DNSSEC Debugger - powerdns.club

Domain Name:

Time: 2026-01-23 11:35:12 UTC

Analyzing DNSSEC problems for powerdns.club

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 57235 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260211000000 20260121000000 20326 . EBetGA/PKYoAlq56mQMDn03GRImGJtuP7+VneaBFBz6bKPYOkJCeH+iWyvbdHc2EdpdPwod/fNV2 buvubzluWs2ORvqpr/w3awExDRBLgjuGRo8LyRlPG/utQh2tmjC5t5CzPKKtUOjKcotmlYgfV+pQ CT1zqZfavyxYJXMGILkSVcQe+3rraAvzXQoZzMfewQZOJrhyFfKtugkpOLWCuWg5/dKleyYB8G4r EWDPhywRt+GSlOgFWhNYTHhEpZsSA6vnb3FTtIgu7CqlDD1zOTrIFuiv7L8cFizHm542Bm69lbzg QGJGdgSwOGAe4Aj55UXMdRobYUdhoWOsdGOJKA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260211000000 20260121000000 20326 . EBetGA/PKYoAlq56mQMDn03GRImGJtuP7+VneaBFBz6bKPYOkJCeH+iWyvbdHc2EdpdPwod/fNV2 buvubzluWs2ORvqpr/w3awExDRBLgjuGRo8LyRlPG/utQh2tmjC5t5CzPKKtUOjKcotmlYgfV+pQ CT1zqZfavyxYJXMGILkSVcQe+3rraAvzXQoZzMfewQZOJrhyFfKtugkpOLWCuWg5/dKleyYB8G4r EWDPhywRt+GSlOgFWhNYTHhEpZsSA6vnb3FTtIgu7CqlDD1zOTrIFuiv7L8cFizHm542Bm69lbzg QGJGdgSwOGAe4Aj55UXMdRobYUdhoWOsdGOJKA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to d.root-servers.net for powerdns.club/A
	Received 751 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 751 octets ;; HEADER SECTION ;; id = 64749 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) club. 172800 IN NS a.nic.club. club. 172800 IN NS b.nic.club. club. 172800 IN NS c.nic.club. club. 172800 IN NS ns1.dns.nic.club. club. 172800 IN NS ns2.dns.nic.club. club. 172800 IN NS ns3.dns.nic.club. club. 86400 IN DS ( 54682 8 2 4fc0dbb4f04be413ba1c0b1e92f4c5f0ccebf7856370e20671af6417499db258 ) club. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . PlYNwicTOFC7X3/IxwLZLukjx8glMKIlp1ma6mNzxlK/tJF5aEUYAVR0xhC9o5IXL+S0ns5D9SNF mF1QTwRrcAd5p7R9mMVTF9y6SJ01/HszbnJUyqcAHOBeiSAM/3p8PmIum2+loQ2Y1DS7J9BArzHm XMpP/Vtbi8q6imUzhH50xKEJ9G7HDW5mpRnIdabPba0DJXlDb38Zi5rjeOJ4iyQAm4gDZ7gAh1oJ 2bel2nrP47Nj3VdfJVU1sL8eKPPvrgfMvVhi24V82LQm1gCuI+t/islhIkK6rweDxAyUd3LVseVV 8T9s3poP+o8T57eBJb8sQwOL30QcMD9tzUQquA== ) ;; ADDITIONAL SECTION (13 records) a.nic.club. 172800 IN A 37.209.192.10 b.nic.club. 172800 IN A 37.209.194.10 c.nic.club. 172800 IN A 37.209.196.10 ns1.dns.nic.club. 172800 IN A 156.154.144.215 ns2.dns.nic.club. 172800 IN A 156.154.145.215 ns3.dns.nic.club. 172800 IN A 156.154.159.215 a.nic.club. 172800 IN AAAA 2001:dcd:1::10 b.nic.club. 172800 IN AAAA 2001:dcd:2::10 c.nic.club. 172800 IN AAAA 2001:dcd:3::10 ns1.dns.nic.club. 172800 IN AAAA 2610:a1:1071::d7 ns2.dns.nic.club. 172800 IN AAAA 2610:a1:1072::d7 ns3.dns.nic.club. 172800 IN AAAA 2610:a1:1073::d7 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for club/DNSKEY
	Received 742 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 742 octets ;; HEADER SECTION ;; id = 57962 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) club. 172800 IN NS a.nic.club. club. 172800 IN NS b.nic.club. club. 172800 IN NS c.nic.club. club. 172800 IN NS ns1.dns.nic.club. club. 172800 IN NS ns2.dns.nic.club. club. 172800 IN NS ns3.dns.nic.club. club. 86400 IN DS ( 54682 8 2 4fc0dbb4f04be413ba1c0b1e92f4c5f0ccebf7856370e20671af6417499db258 ) club. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . PlYNwicTOFC7X3/IxwLZLukjx8glMKIlp1ma6mNzxlK/tJF5aEUYAVR0xhC9o5IXL+S0ns5D9SNF mF1QTwRrcAd5p7R9mMVTF9y6SJ01/HszbnJUyqcAHOBeiSAM/3p8PmIum2+loQ2Y1DS7J9BArzHm XMpP/Vtbi8q6imUzhH50xKEJ9G7HDW5mpRnIdabPba0DJXlDb38Zi5rjeOJ4iyQAm4gDZ7gAh1oJ 2bel2nrP47Nj3VdfJVU1sL8eKPPvrgfMvVhi24V82LQm1gCuI+t/islhIkK6rweDxAyUd3LVseVV 8T9s3poP+o8T57eBJb8sQwOL30QcMD9tzUQquA== ) ;; ADDITIONAL SECTION (13 records) a.nic.club. 172800 IN A 37.209.192.10 b.nic.club. 172800 IN A 37.209.194.10 c.nic.club. 172800 IN A 37.209.196.10 ns1.dns.nic.club. 172800 IN A 156.154.144.215 ns2.dns.nic.club. 172800 IN A 156.154.145.215 ns3.dns.nic.club. 172800 IN A 156.154.159.215 a.nic.club. 172800 IN AAAA 2001:dcd:1::10 b.nic.club. 172800 IN AAAA 2001:dcd:2::10 c.nic.club. 172800 IN AAAA 2001:dcd:3::10 ns1.dns.nic.club. 172800 IN AAAA 2610:a1:1071::d7 ns2.dns.nic.club. 172800 IN AAAA 2610:a1:1072::d7 ns3.dns.nic.club. 172800 IN AAAA 2610:a1:1073::d7 ;; { "EDNS-VERSION": 0 }
	Found child zone club

club

	Checking DS between . and club
	Query to f.root-servers.net for club/DS
	Received 368 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 368 octets ;; HEADER SECTION ;; id = 14536 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club. IN DS ;; ANSWER SECTION (2 records) club. 86400 IN DS ( 54682 8 2 4fc0dbb4f04be413ba1c0b1e92f4c5f0ccebf7856370e20671af6417499db258 ) club. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . PlYNwicTOFC7X3/IxwLZLukjx8glMKIlp1ma6mNzxlK/tJF5aEUYAVR0xhC9o5IXL+S0ns5D9SNF mF1QTwRrcAd5p7R9mMVTF9y6SJ01/HszbnJUyqcAHOBeiSAM/3p8PmIum2+loQ2Y1DS7J9BArzHm XMpP/Vtbi8q6imUzhH50xKEJ9G7HDW5mpRnIdabPba0DJXlDb38Zi5rjeOJ4iyQAm4gDZ7gAh1oJ 2bel2nrP47Nj3VdfJVU1sL8eKPPvrgfMvVhi24V82LQm1gCuI+t/islhIkK6rweDxAyUd3LVseVV 8T9s3poP+o8T57eBJb8sQwOL30QcMD9tzUQquA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for club in the . zone
	DS=54682/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`club. 86400 IN RRSIG ( DS 8 1 86400 20260205050000 20260123040000 21831 . PlYNwicTOFC7X3/IxwLZLukjx8glMKIlp1ma6mNzxlK/tJF5aEUYAVR0xhC9o5IXL+S0ns5D9SNF mF1QTwRrcAd5p7R9mMVTF9y6SJ01/HszbnJUyqcAHOBeiSAM/3p8PmIum2+loQ2Y1DS7J9BArzHm XMpP/Vtbi8q6imUzhH50xKEJ9G7HDW5mpRnIdabPba0DJXlDb38Zi5rjeOJ4iyQAm4gDZ7gAh1oJ 2bel2nrP47Nj3VdfJVU1sL8eKPPvrgfMvVhi24V82LQm1gCuI+t/islhIkK6rweDxAyUd3LVseVV 8T9s3poP+o8T57eBJb8sQwOL30QcMD9tzUQquA== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=54682/SHA-256 is now in the chain-of-trust
	`club. 86400 IN DS ( 54682 8 2 4fc0dbb4f04be413ba1c0b1e92f4c5f0ccebf7856370e20671af6417499db258 )`
	Query to b.nic.club for club/DNSKEY
	Received 781 bytes from 37.209.194.10
	;; Response received from [37.209.194.10] 781 octets ;; HEADER SECTION ;; id = 60836 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club. IN DNSKEY ;; ANSWER SECTION (3 records) club. 7200 IN DNSKEY ( 256 3 8 AwEAAdFyuyIbphV/kJlXT/rQ8DeenXh2+yr/WJPWfIe3P1MOLNXkenRXkwzVdDFx7uN+wZz0TF7r n8PPw7Rr4qsjk+uis+QT5ouUyuZbkR+XvSE7Meg0QmUvGnfkK1eRaHPi/aRm7YYJqUZeqlJN2CVZ /8p5qQkIDr5xYbW2+H+nykNQ4ztWYw6UFWv8MbZ3h3f/FAyeIQHIvx1jfVsUTvHhejM= ) ; keytag 15345 club. 7200 IN DNSKEY ( 257 3 8 AwEAAaeStMgWiypQMk9wrZm3FnnHLrig2VkMfLDMapRoMJlZr8GO23wdk07QCcPGcgSNthU2Vvay B3AtWXT8xz0PgAmwGRvg5zkp4c+MmYLRUSSn320QCevp4PLA9BcHfU91pw73aKPm20WT/XCYps6R cgdLh5+hqW6CexH4nXqCIM1Rkl563QUqaZeLEPpqJrE7mFJw6E7lvSXAsfNrvmYMIJ3mQAF/tuE/ 1zrj9Qmvi1RBndAhqOo4M4ct5b4kxIlqv44fhQBChMCOfeDbPngQ/ajmcav6bX258yIuPzfMhKEt 8jwprGp2oBE+CkdHwV78cUCwdJV/3W5I01GQd5FxuuM= ) ; keytag 54682 club. 7200 IN RRSIG ( DNSKEY 8 1 7200 20260131212502 20260117203847 54682 club. k8yDmbW24DofbfQp6FjG4Lk4x/54BMKmUBZNCAAisi6LqQjL4yShUs31Hq6E5t4cacOIsz1VzHCL ZosfXQrbvHBUzn9R1gv9F62Ut154Q2UmRM+L2BmMxmx+U7vmzmAjhexNCqc/aZkbU0FJToxJ28b2 YcArw/R05HgwrE64fva9Y7RLFC2edrcEor8230G3DXfYtX4M7pbm9qd/fhDujXO9FgZC1B9YWqus fATHB8bMvG1nbsZsc5/l754DT4zheDOkQ3ZVSntSmu/4jcLhKsRr6+Px2A7OgSYwUv+6U88dLps4 z97wvYkTM2HYbJVRzZLb6VnbzG5ZBvDDNIF/wA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for club
	`club. 7200 IN DNSKEY ( 256 3 8 AwEAAdFyuyIbphV/kJlXT/rQ8DeenXh2+yr/WJPWfIe3P1MOLNXkenRXkwzVdDFx7uN+wZz0TF7r n8PPw7Rr4qsjk+uis+QT5ouUyuZbkR+XvSE7Meg0QmUvGnfkK1eRaHPi/aRm7YYJqUZeqlJN2CVZ /8p5qQkIDr5xYbW2+H+nykNQ4ztWYw6UFWv8MbZ3h3f/FAyeIQHIvx1jfVsUTvHhejM= ) ; keytag 15345`
	`club. 7200 IN DNSKEY ( 257 3 8 AwEAAaeStMgWiypQMk9wrZm3FnnHLrig2VkMfLDMapRoMJlZr8GO23wdk07QCcPGcgSNthU2Vvay B3AtWXT8xz0PgAmwGRvg5zkp4c+MmYLRUSSn320QCevp4PLA9BcHfU91pw73aKPm20WT/XCYps6R cgdLh5+hqW6CexH4nXqCIM1Rkl563QUqaZeLEPpqJrE7mFJw6E7lvSXAsfNrvmYMIJ3mQAF/tuE/ 1zrj9Qmvi1RBndAhqOo4M4ct5b4kxIlqv44fhQBChMCOfeDbPngQ/ajmcav6bX258yIuPzfMhKEt 8jwprGp2oBE+CkdHwV78cUCwdJV/3W5I01GQd5FxuuM= ) ; keytag 54682`
	DNSKEY=54682/SEP is now in the chain-of-trust
	DS=54682/SHA-256 verifies DNSKEY=54682/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`club. 7200 IN RRSIG ( DNSKEY 8 1 7200 20260131212502 20260117203847 54682 club. k8yDmbW24DofbfQp6FjG4Lk4x/54BMKmUBZNCAAisi6LqQjL4yShUs31Hq6E5t4cacOIsz1VzHCL ZosfXQrbvHBUzn9R1gv9F62Ut154Q2UmRM+L2BmMxmx+U7vmzmAjhexNCqc/aZkbU0FJToxJ28b2 YcArw/R05HgwrE64fva9Y7RLFC2edrcEor8230G3DXfYtX4M7pbm9qd/fhDujXO9FgZC1B9YWqus fATHB8bMvG1nbsZsc5/l754DT4zheDOkQ3ZVSntSmu/4jcLhKsRr6+Px2A7OgSYwUv+6U88dLps4 z97wvYkTM2HYbJVRzZLb6VnbzG5ZBvDDNIF/wA== )`
	RRSIG=54682 and DNSKEY=54682/SEP verifies the DNSKEY RRset
	DNSKEY=15345 is now in the chain-of-trust
	Query to c.nic.club for powerdns.club/A
	Received 338 bytes from 37.209.196.10
	;; Response received from [37.209.196.10] 338 octets ;; HEADER SECTION ;; id = 8801 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN NS bernoulli.7bits.nl. powerdns.club. 3600 IN NS grace.7bits.nl. powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 ) powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20260131200409 20260117193639 15345 club. S9NeCtl1hnjguhaSqO6hukW/mzcSf3hh9bVhNzii5/+nf7u8QWloueqrNOEk6tfCENO7b/IxFccM 7ep6rvRl/1n7DwIqtCubp0hPDqTATCq1N1WGr92cLaqE6NvfBCvaVRjFPfKORyUrtB0o8RO/fS2P YeCk8M90SoWdVaf2dSSjzSOmuUuWrW6sNu/yxW6lLS7KthIbBsYtxj3ObhmS6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.dns.nic.club for powerdns.club/DNSKEY
	Received 338 bytes from 156.154.145.215
	;; Response received from [156.154.145.215] 338 octets ;; HEADER SECTION ;; id = 17421 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN NS grace.7bits.nl. powerdns.club. 3600 IN NS bernoulli.7bits.nl. powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 ) powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20260131200409 20260117193639 15345 club. S9NeCtl1hnjguhaSqO6hukW/mzcSf3hh9bVhNzii5/+nf7u8QWloueqrNOEk6tfCENO7b/IxFccM 7ep6rvRl/1n7DwIqtCubp0hPDqTATCq1N1WGr92cLaqE6NvfBCvaVRjFPfKORyUrtB0o8RO/fS2P YeCk8M90SoWdVaf2dSSjzSOmuUuWrW6sNu/yxW6lLS7KthIbBsYtxj3ObhmS6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone powerdns.club

powerdns.club

	Checking DS between club and powerdns.club
	Query to a.nic.club for powerdns.club/DS
	Received 286 bytes from 37.209.192.10
	;; Response received from [37.209.192.10] 286 octets ;; HEADER SECTION ;; id = 20554 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN DS ;; ANSWER SECTION (2 records) powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 ) powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20260131200409 20260117193639 15345 club. S9NeCtl1hnjguhaSqO6hukW/mzcSf3hh9bVhNzii5/+nf7u8QWloueqrNOEk6tfCENO7b/IxFccM 7ep6rvRl/1n7DwIqtCubp0hPDqTATCq1N1WGr92cLaqE6NvfBCvaVRjFPfKORyUrtB0o8RO/fS2P YeCk8M90SoWdVaf2dSSjzSOmuUuWrW6sNu/yxW6lLS7KthIbBsYtxj3ObhmS6g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for powerdns.club in the club zone
	DS=49111/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20260131200409 20260117193639 15345 club. S9NeCtl1hnjguhaSqO6hukW/mzcSf3hh9bVhNzii5/+nf7u8QWloueqrNOEk6tfCENO7b/IxFccM 7ep6rvRl/1n7DwIqtCubp0hPDqTATCq1N1WGr92cLaqE6NvfBCvaVRjFPfKORyUrtB0o8RO/fS2P YeCk8M90SoWdVaf2dSSjzSOmuUuWrW6sNu/yxW6lLS7KthIbBsYtxj3ObhmS6g== )`
	RRSIG=15345 and DNSKEY=15345 verifies the DS RRset
	DS=49111/SHA-256 is now in the chain-of-trust
	`powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 )`
	Query to bernoulli.7bits.nl for powerdns.club/DNSKEY
	Received 231 bytes from 89.188.2.130
	;; Response received from [89.188.2.130] 231 octets ;; HEADER SECTION ;; id = 37762 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN DNSKEY ;; ANSWER SECTION (2 records) powerdns.club. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260205000000 20260115000000 49111 powerdns.club. lCIJZpq5i1juTcf3QU372AIZwrRuIM+1IR8lKjimITp+zSeD9LMyotDTEeAhUCv9SF570u5BZTs+ aEWz0ShKEw== ) powerdns.club. 3600 IN DNSKEY ( 257 3 13 K3PnNfh8Xo/yCfefLo27fngO4BweGAd4uQQo1rfqP1XtmmNPodTlDluq0clWeX9I4EKlmhm8+NS7 Pn5ESAIykA== ) ; keytag 49111 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for powerdns.club
	`powerdns.club. 3600 IN DNSKEY ( 257 3 13 K3PnNfh8Xo/yCfefLo27fngO4BweGAd4uQQo1rfqP1XtmmNPodTlDluq0clWeX9I4EKlmhm8+NS7 Pn5ESAIykA== ) ; keytag 49111`
	DNSKEY=49111/SEP is now in the chain-of-trust
	DS=49111/SHA-256 verifies DNSKEY=49111/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`powerdns.club. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260205000000 20260115000000 49111 powerdns.club. lCIJZpq5i1juTcf3QU372AIZwrRuIM+1IR8lKjimITp+zSeD9LMyotDTEeAhUCv9SF570u5BZTs+ aEWz0ShKEw== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the DNSKEY RRset
	Query to bernoulli.7bits.nl for powerdns.club/A
	Received 373 bytes from 89.188.2.130
	;; Response received from [89.188.2.130] 373 octets ;; HEADER SECTION ;; id = 516 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20260205000000 20260115000000 49111 powerdns.club. fFSyPF/VUKrA/rOpvRJytW1GDZK1hmObIDULcNv+KDjbSwpS0hlMvGuyHVLmqumUUEO8PIvLY/AF zU54U9Lr3w== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20260205000000 20260115000000 49111 powerdns.club. 7ZvkGPxH0WvknP/va212CyrgG1v84rzODONFk/uvuM0bJoCDDDNpez2iVsFd9x0qcYK6A1BYMHFG 7+J3gRd/kA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bernoulli.7bits.nl is authoritative for powerdns.club
	Found RRSIG signed by powerdns.club zone
	Query to grace.7bits.nl for powerdns.club/SOA
	Received 214 bytes from 173.212.217.242
	;; Response received from [173.212.217.242] 214 octets ;; HEADER SECTION ;; id = 34336 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN SOA ;; ANSWER SECTION (2 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20260205000000 20260115000000 49111 powerdns.club. fFSyPF/VUKrA/rOpvRJytW1GDZK1hmObIDULcNv+KDjbSwpS0hlMvGuyHVLmqumUUEO8PIvLY/AF zU54U9Lr3w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to bernoulli.7bits.nl for powerdns.club/A
	Received 373 bytes from 89.188.2.130
	;; Response received from [89.188.2.130] 373 octets ;; HEADER SECTION ;; id = 50714 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20260205000000 20260115000000 49111 powerdns.club. fFSyPF/VUKrA/rOpvRJytW1GDZK1hmObIDULcNv+KDjbSwpS0hlMvGuyHVLmqumUUEO8PIvLY/AF zU54U9Lr3w== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20260205000000 20260115000000 49111 powerdns.club. 7ZvkGPxH0WvknP/va212CyrgG1v84rzODONFk/uvuM0bJoCDDDNpez2iVsFd9x0qcYK6A1BYMHFG 7+J3gRd/kA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20260205000000 20260115000000 49111 powerdns.club. 7ZvkGPxH0WvknP/va212CyrgG1v84rzODONFk/uvuM0bJoCDDDNpez2iVsFd9x0qcYK6A1BYMHFG 7+J3gRd/kA== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the NSEC RRset
	NSEC proves no records of type A exist for powerdns.club
	Found 1 RRSIGs over SOA RRset
	`powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20260205000000 20260115000000 49111 powerdns.club. fFSyPF/VUKrA/rOpvRJytW1GDZK1hmObIDULcNv+KDjbSwpS0hlMvGuyHVLmqumUUEO8PIvLY/AF zU54U9Lr3w== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the SOA RRset

powerdns.club

	Query to grace.7bits.nl for powerdns.club/A
	Received 373 bytes from 173.212.217.242
	;; Response received from [173.212.217.242] 373 octets ;; HEADER SECTION ;; id = 57573 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20260205000000 20260115000000 49111 powerdns.club. fFSyPF/VUKrA/rOpvRJytW1GDZK1hmObIDULcNv+KDjbSwpS0hlMvGuyHVLmqumUUEO8PIvLY/AF zU54U9Lr3w== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20260205000000 20260115000000 49111 powerdns.club. 7ZvkGPxH0WvknP/va212CyrgG1v84rzODONFk/uvuM0bJoCDDDNpez2iVsFd9x0qcYK6A1BYMHFG 7+J3gRd/kA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	grace.7bits.nl is authoritative for powerdns.club
	Found RRSIG signed by powerdns.club zone
	Query to grace.7bits.nl for powerdns.club/A
	Received 373 bytes from 173.212.217.242
	;; Response received from [173.212.217.242] 373 octets ;; HEADER SECTION ;; id = 44102 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20260205000000 20260115000000 49111 powerdns.club. fFSyPF/VUKrA/rOpvRJytW1GDZK1hmObIDULcNv+KDjbSwpS0hlMvGuyHVLmqumUUEO8PIvLY/AF zU54U9Lr3w== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20260205000000 20260115000000 49111 powerdns.club. 7ZvkGPxH0WvknP/va212CyrgG1v84rzODONFk/uvuM0bJoCDDDNpez2iVsFd9x0qcYK6A1BYMHFG 7+J3gRd/kA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20260205000000 20260115000000 49111 powerdns.club. 7ZvkGPxH0WvknP/va212CyrgG1v84rzODONFk/uvuM0bJoCDDDNpez2iVsFd9x0qcYK6A1BYMHFG 7+J3gRd/kA== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the NSEC RRset
	NSEC proves no records of type A exist for powerdns.club
	Found 1 RRSIGs over SOA RRset
	`powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20260205000000 20260115000000 49111 powerdns.club. fFSyPF/VUKrA/rOpvRJytW1GDZK1hmObIDULcNv+KDjbSwpS0hlMvGuyHVLmqumUUEO8PIvLY/AF zU54U9Lr3w== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test powerdns.club at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: