Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2025-07-10 14:58:58 UTC

Analyzing DNSSEC problems for airknowledge.gov

.
All Queries to m.root-servers.net for ./DNSKEY timed out or failed
Found 4 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
gov
Found 1 DS records for gov in the . zone
DS=2536/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
Found 2 DNSKEY records for gov
DS=2536/SHA-256 verifies DNSKEY=2536/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
airknowledge.gov
No DS records found for airknowledge.gov in the gov zone
No DNSKEY records found
nccns1.epa.gov is authoritative for airknowledge.gov
airknowledge.gov RRs are signed by lbd.airknowledge.gov zone keys
lbd.airknowledge.gov
Found 2 DS records for lbd.airknowledge.gov in the airknowledge.gov zone
DS=9835/SHA-256 has algorithm RSASHA256
DS=8661/SHA-256 has algorithm RSASHA256
No RRSIGs found
Found 3 DNSKEY records for lbd.airknowledge.gov
DS=9835/SHA-256 verifies DNSKEY=9835
DS=8661/SHA-256 verifies DNSKEY=8661
Found 2 RRSIGs over DNSKEY RRset
RRSIG=9835 and DNSKEY=9835 verifies the DNSKEY RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test airknowledge.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options