DNSSEC Analyzer

Domain Name:

Time: 2023-12-08 03:22:38 UTC, NTP stratum 16

Analyzing DNSSEC problems for co.uk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (864 octets) ;; HEADER SECTION ;; id = 44580 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	Query to b.root-servers.net for co.uk/A
	Received 873 bytes from 170.247.170.2
	;; Response received from 170.247.170.2 (873 octets) ;; HEADER SECTION ;; id = 1012 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 17 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . YV03jwbi/mH+I408BRAbQO5FdC8oKIBa4nJogBPzscoiCiKGE3CmfrR4y0W6rTWzOqZF8Z2CjGG/ KN4OGG5Jf9yEAhqIkyKyK+8shPLM+ArgLLLpzURfXfSImoqpcz/qDsCpMzVKDCMYWrXfYD8kZ+79 QFfnKgtZaSgpc6qDMRxq351XYk5ZmX0YGE0JdwnB/7kObwYgDGEY/00NHFStwVpg7J6eUM8MkvzN qklT6CMrE+jQbgUNDxCXEmt8+81CLOf/KKuhJ/TbgqspRVdO4jg2apd3VE+g4rRIPJEzbkemCJVW OZJFKp/poIvHuLZLlWu6DGVrOhCY7y/idJrpuQ== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN A 156.154.103.3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN A 43.230.48.1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to j.root-servers.net for uk/DNSKEY
	Received 870 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (870 octets) ;; HEADER SECTION ;; id = 43089 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 17 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . YV03jwbi/mH+I408BRAbQO5FdC8oKIBa4nJogBPzscoiCiKGE3CmfrR4y0W6rTWzOqZF8Z2CjGG/ KN4OGG5Jf9yEAhqIkyKyK+8shPLM+ArgLLLpzURfXfSImoqpcz/qDsCpMzVKDCMYWrXfYD8kZ+79 QFfnKgtZaSgpc6qDMRxq351XYk5ZmX0YGE0JdwnB/7kObwYgDGEY/00NHFStwVpg7J6eUM8MkvzN qklT6CMrE+jQbgUNDxCXEmt8+81CLOf/KKuhJ/TbgqspRVdO4jg2apd3VE+g4rRIPJEzbkemCJVW OZJFKp/poIvHuLZLlWu6DGVrOhCY7y/idJrpuQ== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsd.nic.uk. 172800 IN A 156.154.103.3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns4.nic.uk. 172800 IN A 43.230.48.1 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone uk

	Checking DS between . and uk
	Query to i.root-servers.net for uk/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (366 octets) ;; HEADER SECTION ;; id = 50502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uk. IN DS ;; ANSWER SECTION (2 records) uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . YV03jwbi/mH+I408BRAbQO5FdC8oKIBa4nJogBPzscoiCiKGE3CmfrR4y0W6rTWzOqZF8Z2CjGG/ KN4OGG5Jf9yEAhqIkyKyK+8shPLM+ArgLLLpzURfXfSImoqpcz/qDsCpMzVKDCMYWrXfYD8kZ+79 QFfnKgtZaSgpc6qDMRxq351XYk5ZmX0YGE0JdwnB/7kObwYgDGEY/00NHFStwVpg7J6eUM8MkvzN qklT6CMrE+jQbgUNDxCXEmt8+81CLOf/KKuhJ/TbgqspRVdO4jg2apd3VE+g4rRIPJEzbkemCJVW OZJFKp/poIvHuLZLlWu6DGVrOhCY7y/idJrpuQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for uk in the . zone
	DS=43876/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uk. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . YV03jwbi/mH+I408BRAbQO5FdC8oKIBa4nJogBPzscoiCiKGE3CmfrR4y0W6rTWzOqZF8Z2CjGG/ KN4OGG5Jf9yEAhqIkyKyK+8shPLM+ArgLLLpzURfXfSImoqpcz/qDsCpMzVKDCMYWrXfYD8kZ+79 QFfnKgtZaSgpc6qDMRxq351XYk5ZmX0YGE0JdwnB/7kObwYgDGEY/00NHFStwVpg7J6eUM8MkvzN qklT6CMrE+jQbgUNDxCXEmt8+81CLOf/KKuhJ/TbgqspRVdO4jg2apd3VE+g4rRIPJEzbkemCJVW OZJFKp/poIvHuLZLlWu6DGVrOhCY7y/idJrpuQ== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=43876/SHA-256 is now in the chain-of-trust
	`uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 )`
	Query to dns1.nic.uk for uk/DNSKEY
	Received 745 bytes from 213.248.216.1
	;; Response received from 213.248.216.1 (745 octets) ;; HEADER SECTION ;; id = 1077 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (3 records) uk. 3600 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; Key ID = 43056 uk. 3600 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; Key ID = 43876 uk. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240110114025 20231206111735 43876 uk. rKslwhn461KWmOGWovHxYcQcBL3drnAmzgShTu1U/IaN8R9N1lWBBW36Zx3yEXiu9s2XIiqe+j3/ yZrmmZLy//cVoLgxn1DyPu12EMrQvCL+TYFAktWqttxrJYNFNCysjzrmP+71Y3ItTC0fgN6O4Arz 8SbxvQmsv3w8V4sjZc5z2xS5j15pnQi1ZdmDuspNUyu38lYmVtcPE3XJFVTqTJW7ICXF4hvtzgL/ QJvE0NT85qHQuSJsJ/gnc+qUzs9FgV0ivW+HBdFWKs7tkGcnxLk6rtjN8mR85f1WY6Gq8kss/IMu Lqsuok1QD/7ABPEPGMcP/xFsmDYNoAP78pdKNg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for uk
	`uk. 3600 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; Key ID = 43056`
	`uk. 3600 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; Key ID = 43876`
	DNSKEY=43876/SEP is now in the chain-of-trust
	DS=43876/SHA-256 verifies DNSKEY=43876/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`uk. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240110114025 20231206111735 43876 uk. rKslwhn461KWmOGWovHxYcQcBL3drnAmzgShTu1U/IaN8R9N1lWBBW36Zx3yEXiu9s2XIiqe+j3/ yZrmmZLy//cVoLgxn1DyPu12EMrQvCL+TYFAktWqttxrJYNFNCysjzrmP+71Y3ItTC0fgN6O4Arz 8SbxvQmsv3w8V4sjZc5z2xS5j15pnQi1ZdmDuspNUyu38lYmVtcPE3XJFVTqTJW7ICXF4hvtzgL/ QJvE0NT85qHQuSJsJ/gnc+qUzs9FgV0ivW+HBdFWKs7tkGcnxLk6rtjN8mR85f1WY6Gq8kss/IMu Lqsuok1QD/7ABPEPGMcP/xFsmDYNoAP78pdKNg== )`
	RRSIG=43876 and DNSKEY=43876/SEP verifies the DNSKEY RRset
	DNSKEY=43056 is now in the chain-of-trust
	Query to dns4.nic.uk for co.uk/A
	Received 546 bytes from 43.230.48.1
	;; Response received from 43.230.48.1 (546 octets) ;; HEADER SECTION ;; id = 14172 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300868 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns4.nic.uk is authoritative for co.uk
	Query to dns2.nic.uk for co.uk/DNSKEY
	Received 347 bytes from 103.49.80.1
	;; Response received from 103.49.80.1 (347 octets) ;; HEADER SECTION ;; id = 11162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (2 records) co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAcf+56ydE3WHB5vn1UxYBXJJXBlJfHlS/MWEVn+8KVJyED0iNLvSEvSr47VeBnp7e53TbVQS 1pLMGaL/Upq4Hb70kY8LrlPOG9b7Guhbm7jRaosC6PETNPQ1aoNrZtAagRJQX3Jzh3o+xjQwTcUx LsQ97j/hB3zZtFuZOw6+8uLL ) ; Key ID = 33621 co.uk. 300 IN RRSIG ( DNSKEY 8 2 300 20240110121740 20231206114312 33621 co.uk. wzG5ibggCo9P5GYoTh6H3EuDY7L3CFYU/u+39WYCvBM7S5Rn45xqdBhFqR+mUjgBEZrsuqkTZyU1 ty4TnCnJFMoY+ohXoDC0djanmbbeir8qUDjhJVCqDA1gwcKY9LNVu8ULjRSuSWeL66qScnmT3NFT xil+jS2/oQHlkEy7MCE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone co.uk
	Attempting to learn nameservers for co.uk
	Query to nsc.nic.uk for co.uk/NS
	Received 353 bytes from 156.154.102.3
	;; Response received from 156.154.102.3 (353 octets) ;; HEADER SECTION ;; id = 41003 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 9 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN NS ;; ANSWER SECTION (9 records) co.uk. 172800 IN NS nsc.nic.uk. co.uk. 172800 IN NS dns3.nic.uk. co.uk. 172800 IN NS nsb.nic.uk. co.uk. 172800 IN NS dns2.nic.uk. co.uk. 172800 IN NS nsa.nic.uk. co.uk. 172800 IN NS dns1.nic.uk. co.uk. 172800 IN NS nsd.nic.uk. co.uk. 172800 IN NS dns4.nic.uk. co.uk. 172800 IN RRSIG ( NS 8 2 172800 20240109222024 20231205221205 33621 co.uk. Lop5DxfMzT3RwzYDgdpdlg6uLbstoYMtgd3jVJfucPGeXv0l/qGo2AVblmlL4SPP2rxUXBjKeCzl mpd+uuWAswhJ6b3CkAbL98ygspZGutGj2Cg25BiDlxB6la1HEtTsNPY0GKioluFFZWLA3U3MZX01 1mbL4TtdQwBP/P4Ilf8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found co.uk nameservers: nsc.nic.uk, dns3.nic.uk, nsb.nic.uk, dns2.nic.uk, nsa.nic.uk, dns1.nic.uk, nsd.nic.uk, dns4.nic.uk

co.uk

	Checking DS between uk and co.uk
	Query to dns1.nic.uk for co.uk/DS
	Received 244 bytes from 213.248.216.1
	;; Response received from 213.248.216.1 (244 octets) ;; HEADER SECTION ;; id = 45531 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN DS ;; ANSWER SECTION (2 records) co.uk. 300 IN DS ( 33621 8 2 b9199d8b7fca7107d78c418d1d1bc9e9fe9d9b9b187bd13c96dc4b6582425cd8 ) co.uk. 300 IN RRSIG ( DS 8 2 300 20240108002436 20231204001806 43056 uk. g+aTDNLbp1DzuEeZqRjXCmu6pP4Rv+W1hf54fbkfsIWTpAqSSCV+4yV48DQiZ3207FBwv3TJBzrI jaD/xXE36olyh4Fot1hJeklF6XgjYUFUlPD+ksVJY93yCp79wUuLAz+MIg+BI0TOVSPYu4dqdd5V ANZJTSMEJTO5GrCIvHo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for co.uk in the uk zone
	DS=33621/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co.uk. 300 IN RRSIG ( DS 8 2 300 20240108002436 20231204001806 43056 uk. g+aTDNLbp1DzuEeZqRjXCmu6pP4Rv+W1hf54fbkfsIWTpAqSSCV+4yV48DQiZ3207FBwv3TJBzrI jaD/xXE36olyh4Fot1hJeklF6XgjYUFUlPD+ksVJY93yCp79wUuLAz+MIg+BI0TOVSPYu4dqdd5V ANZJTSMEJTO5GrCIvHo= )`
	RRSIG=43056 and DNSKEY=43056 verifies the DS RRset
	DS=33621/SHA-256 is now in the chain-of-trust
	`co.uk. 300 IN DS ( 33621 8 2 b9199d8b7fca7107d78c418d1d1bc9e9fe9d9b9b187bd13c96dc4b6582425cd8 )`
	Query to dns1.nic.uk for co.uk/DNSKEY
	Received 347 bytes from 213.248.216.1
	;; Response received from 213.248.216.1 (347 octets) ;; HEADER SECTION ;; id = 54581 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (2 records) co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAcf+56ydE3WHB5vn1UxYBXJJXBlJfHlS/MWEVn+8KVJyED0iNLvSEvSr47VeBnp7e53TbVQS 1pLMGaL/Upq4Hb70kY8LrlPOG9b7Guhbm7jRaosC6PETNPQ1aoNrZtAagRJQX3Jzh3o+xjQwTcUx LsQ97j/hB3zZtFuZOw6+8uLL ) ; Key ID = 33621 co.uk. 300 IN RRSIG ( DNSKEY 8 2 300 20240110121740 20231206114312 33621 co.uk. wzG5ibggCo9P5GYoTh6H3EuDY7L3CFYU/u+39WYCvBM7S5Rn45xqdBhFqR+mUjgBEZrsuqkTZyU1 ty4TnCnJFMoY+ohXoDC0djanmbbeir8qUDjhJVCqDA1gwcKY9LNVu8ULjRSuSWeL66qScnmT3NFT xil+jS2/oQHlkEy7MCE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for co.uk
	`co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAcf+56ydE3WHB5vn1UxYBXJJXBlJfHlS/MWEVn+8KVJyED0iNLvSEvSr47VeBnp7e53TbVQS 1pLMGaL/Upq4Hb70kY8LrlPOG9b7Guhbm7jRaosC6PETNPQ1aoNrZtAagRJQX3Jzh3o+xjQwTcUx LsQ97j/hB3zZtFuZOw6+8uLL ) ; Key ID = 33621`
	DNSKEY=33621 is now in the chain-of-trust
	DS=33621/SHA-256 verifies DNSKEY=33621
	Found 1 RRSIGs over DNSKEY RRset
	`co.uk. 300 IN RRSIG ( DNSKEY 8 2 300 20240110121740 20231206114312 33621 co.uk. wzG5ibggCo9P5GYoTh6H3EuDY7L3CFYU/u+39WYCvBM7S5Rn45xqdBhFqR+mUjgBEZrsuqkTZyU1 ty4TnCnJFMoY+ohXoDC0djanmbbeir8qUDjhJVCqDA1gwcKY9LNVu8ULjRSuSWeL66qScnmT3NFT xil+jS2/oQHlkEy7MCE= )`
	RRSIG=33621 and DNSKEY=33621 verifies the DNSKEY RRset
	Query to nsd.nic.uk for co.uk/A
	Received 550 bytes from 156.154.103.3
	;; Response received from 156.154.103.3 (550 octets) ;; HEADER SECTION ;; id = 39045 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300867 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nsd.nic.uk is authoritative for co.uk
	Found RRSIG signed by co.uk zone
	Query to nsa.nic.uk for co.uk/SOA
	Received 271 bytes from 156.154.100.3
	;; Response received from 156.154.100.3 (271 octets) ;; HEADER SECTION ;; id = 14372 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN SOA ;; ANSWER SECTION (2 records) co.uk. 172800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300867 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 172800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to nsc.nic.uk for co.uk/SOA
	Received 271 bytes from 156.154.102.3
	;; Response received from 156.154.102.3 (271 octets) ;; HEADER SECTION ;; id = 15639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN SOA ;; ANSWER SECTION (2 records) co.uk. 172800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300867 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 172800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to dns3.nic.uk for co.uk/SOA
	Received 575 bytes from 213.248.220.1
	;; Response received from 213.248.220.1 (575 octets) ;; HEADER SECTION ;; id = 60575 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN SOA ;; ANSWER SECTION (2 records) co.uk. 172800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300868 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 172800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= ) ;; AUTHORITY SECTION (9 records) co.uk. 172800 IN NS nsa.nic.uk. co.uk. 172800 IN NS nsb.nic.uk. co.uk. 172800 IN NS nsc.nic.uk. co.uk. 172800 IN NS nsd.nic.uk. co.uk. 172800 IN NS dns1.nic.uk. co.uk. 172800 IN NS dns2.nic.uk. co.uk. 172800 IN NS dns3.nic.uk. co.uk. 172800 IN NS dns4.nic.uk. co.uk. 172800 IN RRSIG ( NS 8 2 172800 20240109222024 20231205221205 33621 co.uk. Lop5DxfMzT3RwzYDgdpdlg6uLbstoYMtgd3jVJfucPGeXv0l/qGo2AVblmlL4SPP2rxUXBjKeCzl mpd+uuWAswhJ6b3CkAbL98ygspZGutGj2Cg25BiDlxB6la1HEtTsNPY0GKioluFFZWLA3U3MZX01 1mbL4TtdQwBP/P4Ilf8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns3.nic.uk serial (1315300868) differs from nsa.nic.uk serial (1315300867)
	Query to nsb.nic.uk for co.uk/SOA
	Received 271 bytes from 156.154.101.3
	;; Response received from 156.154.101.3 (271 octets) ;; HEADER SECTION ;; id = 42627 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN SOA ;; ANSWER SECTION (2 records) co.uk. 172800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300867 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 172800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to dns1.nic.uk for co.uk/SOA
	Received 575 bytes from 213.248.216.1
	;; Response received from 213.248.216.1 (575 octets) ;; HEADER SECTION ;; id = 48651 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN SOA ;; ANSWER SECTION (2 records) co.uk. 172800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300868 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 172800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= ) ;; AUTHORITY SECTION (9 records) co.uk. 172800 IN NS nsa.nic.uk. co.uk. 172800 IN NS nsb.nic.uk. co.uk. 172800 IN NS nsc.nic.uk. co.uk. 172800 IN NS nsd.nic.uk. co.uk. 172800 IN NS dns1.nic.uk. co.uk. 172800 IN NS dns2.nic.uk. co.uk. 172800 IN NS dns3.nic.uk. co.uk. 172800 IN NS dns4.nic.uk. co.uk. 172800 IN RRSIG ( NS 8 2 172800 20240109222024 20231205221205 33621 co.uk. Lop5DxfMzT3RwzYDgdpdlg6uLbstoYMtgd3jVJfucPGeXv0l/qGo2AVblmlL4SPP2rxUXBjKeCzl mpd+uuWAswhJ6b3CkAbL98ygspZGutGj2Cg25BiDlxB6la1HEtTsNPY0GKioluFFZWLA3U3MZX01 1mbL4TtdQwBP/P4Ilf8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns1.nic.uk serial (1315300868) differs from nsa.nic.uk serial (1315300867)
	Query to dns2.nic.uk for co.uk/SOA
	Received 575 bytes from 103.49.80.1
	;; Response received from 103.49.80.1 (575 octets) ;; HEADER SECTION ;; id = 316 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN SOA ;; ANSWER SECTION (2 records) co.uk. 172800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300868 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 172800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= ) ;; AUTHORITY SECTION (9 records) co.uk. 172800 IN NS nsa.nic.uk. co.uk. 172800 IN NS nsb.nic.uk. co.uk. 172800 IN NS nsc.nic.uk. co.uk. 172800 IN NS nsd.nic.uk. co.uk. 172800 IN NS dns1.nic.uk. co.uk. 172800 IN NS dns2.nic.uk. co.uk. 172800 IN NS dns3.nic.uk. co.uk. 172800 IN NS dns4.nic.uk. co.uk. 172800 IN RRSIG ( NS 8 2 172800 20240109222024 20231205221205 33621 co.uk. Lop5DxfMzT3RwzYDgdpdlg6uLbstoYMtgd3jVJfucPGeXv0l/qGo2AVblmlL4SPP2rxUXBjKeCzl mpd+uuWAswhJ6b3CkAbL98ygspZGutGj2Cg25BiDlxB6la1HEtTsNPY0GKioluFFZWLA3U3MZX01 1mbL4TtdQwBP/P4Ilf8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns2.nic.uk serial (1315300868) differs from nsa.nic.uk serial (1315300867)
	Query to dns4.nic.uk for co.uk/SOA
	Received 575 bytes from 43.230.48.1
	;; Response received from 43.230.48.1 (575 octets) ;; HEADER SECTION ;; id = 21934 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN SOA ;; ANSWER SECTION (2 records) co.uk. 172800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300868 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 172800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= ) ;; AUTHORITY SECTION (9 records) co.uk. 172800 IN NS nsa.nic.uk. co.uk. 172800 IN NS nsb.nic.uk. co.uk. 172800 IN NS nsc.nic.uk. co.uk. 172800 IN NS nsd.nic.uk. co.uk. 172800 IN NS dns1.nic.uk. co.uk. 172800 IN NS dns2.nic.uk. co.uk. 172800 IN NS dns3.nic.uk. co.uk. 172800 IN NS dns4.nic.uk. co.uk. 172800 IN RRSIG ( NS 8 2 172800 20240109222024 20231205221205 33621 co.uk. Lop5DxfMzT3RwzYDgdpdlg6uLbstoYMtgd3jVJfucPGeXv0l/qGo2AVblmlL4SPP2rxUXBjKeCzl mpd+uuWAswhJ6b3CkAbL98ygspZGutGj2Cg25BiDlxB6la1HEtTsNPY0GKioluFFZWLA3U3MZX01 1mbL4TtdQwBP/P4Ilf8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns4.nic.uk serial (1315300868) differs from nsa.nic.uk serial (1315300867)
	Query to nsd.nic.uk for co.uk/A
	Received 550 bytes from 156.154.103.3
	;; Response received from 156.154.103.3 (550 octets) ;; HEADER SECTION ;; id = 4392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300867 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= )`
	RRSIG=33621 and DNSKEY=33621 verifies the SOA RRset

co.uk

	Query to dns2.nic.uk for co.uk/A
	Received 546 bytes from 103.49.80.1
	;; Response received from 103.49.80.1 (546 octets) ;; HEADER SECTION ;; id = 43916 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300868 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns2.nic.uk is authoritative for co.uk
	Found RRSIG signed by co.uk zone
	Query to dns2.nic.uk for co.uk/A
	Received 546 bytes from 103.49.80.1
	;; Response received from 103.49.80.1 (546 octets) ;; HEADER SECTION ;; id = 38714 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300868 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= )`
	RRSIG=33621 and DNSKEY=33621 verifies the SOA RRset

co.uk

	Query to nsb.nic.uk for co.uk/A
	Received 550 bytes from 156.154.101.3
	;; Response received from 156.154.101.3 (550 octets) ;; HEADER SECTION ;; id = 39950 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300867 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nsb.nic.uk is authoritative for co.uk
	Found RRSIG signed by co.uk zone
	Query to nsb.nic.uk for co.uk/A
	Received 550 bytes from 156.154.101.3
	;; Response received from 156.154.101.3 (550 octets) ;; HEADER SECTION ;; id = 46712 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300867 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= )`
	RRSIG=33621 and DNSKEY=33621 verifies the SOA RRset

co.uk

	Query to dns4.nic.uk for co.uk/A
	Received 546 bytes from 43.230.48.1
	;; Response received from 43.230.48.1 (546 octets) ;; HEADER SECTION ;; id = 27362 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300868 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns4.nic.uk is authoritative for co.uk
	Found RRSIG signed by co.uk zone
	Query to dns4.nic.uk for co.uk/A
	Received 546 bytes from 43.230.48.1
	;; Response received from 43.230.48.1 (546 octets) ;; HEADER SECTION ;; id = 18183 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300867 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= )`
	RRSIG=33621 and DNSKEY=33621 verifies the SOA RRset

co.uk

	Query to nsa.nic.uk for co.uk/A
	Received 550 bytes from 156.154.100.3
	;; Response received from 156.154.100.3 (550 octets) ;; HEADER SECTION ;; id = 9763 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300867 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nsa.nic.uk is authoritative for co.uk
	Found RRSIG signed by co.uk zone
	Query to nsa.nic.uk for co.uk/A
	Received 550 bytes from 156.154.100.3
	;; Response received from 156.154.100.3 (550 octets) ;; HEADER SECTION ;; id = 11992 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300867 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= )`
	RRSIG=33621 and DNSKEY=33621 verifies the SOA RRset

co.uk

	Query to dns1.nic.uk for co.uk/A
	Received 546 bytes from 213.248.216.1
	;; Response received from 213.248.216.1 (546 octets) ;; HEADER SECTION ;; id = 9081 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300868 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns1.nic.uk is authoritative for co.uk
	Found RRSIG signed by co.uk zone
	Query to dns1.nic.uk for co.uk/A
	Received 546 bytes from 213.248.216.1
	;; Response received from 213.248.216.1 (546 octets) ;; HEADER SECTION ;; id = 43963 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300868 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= )`
	RRSIG=33621 and DNSKEY=33621 verifies the SOA RRset

co.uk

	Query to dns3.nic.uk for co.uk/A
	Received 546 bytes from 213.248.220.1
	;; Response received from 213.248.220.1 (546 octets) ;; HEADER SECTION ;; id = 38159 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300868 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns3.nic.uk is authoritative for co.uk
	Found RRSIG signed by co.uk zone
	Query to dns3.nic.uk for co.uk/A
	Received 546 bytes from 213.248.220.1
	;; Response received from 213.248.220.1 (546 octets) ;; HEADER SECTION ;; id = 35114 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300868 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032235 20231208022235 33621 co.uk. HvycJlhczTaTlOuEMddfso0ADXl0yxQ0v8d5vjdsPl2Vvw7M2+EjMaUSwWJb/M4pf427rz6IxsOJ NK+mxtkIeMtuiwRi19dcHMVeCu/MwnguWcV/APbsPsNr9N/ZkjawrILbooeQSajwHshbnuXsHbez 3nub3xaaFoXTYiIXxt4= )`
	RRSIG=33621 and DNSKEY=33621 verifies the SOA RRset

co.uk

	Query to nsc.nic.uk for co.uk/A
	Received 550 bytes from 156.154.102.3
	;; Response received from 156.154.102.3 (550 octets) ;; HEADER SECTION ;; id = 61526 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300867 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nsc.nic.uk is authoritative for co.uk
	Found RRSIG signed by co.uk zone
	Query to nsc.nic.uk for co.uk/A
	Received 550 bytes from 156.154.102.3
	;; Response received from 156.154.102.3 (550 octets) ;; HEADER SECTION ;; id = 33815 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1315300867 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20240111145851 20231207145643 33621 co.uk. QAJV0RRAv7e0yK5WiJUqlBYRQBwW7fo6Bg6Dxc/Z3ikkQ6BzhL0Xhq1/Kqguh5UR9MHAFgMycF7x Mda0PONMCtUsRraeWbFNFiQQ7CzpBNbispaO47lLwfko3cqA4smGFej9JXh0RnfEOtxrDW22PN+l gsE98bSg5z8rkW3DvKk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20240112032217 20231208022217 33621 co.uk. k0pVPJeXgKy4T9FSSNEsOwziQkXBoK8yMGjNGzjNSze7ZGGYxnF7sMFgMFtp6HNpw3QjgDNixPLo DfQNCu0Kuz4rks8J18WuK99aiTNuP8C4o2qL/XW5bFnWbr3vT1bE6wpLFqmzueHu2Iov6SfqLCuv QSoicFrurSILcBgUUTY= )`
	RRSIG=33621 and DNSKEY=33621 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test co.uk at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: