DNSSEC Debugger - bitbox.swiss

Domain Name:

Time: 2025-05-11 10:30:37 UTC

Analyzing DNSSEC problems for bitbox.swiss

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 32113 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250601000000 20250511000000 20326 . VWTPvGJYPHue7aTc+b49y1cCggFM0t6ULKEPuAeITCgRgd5aAee5yrqEirwkq/Us7zDM1g1HliOO L8kCVbZ6ub5esuVSjlZ/mcEOdlOrkXt4I6AiVhAbaaCaOsEO7XiNaEWbNqiSQ0RcS7h2/A1E7thx F4xr9n8IXSI9bzyoGsH+HBf01Pne5ko34JgS2AuQj6pmksimN0GZ+/TTTtuo0w+mBbWswth1HCB6 5KuFuKfT4T97pLDK1ElPsFR2Ue7m7HMZeKfsb4nWg7LOCfGQVVu+bOVlgqIduXVgu/MsGbGd1A4+ /Wq7j5l7451NQeXfapnGtgJK9tsD1e1yZ83AbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250601000000 20250511000000 20326 . VWTPvGJYPHue7aTc+b49y1cCggFM0t6ULKEPuAeITCgRgd5aAee5yrqEirwkq/Us7zDM1g1HliOO L8kCVbZ6ub5esuVSjlZ/mcEOdlOrkXt4I6AiVhAbaaCaOsEO7XiNaEWbNqiSQ0RcS7h2/A1E7thx F4xr9n8IXSI9bzyoGsH+HBf01Pne5ko34JgS2AuQj6pmksimN0GZ+/TTTtuo0w+mBbWswth1HCB6 5KuFuKfT4T97pLDK1ElPsFR2Ue7m7HMZeKfsb4nWg7LOCfGQVVu+bOVlgqIduXVgu/MsGbGd1A4+ /Wq7j5l7451NQeXfapnGtgJK9tsD1e1yZ83AbQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to m.root-servers.net for bitbox.swiss/A
	Received 860 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 860 octets ;; HEADER SECTION ;; id = 58879 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bitbox.swiss. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) swiss. 172800 IN NS u.nic.swiss. swiss. 172800 IN NS anycast9.irondns.net. swiss. 172800 IN NS anycast24.irondns.net. swiss. 172800 IN NS anycast23.irondns.net. swiss. 172800 IN NS ns15.rcode0.net. swiss. 172800 IN NS g.nic.swiss. swiss. 172800 IN NS anycast10.irondns.net. swiss. 86400 IN DS ( 16056 10 2 b974351f3624a85d4304c09a005203d8cbd8ff0d790095413b19c31538f1ae31 ) swiss. 86400 IN RRSIG ( DS 8 1 86400 20250524050000 20250511040000 53148 . LzbE5W2ZQtApbqKYjFeBgtFwRfRruYti4uH2f336IBBYbuzhV+SOduz+VucPk5scYKDAPf8UgG9P PzmcnxMnl2LyH9Pc45GGlfDDdgLEvGsOAlRk45VgyoS5LHfhtLtYpSFoitxplsibGhc9DIYrgsGj qr0aa2QhpMO03DfT4A8LVFj8EoInyI7bj7E0CYUvAsd39Dj4kEEYq9oMDS94Kkx+pObo0K6zabqu GuwYDK2L6fzRdkxheENhELH3Md/62pcsb8XPjjGt0fArZkU1FmU8riPiuzYzMia6BG59KO4RA6Q5 W8Z+fK/PZdZGuWFLfwljo0+r5YlvMdwhugp9nw== ) ;; ADDITIONAL SECTION (15 records) anycast24.irondns.net. 172800 IN A 195.253.65.12 anycast23.irondns.net. 172800 IN A 195.253.65.11 anycast10.irondns.net. 172800 IN A 195.253.64.12 anycast9.irondns.net. 172800 IN A 195.253.64.11 ns15.rcode0.net. 172800 IN A 194.0.25.15 u.nic.swiss. 172800 IN A 195.253.65.9 g.nic.swiss. 172800 IN A 195.253.64.9 anycast24.irondns.net. 172800 IN AAAA 2a01:5b0:5::c anycast23.irondns.net. 172800 IN AAAA 2a01:5b0:5::b anycast10.irondns.net. 172800 IN AAAA 2a01:5b0:4::c anycast9.irondns.net. 172800 IN AAAA 2a01:5b0:4::b ns15.rcode0.net. 172800 IN AAAA 2001:678:20::15 u.nic.swiss. 172800 IN AAAA 2a01:5b0:5::9 g.nic.swiss. 172800 IN AAAA 2a01:5b0:4::9 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for swiss/DNSKEY
	Received 845 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 845 octets ;; HEADER SECTION ;; id = 63065 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; swiss. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) swiss. 172800 IN NS g.nic.swiss. swiss. 172800 IN NS u.nic.swiss. swiss. 172800 IN NS ns15.rcode0.net. swiss. 172800 IN NS anycast9.irondns.net. swiss. 172800 IN NS anycast10.irondns.net. swiss. 172800 IN NS anycast23.irondns.net. swiss. 172800 IN NS anycast24.irondns.net. swiss. 86400 IN DS ( 16056 10 2 b974351f3624a85d4304c09a005203d8cbd8ff0d790095413b19c31538f1ae31 ) swiss. 86400 IN RRSIG ( DS 8 1 86400 20250524050000 20250511040000 53148 . LzbE5W2ZQtApbqKYjFeBgtFwRfRruYti4uH2f336IBBYbuzhV+SOduz+VucPk5scYKDAPf8UgG9P PzmcnxMnl2LyH9Pc45GGlfDDdgLEvGsOAlRk45VgyoS5LHfhtLtYpSFoitxplsibGhc9DIYrgsGj qr0aa2QhpMO03DfT4A8LVFj8EoInyI7bj7E0CYUvAsd39Dj4kEEYq9oMDS94Kkx+pObo0K6zabqu GuwYDK2L6fzRdkxheENhELH3Md/62pcsb8XPjjGt0fArZkU1FmU8riPiuzYzMia6BG59KO4RA6Q5 W8Z+fK/PZdZGuWFLfwljo0+r5YlvMdwhugp9nw== ) ;; ADDITIONAL SECTION (15 records) g.nic.swiss. 172800 IN A 195.253.64.9 g.nic.swiss. 172800 IN AAAA 2a01:5b0:4::9 u.nic.swiss. 172800 IN A 195.253.65.9 u.nic.swiss. 172800 IN AAAA 2a01:5b0:5::9 ns15.rcode0.net. 172800 IN A 194.0.25.15 ns15.rcode0.net. 172800 IN AAAA 2001:678:20::15 anycast9.irondns.net. 172800 IN A 195.253.64.11 anycast9.irondns.net. 172800 IN AAAA 2a01:5b0:4::b anycast10.irondns.net. 172800 IN A 195.253.64.12 anycast10.irondns.net. 172800 IN AAAA 2a01:5b0:4::c anycast23.irondns.net. 172800 IN A 195.253.65.11 anycast23.irondns.net. 172800 IN AAAA 2a01:5b0:5::b anycast24.irondns.net. 172800 IN A 195.253.65.12 anycast24.irondns.net. 172800 IN AAAA 2a01:5b0:5::c ;; { "EDNS-VERSION": 0 }
	Found child zone swiss

swiss

	Checking DS between . and swiss
	Query to m.root-servers.net for swiss/DS
	Received 369 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 369 octets ;; HEADER SECTION ;; id = 37010 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; swiss. IN DS ;; ANSWER SECTION (2 records) swiss. 86400 IN DS ( 16056 10 2 b974351f3624a85d4304c09a005203d8cbd8ff0d790095413b19c31538f1ae31 ) swiss. 86400 IN RRSIG ( DS 8 1 86400 20250524050000 20250511040000 53148 . LzbE5W2ZQtApbqKYjFeBgtFwRfRruYti4uH2f336IBBYbuzhV+SOduz+VucPk5scYKDAPf8UgG9P PzmcnxMnl2LyH9Pc45GGlfDDdgLEvGsOAlRk45VgyoS5LHfhtLtYpSFoitxplsibGhc9DIYrgsGj qr0aa2QhpMO03DfT4A8LVFj8EoInyI7bj7E0CYUvAsd39Dj4kEEYq9oMDS94Kkx+pObo0K6zabqu GuwYDK2L6fzRdkxheENhELH3Md/62pcsb8XPjjGt0fArZkU1FmU8riPiuzYzMia6BG59KO4RA6Q5 W8Z+fK/PZdZGuWFLfwljo0+r5YlvMdwhugp9nw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for swiss in the . zone
	DS=16056/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`swiss. 86400 IN RRSIG ( DS 8 1 86400 20250524050000 20250511040000 53148 . LzbE5W2ZQtApbqKYjFeBgtFwRfRruYti4uH2f336IBBYbuzhV+SOduz+VucPk5scYKDAPf8UgG9P PzmcnxMnl2LyH9Pc45GGlfDDdgLEvGsOAlRk45VgyoS5LHfhtLtYpSFoitxplsibGhc9DIYrgsGj qr0aa2QhpMO03DfT4A8LVFj8EoInyI7bj7E0CYUvAsd39Dj4kEEYq9oMDS94Kkx+pObo0K6zabqu GuwYDK2L6fzRdkxheENhELH3Md/62pcsb8XPjjGt0fArZkU1FmU8riPiuzYzMia6BG59KO4RA6Q5 W8Z+fK/PZdZGuWFLfwljo0+r5YlvMdwhugp9nw== )`
	RRSIG=53148 and DNSKEY=53148 verifies the DS RRset
	DS=16056/SHA-256 is now in the chain-of-trust
	`swiss. 86400 IN DS ( 16056 10 2 b974351f3624a85d4304c09a005203d8cbd8ff0d790095413b19c31538f1ae31 )`
	Query to anycast10.irondns.net for swiss/DNSKEY
	Received 783 bytes from 195.253.64.12
	;; Response received from [195.253.64.12] 783 octets ;; HEADER SECTION ;; id = 62844 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; swiss. IN DNSKEY ;; ANSWER SECTION (3 records) swiss. 43200 IN DNSKEY ( 257 3 10 AwEAAc/13FIw3KtdMMyz/A4p6gM+vf3Tno8KluvFqIk1acz9a8wM6XBrPANXYXytAvKYWPAH336P CptdHttBy1y9LQU0AB0RZhAZnDmzMpbl/FOlPn0nz7BmtsglJqaGEG/3L1EmmgHnnk4QHdFDKnzz dTuhL4s5BAvUafnuS1XTYFYubrAbp8Eo13jsu+kkCS4OuX8/xkZp1v57mspSOiWfStfO18+TL4OB nb29l+gEEE3lufhtiFMMIDmQosTxWNIFFTItUJs2VrbWrTBsZdARSEPceX814gGseFSh1CIAifDw XQPz+hcW9wM2X1vGp3EJlzfNGhkP6eavCcR1hRsdUNc= ) ; keytag 16056 swiss. 43200 IN DNSKEY ( 256 3 10 AwEAAYLpl8XWUwiyyOs8uD3jstJTNcm5ogRNcPC3nwRGouF8zdfXI7iU2EK273dtSh4DUcgynNhv uwwP6L+Mah9n7K2CZbXruOUCmSy9pWPndohaueeW1cRpjb5UMEoXaHCyGne330tYHJhdhKfrzniU GuM/l4AOk/Y8QoyBMOHbIhHlor1ooYwrtJWsZZlLL20A+MXCp5xT5ug6MjIiNtoK2bc= ) ; keytag 23073 swiss. 43200 IN RRSIG ( DNSKEY 10 1 43200 20250520215422 20250506215422 16056 swiss. IbxXPHrRuFdTz/Rp7PDwh3RSWdtwHG7CB6ZUHRzt0mz+XeKQsjw/qbncVqKrF5GNF1D2EQ3XpuFw fwanZsgNybl5+CaBXFiFjBy0UOHZ8VdOqzr4xiC5mvfs+waPpVX7jIbuKSjHjFzU4EESkpHtzE4A 10T69898YZDHBaCFfctb7TaPvUmN93HRJvp63iumsaYa5UoiroZMdBHt0ezZbxGWZRmZAiFmyj6c 1KHSI6nEU4RCB78hGAnCuUVsm0Gagoq2rFzSabrlnKj9olwJUsWGv4n9mUuMsVCpPVe/9qFE45k/ OwJM0YF7EdIwhAeUgXKCCay5xIrFHkuwLtQsNg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for swiss
	`swiss. 43200 IN DNSKEY ( 257 3 10 AwEAAc/13FIw3KtdMMyz/A4p6gM+vf3Tno8KluvFqIk1acz9a8wM6XBrPANXYXytAvKYWPAH336P CptdHttBy1y9LQU0AB0RZhAZnDmzMpbl/FOlPn0nz7BmtsglJqaGEG/3L1EmmgHnnk4QHdFDKnzz dTuhL4s5BAvUafnuS1XTYFYubrAbp8Eo13jsu+kkCS4OuX8/xkZp1v57mspSOiWfStfO18+TL4OB nb29l+gEEE3lufhtiFMMIDmQosTxWNIFFTItUJs2VrbWrTBsZdARSEPceX814gGseFSh1CIAifDw XQPz+hcW9wM2X1vGp3EJlzfNGhkP6eavCcR1hRsdUNc= ) ; keytag 16056`
	`swiss. 43200 IN DNSKEY ( 256 3 10 AwEAAYLpl8XWUwiyyOs8uD3jstJTNcm5ogRNcPC3nwRGouF8zdfXI7iU2EK273dtSh4DUcgynNhv uwwP6L+Mah9n7K2CZbXruOUCmSy9pWPndohaueeW1cRpjb5UMEoXaHCyGne330tYHJhdhKfrzniU GuM/l4AOk/Y8QoyBMOHbIhHlor1ooYwrtJWsZZlLL20A+MXCp5xT5ug6MjIiNtoK2bc= ) ; keytag 23073`
	DNSKEY=16056/SEP is now in the chain-of-trust
	DS=16056/SHA-256 verifies DNSKEY=16056/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`swiss. 43200 IN RRSIG ( DNSKEY 10 1 43200 20250520215422 20250506215422 16056 swiss. IbxXPHrRuFdTz/Rp7PDwh3RSWdtwHG7CB6ZUHRzt0mz+XeKQsjw/qbncVqKrF5GNF1D2EQ3XpuFw fwanZsgNybl5+CaBXFiFjBy0UOHZ8VdOqzr4xiC5mvfs+waPpVX7jIbuKSjHjFzU4EESkpHtzE4A 10T69898YZDHBaCFfctb7TaPvUmN93HRJvp63iumsaYa5UoiroZMdBHt0ezZbxGWZRmZAiFmyj6c 1KHSI6nEU4RCB78hGAnCuUVsm0Gagoq2rFzSabrlnKj9olwJUsWGv4n9mUuMsVCpPVe/9qFE45k/ OwJM0YF7EdIwhAeUgXKCCay5xIrFHkuwLtQsNg== )`
	RRSIG=16056 and DNSKEY=16056/SEP verifies the DNSKEY RRset
	DNSKEY=23073 is now in the chain-of-trust
	Query to anycast23.irondns.net for bitbox.swiss/A
	Received 372 bytes from 195.253.65.11
	;; Response received from [195.253.65.11] 372 octets ;; HEADER SECTION ;; id = 6873 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bitbox.swiss. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) bitbox.swiss. 86400 IN NS leland.ns.cloudflare.com. bitbox.swiss. 86400 IN NS zariyah.ns.cloudflare.com. 53caqb89gj1paiqnbm45hr797q4ojtvi.swiss. 43200 IN RRSIG ( NSEC3 10 2 43200 20250519215150 20250505215150 23073 swiss. MnF0BZcFTXr/5VyDcGgVg5NfH5geZjkIu6NMu2i9cgxFNdNUYwG0yWeoEANmjCXsQKpBn2bbqeKR 4M9egrvtAXQ5q66BD9FjMs3cAdGfydwBtokoiaMmmI+I3GFB0xWZZ5JhEPtHfiiqB7F69AFc1pQ0 VqUdLOD5tjN4pDximaZgRZoTz3hxprbUmglHERw32hc+j9bEiKr0cEHCh0xtqg== ) 53caqb89gj1paiqnbm45hr797q4ojtvi.swiss. 43200 IN NSEC3 ( 1 0 0 - 53e7rslvnsq6ls9u0u2c37oovrf5om8m NS ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to u.nic.swiss for bitbox.swiss/DNSKEY
	Received 372 bytes from 195.253.65.9
	;; Response received from [195.253.65.9] 372 octets ;; HEADER SECTION ;; id = 36175 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bitbox.swiss. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) bitbox.swiss. 86400 IN NS leland.ns.cloudflare.com. bitbox.swiss. 86400 IN NS zariyah.ns.cloudflare.com. 53caqb89gj1paiqnbm45hr797q4ojtvi.swiss. 43200 IN RRSIG ( NSEC3 10 2 43200 20250519215150 20250505215150 23073 swiss. MnF0BZcFTXr/5VyDcGgVg5NfH5geZjkIu6NMu2i9cgxFNdNUYwG0yWeoEANmjCXsQKpBn2bbqeKR 4M9egrvtAXQ5q66BD9FjMs3cAdGfydwBtokoiaMmmI+I3GFB0xWZZ5JhEPtHfiiqB7F69AFc1pQ0 VqUdLOD5tjN4pDximaZgRZoTz3hxprbUmglHERw32hc+j9bEiKr0cEHCh0xtqg== ) 53caqb89gj1paiqnbm45hr797q4ojtvi.swiss. 43200 IN NSEC3 ( 1 0 0 - 53e7rslvnsq6ls9u0u2c37oovrf5om8m NS ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone bitbox.swiss

bitbox.swiss

	Checking DS between swiss and bitbox.swiss
	Query to anycast24.irondns.net for bitbox.swiss/DS
	Received 586 bytes from 195.253.65.12
	;; Response received from [195.253.65.12] 586 octets ;; HEADER SECTION ;; id = 1966 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bitbox.swiss. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) swiss. 86400 IN SOA ( anycast9.irondns.net. dnsmaster.corenic.org. 2505110950 ;serial 7200 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) swiss. 86400 IN RRSIG ( SOA 10 1 86400 20250525075026 20250511075026 23073 swiss. Ng5+thRwJhS23ivfpVj8NW0UQvx/vtMRcaDC1HkCPXf6rGVD1GSVQdpyVDqG82dYu9gpy9uZgLMk QE5dJ/5b8gGl7g3zvYkrDz5iknCtRFlAazZNoVEw7FyFMRT7FoiMwStx7W49Oo5rQuxF6vUnQqrn uU6f1hsUE4rDe/6ZtIAqLbpOX7X6JP78uZXOKzdcorrHTxeR6na8xdn3oclpSA== ) 53caqb89gj1paiqnbm45hr797q4ojtvi.swiss. 43200 IN RRSIG ( NSEC3 10 2 43200 20250519215150 20250505215150 23073 swiss. MnF0BZcFTXr/5VyDcGgVg5NfH5geZjkIu6NMu2i9cgxFNdNUYwG0yWeoEANmjCXsQKpBn2bbqeKR 4M9egrvtAXQ5q66BD9FjMs3cAdGfydwBtokoiaMmmI+I3GFB0xWZZ5JhEPtHfiiqB7F69AFc1pQ0 VqUdLOD5tjN4pDximaZgRZoTz3hxprbUmglHERw32hc+j9bEiKr0cEHCh0xtqg== ) 53caqb89gj1paiqnbm45hr797q4ojtvi.swiss. 43200 IN NSEC3 ( 1 0 0 - 53e7rslvnsq6ls9u0u2c37oovrf5om8m NS ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for bitbox.swiss in the swiss zone
	Query to zariyah.ns.cloudflare.com for bitbox.swiss/DNSKEY
	Received 105 bytes from 162.159.38.72
	;; Response received from [162.159.38.72] 105 octets ;; HEADER SECTION ;; id = 54738 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bitbox.swiss. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) bitbox.swiss. 1800 IN SOA ( leland.ns.cloudflare.com. dns.cloudflare.com. 2372355428 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to zariyah.ns.cloudflare.com for bitbox.swiss/A
	Received 89 bytes from 172.64.34.72
	;; Response received from [172.64.34.72] 89 octets ;; HEADER SECTION ;; id = 46588 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bitbox.swiss. IN A ;; ANSWER SECTION (3 records) bitbox.swiss. 300 IN A 104.26.1.40 bitbox.swiss. 300 IN A 172.67.68.208 bitbox.swiss. 300 IN A 104.26.0.40 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	zariyah.ns.cloudflare.com is authoritative for bitbox.swiss
	Query to leland.ns.cloudflare.com for bitbox.swiss/SOA
	Received 105 bytes from 162.159.44.8
	;; Response received from [162.159.44.8] 105 octets ;; HEADER SECTION ;; id = 26512 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bitbox.swiss. IN SOA ;; ANSWER SECTION (1 record) bitbox.swiss. 1800 IN SOA ( leland.ns.cloudflare.com. dns.cloudflare.com. 2372355428 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to zariyah.ns.cloudflare.com for bitbox.swiss/A
	Received 89 bytes from 108.162.194.72
	;; Response received from [108.162.194.72] 89 octets ;; HEADER SECTION ;; id = 33535 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bitbox.swiss. IN A ;; ANSWER SECTION (3 records) bitbox.swiss. 300 IN A 172.67.68.208 bitbox.swiss. 300 IN A 104.26.0.40 bitbox.swiss. 300 IN A 104.26.1.40 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bitbox.swiss A RR has value 172.67.68.208
	bitbox.swiss A RR has value 104.26.0.40
	bitbox.swiss A RR has value 104.26.1.40
	No RRSIGs found

bitbox.swiss

	Query to leland.ns.cloudflare.com for bitbox.swiss/A
	Received 89 bytes from 108.162.195.8
	;; Response received from [108.162.195.8] 89 octets ;; HEADER SECTION ;; id = 46838 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bitbox.swiss. IN A ;; ANSWER SECTION (3 records) bitbox.swiss. 300 IN A 104.26.0.40 bitbox.swiss. 300 IN A 172.67.68.208 bitbox.swiss. 300 IN A 104.26.1.40 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	leland.ns.cloudflare.com is authoritative for bitbox.swiss
	Query to leland.ns.cloudflare.com for bitbox.swiss/A
	Received 89 bytes from 162.159.44.8
	;; Response received from [162.159.44.8] 89 octets ;; HEADER SECTION ;; id = 56409 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bitbox.swiss. IN A ;; ANSWER SECTION (3 records) bitbox.swiss. 300 IN A 172.67.68.208 bitbox.swiss. 300 IN A 104.26.1.40 bitbox.swiss. 300 IN A 104.26.0.40 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bitbox.swiss A RR has value 172.67.68.208
	bitbox.swiss A RR has value 104.26.1.40
	bitbox.swiss A RR has value 104.26.0.40
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bitbox.swiss at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: