DNSSEC Debugger - lequipe.fr

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-06-16 03:22:41 UTC

Analyzing DNSSEC problems for lequipe.fr

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1139 octets ;; HEADER SECTION ;; id = 13229 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to c.root-servers.net for lequipe.fr/A
	Received 562 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 562 octets ;; HEADER SECTION ;; id = 58681 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lequipe.fr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) fr. 172800 IN NS g.ext.nic.fr. fr. 172800 IN NS d.nic.fr. fr. 172800 IN NS f.ext.nic.fr. fr. 86400 IN DS ( 65381 13 2 8163abf45792942cf4ee38cca31f6a6832fcdc6d402338fc687827690c4132f6 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . YYh30Y+l/soz87Bf/GVMXOGHf7GpdE0KAPkfvuDuEhGW9Up8OJ59OuTGE1qhTzQU0zlJS223jmOO j0Tb0ghqpxnsASJfTkag6dBPeAckrMAOHoukn0CgjrGsUXtPi7WIZ7K/42maj6KRk4+0r5l8yaeo +A66MwcnzatKajpwSKWN5zjthJeMwihujtBtWWQQdSc1HedDj9jAGCX9nWqnOHIPGE/Ky7Nxu922 2yjBf0W3y0ce3AaZbbFYZfwcKah4fLHipFXPzwkqe8W2uphxndMrZDA+FmkY3jezu6K8aKPYo31r qml0CvUvZz1VAc6h+WkD68edlvXLZXvW7rnJ0Q== ) ;; ADDITIONAL SECTION (7 records) d.nic.fr. 172800 IN A 194.0.9.1 f.ext.nic.fr. 172800 IN A 194.146.106.46 g.ext.nic.fr. 172800 IN A 194.0.36.1 d.nic.fr. 172800 IN AAAA 2001:678:c::1 f.ext.nic.fr. 172800 IN AAAA 2001:67c:1010:11::53 g.ext.nic.fr. 172800 IN AAAA 2001:678:4c::1 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for fr/DNSKEY
	Received 554 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 554 octets ;; HEADER SECTION ;; id = 3911 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) fr. 172800 IN NS f.ext.nic.fr. fr. 172800 IN NS d.nic.fr. fr. 172800 IN NS g.ext.nic.fr. fr. 86400 IN DS ( 65381 13 2 8163abf45792942cf4ee38cca31f6a6832fcdc6d402338fc687827690c4132f6 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . YYh30Y+l/soz87Bf/GVMXOGHf7GpdE0KAPkfvuDuEhGW9Up8OJ59OuTGE1qhTzQU0zlJS223jmOO j0Tb0ghqpxnsASJfTkag6dBPeAckrMAOHoukn0CgjrGsUXtPi7WIZ7K/42maj6KRk4+0r5l8yaeo +A66MwcnzatKajpwSKWN5zjthJeMwihujtBtWWQQdSc1HedDj9jAGCX9nWqnOHIPGE/Ky7Nxu922 2yjBf0W3y0ce3AaZbbFYZfwcKah4fLHipFXPzwkqe8W2uphxndMrZDA+FmkY3jezu6K8aKPYo31r qml0CvUvZz1VAc6h+WkD68edlvXLZXvW7rnJ0Q== ) ;; ADDITIONAL SECTION (7 records) f.ext.nic.fr. 172800 IN A 194.146.106.46 f.ext.nic.fr. 172800 IN AAAA 2001:67c:1010:11::53 d.nic.fr. 172800 IN A 194.0.9.1 d.nic.fr. 172800 IN AAAA 2001:678:c::1 g.ext.nic.fr. 172800 IN A 194.0.36.1 g.ext.nic.fr. 172800 IN AAAA 2001:678:4c::1 ;; { "EDNS-VERSION": 0 }
	Found child zone fr

	Checking DS between . and fr
	Query to f.root-servers.net for fr/DS
	Received 366 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 366 octets ;; HEADER SECTION ;; id = 41685 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fr. IN DS ;; ANSWER SECTION (2 records) fr. 86400 IN DS ( 65381 13 2 8163abf45792942cf4ee38cca31f6a6832fcdc6d402338fc687827690c4132f6 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . YYh30Y+l/soz87Bf/GVMXOGHf7GpdE0KAPkfvuDuEhGW9Up8OJ59OuTGE1qhTzQU0zlJS223jmOO j0Tb0ghqpxnsASJfTkag6dBPeAckrMAOHoukn0CgjrGsUXtPi7WIZ7K/42maj6KRk4+0r5l8yaeo +A66MwcnzatKajpwSKWN5zjthJeMwihujtBtWWQQdSc1HedDj9jAGCX9nWqnOHIPGE/Ky7Nxu922 2yjBf0W3y0ce3AaZbbFYZfwcKah4fLHipFXPzwkqe8W2uphxndMrZDA+FmkY3jezu6K8aKPYo31r qml0CvUvZz1VAc6h+WkD68edlvXLZXvW7rnJ0Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for fr in the . zone
	DS=65381/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`fr. 86400 IN RRSIG ( DS 8 1 86400 20260628200000 20260615190000 54393 . YYh30Y+l/soz87Bf/GVMXOGHf7GpdE0KAPkfvuDuEhGW9Up8OJ59OuTGE1qhTzQU0zlJS223jmOO j0Tb0ghqpxnsASJfTkag6dBPeAckrMAOHoukn0CgjrGsUXtPi7WIZ7K/42maj6KRk4+0r5l8yaeo +A66MwcnzatKajpwSKWN5zjthJeMwihujtBtWWQQdSc1HedDj9jAGCX9nWqnOHIPGE/Ky7Nxu922 2yjBf0W3y0ce3AaZbbFYZfwcKah4fLHipFXPzwkqe8W2uphxndMrZDA+FmkY3jezu6K8aKPYo31r qml0CvUvZz1VAc6h+WkD68edlvXLZXvW7rnJ0Q== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=65381/SHA-256 is now in the chain-of-trust
	`fr. 86400 IN DS ( 65381 13 2 8163abf45792942cf4ee38cca31f6a6832fcdc6d402338fc687827690c4132f6 )`
	Query to g.ext.nic.fr for fr/DNSKEY
	Received 289 bytes from 194.0.36.1
	;; Response received from [194.0.36.1] 289 octets ;; HEADER SECTION ;; id = 28283 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fr. IN DNSKEY ;; ANSWER SECTION (3 records) fr. 3600 IN DNSKEY ( 257 3 13 C8Q2nWGQPY99Cmln1/zSz7+peZNyxbCHDgisQqSnLXJ6rrfAGXYQdKMJ3SRY3zmBSqtW5+F0Esu3 6NTNXRaxIQ== ) ; keytag 65381 fr. 3600 IN DNSKEY ( 256 3 13 5uYHwQUfYL14+vVTqAU07gLd5gGSy3ToJBUPszsgOufYYEGfzkDBLCom2yIFwkj1oS4gyEYfC0L6 tFReLEiyMg== ) ; keytag 31882 fr. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260710154319 20260610232204 65381 fr. SmKvtbbtvjgYLPBUGSrMpoZepJDwtnrFBVVXsnCmZrLfeihawZgysJTuVoPH0/NuqKNJlBN9/g7U ZtdkJ4qZ3w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for fr
	`fr. 3600 IN DNSKEY ( 257 3 13 C8Q2nWGQPY99Cmln1/zSz7+peZNyxbCHDgisQqSnLXJ6rrfAGXYQdKMJ3SRY3zmBSqtW5+F0Esu3 6NTNXRaxIQ== ) ; keytag 65381`
	`fr. 3600 IN DNSKEY ( 256 3 13 5uYHwQUfYL14+vVTqAU07gLd5gGSy3ToJBUPszsgOufYYEGfzkDBLCom2yIFwkj1oS4gyEYfC0L6 tFReLEiyMg== ) ; keytag 31882`
	DNSKEY=65381/SEP is now in the chain-of-trust
	DS=65381/SHA-256 verifies DNSKEY=65381/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`fr. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260710154319 20260610232204 65381 fr. SmKvtbbtvjgYLPBUGSrMpoZepJDwtnrFBVVXsnCmZrLfeihawZgysJTuVoPH0/NuqKNJlBN9/g7U ZtdkJ4qZ3w== )`
	RRSIG=65381 and DNSKEY=65381/SEP verifies the DNSKEY RRset
	DNSKEY=31882 is now in the chain-of-trust
	Query to g.ext.nic.fr for lequipe.fr/A
	Received 428 bytes from 194.0.36.1
	;; Response received from [194.0.36.1] 428 octets ;; HEADER SECTION ;; id = 21053 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lequipe.fr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) lequipe.fr. 3600 IN NS nsc.perf1.com. lequipe.fr. 3600 IN NS nsb.perf1.com. lequipe.fr. 3600 IN NS nsz.perf1.com. lequipe.fr. 3600 IN NS nsz.perf1.fr. lequipe.fr. 3600 IN NS nsa.perf1.fr. lequipe.fr. 3600 IN DS ( 13657 13 2 0c5c3b987502930cbe219d09333f3b1fb85660eb4ed89aaaaa00f357efe28629 ) lequipe.fr. 3600 IN DS ( 38088 13 2 7045aaab96e997fecd550a20133223388bb520ba942ee6609106a9698ec66bf9 ) lequipe.fr. 3600 IN RRSIG ( DS 13 2 3600 20260715130754 20260615125208 31882 fr. Qv3Qxv9UbBSnl99oT1ouWRw9N/79l4cb/9hiF2qWRJtsdvemkPNSBuJnCINFfliXej1la+LBSAY+ z7LBAMWm/Q== ) ;; ADDITIONAL SECTION (5 records) nsz.perf1.fr. 3600 IN A 208.80.126.13 nsa.perf1.fr. 3600 IN A 81.92.94.100 nsz.perf1.fr. 3600 IN AAAA 2600:1802:7::1 nsa.perf1.fr. 3600 IN AAAA 2a01:c8:100::100 ;; { "EDNS-VERSION": 0 }
	Query to g.ext.nic.fr for lequipe.fr/DNSKEY
	Received 428 bytes from 194.0.36.1
	;; Response received from [194.0.36.1] 428 octets ;; HEADER SECTION ;; id = 29171 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lequipe.fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) lequipe.fr. 3600 IN NS nsa.perf1.fr. lequipe.fr. 3600 IN NS nsz.perf1.com. lequipe.fr. 3600 IN NS nsz.perf1.fr. lequipe.fr. 3600 IN NS nsb.perf1.com. lequipe.fr. 3600 IN NS nsc.perf1.com. lequipe.fr. 3600 IN DS ( 13657 13 2 0c5c3b987502930cbe219d09333f3b1fb85660eb4ed89aaaaa00f357efe28629 ) lequipe.fr. 3600 IN DS ( 38088 13 2 7045aaab96e997fecd550a20133223388bb520ba942ee6609106a9698ec66bf9 ) lequipe.fr. 3600 IN RRSIG ( DS 13 2 3600 20260715130754 20260615125208 31882 fr. Qv3Qxv9UbBSnl99oT1ouWRw9N/79l4cb/9hiF2qWRJtsdvemkPNSBuJnCINFfliXej1la+LBSAY+ z7LBAMWm/Q== ) ;; ADDITIONAL SECTION (5 records) nsz.perf1.fr. 3600 IN A 208.80.126.13 nsa.perf1.fr. 3600 IN A 81.92.94.100 nsz.perf1.fr. 3600 IN AAAA 2600:1802:7::1 nsa.perf1.fr. 3600 IN AAAA 2a01:c8:100::100 ;; { "EDNS-VERSION": 0 }
	Found child zone lequipe.fr

lequipe.fr

	Checking DS between fr and lequipe.fr
	Query to d.nic.fr for lequipe.fr/DS
	Received 233 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 233 octets ;; HEADER SECTION ;; id = 53777 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lequipe.fr. IN DS ;; ANSWER SECTION (3 records) lequipe.fr. 3600 IN DS ( 13657 13 2 0c5c3b987502930cbe219d09333f3b1fb85660eb4ed89aaaaa00f357efe28629 ) lequipe.fr. 3600 IN DS ( 38088 13 2 7045aaab96e997fecd550a20133223388bb520ba942ee6609106a9698ec66bf9 ) lequipe.fr. 3600 IN RRSIG ( DS 13 2 3600 20260715130754 20260615125208 31882 fr. Qv3Qxv9UbBSnl99oT1ouWRw9N/79l4cb/9hiF2qWRJtsdvemkPNSBuJnCINFfliXej1la+LBSAY+ z7LBAMWm/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for lequipe.fr in the fr zone
	DS=13657/SHA-256 has algorithm ECDSAP256SHA256
	DS=38088/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`lequipe.fr. 3600 IN RRSIG ( DS 13 2 3600 20260715130754 20260615125208 31882 fr. Qv3Qxv9UbBSnl99oT1ouWRw9N/79l4cb/9hiF2qWRJtsdvemkPNSBuJnCINFfliXej1la+LBSAY+ z7LBAMWm/Q== )`
	RRSIG=31882 and DNSKEY=31882 verifies the DS RRset
	DS=13657/SHA-256 is now in the chain-of-trust
	DS=38088/SHA-256 is now in the chain-of-trust
	`lequipe.fr. 3600 IN DS ( 13657 13 2 0c5c3b987502930cbe219d09333f3b1fb85660eb4ed89aaaaa00f357efe28629 )`
	`lequipe.fr. 3600 IN DS ( 38088 13 2 7045aaab96e997fecd550a20133223388bb520ba942ee6609106a9698ec66bf9 )`
	Query to nsb.perf1.com for lequipe.fr/DNSKEY
	Received 305 bytes from 81.92.95.100
	;; Response received from [81.92.95.100] 305 octets ;; HEADER SECTION ;; id = 4761 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lequipe.fr. IN DNSKEY ;; ANSWER SECTION (3 records) lequipe.fr. 7200 IN DNSKEY ( 257 3 13 q/ATsH2+vtrMYmxHm+rJXzr2SQzLMVVwmQCrMibftiHrJCaXFt5HpbIYg426IOWq3IaLhfj6HHAk /kFmVCZTkA== ) ; keytag 13657 lequipe.fr. 7200 IN DNSKEY ( 256 3 13 24uYogKS0ns6WbxtsCCVfDyl5UDnlH8JzIrdt5UMIjnB1EL7BwNxSF1yst9fPohIWQrQJr5Tdf9y 4r+JN/qhKg== ) ; keytag 20932 lequipe.fr. 7200 IN RRSIG ( DNSKEY 13 2 7200 20260625000000 20260604000000 13657 lequipe.fr. 8Bxl2BGFRmz3/lbUxe2y4zcN6eeGAcYrox9nFalZoFTAdgg3p235toC5dzaBoqpUWQ+aIQ4V88Wj W8KZ908j1w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for lequipe.fr
	`lequipe.fr. 7200 IN DNSKEY ( 257 3 13 q/ATsH2+vtrMYmxHm+rJXzr2SQzLMVVwmQCrMibftiHrJCaXFt5HpbIYg426IOWq3IaLhfj6HHAk /kFmVCZTkA== ) ; keytag 13657`
	`lequipe.fr. 7200 IN DNSKEY ( 256 3 13 24uYogKS0ns6WbxtsCCVfDyl5UDnlH8JzIrdt5UMIjnB1EL7BwNxSF1yst9fPohIWQrQJr5Tdf9y 4r+JN/qhKg== ) ; keytag 20932`
	DNSKEY=13657/SEP is now in the chain-of-trust
	DS=13657/SHA-256 verifies DNSKEY=13657/SEP
	DS=38088/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`lequipe.fr. 7200 IN RRSIG ( DNSKEY 13 2 7200 20260625000000 20260604000000 13657 lequipe.fr. 8Bxl2BGFRmz3/lbUxe2y4zcN6eeGAcYrox9nFalZoFTAdgg3p235toC5dzaBoqpUWQ+aIQ4V88Wj W8KZ908j1w== )`
	RRSIG=13657 and DNSKEY=13657/SEP verifies the DNSKEY RRset
	DNSKEY=20932 is now in the chain-of-trust
	Query to nsz.perf1.com for lequipe.fr/A
	Received 161 bytes from 208.80.124.13
	;; Response received from [208.80.124.13] 161 octets ;; HEADER SECTION ;; id = 42897 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lequipe.fr. IN A ;; ANSWER SECTION (2 records) lequipe.fr. 3600 IN A 35.186.248.227 lequipe.fr. 3600 IN RRSIG ( A 13 2 3600 20260625000000 20260604000000 20932 lequipe.fr. A6P5YR1j5EZuOW+NeXiEyPvLKlP51pqCCPGPhVShWje4nFItx8OiPGF48ctdQq+O1LBRKQ5tBKkd V31R0Yu60A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsz.perf1.com is authoritative for lequipe.fr
	Found RRSIG signed by lequipe.fr zone
	Query to nsz.perf1.fr for lequipe.fr/SOA
	Received 217 bytes from 208.80.126.13
	;; Response received from [208.80.126.13] 217 octets ;; HEADER SECTION ;; id = 4098 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lequipe.fr. IN SOA ;; ANSWER SECTION (2 records) lequipe.fr. 3600 IN SOA ( nsa.perf1.fr. technical.nameshield.net. 2026061101 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) lequipe.fr. 3600 IN RRSIG ( SOA 13 2 3600 20260625000000 20260604000000 20932 lequipe.fr. MSTHf/Hca1u7Z9Xxdlz2pja+ewJQOyF2pkCkYcIgCrYwWkujQA6PwvgW+TDY8loQv2xqs7G/Sn/T sRc6Ta3Ihg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsa.perf1.fr for lequipe.fr/SOA
	Received 215 bytes from 81.92.94.100
	;; Response received from [81.92.94.100] 215 octets ;; HEADER SECTION ;; id = 65162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lequipe.fr. IN SOA ;; ANSWER SECTION (2 records) lequipe.fr. 3600 IN SOA ( nsa.perf1.fr. technical.nameshield.net. 2026061101 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) lequipe.fr. 3600 IN RRSIG ( SOA 13 2 3600 20260625000000 20260604000000 20932 lequipe.fr. i6BW0CCP3YwMgkNbNYUiA7JQSEqtyJlhbeJUjwt6+ilBI+S1voUJaGOhUoX4agloavAlyxHa1zmT 2mMpebAYpQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsc.perf1.com for lequipe.fr/SOA
	Received 215 bytes from 152.89.172.100
	;; Response received from [152.89.172.100] 215 octets ;; HEADER SECTION ;; id = 23613 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lequipe.fr. IN SOA ;; ANSWER SECTION (2 records) lequipe.fr. 3600 IN SOA ( nsa.perf1.fr. technical.nameshield.net. 2026061101 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) lequipe.fr. 3600 IN RRSIG ( SOA 13 2 3600 20260625000000 20260604000000 20932 lequipe.fr. 6PtftKfnwe6JuoM6NEikafJeaTRg807jLq3+n53qvU3M6FI9ook0PGtYjuDavK/plErJFD8UbVPL LYcfHqGvPg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsb.perf1.com for lequipe.fr/SOA
	Received 215 bytes from 81.92.95.100
	;; Response received from [81.92.95.100] 215 octets ;; HEADER SECTION ;; id = 57737 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lequipe.fr. IN SOA ;; ANSWER SECTION (2 records) lequipe.fr. 3600 IN SOA ( nsa.perf1.fr. technical.nameshield.net. 2026061101 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 7200 ;minimum ) lequipe.fr. 3600 IN RRSIG ( SOA 13 2 3600 20260625000000 20260604000000 20932 lequipe.fr. i6BW0CCP3YwMgkNbNYUiA7JQSEqtyJlhbeJUjwt6+ilBI+S1voUJaGOhUoX4agloavAlyxHa1zmT 2mMpebAYpQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsz.perf1.com for lequipe.fr/A
	lequipe.fr A RR has value 35.186.248.227
	Found 1 RRSIGs over A RRset
	`lequipe.fr. 3600 IN RRSIG ( A 13 2 3600 20260625000000 20260604000000 20932 lequipe.fr. A6P5YR1j5EZuOW+NeXiEyPvLKlP51pqCCPGPhVShWje4nFItx8OiPGF48ctdQq+O1LBRKQ5tBKkd V31R0Yu60A== )`
	RRSIG=20932 and DNSKEY=20932 verifies the A RRset

lequipe.fr

	Query to nsa.perf1.fr for lequipe.fr/A
	Received 161 bytes from 81.92.94.100
	;; Response received from [81.92.94.100] 161 octets ;; HEADER SECTION ;; id = 12206 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lequipe.fr. IN A ;; ANSWER SECTION (2 records) lequipe.fr. 3600 IN A 35.186.248.227 lequipe.fr. 3600 IN RRSIG ( A 13 2 3600 20260625000000 20260604000000 20932 lequipe.fr. aM5zR2flmpgDYezZHskazndIm2afdj7l86nS4BkA9MTYldzZ7N7IR/ZvztYFI9eSYcNRt+/Gsdjv HSWnKolgfw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsa.perf1.fr is authoritative for lequipe.fr
	Found RRSIG signed by lequipe.fr zone
	Query to nsa.perf1.fr for lequipe.fr/A
	lequipe.fr A RR has value 35.186.248.227
	Found 1 RRSIGs over A RRset
	`lequipe.fr. 3600 IN RRSIG ( A 13 2 3600 20260625000000 20260604000000 20932 lequipe.fr. aM5zR2flmpgDYezZHskazndIm2afdj7l86nS4BkA9MTYldzZ7N7IR/ZvztYFI9eSYcNRt+/Gsdjv HSWnKolgfw== )`
	RRSIG=20932 and DNSKEY=20932 verifies the A RRset

lequipe.fr

	Query to nsb.perf1.com for lequipe.fr/A
	Received 161 bytes from 81.92.95.100
	;; Response received from [81.92.95.100] 161 octets ;; HEADER SECTION ;; id = 18500 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lequipe.fr. IN A ;; ANSWER SECTION (2 records) lequipe.fr. 3600 IN A 35.186.248.227 lequipe.fr. 3600 IN RRSIG ( A 13 2 3600 20260625000000 20260604000000 20932 lequipe.fr. aM5zR2flmpgDYezZHskazndIm2afdj7l86nS4BkA9MTYldzZ7N7IR/ZvztYFI9eSYcNRt+/Gsdjv HSWnKolgfw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsb.perf1.com is authoritative for lequipe.fr
	Found RRSIG signed by lequipe.fr zone
	Query to nsb.perf1.com for lequipe.fr/A
	lequipe.fr A RR has value 35.186.248.227
	Found 1 RRSIGs over A RRset
	`lequipe.fr. 3600 IN RRSIG ( A 13 2 3600 20260625000000 20260604000000 20932 lequipe.fr. aM5zR2flmpgDYezZHskazndIm2afdj7l86nS4BkA9MTYldzZ7N7IR/ZvztYFI9eSYcNRt+/Gsdjv HSWnKolgfw== )`
	RRSIG=20932 and DNSKEY=20932 verifies the A RRset

lequipe.fr

	Query to nsz.perf1.fr for lequipe.fr/A
	Received 161 bytes from 208.80.126.13
	;; Response received from [208.80.126.13] 161 octets ;; HEADER SECTION ;; id = 3231 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1280, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lequipe.fr. IN A ;; ANSWER SECTION (2 records) lequipe.fr. 3600 IN A 35.186.248.227 lequipe.fr. 3600 IN RRSIG ( A 13 2 3600 20260625000000 20260604000000 20932 lequipe.fr. A6P5YR1j5EZuOW+NeXiEyPvLKlP51pqCCPGPhVShWje4nFItx8OiPGF48ctdQq+O1LBRKQ5tBKkd V31R0Yu60A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsz.perf1.fr is authoritative for lequipe.fr
	Found RRSIG signed by lequipe.fr zone
	Query to nsz.perf1.fr for lequipe.fr/A
	lequipe.fr A RR has value 35.186.248.227
	Found 1 RRSIGs over A RRset
	`lequipe.fr. 3600 IN RRSIG ( A 13 2 3600 20260625000000 20260604000000 20932 lequipe.fr. A6P5YR1j5EZuOW+NeXiEyPvLKlP51pqCCPGPhVShWje4nFItx8OiPGF48ctdQq+O1LBRKQ5tBKkd V31R0Yu60A== )`
	RRSIG=20932 and DNSKEY=20932 verifies the A RRset

lequipe.fr

	Query to nsc.perf1.com for lequipe.fr/A
	Received 161 bytes from 152.89.172.100
	;; Response received from [152.89.172.100] 161 octets ;; HEADER SECTION ;; id = 47915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lequipe.fr. IN A ;; ANSWER SECTION (2 records) lequipe.fr. 3600 IN RRSIG ( A 13 2 3600 20260625000000 20260604000000 20932 lequipe.fr. Ki+OXHOndazMFekJ1IwFxirVLmG6MZ4KoJiFB2k10VZTXnjzmumEOCB58RAThizULb+MGhGLAv1f ziNxDAvN6A== ) lequipe.fr. 3600 IN A 35.186.248.227 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsc.perf1.com is authoritative for lequipe.fr
	Found RRSIG signed by lequipe.fr zone
	Query to nsc.perf1.com for lequipe.fr/A
	lequipe.fr A RR has value 35.186.248.227
	Found 1 RRSIGs over A RRset
	`lequipe.fr. 3600 IN RRSIG ( A 13 2 3600 20260625000000 20260604000000 20932 lequipe.fr. Ki+OXHOndazMFekJ1IwFxirVLmG6MZ4KoJiFB2k10VZTXnjzmumEOCB58RAThizULb+MGhGLAv1f ziNxDAvN6A== )`
	RRSIG=20932 and DNSKEY=20932 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test lequipe.fr at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: