DNSSEC Debugger - novomedia.ch

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-06-13 05:56:09 UTC

Analyzing DNSSEC problems for novomedia.ch

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 34432 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260701000000 20260610000000 20326 . j4xwc5ju8Rar7jcd8yX1jGrb5c85D/uGNLvUpiKCzuSVqv0zhUS56KtqD0JmBo1rC+aWxywONWS6 o76i4p5TOOWFWdrops0E/Vw3OFQW+jLxsscc+Y9WUbK1PxTB3UPdWfiHw3azpvgsaaUdXAWeev5t MWZXcj4NM7NoCZJk9ig5onr298AVFZoFNZP6edyzWhyhkMX0DOxBH1M8+c8te2dFpck09pK2GEvA P5Cf1zlsGmZOiZRxB2mDLOXnCbqwJnHQSyhpW9QZkJGJbogrNPwMWdV+X3xcQ5n+dL9aRLtAkKeS p8FDo1ZeGo9xAbha9AjeCyPF3VkSRQEw9owjJg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to g.root-servers.net for novomedia.ch/A
	Received 682 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 682 octets ;; HEADER SECTION ;; id = 22029 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novomedia.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 58745 13 2 083ed7735a6aad21d51cb0af5c485055602b392435e92b2c13614a6bc8d46b92 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20260626050000 20260613040000 54393 . u6XhNPJn2gJuzHl/4oWkD5dmZZsW3AbJLKdIqgmnXxznYu+NvjK7H+/GgOat8/KYHeV9fcscj+AU fl3QUPWXQFX9y3i35ddr7ysYOBpvvZw/b+5n746duBhkkAPCsUoP6p7LUnNzg9DMxs8rNFgXJ3VD kFmIo60KzxEWDKb183S28zPArzvm1Z7SFKkD4neLUHRPe+GLlDJqIYpfNX9L4lDlSWjsuKFDZxYw 97ZLH1H6+6b5zhJs18dyK91+M8va+dbajEHyrQAU3IB/f2bRCWEybyLGxnQBhBQ4N1CakatIq4qQ wRdIA+kFh+sOa001WMSLb/NOvTV8bL6noZQ8dg== ) ;; ADDITIONAL SECTION (11 records) f.nic.ch. 172800 IN A 194.146.106.10 e.nic.ch. 172800 IN A 194.0.17.1 d.nic.ch. 172800 IN A 194.0.25.39 b.nic.ch. 172800 IN A 130.59.31.43 a.nic.ch. 172800 IN A 130.59.31.41 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 e.nic.ch. 172800 IN AAAA 2001:678:3::1 d.nic.ch. 172800 IN AAAA 2001:678:20::39 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for ch/DNSKEY
	Received 670 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 670 octets ;; HEADER SECTION ;; id = 20908 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 86400 IN DS ( 58745 13 2 083ed7735a6aad21d51cb0af5c485055602b392435e92b2c13614a6bc8d46b92 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20260626050000 20260613040000 54393 . u6XhNPJn2gJuzHl/4oWkD5dmZZsW3AbJLKdIqgmnXxznYu+NvjK7H+/GgOat8/KYHeV9fcscj+AU fl3QUPWXQFX9y3i35ddr7ysYOBpvvZw/b+5n746duBhkkAPCsUoP6p7LUnNzg9DMxs8rNFgXJ3VD kFmIo60KzxEWDKb183S28zPArzvm1Z7SFKkD4neLUHRPe+GLlDJqIYpfNX9L4lDlSWjsuKFDZxYw 97ZLH1H6+6b5zhJs18dyK91+M8va+dbajEHyrQAU3IB/f2bRCWEybyLGxnQBhBQ4N1CakatIq4qQ wRdIA+kFh+sOa001WMSLb/NOvTV8bL6noZQ8dg== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 d.nic.ch. 172800 IN A 194.0.25.39 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; { "EDNS-VERSION": 0 }
	Found child zone ch

	Checking DS between . and ch
	Query to d.root-servers.net for ch/DS
	Received 366 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 366 octets ;; HEADER SECTION ;; id = 33011 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 58745 13 2 083ed7735a6aad21d51cb0af5c485055602b392435e92b2c13614a6bc8d46b92 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20260626050000 20260613040000 54393 . u6XhNPJn2gJuzHl/4oWkD5dmZZsW3AbJLKdIqgmnXxznYu+NvjK7H+/GgOat8/KYHeV9fcscj+AU fl3QUPWXQFX9y3i35ddr7ysYOBpvvZw/b+5n746duBhkkAPCsUoP6p7LUnNzg9DMxs8rNFgXJ3VD kFmIo60KzxEWDKb183S28zPArzvm1Z7SFKkD4neLUHRPe+GLlDJqIYpfNX9L4lDlSWjsuKFDZxYw 97ZLH1H6+6b5zhJs18dyK91+M8va+dbajEHyrQAU3IB/f2bRCWEybyLGxnQBhBQ4N1CakatIq4qQ wRdIA+kFh+sOa001WMSLb/NOvTV8bL6noZQ8dg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ch in the . zone
	DS=58745/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20260626050000 20260613040000 54393 . u6XhNPJn2gJuzHl/4oWkD5dmZZsW3AbJLKdIqgmnXxznYu+NvjK7H+/GgOat8/KYHeV9fcscj+AU fl3QUPWXQFX9y3i35ddr7ysYOBpvvZw/b+5n746duBhkkAPCsUoP6p7LUnNzg9DMxs8rNFgXJ3VD kFmIo60KzxEWDKb183S28zPArzvm1Z7SFKkD4neLUHRPe+GLlDJqIYpfNX9L4lDlSWjsuKFDZxYw 97ZLH1H6+6b5zhJs18dyK91+M8va+dbajEHyrQAU3IB/f2bRCWEybyLGxnQBhBQ4N1CakatIq4qQ wRdIA+kFh+sOa001WMSLb/NOvTV8bL6noZQ8dg== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=58745/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 58745 13 2 083ed7735a6aad21d51cb0af5c485055602b392435e92b2c13614a6bc8d46b92 )`
	Query to e.nic.ch for ch/DNSKEY
	Received 369 bytes from 194.0.17.1
	;; Response received from [194.0.17.1] 369 octets ;; HEADER SECTION ;; id = 58812 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 256 3 13 M2is3u8XiBhISilZiytCrccGvbYPcfqWIZ6f0LzchYZf74SjC+6tSqWRnowm73VwDKOvfWLrsCec iIKQO9m0UQ== ) ; keytag 35417 ch. 86400 IN DNSKEY ( 256 3 13 SNhx88Qerh9m1yUihDiK1b5mGzG/dHIOSQbTU8eGGGxk+936fXnrItoByiG0SN/vBcaX9GfPNutZ yFnzjgjj4g== ) ; keytag 6546 ch. 86400 IN DNSKEY ( 257 3 13 af3VgrsVYa6Jm3d1lwsoCAEqQbeNpLUJ5kHjkUksCCPvubXuPEwTJGDUUbw9QRJtm6lBIAjbjtAc cGemAgcyZQ== ) ; keytag 58745 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260728100909 20260612090909 58745 ch. cdkw5wdSXf2qrdKd3C3kWKDZ3psNQvBuEXKz2SMoueJoqlDHZmUvT2YORrwFFRFA2O5Xs80ooOvi JH10HFzMJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 256 3 13 M2is3u8XiBhISilZiytCrccGvbYPcfqWIZ6f0LzchYZf74SjC+6tSqWRnowm73VwDKOvfWLrsCec iIKQO9m0UQ== ) ; keytag 35417`
	`ch. 86400 IN DNSKEY ( 256 3 13 SNhx88Qerh9m1yUihDiK1b5mGzG/dHIOSQbTU8eGGGxk+936fXnrItoByiG0SN/vBcaX9GfPNutZ yFnzjgjj4g== ) ; keytag 6546`
	`ch. 86400 IN DNSKEY ( 257 3 13 af3VgrsVYa6Jm3d1lwsoCAEqQbeNpLUJ5kHjkUksCCPvubXuPEwTJGDUUbw9QRJtm6lBIAjbjtAc cGemAgcyZQ== ) ; keytag 58745`
	DNSKEY=58745/SEP is now in the chain-of-trust
	DS=58745/SHA-256 verifies DNSKEY=58745/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260728100909 20260612090909 58745 ch. cdkw5wdSXf2qrdKd3C3kWKDZ3psNQvBuEXKz2SMoueJoqlDHZmUvT2YORrwFFRFA2O5Xs80ooOvi JH10HFzMJQ== )`
	RRSIG=58745 and DNSKEY=58745/SEP verifies the DNSKEY RRset
	DNSKEY=35417 is now in the chain-of-trust
	DNSKEY=6546 is now in the chain-of-trust
	Query to e.nic.ch for novomedia.ch/A
	Received 238 bytes from 194.0.17.1
	;; Response received from [194.0.17.1] 238 octets ;; HEADER SECTION ;; id = 541 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novomedia.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) novomedia.ch. 3600 IN NS ns11.infomaniak.ch. novomedia.ch. 3600 IN NS ns12.infomaniak.ch. novomedia.ch. 3600 IN DS ( 15141 13 2 4f99dcc42b19af7161c8cc62ec9d2820f071274b59d049776a5f8dac7da01394 ) novomedia.ch. 3600 IN RRSIG ( DS 13 2 3600 20260709103629 20260609103219 6546 ch. 5eMmTiVKkOROZI9cuCQUm2si47DdPEKvzHl/PqYYD33QeMGoXO5x4c//y5DMgtQ0gVYf1+x61Oy3 v5ZSU0FDMA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to e.nic.ch for novomedia.ch/DNSKEY
	Received 238 bytes from 194.0.17.1
	;; Response received from [194.0.17.1] 238 octets ;; HEADER SECTION ;; id = 29068 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novomedia.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) novomedia.ch. 3600 IN NS ns12.infomaniak.ch. novomedia.ch. 3600 IN NS ns11.infomaniak.ch. novomedia.ch. 3600 IN DS ( 15141 13 2 4f99dcc42b19af7161c8cc62ec9d2820f071274b59d049776a5f8dac7da01394 ) novomedia.ch. 3600 IN RRSIG ( DS 13 2 3600 20260709103629 20260609103219 6546 ch. 5eMmTiVKkOROZI9cuCQUm2si47DdPEKvzHl/PqYYD33QeMGoXO5x4c//y5DMgtQ0gVYf1+x61Oy3 v5ZSU0FDMA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone novomedia.ch

novomedia.ch

	Checking DS between ch and novomedia.ch
	Query to b.nic.ch for novomedia.ch/DS
	Received 187 bytes from 130.59.31.43
	;; Response received from [130.59.31.43] 187 octets ;; HEADER SECTION ;; id = 39084 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novomedia.ch. IN DS ;; ANSWER SECTION (2 records) novomedia.ch. 3600 IN DS ( 15141 13 2 4f99dcc42b19af7161c8cc62ec9d2820f071274b59d049776a5f8dac7da01394 ) novomedia.ch. 3600 IN RRSIG ( DS 13 2 3600 20260709103629 20260609103219 6546 ch. 5eMmTiVKkOROZI9cuCQUm2si47DdPEKvzHl/PqYYD33QeMGoXO5x4c//y5DMgtQ0gVYf1+x61Oy3 v5ZSU0FDMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for novomedia.ch in the ch zone
	DS=15141/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`novomedia.ch. 3600 IN RRSIG ( DS 13 2 3600 20260709103629 20260609103219 6546 ch. 5eMmTiVKkOROZI9cuCQUm2si47DdPEKvzHl/PqYYD33QeMGoXO5x4c//y5DMgtQ0gVYf1+x61Oy3 v5ZSU0FDMA== )`
	RRSIG=6546 and DNSKEY=6546 verifies the DS RRset
	DS=15141/SHA-256 is now in the chain-of-trust
	`novomedia.ch. 3600 IN DS ( 15141 13 2 4f99dcc42b19af7161c8cc62ec9d2820f071274b59d049776a5f8dac7da01394 )`
	Query to ns12.infomaniak.ch for novomedia.ch/DNSKEY
	Received 417 bytes from 93.88.255.152
	;; Response received from [93.88.255.152] 417 octets ;; HEADER SECTION ;; id = 35178 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novomedia.ch. IN DNSKEY ;; ANSWER SECTION (4 records) novomedia.ch. 3600 IN DNSKEY ( 257 3 13 SrbS+Ax1yqlCqmE2hB/2lWwr0n32VM5BI7RrS+9BMPY82yVhJEjJB9+IXRSG/onCbYqLcx2d7Bxb mqH/c+hgFg== ) ; keytag 15141 novomedia.ch. 3600 IN DNSKEY ( 256 3 13 hPUXclQ0UJ8sc6Q1AzSKUoq88AwQsiuTqp74s6lkEoEr5i/DAj6dVR4GUO2K2HDcd7A0TxX8RJRC Qdcl78loLA== ) ; keytag 38801 novomedia.ch. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260704050643 20260613040859 15141 novomedia.ch. JTtJUgw08c3stj4gFiJ+JZhVEqk0SvkIFxMds5j5mYeVWw4VDkzyIBS5oeHEzZvwvwCBJcfuwrPM Far8HbrsrA== ) novomedia.ch. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260704050643 20260613040859 38801 novomedia.ch. ipNGyedk6NGsOjMR6Ikl3YDYz/v46H9Onfi77N4W5z/prXKvK0UTa5avs+oI2DqKjfBP8mt6SuOQ Y8yMdawrpA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for novomedia.ch
	`novomedia.ch. 3600 IN DNSKEY ( 257 3 13 SrbS+Ax1yqlCqmE2hB/2lWwr0n32VM5BI7RrS+9BMPY82yVhJEjJB9+IXRSG/onCbYqLcx2d7Bxb mqH/c+hgFg== ) ; keytag 15141`
	`novomedia.ch. 3600 IN DNSKEY ( 256 3 13 hPUXclQ0UJ8sc6Q1AzSKUoq88AwQsiuTqp74s6lkEoEr5i/DAj6dVR4GUO2K2HDcd7A0TxX8RJRC Qdcl78loLA== ) ; keytag 38801`
	DNSKEY=15141/SEP is now in the chain-of-trust
	DS=15141/SHA-256 verifies DNSKEY=15141/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`novomedia.ch. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260704050643 20260613040859 15141 novomedia.ch. JTtJUgw08c3stj4gFiJ+JZhVEqk0SvkIFxMds5j5mYeVWw4VDkzyIBS5oeHEzZvwvwCBJcfuwrPM Far8HbrsrA== )`
	`novomedia.ch. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260704050643 20260613040859 38801 novomedia.ch. ipNGyedk6NGsOjMR6Ikl3YDYz/v46H9Onfi77N4W5z/prXKvK0UTa5avs+oI2DqKjfBP8mt6SuOQ Y8yMdawrpA== )`
	RRSIG=15141 and DNSKEY=15141/SEP verifies the DNSKEY RRset
	RRSIG=38801 and DNSKEY=38801 verifies the DNSKEY RRset
	DNSKEY=38801 is now in the chain-of-trust
	Query to ns12.infomaniak.ch for novomedia.ch/A
	Received 322 bytes from 93.88.255.152
	;; Response received from [93.88.255.152] 322 octets ;; HEADER SECTION ;; id = 56482 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novomedia.ch. IN A ;; ANSWER SECTION (2 records) novomedia.ch. 7200 IN A 195.201.243.189 novomedia.ch. 7200 IN RRSIG ( A 13 2 7200 20260629182251 20260608174745 38801 novomedia.ch. ydcYu2b3fHXbdOmL0z+HmcTsz6gh6XMmZ8v0b25Q1YMjKp1CaW8GdxX3r5ohDnXkkOWW6xiLKeL7 UtdxX8N64A== ) ;; AUTHORITY SECTION (3 records) novomedia.ch. 7200 IN NS ns12.infomaniak.ch. novomedia.ch. 7200 IN NS ns11.infomaniak.ch. novomedia.ch. 7200 IN RRSIG ( NS 13 2 7200 20260630141038 20260609133547 38801 novomedia.ch. k6L4WgBbtaNLNO9xz2NkgJPZb7UakQWI/YEf1a+UcHCeHIFYfrG1Z6IO3/215NI4SjPijQvHJaoO t2LqSLidUw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns12.infomaniak.ch is authoritative for novomedia.ch
	Found RRSIG signed by novomedia.ch zone
	Query to ns11.infomaniak.ch for novomedia.ch/SOA
	Received 353 bytes from 93.88.255.151
	;; Response received from [93.88.255.151] 353 octets ;; HEADER SECTION ;; id = 17722 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novomedia.ch. IN SOA ;; ANSWER SECTION (2 records) novomedia.ch. 7200 IN SOA ( ns11.infomaniak.ch. hostmaster.infomaniak.ch. 2026060730 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 300 ;minimum ) novomedia.ch. 7200 IN RRSIG ( SOA 13 2 7200 20260704050859 20260613040859 38801 novomedia.ch. HeCYVUCJhery7CENSsgbQNGzWlGpjVdyuz8kyffa9EO0Q9j8RTuxLN/povNLxfwYr6xHTaYzedqu 8YrIBrrZsw== ) ;; AUTHORITY SECTION (3 records) novomedia.ch. 7200 IN NS ns12.infomaniak.ch. novomedia.ch. 7200 IN NS ns11.infomaniak.ch. novomedia.ch. 7200 IN RRSIG ( NS 13 2 7200 20260630141038 20260609133547 38801 novomedia.ch. k6L4WgBbtaNLNO9xz2NkgJPZb7UakQWI/YEf1a+UcHCeHIFYfrG1Z6IO3/215NI4SjPijQvHJaoO t2LqSLidUw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns12.infomaniak.ch for novomedia.ch/A
	novomedia.ch A RR has value 195.201.243.189
	Found 1 RRSIGs over A RRset
	`novomedia.ch. 7200 IN RRSIG ( A 13 2 7200 20260629182251 20260608174745 38801 novomedia.ch. ydcYu2b3fHXbdOmL0z+HmcTsz6gh6XMmZ8v0b25Q1YMjKp1CaW8GdxX3r5ohDnXkkOWW6xiLKeL7 UtdxX8N64A== )`
	RRSIG=38801 and DNSKEY=38801 verifies the A RRset

novomedia.ch

	Query to ns11.infomaniak.ch for novomedia.ch/A
	Received 322 bytes from 93.88.255.151
	;; Response received from [93.88.255.151] 322 octets ;; HEADER SECTION ;; id = 62746 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; novomedia.ch. IN A ;; ANSWER SECTION (2 records) novomedia.ch. 7200 IN A 195.201.243.189 novomedia.ch. 7200 IN RRSIG ( A 13 2 7200 20260629182251 20260608174745 38801 novomedia.ch. ydcYu2b3fHXbdOmL0z+HmcTsz6gh6XMmZ8v0b25Q1YMjKp1CaW8GdxX3r5ohDnXkkOWW6xiLKeL7 UtdxX8N64A== ) ;; AUTHORITY SECTION (3 records) novomedia.ch. 7200 IN NS ns12.infomaniak.ch. novomedia.ch. 7200 IN NS ns11.infomaniak.ch. novomedia.ch. 7200 IN RRSIG ( NS 13 2 7200 20260630141038 20260609133547 38801 novomedia.ch. k6L4WgBbtaNLNO9xz2NkgJPZb7UakQWI/YEf1a+UcHCeHIFYfrG1Z6IO3/215NI4SjPijQvHJaoO t2LqSLidUw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns11.infomaniak.ch is authoritative for novomedia.ch
	Found RRSIG signed by novomedia.ch zone
	Query to ns11.infomaniak.ch for novomedia.ch/A
	novomedia.ch A RR has value 195.201.243.189
	Found 1 RRSIGs over A RRset
	`novomedia.ch. 7200 IN RRSIG ( A 13 2 7200 20260629182251 20260608174745 38801 novomedia.ch. ydcYu2b3fHXbdOmL0z+HmcTsz6gh6XMmZ8v0b25Q1YMjKp1CaW8GdxX3r5ohDnXkkOWW6xiLKeL7 UtdxX8N64A== )`
	RRSIG=38801 and DNSKEY=38801 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test novomedia.ch at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: