DNSSEC Debugger - coffee.co.uk

Domain Name:

Time: 2025-10-27 06:14:32 UTC

Analyzing DNSSEC problems for coffee.co.uk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1139 octets ;; HEADER SECTION ;; id = 37972 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251111000000 20251021000000 20326 . qu+HIDWi0ILo1qOR9j+Z8KZsBjm3N+xbTPm0UrqtVgtDmcuA0BF/m4zEQ/Wf32rCnGxW2tlrw0lq Lqpf/+1UtsfFhNCp6c88XVI19sLyeJwgAK0dYjZtSzObkArDsU9YHmKfB8ai18AN4XHD6Op1G5Io RJsNYsAyWg6GOkuaFspxV9L+ddDhjRhCmDKl3vHcRc9PscgwI47Y5hJgucB0uVbK1XbiQmAg8qqB 0YiVdyWknzL3VYkbdpyMYTlBXuLY9cW2bWrclP6nAnLNJ2BuyXBKOKXYvPCLEeu6hkmBJc6twAJK rGtEZaETWnYUFUgUj3bQHKYLgInclkXIEtF7gQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251111000000 20251021000000 20326 . qu+HIDWi0ILo1qOR9j+Z8KZsBjm3N+xbTPm0UrqtVgtDmcuA0BF/m4zEQ/Wf32rCnGxW2tlrw0lq Lqpf/+1UtsfFhNCp6c88XVI19sLyeJwgAK0dYjZtSzObkArDsU9YHmKfB8ai18AN4XHD6Op1G5Io RJsNYsAyWg6GOkuaFspxV9L+ddDhjRhCmDKl3vHcRc9PscgwI47Y5hJgucB0uVbK1XbiQmAg8qqB 0YiVdyWknzL3VYkbdpyMYTlBXuLY9cW2bWrclP6nAnLNJ2BuyXBKOKXYvPCLEeu6hkmBJc6twAJK rGtEZaETWnYUFUgUj3bQHKYLgInclkXIEtF7gQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to h.root-servers.net for coffee.co.uk/A
	Received 880 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 880 octets ;; HEADER SECTION ;; id = 47696 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20251108170000 20251026160000 61809 . NsAW0rtUeDrY+3EJystW6LnQKpN36NkipQoZkx2h69ohOZbogrAIkSlMGYBrYo0o4qocWNCkA0da jiMyKyw5AlPSAcxhD6htSHiHF5O+/H4oiGXmq8Fsdg+IEgg66WJjBGmxkiMt5gMRO67L1Tjd5B6p 4AEeKpjEtZkXgtiUHMGH40btzxzwPrUrcbl2OREQLuDF7DEqXX98nWCjzLB/MnTsMx7IDk10rAp0 5K32ErdMufndehKsdd564mQp3hYG0VJf5G+jl0s6sARwsv4bOWOjWdZEPa39jMKqB6UWqMzskT+s gpX2/7UdQ2hZ2gOKg9AAmLKD4d0SFxfqxLe+JA== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsd.nic.uk. 172800 IN A 156.154.103.3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns4.nic.uk. 172800 IN A 43.230.48.1 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for uk/DNSKEY
	Received 870 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 870 octets ;; HEADER SECTION ;; id = 63793 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20251108170000 20251026160000 61809 . NsAW0rtUeDrY+3EJystW6LnQKpN36NkipQoZkx2h69ohOZbogrAIkSlMGYBrYo0o4qocWNCkA0da jiMyKyw5AlPSAcxhD6htSHiHF5O+/H4oiGXmq8Fsdg+IEgg66WJjBGmxkiMt5gMRO67L1Tjd5B6p 4AEeKpjEtZkXgtiUHMGH40btzxzwPrUrcbl2OREQLuDF7DEqXX98nWCjzLB/MnTsMx7IDk10rAp0 5K32ErdMufndehKsdd564mQp3hYG0VJf5G+jl0s6sARwsv4bOWOjWdZEPa39jMKqB6UWqMzskT+s gpX2/7UdQ2hZ2gOKg9AAmLKD4d0SFxfqxLe+JA== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN A 156.154.103.3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN A 43.230.48.1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Found child zone uk

	Checking DS between . and uk
	Query to m.root-servers.net for uk/DS
	Received 366 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 366 octets ;; HEADER SECTION ;; id = 31343 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DS ;; ANSWER SECTION (2 records) uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20251108170000 20251026160000 61809 . NsAW0rtUeDrY+3EJystW6LnQKpN36NkipQoZkx2h69ohOZbogrAIkSlMGYBrYo0o4qocWNCkA0da jiMyKyw5AlPSAcxhD6htSHiHF5O+/H4oiGXmq8Fsdg+IEgg66WJjBGmxkiMt5gMRO67L1Tjd5B6p 4AEeKpjEtZkXgtiUHMGH40btzxzwPrUrcbl2OREQLuDF7DEqXX98nWCjzLB/MnTsMx7IDk10rAp0 5K32ErdMufndehKsdd564mQp3hYG0VJf5G+jl0s6sARwsv4bOWOjWdZEPa39jMKqB6UWqMzskT+s gpX2/7UdQ2hZ2gOKg9AAmLKD4d0SFxfqxLe+JA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for uk in the . zone
	DS=43876/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uk. 86400 IN RRSIG ( DS 8 1 86400 20251108170000 20251026160000 61809 . NsAW0rtUeDrY+3EJystW6LnQKpN36NkipQoZkx2h69ohOZbogrAIkSlMGYBrYo0o4qocWNCkA0da jiMyKyw5AlPSAcxhD6htSHiHF5O+/H4oiGXmq8Fsdg+IEgg66WJjBGmxkiMt5gMRO67L1Tjd5B6p 4AEeKpjEtZkXgtiUHMGH40btzxzwPrUrcbl2OREQLuDF7DEqXX98nWCjzLB/MnTsMx7IDk10rAp0 5K32ErdMufndehKsdd564mQp3hYG0VJf5G+jl0s6sARwsv4bOWOjWdZEPa39jMKqB6UWqMzskT+s gpX2/7UdQ2hZ2gOKg9AAmLKD4d0SFxfqxLe+JA== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=43876/SHA-256 is now in the chain-of-trust
	`uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 )`
	Query to dns4.nic.uk for uk/DNSKEY
	Received 745 bytes from 43.230.48.1
	;; Response received from [43.230.48.1] 745 octets ;; HEADER SECTION ;; id = 32829 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (3 records) uk. 3600 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056 uk. 3600 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876 uk. 3600 IN RRSIG ( DNSKEY 8 1 3600 20251124110617 20251020110513 43876 uk. EbskKka7qrNU+SXrMPh+Kq6Vm2Ko72GP6WvEayYgN9PGqOrEIRALNAc22C9Xu/xuI4Vcv2SI3iI5 MY/ZQbIRoTEV6zsscj5xQEu45J2Clu4eQkBb3SiMeX/2zOlHKSriK/pmHNFHsASiILwVJZdN7fwK 6ZPR3SqDEq4zwxLn2ps7IYHFMmk99rEpcYWF+wVoT1LxC/JyiMV9UiwNsRqMUAkA5r/wf1kOXvs+ x7wXC0fTegnARDa//jeCSjZ7rIto7aPl/32XZdsd8WMeaIV5wLPzb2PR7owxcM0rsOQtdDRHPdke ghSAIECrdN5R+4YyErm293X1bV/hznWZsSOtGg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for uk
	`uk. 3600 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056`
	`uk. 3600 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876`
	DNSKEY=43876/SEP is now in the chain-of-trust
	DS=43876/SHA-256 verifies DNSKEY=43876/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`uk. 3600 IN RRSIG ( DNSKEY 8 1 3600 20251124110617 20251020110513 43876 uk. EbskKka7qrNU+SXrMPh+Kq6Vm2Ko72GP6WvEayYgN9PGqOrEIRALNAc22C9Xu/xuI4Vcv2SI3iI5 MY/ZQbIRoTEV6zsscj5xQEu45J2Clu4eQkBb3SiMeX/2zOlHKSriK/pmHNFHsASiILwVJZdN7fwK 6ZPR3SqDEq4zwxLn2ps7IYHFMmk99rEpcYWF+wVoT1LxC/JyiMV9UiwNsRqMUAkA5r/wf1kOXvs+ x7wXC0fTegnARDa//jeCSjZ7rIto7aPl/32XZdsd8WMeaIV5wLPzb2PR7owxcM0rsOQtdDRHPdke ghSAIECrdN5R+4YyErm293X1bV/hznWZsSOtGg== )`
	RRSIG=43876 and DNSKEY=43876/SEP verifies the DNSKEY RRset
	DNSKEY=43056 is now in the chain-of-trust
	Query to nsa.nic.uk for coffee.co.uk/A
	Received 409 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 409 octets ;; HEADER SECTION ;; id = 3983 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) coffee.co.uk. 172800 IN NS santos.coffee.co.uk. coffee.co.uk. 172800 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 172800 IN NS espresso.coffee.co.uk. coffee.co.uk. 172800 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20251201015304 20251027005749 33621 co.uk. GSXVNwmKsVIMajmsVNmY7DymSYQLB5Q1owx7jKDLBxFJQet1wWKgD0QcIhas40FsDOTPVkcXInEw TVe0jPa8jSkC6CCq78WBx2cOi3YTq+O9E54DR2EIqtzFf7f0X4vCvCZrfyI0lmKZu4qI9S70HXlj yJNCGKCBXttWptwtPzY= ) ;; ADDITIONAL SECTION (5 records) cafetiere.coffee.co.uk. 172800 IN A 77.206.90.34 espresso.coffee.co.uk. 172800 IN A 82.68.85.106 colombia.coffee.co.uk. 172800 IN A 82.68.85.107 santos.coffee.co.uk. 172800 IN A 82.69.101.65 ;; { "EDNS-VERSION": 0 }
	Query to dns1.nic.uk for co.uk/DNSKEY
	Received 899 bytes from 213.248.216.1
	;; Response received from [213.248.216.1] 899 octets ;; HEADER SECTION ;; id = 7826 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (4 records) co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAcf+56ydE3WHB5vn1UxYBXJJXBlJfHlS/MWEVn+8KVJyED0iNLvSEvSr47VeBnp7e53TbVQS 1pLMGaL/Upq4Hb70kY8LrlPOG9b7Guhbm7jRaosC6PETNPQ1aoNrZtAagRJQX3Jzh3o+xjQwTcUx LsQ97j/hB3zZtFuZOw6+8uLL ) ; keytag 33621 co.uk. 300 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810 co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346 co.uk. 300 IN RRSIG ( DNSKEY 8 2 300 20251126130237 20251022122902 33621 co.uk. OJiGl3brtkpVNPlGyGJ5akDsUyhT0uYRdQ4+/FfQCSiNMhAVxMI3Jgdmjx25lJj/9i45BrZJgfg4 PtVlHnwGfcI/foyAcMBmZo42U2NFY5eESPnv2oxXztxaM4pF+VO1aSxJvacwrSYoSReAntJf/nzY 1UvdLxjld5LRJgEowZQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone co.uk
	Attempting to learn nameservers for co.uk
	Query to dns3.nic.uk for co.uk/NS
	Received 351 bytes from 213.248.220.1
	;; Response received from [213.248.220.1] 351 octets ;; HEADER SECTION ;; id = 61531 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 9 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN NS ;; ANSWER SECTION (9 records) co.uk. 172800 IN NS nsa.nic.uk. co.uk. 172800 IN NS nsb.nic.uk. co.uk. 172800 IN NS nsc.nic.uk. co.uk. 172800 IN NS nsd.nic.uk. co.uk. 172800 IN NS dns1.nic.uk. co.uk. 172800 IN NS dns2.nic.uk. co.uk. 172800 IN NS dns3.nic.uk. co.uk. 172800 IN NS dns4.nic.uk. co.uk. 172800 IN RRSIG ( NS 8 2 172800 20251130211556 20251026210652 33621 co.uk. ErCd8GL3vNTQaO5Rdu+0KX/6cwoJw7r8XRC50FWDjAwg1lS1zHF/iClBOTwWPmkcvwPKPbteFSwl +h8KeH+wfjX9S+TohJeoBke4xjTQ0UqEhKJhTFkj5c1z7+W2L3k4s6VYUUZwEQWas/TUIH+m3aS3 PgiFsp+xMCo8K12IAJE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found co.uk nameservers: nsa.nic.uk, nsb.nic.uk, nsc.nic.uk, nsd.nic.uk, dns1.nic.uk, dns2.nic.uk, dns3.nic.uk, dns4.nic.uk

co.uk

	Checking DS between uk and co.uk
	Query to dns4.nic.uk for co.uk/DS
	Received 292 bytes from 43.230.48.1
	;; Response received from [43.230.48.1] 292 octets ;; HEADER SECTION ;; id = 39931 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DS ;; ANSWER SECTION (3 records) co.uk. 300 IN DS ( 33621 8 2 b9199d8b7fca7107d78c418d1d1bc9e9fe9d9b9b187bd13c96dc4b6582425cd8 ) co.uk. 300 IN DS ( 11810 8 2 1df4681bdacc3e6296ac7667c42ca33cb57efbc2005ce23064f15fbffa286ff5 ) co.uk. 300 IN RRSIG ( DS 8 2 300 20251127123427 20251023113544 43056 uk. L7peee97jCwddUGWSJEY5YwU0rbVU5k34uTFVkVJm39SDo+HyzLDvZ1W9NrhHpzyQsrO0+1/b2nX 7HHTXeSl2kalzH8sKrF91tCfJ1IIihW6Fgv1R9ES7qbdE9uMIap4AaK/Vge0D+wPrpHq5PlDgIwI ndwbw/Yid/Og5xDyxnE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for co.uk in the uk zone
	DS=33621/SHA-256 has algorithm RSASHA256
	DS=11810/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co.uk. 300 IN RRSIG ( DS 8 2 300 20251127123427 20251023113544 43056 uk. L7peee97jCwddUGWSJEY5YwU0rbVU5k34uTFVkVJm39SDo+HyzLDvZ1W9NrhHpzyQsrO0+1/b2nX 7HHTXeSl2kalzH8sKrF91tCfJ1IIihW6Fgv1R9ES7qbdE9uMIap4AaK/Vge0D+wPrpHq5PlDgIwI ndwbw/Yid/Og5xDyxnE= )`
	RRSIG=43056 and DNSKEY=43056 verifies the DS RRset
	DS=33621/SHA-256 is now in the chain-of-trust
	DS=11810/SHA-256 is now in the chain-of-trust
	`co.uk. 300 IN DS ( 33621 8 2 b9199d8b7fca7107d78c418d1d1bc9e9fe9d9b9b187bd13c96dc4b6582425cd8 )`
	`co.uk. 300 IN DS ( 11810 8 2 1df4681bdacc3e6296ac7667c42ca33cb57efbc2005ce23064f15fbffa286ff5 )`
	Query to dns3.nic.uk for co.uk/DNSKEY
	Received 899 bytes from 213.248.220.1
	;; Response received from [213.248.220.1] 899 octets ;; HEADER SECTION ;; id = 52123 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (4 records) co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAcf+56ydE3WHB5vn1UxYBXJJXBlJfHlS/MWEVn+8KVJyED0iNLvSEvSr47VeBnp7e53TbVQS 1pLMGaL/Upq4Hb70kY8LrlPOG9b7Guhbm7jRaosC6PETNPQ1aoNrZtAagRJQX3Jzh3o+xjQwTcUx LsQ97j/hB3zZtFuZOw6+8uLL ) ; keytag 33621 co.uk. 300 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810 co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346 co.uk. 300 IN RRSIG ( DNSKEY 8 2 300 20251126130237 20251022122902 33621 co.uk. OJiGl3brtkpVNPlGyGJ5akDsUyhT0uYRdQ4+/FfQCSiNMhAVxMI3Jgdmjx25lJj/9i45BrZJgfg4 PtVlHnwGfcI/foyAcMBmZo42U2NFY5eESPnv2oxXztxaM4pF+VO1aSxJvacwrSYoSReAntJf/nzY 1UvdLxjld5LRJgEowZQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for co.uk
	`co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAcf+56ydE3WHB5vn1UxYBXJJXBlJfHlS/MWEVn+8KVJyED0iNLvSEvSr47VeBnp7e53TbVQS 1pLMGaL/Upq4Hb70kY8LrlPOG9b7Guhbm7jRaosC6PETNPQ1aoNrZtAagRJQX3Jzh3o+xjQwTcUx LsQ97j/hB3zZtFuZOw6+8uLL ) ; keytag 33621`
	`co.uk. 300 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810`
	`co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346`
	DNSKEY=33621 is now in the chain-of-trust
	DS=33621/SHA-256 verifies DNSKEY=33621
	DNSKEY=11810/SEP is now in the chain-of-trust
	DS=11810/SHA-256 verifies DNSKEY=11810/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`co.uk. 300 IN RRSIG ( DNSKEY 8 2 300 20251126130237 20251022122902 33621 co.uk. OJiGl3brtkpVNPlGyGJ5akDsUyhT0uYRdQ4+/FfQCSiNMhAVxMI3Jgdmjx25lJj/9i45BrZJgfg4 PtVlHnwGfcI/foyAcMBmZo42U2NFY5eESPnv2oxXztxaM4pF+VO1aSxJvacwrSYoSReAntJf/nzY 1UvdLxjld5LRJgEowZQ= )`
	RRSIG=33621 and DNSKEY=33621 verifies the DNSKEY RRset
	DNSKEY=44346 is now in the chain-of-trust
	Query to nsa.nic.uk for coffee.co.uk/A
	Received 409 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 409 octets ;; HEADER SECTION ;; id = 56468 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) coffee.co.uk. 172800 IN NS espresso.coffee.co.uk. coffee.co.uk. 172800 IN NS colombia.coffee.co.uk. coffee.co.uk. 172800 IN NS santos.coffee.co.uk. coffee.co.uk. 172800 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20251201015304 20251027005749 33621 co.uk. GSXVNwmKsVIMajmsVNmY7DymSYQLB5Q1owx7jKDLBxFJQet1wWKgD0QcIhas40FsDOTPVkcXInEw TVe0jPa8jSkC6CCq78WBx2cOi3YTq+O9E54DR2EIqtzFf7f0X4vCvCZrfyI0lmKZu4qI9S70HXlj yJNCGKCBXttWptwtPzY= ) ;; ADDITIONAL SECTION (5 records) cafetiere.coffee.co.uk. 172800 IN A 77.206.90.34 espresso.coffee.co.uk. 172800 IN A 82.68.85.106 colombia.coffee.co.uk. 172800 IN A 82.68.85.107 santos.coffee.co.uk. 172800 IN A 82.69.101.65 ;; { "EDNS-VERSION": 0 }
	Query to dns2.nic.uk for coffee.co.uk/DNSKEY
	Received 409 bytes from 103.49.80.1
	;; Response received from [103.49.80.1] 409 octets ;; HEADER SECTION ;; id = 34135 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) coffee.co.uk. 172800 IN NS santos.coffee.co.uk. coffee.co.uk. 172800 IN NS colombia.coffee.co.uk. coffee.co.uk. 172800 IN NS espresso.coffee.co.uk. coffee.co.uk. 172800 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20251201015304 20251027005749 33621 co.uk. GSXVNwmKsVIMajmsVNmY7DymSYQLB5Q1owx7jKDLBxFJQet1wWKgD0QcIhas40FsDOTPVkcXInEw TVe0jPa8jSkC6CCq78WBx2cOi3YTq+O9E54DR2EIqtzFf7f0X4vCvCZrfyI0lmKZu4qI9S70HXlj yJNCGKCBXttWptwtPzY= ) ;; ADDITIONAL SECTION (5 records) santos.coffee.co.uk. 172800 IN A 82.69.101.65 colombia.coffee.co.uk. 172800 IN A 82.68.85.107 espresso.coffee.co.uk. 172800 IN A 82.68.85.106 cafetiere.coffee.co.uk. 172800 IN A 77.206.90.34 ;; { "EDNS-VERSION": 0 }
	Found child zone coffee.co.uk

coffee.co.uk

	Checking DS between co.uk and coffee.co.uk
	Query to nsc.nic.uk for coffee.co.uk/DS
	Received 254 bytes from 156.154.102.3
	;; Response received from [156.154.102.3] 254 octets ;; HEADER SECTION ;; id = 59730 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN DS ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20251201015304 20251027005749 33621 co.uk. GSXVNwmKsVIMajmsVNmY7DymSYQLB5Q1owx7jKDLBxFJQet1wWKgD0QcIhas40FsDOTPVkcXInEw TVe0jPa8jSkC6CCq78WBx2cOi3YTq+O9E54DR2EIqtzFf7f0X4vCvCZrfyI0lmKZu4qI9S70HXlj yJNCGKCBXttWptwtPzY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for coffee.co.uk in the co.uk zone
	DS=37040/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20251201015304 20251027005749 33621 co.uk. GSXVNwmKsVIMajmsVNmY7DymSYQLB5Q1owx7jKDLBxFJQet1wWKgD0QcIhas40FsDOTPVkcXInEw TVe0jPa8jSkC6CCq78WBx2cOi3YTq+O9E54DR2EIqtzFf7f0X4vCvCZrfyI0lmKZu4qI9S70HXlj yJNCGKCBXttWptwtPzY= )`
	RRSIG=33621 and DNSKEY=33621 verifies the DS RRset
	DS=37040/SHA-256 is now in the chain-of-trust
	`coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 )`
	Query to espresso.coffee.co.uk for coffee.co.uk/DNSKEY
	Received 309 bytes from 82.68.85.106
	;; Response received from [82.68.85.106] 309 octets ;; HEADER SECTION ;; id = 8613 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN DNSKEY ;; ANSWER SECTION (3 records) coffee.co.uk. 3600 IN DNSKEY ( 256 3 13 8lhNjPIpOUkZZ8xQ7IT27K9g2XJQVo2wU8mvqP8ULNMg0GaQLiewBYw2ialySomBva8vSah3IKjA ExZFdEiAgw== ) ; keytag 51002 coffee.co.uk. 3600 IN DNSKEY ( 257 3 13 Xb29U0H6bcwScx/mZ6NWrsVXnmiXbFzbz0eItEoOPAv7pl2hYa8J60hPhQhQOAGBhrVgW7DQ+BtS E4AfrD2onw== ) ; keytag 37040 coffee.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20251113031608 20251014025708 37040 coffee.co.uk. 0u70HTXjyA/trc4ErjnYZq49tAnmPdeWdcBD8YLa7JXzMXAihiccG7qluYLtKLMdr8GsoCch3dbw 4X9eHApVaQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for coffee.co.uk
	`coffee.co.uk. 3600 IN DNSKEY ( 256 3 13 8lhNjPIpOUkZZ8xQ7IT27K9g2XJQVo2wU8mvqP8ULNMg0GaQLiewBYw2ialySomBva8vSah3IKjA ExZFdEiAgw== ) ; keytag 51002`
	`coffee.co.uk. 3600 IN DNSKEY ( 257 3 13 Xb29U0H6bcwScx/mZ6NWrsVXnmiXbFzbz0eItEoOPAv7pl2hYa8J60hPhQhQOAGBhrVgW7DQ+BtS E4AfrD2onw== ) ; keytag 37040`
	DNSKEY=37040/SEP is now in the chain-of-trust
	DS=37040/SHA-256 verifies DNSKEY=37040/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`coffee.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20251113031608 20251014025708 37040 coffee.co.uk. 0u70HTXjyA/trc4ErjnYZq49tAnmPdeWdcBD8YLa7JXzMXAihiccG7qluYLtKLMdr8GsoCch3dbw 4X9eHApVaQ== )`
	RRSIG=37040 and DNSKEY=37040/SEP verifies the DNSKEY RRset
	DNSKEY=51002 is now in the chain-of-trust
	Query to colombia.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.68.85.107
	;; Response received from [82.68.85.107] 860 octets ;; HEADER SECTION ;; id = 26589 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20251104035126 20251005032429 51002 coffee.co.uk. NjfBWomvkhJc7ihUUJgeFDaRoE3DGJ+mNtv8D1pRVRd/8xJiuKJoy53heVpYY96LOomyoReVxpxy pEBTr3Ieqg== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20251107194824 20251008191220 51002 coffee.co.uk. HTiFTset2iie8cwYKvfoAPGchh72VdlCiPb+WZB4aTuwV3hiW+C3Ri5dyFnvabSVUZL4o3/1CIgG aYEMGrAOrQ== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251115155029 20251016151445 51002 coffee.co.uk. RYJYPcHH1wCzNMW2AFh5SJHEbY2YYYOupE+K0AqoOHA0qeiDI7NGOfKorQHro30tKFlKW+FGpR85 hVbD3fgoQA== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251118091952 20251019083515 51002 coffee.co.uk. BAxgfxxRQfCItkdSh0v5LCKaptIfyM1g24LQM2tepYkJkvSaK/ITk31r41HihqK0T4MMGlyuY+Fa +YLLAMy++g== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251107194824 20251008191220 51002 coffee.co.uk. giCvK2/QB+yR+nrrPzPFCLUhQJ30F/PbsEcQeyqmaT/tNIYSYk7gsQqSS2fuj9MKeZLzQ92kGm45 wBxfz22ppw== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251112014300 20251013012818 51002 coffee.co.uk. SeOfkKAMDbgp1pOHKNxPQvlhBSzr9apDahEkB2AfYyc4OIOJ9SHacYMmCMBAVemBqXnEB1OJO2VP SbYTSIv8yQ== ) ;; { "EDNS-VERSION": 0 }
	colombia.coffee.co.uk is authoritative for coffee.co.uk
	Found RRSIG signed by coffee.co.uk zone
	Query to espresso.coffee.co.uk for coffee.co.uk/SOA
	Received 889 bytes from 82.68.85.106
	;; Response received from [82.68.85.106] 889 octets ;; HEADER SECTION ;; id = 25546 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN SOA ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN SOA ( colombia.coffee.co.uk. dnsadmin.coffee.co.uk. 2024102642 ;serial 86400 ;refresh 7200 ;retry 3600000 ;expire 10800 ;minimum ) coffee.co.uk. 3600 IN RRSIG ( SOA 13 3 3600 20251123175604 20251024165604 51002 coffee.co.uk. Pl8ZG+bg7oxUCMemTWWme0MiheBhIEUlDFGDAEWPZ5wZAAyrKsWXnlNeufPAK7rIfA9tJAp+3uhz j4LyWQ/EFg== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20251107194824 20251008191220 51002 coffee.co.uk. HTiFTset2iie8cwYKvfoAPGchh72VdlCiPb+WZB4aTuwV3hiW+C3Ri5dyFnvabSVUZL4o3/1CIgG aYEMGrAOrQ== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251115155029 20251016151445 51002 coffee.co.uk. RYJYPcHH1wCzNMW2AFh5SJHEbY2YYYOupE+K0AqoOHA0qeiDI7NGOfKorQHro30tKFlKW+FGpR85 hVbD3fgoQA== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251118091952 20251019083515 51002 coffee.co.uk. BAxgfxxRQfCItkdSh0v5LCKaptIfyM1g24LQM2tepYkJkvSaK/ITk31r41HihqK0T4MMGlyuY+Fa +YLLAMy++g== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251107194824 20251008191220 51002 coffee.co.uk. giCvK2/QB+yR+nrrPzPFCLUhQJ30F/PbsEcQeyqmaT/tNIYSYk7gsQqSS2fuj9MKeZLzQ92kGm45 wBxfz22ppw== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251112014300 20251013012818 51002 coffee.co.uk. SeOfkKAMDbgp1pOHKNxPQvlhBSzr9apDahEkB2AfYyc4OIOJ9SHacYMmCMBAVemBqXnEB1OJO2VP SbYTSIv8yQ== ) ;; { "EDNS-VERSION": 0 }
	Query to santos.coffee.co.uk for coffee.co.uk/SOA
	Received 889 bytes from 82.69.101.65
	;; Response received from [82.69.101.65] 889 octets ;; HEADER SECTION ;; id = 10043 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN SOA ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN SOA ( colombia.coffee.co.uk. dnsadmin.coffee.co.uk. 2024102642 ;serial 86400 ;refresh 7200 ;retry 3600000 ;expire 10800 ;minimum ) coffee.co.uk. 3600 IN RRSIG ( SOA 13 3 3600 20251123175604 20251024165604 51002 coffee.co.uk. Pl8ZG+bg7oxUCMemTWWme0MiheBhIEUlDFGDAEWPZ5wZAAyrKsWXnlNeufPAK7rIfA9tJAp+3uhz j4LyWQ/EFg== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20251107194824 20251008191220 51002 coffee.co.uk. HTiFTset2iie8cwYKvfoAPGchh72VdlCiPb+WZB4aTuwV3hiW+C3Ri5dyFnvabSVUZL4o3/1CIgG aYEMGrAOrQ== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251115155029 20251016151445 51002 coffee.co.uk. RYJYPcHH1wCzNMW2AFh5SJHEbY2YYYOupE+K0AqoOHA0qeiDI7NGOfKorQHro30tKFlKW+FGpR85 hVbD3fgoQA== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251118091952 20251019083515 51002 coffee.co.uk. BAxgfxxRQfCItkdSh0v5LCKaptIfyM1g24LQM2tepYkJkvSaK/ITk31r41HihqK0T4MMGlyuY+Fa +YLLAMy++g== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251107194824 20251008191220 51002 coffee.co.uk. giCvK2/QB+yR+nrrPzPFCLUhQJ30F/PbsEcQeyqmaT/tNIYSYk7gsQqSS2fuj9MKeZLzQ92kGm45 wBxfz22ppw== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251112014300 20251013012818 51002 coffee.co.uk. SeOfkKAMDbgp1pOHKNxPQvlhBSzr9apDahEkB2AfYyc4OIOJ9SHacYMmCMBAVemBqXnEB1OJO2VP SbYTSIv8yQ== ) ;; { "EDNS-VERSION": 0 }
	Query to cafetiere.coffee.co.uk for coffee.co.uk/SOA
	Received 889 bytes from 77.206.90.34
	;; Response received from [77.206.90.34] 889 octets ;; HEADER SECTION ;; id = 21200 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN SOA ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN SOA ( colombia.coffee.co.uk. dnsadmin.coffee.co.uk. 2024102642 ;serial 86400 ;refresh 7200 ;retry 3600000 ;expire 10800 ;minimum ) coffee.co.uk. 3600 IN RRSIG ( SOA 13 3 3600 20251123175604 20251024165604 51002 coffee.co.uk. Pl8ZG+bg7oxUCMemTWWme0MiheBhIEUlDFGDAEWPZ5wZAAyrKsWXnlNeufPAK7rIfA9tJAp+3uhz j4LyWQ/EFg== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20251107194824 20251008191220 51002 coffee.co.uk. HTiFTset2iie8cwYKvfoAPGchh72VdlCiPb+WZB4aTuwV3hiW+C3Ri5dyFnvabSVUZL4o3/1CIgG aYEMGrAOrQ== ) ;; ADDITIONAL SECTION (9 records) santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251112014300 20251013012818 51002 coffee.co.uk. SeOfkKAMDbgp1pOHKNxPQvlhBSzr9apDahEkB2AfYyc4OIOJ9SHacYMmCMBAVemBqXnEB1OJO2VP SbYTSIv8yQ== ) colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251115155029 20251016151445 51002 coffee.co.uk. RYJYPcHH1wCzNMW2AFh5SJHEbY2YYYOupE+K0AqoOHA0qeiDI7NGOfKorQHro30tKFlKW+FGpR85 hVbD3fgoQA== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251118091952 20251019083515 51002 coffee.co.uk. BAxgfxxRQfCItkdSh0v5LCKaptIfyM1g24LQM2tepYkJkvSaK/ITk31r41HihqK0T4MMGlyuY+Fa +YLLAMy++g== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251107194824 20251008191220 51002 coffee.co.uk. giCvK2/QB+yR+nrrPzPFCLUhQJ30F/PbsEcQeyqmaT/tNIYSYk7gsQqSS2fuj9MKeZLzQ92kGm45 wBxfz22ppw== ) ;; { "EDNS-VERSION": 0 }
	Query to colombia.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.68.85.107
	;; Response received from [82.68.85.107] 860 octets ;; HEADER SECTION ;; id = 61569 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20251104035126 20251005032429 51002 coffee.co.uk. NjfBWomvkhJc7ihUUJgeFDaRoE3DGJ+mNtv8D1pRVRd/8xJiuKJoy53heVpYY96LOomyoReVxpxy pEBTr3Ieqg== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20251107194824 20251008191220 51002 coffee.co.uk. HTiFTset2iie8cwYKvfoAPGchh72VdlCiPb+WZB4aTuwV3hiW+C3Ri5dyFnvabSVUZL4o3/1CIgG aYEMGrAOrQ== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251115155029 20251016151445 51002 coffee.co.uk. RYJYPcHH1wCzNMW2AFh5SJHEbY2YYYOupE+K0AqoOHA0qeiDI7NGOfKorQHro30tKFlKW+FGpR85 hVbD3fgoQA== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251118091952 20251019083515 51002 coffee.co.uk. BAxgfxxRQfCItkdSh0v5LCKaptIfyM1g24LQM2tepYkJkvSaK/ITk31r41HihqK0T4MMGlyuY+Fa +YLLAMy++g== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251107194824 20251008191220 51002 coffee.co.uk. giCvK2/QB+yR+nrrPzPFCLUhQJ30F/PbsEcQeyqmaT/tNIYSYk7gsQqSS2fuj9MKeZLzQ92kGm45 wBxfz22ppw== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251112014300 20251013012818 51002 coffee.co.uk. SeOfkKAMDbgp1pOHKNxPQvlhBSzr9apDahEkB2AfYyc4OIOJ9SHacYMmCMBAVemBqXnEB1OJO2VP SbYTSIv8yQ== ) ;; { "EDNS-VERSION": 0 }
	coffee.co.uk A RR has value 82.68.85.107
	Found 1 RRSIGs over A RRset
	`coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20251104035126 20251005032429 51002 coffee.co.uk. NjfBWomvkhJc7ihUUJgeFDaRoE3DGJ+mNtv8D1pRVRd/8xJiuKJoy53heVpYY96LOomyoReVxpxy pEBTr3Ieqg== )`
	RRSIG=51002 and DNSKEY=51002 verifies the A RRset

coffee.co.uk

	Query to espresso.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.68.85.106
	;; Response received from [82.68.85.106] 860 octets ;; HEADER SECTION ;; id = 27758 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20251104035126 20251005032429 51002 coffee.co.uk. NjfBWomvkhJc7ihUUJgeFDaRoE3DGJ+mNtv8D1pRVRd/8xJiuKJoy53heVpYY96LOomyoReVxpxy pEBTr3Ieqg== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20251107194824 20251008191220 51002 coffee.co.uk. HTiFTset2iie8cwYKvfoAPGchh72VdlCiPb+WZB4aTuwV3hiW+C3Ri5dyFnvabSVUZL4o3/1CIgG aYEMGrAOrQ== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251115155029 20251016151445 51002 coffee.co.uk. RYJYPcHH1wCzNMW2AFh5SJHEbY2YYYOupE+K0AqoOHA0qeiDI7NGOfKorQHro30tKFlKW+FGpR85 hVbD3fgoQA== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251118091952 20251019083515 51002 coffee.co.uk. BAxgfxxRQfCItkdSh0v5LCKaptIfyM1g24LQM2tepYkJkvSaK/ITk31r41HihqK0T4MMGlyuY+Fa +YLLAMy++g== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251107194824 20251008191220 51002 coffee.co.uk. giCvK2/QB+yR+nrrPzPFCLUhQJ30F/PbsEcQeyqmaT/tNIYSYk7gsQqSS2fuj9MKeZLzQ92kGm45 wBxfz22ppw== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251112014300 20251013012818 51002 coffee.co.uk. SeOfkKAMDbgp1pOHKNxPQvlhBSzr9apDahEkB2AfYyc4OIOJ9SHacYMmCMBAVemBqXnEB1OJO2VP SbYTSIv8yQ== ) ;; { "EDNS-VERSION": 0 }
	espresso.coffee.co.uk is authoritative for coffee.co.uk
	Found RRSIG signed by coffee.co.uk zone
	Query to espresso.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.68.85.106
	;; Response received from [82.68.85.106] 860 octets ;; HEADER SECTION ;; id = 2436 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20251104035126 20251005032429 51002 coffee.co.uk. NjfBWomvkhJc7ihUUJgeFDaRoE3DGJ+mNtv8D1pRVRd/8xJiuKJoy53heVpYY96LOomyoReVxpxy pEBTr3Ieqg== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20251107194824 20251008191220 51002 coffee.co.uk. HTiFTset2iie8cwYKvfoAPGchh72VdlCiPb+WZB4aTuwV3hiW+C3Ri5dyFnvabSVUZL4o3/1CIgG aYEMGrAOrQ== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251115155029 20251016151445 51002 coffee.co.uk. RYJYPcHH1wCzNMW2AFh5SJHEbY2YYYOupE+K0AqoOHA0qeiDI7NGOfKorQHro30tKFlKW+FGpR85 hVbD3fgoQA== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251118091952 20251019083515 51002 coffee.co.uk. BAxgfxxRQfCItkdSh0v5LCKaptIfyM1g24LQM2tepYkJkvSaK/ITk31r41HihqK0T4MMGlyuY+Fa +YLLAMy++g== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251107194824 20251008191220 51002 coffee.co.uk. giCvK2/QB+yR+nrrPzPFCLUhQJ30F/PbsEcQeyqmaT/tNIYSYk7gsQqSS2fuj9MKeZLzQ92kGm45 wBxfz22ppw== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251112014300 20251013012818 51002 coffee.co.uk. SeOfkKAMDbgp1pOHKNxPQvlhBSzr9apDahEkB2AfYyc4OIOJ9SHacYMmCMBAVemBqXnEB1OJO2VP SbYTSIv8yQ== ) ;; { "EDNS-VERSION": 0 }
	coffee.co.uk A RR has value 82.68.85.107
	Found 1 RRSIGs over A RRset
	`coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20251104035126 20251005032429 51002 coffee.co.uk. NjfBWomvkhJc7ihUUJgeFDaRoE3DGJ+mNtv8D1pRVRd/8xJiuKJoy53heVpYY96LOomyoReVxpxy pEBTr3Ieqg== )`
	RRSIG=51002 and DNSKEY=51002 verifies the A RRset

coffee.co.uk

	Query to santos.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.69.101.65
	;; Response received from [82.69.101.65] 860 octets ;; HEADER SECTION ;; id = 48093 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20251104035126 20251005032429 51002 coffee.co.uk. NjfBWomvkhJc7ihUUJgeFDaRoE3DGJ+mNtv8D1pRVRd/8xJiuKJoy53heVpYY96LOomyoReVxpxy pEBTr3Ieqg== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20251107194824 20251008191220 51002 coffee.co.uk. HTiFTset2iie8cwYKvfoAPGchh72VdlCiPb+WZB4aTuwV3hiW+C3Ri5dyFnvabSVUZL4o3/1CIgG aYEMGrAOrQ== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251115155029 20251016151445 51002 coffee.co.uk. RYJYPcHH1wCzNMW2AFh5SJHEbY2YYYOupE+K0AqoOHA0qeiDI7NGOfKorQHro30tKFlKW+FGpR85 hVbD3fgoQA== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251118091952 20251019083515 51002 coffee.co.uk. BAxgfxxRQfCItkdSh0v5LCKaptIfyM1g24LQM2tepYkJkvSaK/ITk31r41HihqK0T4MMGlyuY+Fa +YLLAMy++g== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251107194824 20251008191220 51002 coffee.co.uk. giCvK2/QB+yR+nrrPzPFCLUhQJ30F/PbsEcQeyqmaT/tNIYSYk7gsQqSS2fuj9MKeZLzQ92kGm45 wBxfz22ppw== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251112014300 20251013012818 51002 coffee.co.uk. SeOfkKAMDbgp1pOHKNxPQvlhBSzr9apDahEkB2AfYyc4OIOJ9SHacYMmCMBAVemBqXnEB1OJO2VP SbYTSIv8yQ== ) ;; { "EDNS-VERSION": 0 }
	santos.coffee.co.uk is authoritative for coffee.co.uk
	Found RRSIG signed by coffee.co.uk zone
	Query to santos.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.69.101.65
	;; Response received from [82.69.101.65] 860 octets ;; HEADER SECTION ;; id = 24730 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20251104035126 20251005032429 51002 coffee.co.uk. NjfBWomvkhJc7ihUUJgeFDaRoE3DGJ+mNtv8D1pRVRd/8xJiuKJoy53heVpYY96LOomyoReVxpxy pEBTr3Ieqg== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20251107194824 20251008191220 51002 coffee.co.uk. HTiFTset2iie8cwYKvfoAPGchh72VdlCiPb+WZB4aTuwV3hiW+C3Ri5dyFnvabSVUZL4o3/1CIgG aYEMGrAOrQ== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251115155029 20251016151445 51002 coffee.co.uk. RYJYPcHH1wCzNMW2AFh5SJHEbY2YYYOupE+K0AqoOHA0qeiDI7NGOfKorQHro30tKFlKW+FGpR85 hVbD3fgoQA== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251118091952 20251019083515 51002 coffee.co.uk. BAxgfxxRQfCItkdSh0v5LCKaptIfyM1g24LQM2tepYkJkvSaK/ITk31r41HihqK0T4MMGlyuY+Fa +YLLAMy++g== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251107194824 20251008191220 51002 coffee.co.uk. giCvK2/QB+yR+nrrPzPFCLUhQJ30F/PbsEcQeyqmaT/tNIYSYk7gsQqSS2fuj9MKeZLzQ92kGm45 wBxfz22ppw== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251112014300 20251013012818 51002 coffee.co.uk. SeOfkKAMDbgp1pOHKNxPQvlhBSzr9apDahEkB2AfYyc4OIOJ9SHacYMmCMBAVemBqXnEB1OJO2VP SbYTSIv8yQ== ) ;; { "EDNS-VERSION": 0 }
	coffee.co.uk A RR has value 82.68.85.107
	Found 1 RRSIGs over A RRset
	`coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20251104035126 20251005032429 51002 coffee.co.uk. NjfBWomvkhJc7ihUUJgeFDaRoE3DGJ+mNtv8D1pRVRd/8xJiuKJoy53heVpYY96LOomyoReVxpxy pEBTr3Ieqg== )`
	RRSIG=51002 and DNSKEY=51002 verifies the A RRset

coffee.co.uk

	Query to cafetiere.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 77.206.90.34
	;; Response received from [77.206.90.34] 860 octets ;; HEADER SECTION ;; id = 39621 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20251104035126 20251005032429 51002 coffee.co.uk. NjfBWomvkhJc7ihUUJgeFDaRoE3DGJ+mNtv8D1pRVRd/8xJiuKJoy53heVpYY96LOomyoReVxpxy pEBTr3Ieqg== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20251107194824 20251008191220 51002 coffee.co.uk. HTiFTset2iie8cwYKvfoAPGchh72VdlCiPb+WZB4aTuwV3hiW+C3Ri5dyFnvabSVUZL4o3/1CIgG aYEMGrAOrQ== ) ;; ADDITIONAL SECTION (9 records) santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251112014300 20251013012818 51002 coffee.co.uk. SeOfkKAMDbgp1pOHKNxPQvlhBSzr9apDahEkB2AfYyc4OIOJ9SHacYMmCMBAVemBqXnEB1OJO2VP SbYTSIv8yQ== ) colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251115155029 20251016151445 51002 coffee.co.uk. RYJYPcHH1wCzNMW2AFh5SJHEbY2YYYOupE+K0AqoOHA0qeiDI7NGOfKorQHro30tKFlKW+FGpR85 hVbD3fgoQA== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251118091952 20251019083515 51002 coffee.co.uk. BAxgfxxRQfCItkdSh0v5LCKaptIfyM1g24LQM2tepYkJkvSaK/ITk31r41HihqK0T4MMGlyuY+Fa +YLLAMy++g== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251107194824 20251008191220 51002 coffee.co.uk. giCvK2/QB+yR+nrrPzPFCLUhQJ30F/PbsEcQeyqmaT/tNIYSYk7gsQqSS2fuj9MKeZLzQ92kGm45 wBxfz22ppw== ) ;; { "EDNS-VERSION": 0 }
	cafetiere.coffee.co.uk is authoritative for coffee.co.uk
	Found RRSIG signed by coffee.co.uk zone
	Query to cafetiere.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 77.206.90.34
	;; Response received from [77.206.90.34] 860 octets ;; HEADER SECTION ;; id = 36353 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20251104035126 20251005032429 51002 coffee.co.uk. NjfBWomvkhJc7ihUUJgeFDaRoE3DGJ+mNtv8D1pRVRd/8xJiuKJoy53heVpYY96LOomyoReVxpxy pEBTr3Ieqg== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20251107194824 20251008191220 51002 coffee.co.uk. HTiFTset2iie8cwYKvfoAPGchh72VdlCiPb+WZB4aTuwV3hiW+C3Ri5dyFnvabSVUZL4o3/1CIgG aYEMGrAOrQ== ) ;; ADDITIONAL SECTION (9 records) santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251112014300 20251013012818 51002 coffee.co.uk. SeOfkKAMDbgp1pOHKNxPQvlhBSzr9apDahEkB2AfYyc4OIOJ9SHacYMmCMBAVemBqXnEB1OJO2VP SbYTSIv8yQ== ) colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251115155029 20251016151445 51002 coffee.co.uk. RYJYPcHH1wCzNMW2AFh5SJHEbY2YYYOupE+K0AqoOHA0qeiDI7NGOfKorQHro30tKFlKW+FGpR85 hVbD3fgoQA== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251118091952 20251019083515 51002 coffee.co.uk. BAxgfxxRQfCItkdSh0v5LCKaptIfyM1g24LQM2tepYkJkvSaK/ITk31r41HihqK0T4MMGlyuY+Fa +YLLAMy++g== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20251107194824 20251008191220 51002 coffee.co.uk. giCvK2/QB+yR+nrrPzPFCLUhQJ30F/PbsEcQeyqmaT/tNIYSYk7gsQqSS2fuj9MKeZLzQ92kGm45 wBxfz22ppw== ) ;; { "EDNS-VERSION": 0 }
	coffee.co.uk A RR has value 82.68.85.107
	Found 1 RRSIGs over A RRset
	`coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20251104035126 20251005032429 51002 coffee.co.uk. NjfBWomvkhJc7ihUUJgeFDaRoE3DGJ+mNtv8D1pRVRd/8xJiuKJoy53heVpYY96LOomyoReVxpxy pEBTr3Ieqg== )`
	RRSIG=51002 and DNSKEY=51002 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test coffee.co.uk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: