net. operations.ja.net. 2026051560 ;serial 28800 ;refresh 7200 ;retry 3600000 ;expire 14400 ;minimum ) ac.uk. 86400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns0.ja.net for ac.uk/SOA
	Received 573 bytes from 128.86.1.20
	;; Response received from [128.86.1.20] 573 octets ;; HEADER SECTION ;; id = 37426 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN SOA ;; ANSWER SECTION (2 records) ac.uk. 86400 IN SOA ( ns0.ja.net. operations.ja.net. 2026051560 ;serial 28800 ;refresh 7200 ;retry 3600000 ;expire 14400 ;minimum ) ac.uk. 86400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= ) ;; AUTHORITY SECTION (8 records) ac.uk. 86400 IN NS auth03.ns.uu.net. ac.uk. 86400 IN NS ns1.surfnet.nl. ac.uk. 86400 IN NS ns2.ja.net. ac.uk. 86400 IN NS dns-3.dfn.de. ac.uk. 86400 IN NS ns4.ja.net. ac.uk. 86400 IN NS ns3.ja.net. ac.uk. 86400 IN NS ns0.ja.net. ac.uk. 86400 IN RRSIG ( NS 8 2 86400 20260614130703 20260515130703 5800 ac.uk. jwT8V1V8HGIwWMh3MzjaT9oDnZqrvcOnxf6pV/D6h2sad104vNI2xbD+kJ/mMuigukaEkGcEWkg3 QtMBujKr3Vig91G5erEcTPHAD0dqoYhFL9Y7oWnPFQTp5nCi7HGtqFO2Le0Tjw3lkcfrUiaFSQJx XxVC4PJKXbMviyhyw5k= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.ja.net for ac.uk/SOA
	Received 573 bytes from 193.63.106.103
	;; Response received from [193.63.106.103] 573 octets ;; HEADER SECTION ;; id = 32086 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN SOA ;; ANSWER SECTION (2 records) ac.uk. 86400 IN SOA ( ns0.ja.net. operations.ja.net. 2026051560 ;serial 28800 ;refresh 7200 ;retry 3600000 ;expire 14400 ;minimum ) ac.uk. 86400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= ) ;; AUTHORITY SECTION (8 records) ac.uk. 86400 IN NS dns-3.dfn.de. ac.uk. 86400 IN NS ns2.ja.net. ac.uk. 86400 IN NS ns3.ja.net. ac.uk. 86400 IN NS auth03.ns.uu.net. ac.uk. 86400 IN NS ns0.ja.net. ac.uk. 86400 IN NS ns1.surfnet.nl. ac.uk. 86400 IN NS ns4.ja.net. ac.uk. 86400 IN RRSIG ( NS 8 2 86400 20260614130703 20260515130703 5800 ac.uk. jwT8V1V8HGIwWMh3MzjaT9oDnZqrvcOnxf6pV/D6h2sad104vNI2xbD+kJ/mMuigukaEkGcEWkg3 QtMBujKr3Vig91G5erEcTPHAD0dqoYhFL9Y7oWnPFQTp5nCi7HGtqFO2Le0Tjw3lkcfrUiaFSQJx XxVC4PJKXbMviyhyw5k= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.ja.net for ac.uk/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.uk. 14400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= )`
	RRSIG=5800 and DNSKEY=5800 verifies the SOA RRset

ac.uk

	Query to ns3.ja.net for ac.uk/A
	Received 501 bytes from 193.63.106.103
	;; Response received from [193.63.106.103] 501 octets ;; HEADER SECTION ;; id = 57042 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.uk. 14400 IN SOA ( ns0.ja.net. operations.ja.net. 2026051560 ;serial 28800 ;refresh 7200 ;retry 3600000 ;expire 14400 ;minimum ) ac.uk. 14400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= ) QIDFFN5JROI5OGI7JPCSKCBPDLNMGNUQ.ac.uk. 14400 IN NSEC3 ( 1 0 0 - qigombgcmp833cus54k25ltmp036jcrt NS SOA RRSIG DNSKEY NSEC3PARAM ) QIDFFN5JROI5OGI7JPCSKCBPDLNMGNUQ.ac.uk. 14400 IN RRSIG ( NSEC3 8 3 14400 20260614130703 20260515130703 5800 ac.uk. xqvw3pbgoWAQ3gw0aM1iOIyLrdILw/ePCuKiiOkVxi7zdNKXp6VLd4+Fh5o10Zjd0lL6EYRAMYa1 2agIF4TvSTtL2vh0bstwUh/vQ07tiZrddzdcmD05H9nq7yQsg+EG+oi2Ot/+OHOD5ggs5GfPAK0i UvGtO8qwocmWb7PhLHo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.ja.net is authoritative for ac.uk
	Found RRSIG signed by ac.uk zone
	Query to ns3.ja.net for ac.uk/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.uk. 14400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= )`
	RRSIG=5800 and DNSKEY=5800 verifies the SOA RRset

ac.uk

	Query to ns1.surfnet.nl for ac.uk/A
	Received 501 bytes from 192.87.106.101
	;; Response received from [192.87.106.101] 501 octets ;; HEADER SECTION ;; id = 19939 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.uk. 14400 IN SOA ( ns0.ja.net. operations.ja.net. 2026051560 ;serial 28800 ;refresh 7200 ;retry 3600000 ;expire 14400 ;minimum ) ac.uk. 14400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= ) QIDFFN5JROI5OGI7JPCSKCBPDLNMGNUQ.ac.uk. 14400 IN NSEC3 ( 1 0 0 - qigombgcmp833cus54k25ltmp036jcrt NS SOA RRSIG DNSKEY NSEC3PARAM ) QIDFFN5JROI5OGI7JPCSKCBPDLNMGNUQ.ac.uk. 14400 IN RRSIG ( NSEC3 8 3 14400 20260614130703 20260515130703 5800 ac.uk. xqvw3pbgoWAQ3gw0aM1iOIyLrdILw/ePCuKiiOkVxi7zdNKXp6VLd4+Fh5o10Zjd0lL6EYRAMYa1 2agIF4TvSTtL2vh0bstwUh/vQ07tiZrddzdcmD05H9nq7yQsg+EG+oi2Ot/+OHOD5ggs5GfPAK0i UvGtO8qwocmWb7PhLHo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.surfnet.nl is authoritative for ac.uk
	Found RRSIG signed by ac.uk zone
	Query to ns1.surfnet.nl for ac.uk/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.uk. 14400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= )`
	RRSIG=5800 and DNSKEY=5800 verifies the SOA RRset

ac.uk

	Query to ns0.ja.net for ac.uk/A
	Received 501 bytes from 128.86.1.20
	;; Response received from [128.86.1.20] 501 octets ;; HEADER SECTION ;; id = 58151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.uk. 14400 IN SOA ( ns0.ja.net. operations.ja.net. 2026051560 ;serial 28800 ;refresh 7200 ;retry 3600000 ;expire 14400 ;minimum ) ac.uk. 14400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= ) QIDFFN5JROI5OGI7JPCSKCBPDLNMGNUQ.ac.uk. 14400 IN NSEC3 ( 1 0 0 - qigombgcmp833cus54k25ltmp036jcrt NS SOA RRSIG DNSKEY NSEC3PARAM ) QIDFFN5JROI5OGI7JPCSKCBPDLNMGNUQ.ac.uk. 14400 IN RRSIG ( NSEC3 8 3 14400 20260614130703 20260515130703 5800 ac.uk. xqvw3pbgoWAQ3gw0aM1iOIyLrdILw/ePCuKiiOkVxi7zdNKXp6VLd4+Fh5o10Zjd0lL6EYRAMYa1 2agIF4TvSTtL2vh0bstwUh/vQ07tiZrddzdcmD05H9nq7yQsg+EG+oi2Ot/+OHOD5ggs5GfPAK0i UvGtO8qwocmWb7PhLHo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns0.ja.net is authoritative for ac.uk
	Found RRSIG signed by ac.uk zone
	Query to ns0.ja.net for ac.uk/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.uk. 14400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= )`
	RRSIG=5800 and DNSKEY=5800 verifies the SOA RRset

ac.uk

	Query to auth03.ns.uu.net for ac.uk/A
	Received 501 bytes from 198.6.1.83
	;; Response received from [198.6.1.83] 501 octets ;; HEADER SECTION ;; id = 8826 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.uk. 14400 IN SOA ( ns0.ja.net. operations.ja.net. 2026051560 ;serial 28800 ;refresh 7200 ;retry 3600000 ;expire 14400 ;minimum ) ac.uk. 14400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= ) QIDFFN5JROI5OGI7JPCSKCBPDLNMGNUQ.ac.uk. 14400 IN NSEC3 ( 1 0 0 - qigombgcmp833cus54k25ltmp036jcrt NS SOA RRSIG DNSKEY NSEC3PARAM ) QIDFFN5JROI5OGI7JPCSKCBPDLNMGNUQ.ac.uk. 14400 IN RRSIG ( NSEC3 8 3 14400 20260614130703 20260515130703 5800 ac.uk. xqvw3pbgoWAQ3gw0aM1iOIyLrdILw/ePCuKiiOkVxi7zdNKXp6VLd4+Fh5o10Zjd0lL6EYRAMYa1 2agIF4TvSTtL2vh0bstwUh/vQ07tiZrddzdcmD05H9nq7yQsg+EG+oi2Ot/+OHOD5ggs5GfPAK0i UvGtO8qwocmWb7PhLHo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth03.ns.uu.net is authoritative for ac.uk
	Found RRSIG signed by ac.uk zone
	Query to auth03.ns.uu.net for ac.uk/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.uk. 14400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= )`
	RRSIG=5800 and DNSKEY=5800 verifies the SOA RRset

ac.uk

	Query to dns-3.dfn.de for ac.uk/A
	Received 501 bytes from 193.174.75.58
	;; Response received from [193.174.75.58] 501 octets ;; HEADER SECTION ;; id = 40311 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.uk. 14400 IN SOA ( ns0.ja.net. operations.ja.net. 2026051560 ;serial 28800 ;refresh 7200 ;retry 3600000 ;expire 14400 ;minimum ) ac.uk. 14400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= ) QIDFFN5JROI5OGI7JPCSKCBPDLNMGNUQ.ac.uk. 14400 IN NSEC3 ( 1 0 0 - qigombgcmp833cus54k25ltmp036jcrt NS SOA RRSIG DNSKEY NSEC3PARAM ) QIDFFN5JROI5OGI7JPCSKCBPDLNMGNUQ.ac.uk. 14400 IN RRSIG ( NSEC3 8 3 14400 20260614130703 20260515130703 5800 ac.uk. xqvw3pbgoWAQ3gw0aM1iOIyLrdILw/ePCuKiiOkVxi7zdNKXp6VLd4+Fh5o10Zjd0lL6EYRAMYa1 2agIF4TvSTtL2vh0bstwUh/vQ07tiZrddzdcmD05H9nq7yQsg+EG+oi2Ot/+OHOD5ggs5GfPAK0i UvGtO8qwocmWb7PhLHo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns-3.dfn.de is authoritative for ac.uk
	Found RRSIG signed by ac.uk zone
	Query to dns-3.dfn.de for ac.uk/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.uk. 14400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= )`
	RRSIG=5800 and DNSKEY=5800 verifies the SOA RRset

ac.uk

	Query to ns2.ja.net for ac.uk/A
	Received 501 bytes from 193.63.105.17
	;; Response received from [193.63.105.17] 501 octets ;; HEADER SECTION ;; id = 25470 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.uk. 14400 IN SOA ( ns0.ja.net. operations.ja.net. 2026051560 ;serial 28800 ;refresh 7200 ;retry 3600000 ;expire 14400 ;minimum ) ac.uk. 14400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= ) QIDFFN5JROI5OGI7JPCSKCBPDLNMGNUQ.ac.uk. 14400 IN NSEC3 ( 1 0 0 - qigombgcmp833cus54k25ltmp036jcrt NS SOA RRSIG DNSKEY NSEC3PARAM ) QIDFFN5JROI5OGI7JPCSKCBPDLNMGNUQ.ac.uk. 14400 IN RRSIG ( NSEC3 8 3 14400 20260614130703 20260515130703 5800 ac.uk. xqvw3pbgoWAQ3gw0aM1iOIyLrdILw/ePCuKiiOkVxi7zdNKXp6VLd4+Fh5o10Zjd0lL6EYRAMYa1 2agIF4TvSTtL2vh0bstwUh/vQ07tiZrddzdcmD05H9nq7yQsg+EG+oi2Ot/+OHOD5ggs5GfPAK0i UvGtO8qwocmWb7PhLHo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.ja.net is authoritative for ac.uk
	Found RRSIG signed by ac.uk zone
	Query to ns2.ja.net for ac.uk/A
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.uk. 14400 IN RRSIG ( SOA 8 2 86400 20260614130703 20260515130703 5800 ac.uk. ymi2T0OWocqWsUfCMPzmBKXFCn6/FMfwMOMdC8cpeQgVRer/NUGi+/0Cy0S4GpO4YT6of0lZ8gsk YoBMaXloR1a3J3Hfxgnw86o/JegTNwfO00kN5vx/xrtYNQWswHytADYBJn5CnW2rjlcbJ737G1Fr RmzamGTy5U3h1DNWnNM= )`
	RRSIG=5800 and DNSKEY=5800 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ac.uk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: