DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-08-04 17:29:45 UTC

Analyzing DNSSEC problems for cpa.tg

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1139 octets ;; HEADER SECTION ;; id = 16301 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260821000000 20260731000000 20326 . kKpaPEyKDhNNs9rizpyOEcK2Nwg04lOQEeUgL175fR1W7zTzCo96Lpf5xuMeN9vZKHq362Yi6pX1 1BeCL5JejRJ0q4OflNu2jkjZpqW4JWNeim0gaJxd2fg8MMh7qg9gZnMfFLzK8y2Hudve+JF3LD/M jIPpdPd/GEISqynmOLYxNmol2eKMdiDJ3RNxVTfzmEo8QqXGGDEozWf5pM9XvTa22LLJ37NHblwT 0eeHnhxKwt5q4RH7YabmC2NlUge5R/GoCQD0WJdmi139O7DyyRDa1YEHSPigdLDRjXuAmw1acBrL bmvS7F9j1Zbc2Mm1MO924z6z9L3GXPlaSV1NJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260821000000 20260731000000 20326 . kKpaPEyKDhNNs9rizpyOEcK2Nwg04lOQEeUgL175fR1W7zTzCo96Lpf5xuMeN9vZKHq362Yi6pX1 1BeCL5JejRJ0q4OflNu2jkjZpqW4JWNeim0gaJxd2fg8MMh7qg9gZnMfFLzK8y2Hudve+JF3LD/M jIPpdPd/GEISqynmOLYxNmol2eKMdiDJ3RNxVTfzmEo8QqXGGDEozWf5pM9XvTa22LLJ37NHblwT 0eeHnhxKwt5q4RH7YabmC2NlUge5R/GoCQD0WJdmi139O7DyyRDa1YEHSPigdLDRjXuAmw1acBrL bmvS7F9j1Zbc2Mm1MO924z6z9L3GXPlaSV1NJw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to e.root-servers.net for cpa.tg/A
	Received 748 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 748 octets ;; HEADER SECTION ;; id = 24987 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cpa.tg. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) tg. 172800 IN NS ns1.nic.tg. tg. 172800 IN NS ns1.admin.net. tg. 172800 IN NS ns2.nic.tg. tg. 172800 IN NS ns2.admin.net. tg. 172800 IN NS ns3.admin.net. tg. 172800 IN NS ns4.admin.net. tg. 172800 IN NS ns5.admin.net. tg. 172800 IN NS tld.cafe.tg. tg. 86400 IN NSEC th. NS RRSIG NSEC tg. 86400 IN RRSIG ( NSEC 8 1 86400 20260817050000 20260804040000 57780 . aLGjq+kQ2UrMzOj3loLIZwgVCccrABzUWXqy3BovwwzSpsM3RcyNrjmkIP3I9ddaSsEDS41+H5oN yi+IzZkG9uT9n9JmmbzQayJlkt4sA4rqAuFwq7x3X0q3ro3CDL5eH72oMxd3ni+DPlXvblVnZF/S WwUhBfu2m3WhXy++xhXHVBeuLGAakdifYtn0ZumsJmK9e9wd5lBgL3ixCk6MgPC1pk0Vh4SbGYnu f/EzxnDmwpru/PviHtGvAOE09rm+FPjgxzus4yDfqF5zgMSqkqB8uTs2jC8He7ahU8obztn5e7Jv YyhWpMGpn77mqb+3isgkm4KPafgA14A4TjpPSQ== ) ;; ADDITIONAL SECTION (13 records) ns1.nic.tg. 172800 IN A 41.207.188.36 ns1.admin.net. 172800 IN A 198.73.186.1 ns2.nic.tg. 172800 IN A 80.248.68.12 ns2.admin.net. 172800 IN A 108.61.25.122 ns2.admin.net. 172800 IN AAAA 2001:19f0:300:1007::cafe ns3.admin.net. 172800 IN A 87.98.180.44 ns3.admin.net. 172800 IN AAAA 2001:41d0:2:8adf::2 ns4.admin.net. 172800 IN A 103.25.58.26 ns4.admin.net. 172800 IN AAAA 2406:d501::47e3:2a7c ns5.admin.net. 172800 IN A 188.165.33.42 ns5.admin.net. 172800 IN AAAA 2001:41d0:8:5c79::3 tld.cafe.tg. 172800 IN A 80.248.64.20 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for tg/DNSKEY
	Received 748 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 748 octets ;; HEADER SECTION ;; id = 52453 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tg. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) tg. 172800 IN NS ns2.nic.tg. tg. 172800 IN NS ns1.nic.tg. tg. 172800 IN NS ns5.admin.net. tg. 172800 IN NS ns3.admin.net. tg. 172800 IN NS ns1.admin.net. tg. 172800 IN NS ns2.admin.net. tg. 172800 IN NS ns4.admin.net. tg. 172800 IN NS tld.cafe.tg. tg. 86400 IN NSEC th. NS RRSIG NSEC tg. 86400 IN RRSIG ( NSEC 8 1 86400 20260817050000 20260804040000 57780 . aLGjq+kQ2UrMzOj3loLIZwgVCccrABzUWXqy3BovwwzSpsM3RcyNrjmkIP3I9ddaSsEDS41+H5oN yi+IzZkG9uT9n9JmmbzQayJlkt4sA4rqAuFwq7x3X0q3ro3CDL5eH72oMxd3ni+DPlXvblVnZF/S WwUhBfu2m3WhXy++xhXHVBeuLGAakdifYtn0ZumsJmK9e9wd5lBgL3ixCk6MgPC1pk0Vh4SbGYnu f/EzxnDmwpru/PviHtGvAOE09rm+FPjgxzus4yDfqF5zgMSqkqB8uTs2jC8He7ahU8obztn5e7Jv YyhWpMGpn77mqb+3isgkm4KPafgA14A4TjpPSQ== ) ;; ADDITIONAL SECTION (13 records) tld.cafe.tg. 172800 IN A 80.248.64.20 ns5.admin.net. 172800 IN A 188.165.33.42 ns4.admin.net. 172800 IN A 103.25.58.26 ns3.admin.net. 172800 IN A 87.98.180.44 ns2.admin.net. 172800 IN A 108.61.25.122 ns2.nic.tg. 172800 IN A 80.248.68.12 ns1.admin.net. 172800 IN A 198.73.186.1 ns1.nic.tg. 172800 IN A 41.207.188.36 ns5.admin.net. 172800 IN AAAA 2001:41d0:8:5c79::3 ns4.admin.net. 172800 IN AAAA 2406:d501::47e3:2a7c ns3.admin.net. 172800 IN AAAA 2001:41d0:2:8adf::2 ns2.admin.net. 172800 IN AAAA 2001:19f0:300:1007::cafe ;; { "EDNS-VERSION": 0 }
	Found child zone tg

	Checking DS between . and tg
	Query to b.root-servers.net for tg/DS
	Received 703 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 703 octets ;; HEADER SECTION ;; id = 30081 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tg. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) . 86400 IN SOA ( a.root-servers.net. nstld.verisign-grs.com. 2026080400 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) tg. 86400 IN NSEC th. NS RRSIG NSEC . 86400 IN RRSIG ( SOA 8 0 86400 20260817050000 20260804040000 57780 . ZXLyiSRgRESyR+d3Dr+9F/LbxEkHg16jqfERnCICn/8Hc5Jq5Uw4rhdVeNdfOeQ59wRudqOMtKdm WxGP+ZL2ohu1BTU59zDDcR/yZ+vbqJp5q/dKUhbk04q7TMBqBxMUJ/0eSPEd9hAKgO791v473ong NG8fEI1L8ZlLZ9zt0eZ+f3DD9AV2gojFsbmMQkK5cvYJAQ801GazjLYZOpT4thewg0yFavfaKc5e 1fZTeZcnwF6xV7BU0epzVtt2YxujDcnSbj4l0Uq+EF9eLrnuKAGHwFPs+zGtgkIUrlpTwfPv0cC/ efQm4ZinpxJ1ch0CuriUJsyi8OSn5QqfbaKLTA== ) tg. 86400 IN RRSIG ( NSEC 8 1 86400 20260817050000 20260804040000 57780 . aLGjq+kQ2UrMzOj3loLIZwgVCccrABzUWXqy3BovwwzSpsM3RcyNrjmkIP3I9ddaSsEDS41+H5oN yi+IzZkG9uT9n9JmmbzQayJlkt4sA4rqAuFwq7x3X0q3ro3CDL5eH72oMxd3ni+DPlXvblVnZF/S WwUhBfu2m3WhXy++xhXHVBeuLGAakdifYtn0ZumsJmK9e9wd5lBgL3ixCk6MgPC1pk0Vh4SbGYnu f/EzxnDmwpru/PviHtGvAOE09rm+FPjgxzus4yDfqF5zgMSqkqB8uTs2jC8He7ahU8obztn5e7Jv YyhWpMGpn77mqb+3isgkm4KPafgA14A4TjpPSQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for tg in the . zone
	Query to ns5.admin.net for tg/DNSKEY
	Received 86 bytes from 188.165.33.42
	;; Response received from [188.165.33.42] 86 octets ;; HEADER SECTION ;; id = 45426 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tg. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) tg. 28800 IN SOA ( ns1.nic.tg. hostmaster.nic.tg. 2026080467 ;serial 21600 ;refresh 3600 ;retry 1468800 ;expire 28800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns2.nic.tg for cpa.tg/A
	Received 92 bytes from 80.248.68.12
	;; Response received from [80.248.68.12] 92 octets ;; HEADER SECTION ;; id = 55231 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 2 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cpa.tg. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (2 records) cpa.tg. 86400 IN NS gail.ns.cloudflare.com. cpa.tg. 86400 IN NS gordon.ns.cloudflare.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.admin.net for cpa.tg/DNSKEY
	Received 92 bytes from 103.25.58.26
	;; Response received from [103.25.58.26] 92 octets ;; HEADER SECTION ;; id = 53538 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 2 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cpa.tg. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (2 records) cpa.tg. 86400 IN NS gordon.ns.cloudflare.com. cpa.tg. 86400 IN NS gail.ns.cloudflare.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone cpa.tg

cpa.tg

	Checking DS between tg and cpa.tg
	Query to tld.cafe.tg for cpa.tg/DS
	Received 90 bytes from 80.248.64.20
	;; Response received from [80.248.64.20] 90 octets ;; HEADER SECTION ;; id = 47716 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cpa.tg. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) tg. 28800 IN SOA ( ns1.nic.tg. hostmaster.nic.tg. 2026080467 ;serial 21600 ;refresh 3600 ;retry 1468800 ;expire 28800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for cpa.tg in the tg zone
	Query to gordon.ns.cloudflare.com for cpa.tg/DNSKEY
	Received 97 bytes from 173.245.59.170
	;; Response received from [173.245.59.170] 97 octets ;; HEADER SECTION ;; id = 28220 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cpa.tg. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cpa.tg. 1800 IN SOA ( gail.ns.cloudflare.com. dns.cloudflare.com. 2410150520 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to gail.ns.cloudflare.com for cpa.tg/A
	Received 67 bytes from 108.162.192.116
	;; Response received from [108.162.192.116] 67 octets ;; HEADER SECTION ;; id = 32030 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cpa.tg. IN A ;; ANSWER SECTION (2 records) cpa.tg. 300 IN A 104.21.45.174 cpa.tg. 300 IN A 172.67.217.10 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	gail.ns.cloudflare.com is authoritative for cpa.tg
	Query to gordon.ns.cloudflare.com for cpa.tg/SOA
	Received 97 bytes from 172.64.33.170
	;; Response received from [172.64.33.170] 97 octets ;; HEADER SECTION ;; id = 43851 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cpa.tg. IN SOA ;; ANSWER SECTION (1 record) cpa.tg. 1800 IN SOA ( gail.ns.cloudflare.com. dns.cloudflare.com. 2410150520 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to gail.ns.cloudflare.com for cpa.tg/A
	cpa.tg A RR has value 104.21.45.174
	cpa.tg A RR has value 172.67.217.10
	No RRSIGs found

cpa.tg

	Query to gordon.ns.cloudflare.com for cpa.tg/A
	Received 67 bytes from 173.245.59.170
	;; Response received from [173.245.59.170] 67 octets ;; HEADER SECTION ;; id = 62232 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cpa.tg. IN A ;; ANSWER SECTION (2 records) cpa.tg. 300 IN A 172.67.217.10 cpa.tg. 300 IN A 104.21.45.174 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	gordon.ns.cloudflare.com is authoritative for cpa.tg
	Query to gordon.ns.cloudflare.com for cpa.tg/A
	cpa.tg A RR has value 172.67.217.10
	cpa.tg A RR has value 104.21.45.174
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cpa.tg at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: