DNSSEC Debugger - coffee.co.uk

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-06-16 02:13:50 UTC

Analyzing DNSSEC problems for coffee.co.uk

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 23507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to b.root-servers.net for coffee.co.uk/A
	Received 880 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 880 octets ;; HEADER SECTION ;; id = 62443 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . AotdICIdW//Zd83b98tBLkjvbgn8SSottqzjohST2ZiiWvy5RWiF3U1N1Shddnl7yoTSWLz9SR8G c1CKr2VskjEfzOqhC01zyL5AUVY78qwqpvJ4GbNZRC8BQq5ZUzWxo3OLIBAs1yuPvPO1GJLrnWJT uwP3i+CJcR1PmXo+SSWkcjP3qcJ1H4d8m7B0vdwiSjTKSG/PuV8au2jotnshIxu2h35l3HVLj8Om pwlfXc654ZlJx036FymXXg69frUjze4PDhcrILUTx+5nYHQQ5ZP+Rqgq8InLXWOrBTNWEel7fcI+ yuO4wsW59hzXKRphwWWs63NVCxdqQcVrov8O/Q== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN A 156.154.103.3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN A 43.230.48.1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for uk/DNSKEY
	Received 870 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 870 octets ;; HEADER SECTION ;; id = 27825 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . AotdICIdW//Zd83b98tBLkjvbgn8SSottqzjohST2ZiiWvy5RWiF3U1N1Shddnl7yoTSWLz9SR8G c1CKr2VskjEfzOqhC01zyL5AUVY78qwqpvJ4GbNZRC8BQq5ZUzWxo3OLIBAs1yuPvPO1GJLrnWJT uwP3i+CJcR1PmXo+SSWkcjP3qcJ1H4d8m7B0vdwiSjTKSG/PuV8au2jotnshIxu2h35l3HVLj8Om pwlfXc654ZlJx036FymXXg69frUjze4PDhcrILUTx+5nYHQQ5ZP+Rqgq8InLXWOrBTNWEel7fcI+ yuO4wsW59hzXKRphwWWs63NVCxdqQcVrov8O/Q== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN A 156.154.103.3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN A 43.230.48.1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Found child zone uk

	Checking DS between . and uk
	Query to j.root-servers.net for uk/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 366 octets ;; HEADER SECTION ;; id = 11917 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DS ;; ANSWER SECTION (2 records) uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . AotdICIdW//Zd83b98tBLkjvbgn8SSottqzjohST2ZiiWvy5RWiF3U1N1Shddnl7yoTSWLz9SR8G c1CKr2VskjEfzOqhC01zyL5AUVY78qwqpvJ4GbNZRC8BQq5ZUzWxo3OLIBAs1yuPvPO1GJLrnWJT uwP3i+CJcR1PmXo+SSWkcjP3qcJ1H4d8m7B0vdwiSjTKSG/PuV8au2jotnshIxu2h35l3HVLj8Om pwlfXc654ZlJx036FymXXg69frUjze4PDhcrILUTx+5nYHQQ5ZP+Rqgq8InLXWOrBTNWEel7fcI+ yuO4wsW59hzXKRphwWWs63NVCxdqQcVrov8O/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for uk in the . zone
	DS=43876/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uk. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . AotdICIdW//Zd83b98tBLkjvbgn8SSottqzjohST2ZiiWvy5RWiF3U1N1Shddnl7yoTSWLz9SR8G c1CKr2VskjEfzOqhC01zyL5AUVY78qwqpvJ4GbNZRC8BQq5ZUzWxo3OLIBAs1yuPvPO1GJLrnWJT uwP3i+CJcR1PmXo+SSWkcjP3qcJ1H4d8m7B0vdwiSjTKSG/PuV8au2jotnshIxu2h35l3HVLj8Om pwlfXc654ZlJx036FymXXg69frUjze4PDhcrILUTx+5nYHQQ5ZP+Rqgq8InLXWOrBTNWEel7fcI+ yuO4wsW59hzXKRphwWWs63NVCxdqQcVrov8O/Q== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=43876/SHA-256 is now in the chain-of-trust
	`uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 )`
	Query to dns2.nic.uk for uk/DNSKEY
	Received 745 bytes from 103.49.80.1
	;; Response received from [103.49.80.1] 745 octets ;; HEADER SECTION ;; id = 14365 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (3 records) uk. 7200 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056 uk. 7200 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876 uk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20260715214043 20260610210320 43876 uk. rivmTO0zo7zVAVcIXLW+9iiUaqt+gJ/B4lNKaGOrMbb6xg6PIjoHmxHjYn4eNZRnwmTUqbAPs25U XFLDoK29qDaptpiTl4Pxw2JpHjPh+roOGpwNP5dcysF1OfT0DyaYtNqDwQKYNSmJ3JUzIKA4nIcN 6f3+5lwC4c4yF4oXNepP9F0Lgwn2KsJgWdW6I1DfyvbXR71t0vpCXN5iCy61IlrFpJwnqwRaxLJa a11sz7tj8Qy2dHkZ2G5cm5TcH6bdE9By28Sp0qxdV6OjKUcQ6fzW64RdX+fwKLcaySHLfunkmpAS Qn7/+RMn+wzcwDzaqIMQTuh8xg9Z/XmrolZ8wg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for uk
	`uk. 7200 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056`
	`uk. 7200 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876`
	DNSKEY=43876/SEP is now in the chain-of-trust
	DS=43876/SHA-256 verifies DNSKEY=43876/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`uk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20260715214043 20260610210320 43876 uk. rivmTO0zo7zVAVcIXLW+9iiUaqt+gJ/B4lNKaGOrMbb6xg6PIjoHmxHjYn4eNZRnwmTUqbAPs25U XFLDoK29qDaptpiTl4Pxw2JpHjPh+roOGpwNP5dcysF1OfT0DyaYtNqDwQKYNSmJ3JUzIKA4nIcN 6f3+5lwC4c4yF4oXNepP9F0Lgwn2KsJgWdW6I1DfyvbXR71t0vpCXN5iCy61IlrFpJwnqwRaxLJa a11sz7tj8Qy2dHkZ2G5cm5TcH6bdE9By28Sp0qxdV6OjKUcQ6fzW64RdX+fwKLcaySHLfunkmpAS Qn7/+RMn+wzcwDzaqIMQTuh8xg9Z/XmrolZ8wg== )`
	RRSIG=43876 and DNSKEY=43876/SEP verifies the DNSKEY RRset
	DNSKEY=43056 is now in the chain-of-trust
	Query to dns4.nic.uk for coffee.co.uk/A
	Received 537 bytes from 43.230.48.1
	;; Response received from [43.230.48.1] 537 octets ;; HEADER SECTION ;; id = 25081 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) coffee.co.uk. 172800 IN NS santos.coffee.co.uk. coffee.co.uk. 172800 IN NS colombia.coffee.co.uk. coffee.co.uk. 172800 IN NS espresso.coffee.co.uk. coffee.co.uk. 172800 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260715173652 20260610165128 44346 co.uk. DWm6hQHCzeFJKRIPhZvL1tUNcendWDx36+gwQLC3e9OnPMPmhg7gTSxdebiDh63JWTCzfzA/sNPs x4zuwANu7HdcFcDqTXhlu8uefsqYMM1nkHYbn8+6T7R5w7uJIkb4FMZBM/pu5kpdMVf53HvJW4mx cpXFqpTC7E+7U9mo3K4p1dCPnSrGUn7zyQYwyNxwvLTujxmISGNtrTQNW5XvpoDq1XxI2OBZ2doF xikyVy9HHpe3gtz/ebEe2M1ylv4kRqqpLhvDX992vj818UhVr6mTmsX0ztt7jif+Y2u1yJH9w3ev +fyIV2OsXrFc5eSjZ7e+xw6uuIGskwRNtAQu8A== ) ;; ADDITIONAL SECTION (5 records) santos.coffee.co.uk. 172800 IN A 82.69.101.65 colombia.coffee.co.uk. 172800 IN A 82.68.85.107 espresso.coffee.co.uk. 172800 IN A 82.68.85.106 cafetiere.coffee.co.uk. 172800 IN A 77.206.90.34 ;; { "EDNS-VERSION": 0 }
	Query to dns4.nic.uk for co.uk/DNSKEY
	Received 879 bytes from 43.230.48.1
	;; Response received from [43.230.48.1] 879 octets ;; HEADER SECTION ;; id = 17821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (3 records) co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346 co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810 co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260715005629 20260610002833 11810 co.uk. bk61phkQH4XP1S+nMzo8vl8WhNDeTs3YR1hOrvOrtH3oKGYjpegYWpHKrSGSZZg6/i0urRWr7wJh gJ9fsOO/PqxZKQuPRYs7hslA46tRL3u+CiWguFZ6GzB1ugT75Ck+6LD71g43OdAUd07qkkp6n7Tm I8MM6sYsienH9FeGicT3/W+6zH5FTnUxQK+LIOs2hx08AmYAd49jk4A7LLx5R/lJQ9UiEoj8ToVb ahIjP4Mf7cjLZ/q3NSt51NjK9kFw3ft9e/OOTtZk9eG96KCaMq5rNWG5MRwfLSPl4UX7gqTq6fWE bcC5s7osZ2oBPpR/TCqQUWvOIvPb/PrBUhGPvQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone co.uk
	Attempting to learn nameservers for co.uk
	Query to dns4.nic.uk for co.uk/NS
	Received 479 bytes from 43.230.48.1
	;; Response received from [43.230.48.1] 479 octets ;; HEADER SECTION ;; id = 38483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 9 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN NS ;; ANSWER SECTION (9 records) co.uk. 172800 IN NS nsa.nic.uk. co.uk. 172800 IN NS nsb.nic.uk. co.uk. 172800 IN NS nsc.nic.uk. co.uk. 172800 IN NS nsd.nic.uk. co.uk. 172800 IN NS dns1.nic.uk. co.uk. 172800 IN NS dns2.nic.uk. co.uk. 172800 IN NS dns3.nic.uk. co.uk. 172800 IN NS dns4.nic.uk. co.uk. 172800 IN RRSIG ( NS 8 2 172800 20260715111348 20260610102044 44346 co.uk. KiAMWn38q1bk4je8xqAkion4Dld9KTEFSjgdOhMkCIKA0AqMv20Nff3j5CSDdyXf244TbLCd4N32 aBOFjMhg6VZRAPzsOqtQQe42qgXK3gCkdRgmEHyRl/r4szsp5e0gwRyxe5UM151osCQByBQEOxIQ FfNMGrrYuxeaJ5IvlPzHL6sAEVpRFAck4paXSo3c04VyS1dBTSGyL2dpNdQm5mwW8J1J+K94buak 3G1V8g+MRnm7iEiAq/nZIKqX5Znnm7TFOs5lb5f1bEd/Tty+ziIBjtg6Ucf7Jy5FH+btfoGSpxfk /iN/U9/8WZtuRYLjPeZUg745Vkh2ZLVm7VlPNA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found co.uk nameservers: nsa.nic.uk, nsb.nic.uk, nsc.nic.uk, nsd.nic.uk, dns1.nic.uk, dns2.nic.uk, dns3.nic.uk, dns4.nic.uk

co.uk

	Checking DS between uk and co.uk
	Query to nsb.nic.uk for co.uk/DS
	Received 244 bytes from 156.154.101.3
	;; Response received from [156.154.101.3] 244 octets ;; HEADER SECTION ;; id = 35675 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DS ;; ANSWER SECTION (2 records) co.uk. 300 IN DS ( 11810 8 2 1df4681bdacc3e6296ac7667c42ca33cb57efbc2005ce23064f15fbffa286ff5 ) co.uk. 300 IN RRSIG ( DS 8 2 300 20260719165225 20260614163934 43056 uk. 3MRb6VzVRgpzfO/drT3dMUWA/2vdBRcbFCDCQ9QjQQRwjF4ibSEXk97J7neJkvpTaUJLan0Fmecw d+P1pe+luwwjzgFqKhP5WTcHNcc+YCIMZJiPSlqh5OsJyPHC7PI80hcyEnqQistB0r42pRkHz1CY plip9UgNuPJxorjOFP0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for co.uk in the uk zone
	DS=11810/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co.uk. 300 IN RRSIG ( DS 8 2 300 20260719165225 20260614163934 43056 uk. 3MRb6VzVRgpzfO/drT3dMUWA/2vdBRcbFCDCQ9QjQQRwjF4ibSEXk97J7neJkvpTaUJLan0Fmecw d+P1pe+luwwjzgFqKhP5WTcHNcc+YCIMZJiPSlqh5OsJyPHC7PI80hcyEnqQistB0r42pRkHz1CY plip9UgNuPJxorjOFP0= )`
	RRSIG=43056 and DNSKEY=43056 verifies the DS RRset
	DS=11810/SHA-256 is now in the chain-of-trust
	`co.uk. 300 IN DS ( 11810 8 2 1df4681bdacc3e6296ac7667c42ca33cb57efbc2005ce23064f15fbffa286ff5 )`
	Query to dns4.nic.uk for co.uk/DNSKEY
	Found 2 DNSKEY records for co.uk
	`co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346`
	`co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810`
	DNSKEY=11810/SEP is now in the chain-of-trust
	DS=11810/SHA-256 verifies DNSKEY=11810/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260715005629 20260610002833 11810 co.uk. bk61phkQH4XP1S+nMzo8vl8WhNDeTs3YR1hOrvOrtH3oKGYjpegYWpHKrSGSZZg6/i0urRWr7wJh gJ9fsOO/PqxZKQuPRYs7hslA46tRL3u+CiWguFZ6GzB1ugT75Ck+6LD71g43OdAUd07qkkp6n7Tm I8MM6sYsienH9FeGicT3/W+6zH5FTnUxQK+LIOs2hx08AmYAd49jk4A7LLx5R/lJQ9UiEoj8ToVb ahIjP4Mf7cjLZ/q3NSt51NjK9kFw3ft9e/OOTtZk9eG96KCaMq5rNWG5MRwfLSPl4UX7gqTq6fWE bcC5s7osZ2oBPpR/TCqQUWvOIvPb/PrBUhGPvQ== )`
	RRSIG=11810 and DNSKEY=11810/SEP verifies the DNSKEY RRset
	DNSKEY=44346 is now in the chain-of-trust
	Query to nsa.nic.uk for coffee.co.uk/A
	Received 537 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 537 octets ;; HEADER SECTION ;; id = 13176 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) coffee.co.uk. 172800 IN NS espresso.coffee.co.uk. coffee.co.uk. 172800 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 172800 IN NS santos.coffee.co.uk. coffee.co.uk. 172800 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260715173652 20260610165128 44346 co.uk. DWm6hQHCzeFJKRIPhZvL1tUNcendWDx36+gwQLC3e9OnPMPmhg7gTSxdebiDh63JWTCzfzA/sNPs x4zuwANu7HdcFcDqTXhlu8uefsqYMM1nkHYbn8+6T7R5w7uJIkb4FMZBM/pu5kpdMVf53HvJW4mx cpXFqpTC7E+7U9mo3K4p1dCPnSrGUn7zyQYwyNxwvLTujxmISGNtrTQNW5XvpoDq1XxI2OBZ2doF xikyVy9HHpe3gtz/ebEe2M1ylv4kRqqpLhvDX992vj818UhVr6mTmsX0ztt7jif+Y2u1yJH9w3ev +fyIV2OsXrFc5eSjZ7e+xw6uuIGskwRNtAQu8A== ) ;; ADDITIONAL SECTION (5 records) cafetiere.coffee.co.uk. 172800 IN A 77.206.90.34 espresso.coffee.co.uk. 172800 IN A 82.68.85.106 colombia.coffee.co.uk. 172800 IN A 82.68.85.107 santos.coffee.co.uk. 172800 IN A 82.69.101.65 ;; { "EDNS-VERSION": 0 }
	Query to nsa.nic.uk for coffee.co.uk/DNSKEY
	Received 537 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 537 octets ;; HEADER SECTION ;; id = 36943 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) coffee.co.uk. 172800 IN NS santos.coffee.co.uk. coffee.co.uk. 172800 IN NS espresso.coffee.co.uk. coffee.co.uk. 172800 IN NS colombia.coffee.co.uk. coffee.co.uk. 172800 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260715173652 20260610165128 44346 co.uk. DWm6hQHCzeFJKRIPhZvL1tUNcendWDx36+gwQLC3e9OnPMPmhg7gTSxdebiDh63JWTCzfzA/sNPs x4zuwANu7HdcFcDqTXhlu8uefsqYMM1nkHYbn8+6T7R5w7uJIkb4FMZBM/pu5kpdMVf53HvJW4mx cpXFqpTC7E+7U9mo3K4p1dCPnSrGUn7zyQYwyNxwvLTujxmISGNtrTQNW5XvpoDq1XxI2OBZ2doF xikyVy9HHpe3gtz/ebEe2M1ylv4kRqqpLhvDX992vj818UhVr6mTmsX0ztt7jif+Y2u1yJH9w3ev +fyIV2OsXrFc5eSjZ7e+xw6uuIGskwRNtAQu8A== ) ;; ADDITIONAL SECTION (5 records) cafetiere.coffee.co.uk. 172800 IN A 77.206.90.34 espresso.coffee.co.uk. 172800 IN A 82.68.85.106 colombia.coffee.co.uk. 172800 IN A 82.68.85.107 santos.coffee.co.uk. 172800 IN A 82.69.101.65 ;; { "EDNS-VERSION": 0 }
	Found child zone coffee.co.uk

coffee.co.uk

	Checking DS between co.uk and coffee.co.uk
	Query to nsa.nic.uk for coffee.co.uk/DS
	Received 382 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 382 octets ;; HEADER SECTION ;; id = 8262 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN DS ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260715173652 20260610165128 44346 co.uk. DWm6hQHCzeFJKRIPhZvL1tUNcendWDx36+gwQLC3e9OnPMPmhg7gTSxdebiDh63JWTCzfzA/sNPs x4zuwANu7HdcFcDqTXhlu8uefsqYMM1nkHYbn8+6T7R5w7uJIkb4FMZBM/pu5kpdMVf53HvJW4mx cpXFqpTC7E+7U9mo3K4p1dCPnSrGUn7zyQYwyNxwvLTujxmISGNtrTQNW5XvpoDq1XxI2OBZ2doF xikyVy9HHpe3gtz/ebEe2M1ylv4kRqqpLhvDX992vj818UhVr6mTmsX0ztt7jif+Y2u1yJH9w3ev +fyIV2OsXrFc5eSjZ7e+xw6uuIGskwRNtAQu8A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for coffee.co.uk in the co.uk zone
	DS=37040/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260715173652 20260610165128 44346 co.uk. DWm6hQHCzeFJKRIPhZvL1tUNcendWDx36+gwQLC3e9OnPMPmhg7gTSxdebiDh63JWTCzfzA/sNPs x4zuwANu7HdcFcDqTXhlu8uefsqYMM1nkHYbn8+6T7R5w7uJIkb4FMZBM/pu5kpdMVf53HvJW4mx cpXFqpTC7E+7U9mo3K4p1dCPnSrGUn7zyQYwyNxwvLTujxmISGNtrTQNW5XvpoDq1XxI2OBZ2doF xikyVy9HHpe3gtz/ebEe2M1ylv4kRqqpLhvDX992vj818UhVr6mTmsX0ztt7jif+Y2u1yJH9w3ev +fyIV2OsXrFc5eSjZ7e+xw6uuIGskwRNtAQu8A== )`
	RRSIG=44346 and DNSKEY=44346 verifies the DS RRset
	DS=37040/SHA-256 is now in the chain-of-trust
	`coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 )`
	Query to colombia.coffee.co.uk for coffee.co.uk/DNSKEY
	Received 309 bytes from 82.68.85.107
	;; Response received from [82.68.85.107] 309 octets ;; HEADER SECTION ;; id = 29755 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN DNSKEY ;; ANSWER SECTION (3 records) coffee.co.uk. 3600 IN DNSKEY ( 256 3 13 lWHEDI640CaaBp2Qvrk1Xw4n8m3Dia3rnwq8oCJsX6KQEZK3h//ZdeqJwJjgseaxvDmnS9Fvjoaw SCnbXSTW0Q== ) ; keytag 42 coffee.co.uk. 3600 IN DNSKEY ( 257 3 13 Xb29U0H6bcwScx/mZ6NWrsVXnmiXbFzbz0eItEoOPAv7pl2hYa8J60hPhQhQOAGBhrVgW7DQ+BtS E4AfrD2onw== ) ; keytag 37040 coffee.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20260628175845 20260614172046 37040 coffee.co.uk. mS6YGY7q4hUjjGIuzJMU3dqJh0CaMSvamSFFdprDM7xwj64gjKHuuLWBzwL5eSVxIv+Ox4/U3ufY d4xeCsAYYw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for coffee.co.uk
	`coffee.co.uk. 3600 IN DNSKEY ( 256 3 13 lWHEDI640CaaBp2Qvrk1Xw4n8m3Dia3rnwq8oCJsX6KQEZK3h//ZdeqJwJjgseaxvDmnS9Fvjoaw SCnbXSTW0Q== ) ; keytag 42`
	`coffee.co.uk. 3600 IN DNSKEY ( 257 3 13 Xb29U0H6bcwScx/mZ6NWrsVXnmiXbFzbz0eItEoOPAv7pl2hYa8J60hPhQhQOAGBhrVgW7DQ+BtS E4AfrD2onw== ) ; keytag 37040`
	DNSKEY=37040/SEP is now in the chain-of-trust
	DS=37040/SHA-256 verifies DNSKEY=37040/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`coffee.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20260628175845 20260614172046 37040 coffee.co.uk. mS6YGY7q4hUjjGIuzJMU3dqJh0CaMSvamSFFdprDM7xwj64gjKHuuLWBzwL5eSVxIv+Ox4/U3ufY d4xeCsAYYw== )`
	RRSIG=37040 and DNSKEY=37040/SEP verifies the DNSKEY RRset
	DNSKEY=42 is now in the chain-of-trust
	Query to colombia.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.68.85.107
	;; Response received from [82.68.85.107] 860 octets ;; HEADER SECTION ;; id = 56282 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20260627091642 20260613082654 42 coffee.co.uk. wTR8G0TIt5MtdjQd+an03tGoAi69Rr4asXzSZX/7TrRcsiCLHo6JUBIKXvihbEQJ4ICCdViaLuAl PD/AKllI4g== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20260627091642 20260613082654 42 coffee.co.uk. XsfIWzZEyQUqsLZmNNyLM5UxCsEl21Pc5/KJPFKn4WybwHGUIZPjUtC+6U1ggQCl4/o86NQ96IHt DO9FOBfBDg== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260626221344 20260612221127 42 coffee.co.uk. G0l0BFXdDEfSy1zrWOBn32rg/su7qqT545TeK2jmN1bA6QqRZBIfWPpTyySvO2qy9RDbG84Zfwhd h0NIO0WIaQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260627025822 20260613021023 42 coffee.co.uk. 6YlZODuztfvMHdjaCVs/vuNRaPXQyLODTaGOr5RpYtKxNPHcp+qqvA5+JIl66wLenMxQSxUtAFFL 3CsCGfqqzg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260627034516 20260613025653 42 coffee.co.uk. DozHjEz/Q3ZJoCegR6jSNica50oOUsM+3rakxRlEielSsJmdmJ8BahJfug8JZ0cFp2i0ivU6D9Lb S3PCvGhFag== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260627010526 20260613003712 42 coffee.co.uk. Vp2vvlLGGLgqppESIpfFbHNpzoYuyEViPeaaDUdjS0jBMCCyTk4bxodC0QQASG+5Q5Q9qqJRXta/ o5n/BQENiQ== ) ;; { "EDNS-VERSION": 0 }
	colombia.coffee.co.uk is authoritative for coffee.co.uk
	Found RRSIG signed by coffee.co.uk zone
	Query to santos.coffee.co.uk for coffee.co.uk/SOA
	Received 889 bytes from 82.69.101.65
	;; Response received from [82.69.101.65] 889 octets ;; HEADER SECTION ;; id = 13819 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN SOA ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN SOA ( colombia.coffee.co.uk. dnsadmin.coffee.co.uk. 2026052152 ;serial 86400 ;refresh 7200 ;retry 3600000 ;expire 10800 ;minimum ) coffee.co.uk. 3600 IN RRSIG ( SOA 13 3 3600 20260628182046 20260614172046 42 coffee.co.uk. ackQ5QgiwKqIOnfm7woveeB5TCcmvmvkP8zHQKzEH1b5J4sPa+wIvfru0kAy5K+qtQ6H1G10Njzc Xf7nQhn6aQ== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20260627091642 20260613082654 42 coffee.co.uk. XsfIWzZEyQUqsLZmNNyLM5UxCsEl21Pc5/KJPFKn4WybwHGUIZPjUtC+6U1ggQCl4/o86NQ96IHt DO9FOBfBDg== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260626221344 20260612221127 42 coffee.co.uk. G0l0BFXdDEfSy1zrWOBn32rg/su7qqT545TeK2jmN1bA6QqRZBIfWPpTyySvO2qy9RDbG84Zfwhd h0NIO0WIaQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260627025822 20260613021023 42 coffee.co.uk. 6YlZODuztfvMHdjaCVs/vuNRaPXQyLODTaGOr5RpYtKxNPHcp+qqvA5+JIl66wLenMxQSxUtAFFL 3CsCGfqqzg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260627034516 20260613025653 42 coffee.co.uk. DozHjEz/Q3ZJoCegR6jSNica50oOUsM+3rakxRlEielSsJmdmJ8BahJfug8JZ0cFp2i0ivU6D9Lb S3PCvGhFag== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260627010526 20260613003712 42 coffee.co.uk. Vp2vvlLGGLgqppESIpfFbHNpzoYuyEViPeaaDUdjS0jBMCCyTk4bxodC0QQASG+5Q5Q9qqJRXta/ o5n/BQENiQ== ) ;; { "EDNS-VERSION": 0 }
	Query to espresso.coffee.co.uk for coffee.co.uk/SOA
	Received 889 bytes from 82.68.85.106
	;; Response received from [82.68.85.106] 889 octets ;; HEADER SECTION ;; id = 40313 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN SOA ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN SOA ( colombia.coffee.co.uk. dnsadmin.coffee.co.uk. 2026052152 ;serial 86400 ;refresh 7200 ;retry 3600000 ;expire 10800 ;minimum ) coffee.co.uk. 3600 IN RRSIG ( SOA 13 3 3600 20260628182046 20260614172046 42 coffee.co.uk. ackQ5QgiwKqIOnfm7woveeB5TCcmvmvkP8zHQKzEH1b5J4sPa+wIvfru0kAy5K+qtQ6H1G10Njzc Xf7nQhn6aQ== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20260627091642 20260613082654 42 coffee.co.uk. XsfIWzZEyQUqsLZmNNyLM5UxCsEl21Pc5/KJPFKn4WybwHGUIZPjUtC+6U1ggQCl4/o86NQ96IHt DO9FOBfBDg== ) ;; ADDITIONAL SECTION (9 records) santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260627010526 20260613003712 42 coffee.co.uk. Vp2vvlLGGLgqppESIpfFbHNpzoYuyEViPeaaDUdjS0jBMCCyTk4bxodC0QQASG+5Q5Q9qqJRXta/ o5n/BQENiQ== ) colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260626221344 20260612221127 42 coffee.co.uk. G0l0BFXdDEfSy1zrWOBn32rg/su7qqT545TeK2jmN1bA6QqRZBIfWPpTyySvO2qy9RDbG84Zfwhd h0NIO0WIaQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260627025822 20260613021023 42 coffee.co.uk. 6YlZODuztfvMHdjaCVs/vuNRaPXQyLODTaGOr5RpYtKxNPHcp+qqvA5+JIl66wLenMxQSxUtAFFL 3CsCGfqqzg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260627034516 20260613025653 42 coffee.co.uk. DozHjEz/Q3ZJoCegR6jSNica50oOUsM+3rakxRlEielSsJmdmJ8BahJfug8JZ0cFp2i0ivU6D9Lb S3PCvGhFag== ) ;; { "EDNS-VERSION": 0 }
	Query to cafetiere.coffee.co.uk for coffee.co.uk/SOA
	Timeout querying cafetiere.coffee.co.uk/77.206.90.34 for coffee.co.uk/SOA
	All Queries to cafetiere.coffee.co.uk for coffee.co.uk/SOA timed out or failed
	Query to colombia.coffee.co.uk for coffee.co.uk/A
	coffee.co.uk A RR has value 82.68.85.107
	Found 1 RRSIGs over A RRset
	`coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20260627091642 20260613082654 42 coffee.co.uk. wTR8G0TIt5MtdjQd+an03tGoAi69Rr4asXzSZX/7TrRcsiCLHo6JUBIKXvihbEQJ4ICCdViaLuAl PD/AKllI4g== )`
	RRSIG=42 and DNSKEY=42 verifies the A RRset

coffee.co.uk

	Query to santos.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.69.101.65
	;; Response received from [82.69.101.65] 860 octets ;; HEADER SECTION ;; id = 1282 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20260627091642 20260613082654 42 coffee.co.uk. wTR8G0TIt5MtdjQd+an03tGoAi69Rr4asXzSZX/7TrRcsiCLHo6JUBIKXvihbEQJ4ICCdViaLuAl PD/AKllI4g== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20260627091642 20260613082654 42 coffee.co.uk. XsfIWzZEyQUqsLZmNNyLM5UxCsEl21Pc5/KJPFKn4WybwHGUIZPjUtC+6U1ggQCl4/o86NQ96IHt DO9FOBfBDg== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260626221344 20260612221127 42 coffee.co.uk. G0l0BFXdDEfSy1zrWOBn32rg/su7qqT545TeK2jmN1bA6QqRZBIfWPpTyySvO2qy9RDbG84Zfwhd h0NIO0WIaQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260627025822 20260613021023 42 coffee.co.uk. 6YlZODuztfvMHdjaCVs/vuNRaPXQyLODTaGOr5RpYtKxNPHcp+qqvA5+JIl66wLenMxQSxUtAFFL 3CsCGfqqzg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260627034516 20260613025653 42 coffee.co.uk. DozHjEz/Q3ZJoCegR6jSNica50oOUsM+3rakxRlEielSsJmdmJ8BahJfug8JZ0cFp2i0ivU6D9Lb S3PCvGhFag== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260627010526 20260613003712 42 coffee.co.uk. Vp2vvlLGGLgqppESIpfFbHNpzoYuyEViPeaaDUdjS0jBMCCyTk4bxodC0QQASG+5Q5Q9qqJRXta/ o5n/BQENiQ== ) ;; { "EDNS-VERSION": 0 }
	santos.coffee.co.uk is authoritative for coffee.co.uk
	Found RRSIG signed by coffee.co.uk zone
	Query to santos.coffee.co.uk for coffee.co.uk/A
	coffee.co.uk A RR has value 82.68.85.107
	Found 1 RRSIGs over A RRset
	`coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20260627091642 20260613082654 42 coffee.co.uk. wTR8G0TIt5MtdjQd+an03tGoAi69Rr4asXzSZX/7TrRcsiCLHo6JUBIKXvihbEQJ4ICCdViaLuAl PD/AKllI4g== )`
	RRSIG=42 and DNSKEY=42 verifies the A RRset

coffee.co.uk

	Query to espresso.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.68.85.106
	;; Response received from [82.68.85.106] 860 octets ;; HEADER SECTION ;; id = 24560 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20260627091642 20260613082654 42 coffee.co.uk. wTR8G0TIt5MtdjQd+an03tGoAi69Rr4asXzSZX/7TrRcsiCLHo6JUBIKXvihbEQJ4ICCdViaLuAl PD/AKllI4g== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20260627091642 20260613082654 42 coffee.co.uk. XsfIWzZEyQUqsLZmNNyLM5UxCsEl21Pc5/KJPFKn4WybwHGUIZPjUtC+6U1ggQCl4/o86NQ96IHt DO9FOBfBDg== ) ;; ADDITIONAL SECTION (9 records) santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260627010526 20260613003712 42 coffee.co.uk. Vp2vvlLGGLgqppESIpfFbHNpzoYuyEViPeaaDUdjS0jBMCCyTk4bxodC0QQASG+5Q5Q9qqJRXta/ o5n/BQENiQ== ) colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260626221344 20260612221127 42 coffee.co.uk. G0l0BFXdDEfSy1zrWOBn32rg/su7qqT545TeK2jmN1bA6QqRZBIfWPpTyySvO2qy9RDbG84Zfwhd h0NIO0WIaQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260627025822 20260613021023 42 coffee.co.uk. 6YlZODuztfvMHdjaCVs/vuNRaPXQyLODTaGOr5RpYtKxNPHcp+qqvA5+JIl66wLenMxQSxUtAFFL 3CsCGfqqzg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20260627034516 20260613025653 42 coffee.co.uk. DozHjEz/Q3ZJoCegR6jSNica50oOUsM+3rakxRlEielSsJmdmJ8BahJfug8JZ0cFp2i0ivU6D9Lb S3PCvGhFag== ) ;; { "EDNS-VERSION": 0 }
	espresso.coffee.co.uk is authoritative for coffee.co.uk
	Found RRSIG signed by coffee.co.uk zone
	Query to espresso.coffee.co.uk for coffee.co.uk/A
	coffee.co.uk A RR has value 82.68.85.107
	Found 1 RRSIGs over A RRset
	`coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20260627091642 20260613082654 42 coffee.co.uk. wTR8G0TIt5MtdjQd+an03tGoAi69Rr4asXzSZX/7TrRcsiCLHo6JUBIKXvihbEQJ4ICCdViaLuAl PD/AKllI4g== )`
	RRSIG=42 and DNSKEY=42 verifies the A RRset

coffee.co.uk

No response from coffee.co.uk nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test coffee.co.uk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: