DNSSEC Debugger - coffee.co.uk

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-23 20:30:45 UTC

Analyzing DNSSEC problems for coffee.co.uk

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1414 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1414 octets ;; HEADER SECTION ;; id = 53040 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261010000000 20260919000000 20326 . SeT2U+BKi7S4R7OPnQ0EBjS6DtsNPasISEAE3iOUQWl552IWiqHLBYkZOa5au73wjV5oH9vQleMB gtIQleByqX74kORDKMmx+EIhhDmiNOf9w33OqM4+s0Etem28QjqQ9e4QgsKI6N39HDMedL31iybJ n6ghPcDT73IyzgTs6mtyV+Lpu1ZqH1yXNNB34YsEzgquGDKU7QkAlQMupqKlZOhJC2pj4724Fzjr MXq68MYAitHMmfnrm2/iqP8i0jIrIQgIl4mVOO4VxMZEsQa+ESJWEBQJ3Fu3jLRII/xIEq1qXb8F 87yhBvKhzuyLfQGaKttdkN9oudecqKuNezNp0g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261010000000 20260919000000 20326 . SeT2U+BKi7S4R7OPnQ0EBjS6DtsNPasISEAE3iOUQWl552IWiqHLBYkZOa5au73wjV5oH9vQleMB gtIQleByqX74kORDKMmx+EIhhDmiNOf9w33OqM4+s0Etem28QjqQ9e4QgsKI6N39HDMedL31iybJ n6ghPcDT73IyzgTs6mtyV+Lpu1ZqH1yXNNB34YsEzgquGDKU7QkAlQMupqKlZOhJC2pj4724Fzjr MXq68MYAitHMmfnrm2/iqP8i0jIrIQgIl4mVOO4VxMZEsQa+ESJWEBQJ3Fu3jLRII/xIEq1qXb8F 87yhBvKhzuyLfQGaKttdkN9oudecqKuNezNp0g== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	DNSKEY=8763 is now in the chain-of-trust
	Query to e.root-servers.net for coffee.co.uk/A
	Received 880 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 880 octets ;; HEADER SECTION ;; id = 10158 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20261006170000 20260923160000 57780 . Fji26NOiUgv8E9hlmqMWZzcY6bdUQ2qt/bROINdP4dE6rNRqswUsMI/Fu3GrQFam4jcogG/UP0aX GGvIbzZQdKZBleQs4jc6w+syzGu3eZEUd96CaRAITRPjiOBD2U1TMwbiwimKUaKpPyz6Sz/YynRD HTeJlZTUQMpzQxPo0BHMYG5JIm/1n/j5VByApGahwW/I2ThBj48xky/UN7eSzpNuzghtp4wrBaio 6pTeHzdsIOticjQWLYpqNN4kDbnaj6FPxLYF0eUIELm+rJpiYtnrXTyGGTkqd2BAm4P+bcxH9Pc3 i4eAU2Rn9fNMa1TGZYe4/953A/et0rnCp7HJfQ== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN A 156.154.103.3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN A 43.230.48.1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for uk/DNSKEY
	Received 870 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 870 octets ;; HEADER SECTION ;; id = 55459 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20261006170000 20260923160000 57780 . Fji26NOiUgv8E9hlmqMWZzcY6bdUQ2qt/bROINdP4dE6rNRqswUsMI/Fu3GrQFam4jcogG/UP0aX GGvIbzZQdKZBleQs4jc6w+syzGu3eZEUd96CaRAITRPjiOBD2U1TMwbiwimKUaKpPyz6Sz/YynRD HTeJlZTUQMpzQxPo0BHMYG5JIm/1n/j5VByApGahwW/I2ThBj48xky/UN7eSzpNuzghtp4wrBaio 6pTeHzdsIOticjQWLYpqNN4kDbnaj6FPxLYF0eUIELm+rJpiYtnrXTyGGTkqd2BAm4P+bcxH9Pc3 i4eAU2Rn9fNMa1TGZYe4/953A/et0rnCp7HJfQ== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsd.nic.uk. 172800 IN A 156.154.103.3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns4.nic.uk. 172800 IN A 43.230.48.1 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Found child zone uk

	Checking DS between . and uk
	Query to a.root-servers.net for uk/DS
	Received 366 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 366 octets ;; HEADER SECTION ;; id = 4491 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DS ;; ANSWER SECTION (2 records) uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20261006170000 20260923160000 57780 . Fji26NOiUgv8E9hlmqMWZzcY6bdUQ2qt/bROINdP4dE6rNRqswUsMI/Fu3GrQFam4jcogG/UP0aX GGvIbzZQdKZBleQs4jc6w+syzGu3eZEUd96CaRAITRPjiOBD2U1TMwbiwimKUaKpPyz6Sz/YynRD HTeJlZTUQMpzQxPo0BHMYG5JIm/1n/j5VByApGahwW/I2ThBj48xky/UN7eSzpNuzghtp4wrBaio 6pTeHzdsIOticjQWLYpqNN4kDbnaj6FPxLYF0eUIELm+rJpiYtnrXTyGGTkqd2BAm4P+bcxH9Pc3 i4eAU2Rn9fNMa1TGZYe4/953A/et0rnCp7HJfQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for uk in the . zone
	DS=43876/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uk. 86400 IN RRSIG ( DS 8 1 86400 20261006170000 20260923160000 57780 . Fji26NOiUgv8E9hlmqMWZzcY6bdUQ2qt/bROINdP4dE6rNRqswUsMI/Fu3GrQFam4jcogG/UP0aX GGvIbzZQdKZBleQs4jc6w+syzGu3eZEUd96CaRAITRPjiOBD2U1TMwbiwimKUaKpPyz6Sz/YynRD HTeJlZTUQMpzQxPo0BHMYG5JIm/1n/j5VByApGahwW/I2ThBj48xky/UN7eSzpNuzghtp4wrBaio 6pTeHzdsIOticjQWLYpqNN4kDbnaj6FPxLYF0eUIELm+rJpiYtnrXTyGGTkqd2BAm4P+bcxH9Pc3 i4eAU2Rn9fNMa1TGZYe4/953A/et0rnCp7HJfQ== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=43876/SHA-256 is now in the chain-of-trust
	`uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 )`
	Query to nsd.nic.uk for uk/DNSKEY
	Received 745 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 745 octets ;; HEADER SECTION ;; id = 45901 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (3 records) uk. 7200 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876 uk. 7200 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056 uk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20261028142852 20260923134409 43876 uk. UEUkJZNwBmUq8Z6Q/WBWF+RaV+ok2A3TXNz49rdmjdpcxploqBlk/qygDbwEcr5HatGP/zpbrwKq ihRRBEkXey2dLkDriLOBMaEzvwDpktOgYf7X0ohJ2RmwX5LqMFhW4a1zBPUN+om1ZvSH8ShhZdui Xx+5SI/fzjwG1pC2Fa86mMKy85JyKwisWvfVqj3VrwHORDfGZa/7VGNAylrPnYYDNGgDPaZjh5h9 mTi6+0xIZfEaQJS8AgcrxSfTZ3hzkeIF5LxlzTLx0l6QZDCYwyIQnKQxAWDIFN7I4wIwQHIObfQY iXWaJvOVsUYW59XyD7gOT0w0kghnZ98MWM9K6A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for uk
	`uk. 7200 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876`
	`uk. 7200 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056`
	DNSKEY=43876/SEP is now in the chain-of-trust
	DS=43876/SHA-256 verifies DNSKEY=43876/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`uk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20261028142852 20260923134409 43876 uk. UEUkJZNwBmUq8Z6Q/WBWF+RaV+ok2A3TXNz49rdmjdpcxploqBlk/qygDbwEcr5HatGP/zpbrwKq ihRRBEkXey2dLkDriLOBMaEzvwDpktOgYf7X0ohJ2RmwX5LqMFhW4a1zBPUN+om1ZvSH8ShhZdui Xx+5SI/fzjwG1pC2Fa86mMKy85JyKwisWvfVqj3VrwHORDfGZa/7VGNAylrPnYYDNGgDPaZjh5h9 mTi6+0xIZfEaQJS8AgcrxSfTZ3hzkeIF5LxlzTLx0l6QZDCYwyIQnKQxAWDIFN7I4wIwQHIObfQY iXWaJvOVsUYW59XyD7gOT0w0kghnZ98MWM9K6A== )`
	RRSIG=43876 and DNSKEY=43876/SEP verifies the DNSKEY RRset
	DNSKEY=43056 is now in the chain-of-trust
	Query to dns3.nic.uk for coffee.co.uk/A
	Received 537 bytes from 213.248.220.1
	;; Response received from [213.248.220.1] 537 octets ;; HEADER SECTION ;; id = 18536 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) coffee.co.uk. 172800 IN NS santos.coffee.co.uk. coffee.co.uk. 172800 IN NS colombia.coffee.co.uk. coffee.co.uk. 172800 IN NS espresso.coffee.co.uk. coffee.co.uk. 172800 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20261028080551 20260923073928 44346 co.uk. OLqjQyKDyXRWDzvJcgyFengd6Ks1ykD5yYOZ/wp7ltHTbpmg+N8Xux8tmPhUjbdaU7PkHQj9efmh Kl/HR2meUNm38Q7xJld2u7j1sDDavKrTiic8Rsp22XauSh16pIy23Xu33Vv8Dd2OegQWuFQsa35B BQAp+tPoFGAqyp8QU1rqvE+wM1ugIyewmTiFH5eRnrVGtTGDU4tBOKj+yUzjSAYBal2rwus0AKzk 8o4YtQFi+mH/Lbo/6aum0acXgfJ96qIbVxO1W0uR/U20CiVujtJZsXLWPSRPmFE/xpnzUOSupYCc rVFLT3OS81iOsR8zxgPC4SLjf8gtXtxD/UUu+w== ) ;; ADDITIONAL SECTION (5 records) santos.coffee.co.uk. 172800 IN A 82.69.101.65 colombia.coffee.co.uk. 172800 IN A 82.68.85.107 espresso.coffee.co.uk. 172800 IN A 82.68.85.106 cafetiere.coffee.co.uk. 172800 IN A 77.206.90.34 ;; { "EDNS-VERSION": 0 }
	Query to nsc.nic.uk for co.uk/DNSKEY
	Received 879 bytes from 156.154.102.3
	;; Response received from [156.154.102.3] 879 octets ;; HEADER SECTION ;; id = 37086 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (3 records) co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810 co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346 co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20261027170545 20260922165620 11810 co.uk. PYGVtehNdueEZYuFVmSeHeDyiLZTFjWmTm/4/os/Ji7/A0mUOZL8YGDjJpgfBuDcz+a7ognblSvf 5pDx+M3Pzl2sRMaGjUy8TYjYX7kBE68LIm2Ri71jkySS47qTnGm/QSiDqie9rwhZ5jqZ3OoGiJ2Q 2yj4xjPGdNwYu3hG+PPMoOxy0qDWuZizScdJVdEZmVVpbpPewvBivnlxoyqMtxr08ad6szZAKeWe EVcAwhheSd/eSSTUiW9hEi1sX75XK8JBDFnLdrTuqPtJ8jcQDpsh0Z659+ZgM0eiygSdBui/7r8H 8jvKn33JerjvuDFh4CwNsH7dgP4tIgZJEuqZXg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone co.uk
	Attempting to learn nameservers for co.uk
	Query to dns3.nic.uk for co.uk/NS
	Received 479 bytes from 213.248.220.1
	;; Response received from [213.248.220.1] 479 octets ;; HEADER SECTION ;; id = 35818 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 9 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN NS ;; ANSWER SECTION (9 records) co.uk. 172800 IN NS nsa.nic.uk. co.uk. 172800 IN NS nsb.nic.uk. co.uk. 172800 IN NS nsc.nic.uk. co.uk. 172800 IN NS nsd.nic.uk. co.uk. 172800 IN NS dns1.nic.uk. co.uk. 172800 IN NS dns2.nic.uk. co.uk. 172800 IN NS dns3.nic.uk. co.uk. 172800 IN NS dns4.nic.uk. co.uk. 172800 IN RRSIG ( NS 8 2 172800 20261028003257 20260922234336 44346 co.uk. fOAVJUVoWwqOfaMY2rchZ8jYZcViAEk9buJ+XhintUB/ff1YFhPQFq6EkNerA6Si5Bg9RUY/RV/H GnpB5z7fDAeqGlCLEt43HRfjWQVIxjZtaaUqiivg86scpGRlR19peAigjzBeHctSaHA6LqTuO0PT +CX2Orgg9dGZq6EfLkkGCCxVE4EQL47/0icEhx9+guvL9VEw2+cM/VJUC7qtoXhMa0V4G7eLSxwh YqxT5HUhbuebiUg1lAcdEt3+TvxPT3Xs89DZg2S3T6gCvUBNGrvskJsozGeEprKoJr8ZuvxPIfw0 Ha0VKGpyXQmewTrfHywPxTEZK7l5Ov9d5OTeYw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found co.uk nameservers: nsa.nic.uk, nsb.nic.uk, nsc.nic.uk, nsd.nic.uk, dns1.nic.uk, dns2.nic.uk, dns3.nic.uk, dns4.nic.uk

co.uk

	Checking DS between uk and co.uk
	Query to nsc.nic.uk for co.uk/DS
	Received 244 bytes from 156.154.102.3
	;; Response received from [156.154.102.3] 244 octets ;; HEADER SECTION ;; id = 40128 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DS ;; ANSWER SECTION (2 records) co.uk. 300 IN DS ( 11810 8 2 1df4681bdacc3e6296ac7667c42ca33cb57efbc2005ce23064f15fbffa286ff5 ) co.uk. 300 IN RRSIG ( DS 8 2 300 20261025103615 20260920095146 43056 uk. Uv8JTlQOj8oeEv4sVSBYChCncSDYJlL1C2lq0DC2/GIQaS5cG0YW6bBcf7FUooawxjgZ0axcDeFE Xt6mk5VylyYoUZGHReJdVMxAZSnG2YcrC9CcH+MjYQwLbVGvlkjMdifpxbuPnfBeqJuUiPZTYuuH qa/ETtREUgbt8K22oAs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for co.uk in the uk zone
	DS=11810/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co.uk. 300 IN RRSIG ( DS 8 2 300 20261025103615 20260920095146 43056 uk. Uv8JTlQOj8oeEv4sVSBYChCncSDYJlL1C2lq0DC2/GIQaS5cG0YW6bBcf7FUooawxjgZ0axcDeFE Xt6mk5VylyYoUZGHReJdVMxAZSnG2YcrC9CcH+MjYQwLbVGvlkjMdifpxbuPnfBeqJuUiPZTYuuH qa/ETtREUgbt8K22oAs= )`
	RRSIG=43056 and DNSKEY=43056 verifies the DS RRset
	DS=11810/SHA-256 is now in the chain-of-trust
	`co.uk. 300 IN DS ( 11810 8 2 1df4681bdacc3e6296ac7667c42ca33cb57efbc2005ce23064f15fbffa286ff5 )`
	Query to dns1.nic.uk for co.uk/DNSKEY
	Received 879 bytes from 213.248.216.1
	;; Response received from [213.248.216.1] 879 octets ;; HEADER SECTION ;; id = 15038 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (3 records) co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346 co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810 co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20261027170545 20260922165620 11810 co.uk. PYGVtehNdueEZYuFVmSeHeDyiLZTFjWmTm/4/os/Ji7/A0mUOZL8YGDjJpgfBuDcz+a7ognblSvf 5pDx+M3Pzl2sRMaGjUy8TYjYX7kBE68LIm2Ri71jkySS47qTnGm/QSiDqie9rwhZ5jqZ3OoGiJ2Q 2yj4xjPGdNwYu3hG+PPMoOxy0qDWuZizScdJVdEZmVVpbpPewvBivnlxoyqMtxr08ad6szZAKeWe EVcAwhheSd/eSSTUiW9hEi1sX75XK8JBDFnLdrTuqPtJ8jcQDpsh0Z659+ZgM0eiygSdBui/7r8H 8jvKn33JerjvuDFh4CwNsH7dgP4tIgZJEuqZXg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for co.uk
	`co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346`
	`co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810`
	DNSKEY=11810/SEP is now in the chain-of-trust
	DS=11810/SHA-256 verifies DNSKEY=11810/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20261027170545 20260922165620 11810 co.uk. PYGVtehNdueEZYuFVmSeHeDyiLZTFjWmTm/4/os/Ji7/A0mUOZL8YGDjJpgfBuDcz+a7ognblSvf 5pDx+M3Pzl2sRMaGjUy8TYjYX7kBE68LIm2Ri71jkySS47qTnGm/QSiDqie9rwhZ5jqZ3OoGiJ2Q 2yj4xjPGdNwYu3hG+PPMoOxy0qDWuZizScdJVdEZmVVpbpPewvBivnlxoyqMtxr08ad6szZAKeWe EVcAwhheSd/eSSTUiW9hEi1sX75XK8JBDFnLdrTuqPtJ8jcQDpsh0Z659+ZgM0eiygSdBui/7r8H 8jvKn33JerjvuDFh4CwNsH7dgP4tIgZJEuqZXg== )`
	RRSIG=11810 and DNSKEY=11810/SEP verifies the DNSKEY RRset
	DNSKEY=44346 is now in the chain-of-trust
	Query to dns2.nic.uk for coffee.co.uk/A
	Received 537 bytes from 103.49.80.1
	;; Response received from [103.49.80.1] 537 octets ;; HEADER SECTION ;; id = 16902 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) coffee.co.uk. 172800 IN NS santos.coffee.co.uk. coffee.co.uk. 172800 IN NS colombia.coffee.co.uk. coffee.co.uk. 172800 IN NS espresso.coffee.co.uk. coffee.co.uk. 172800 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20261028080551 20260923073928 44346 co.uk. OLqjQyKDyXRWDzvJcgyFengd6Ks1ykD5yYOZ/wp7ltHTbpmg+N8Xux8tmPhUjbdaU7PkHQj9efmh Kl/HR2meUNm38Q7xJld2u7j1sDDavKrTiic8Rsp22XauSh16pIy23Xu33Vv8Dd2OegQWuFQsa35B BQAp+tPoFGAqyp8QU1rqvE+wM1ugIyewmTiFH5eRnrVGtTGDU4tBOKj+yUzjSAYBal2rwus0AKzk 8o4YtQFi+mH/Lbo/6aum0acXgfJ96qIbVxO1W0uR/U20CiVujtJZsXLWPSRPmFE/xpnzUOSupYCc rVFLT3OS81iOsR8zxgPC4SLjf8gtXtxD/UUu+w== ) ;; ADDITIONAL SECTION (5 records) santos.coffee.co.uk. 172800 IN A 82.69.101.65 colombia.coffee.co.uk. 172800 IN A 82.68.85.107 espresso.coffee.co.uk. 172800 IN A 82.68.85.106 cafetiere.coffee.co.uk. 172800 IN A 77.206.90.34 ;; { "EDNS-VERSION": 0 }
	Query to nsd.nic.uk for coffee.co.uk/DNSKEY
	Received 537 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 537 octets ;; HEADER SECTION ;; id = 25436 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) coffee.co.uk. 172800 IN NS espresso.coffee.co.uk. coffee.co.uk. 172800 IN NS colombia.coffee.co.uk. coffee.co.uk. 172800 IN NS santos.coffee.co.uk. coffee.co.uk. 172800 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20261028080551 20260923073928 44346 co.uk. OLqjQyKDyXRWDzvJcgyFengd6Ks1ykD5yYOZ/wp7ltHTbpmg+N8Xux8tmPhUjbdaU7PkHQj9efmh Kl/HR2meUNm38Q7xJld2u7j1sDDavKrTiic8Rsp22XauSh16pIy23Xu33Vv8Dd2OegQWuFQsa35B BQAp+tPoFGAqyp8QU1rqvE+wM1ugIyewmTiFH5eRnrVGtTGDU4tBOKj+yUzjSAYBal2rwus0AKzk 8o4YtQFi+mH/Lbo/6aum0acXgfJ96qIbVxO1W0uR/U20CiVujtJZsXLWPSRPmFE/xpnzUOSupYCc rVFLT3OS81iOsR8zxgPC4SLjf8gtXtxD/UUu+w== ) ;; ADDITIONAL SECTION (5 records) santos.coffee.co.uk. 172800 IN A 82.69.101.65 colombia.coffee.co.uk. 172800 IN A 82.68.85.107 espresso.coffee.co.uk. 172800 IN A 82.68.85.106 cafetiere.coffee.co.uk. 172800 IN A 77.206.90.34 ;; { "EDNS-VERSION": 0 }
	Found child zone coffee.co.uk

coffee.co.uk

	Checking DS between co.uk and coffee.co.uk
	Query to dns3.nic.uk for coffee.co.uk/DS
	Received 382 bytes from 213.248.220.1
	;; Response received from [213.248.220.1] 382 octets ;; HEADER SECTION ;; id = 17293 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN DS ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20261028080551 20260923073928 44346 co.uk. OLqjQyKDyXRWDzvJcgyFengd6Ks1ykD5yYOZ/wp7ltHTbpmg+N8Xux8tmPhUjbdaU7PkHQj9efmh Kl/HR2meUNm38Q7xJld2u7j1sDDavKrTiic8Rsp22XauSh16pIy23Xu33Vv8Dd2OegQWuFQsa35B BQAp+tPoFGAqyp8QU1rqvE+wM1ugIyewmTiFH5eRnrVGtTGDU4tBOKj+yUzjSAYBal2rwus0AKzk 8o4YtQFi+mH/Lbo/6aum0acXgfJ96qIbVxO1W0uR/U20CiVujtJZsXLWPSRPmFE/xpnzUOSupYCc rVFLT3OS81iOsR8zxgPC4SLjf8gtXtxD/UUu+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for coffee.co.uk in the co.uk zone
	DS=37040/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20261028080551 20260923073928 44346 co.uk. OLqjQyKDyXRWDzvJcgyFengd6Ks1ykD5yYOZ/wp7ltHTbpmg+N8Xux8tmPhUjbdaU7PkHQj9efmh Kl/HR2meUNm38Q7xJld2u7j1sDDavKrTiic8Rsp22XauSh16pIy23Xu33Vv8Dd2OegQWuFQsa35B BQAp+tPoFGAqyp8QU1rqvE+wM1ugIyewmTiFH5eRnrVGtTGDU4tBOKj+yUzjSAYBal2rwus0AKzk 8o4YtQFi+mH/Lbo/6aum0acXgfJ96qIbVxO1W0uR/U20CiVujtJZsXLWPSRPmFE/xpnzUOSupYCc rVFLT3OS81iOsR8zxgPC4SLjf8gtXtxD/UUu+w== )`
	RRSIG=44346 and DNSKEY=44346 verifies the DS RRset
	DS=37040/SHA-256 is now in the chain-of-trust
	`coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 )`
	Query to cafetiere.coffee.co.uk for coffee.co.uk/DNSKEY
	Received 389 bytes from 77.206.90.34
	;; Response received from [77.206.90.34] 389 octets ;; HEADER SECTION ;; id = 17466 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN DNSKEY ;; ANSWER SECTION (4 records) coffee.co.uk. 3600 IN DNSKEY ( 256 3 13 u419m3xaAwgJMLGGLgfXDecUg7dIZnTWgvu3s2RFRDzGlWDcKWafclThvsjhfwZ+2sbLkLWWw8+N t+PfiwWxYw== ) ; keytag 16720 coffee.co.uk. 3600 IN DNSKEY ( 256 3 13 8ZYXnctnxrmjWq3kWX1P5gwAR0vdhvGLJt2WLfR9+n6VsXbtgUyS+D7a8d2qRiZvMXgaMMemTgAu DF/3k+ALiQ== ) ; keytag 6522 coffee.co.uk. 3600 IN DNSKEY ( 257 3 13 Xb29U0H6bcwScx/mZ6NWrsVXnmiXbFzbz0eItEoOPAv7pl2hYa8J60hPhQhQOAGBhrVgW7DQ+BtS E4AfrD2onw== ) ; keytag 37040 coffee.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20261007160736 20260923151118 37040 coffee.co.uk. 8nQNl88sMMsCIIXUDfF/wn9EEGgtZob2UeQjw5CBTODGxLwSut+mEexfvjZk8jlJcTb5KdZFvFQ5 9G9svhr1Qg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for coffee.co.uk
	`coffee.co.uk. 3600 IN DNSKEY ( 256 3 13 u419m3xaAwgJMLGGLgfXDecUg7dIZnTWgvu3s2RFRDzGlWDcKWafclThvsjhfwZ+2sbLkLWWw8+N t+PfiwWxYw== ) ; keytag 16720`
	`coffee.co.uk. 3600 IN DNSKEY ( 256 3 13 8ZYXnctnxrmjWq3kWX1P5gwAR0vdhvGLJt2WLfR9+n6VsXbtgUyS+D7a8d2qRiZvMXgaMMemTgAu DF/3k+ALiQ== ) ; keytag 6522`
	`coffee.co.uk. 3600 IN DNSKEY ( 257 3 13 Xb29U0H6bcwScx/mZ6NWrsVXnmiXbFzbz0eItEoOPAv7pl2hYa8J60hPhQhQOAGBhrVgW7DQ+BtS E4AfrD2onw== ) ; keytag 37040`
	DNSKEY=37040/SEP is now in the chain-of-trust
	DS=37040/SHA-256 verifies DNSKEY=37040/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`coffee.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20261007160736 20260923151118 37040 coffee.co.uk. 8nQNl88sMMsCIIXUDfF/wn9EEGgtZob2UeQjw5CBTODGxLwSut+mEexfvjZk8jlJcTb5KdZFvFQ5 9G9svhr1Qg== )`
	RRSIG=37040 and DNSKEY=37040/SEP verifies the DNSKEY RRset
	DNSKEY=16720 is now in the chain-of-trust
	DNSKEY=6522 is now in the chain-of-trust
	Query to santos.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.69.101.65
	;; Response received from [82.69.101.65] 860 octets ;; HEADER SECTION ;; id = 1992 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20261004031741 20260920023537 6522 coffee.co.uk. rOcGtOI5i7K2b1T83m54Jt3CQOQ9sfpJ6rYU71QZQXZzG/I1+Bk5h/qgSsoZ2zf4WQGZYUAVDV8h eHzci2zJhA== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20261004031741 20260920023537 6522 coffee.co.uk. z0GUvEZHuEKG1eGqTbHL1I+DM3J7bn/fX5oG0uq9uYzptQ+nnFIoNXCNeO/oEt1C2c/nvwLiKWnn knrQ7FzMOQ== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003162711 20260919162430 6522 coffee.co.uk. yLHt0OOLEBexeC1GmGVf60VKn7fbxhMbJFg4kw851IFRdoES+AYyq1LoOrsaId5P3DZ3p6F4W0eA KFsx4VL7Vg== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003210335 20260919202027 6522 coffee.co.uk. 5Zmj6dVTdCNCvwli/kFPFKPucObjxID/2N9qivDDg/kgD+o3dQ+YjnCuXiNuRtwoypiLepuU2U16 AXPjmmX9qA== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003230749 20260919222633 6522 coffee.co.uk. 4mX9zCw8oxr+piuJQPqMjViuu2phBSxZdTE5xYuuBB1bmgS/cCAPW7LO9b0DTmzUoTQAyqzwcVJM qB99nl6nFA== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003202326 20260919193425 6522 coffee.co.uk. tQsZkfTPxBTMf0qJsV/eTMBNE+zqdn/9adfSORe4BKhGT9+NA3hDCNbx/sNSpFPfzgPjutBmDeXz 9IGmlw48rA== ) ;; { "EDNS-VERSION": 0 }
	santos.coffee.co.uk is authoritative for coffee.co.uk
	Found RRSIG signed by coffee.co.uk zone
	Query to cafetiere.coffee.co.uk for coffee.co.uk/SOA
	Received 889 bytes from 77.206.90.34
	;; Response received from [77.206.90.34] 889 octets ;; HEADER SECTION ;; id = 53103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN SOA ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN SOA ( colombia.coffee.co.uk. dnsadmin.coffee.co.uk. 2026091324 ;serial 86400 ;refresh 7200 ;retry 3600000 ;expire 10800 ;minimum ) coffee.co.uk. 3600 IN RRSIG ( SOA 13 3 3600 20261007161118 20260923151118 6522 coffee.co.uk. +DiBW7Y5uozMzQS2wjO/fRq/Qb8nOvwS/g96R8N2//JvkLhgTvR4mMuxVxSQAnXjM9888KjsFS/f a6xAm+4ZuQ== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20261004031741 20260920023537 6522 coffee.co.uk. z0GUvEZHuEKG1eGqTbHL1I+DM3J7bn/fX5oG0uq9uYzptQ+nnFIoNXCNeO/oEt1C2c/nvwLiKWnn knrQ7FzMOQ== ) ;; ADDITIONAL SECTION (9 records) santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003202326 20260919193425 6522 coffee.co.uk. tQsZkfTPxBTMf0qJsV/eTMBNE+zqdn/9adfSORe4BKhGT9+NA3hDCNbx/sNSpFPfzgPjutBmDeXz 9IGmlw48rA== ) colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003162711 20260919162430 6522 coffee.co.uk. yLHt0OOLEBexeC1GmGVf60VKn7fbxhMbJFg4kw851IFRdoES+AYyq1LoOrsaId5P3DZ3p6F4W0eA KFsx4VL7Vg== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003210335 20260919202027 6522 coffee.co.uk. 5Zmj6dVTdCNCvwli/kFPFKPucObjxID/2N9qivDDg/kgD+o3dQ+YjnCuXiNuRtwoypiLepuU2U16 AXPjmmX9qA== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003230749 20260919222633 6522 coffee.co.uk. 4mX9zCw8oxr+piuJQPqMjViuu2phBSxZdTE5xYuuBB1bmgS/cCAPW7LO9b0DTmzUoTQAyqzwcVJM qB99nl6nFA== ) ;; { "EDNS-VERSION": 0 }
	Query to espresso.coffee.co.uk for coffee.co.uk/SOA
	Received 889 bytes from 82.68.85.106
	;; Response received from [82.68.85.106] 889 octets ;; HEADER SECTION ;; id = 32864 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN SOA ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN SOA ( colombia.coffee.co.uk. dnsadmin.coffee.co.uk. 2026091324 ;serial 86400 ;refresh 7200 ;retry 3600000 ;expire 10800 ;minimum ) coffee.co.uk. 3600 IN RRSIG ( SOA 13 3 3600 20261007161118 20260923151118 6522 coffee.co.uk. +DiBW7Y5uozMzQS2wjO/fRq/Qb8nOvwS/g96R8N2//JvkLhgTvR4mMuxVxSQAnXjM9888KjsFS/f a6xAm+4ZuQ== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20261004031741 20260920023537 6522 coffee.co.uk. z0GUvEZHuEKG1eGqTbHL1I+DM3J7bn/fX5oG0uq9uYzptQ+nnFIoNXCNeO/oEt1C2c/nvwLiKWnn knrQ7FzMOQ== ) ;; ADDITIONAL SECTION (9 records) santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003202326 20260919193425 6522 coffee.co.uk. tQsZkfTPxBTMf0qJsV/eTMBNE+zqdn/9adfSORe4BKhGT9+NA3hDCNbx/sNSpFPfzgPjutBmDeXz 9IGmlw48rA== ) colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003162711 20260919162430 6522 coffee.co.uk. yLHt0OOLEBexeC1GmGVf60VKn7fbxhMbJFg4kw851IFRdoES+AYyq1LoOrsaId5P3DZ3p6F4W0eA KFsx4VL7Vg== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003210335 20260919202027 6522 coffee.co.uk. 5Zmj6dVTdCNCvwli/kFPFKPucObjxID/2N9qivDDg/kgD+o3dQ+YjnCuXiNuRtwoypiLepuU2U16 AXPjmmX9qA== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003230749 20260919222633 6522 coffee.co.uk. 4mX9zCw8oxr+piuJQPqMjViuu2phBSxZdTE5xYuuBB1bmgS/cCAPW7LO9b0DTmzUoTQAyqzwcVJM qB99nl6nFA== ) ;; { "EDNS-VERSION": 0 }
	Query to colombia.coffee.co.uk for coffee.co.uk/SOA
	Received 889 bytes from 82.68.85.107
	;; Response received from [82.68.85.107] 889 octets ;; HEADER SECTION ;; id = 7300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN SOA ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN SOA ( colombia.coffee.co.uk. dnsadmin.coffee.co.uk. 2026091324 ;serial 86400 ;refresh 7200 ;retry 3600000 ;expire 10800 ;minimum ) coffee.co.uk. 3600 IN RRSIG ( SOA 13 3 3600 20261007161118 20260923151118 6522 coffee.co.uk. +DiBW7Y5uozMzQS2wjO/fRq/Qb8nOvwS/g96R8N2//JvkLhgTvR4mMuxVxSQAnXjM9888KjsFS/f a6xAm+4ZuQ== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20261004031741 20260920023537 6522 coffee.co.uk. z0GUvEZHuEKG1eGqTbHL1I+DM3J7bn/fX5oG0uq9uYzptQ+nnFIoNXCNeO/oEt1C2c/nvwLiKWnn knrQ7FzMOQ== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003162711 20260919162430 6522 coffee.co.uk. yLHt0OOLEBexeC1GmGVf60VKn7fbxhMbJFg4kw851IFRdoES+AYyq1LoOrsaId5P3DZ3p6F4W0eA KFsx4VL7Vg== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003210335 20260919202027 6522 coffee.co.uk. 5Zmj6dVTdCNCvwli/kFPFKPucObjxID/2N9qivDDg/kgD+o3dQ+YjnCuXiNuRtwoypiLepuU2U16 AXPjmmX9qA== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003230749 20260919222633 6522 coffee.co.uk. 4mX9zCw8oxr+piuJQPqMjViuu2phBSxZdTE5xYuuBB1bmgS/cCAPW7LO9b0DTmzUoTQAyqzwcVJM qB99nl6nFA== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003202326 20260919193425 6522 coffee.co.uk. tQsZkfTPxBTMf0qJsV/eTMBNE+zqdn/9adfSORe4BKhGT9+NA3hDCNbx/sNSpFPfzgPjutBmDeXz 9IGmlw48rA== ) ;; { "EDNS-VERSION": 0 }
	Query to santos.coffee.co.uk for coffee.co.uk/A
	coffee.co.uk A RR has value 82.68.85.107
	Found 1 RRSIGs over A RRset
	`coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20261004031741 20260920023537 6522 coffee.co.uk. rOcGtOI5i7K2b1T83m54Jt3CQOQ9sfpJ6rYU71QZQXZzG/I1+Bk5h/qgSsoZ2zf4WQGZYUAVDV8h eHzci2zJhA== )`
	RRSIG=6522 and DNSKEY=6522 verifies the A RRset

coffee.co.uk

	Query to cafetiere.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 77.206.90.34
	;; Response received from [77.206.90.34] 860 octets ;; HEADER SECTION ;; id = 2029 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20261004031741 20260920023537 6522 coffee.co.uk. rOcGtOI5i7K2b1T83m54Jt3CQOQ9sfpJ6rYU71QZQXZzG/I1+Bk5h/qgSsoZ2zf4WQGZYUAVDV8h eHzci2zJhA== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20261004031741 20260920023537 6522 coffee.co.uk. z0GUvEZHuEKG1eGqTbHL1I+DM3J7bn/fX5oG0uq9uYzptQ+nnFIoNXCNeO/oEt1C2c/nvwLiKWnn knrQ7FzMOQ== ) ;; ADDITIONAL SECTION (9 records) santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003202326 20260919193425 6522 coffee.co.uk. tQsZkfTPxBTMf0qJsV/eTMBNE+zqdn/9adfSORe4BKhGT9+NA3hDCNbx/sNSpFPfzgPjutBmDeXz 9IGmlw48rA== ) colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003162711 20260919162430 6522 coffee.co.uk. yLHt0OOLEBexeC1GmGVf60VKn7fbxhMbJFg4kw851IFRdoES+AYyq1LoOrsaId5P3DZ3p6F4W0eA KFsx4VL7Vg== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003210335 20260919202027 6522 coffee.co.uk. 5Zmj6dVTdCNCvwli/kFPFKPucObjxID/2N9qivDDg/kgD+o3dQ+YjnCuXiNuRtwoypiLepuU2U16 AXPjmmX9qA== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003230749 20260919222633 6522 coffee.co.uk. 4mX9zCw8oxr+piuJQPqMjViuu2phBSxZdTE5xYuuBB1bmgS/cCAPW7LO9b0DTmzUoTQAyqzwcVJM qB99nl6nFA== ) ;; { "EDNS-VERSION": 0 }
	cafetiere.coffee.co.uk is authoritative for coffee.co.uk
	Found RRSIG signed by coffee.co.uk zone
	Query to cafetiere.coffee.co.uk for coffee.co.uk/A
	coffee.co.uk A RR has value 82.68.85.107
	Found 1 RRSIGs over A RRset
	`coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20261004031741 20260920023537 6522 coffee.co.uk. rOcGtOI5i7K2b1T83m54Jt3CQOQ9sfpJ6rYU71QZQXZzG/I1+Bk5h/qgSsoZ2zf4WQGZYUAVDV8h eHzci2zJhA== )`
	RRSIG=6522 and DNSKEY=6522 verifies the A RRset

coffee.co.uk

	Query to colombia.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.68.85.107
	;; Response received from [82.68.85.107] 860 octets ;; HEADER SECTION ;; id = 59144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20261004031741 20260920023537 6522 coffee.co.uk. rOcGtOI5i7K2b1T83m54Jt3CQOQ9sfpJ6rYU71QZQXZzG/I1+Bk5h/qgSsoZ2zf4WQGZYUAVDV8h eHzci2zJhA== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20261004031741 20260920023537 6522 coffee.co.uk. z0GUvEZHuEKG1eGqTbHL1I+DM3J7bn/fX5oG0uq9uYzptQ+nnFIoNXCNeO/oEt1C2c/nvwLiKWnn knrQ7FzMOQ== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003162711 20260919162430 6522 coffee.co.uk. yLHt0OOLEBexeC1GmGVf60VKn7fbxhMbJFg4kw851IFRdoES+AYyq1LoOrsaId5P3DZ3p6F4W0eA KFsx4VL7Vg== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003210335 20260919202027 6522 coffee.co.uk. 5Zmj6dVTdCNCvwli/kFPFKPucObjxID/2N9qivDDg/kgD+o3dQ+YjnCuXiNuRtwoypiLepuU2U16 AXPjmmX9qA== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003230749 20260919222633 6522 coffee.co.uk. 4mX9zCw8oxr+piuJQPqMjViuu2phBSxZdTE5xYuuBB1bmgS/cCAPW7LO9b0DTmzUoTQAyqzwcVJM qB99nl6nFA== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20261003202326 20260919193425 6522 coffee.co.uk. tQsZkfTPxBTMf0qJsV/eTMBNE+zqdn/9adfSORe4BKhGT9+NA3hDCNbx/sNSpFPfzgPjutBmDeXz 9IGmlw48rA== ) ;; { "EDNS-VERSION": 0 }
	colombia.coffee.co.uk is authoritative for coffee.co.uk
	Found RRSIG signed by coffee.co.uk zone
	Query to colombia.coffee.co.uk for coffee.co.uk/A
	coffee.co.uk A RR has value 82.68.85.107
	Found 1 RRSIGs over A RRset
	`coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20261004031741 20260920023537 6522 coffee.co.uk. rOcGtOI5i7K2b1T83m54Jt3CQOQ9sfpJ6rYU71QZQXZzG/I1+Bk5h/qgSsoZ2zf4WQGZYUAVDV8h eHzci2zJhA== )`
	RRSIG=6522 and DNSKEY=6522 verifies the A RRset

coffee.co.uk

	Query to espresso.coffee.co.uk for coffee.co.uk/A
	Timeout querying espresso.coffee.co.uk/82.68.85.106 for coffee.co.uk/A
	All Queries to espresso.coffee.co.uk for coffee.co.uk/A timed out or failed
	No response from coffee.co.uk nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test coffee.co.uk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: