DNSSEC Debugger - coffee.co.uk

Domain Name:

Time: 2024-10-30 22:51:41 UTC

Analyzing DNSSEC problems for coffee.co.uk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 864 octets ;; HEADER SECTION ;; id = 43623 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241111000000 20241021000000 20326 . alCFgDZS+0l5zcpQ/7R+5OFeCrk9KGkNP2F9ynXIXG6QigPj/9qjm0xxItRJUUim+SrJywAmLKe+ 48oTUeSRyDKVVg3LGDekLKcIVz0EBqTL2y44usDlUlxqx5O0LQVHy4h/hm9+dCXFiSBWoV0LcApl V9OYWhxi+CxmxZU58vK6eVAde8E2JHdeDuy23WF5lxYEg1q7ehEt5EdRvZ7hZzfawEFR3Qv3WMoo tO2eBAAneIe94daJP/i1iwQJ4p+bGVCZ4sJk+Pk9J7lwEQq6GhkdSpLsRxArUhvoVgtnh0LkAV7T sajYk8K2JRt7wHNDbBV6+Vdq2bh7ZPGvLiGkIQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241111000000 20241021000000 20326 . alCFgDZS+0l5zcpQ/7R+5OFeCrk9KGkNP2F9ynXIXG6QigPj/9qjm0xxItRJUUim+SrJywAmLKe+ 48oTUeSRyDKVVg3LGDekLKcIVz0EBqTL2y44usDlUlxqx5O0LQVHy4h/hm9+dCXFiSBWoV0LcApl V9OYWhxi+CxmxZU58vK6eVAde8E2JHdeDuy23WF5lxYEg1q7ehEt5EdRvZ7hZzfawEFR3Qv3WMoo tO2eBAAneIe94daJP/i1iwQJ4p+bGVCZ4sJk+Pk9J7lwEQq6GhkdSpLsRxArUhvoVgtnh0LkAV7T sajYk8K2JRt7wHNDbBV6+Vdq2bh7ZPGvLiGkIQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	Query to i.root-servers.net for coffee.co.uk/A
	Received 884 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 884 octets ;; HEADER SECTION ;; id = 25590 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20241112200000 20241030190000 61050 . hfPbEiMuUdCtGIvt95VSK4MZA7mDtLKQlsWTj27LFx6TH1V1+EJE2RcEbY/sgi4HACbYgAE5ukR1 1Hnyx3AK/VwPeAtWlw6V8JYnL1OVarf3epYIfRhcCwDOlEi1jaP/IgZjI7LuXF53N+gviHxrAYk+ LM64ECYdRAzHfvmSwG/ejQJHL1ISUwA7hRZDPR0mq5cYijInoj1VT4tebeXIrQ2xlRkTczcyHi/J RXHNn4U0XHGNv3STtNjufBbx+u8uIE0Ws5c5b0HfM6qTl+7PwqaB+zyH0lEMKMBzE8SjKc5VnH6b KmgGnuaB0l82XXPLQgJQ9uOzJ+oXLD9mH81d0g== ) ;; ADDITIONAL SECTION (17 records) dns4.nic.uk. 172800 IN A 43.230.48.1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns1.nic.uk. 172800 IN A 213.248.216.1 nsd.nic.uk. 172800 IN A 156.154.103.3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsa.nic.uk. 172800 IN A 156.154.100.3 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for uk/DNSKEY
	Received 870 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 870 octets ;; HEADER SECTION ;; id = 17763 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20241112200000 20241030190000 61050 . hfPbEiMuUdCtGIvt95VSK4MZA7mDtLKQlsWTj27LFx6TH1V1+EJE2RcEbY/sgi4HACbYgAE5ukR1 1Hnyx3AK/VwPeAtWlw6V8JYnL1OVarf3epYIfRhcCwDOlEi1jaP/IgZjI7LuXF53N+gviHxrAYk+ LM64ECYdRAzHfvmSwG/ejQJHL1ISUwA7hRZDPR0mq5cYijInoj1VT4tebeXIrQ2xlRkTczcyHi/J RXHNn4U0XHGNv3STtNjufBbx+u8uIE0Ws5c5b0HfM6qTl+7PwqaB+zyH0lEMKMBzE8SjKc5VnH6b KmgGnuaB0l82XXPLQgJQ9uOzJ+oXLD9mH81d0g== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN A 156.154.103.3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN A 43.230.48.1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Found child zone uk

	Checking DS between . and uk
	Query to i.root-servers.net for uk/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 48509 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DS ;; ANSWER SECTION (2 records) uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20241112200000 20241030190000 61050 . hfPbEiMuUdCtGIvt95VSK4MZA7mDtLKQlsWTj27LFx6TH1V1+EJE2RcEbY/sgi4HACbYgAE5ukR1 1Hnyx3AK/VwPeAtWlw6V8JYnL1OVarf3epYIfRhcCwDOlEi1jaP/IgZjI7LuXF53N+gviHxrAYk+ LM64ECYdRAzHfvmSwG/ejQJHL1ISUwA7hRZDPR0mq5cYijInoj1VT4tebeXIrQ2xlRkTczcyHi/J RXHNn4U0XHGNv3STtNjufBbx+u8uIE0Ws5c5b0HfM6qTl+7PwqaB+zyH0lEMKMBzE8SjKc5VnH6b KmgGnuaB0l82XXPLQgJQ9uOzJ+oXLD9mH81d0g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for uk in the . zone
	DS=43876/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uk. 86400 IN RRSIG ( DS 8 1 86400 20241112200000 20241030190000 61050 . hfPbEiMuUdCtGIvt95VSK4MZA7mDtLKQlsWTj27LFx6TH1V1+EJE2RcEbY/sgi4HACbYgAE5ukR1 1Hnyx3AK/VwPeAtWlw6V8JYnL1OVarf3epYIfRhcCwDOlEi1jaP/IgZjI7LuXF53N+gviHxrAYk+ LM64ECYdRAzHfvmSwG/ejQJHL1ISUwA7hRZDPR0mq5cYijInoj1VT4tebeXIrQ2xlRkTczcyHi/J RXHNn4U0XHGNv3STtNjufBbx+u8uIE0Ws5c5b0HfM6qTl+7PwqaB+zyH0lEMKMBzE8SjKc5VnH6b KmgGnuaB0l82XXPLQgJQ9uOzJ+oXLD9mH81d0g== )`
	RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
	DS=43876/SHA-256 is now in the chain-of-trust
	`uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 )`
	Query to nsd.nic.uk for uk/DNSKEY
	Received 745 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 745 octets ;; HEADER SECTION ;; id = 7853 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (3 records) uk. 3600 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; Key ID = 43876 uk. 3600 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; Key ID = 43056 uk. 3600 IN RRSIG ( DNSKEY 8 1 3600 20241203104433 20241029102829 43876 uk. FW/N2KPXbnVyIQ2dH2hPpQnkPWFEVLDGiofqGVUnF/oJDFJCYqVx4nwQVYaomP5BgAIELWkblfkx 9d1SJxZTaaEfwomDDjg29cs7oK8y9FVhYWXoDT8HCCx4gziV507VJfCaCkuuOVZUeCDMJ3oiyI4G YeINQbaTQdm/kHOwpbSwjlFa1lGANBagLrGOw7sEN4HjTGA4w8jwTtnAOsTYfxR15d2xcfS+TWsg DeTEqSzIGGYzHqnbqUW8gHnd1RSelwaHtKjtG30FWBIDd5SWsyCdozK4Eb3QnFMOhr+zSRLQWVWg Bl82kqK+eCRA7QyN4NVbj4TV+FX5OgsoamRLXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for uk
	`uk. 3600 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; Key ID = 43876`
	`uk. 3600 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; Key ID = 43056`
	DNSKEY=43876/SEP is now in the chain-of-trust
	DS=43876/SHA-256 verifies DNSKEY=43876/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`uk. 3600 IN RRSIG ( DNSKEY 8 1 3600 20241203104433 20241029102829 43876 uk. FW/N2KPXbnVyIQ2dH2hPpQnkPWFEVLDGiofqGVUnF/oJDFJCYqVx4nwQVYaomP5BgAIELWkblfkx 9d1SJxZTaaEfwomDDjg29cs7oK8y9FVhYWXoDT8HCCx4gziV507VJfCaCkuuOVZUeCDMJ3oiyI4G YeINQbaTQdm/kHOwpbSwjlFa1lGANBagLrGOw7sEN4HjTGA4w8jwTtnAOsTYfxR15d2xcfS+TWsg DeTEqSzIGGYzHqnbqUW8gHnd1RSelwaHtKjtG30FWBIDd5SWsyCdozK4Eb3QnFMOhr+zSRLQWVWg Bl82kqK+eCRA7QyN4NVbj4TV+FX5OgsoamRLXw== )`
	RRSIG=43876 and DNSKEY=43876/SEP verifies the DNSKEY RRset
	DNSKEY=43056 is now in the chain-of-trust
	Query to dns4.nic.uk for coffee.co.uk/A
	Received 409 bytes from 43.230.48.1
	;; Response received from [43.230.48.1] 409 octets ;; HEADER SECTION ;; id = 34514 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) coffee.co.uk. 172800 IN NS santos.coffee.co.uk. coffee.co.uk. 172800 IN NS colombia.coffee.co.uk. coffee.co.uk. 172800 IN NS espresso.coffee.co.uk. coffee.co.uk. 172800 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20241203061636 20241029061028 33621 co.uk. bWBIQogfTVzEAI0+Uz4ucmXoRsC1qMBzPiEez84p/FNgxhQDaAwbGzMhmj2LlFXJPnZIU7Hqdv+f SElWDAFODjJESfnfIDygJMNODtcduLZSoBGpCfrrsZDNxcv8Kr84NymePVoQqyMkX231CyBs0m8W P0tSWflsWgrY7uPBg5A= ) ;; ADDITIONAL SECTION (5 records) santos.coffee.co.uk. 172800 IN A 82.69.101.65 colombia.coffee.co.uk. 172800 IN A 82.68.85.107 espresso.coffee.co.uk. 172800 IN A 82.68.85.106 cafetiere.coffee.co.uk. 172800 IN A 77.206.90.34 ;; { "EDNS-VERSION": 0 }
	Query to dns3.nic.uk for co.uk/DNSKEY
	Received 347 bytes from 213.248.220.1
	;; Response received from [213.248.220.1] 347 octets ;; HEADER SECTION ;; id = 63259 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (2 records) co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAcf+56ydE3WHB5vn1UxYBXJJXBlJfHlS/MWEVn+8KVJyED0iNLvSEvSr47VeBnp7e53TbVQS 1pLMGaL/Upq4Hb70kY8LrlPOG9b7Guhbm7jRaosC6PETNPQ1aoNrZtAagRJQX3Jzh3o+xjQwTcUx LsQ97j/hB3zZtFuZOw6+8uLL ) ; Key ID = 33621 co.uk. 300 IN RRSIG ( DNSKEY 8 2 300 20241203160001 20241029152711 33621 co.uk. HQyLPNWKfb45d1nDKB1U84ZBMlbpDm9GEiIsF/OMOlhpYNUVqrz6nCCcMKHelnLUJS++gdx7LRmw F13ZL3ZzmcuP/2y1JvEuim9U5KbYtyewGwnraCKrkYNgIRd+TtbuR9Lmtn1vRvhSsv66wmCspfGZ Ooi6Fu97G6/hhVi94co= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone co.uk
	Attempting to learn nameservers for co.uk
	Query to dns1.nic.uk for co.uk/NS
	Received 351 bytes from 213.248.216.1
	;; Response received from [213.248.216.1] 351 octets ;; HEADER SECTION ;; id = 30405 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 9 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN NS ;; ANSWER SECTION (9 records) co.uk. 172800 IN NS nsa.nic.uk. co.uk. 172800 IN NS nsb.nic.uk. co.uk. 172800 IN NS nsc.nic.uk. co.uk. 172800 IN NS nsd.nic.uk. co.uk. 172800 IN NS dns1.nic.uk. co.uk. 172800 IN NS dns2.nic.uk. co.uk. 172800 IN NS dns3.nic.uk. co.uk. 172800 IN NS dns4.nic.uk. co.uk. 172800 IN RRSIG ( NS 8 2 172800 20241202220212 20241028211054 33621 co.uk. iYgd9uy3EJcB7dzUaU073zQbWlLL91j7+yrEB8cVPPBRyAvy8ZnshybSLHRuJ5NrP2/HbFM+6OmW esLpf0xwJWLZ7dAGhnLdbM3gTpw2TrSc7jw9JFqH78+XaToVt9jNr1IW/q3jj1tI+/pBqSPPjSB0 CaoWbuATVk6W19ckZD8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found co.uk nameservers: nsa.nic.uk, nsb.nic.uk, nsc.nic.uk, nsd.nic.uk, dns1.nic.uk, dns2.nic.uk, dns3.nic.uk, dns4.nic.uk

co.uk

	Checking DS between uk and co.uk
	Query to dns4.nic.uk for co.uk/DS
	Received 244 bytes from 43.230.48.1
	;; Response received from [43.230.48.1] 244 octets ;; HEADER SECTION ;; id = 50138 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DS ;; ANSWER SECTION (2 records) co.uk. 300 IN DS ( 33621 8 2 b9199d8b7fca7107d78c418d1d1bc9e9fe9d9b9b187bd13c96dc4b6582425cd8 ) co.uk. 300 IN RRSIG ( DS 8 2 300 20241201012529 20241027004651 43056 uk. rckr/1fatYrw3KBkgMs+YFsnaXH+rD3lwgkXpJriC2phBScU4cX4jHWWrHmvyaiAjDSL5oIKNsz4 ML329Y2PkyLHs2xFYR/GTGzdKfrTtNMMgHlU6u+ZCCq7bl+jmQ8gjtQPJfNAso+PHlMSpHoScDmR SHwLGo3TY60ZPJTzRJg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for co.uk in the uk zone
	DS=33621/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co.uk. 300 IN RRSIG ( DS 8 2 300 20241201012529 20241027004651 43056 uk. rckr/1fatYrw3KBkgMs+YFsnaXH+rD3lwgkXpJriC2phBScU4cX4jHWWrHmvyaiAjDSL5oIKNsz4 ML329Y2PkyLHs2xFYR/GTGzdKfrTtNMMgHlU6u+ZCCq7bl+jmQ8gjtQPJfNAso+PHlMSpHoScDmR SHwLGo3TY60ZPJTzRJg= )`
	RRSIG=43056 and DNSKEY=43056 verifies the DS RRset
	DS=33621/SHA-256 is now in the chain-of-trust
	`co.uk. 300 IN DS ( 33621 8 2 b9199d8b7fca7107d78c418d1d1bc9e9fe9d9b9b187bd13c96dc4b6582425cd8 )`
	Query to nsd.nic.uk for co.uk/DNSKEY
	Received 347 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 347 octets ;; HEADER SECTION ;; id = 70 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (2 records) co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAcf+56ydE3WHB5vn1UxYBXJJXBlJfHlS/MWEVn+8KVJyED0iNLvSEvSr47VeBnp7e53TbVQS 1pLMGaL/Upq4Hb70kY8LrlPOG9b7Guhbm7jRaosC6PETNPQ1aoNrZtAagRJQX3Jzh3o+xjQwTcUx LsQ97j/hB3zZtFuZOw6+8uLL ) ; Key ID = 33621 co.uk. 300 IN RRSIG ( DNSKEY 8 2 300 20241203160001 20241029152711 33621 co.uk. HQyLPNWKfb45d1nDKB1U84ZBMlbpDm9GEiIsF/OMOlhpYNUVqrz6nCCcMKHelnLUJS++gdx7LRmw F13ZL3ZzmcuP/2y1JvEuim9U5KbYtyewGwnraCKrkYNgIRd+TtbuR9Lmtn1vRvhSsv66wmCspfGZ Ooi6Fu97G6/hhVi94co= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for co.uk
	`co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAcf+56ydE3WHB5vn1UxYBXJJXBlJfHlS/MWEVn+8KVJyED0iNLvSEvSr47VeBnp7e53TbVQS 1pLMGaL/Upq4Hb70kY8LrlPOG9b7Guhbm7jRaosC6PETNPQ1aoNrZtAagRJQX3Jzh3o+xjQwTcUx LsQ97j/hB3zZtFuZOw6+8uLL ) ; Key ID = 33621`
	DNSKEY=33621 is now in the chain-of-trust
	DS=33621/SHA-256 verifies DNSKEY=33621
	Found 1 RRSIGs over DNSKEY RRset
	`co.uk. 300 IN RRSIG ( DNSKEY 8 2 300 20241203160001 20241029152711 33621 co.uk. HQyLPNWKfb45d1nDKB1U84ZBMlbpDm9GEiIsF/OMOlhpYNUVqrz6nCCcMKHelnLUJS++gdx7LRmw F13ZL3ZzmcuP/2y1JvEuim9U5KbYtyewGwnraCKrkYNgIRd+TtbuR9Lmtn1vRvhSsv66wmCspfGZ Ooi6Fu97G6/hhVi94co= )`
	RRSIG=33621 and DNSKEY=33621 verifies the DNSKEY RRset
	Query to dns4.nic.uk for coffee.co.uk/A
	Received 409 bytes from 43.230.48.1
	;; Response received from [43.230.48.1] 409 octets ;; HEADER SECTION ;; id = 30479 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) coffee.co.uk. 172800 IN NS santos.coffee.co.uk. coffee.co.uk. 172800 IN NS colombia.coffee.co.uk. coffee.co.uk. 172800 IN NS espresso.coffee.co.uk. coffee.co.uk. 172800 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20241203061636 20241029061028 33621 co.uk. bWBIQogfTVzEAI0+Uz4ucmXoRsC1qMBzPiEez84p/FNgxhQDaAwbGzMhmj2LlFXJPnZIU7Hqdv+f SElWDAFODjJESfnfIDygJMNODtcduLZSoBGpCfrrsZDNxcv8Kr84NymePVoQqyMkX231CyBs0m8W P0tSWflsWgrY7uPBg5A= ) ;; ADDITIONAL SECTION (5 records) santos.coffee.co.uk. 172800 IN A 82.69.101.65 colombia.coffee.co.uk. 172800 IN A 82.68.85.107 espresso.coffee.co.uk. 172800 IN A 82.68.85.106 cafetiere.coffee.co.uk. 172800 IN A 77.206.90.34 ;; { "EDNS-VERSION": 0 }
	Query to dns4.nic.uk for coffee.co.uk/DNSKEY
	Received 409 bytes from 43.230.48.1
	;; Response received from [43.230.48.1] 409 octets ;; HEADER SECTION ;; id = 62913 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) coffee.co.uk. 172800 IN NS santos.coffee.co.uk. coffee.co.uk. 172800 IN NS colombia.coffee.co.uk. coffee.co.uk. 172800 IN NS espresso.coffee.co.uk. coffee.co.uk. 172800 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20241203061636 20241029061028 33621 co.uk. bWBIQogfTVzEAI0+Uz4ucmXoRsC1qMBzPiEez84p/FNgxhQDaAwbGzMhmj2LlFXJPnZIU7Hqdv+f SElWDAFODjJESfnfIDygJMNODtcduLZSoBGpCfrrsZDNxcv8Kr84NymePVoQqyMkX231CyBs0m8W P0tSWflsWgrY7uPBg5A= ) ;; ADDITIONAL SECTION (5 records) santos.coffee.co.uk. 172800 IN A 82.69.101.65 colombia.coffee.co.uk. 172800 IN A 82.68.85.107 espresso.coffee.co.uk. 172800 IN A 82.68.85.106 cafetiere.coffee.co.uk. 172800 IN A 77.206.90.34 ;; { "EDNS-VERSION": 0 }
	Found child zone coffee.co.uk

coffee.co.uk

	Checking DS between co.uk and coffee.co.uk
	Query to nsd.nic.uk for coffee.co.uk/DS
	Received 254 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 254 octets ;; HEADER SECTION ;; id = 3318 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN DS ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 ) coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20241203061636 20241029061028 33621 co.uk. bWBIQogfTVzEAI0+Uz4ucmXoRsC1qMBzPiEez84p/FNgxhQDaAwbGzMhmj2LlFXJPnZIU7Hqdv+f SElWDAFODjJESfnfIDygJMNODtcduLZSoBGpCfrrsZDNxcv8Kr84NymePVoQqyMkX231CyBs0m8W P0tSWflsWgrY7uPBg5A= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for coffee.co.uk in the co.uk zone
	DS=37040/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`coffee.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20241203061636 20241029061028 33621 co.uk. bWBIQogfTVzEAI0+Uz4ucmXoRsC1qMBzPiEez84p/FNgxhQDaAwbGzMhmj2LlFXJPnZIU7Hqdv+f SElWDAFODjJESfnfIDygJMNODtcduLZSoBGpCfrrsZDNxcv8Kr84NymePVoQqyMkX231CyBs0m8W P0tSWflsWgrY7uPBg5A= )`
	RRSIG=33621 and DNSKEY=33621 verifies the DS RRset
	DS=37040/SHA-256 is now in the chain-of-trust
	`coffee.co.uk. 3600 IN DS ( 37040 13 2 831c7bdb807cb92cd61f86c8f09135fa8548cc7cd3b40de5fb746d45d07fad38 )`
	Query to santos.coffee.co.uk for coffee.co.uk/DNSKEY
	Received 309 bytes from 82.69.101.65
	;; Response received from [82.69.101.65] 309 octets ;; HEADER SECTION ;; id = 25217 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN DNSKEY ;; ANSWER SECTION (3 records) coffee.co.uk. 3600 IN DNSKEY ( 257 3 13 Xb29U0H6bcwScx/mZ6NWrsVXnmiXbFzbz0eItEoOPAv7pl2hYa8J60hPhQhQOAGBhrVgW7DQ+BtS E4AfrD2onw== ) ; Key ID = 37040 coffee.co.uk. 3600 IN DNSKEY ( 256 3 13 8lhNjPIpOUkZZ8xQ7IT27K9g2XJQVo2wU8mvqP8ULNMg0GaQLiewBYw2ialySomBva8vSah3IKjA ExZFdEiAgw== ) ; Key ID = 51002 coffee.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20241118105153 20241019104820 37040 coffee.co.uk. tnZlA1qoboOZrfsmCi/UPDG9KTIbcZ2KMaH709TgfBZ2cpXxy//dQRsTL+QixDnywgzE1RWkD6F/ tNiIlkKT6A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for coffee.co.uk
	`coffee.co.uk. 3600 IN DNSKEY ( 257 3 13 Xb29U0H6bcwScx/mZ6NWrsVXnmiXbFzbz0eItEoOPAv7pl2hYa8J60hPhQhQOAGBhrVgW7DQ+BtS E4AfrD2onw== ) ; Key ID = 37040`
	`coffee.co.uk. 3600 IN DNSKEY ( 256 3 13 8lhNjPIpOUkZZ8xQ7IT27K9g2XJQVo2wU8mvqP8ULNMg0GaQLiewBYw2ialySomBva8vSah3IKjA ExZFdEiAgw== ) ; Key ID = 51002`
	DNSKEY=37040/SEP is now in the chain-of-trust
	DS=37040/SHA-256 verifies DNSKEY=37040/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`coffee.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20241118105153 20241019104820 37040 coffee.co.uk. tnZlA1qoboOZrfsmCi/UPDG9KTIbcZ2KMaH709TgfBZ2cpXxy//dQRsTL+QixDnywgzE1RWkD6F/ tNiIlkKT6A== )`
	RRSIG=37040 and DNSKEY=37040/SEP verifies the DNSKEY RRset
	DNSKEY=51002 is now in the chain-of-trust
	Query to cafetiere.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 77.206.90.34
	;; Response received from [77.206.90.34] 860 octets ;; HEADER SECTION ;; id = 21307 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20241109121218 20241010113502 51002 coffee.co.uk. ab4Gqm8eVPg6EoHya++O6Jf+raoUr00Z/qWWY/0Ee4eKy3SKoEcaGYI64t4zdWS5oN4ixyx7ej+o SpTog+dnow== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20241112134144 20241013134110 51002 coffee.co.uk. tznhyIQRz7lg5SITrQARhcy3SgNNSsJr4hbxkPHnkzMvrni9Hg1qWLrxNJ4JcaQAl1ySWzBcEuAJ HIspBrknxg== ) ;; ADDITIONAL SECTION (9 records) santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241117094757 20241018085417 51002 coffee.co.uk. mINX/UUKaJJWuDVAb5Z1k9+HB8vIRyYC4BiTFe1zOd+qp1SVrxMOODbAFb0QC8E8PsOF1eZMlbuU 104SGD11nQ== ) colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241120223713 20241021221012 51002 coffee.co.uk. LoL5OjUEVx42O4ylHQjrJl0L+BNh9u0IWTF6P2NGsWxAKGUni1TBDKvyAJYjaWGeql4/B8QMvZBe wLiiO2WKgQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241123155438 20241024152857 51002 coffee.co.uk. ynjX54H25GJUefAozEDMOTzrk6YyxkV5wRteNWheSFeNHUVucRuL/6xJrrDuIsQpfR5xRZFtAPDp 9TB14rQmlg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241112134144 20241013134110 51002 coffee.co.uk. dYbHHIfxpz2H5DZuEhkIJUF5SyW0gtz28izM/aUAr5dV0kZzPLkGCQL6rekGXbO/mQ0IXrJFHvNu jv6mIby1Fg== ) ;; { "EDNS-VERSION": 0 }
	cafetiere.coffee.co.uk is authoritative for coffee.co.uk
	Found RRSIG signed by coffee.co.uk zone
	Query to colombia.coffee.co.uk for coffee.co.uk/SOA
	Received 889 bytes from 82.68.85.107
	;; Response received from [82.68.85.107] 889 octets ;; HEADER SECTION ;; id = 5697 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN SOA ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN SOA ( colombia.coffee.co.uk. dnsadmin.coffee.co.uk. 2024102112 ;serial 86400 ;refresh 7200 ;retry 3600000 ;expire 10800 ;minimum ) coffee.co.uk. 3600 IN RRSIG ( SOA 13 3 3600 20241129205234 20241030195234 51002 coffee.co.uk. KjyX5qBCoI7vJRJkHmvuR/xE4TVgGvaFY9BOeINwOf0zraEivi/2YOrJWMNsJjC16iTJo3qiaUWc 03JG5U9NFg== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20241112134144 20241013134110 51002 coffee.co.uk. tznhyIQRz7lg5SITrQARhcy3SgNNSsJr4hbxkPHnkzMvrni9Hg1qWLrxNJ4JcaQAl1ySWzBcEuAJ HIspBrknxg== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241120223713 20241021221012 51002 coffee.co.uk. LoL5OjUEVx42O4ylHQjrJl0L+BNh9u0IWTF6P2NGsWxAKGUni1TBDKvyAJYjaWGeql4/B8QMvZBe wLiiO2WKgQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241123155438 20241024152857 51002 coffee.co.uk. ynjX54H25GJUefAozEDMOTzrk6YyxkV5wRteNWheSFeNHUVucRuL/6xJrrDuIsQpfR5xRZFtAPDp 9TB14rQmlg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241112134144 20241013134110 51002 coffee.co.uk. dYbHHIfxpz2H5DZuEhkIJUF5SyW0gtz28izM/aUAr5dV0kZzPLkGCQL6rekGXbO/mQ0IXrJFHvNu jv6mIby1Fg== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241117094757 20241018085417 51002 coffee.co.uk. mINX/UUKaJJWuDVAb5Z1k9+HB8vIRyYC4BiTFe1zOd+qp1SVrxMOODbAFb0QC8E8PsOF1eZMlbuU 104SGD11nQ== ) ;; { "EDNS-VERSION": 0 }
	Query to santos.coffee.co.uk for coffee.co.uk/SOA
	Received 889 bytes from 82.69.101.65
	;; Response received from [82.69.101.65] 889 octets ;; HEADER SECTION ;; id = 32320 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN SOA ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN SOA ( colombia.coffee.co.uk. dnsadmin.coffee.co.uk. 2024102112 ;serial 86400 ;refresh 7200 ;retry 3600000 ;expire 10800 ;minimum ) coffee.co.uk. 3600 IN RRSIG ( SOA 13 3 3600 20241129205234 20241030195234 51002 coffee.co.uk. KjyX5qBCoI7vJRJkHmvuR/xE4TVgGvaFY9BOeINwOf0zraEivi/2YOrJWMNsJjC16iTJo3qiaUWc 03JG5U9NFg== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20241112134144 20241013134110 51002 coffee.co.uk. tznhyIQRz7lg5SITrQARhcy3SgNNSsJr4hbxkPHnkzMvrni9Hg1qWLrxNJ4JcaQAl1ySWzBcEuAJ HIspBrknxg== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241120223713 20241021221012 51002 coffee.co.uk. LoL5OjUEVx42O4ylHQjrJl0L+BNh9u0IWTF6P2NGsWxAKGUni1TBDKvyAJYjaWGeql4/B8QMvZBe wLiiO2WKgQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241123155438 20241024152857 51002 coffee.co.uk. ynjX54H25GJUefAozEDMOTzrk6YyxkV5wRteNWheSFeNHUVucRuL/6xJrrDuIsQpfR5xRZFtAPDp 9TB14rQmlg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241112134144 20241013134110 51002 coffee.co.uk. dYbHHIfxpz2H5DZuEhkIJUF5SyW0gtz28izM/aUAr5dV0kZzPLkGCQL6rekGXbO/mQ0IXrJFHvNu jv6mIby1Fg== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241117094757 20241018085417 51002 coffee.co.uk. mINX/UUKaJJWuDVAb5Z1k9+HB8vIRyYC4BiTFe1zOd+qp1SVrxMOODbAFb0QC8E8PsOF1eZMlbuU 104SGD11nQ== ) ;; { "EDNS-VERSION": 0 }
	Query to espresso.coffee.co.uk for coffee.co.uk/SOA
	Received 889 bytes from 82.68.85.106
	;; Response received from [82.68.85.106] 889 octets ;; HEADER SECTION ;; id = 46432 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN SOA ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN SOA ( colombia.coffee.co.uk. dnsadmin.coffee.co.uk. 2024102110 ;serial 86400 ;refresh 7200 ;retry 3600000 ;expire 10800 ;minimum ) coffee.co.uk. 3600 IN RRSIG ( SOA 13 3 3600 20241129002637 20241029232637 51002 coffee.co.uk. IgErHgWUsdqE6MLVCWQavk5nco8eZajL7e2DFc2bTUuW7W+YaSenNY6WwO6ZQDU8ov0kjddFKw0i ImK/lLOhCg== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20241112134144 20241013134110 51002 coffee.co.uk. tznhyIQRz7lg5SITrQARhcy3SgNNSsJr4hbxkPHnkzMvrni9Hg1qWLrxNJ4JcaQAl1ySWzBcEuAJ HIspBrknxg== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241120223713 20241021221012 51002 coffee.co.uk. LoL5OjUEVx42O4ylHQjrJl0L+BNh9u0IWTF6P2NGsWxAKGUni1TBDKvyAJYjaWGeql4/B8QMvZBe wLiiO2WKgQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241123155438 20241024152857 51002 coffee.co.uk. ynjX54H25GJUefAozEDMOTzrk6YyxkV5wRteNWheSFeNHUVucRuL/6xJrrDuIsQpfR5xRZFtAPDp 9TB14rQmlg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241112134144 20241013134110 51002 coffee.co.uk. dYbHHIfxpz2H5DZuEhkIJUF5SyW0gtz28izM/aUAr5dV0kZzPLkGCQL6rekGXbO/mQ0IXrJFHvNu jv6mIby1Fg== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241117094757 20241018085417 51002 coffee.co.uk. mINX/UUKaJJWuDVAb5Z1k9+HB8vIRyYC4BiTFe1zOd+qp1SVrxMOODbAFb0QC8E8PsOF1eZMlbuU 104SGD11nQ== ) ;; { "EDNS-VERSION": 0 }
	espresso.coffee.co.uk serial (2024102110) differs from colombia.coffee.co.uk serial (2024102112)
	Query to cafetiere.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 77.206.90.34
	;; Response received from [77.206.90.34] 860 octets ;; HEADER SECTION ;; id = 32353 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20241109121218 20241010113502 51002 coffee.co.uk. ab4Gqm8eVPg6EoHya++O6Jf+raoUr00Z/qWWY/0Ee4eKy3SKoEcaGYI64t4zdWS5oN4ixyx7ej+o SpTog+dnow== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20241112134144 20241013134110 51002 coffee.co.uk. tznhyIQRz7lg5SITrQARhcy3SgNNSsJr4hbxkPHnkzMvrni9Hg1qWLrxNJ4JcaQAl1ySWzBcEuAJ HIspBrknxg== ) ;; ADDITIONAL SECTION (9 records) santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241117094757 20241018085417 51002 coffee.co.uk. mINX/UUKaJJWuDVAb5Z1k9+HB8vIRyYC4BiTFe1zOd+qp1SVrxMOODbAFb0QC8E8PsOF1eZMlbuU 104SGD11nQ== ) colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241120223713 20241021221012 51002 coffee.co.uk. LoL5OjUEVx42O4ylHQjrJl0L+BNh9u0IWTF6P2NGsWxAKGUni1TBDKvyAJYjaWGeql4/B8QMvZBe wLiiO2WKgQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241123155438 20241024152857 51002 coffee.co.uk. ynjX54H25GJUefAozEDMOTzrk6YyxkV5wRteNWheSFeNHUVucRuL/6xJrrDuIsQpfR5xRZFtAPDp 9TB14rQmlg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241112134144 20241013134110 51002 coffee.co.uk. dYbHHIfxpz2H5DZuEhkIJUF5SyW0gtz28izM/aUAr5dV0kZzPLkGCQL6rekGXbO/mQ0IXrJFHvNu jv6mIby1Fg== ) ;; { "EDNS-VERSION": 0 }
	coffee.co.uk A RR has value 82.68.85.107
	Found 1 RRSIGs over A RRset
	`coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20241109121218 20241010113502 51002 coffee.co.uk. ab4Gqm8eVPg6EoHya++O6Jf+raoUr00Z/qWWY/0Ee4eKy3SKoEcaGYI64t4zdWS5oN4ixyx7ej+o SpTog+dnow== )`
	RRSIG=51002 and DNSKEY=51002 verifies the A RRset

coffee.co.uk

	Query to espresso.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.68.85.106
	;; Response received from [82.68.85.106] 860 octets ;; HEADER SECTION ;; id = 64413 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20241109121218 20241010113502 51002 coffee.co.uk. ab4Gqm8eVPg6EoHya++O6Jf+raoUr00Z/qWWY/0Ee4eKy3SKoEcaGYI64t4zdWS5oN4ixyx7ej+o SpTog+dnow== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20241112134144 20241013134110 51002 coffee.co.uk. tznhyIQRz7lg5SITrQARhcy3SgNNSsJr4hbxkPHnkzMvrni9Hg1qWLrxNJ4JcaQAl1ySWzBcEuAJ HIspBrknxg== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241120223713 20241021221012 51002 coffee.co.uk. LoL5OjUEVx42O4ylHQjrJl0L+BNh9u0IWTF6P2NGsWxAKGUni1TBDKvyAJYjaWGeql4/B8QMvZBe wLiiO2WKgQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241123155438 20241024152857 51002 coffee.co.uk. ynjX54H25GJUefAozEDMOTzrk6YyxkV5wRteNWheSFeNHUVucRuL/6xJrrDuIsQpfR5xRZFtAPDp 9TB14rQmlg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241112134144 20241013134110 51002 coffee.co.uk. dYbHHIfxpz2H5DZuEhkIJUF5SyW0gtz28izM/aUAr5dV0kZzPLkGCQL6rekGXbO/mQ0IXrJFHvNu jv6mIby1Fg== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241117094757 20241018085417 51002 coffee.co.uk. mINX/UUKaJJWuDVAb5Z1k9+HB8vIRyYC4BiTFe1zOd+qp1SVrxMOODbAFb0QC8E8PsOF1eZMlbuU 104SGD11nQ== ) ;; { "EDNS-VERSION": 0 }
	espresso.coffee.co.uk is authoritative for coffee.co.uk
	Found RRSIG signed by coffee.co.uk zone
	Query to espresso.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.68.85.106
	;; Response received from [82.68.85.106] 860 octets ;; HEADER SECTION ;; id = 7810 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20241109121218 20241010113502 51002 coffee.co.uk. ab4Gqm8eVPg6EoHya++O6Jf+raoUr00Z/qWWY/0Ee4eKy3SKoEcaGYI64t4zdWS5oN4ixyx7ej+o SpTog+dnow== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20241112134144 20241013134110 51002 coffee.co.uk. tznhyIQRz7lg5SITrQARhcy3SgNNSsJr4hbxkPHnkzMvrni9Hg1qWLrxNJ4JcaQAl1ySWzBcEuAJ HIspBrknxg== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241120223713 20241021221012 51002 coffee.co.uk. LoL5OjUEVx42O4ylHQjrJl0L+BNh9u0IWTF6P2NGsWxAKGUni1TBDKvyAJYjaWGeql4/B8QMvZBe wLiiO2WKgQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241123155438 20241024152857 51002 coffee.co.uk. ynjX54H25GJUefAozEDMOTzrk6YyxkV5wRteNWheSFeNHUVucRuL/6xJrrDuIsQpfR5xRZFtAPDp 9TB14rQmlg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241112134144 20241013134110 51002 coffee.co.uk. dYbHHIfxpz2H5DZuEhkIJUF5SyW0gtz28izM/aUAr5dV0kZzPLkGCQL6rekGXbO/mQ0IXrJFHvNu jv6mIby1Fg== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241117094757 20241018085417 51002 coffee.co.uk. mINX/UUKaJJWuDVAb5Z1k9+HB8vIRyYC4BiTFe1zOd+qp1SVrxMOODbAFb0QC8E8PsOF1eZMlbuU 104SGD11nQ== ) ;; { "EDNS-VERSION": 0 }
	coffee.co.uk A RR has value 82.68.85.107
	Found 1 RRSIGs over A RRset
	`coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20241109121218 20241010113502 51002 coffee.co.uk. ab4Gqm8eVPg6EoHya++O6Jf+raoUr00Z/qWWY/0Ee4eKy3SKoEcaGYI64t4zdWS5oN4ixyx7ej+o SpTog+dnow== )`
	RRSIG=51002 and DNSKEY=51002 verifies the A RRset

coffee.co.uk

	Query to colombia.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.68.85.107
	;; Response received from [82.68.85.107] 860 octets ;; HEADER SECTION ;; id = 17708 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20241109121218 20241010113502 51002 coffee.co.uk. ab4Gqm8eVPg6EoHya++O6Jf+raoUr00Z/qWWY/0Ee4eKy3SKoEcaGYI64t4zdWS5oN4ixyx7ej+o SpTog+dnow== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20241112134144 20241013134110 51002 coffee.co.uk. tznhyIQRz7lg5SITrQARhcy3SgNNSsJr4hbxkPHnkzMvrni9Hg1qWLrxNJ4JcaQAl1ySWzBcEuAJ HIspBrknxg== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241120223713 20241021221012 51002 coffee.co.uk. LoL5OjUEVx42O4ylHQjrJl0L+BNh9u0IWTF6P2NGsWxAKGUni1TBDKvyAJYjaWGeql4/B8QMvZBe wLiiO2WKgQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241123155438 20241024152857 51002 coffee.co.uk. ynjX54H25GJUefAozEDMOTzrk6YyxkV5wRteNWheSFeNHUVucRuL/6xJrrDuIsQpfR5xRZFtAPDp 9TB14rQmlg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241112134144 20241013134110 51002 coffee.co.uk. dYbHHIfxpz2H5DZuEhkIJUF5SyW0gtz28izM/aUAr5dV0kZzPLkGCQL6rekGXbO/mQ0IXrJFHvNu jv6mIby1Fg== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241117094757 20241018085417 51002 coffee.co.uk. mINX/UUKaJJWuDVAb5Z1k9+HB8vIRyYC4BiTFe1zOd+qp1SVrxMOODbAFb0QC8E8PsOF1eZMlbuU 104SGD11nQ== ) ;; { "EDNS-VERSION": 0 }
	colombia.coffee.co.uk is authoritative for coffee.co.uk
	Found RRSIG signed by coffee.co.uk zone
	Query to colombia.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.68.85.107
	;; Response received from [82.68.85.107] 860 octets ;; HEADER SECTION ;; id = 17475 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20241109121218 20241010113502 51002 coffee.co.uk. ab4Gqm8eVPg6EoHya++O6Jf+raoUr00Z/qWWY/0Ee4eKy3SKoEcaGYI64t4zdWS5oN4ixyx7ej+o SpTog+dnow== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20241112134144 20241013134110 51002 coffee.co.uk. tznhyIQRz7lg5SITrQARhcy3SgNNSsJr4hbxkPHnkzMvrni9Hg1qWLrxNJ4JcaQAl1ySWzBcEuAJ HIspBrknxg== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241120223713 20241021221012 51002 coffee.co.uk. LoL5OjUEVx42O4ylHQjrJl0L+BNh9u0IWTF6P2NGsWxAKGUni1TBDKvyAJYjaWGeql4/B8QMvZBe wLiiO2WKgQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241123155438 20241024152857 51002 coffee.co.uk. ynjX54H25GJUefAozEDMOTzrk6YyxkV5wRteNWheSFeNHUVucRuL/6xJrrDuIsQpfR5xRZFtAPDp 9TB14rQmlg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241112134144 20241013134110 51002 coffee.co.uk. dYbHHIfxpz2H5DZuEhkIJUF5SyW0gtz28izM/aUAr5dV0kZzPLkGCQL6rekGXbO/mQ0IXrJFHvNu jv6mIby1Fg== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241117094757 20241018085417 51002 coffee.co.uk. mINX/UUKaJJWuDVAb5Z1k9+HB8vIRyYC4BiTFe1zOd+qp1SVrxMOODbAFb0QC8E8PsOF1eZMlbuU 104SGD11nQ== ) ;; { "EDNS-VERSION": 0 }
	coffee.co.uk A RR has value 82.68.85.107
	Found 1 RRSIGs over A RRset
	`coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20241109121218 20241010113502 51002 coffee.co.uk. ab4Gqm8eVPg6EoHya++O6Jf+raoUr00Z/qWWY/0Ee4eKy3SKoEcaGYI64t4zdWS5oN4ixyx7ej+o SpTog+dnow== )`
	RRSIG=51002 and DNSKEY=51002 verifies the A RRset

coffee.co.uk

	Query to santos.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.69.101.65
	;; Response received from [82.69.101.65] 860 octets ;; HEADER SECTION ;; id = 6107 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20241109121218 20241010113502 51002 coffee.co.uk. ab4Gqm8eVPg6EoHya++O6Jf+raoUr00Z/qWWY/0Ee4eKy3SKoEcaGYI64t4zdWS5oN4ixyx7ej+o SpTog+dnow== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20241112134144 20241013134110 51002 coffee.co.uk. tznhyIQRz7lg5SITrQARhcy3SgNNSsJr4hbxkPHnkzMvrni9Hg1qWLrxNJ4JcaQAl1ySWzBcEuAJ HIspBrknxg== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241120223713 20241021221012 51002 coffee.co.uk. LoL5OjUEVx42O4ylHQjrJl0L+BNh9u0IWTF6P2NGsWxAKGUni1TBDKvyAJYjaWGeql4/B8QMvZBe wLiiO2WKgQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241123155438 20241024152857 51002 coffee.co.uk. ynjX54H25GJUefAozEDMOTzrk6YyxkV5wRteNWheSFeNHUVucRuL/6xJrrDuIsQpfR5xRZFtAPDp 9TB14rQmlg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241112134144 20241013134110 51002 coffee.co.uk. dYbHHIfxpz2H5DZuEhkIJUF5SyW0gtz28izM/aUAr5dV0kZzPLkGCQL6rekGXbO/mQ0IXrJFHvNu jv6mIby1Fg== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241117094757 20241018085417 51002 coffee.co.uk. mINX/UUKaJJWuDVAb5Z1k9+HB8vIRyYC4BiTFe1zOd+qp1SVrxMOODbAFb0QC8E8PsOF1eZMlbuU 104SGD11nQ== ) ;; { "EDNS-VERSION": 0 }
	santos.coffee.co.uk is authoritative for coffee.co.uk
	Found RRSIG signed by coffee.co.uk zone
	Query to santos.coffee.co.uk for coffee.co.uk/A
	Received 860 bytes from 82.69.101.65
	;; Response received from [82.69.101.65] 860 octets ;; HEADER SECTION ;; id = 11387 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coffee.co.uk. IN A ;; ANSWER SECTION (2 records) coffee.co.uk. 3600 IN A 82.68.85.107 coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20241109121218 20241010113502 51002 coffee.co.uk. ab4Gqm8eVPg6EoHya++O6Jf+raoUr00Z/qWWY/0Ee4eKy3SKoEcaGYI64t4zdWS5oN4ixyx7ej+o SpTog+dnow== ) ;; AUTHORITY SECTION (5 records) coffee.co.uk. 3600 IN NS santos.coffee.co.uk. coffee.co.uk. 3600 IN NS espresso.coffee.co.uk. coffee.co.uk. 3600 IN NS colombia.coffee.co.uk. coffee.co.uk. 3600 IN NS cafetiere.coffee.co.uk. coffee.co.uk. 3600 IN RRSIG ( NS 13 3 3600 20241112134144 20241013134110 51002 coffee.co.uk. tznhyIQRz7lg5SITrQARhcy3SgNNSsJr4hbxkPHnkzMvrni9Hg1qWLrxNJ4JcaQAl1ySWzBcEuAJ HIspBrknxg== ) ;; ADDITIONAL SECTION (9 records) colombia.coffee.co.uk. 3600 IN A 82.68.85.107 espresso.coffee.co.uk. 3600 IN A 82.68.85.106 cafetiere.coffee.co.uk. 3600 IN A 77.206.90.34 santos.coffee.co.uk. 3600 IN A 82.69.101.65 colombia.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241120223713 20241021221012 51002 coffee.co.uk. LoL5OjUEVx42O4ylHQjrJl0L+BNh9u0IWTF6P2NGsWxAKGUni1TBDKvyAJYjaWGeql4/B8QMvZBe wLiiO2WKgQ== ) espresso.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241123155438 20241024152857 51002 coffee.co.uk. ynjX54H25GJUefAozEDMOTzrk6YyxkV5wRteNWheSFeNHUVucRuL/6xJrrDuIsQpfR5xRZFtAPDp 9TB14rQmlg== ) cafetiere.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241112134144 20241013134110 51002 coffee.co.uk. dYbHHIfxpz2H5DZuEhkIJUF5SyW0gtz28izM/aUAr5dV0kZzPLkGCQL6rekGXbO/mQ0IXrJFHvNu jv6mIby1Fg== ) santos.coffee.co.uk. 3600 IN RRSIG ( A 13 4 3600 20241117094757 20241018085417 51002 coffee.co.uk. mINX/UUKaJJWuDVAb5Z1k9+HB8vIRyYC4BiTFe1zOd+qp1SVrxMOODbAFb0QC8E8PsOF1eZMlbuU 104SGD11nQ== ) ;; { "EDNS-VERSION": 0 }
	coffee.co.uk A RR has value 82.68.85.107
	Found 1 RRSIGs over A RRset
	`coffee.co.uk. 3600 IN RRSIG ( A 13 3 3600 20241109121218 20241010113502 51002 coffee.co.uk. ab4Gqm8eVPg6EoHya++O6Jf+raoUr00Z/qWWY/0Ee4eKy3SKoEcaGYI64t4zdWS5oN4ixyx7ej+o SpTog+dnow== )`
	RRSIG=51002 and DNSKEY=51002 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test coffee.co.uk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: