DNSSEC Debugger

Domain Name:

Time: 2025-07-10 14:57:54 UTC

Analyzing DNSSEC problems for itnc.ro

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1414 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1414 octets ;; HEADER SECTION ;; id = 34887 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	Query to l.root-servers.net for itnc.ro/A
	Received 761 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 761 octets ;; HEADER SECTION ;; id = 48021 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 12 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; itnc.ro. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ro. 172800 IN NS dns-c.rotld.ro. ro. 172800 IN NS dns-at.rotld.ro. ro. 172800 IN NS dns-ro.denic.de. ro. 172800 IN NS primary.rotld.ro. ro. 172800 IN NS sec-dns-a.rotld.ro. ro. 172800 IN NS sec-dns-b.rotld.ro. ro. 86400 IN DS ( 28330 8 2 f76431ce5df70b17cc445dea069da4d581bd8ca79c622e90a5f1eb35bbc6993d ) ro. 86400 IN RRSIG ( DS 8 1 86400 20250723050000 20250710040000 46441 . Ktv5nIQkfhsuUGwgpodO93oUCqGqN0SoZYG6mpaTjt6Ci1fojj2i/PnAU0qf87c+G0KgSlttQzJI y5QMnVsJLc2yDYXxI9DihIjlM2sAFjt6fBn664k894jAG7UN1LCOfoe35PPWM0Ex2OjYbUPskAjs aVZqbS8fnueM6Im4YgEU7LAjRf+gUzWGviwTl0MGfySiPe8euqSW+CWyULnhcUxH4ya/Wqh0c740 /f7p7GN3VW/0iaq4YWQr8ICzHbJ+ImKVyC1dFGna6MwXqDOX1jIwk6DXAee/gdE6bB+Qswguacg+ OH6JhBy+h3NsCaB6MHEaklhINFKQgywg9KHBGQ== ) ;; ADDITIONAL SECTION (12 records) dns-c.rotld.ro. 172800 IN A 194.0.11.113 dns-c.rotld.ro. 172800 IN AAAA 2001:678:e:113::53 dns-at.rotld.ro. 172800 IN A 78.104.145.6 dns-at.rotld.ro. 172800 IN AAAA 2001:628:453:bb::6 primary.rotld.ro. 172800 IN A 192.162.16.18 primary.rotld.ro. 172800 IN AAAA 2a03:5e80:0:4:192:162:16:18 sec-dns-a.rotld.ro. 172800 IN A 192.162.16.20 sec-dns-a.rotld.ro. 172800 IN AAAA 2a03:5e80:0:4:192:162:16:20 sec-dns-b.rotld.ro. 172800 IN A 193.230.31.230 sec-dns-b.rotld.ro. 172800 IN AAAA 2a03:5e80:0:5:193:230:31:230 dns-ro.denic.de. 172800 IN A 81.91.161.99 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for ro/DNSKEY
	Received 756 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 756 octets ;; HEADER SECTION ;; id = 28766 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 12 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ro. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ro. 172800 IN NS dns-c.rotld.ro. ro. 172800 IN NS dns-at.rotld.ro. ro. 172800 IN NS dns-ro.denic.de. ro. 172800 IN NS primary.rotld.ro. ro. 172800 IN NS sec-dns-a.rotld.ro. ro. 172800 IN NS sec-dns-b.rotld.ro. ro. 86400 IN DS ( 28330 8 2 f76431ce5df70b17cc445dea069da4d581bd8ca79c622e90a5f1eb35bbc6993d ) ro. 86400 IN RRSIG ( DS 8 1 86400 20250723050000 20250710040000 46441 . Ktv5nIQkfhsuUGwgpodO93oUCqGqN0SoZYG6mpaTjt6Ci1fojj2i/PnAU0qf87c+G0KgSlttQzJI y5QMnVsJLc2yDYXxI9DihIjlM2sAFjt6fBn664k894jAG7UN1LCOfoe35PPWM0Ex2OjYbUPskAjs aVZqbS8fnueM6Im4YgEU7LAjRf+gUzWGviwTl0MGfySiPe8euqSW+CWyULnhcUxH4ya/Wqh0c740 /f7p7GN3VW/0iaq4YWQr8ICzHbJ+ImKVyC1dFGna6MwXqDOX1jIwk6DXAee/gdE6bB+Qswguacg+ OH6JhBy+h3NsCaB6MHEaklhINFKQgywg9KHBGQ== ) ;; ADDITIONAL SECTION (12 records) dns-c.rotld.ro. 172800 IN A 194.0.11.113 dns-c.rotld.ro. 172800 IN AAAA 2001:678:e:113::53 dns-at.rotld.ro. 172800 IN A 78.104.145.6 dns-at.rotld.ro. 172800 IN AAAA 2001:628:453:bb::6 primary.rotld.ro. 172800 IN A 192.162.16.18 primary.rotld.ro. 172800 IN AAAA 2a03:5e80:0:4:192:162:16:18 sec-dns-a.rotld.ro. 172800 IN A 192.162.16.20 sec-dns-a.rotld.ro. 172800 IN AAAA 2a03:5e80:0:4:192:162:16:20 sec-dns-b.rotld.ro. 172800 IN A 193.230.31.230 sec-dns-b.rotld.ro. 172800 IN AAAA 2a03:5e80:0:5:193:230:31:230 dns-ro.denic.de. 172800 IN A 81.91.161.99 ;; { "EDNS-VERSION": 0 }
	Found child zone ro

	Checking DS between . and ro
	Query to j.root-servers.net for ro/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 366 octets ;; HEADER SECTION ;; id = 23413 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ro. IN DS ;; ANSWER SECTION (2 records) ro. 86400 IN DS ( 28330 8 2 f76431ce5df70b17cc445dea069da4d581bd8ca79c622e90a5f1eb35bbc6993d ) ro. 86400 IN RRSIG ( DS 8 1 86400 20250723050000 20250710040000 46441 . Ktv5nIQkfhsuUGwgpodO93oUCqGqN0SoZYG6mpaTjt6Ci1fojj2i/PnAU0qf87c+G0KgSlttQzJI y5QMnVsJLc2yDYXxI9DihIjlM2sAFjt6fBn664k894jAG7UN1LCOfoe35PPWM0Ex2OjYbUPskAjs aVZqbS8fnueM6Im4YgEU7LAjRf+gUzWGviwTl0MGfySiPe8euqSW+CWyULnhcUxH4ya/Wqh0c740 /f7p7GN3VW/0iaq4YWQr8ICzHbJ+ImKVyC1dFGna6MwXqDOX1jIwk6DXAee/gdE6bB+Qswguacg+ OH6JhBy+h3NsCaB6MHEaklhINFKQgywg9KHBGQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ro in the . zone
	DS=28330/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ro. 86400 IN RRSIG ( DS 8 1 86400 20250723050000 20250710040000 46441 . Ktv5nIQkfhsuUGwgpodO93oUCqGqN0SoZYG6mpaTjt6Ci1fojj2i/PnAU0qf87c+G0KgSlttQzJI y5QMnVsJLc2yDYXxI9DihIjlM2sAFjt6fBn664k894jAG7UN1LCOfoe35PPWM0Ex2OjYbUPskAjs aVZqbS8fnueM6Im4YgEU7LAjRf+gUzWGviwTl0MGfySiPe8euqSW+CWyULnhcUxH4ya/Wqh0c740 /f7p7GN3VW/0iaq4YWQr8ICzHbJ+ImKVyC1dFGna6MwXqDOX1jIwk6DXAee/gdE6bB+Qswguacg+ OH6JhBy+h3NsCaB6MHEaklhINFKQgywg9KHBGQ== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=28330/SHA-256 is now in the chain-of-trust
	`ro. 86400 IN DS ( 28330 8 2 f76431ce5df70b17cc445dea069da4d581bd8ca79c622e90a5f1eb35bbc6993d )`
	Query to dns-at.rotld.ro for ro/DNSKEY
	Received 1055 bytes from 78.104.145.6
	;; Response received from [78.104.145.6] 1055 octets ;; HEADER SECTION ;; id = 25181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ro. IN DNSKEY ;; ANSWER SECTION (5 records) ro. 86400 IN DNSKEY ( 256 3 8 AwEAAaOCGS4sbx+0mscniIQa5XMCfCcPbdReYpRBeGI5yuaIdjYAYCsc6YXe4l8q4UN57fLBUn6i ASWxAJbrFuAQ0PQs75aypTgHOgQAca5E60PZNH7YZtc5uLNUtKDXed++UHWzi4YG8EkbQPNXQJbK K7pIVGYAc2PDB8jBimKZ8Ks/ ) ; keytag 36538 ro. 86400 IN DNSKEY ( 256 3 8 AwEAAdCPV9f4ywRgPRp+pRjhlmiRldXb1dMC84NpXBgE9wCzhuFqUx79PvZsifBbbzFEg9ywHaz7 0VGr61fOML69MMci6Tpd45Xaq1X3LCc2KvbJeLN8ypplsfyJ3CC8GrL8mpJFKnD8ejX8xtDD8dzK hMZSV21+Ed0dXvQryfPn4kZ9 ) ; keytag 37671 ro. 86400 IN DNSKEY ( 257 3 8 AwEAAbu6aGL5o/5pwKLE08qgOamuxtqzNOjmgiZWDDxITA/4sOO8lIcgA126TbKUWGeAJSYH1zS9 W576iWFMG2+x5FPwyFnva81tx8fBxH0O2emMPbmp+uTXd0MlU4fVxM0yYwBdqbR0fpsny3q6SqV2 qj/E3d/Nyiz9HAgQ+DMxG5a+Uj9lhGVGQefVdDzhxXnMBF9KTf5+Q42jgwHrKM6sYhv6J/y5F+7N hOE/r/TUdUq49FkWaipCF2c9CRGD4DaC7sWpZoxN/35rKusrRao0fxZsOUiOLvoWGgNNKfBvy5oV 0Z+wmZq4acD6ej2RqcsbPZ5oym0nY6SWCevXth7DNUk= ) ; keytag 28330 ro. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250809071003 20250710061003 28330 ro. MouXgc3OjIdMZuPe0a/xL7eLqhoYBhY0mDU9PtQBgdN7/Bq8JyOSpbvJjEXS11SprsOmS/w5WaGM 7DUitLlJ+3gJzlkG0rsuYRvwLLBbjnnMlPNO9If3kaiKT+oNiYyvPi8JlnLsuAr5N8815LV5An1U 5jPixcu3l3c4EZg+3WBB3emAOY99Qj0k9nvyy3+w/Pi8v6eY88U1CDKvaVbRaUSUFv8lrqzdNJF4 VTHAfO7kqy2qFz2G1cxDaIY8WuXpm5ExiIDhFf6L+CbzvRSQrU+sTX5XhrufTWCCN94Ryg/A5/lW WH/WHp1yO114KD0/at+rtNBu2M18lZj2fYTYlQ== ) ro. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250809071003 20250710061003 36538 ro. RPI6iIvemQcUIRxrFAgAnx8RSNyBpKMeaQH/qPnalq2z9TM3DP/Ho0rsaBCnc692ktLlHjqZT2/y s6lcuOayX0O5McaqdJDVGqRCCA5uo3+4wsvhz6L/POOGTLboeHa/QQiGuQHXhMKrKovnQQwBntas Pejd3oFG0obJcHSvDkU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ro
	`ro. 86400 IN DNSKEY ( 256 3 8 AwEAAaOCGS4sbx+0mscniIQa5XMCfCcPbdReYpRBeGI5yuaIdjYAYCsc6YXe4l8q4UN57fLBUn6i ASWxAJbrFuAQ0PQs75aypTgHOgQAca5E60PZNH7YZtc5uLNUtKDXed++UHWzi4YG8EkbQPNXQJbK K7pIVGYAc2PDB8jBimKZ8Ks/ ) ; keytag 36538`
	`ro. 86400 IN DNSKEY ( 256 3 8 AwEAAdCPV9f4ywRgPRp+pRjhlmiRldXb1dMC84NpXBgE9wCzhuFqUx79PvZsifBbbzFEg9ywHaz7 0VGr61fOML69MMci6Tpd45Xaq1X3LCc2KvbJeLN8ypplsfyJ3CC8GrL8mpJFKnD8ejX8xtDD8dzK hMZSV21+Ed0dXvQryfPn4kZ9 ) ; keytag 37671`
	`ro. 86400 IN DNSKEY ( 257 3 8 AwEAAbu6aGL5o/5pwKLE08qgOamuxtqzNOjmgiZWDDxITA/4sOO8lIcgA126TbKUWGeAJSYH1zS9 W576iWFMG2+x5FPwyFnva81tx8fBxH0O2emMPbmp+uTXd0MlU4fVxM0yYwBdqbR0fpsny3q6SqV2 qj/E3d/Nyiz9HAgQ+DMxG5a+Uj9lhGVGQefVdDzhxXnMBF9KTf5+Q42jgwHrKM6sYhv6J/y5F+7N hOE/r/TUdUq49FkWaipCF2c9CRGD4DaC7sWpZoxN/35rKusrRao0fxZsOUiOLvoWGgNNKfBvy5oV 0Z+wmZq4acD6ej2RqcsbPZ5oym0nY6SWCevXth7DNUk= ) ; keytag 28330`
	DNSKEY=28330/SEP is now in the chain-of-trust
	DS=28330/SHA-256 verifies DNSKEY=28330/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`ro. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250809071003 20250710061003 28330 ro. MouXgc3OjIdMZuPe0a/xL7eLqhoYBhY0mDU9PtQBgdN7/Bq8JyOSpbvJjEXS11SprsOmS/w5WaGM 7DUitLlJ+3gJzlkG0rsuYRvwLLBbjnnMlPNO9If3kaiKT+oNiYyvPi8JlnLsuAr5N8815LV5An1U 5jPixcu3l3c4EZg+3WBB3emAOY99Qj0k9nvyy3+w/Pi8v6eY88U1CDKvaVbRaUSUFv8lrqzdNJF4 VTHAfO7kqy2qFz2G1cxDaIY8WuXpm5ExiIDhFf6L+CbzvRSQrU+sTX5XhrufTWCCN94Ryg/A5/lW WH/WHp1yO114KD0/at+rtNBu2M18lZj2fYTYlQ== )`
	`ro. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250809071003 20250710061003 36538 ro. RPI6iIvemQcUIRxrFAgAnx8RSNyBpKMeaQH/qPnalq2z9TM3DP/Ho0rsaBCnc692ktLlHjqZT2/y s6lcuOayX0O5McaqdJDVGqRCCA5uo3+4wsvhz6L/POOGTLboeHa/QQiGuQHXhMKrKovnQQwBntas Pejd3oFG0obJcHSvDkU= )`
	RRSIG=28330 and DNSKEY=28330/SEP verifies the DNSKEY RRset
	RRSIG=36538 and DNSKEY=36538 verifies the DNSKEY RRset
	DNSKEY=36538 is now in the chain-of-trust
	DNSKEY=37671 is now in the chain-of-trust
	Query to dns-at.rotld.ro for itnc.ro/A
	Received 279 bytes from 78.104.145.6
	;; Response received from [78.104.145.6] 279 octets ;; HEADER SECTION ;; id = 33044 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 3 arcount = 2 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; itnc.ro. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) itnc.ro. 86400 IN NS ns.itnc.ro. itnc.ro. 86400 IN DS ( 47357 8 2 00f242d90fe02b65883adc1993eb8efae63b89fd135eb5f7ed657f593d8857fe ) itnc.ro. 86400 IN RRSIG ( DS 8 2 86400 20250730085254 20250630084632 36538 ro. Y95I5SKB0phUWTSoxS30n34betnqdOI3ba9zhM4VaLbyej3AXLvbnaQUL33zUYzC0F0US5lWzd0R Rxh31jtovwhkBN7rVDEEEZ5AouU3z8gA7In8WC2wg6BB/X9UMJ++qCkgPzxOatWhp0OcSaX/Jn2t 4VT9hZK4FDjtZp/Tg7I= ) ;; ADDITIONAL SECTION (2 records) ns.itnc.ro. 86400 IN A 90.84.237.182 ;; { "EDNS-VERSION": 0 }
	Query to dns-at.rotld.ro for itnc.ro/DNSKEY
	Received 279 bytes from 78.104.145.6
	;; Response received from [78.104.145.6] 279 octets ;; HEADER SECTION ;; id = 54463 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 3 arcount = 2 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; itnc.ro. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) itnc.ro. 86400 IN NS ns.itnc.ro. itnc.ro. 86400 IN DS ( 47357 8 2 00f242d90fe02b65883adc1993eb8efae63b89fd135eb5f7ed657f593d8857fe ) itnc.ro. 86400 IN RRSIG ( DS 8 2 86400 20250730085254 20250630084632 36538 ro. Y95I5SKB0phUWTSoxS30n34betnqdOI3ba9zhM4VaLbyej3AXLvbnaQUL33zUYzC0F0US5lWzd0R Rxh31jtovwhkBN7rVDEEEZ5AouU3z8gA7In8WC2wg6BB/X9UMJ++qCkgPzxOatWhp0OcSaX/Jn2t 4VT9hZK4FDjtZp/Tg7I= ) ;; ADDITIONAL SECTION (2 records) ns.itnc.ro. 86400 IN A 90.84.237.182 ;; { "EDNS-VERSION": 0 }
	Found child zone itnc.ro

itnc.ro

	Checking DS between ro and itnc.ro
	Query to sec-dns-a.rotld.ro for itnc.ro/DS
	Received 246 bytes from 192.162.16.20
	;; Response received from [192.162.16.20] 246 octets ;; HEADER SECTION ;; id = 29255 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; itnc.ro. IN DS ;; ANSWER SECTION (2 records) itnc.ro. 86400 IN DS ( 47357 8 2 00f242d90fe02b65883adc1993eb8efae63b89fd135eb5f7ed657f593d8857fe ) itnc.ro. 86400 IN RRSIG ( DS 8 2 86400 20250730085254 20250630084632 36538 ro. Y95I5SKB0phUWTSoxS30n34betnqdOI3ba9zhM4VaLbyej3AXLvbnaQUL33zUYzC0F0US5lWzd0R Rxh31jtovwhkBN7rVDEEEZ5AouU3z8gA7In8WC2wg6BB/X9UMJ++qCkgPzxOatWhp0OcSaX/Jn2t 4VT9hZK4FDjtZp/Tg7I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for itnc.ro in the ro zone
	DS=47357/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`itnc.ro. 86400 IN RRSIG ( DS 8 2 86400 20250730085254 20250630084632 36538 ro. Y95I5SKB0phUWTSoxS30n34betnqdOI3ba9zhM4VaLbyej3AXLvbnaQUL33zUYzC0F0US5lWzd0R Rxh31jtovwhkBN7rVDEEEZ5AouU3z8gA7In8WC2wg6BB/X9UMJ++qCkgPzxOatWhp0OcSaX/Jn2t 4VT9hZK4FDjtZp/Tg7I= )`
	RRSIG=36538 and DNSKEY=36538 verifies the DS RRset
	DS=47357/SHA-256 is now in the chain-of-trust
	`itnc.ro. 86400 IN DS ( 47357 8 2 00f242d90fe02b65883adc1993eb8efae63b89fd135eb5f7ed657f593d8857fe )`
	Query to ns.itnc.ro for itnc.ro/DNSKEY
	Received 77 bytes from 90.84.237.182
	;; Response received from [90.84.237.182] 77 octets ;; HEADER SECTION ;; id = 53474 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; itnc.ro. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) itnc.ro. 3600 IN SOA ( itnc.ro. root.itnc.ro. 2025042601 ;serial 28800 ;refresh 7200 ;retry 2419200 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	DS=47357/SHA-256 is published, but a corresponding DNSKEY is not
	Query to ns.itnc.ro for itnc.ro/A
	Received 113 bytes from 90.84.237.182
	;; Response received from [90.84.237.182] 113 octets ;; HEADER SECTION ;; id = 21752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 1 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; itnc.ro. IN A ;; ANSWER SECTION (1 record) itnc.ro. 3600 IN A 90.84.237.182 ;; AUTHORITY SECTION (1 record) itnc.ro. 3600 IN NS ns.itnc.ro. ;; ADDITIONAL SECTION (3 records) ns.itnc.ro. 3600 IN A 90.84.237.182 ns.itnc.ro. 3600 IN AAAA 2a02:a58:8040:6700:7285:c2ff:fe8f:57c4 ;; { "EDNS-VERSION": 0 }
	ns.itnc.ro is authoritative for itnc.ro
	Query to ns.itnc.ro for itnc.ro/A
	Received 113 bytes from 90.84.237.182
	;; Response received from [90.84.237.182] 113 octets ;; HEADER SECTION ;; id = 59327 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 1 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; itnc.ro. IN A ;; ANSWER SECTION (1 record) itnc.ro. 3600 IN A 90.84.237.182 ;; AUTHORITY SECTION (1 record) itnc.ro. 3600 IN NS ns.itnc.ro. ;; ADDITIONAL SECTION (3 records) ns.itnc.ro. 3600 IN A 90.84.237.182 ns.itnc.ro. 3600 IN AAAA 2a02:a58:8040:6700:7285:c2ff:fe8f:57c4 ;; { "EDNS-VERSION": 0 }
	itnc.ro A RR has value 90.84.237.182
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test itnc.ro at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: