DNSSEC Debugger - bella.network

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-06-10 09:47:55 UTC

Analyzing DNSSEC problems for bella.network

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1141 octets ;; HEADER SECTION ;; id = 18114 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to c.root-servers.net for bella.network/A
	Received 766 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 766 octets ;; HEADER SECTION ;; id = 64723 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bella.network. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) network. 172800 IN NS v2n1.nic.network. network. 172800 IN NS v0n2.nic.network. network. 172800 IN NS v0n0.nic.network. network. 172800 IN NS v0n1.nic.network. network. 172800 IN NS v0n3.nic.network. network. 172800 IN NS v2n0.nic.network. network. 86400 IN DS ( 40414 8 2 67bbaa0c822dacf7baa5d8faac2591bdd7bf9a6a4189eca26a61c25276744d2b ) network. 86400 IN RRSIG ( DS 8 1 86400 20260623050000 20260610040000 54393 . S3C07mb/NQ0Ip17Jbzr4q3KWG4OUXFQEoc8zoj5oedig7hAbH4j+plCmelEnrutaUT/+TYq0BhED LElyrPVBho/+urFA2q+tOQVwjuXqj92z2Gqg6afTIlz53tif43EdZLvLtIZ3zCMIQqWV++HeqTg6 SJejSbgQRUq9yUWiHUBlTFMO7oSEUu+XXWEZnzVBTotY5cwDvqar8qV0VlImHNKWmtk6y2cp5Hnx sbTSB28v76tq+fjZoTMZjXyzYM2PbEyyOjruGCEqG2QhWVy7q9frDWVjD/vIDhBl0xQA60BW96ax qxInQHmpcBkGGljlNPPUnlvcCzzQjhtkZqaN9g== ) ;; ADDITIONAL SECTION (13 records) v2n1.nic.network. 172800 IN A 161.232.17.36 v2n0.nic.network. 172800 IN A 65.22.35.36 v0n3.nic.network. 172800 IN A 161.232.16.36 v0n2.nic.network. 172800 IN A 65.22.34.36 v0n1.nic.network. 172800 IN A 65.22.33.36 v0n0.nic.network. 172800 IN A 65.22.32.36 v2n1.nic.network. 172800 IN AAAA 2a01:8840:fb::36 v2n0.nic.network. 172800 IN AAAA 2a01:8840:25::36 v0n3.nic.network. 172800 IN AAAA 2a01:8840:fa::36 v0n2.nic.network. 172800 IN AAAA 2a01:8840:24::36 v0n1.nic.network. 172800 IN AAAA 2a01:8840:23::36 v0n0.nic.network. 172800 IN AAAA 2a01:8840:22::36 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for network/DNSKEY
	Received 753 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 753 octets ;; HEADER SECTION ;; id = 58698 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; network. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) network. 172800 IN NS v0n0.nic.network. network. 172800 IN NS v0n2.nic.network. network. 172800 IN NS v0n1.nic.network. network. 172800 IN NS v0n3.nic.network. network. 172800 IN NS v2n0.nic.network. network. 172800 IN NS v2n1.nic.network. network. 86400 IN DS ( 40414 8 2 67bbaa0c822dacf7baa5d8faac2591bdd7bf9a6a4189eca26a61c25276744d2b ) network. 86400 IN RRSIG ( DS 8 1 86400 20260623050000 20260610040000 54393 . S3C07mb/NQ0Ip17Jbzr4q3KWG4OUXFQEoc8zoj5oedig7hAbH4j+plCmelEnrutaUT/+TYq0BhED LElyrPVBho/+urFA2q+tOQVwjuXqj92z2Gqg6afTIlz53tif43EdZLvLtIZ3zCMIQqWV++HeqTg6 SJejSbgQRUq9yUWiHUBlTFMO7oSEUu+XXWEZnzVBTotY5cwDvqar8qV0VlImHNKWmtk6y2cp5Hnx sbTSB28v76tq+fjZoTMZjXyzYM2PbEyyOjruGCEqG2QhWVy7q9frDWVjD/vIDhBl0xQA60BW96ax qxInQHmpcBkGGljlNPPUnlvcCzzQjhtkZqaN9g== ) ;; ADDITIONAL SECTION (13 records) v0n0.nic.network. 172800 IN A 65.22.32.36 v0n1.nic.network. 172800 IN A 65.22.33.36 v0n2.nic.network. 172800 IN A 65.22.34.36 v0n3.nic.network. 172800 IN A 161.232.16.36 v2n0.nic.network. 172800 IN A 65.22.35.36 v2n1.nic.network. 172800 IN A 161.232.17.36 v0n0.nic.network. 172800 IN AAAA 2a01:8840:22::36 v0n1.nic.network. 172800 IN AAAA 2a01:8840:23::36 v0n2.nic.network. 172800 IN AAAA 2a01:8840:24::36 v0n3.nic.network. 172800 IN AAAA 2a01:8840:fa::36 v2n0.nic.network. 172800 IN AAAA 2a01:8840:25::36 v2n1.nic.network. 172800 IN AAAA 2a01:8840:fb::36 ;; { "EDNS-VERSION": 0 }
	Found child zone network

network

	Checking DS between . and network
	Query to c.root-servers.net for network/DS
	Received 371 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 371 octets ;; HEADER SECTION ;; id = 26239 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; network. IN DS ;; ANSWER SECTION (2 records) network. 86400 IN DS ( 40414 8 2 67bbaa0c822dacf7baa5d8faac2591bdd7bf9a6a4189eca26a61c25276744d2b ) network. 86400 IN RRSIG ( DS 8 1 86400 20260623050000 20260610040000 54393 . S3C07mb/NQ0Ip17Jbzr4q3KWG4OUXFQEoc8zoj5oedig7hAbH4j+plCmelEnrutaUT/+TYq0BhED LElyrPVBho/+urFA2q+tOQVwjuXqj92z2Gqg6afTIlz53tif43EdZLvLtIZ3zCMIQqWV++HeqTg6 SJejSbgQRUq9yUWiHUBlTFMO7oSEUu+XXWEZnzVBTotY5cwDvqar8qV0VlImHNKWmtk6y2cp5Hnx sbTSB28v76tq+fjZoTMZjXyzYM2PbEyyOjruGCEqG2QhWVy7q9frDWVjD/vIDhBl0xQA60BW96ax qxInQHmpcBkGGljlNPPUnlvcCzzQjhtkZqaN9g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for network in the . zone
	DS=40414/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`network. 86400 IN RRSIG ( DS 8 1 86400 20260623050000 20260610040000 54393 . S3C07mb/NQ0Ip17Jbzr4q3KWG4OUXFQEoc8zoj5oedig7hAbH4j+plCmelEnrutaUT/+TYq0BhED LElyrPVBho/+urFA2q+tOQVwjuXqj92z2Gqg6afTIlz53tif43EdZLvLtIZ3zCMIQqWV++HeqTg6 SJejSbgQRUq9yUWiHUBlTFMO7oSEUu+XXWEZnzVBTotY5cwDvqar8qV0VlImHNKWmtk6y2cp5Hnx sbTSB28v76tq+fjZoTMZjXyzYM2PbEyyOjruGCEqG2QhWVy7q9frDWVjD/vIDhBl0xQA60BW96ax qxInQHmpcBkGGljlNPPUnlvcCzzQjhtkZqaN9g== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=40414/SHA-256 is now in the chain-of-trust
	`network. 86400 IN DS ( 40414 8 2 67bbaa0c822dacf7baa5d8faac2591bdd7bf9a6a4189eca26a61c25276744d2b )`
	Query to v0n2.nic.network for network/DNSKEY
	Received 903 bytes from 65.22.34.36
	;; Response received from [65.22.34.36] 903 octets ;; HEADER SECTION ;; id = 13951 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; network. IN DNSKEY ;; ANSWER SECTION (4 records) network. 3600 IN DNSKEY ( 256 3 8 AwEAAa375n4Ws5a+rbrdXX9qOQeQmMEUz4YFsi+F1UJ8kLmyGWPJXzmyzYEl0zdRMeNdM7jbnQwk kXHQ7boTY5YxQ7kDdRtPgkSfID0BX/aCsrMHCHI9knQ3jT/njBSYFBOFsiTqYSJtZ+6y2+WLVbQB ufg1uD+5CeTpHM0sXZcvim+B ) ; keytag 26070 network. 3600 IN DNSKEY ( 256 3 8 AwEAAaN2H5qPhvHQQl23secluZkAPcwNCpsSNlx7uNzSvTvTOnXBvAyCTkJvOTjG6nGN2cMYq0e8 TxZPrHFNroZpWA8oAuscRtxGmipDKosaRKeBDGBhQZokClIs4mP63Bt6jgPAGuG6xxh58fS9GHbm nlyEABaFQp4HmsIjRNPGm5B7 ) ; keytag 11751 network. 3600 IN DNSKEY ( 257 3 8 AwEAAbCKLQkUrWJ4cYV2EtQSoTVrMhPYTE+Fwa3tc204XZRQ4hBWzTFan+9a8HFaFDm7F2nmK6m/ 52vg52SrBKZupyk3yt23t+l9AKJhmBNpVeWwIBz0pEO03CdBaFlpI7FvTUy+JqWzM1z+YyX4EdfN z/FiXvG01zIRaV/2GqWPFZOnDghh2LVvsRWT+Ht/zq8yMHaDzCX1guOQPKICGzMSIFTfeCGan+Zl 0pZ+s7XG99urKaH6HDhoallayAjQkf8Mbi+zQpLera1gqZrck3A58pVAN9XUeOfGt68lzB7ygVeF nClf70jGgMMdmYOyxb6rn9FYnkxIrr2RPgXFntKZUI0= ) ; keytag 40414 network. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260630160823 20260609150823 40414 network. IAo4VAg46Vn5nIZQAD/dE65qeQ6nYKnxP8RRk6Ew4SOOl/RKxp4ZquCmaWQly2RvIUY7n3J1n5bb 6e0ZJCcXtdR2B/JWzvcMbBWrSlhDz2/cJsZQKyDpyWPfCuXTL0pVPDlT9Tw5X87ZiZbt37Rjkh5u owQ8OX6i0D4er2GUcGt1elq0AB++eYoE5Ypp7Rq0CZi7V6Y2Uv8fEcfXMAINxd7mMT0onfgsfCpM +wZcEqbk58hufvIed5svZfUi6bzQRTVjfcytlLfwdjLQXN8SLSPzqb2IsbVWLegxpe05O3kANOvh gfd04FXuomsU75QJLjX/D9yNr4/qucZVEwlyag== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for network
	`network. 3600 IN DNSKEY ( 256 3 8 AwEAAa375n4Ws5a+rbrdXX9qOQeQmMEUz4YFsi+F1UJ8kLmyGWPJXzmyzYEl0zdRMeNdM7jbnQwk kXHQ7boTY5YxQ7kDdRtPgkSfID0BX/aCsrMHCHI9knQ3jT/njBSYFBOFsiTqYSJtZ+6y2+WLVbQB ufg1uD+5CeTpHM0sXZcvim+B ) ; keytag 26070`
	`network. 3600 IN DNSKEY ( 256 3 8 AwEAAaN2H5qPhvHQQl23secluZkAPcwNCpsSNlx7uNzSvTvTOnXBvAyCTkJvOTjG6nGN2cMYq0e8 TxZPrHFNroZpWA8oAuscRtxGmipDKosaRKeBDGBhQZokClIs4mP63Bt6jgPAGuG6xxh58fS9GHbm nlyEABaFQp4HmsIjRNPGm5B7 ) ; keytag 11751`
	`network. 3600 IN DNSKEY ( 257 3 8 AwEAAbCKLQkUrWJ4cYV2EtQSoTVrMhPYTE+Fwa3tc204XZRQ4hBWzTFan+9a8HFaFDm7F2nmK6m/ 52vg52SrBKZupyk3yt23t+l9AKJhmBNpVeWwIBz0pEO03CdBaFlpI7FvTUy+JqWzM1z+YyX4EdfN z/FiXvG01zIRaV/2GqWPFZOnDghh2LVvsRWT+Ht/zq8yMHaDzCX1guOQPKICGzMSIFTfeCGan+Zl 0pZ+s7XG99urKaH6HDhoallayAjQkf8Mbi+zQpLera1gqZrck3A58pVAN9XUeOfGt68lzB7ygVeF nClf70jGgMMdmYOyxb6rn9FYnkxIrr2RPgXFntKZUI0= ) ; keytag 40414`
	DNSKEY=40414/SEP is now in the chain-of-trust
	DS=40414/SHA-256 verifies DNSKEY=40414/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`network. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260630160823 20260609150823 40414 network. IAo4VAg46Vn5nIZQAD/dE65qeQ6nYKnxP8RRk6Ew4SOOl/RKxp4ZquCmaWQly2RvIUY7n3J1n5bb 6e0ZJCcXtdR2B/JWzvcMbBWrSlhDz2/cJsZQKyDpyWPfCuXTL0pVPDlT9Tw5X87ZiZbt37Rjkh5u owQ8OX6i0D4er2GUcGt1elq0AB++eYoE5Ypp7Rq0CZi7V6Y2Uv8fEcfXMAINxd7mMT0onfgsfCpM +wZcEqbk58hufvIed5svZfUi6bzQRTVjfcytlLfwdjLQXN8SLSPzqb2IsbVWLegxpe05O3kANOvh gfd04FXuomsU75QJLjX/D9yNr4/qucZVEwlyag== )`
	RRSIG=40414 and DNSKEY=40414/SEP verifies the DNSKEY RRset
	DNSKEY=26070 is now in the chain-of-trust
	DNSKEY=11751 is now in the chain-of-trust
	Query to v2n0.nic.network for bella.network/A
	Received 314 bytes from 65.22.35.36
	;; Response received from [65.22.35.36] 314 octets ;; HEADER SECTION ;; id = 35549 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bella.network. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) bella.network. 3600 IN NS albert.ns.cloudflare.com. bella.network. 3600 IN NS dell.ns.cloudflare.com. bella.network. 3600 IN DS ( 2371 13 2 2461005eca3dc23b993de72a9c6a53e3c8cbd997f6a968bdcb00927f48ec0ccc ) bella.network. 3600 IN RRSIG ( DS 8 2 3600 20260630160823 20260609150823 11751 network. CHDq1CNoq0UVz5tkPbIQVJ35iCWzxmHNOmUuskGpNhUPWhyoq9baGfEAI239w2KReykPrzUFcdNW pMK1NfxuuKtndtTwDaAIkKnDF6s3/pgcA33qivuIkqd1BXaqkLGJ5Nl1xv9bzYFuvbjLZU4mdKhW 6S9WCdBz6rnskJKgtaY= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to v0n3.nic.network for bella.network/DNSKEY
	Received 314 bytes from 161.232.16.36
	;; Response received from [161.232.16.36] 314 octets ;; HEADER SECTION ;; id = 24782 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bella.network. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) bella.network. 3600 IN NS dell.ns.cloudflare.com. bella.network. 3600 IN NS albert.ns.cloudflare.com. bella.network. 3600 IN DS ( 2371 13 2 2461005eca3dc23b993de72a9c6a53e3c8cbd997f6a968bdcb00927f48ec0ccc ) bella.network. 3600 IN RRSIG ( DS 8 2 3600 20260630160823 20260609150823 11751 network. CHDq1CNoq0UVz5tkPbIQVJ35iCWzxmHNOmUuskGpNhUPWhyoq9baGfEAI239w2KReykPrzUFcdNW pMK1NfxuuKtndtTwDaAIkKnDF6s3/pgcA33qivuIkqd1BXaqkLGJ5Nl1xv9bzYFuvbjLZU4mdKhW 6S9WCdBz6rnskJKgtaY= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone bella.network

bella.network

	Checking DS between network and bella.network
	Query to v0n2.nic.network for bella.network/DS
	Received 257 bytes from 65.22.34.36
	;; Response received from [65.22.34.36] 257 octets ;; HEADER SECTION ;; id = 1230 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bella.network. IN DS ;; ANSWER SECTION (2 records) bella.network. 3600 IN DS ( 2371 13 2 2461005eca3dc23b993de72a9c6a53e3c8cbd997f6a968bdcb00927f48ec0ccc ) bella.network. 3600 IN RRSIG ( DS 8 2 3600 20260630160823 20260609150823 11751 network. CHDq1CNoq0UVz5tkPbIQVJ35iCWzxmHNOmUuskGpNhUPWhyoq9baGfEAI239w2KReykPrzUFcdNW pMK1NfxuuKtndtTwDaAIkKnDF6s3/pgcA33qivuIkqd1BXaqkLGJ5Nl1xv9bzYFuvbjLZU4mdKhW 6S9WCdBz6rnskJKgtaY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for bella.network in the network zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`bella.network. 3600 IN RRSIG ( DS 8 2 3600 20260630160823 20260609150823 11751 network. CHDq1CNoq0UVz5tkPbIQVJ35iCWzxmHNOmUuskGpNhUPWhyoq9baGfEAI239w2KReykPrzUFcdNW pMK1NfxuuKtndtTwDaAIkKnDF6s3/pgcA33qivuIkqd1BXaqkLGJ5Nl1xv9bzYFuvbjLZU4mdKhW 6S9WCdBz6rnskJKgtaY= )`
	RRSIG=11751 and DNSKEY=11751 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`bella.network. 3600 IN DS ( 2371 13 2 2461005eca3dc23b993de72a9c6a53e3c8cbd997f6a968bdcb00927f48ec0ccc )`
	Query to dell.ns.cloudflare.com for bella.network/DNSKEY
	Received 311 bytes from 172.64.32.94
	;; Response received from [172.64.32.94] 311 octets ;; HEADER SECTION ;; id = 17342 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bella.network. IN DNSKEY ;; ANSWER SECTION (3 records) bella.network. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371 bella.network. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505 bella.network. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260722192902 20260522192902 2371 bella.network. O5gKEttMs3v90NVb8+/9jYl6XIhgtjB1v7tdioLcwWti5CdJDH9ga2h4HdvG8BEXD16yDJNlViqS etNxISwWeQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for bella.network
	`bella.network. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371`
	`bella.network. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`bella.network. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260722192902 20260522192902 2371 bella.network. O5gKEttMs3v90NVb8+/9jYl6XIhgtjB1v7tdioLcwWti5CdJDH9ga2h4HdvG8BEXD16yDJNlViqS etNxISwWeQ== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to albert.ns.cloudflare.com for bella.network/A
	Received 167 bytes from 172.64.33.58
	;; Response received from [172.64.33.58] 167 octets ;; HEADER SECTION ;; id = 23031 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bella.network. IN A ;; ANSWER SECTION (2 records) bella.network. 300 IN A 37.120.178.36 bella.network. 300 IN RRSIG ( A 13 2 300 20260611104755 20260609084755 34505 bella.network. TMndRRTV2+aj0q/NdV4LYdPkZwKzY8xJCYwd/YAPvbGN1My/TcpW1z8vG0fLvK7cAuNUZPbxM/3b hBDz1qeBjg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	albert.ns.cloudflare.com is authoritative for bella.network
	Found RRSIG signed by bella.network zone
	Query to dell.ns.cloudflare.com for bella.network/SOA
	Received 215 bytes from 108.162.192.94
	;; Response received from [108.162.192.94] 215 octets ;; HEADER SECTION ;; id = 18360 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bella.network. IN SOA ;; ANSWER SECTION (2 records) bella.network. 1800 IN SOA ( albert.ns.cloudflare.com. dns.cloudflare.com. 2406158363 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) bella.network. 1800 IN RRSIG ( SOA 13 2 1800 20260611104755 20260609084755 34505 bella.network. ESBT9OpSFG1cpA2gykLK6nytXreDpZ+CmOEFomMsTEDo/BVioUiF86zCIYbUQ6MSNONORBm6b4uL zZ6rznkL1g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to albert.ns.cloudflare.com for bella.network/A
	bella.network A RR has value 37.120.178.36
	Found 1 RRSIGs over A RRset
	`bella.network. 300 IN RRSIG ( A 13 2 300 20260611104755 20260609084755 34505 bella.network. TMndRRTV2+aj0q/NdV4LYdPkZwKzY8xJCYwd/YAPvbGN1My/TcpW1z8vG0fLvK7cAuNUZPbxM/3b hBDz1qeBjg== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

bella.network

	Query to dell.ns.cloudflare.com for bella.network/A
	Received 167 bytes from 172.64.32.94
	;; Response received from [172.64.32.94] 167 octets ;; HEADER SECTION ;; id = 4739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bella.network. IN A ;; ANSWER SECTION (2 records) bella.network. 300 IN A 37.120.178.36 bella.network. 300 IN RRSIG ( A 13 2 300 20260611104755 20260609084755 34505 bella.network. Edkpap7FdYxcfXdEgOp6DtP1h1zdONPZMJTVhRqgtyJACSJVpNw+3OQnPTgKMC1B+/YGRdizPYcC egCGjIUQ1A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dell.ns.cloudflare.com is authoritative for bella.network
	Found RRSIG signed by bella.network zone
	Query to dell.ns.cloudflare.com for bella.network/A
	bella.network A RR has value 37.120.178.36
	Found 1 RRSIGs over A RRset
	`bella.network. 300 IN RRSIG ( A 13 2 300 20260611104755 20260609084755 34505 bella.network. Edkpap7FdYxcfXdEgOp6DtP1h1zdONPZMJTVhRqgtyJACSJVpNw+3OQnPTgKMC1B+/YGRdizPYcC egCGjIUQ1A== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bella.network at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: