DNSSEC Debugger - powerdns.club

Domain Name:

Time: 2025-11-10 01:45:47 UTC

Analyzing DNSSEC problems for powerdns.club

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1139 octets ;; HEADER SECTION ;; id = 58888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251121000000 20251031000000 20326 . qnzPUNeV8plQe0Se5Fa0uHS0Ygf4DSnEekaMeH7GQRbNhk6ntkneJFKUN+EBJQfd/JoaY//18qf4 G6YrWE/a+FwJ5oefafEhuJWhITrXMle9e4oy4Z7sjb7e1ajwGSKlcfp0Rsulv/aPlLLfl+4jUijr zzZUvUJA10LzOwswvjI16xA3HMG9rEh0mKY0RywLI+R5NkYgDzY0QGL9BMaUHWNV+eTFBmMpmg3j jKGnIg8jmFhqcypUqLXW7md/oO+k0A8QG39nGvhx7rVDUoaQd7atJH2jtzGeXW8n/XI/ncI9fSoX rLXu6NvJY5bX6dXI9ypg+sFnkF7Fd4TdZ8AasA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251121000000 20251031000000 20326 . qnzPUNeV8plQe0Se5Fa0uHS0Ygf4DSnEekaMeH7GQRbNhk6ntkneJFKUN+EBJQfd/JoaY//18qf4 G6YrWE/a+FwJ5oefafEhuJWhITrXMle9e4oy4Z7sjb7e1ajwGSKlcfp0Rsulv/aPlLLfl+4jUijr zzZUvUJA10LzOwswvjI16xA3HMG9rEh0mKY0RywLI+R5NkYgDzY0QGL9BMaUHWNV+eTFBmMpmg3j jKGnIg8jmFhqcypUqLXW7md/oO+k0A8QG39nGvhx7rVDUoaQd7atJH2jtzGeXW8n/XI/ncI9fSoX rLXu6NvJY5bX6dXI9ypg+sFnkF7Fd4TdZ8AasA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=61809 is now in the chain-of-trust
	Query to c.root-servers.net for powerdns.club/A
	Received 763 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 763 octets ;; HEADER SECTION ;; id = 26384 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) club. 172800 IN NS a.nic.club. club. 172800 IN NS ns3.dns.nic.club. club. 172800 IN NS c.nic.club. club. 172800 IN NS ns1.dns.nic.club. club. 172800 IN NS ns2.dns.nic.club. club. 172800 IN NS b.nic.club. club. 86400 IN DS ( 54682 8 2 4fc0dbb4f04be413ba1c0b1e92f4c5f0ccebf7856370e20671af6417499db258 ) club. 86400 IN RRSIG ( DS 8 1 86400 20251122170000 20251109160000 61809 . LCHLo0MNK0m1h2jQsu2O9OUwf3NRVqfyaJ9zyeLn6H2FND1wmh0CIw9UP+Mb85ubUdZ578VADC5m k4yM5H2Ld1KOq8EMLpWmnFhbINP2RR7XO/8yeKs4LtfZuYGqob6xoR5CRNmdoJjT0lZMl4dPSzLc XhNj6MfMp3QpuyDrzEX/kdZC2d5c8KT7MAdxrPH1V5KuAGrOCFMOQ40hAaBU4TV7KpiilQ+44KfJ tDgRsRIe5tMxZGialneZSfL5SNzeek13vP9bVy0plVd5SzR9rgFxx+Sr62NvzWHV9/qGKnetR4Gm yb9cT5mWastpLIlAJGMf2kq6/sywbFdskWCBGw== ) ;; ADDITIONAL SECTION (13 records) ns3.dns.nic.club. 172800 IN A 156.154.159.215 ns2.dns.nic.club. 172800 IN A 156.154.145.215 ns1.dns.nic.club. 172800 IN A 156.154.144.215 c.nic.club. 172800 IN A 37.209.196.10 b.nic.club. 172800 IN A 37.209.194.10 a.nic.club. 172800 IN A 37.209.192.10 ns3.dns.nic.club. 172800 IN AAAA 2610:a1:1073::d7 ns2.dns.nic.club. 172800 IN AAAA 2610:a1:1072::d7 ns1.dns.nic.club. 172800 IN AAAA 2610:a1:1071::d7 c.nic.club. 172800 IN AAAA 2001:dcd:3::10 b.nic.club. 172800 IN AAAA 2001:dcd:2::10 a.nic.club. 172800 IN AAAA 2001:dcd:1::10 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for club/DNSKEY
	Received 754 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 754 octets ;; HEADER SECTION ;; id = 63307 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) club. 172800 IN NS b.nic.club. club. 172800 IN NS ns3.dns.nic.club. club. 172800 IN NS a.nic.club. club. 172800 IN NS ns2.dns.nic.club. club. 172800 IN NS c.nic.club. club. 172800 IN NS ns1.dns.nic.club. club. 86400 IN DS ( 54682 8 2 4fc0dbb4f04be413ba1c0b1e92f4c5f0ccebf7856370e20671af6417499db258 ) club. 86400 IN RRSIG ( DS 8 1 86400 20251122170000 20251109160000 61809 . LCHLo0MNK0m1h2jQsu2O9OUwf3NRVqfyaJ9zyeLn6H2FND1wmh0CIw9UP+Mb85ubUdZ578VADC5m k4yM5H2Ld1KOq8EMLpWmnFhbINP2RR7XO/8yeKs4LtfZuYGqob6xoR5CRNmdoJjT0lZMl4dPSzLc XhNj6MfMp3QpuyDrzEX/kdZC2d5c8KT7MAdxrPH1V5KuAGrOCFMOQ40hAaBU4TV7KpiilQ+44KfJ tDgRsRIe5tMxZGialneZSfL5SNzeek13vP9bVy0plVd5SzR9rgFxx+Sr62NvzWHV9/qGKnetR4Gm yb9cT5mWastpLIlAJGMf2kq6/sywbFdskWCBGw== ) ;; ADDITIONAL SECTION (13 records) ns3.dns.nic.club. 172800 IN A 156.154.159.215 ns2.dns.nic.club. 172800 IN A 156.154.145.215 ns1.dns.nic.club. 172800 IN A 156.154.144.215 c.nic.club. 172800 IN A 37.209.196.10 b.nic.club. 172800 IN A 37.209.194.10 a.nic.club. 172800 IN A 37.209.192.10 ns3.dns.nic.club. 172800 IN AAAA 2610:a1:1073::d7 ns2.dns.nic.club. 172800 IN AAAA 2610:a1:1072::d7 ns1.dns.nic.club. 172800 IN AAAA 2610:a1:1071::d7 c.nic.club. 172800 IN AAAA 2001:dcd:3::10 b.nic.club. 172800 IN AAAA 2001:dcd:2::10 a.nic.club. 172800 IN AAAA 2001:dcd:1::10 ;; { "EDNS-VERSION": 0 }
	Found child zone club

club

	Checking DS between . and club
	Query to l.root-servers.net for club/DS
	Received 368 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 368 octets ;; HEADER SECTION ;; id = 23991 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club. IN DS ;; ANSWER SECTION (2 records) club. 86400 IN DS ( 54682 8 2 4fc0dbb4f04be413ba1c0b1e92f4c5f0ccebf7856370e20671af6417499db258 ) club. 86400 IN RRSIG ( DS 8 1 86400 20251122170000 20251109160000 61809 . LCHLo0MNK0m1h2jQsu2O9OUwf3NRVqfyaJ9zyeLn6H2FND1wmh0CIw9UP+Mb85ubUdZ578VADC5m k4yM5H2Ld1KOq8EMLpWmnFhbINP2RR7XO/8yeKs4LtfZuYGqob6xoR5CRNmdoJjT0lZMl4dPSzLc XhNj6MfMp3QpuyDrzEX/kdZC2d5c8KT7MAdxrPH1V5KuAGrOCFMOQ40hAaBU4TV7KpiilQ+44KfJ tDgRsRIe5tMxZGialneZSfL5SNzeek13vP9bVy0plVd5SzR9rgFxx+Sr62NvzWHV9/qGKnetR4Gm yb9cT5mWastpLIlAJGMf2kq6/sywbFdskWCBGw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for club in the . zone
	DS=54682/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`club. 86400 IN RRSIG ( DS 8 1 86400 20251122170000 20251109160000 61809 . LCHLo0MNK0m1h2jQsu2O9OUwf3NRVqfyaJ9zyeLn6H2FND1wmh0CIw9UP+Mb85ubUdZ578VADC5m k4yM5H2Ld1KOq8EMLpWmnFhbINP2RR7XO/8yeKs4LtfZuYGqob6xoR5CRNmdoJjT0lZMl4dPSzLc XhNj6MfMp3QpuyDrzEX/kdZC2d5c8KT7MAdxrPH1V5KuAGrOCFMOQ40hAaBU4TV7KpiilQ+44KfJ tDgRsRIe5tMxZGialneZSfL5SNzeek13vP9bVy0plVd5SzR9rgFxx+Sr62NvzWHV9/qGKnetR4Gm yb9cT5mWastpLIlAJGMf2kq6/sywbFdskWCBGw== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=54682/SHA-256 is now in the chain-of-trust
	`club. 86400 IN DS ( 54682 8 2 4fc0dbb4f04be413ba1c0b1e92f4c5f0ccebf7856370e20671af6417499db258 )`
	Query to ns2.dns.nic.club for club/DNSKEY
	Received 781 bytes from 156.154.145.215
	;; Response received from [156.154.145.215] 781 octets ;; HEADER SECTION ;; id = 17129 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club. IN DNSKEY ;; ANSWER SECTION (3 records) club. 7200 IN DNSKEY ( 256 3 8 AwEAAdFyuyIbphV/kJlXT/rQ8DeenXh2+yr/WJPWfIe3P1MOLNXkenRXkwzVdDFx7uN+wZz0TF7r n8PPw7Rr4qsjk+uis+QT5ouUyuZbkR+XvSE7Meg0QmUvGnfkK1eRaHPi/aRm7YYJqUZeqlJN2CVZ /8p5qQkIDr5xYbW2+H+nykNQ4ztWYw6UFWv8MbZ3h3f/FAyeIQHIvx1jfVsUTvHhejM= ) ; keytag 15345 club. 7200 IN DNSKEY ( 257 3 8 AwEAAaeStMgWiypQMk9wrZm3FnnHLrig2VkMfLDMapRoMJlZr8GO23wdk07QCcPGcgSNthU2Vvay B3AtWXT8xz0PgAmwGRvg5zkp4c+MmYLRUSSn320QCevp4PLA9BcHfU91pw73aKPm20WT/XCYps6R cgdLh5+hqW6CexH4nXqCIM1Rkl563QUqaZeLEPpqJrE7mFJw6E7lvSXAsfNrvmYMIJ3mQAF/tuE/ 1zrj9Qmvi1RBndAhqOo4M4ct5b4kxIlqv44fhQBChMCOfeDbPngQ/ajmcav6bX258yIuPzfMhKEt 8jwprGp2oBE+CkdHwV78cUCwdJV/3W5I01GQd5FxuuM= ) ; keytag 54682 club. 7200 IN RRSIG ( DNSKEY 8 1 7200 20251121030643 20251107022722 54682 club. k48upbCU6aF3wzrX/O2U5vEF/zVCGAIvCUBMxVtWT1SIlcyWuUUcjI3aFgCp/nX4suTDPL0AcO8v LkMwLIBc26tr+MpVOJYw3Ybiaw8FPbJxtakPg/LQ7mAn1HVdyoNq77ukmaIWZ5GK89uJ8jygBQim p2jJa3bFydjMUyxrzu76A+8Tx/Yefbp25ugUg/L/GVO8ExPzzLNvXNj/W7yljpR+gELKkrloKyE7 C1wgLpcqrCnP0tpPtgFKmq/siKdRjRmrcu8lu271XPbwJIErJhwYAaa5CkuMGQANDnQFCNiEC+XV zOEXguy3YGNiplvpvwE55TZ9+GbbNGEXCsXmSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for club
	`club. 7200 IN DNSKEY ( 256 3 8 AwEAAdFyuyIbphV/kJlXT/rQ8DeenXh2+yr/WJPWfIe3P1MOLNXkenRXkwzVdDFx7uN+wZz0TF7r n8PPw7Rr4qsjk+uis+QT5ouUyuZbkR+XvSE7Meg0QmUvGnfkK1eRaHPi/aRm7YYJqUZeqlJN2CVZ /8p5qQkIDr5xYbW2+H+nykNQ4ztWYw6UFWv8MbZ3h3f/FAyeIQHIvx1jfVsUTvHhejM= ) ; keytag 15345`
	`club. 7200 IN DNSKEY ( 257 3 8 AwEAAaeStMgWiypQMk9wrZm3FnnHLrig2VkMfLDMapRoMJlZr8GO23wdk07QCcPGcgSNthU2Vvay B3AtWXT8xz0PgAmwGRvg5zkp4c+MmYLRUSSn320QCevp4PLA9BcHfU91pw73aKPm20WT/XCYps6R cgdLh5+hqW6CexH4nXqCIM1Rkl563QUqaZeLEPpqJrE7mFJw6E7lvSXAsfNrvmYMIJ3mQAF/tuE/ 1zrj9Qmvi1RBndAhqOo4M4ct5b4kxIlqv44fhQBChMCOfeDbPngQ/ajmcav6bX258yIuPzfMhKEt 8jwprGp2oBE+CkdHwV78cUCwdJV/3W5I01GQd5FxuuM= ) ; keytag 54682`
	DNSKEY=54682/SEP is now in the chain-of-trust
	DS=54682/SHA-256 verifies DNSKEY=54682/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`club. 7200 IN RRSIG ( DNSKEY 8 1 7200 20251121030643 20251107022722 54682 club. k48upbCU6aF3wzrX/O2U5vEF/zVCGAIvCUBMxVtWT1SIlcyWuUUcjI3aFgCp/nX4suTDPL0AcO8v LkMwLIBc26tr+MpVOJYw3Ybiaw8FPbJxtakPg/LQ7mAn1HVdyoNq77ukmaIWZ5GK89uJ8jygBQim p2jJa3bFydjMUyxrzu76A+8Tx/Yefbp25ugUg/L/GVO8ExPzzLNvXNj/W7yljpR+gELKkrloKyE7 C1wgLpcqrCnP0tpPtgFKmq/siKdRjRmrcu8lu271XPbwJIErJhwYAaa5CkuMGQANDnQFCNiEC+XV zOEXguy3YGNiplvpvwE55TZ9+GbbNGEXCsXmSg== )`
	RRSIG=54682 and DNSKEY=54682/SEP verifies the DNSKEY RRset
	DNSKEY=15345 is now in the chain-of-trust
	Query to a.nic.club for powerdns.club/A
	Received 338 bytes from 37.209.192.10
	;; Response received from [37.209.192.10] 338 octets ;; HEADER SECTION ;; id = 1722 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN NS grace.7bits.nl. powerdns.club. 3600 IN NS bernoulli.7bits.nl. powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 ) powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20251121004941 20251107001821 15345 club. ih/m9+TUZfQD/zkr8InjjUr0y5gZWh2JLUJegswYkl5gpqoYqRpw3nXHWWHunre4chnX+A9KgQXn hzigDZ0Q41ywi85s1nlSLvdFIm8kui9Wtb+2/qUosFbh1yQzG5tzyWEK+AoJK9aV9IzavjMM4la9 UeRA1jgmN1A4y7mt/oZX0G+JTyHtyN55xqU5qxP1pUzOj0ERrlhgGigKcf5/cA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.dns.nic.club for powerdns.club/DNSKEY
	Received 338 bytes from 156.154.144.215
	;; Response received from [156.154.144.215] 338 octets ;; HEADER SECTION ;; id = 30671 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN NS grace.7bits.nl. powerdns.club. 3600 IN NS bernoulli.7bits.nl. powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 ) powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20251121004941 20251107001821 15345 club. ih/m9+TUZfQD/zkr8InjjUr0y5gZWh2JLUJegswYkl5gpqoYqRpw3nXHWWHunre4chnX+A9KgQXn hzigDZ0Q41ywi85s1nlSLvdFIm8kui9Wtb+2/qUosFbh1yQzG5tzyWEK+AoJK9aV9IzavjMM4la9 UeRA1jgmN1A4y7mt/oZX0G+JTyHtyN55xqU5qxP1pUzOj0ERrlhgGigKcf5/cA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone powerdns.club

powerdns.club

	Checking DS between club and powerdns.club
	Query to c.nic.club for powerdns.club/DS
	Received 286 bytes from 37.209.196.10
	;; Response received from [37.209.196.10] 286 octets ;; HEADER SECTION ;; id = 60929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN DS ;; ANSWER SECTION (2 records) powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 ) powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20251121004941 20251107001821 15345 club. ih/m9+TUZfQD/zkr8InjjUr0y5gZWh2JLUJegswYkl5gpqoYqRpw3nXHWWHunre4chnX+A9KgQXn hzigDZ0Q41ywi85s1nlSLvdFIm8kui9Wtb+2/qUosFbh1yQzG5tzyWEK+AoJK9aV9IzavjMM4la9 UeRA1jgmN1A4y7mt/oZX0G+JTyHtyN55xqU5qxP1pUzOj0ERrlhgGigKcf5/cA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for powerdns.club in the club zone
	DS=49111/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20251121004941 20251107001821 15345 club. ih/m9+TUZfQD/zkr8InjjUr0y5gZWh2JLUJegswYkl5gpqoYqRpw3nXHWWHunre4chnX+A9KgQXn hzigDZ0Q41ywi85s1nlSLvdFIm8kui9Wtb+2/qUosFbh1yQzG5tzyWEK+AoJK9aV9IzavjMM4la9 UeRA1jgmN1A4y7mt/oZX0G+JTyHtyN55xqU5qxP1pUzOj0ERrlhgGigKcf5/cA== )`
	RRSIG=15345 and DNSKEY=15345 verifies the DS RRset
	DS=49111/SHA-256 is now in the chain-of-trust
	`powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 )`
	Query to bernoulli.7bits.nl for powerdns.club/DNSKEY
	Received 231 bytes from 89.188.2.130
	;; Response received from [89.188.2.130] 231 octets ;; HEADER SECTION ;; id = 43127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN DNSKEY ;; ANSWER SECTION (2 records) powerdns.club. 3600 IN RRSIG ( DNSKEY 13 2 3600 20251120000000 20251030000000 49111 powerdns.club. cF7Og6F8NBX2JM7AZM8HQavMOh9j8/CACestywFf6Umyoj7baz3WzfiWWQC2tdGAuRm1H1Nc4byg wd3U5xqi7A== ) powerdns.club. 3600 IN DNSKEY ( 257 3 13 K3PnNfh8Xo/yCfefLo27fngO4BweGAd4uQQo1rfqP1XtmmNPodTlDluq0clWeX9I4EKlmhm8+NS7 Pn5ESAIykA== ) ; keytag 49111 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for powerdns.club
	`powerdns.club. 3600 IN DNSKEY ( 257 3 13 K3PnNfh8Xo/yCfefLo27fngO4BweGAd4uQQo1rfqP1XtmmNPodTlDluq0clWeX9I4EKlmhm8+NS7 Pn5ESAIykA== ) ; keytag 49111`
	DNSKEY=49111/SEP is now in the chain-of-trust
	DS=49111/SHA-256 verifies DNSKEY=49111/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`powerdns.club. 3600 IN RRSIG ( DNSKEY 13 2 3600 20251120000000 20251030000000 49111 powerdns.club. cF7Og6F8NBX2JM7AZM8HQavMOh9j8/CACestywFf6Umyoj7baz3WzfiWWQC2tdGAuRm1H1Nc4byg wd3U5xqi7A== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the DNSKEY RRset
	Query to grace.7bits.nl for powerdns.club/A
	Received 373 bytes from 173.212.217.242
	;; Response received from [173.212.217.242] 373 octets ;; HEADER SECTION ;; id = 44065 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20251120000000 20251030000000 49111 powerdns.club. vi/BJIIha6SlORlUEwjJIRTGH8PMBHSTicmIgcuIifiapkfVVU8suJha22mXc7flxBDLcHlx36cZ HYHniZK6yA== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20251120000000 20251030000000 49111 powerdns.club. BtnQh8tilXS14mKBvDu/h4E5MSsy91jK5Jj0M+Pdb7WJR3bzvWm2X5BQHmfKx5QfUwKVIrZ/WX/5 kgxJjdM6xw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	grace.7bits.nl is authoritative for powerdns.club
	Found RRSIG signed by powerdns.club zone
	Query to bernoulli.7bits.nl for powerdns.club/SOA
	Received 214 bytes from 89.188.2.130
	;; Response received from [89.188.2.130] 214 octets ;; HEADER SECTION ;; id = 26945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN SOA ;; ANSWER SECTION (2 records) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20251120000000 20251030000000 49111 powerdns.club. vi/BJIIha6SlORlUEwjJIRTGH8PMBHSTicmIgcuIifiapkfVVU8suJha22mXc7flxBDLcHlx36cZ HYHniZK6yA== ) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to grace.7bits.nl for powerdns.club/A
	Received 373 bytes from 173.212.217.242
	;; Response received from [173.212.217.242] 373 octets ;; HEADER SECTION ;; id = 31812 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20251120000000 20251030000000 49111 powerdns.club. vi/BJIIha6SlORlUEwjJIRTGH8PMBHSTicmIgcuIifiapkfVVU8suJha22mXc7flxBDLcHlx36cZ HYHniZK6yA== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20251120000000 20251030000000 49111 powerdns.club. BtnQh8tilXS14mKBvDu/h4E5MSsy91jK5Jj0M+Pdb7WJR3bzvWm2X5BQHmfKx5QfUwKVIrZ/WX/5 kgxJjdM6xw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20251120000000 20251030000000 49111 powerdns.club. BtnQh8tilXS14mKBvDu/h4E5MSsy91jK5Jj0M+Pdb7WJR3bzvWm2X5BQHmfKx5QfUwKVIrZ/WX/5 kgxJjdM6xw== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the NSEC RRset
	NSEC proves no records of type A exist for powerdns.club
	Found 1 RRSIGs over SOA RRset
	`powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20251120000000 20251030000000 49111 powerdns.club. vi/BJIIha6SlORlUEwjJIRTGH8PMBHSTicmIgcuIifiapkfVVU8suJha22mXc7flxBDLcHlx36cZ HYHniZK6yA== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the SOA RRset

powerdns.club

	Query to bernoulli.7bits.nl for powerdns.club/A
	Received 373 bytes from 89.188.2.130
	;; Response received from [89.188.2.130] 373 octets ;; HEADER SECTION ;; id = 28393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20251120000000 20251030000000 49111 powerdns.club. vi/BJIIha6SlORlUEwjJIRTGH8PMBHSTicmIgcuIifiapkfVVU8suJha22mXc7flxBDLcHlx36cZ HYHniZK6yA== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20251120000000 20251030000000 49111 powerdns.club. BtnQh8tilXS14mKBvDu/h4E5MSsy91jK5Jj0M+Pdb7WJR3bzvWm2X5BQHmfKx5QfUwKVIrZ/WX/5 kgxJjdM6xw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bernoulli.7bits.nl is authoritative for powerdns.club
	Found RRSIG signed by powerdns.club zone
	Query to bernoulli.7bits.nl for powerdns.club/A
	Received 373 bytes from 89.188.2.130
	;; Response received from [89.188.2.130] 373 octets ;; HEADER SECTION ;; id = 10559 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20251120000000 20251030000000 49111 powerdns.club. vi/BJIIha6SlORlUEwjJIRTGH8PMBHSTicmIgcuIifiapkfVVU8suJha22mXc7flxBDLcHlx36cZ HYHniZK6yA== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20251120000000 20251030000000 49111 powerdns.club. BtnQh8tilXS14mKBvDu/h4E5MSsy91jK5Jj0M+Pdb7WJR3bzvWm2X5BQHmfKx5QfUwKVIrZ/WX/5 kgxJjdM6xw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20251120000000 20251030000000 49111 powerdns.club. BtnQh8tilXS14mKBvDu/h4E5MSsy91jK5Jj0M+Pdb7WJR3bzvWm2X5BQHmfKx5QfUwKVIrZ/WX/5 kgxJjdM6xw== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the NSEC RRset
	NSEC proves no records of type A exist for powerdns.club
	Found 1 RRSIGs over SOA RRset
	`powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20251120000000 20251030000000 49111 powerdns.club. vi/BJIIha6SlORlUEwjJIRTGH8PMBHSTicmIgcuIifiapkfVVU8suJha22mXc7flxBDLcHlx36cZ HYHniZK6yA== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test powerdns.club at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: