DNSSEC Debugger - unige.ch

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-05 17:13:36 UTC

Analyzing DNSSEC problems for unige.ch

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1139 octets ;; HEADER SECTION ;; id = 45531 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to i.root-servers.net for unige.ch/A
	Received 676 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 676 octets ;; HEADER SECTION ;; id = 6181 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unige.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 86400 IN DS ( 58745 13 2 083ed7735a6aad21d51cb0af5c485055602b392435e92b2c13614a6bc8d46b92 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . hvshEV6H4pK8DJc9uFzJdPY/WkYOsQ4dx1TSHEPFMbrhomx0o88D1/Aqq0W7EebAjYn0HrycIyZ/ Yb6aLu9tn1zObWLA2RazRkpBLQKJa8mWC1SAtiHrigpbFpTzmzZOL3fg0BKuyul1gaaGf2WcYsOf g5ntZbdBLwj1durmSzzfy+CfvI80SQZFzCbjhVie02UIXEJxU0qUBZ4A5gbVWA8b5qHo6JrnZSYD pIl8A/L6RUh+ET6YVsB25mL1PhheioTPNRAJnsuI0s7KxirFB/c82cAV5Qx6jgojrGULhnsD5lyJ hkJEnQHIIxpbywEDwj+Wy+AjTt8xkB+VqW/pkA== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 d.nic.ch. 172800 IN A 194.0.25.39 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for ch/DNSKEY
	Received 670 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 670 octets ;; HEADER SECTION ;; id = 42944 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 58745 13 2 083ed7735a6aad21d51cb0af5c485055602b392435e92b2c13614a6bc8d46b92 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . hvshEV6H4pK8DJc9uFzJdPY/WkYOsQ4dx1TSHEPFMbrhomx0o88D1/Aqq0W7EebAjYn0HrycIyZ/ Yb6aLu9tn1zObWLA2RazRkpBLQKJa8mWC1SAtiHrigpbFpTzmzZOL3fg0BKuyul1gaaGf2WcYsOf g5ntZbdBLwj1durmSzzfy+CfvI80SQZFzCbjhVie02UIXEJxU0qUBZ4A5gbVWA8b5qHo6JrnZSYD pIl8A/L6RUh+ET6YVsB25mL1PhheioTPNRAJnsuI0s7KxirFB/c82cAV5Qx6jgojrGULhnsD5lyJ hkJEnQHIIxpbywEDwj+Wy+AjTt8xkB+VqW/pkA== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN A 130.59.31.43 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN A 194.0.25.39 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN A 194.0.17.1 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN A 194.146.106.10 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; { "EDNS-VERSION": 0 }
	Found child zone ch

	Checking DS between . and ch
	Query to g.root-servers.net for ch/DS
	Received 366 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 366 octets ;; HEADER SECTION ;; id = 25416 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 58745 13 2 083ed7735a6aad21d51cb0af5c485055602b392435e92b2c13614a6bc8d46b92 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . hvshEV6H4pK8DJc9uFzJdPY/WkYOsQ4dx1TSHEPFMbrhomx0o88D1/Aqq0W7EebAjYn0HrycIyZ/ Yb6aLu9tn1zObWLA2RazRkpBLQKJa8mWC1SAtiHrigpbFpTzmzZOL3fg0BKuyul1gaaGf2WcYsOf g5ntZbdBLwj1durmSzzfy+CfvI80SQZFzCbjhVie02UIXEJxU0qUBZ4A5gbVWA8b5qHo6JrnZSYD pIl8A/L6RUh+ET6YVsB25mL1PhheioTPNRAJnsuI0s7KxirFB/c82cAV5Qx6jgojrGULhnsD5lyJ hkJEnQHIIxpbywEDwj+Wy+AjTt8xkB+VqW/pkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ch in the . zone
	DS=58745/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20260918050000 20260905040000 57780 . hvshEV6H4pK8DJc9uFzJdPY/WkYOsQ4dx1TSHEPFMbrhomx0o88D1/Aqq0W7EebAjYn0HrycIyZ/ Yb6aLu9tn1zObWLA2RazRkpBLQKJa8mWC1SAtiHrigpbFpTzmzZOL3fg0BKuyul1gaaGf2WcYsOf g5ntZbdBLwj1durmSzzfy+CfvI80SQZFzCbjhVie02UIXEJxU0qUBZ4A5gbVWA8b5qHo6JrnZSYD pIl8A/L6RUh+ET6YVsB25mL1PhheioTPNRAJnsuI0s7KxirFB/c82cAV5Qx6jgojrGULhnsD5lyJ hkJEnQHIIxpbywEDwj+Wy+AjTt8xkB+VqW/pkA== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=58745/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 58745 13 2 083ed7735a6aad21d51cb0af5c485055602b392435e92b2c13614a6bc8d46b92 )`
	Query to f.nic.ch for ch/DNSKEY
	Received 369 bytes from 194.146.106.10
	;; Response received from [194.146.106.10] 369 octets ;; HEADER SECTION ;; id = 20320 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 257 3 13 af3VgrsVYa6Jm3d1lwsoCAEqQbeNpLUJ5kHjkUksCCPvubXuPEwTJGDUUbw9QRJtm6lBIAjbjtAc cGemAgcyZQ== ) ; keytag 58745 ch. 86400 IN DNSKEY ( 256 3 13 nLxT92OT8wBSOb9Sym2GuZ5GMkIKFnxGLLzbRfGOhHExqmhOtgct9Vx16bMDzT57vDBEYwjHEHEM CfXpU6vFNQ== ) ; keytag 48631 ch. 86400 IN DNSKEY ( 256 3 13 FO+tvH3+WFgU4V5TQ6G/P5draexIplg0Icfnmr1Txh48H8x/+3f2DQRcjv4zlZqT5L2qleXEDpm3 aaM/oYpQEA== ) ; keytag 28106 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260926100909 20260811090909 58745 ch. 0/zKp7pQ6rktYdj4pJIC03qxqjYVGgp45KcQ/IhlAMhFKRYL85y8Pp8vlDGNZeP+Pr2zISkYgCJm 4rZO2RgjhA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 257 3 13 af3VgrsVYa6Jm3d1lwsoCAEqQbeNpLUJ5kHjkUksCCPvubXuPEwTJGDUUbw9QRJtm6lBIAjbjtAc cGemAgcyZQ== ) ; keytag 58745`
	`ch. 86400 IN DNSKEY ( 256 3 13 nLxT92OT8wBSOb9Sym2GuZ5GMkIKFnxGLLzbRfGOhHExqmhOtgct9Vx16bMDzT57vDBEYwjHEHEM CfXpU6vFNQ== ) ; keytag 48631`
	`ch. 86400 IN DNSKEY ( 256 3 13 FO+tvH3+WFgU4V5TQ6G/P5draexIplg0Icfnmr1Txh48H8x/+3f2DQRcjv4zlZqT5L2qleXEDpm3 aaM/oYpQEA== ) ; keytag 28106`
	DNSKEY=58745/SEP is now in the chain-of-trust
	DS=58745/SHA-256 verifies DNSKEY=58745/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260926100909 20260811090909 58745 ch. 0/zKp7pQ6rktYdj4pJIC03qxqjYVGgp45KcQ/IhlAMhFKRYL85y8Pp8vlDGNZeP+Pr2zISkYgCJm 4rZO2RgjhA== )`
	RRSIG=58745 and DNSKEY=58745/SEP verifies the DNSKEY RRset
	DNSKEY=48631 is now in the chain-of-trust
	DNSKEY=28106 is now in the chain-of-trust
	Query to f.nic.ch for unige.ch/A
	Received 381 bytes from 194.146.106.10
	;; Response received from [194.146.106.10] 381 octets ;; HEADER SECTION ;; id = 22758 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unige.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) unige.ch. 3600 IN NS nse2.unige.ch. unige.ch. 3600 IN NS nse1.unige.ch. unige.ch. 3600 IN NS scsnms.switch.ch. unige.ch. 3600 IN DS ( 29830 8 2 b86d19d71d19ad395fe136feb65ab863035e696fb5f536a753cc60dc41397ea0 ) unige.ch. 3600 IN RRSIG ( DS 13 2 3600 20260923175148 20260904093201 28106 ch. CObSfpD37OAD6SJJHlaT6WvWXujyAf40gesgO+6o3b9DW4oAEGeNR5oGqdAIyVMldYB5GGjZ35nf Jq1xLqTsgg== ) ;; ADDITIONAL SECTION (7 records) nse1.unige.ch. 3600 IN A 129.194.3.7 nse2.unige.ch. 3600 IN A 129.194.3.6 scsnms.switch.ch. 3600 IN A 130.59.31.26 nse1.unige.ch. 3600 IN AAAA 2001:620:600:8021:1::7 nse2.unige.ch. 3600 IN AAAA 2001:620:600:8021:1::6 scsnms.switch.ch. 3600 IN AAAA 2001:620:0:ff::a7 ;; { "EDNS-VERSION": 0 }
	Query to b.nic.ch for unige.ch/DNSKEY
	Received 381 bytes from 130.59.31.43
	;; Response received from [130.59.31.43] 381 octets ;; HEADER SECTION ;; id = 27164 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unige.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) unige.ch. 3600 IN NS nse1.unige.ch. unige.ch. 3600 IN NS nse2.unige.ch. unige.ch. 3600 IN NS scsnms.switch.ch. unige.ch. 3600 IN DS ( 29830 8 2 b86d19d71d19ad395fe136feb65ab863035e696fb5f536a753cc60dc41397ea0 ) unige.ch. 3600 IN RRSIG ( DS 13 2 3600 20260923175148 20260904093201 28106 ch. CObSfpD37OAD6SJJHlaT6WvWXujyAf40gesgO+6o3b9DW4oAEGeNR5oGqdAIyVMldYB5GGjZ35nf Jq1xLqTsgg== ) ;; ADDITIONAL SECTION (7 records) nse1.unige.ch. 3600 IN A 129.194.3.7 nse2.unige.ch. 3600 IN A 129.194.3.6 scsnms.switch.ch. 3600 IN A 130.59.31.26 nse1.unige.ch. 3600 IN AAAA 2001:620:600:8021:1::7 nse2.unige.ch. 3600 IN AAAA 2001:620:600:8021:1::6 scsnms.switch.ch. 3600 IN AAAA 2001:620:0:ff::a7 ;; { "EDNS-VERSION": 0 }
	Found child zone unige.ch

unige.ch

	Checking DS between ch and unige.ch
	Query to f.nic.ch for unige.ch/DS
	Received 183 bytes from 194.146.106.10
	;; Response received from [194.146.106.10] 183 octets ;; HEADER SECTION ;; id = 54308 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unige.ch. IN DS ;; ANSWER SECTION (2 records) unige.ch. 3600 IN DS ( 29830 8 2 b86d19d71d19ad395fe136feb65ab863035e696fb5f536a753cc60dc41397ea0 ) unige.ch. 3600 IN RRSIG ( DS 13 2 3600 20260923175148 20260904093201 28106 ch. CObSfpD37OAD6SJJHlaT6WvWXujyAf40gesgO+6o3b9DW4oAEGeNR5oGqdAIyVMldYB5GGjZ35nf Jq1xLqTsgg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for unige.ch in the ch zone
	DS=29830/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`unige.ch. 3600 IN RRSIG ( DS 13 2 3600 20260923175148 20260904093201 28106 ch. CObSfpD37OAD6SJJHlaT6WvWXujyAf40gesgO+6o3b9DW4oAEGeNR5oGqdAIyVMldYB5GGjZ35nf Jq1xLqTsgg== )`
	RRSIG=28106 and DNSKEY=28106 verifies the DS RRset
	DS=29830/SHA-256 is now in the chain-of-trust
	`unige.ch. 3600 IN DS ( 29830 8 2 b86d19d71d19ad395fe136feb65ab863035e696fb5f536a753cc60dc41397ea0 )`
	Query to nse2.unige.ch for unige.ch/DNSKEY
	Received 1073 bytes from 129.194.3.6
	;; Response received from [129.194.3.6] 1073 octets ;; HEADER SECTION ;; id = 43901 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unige.ch. IN DNSKEY ;; ANSWER SECTION (5 records) unige.ch. 172800 IN DNSKEY ( 256 3 8 AwEAAc5krfSV0WDROMXhAqq9SzrhEq81TPk97eEPweJkmJaGvUUUr/mS8trzHeDNcClAhg4lqTZx OBXqzEYueYtIC2FLKgsBl84nnSFX1A6KEpQF+PbGF2ZBuz8lvDraL/vbbEk52QANhoOaY4dToX/0 g+b7yLkfAsY7vdTHZiEeClyN ) ; keytag 58075 unige.ch. 172800 IN DNSKEY ( 256 3 8 AwEAAZlrCy4ZyfseWzfBtLPMjdANot4z6J/OgWdI45hkBSJFp4Wa9Dqy8d5WHk/HP07w0GngUwo5 SJOEkOeoI+rI7RbruyrVqoAcIr2/hZTU8/31hwRmr0Wd1ga1hNqVKHp/bvPhWrzEv0U+ck8/xOhB C6jtrG43GEKViICaMl7pk1RN ) ; keytag 41179 unige.ch. 172800 IN DNSKEY ( 257 3 8 AwEAAe+aEOQjl1iqdi9RySUwDn4cxjPmm/tFwruPKt2PAzdFUi3tLoxusyvyfVuuR7iamLhAKQe+ 1SNXpo9TRbTTFMYWOScpXRMx9yV4qvX2zWdNvsUhQNC2djbTKhQuPl9z7753ksF9iVLaAD0HCv/V Vlt1bHo5vRKqRujtHpXZVDT9FKJsBheZ8T326JI0Y82jTGrr53CWOs45pbkXQQgvL9lnjoGxxVkV KCZF21ZFkhCCmXh//O0UYnb4OmZt6fo3HY86O4pWGNV7k7CHHv3F6qBU18wt+ECRDpsSAi5Q3Seq 0ml6LZQT6E+DwJ+pmr90B8okNlQkrOS9aQ7gOh+VRss= ) ; keytag 29830 unige.ch. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260909154217 20260905152034 29830 unige.ch. C+bHmgS5thBJMIRnnynpaNflhWUdrh+7zenjkkMOHE1Z4I3CpE3PwSWgpX7+grSyuLwxRF+C6/3r 6R+4XFRUgkDgEbXTkIozPb2Ej35DhzopQbqgT7iH+F/22cCjShRaSDNLqaG2LR0vJbV0EHdaE8RF 2W5UtFBDWOu0sATPEIPJ9NdEAu2sSeH0igrkvneydwhUa6dXfBF2zJu1EwZVQHA5rIf3pVFGFEjG kjaUrUTr7QngPmBeUD+XupEi2vYla7DuL4+ANKr+pxOzZdiEGDuK/Acijz55YWyea1pI6bq29zVw aVdf9yH3dh2nS+s34buI/pmwLxHQte/yyJHtMg== ) unige.ch. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260909154217 20260905152034 41179 unige.ch. UefpkBv8raVJYJRSSahii4m6krf4i279RVHkIx9VJb6SzlQsV70ZhxceHh1sQStSlArAJmUG4gSR htybify2bc5I/1Slu/LFaTLNsSSTYMD/bGCP/O3SIj9iG3h0zNHwINylKnXnmTw1F729eJOsM4tV HeLLf8Sr57s680OKkxY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for unige.ch
	`unige.ch. 172800 IN DNSKEY ( 256 3 8 AwEAAc5krfSV0WDROMXhAqq9SzrhEq81TPk97eEPweJkmJaGvUUUr/mS8trzHeDNcClAhg4lqTZx OBXqzEYueYtIC2FLKgsBl84nnSFX1A6KEpQF+PbGF2ZBuz8lvDraL/vbbEk52QANhoOaY4dToX/0 g+b7yLkfAsY7vdTHZiEeClyN ) ; keytag 58075`
	`unige.ch. 172800 IN DNSKEY ( 256 3 8 AwEAAZlrCy4ZyfseWzfBtLPMjdANot4z6J/OgWdI45hkBSJFp4Wa9Dqy8d5WHk/HP07w0GngUwo5 SJOEkOeoI+rI7RbruyrVqoAcIr2/hZTU8/31hwRmr0Wd1ga1hNqVKHp/bvPhWrzEv0U+ck8/xOhB C6jtrG43GEKViICaMl7pk1RN ) ; keytag 41179`
	`unige.ch. 172800 IN DNSKEY ( 257 3 8 AwEAAe+aEOQjl1iqdi9RySUwDn4cxjPmm/tFwruPKt2PAzdFUi3tLoxusyvyfVuuR7iamLhAKQe+ 1SNXpo9TRbTTFMYWOScpXRMx9yV4qvX2zWdNvsUhQNC2djbTKhQuPl9z7753ksF9iVLaAD0HCv/V Vlt1bHo5vRKqRujtHpXZVDT9FKJsBheZ8T326JI0Y82jTGrr53CWOs45pbkXQQgvL9lnjoGxxVkV KCZF21ZFkhCCmXh//O0UYnb4OmZt6fo3HY86O4pWGNV7k7CHHv3F6qBU18wt+ECRDpsSAi5Q3Seq 0ml6LZQT6E+DwJ+pmr90B8okNlQkrOS9aQ7gOh+VRss= ) ; keytag 29830`
	DNSKEY=29830/SEP is now in the chain-of-trust
	DS=29830/SHA-256 verifies DNSKEY=29830/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`unige.ch. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260909154217 20260905152034 29830 unige.ch. C+bHmgS5thBJMIRnnynpaNflhWUdrh+7zenjkkMOHE1Z4I3CpE3PwSWgpX7+grSyuLwxRF+C6/3r 6R+4XFRUgkDgEbXTkIozPb2Ej35DhzopQbqgT7iH+F/22cCjShRaSDNLqaG2LR0vJbV0EHdaE8RF 2W5UtFBDWOu0sATPEIPJ9NdEAu2sSeH0igrkvneydwhUa6dXfBF2zJu1EwZVQHA5rIf3pVFGFEjG kjaUrUTr7QngPmBeUD+XupEi2vYla7DuL4+ANKr+pxOzZdiEGDuK/Acijz55YWyea1pI6bq29zVw aVdf9yH3dh2nS+s34buI/pmwLxHQte/yyJHtMg== )`
	`unige.ch. 172800 IN RRSIG ( DNSKEY 8 2 172800 20260909154217 20260905152034 41179 unige.ch. UefpkBv8raVJYJRSSahii4m6krf4i279RVHkIx9VJb6SzlQsV70ZhxceHh1sQStSlArAJmUG4gSR htybify2bc5I/1Slu/LFaTLNsSSTYMD/bGCP/O3SIj9iG3h0zNHwINylKnXnmTw1F729eJOsM4tV HeLLf8Sr57s680OKkxY= )`
	RRSIG=29830 and DNSKEY=29830/SEP verifies the DNSKEY RRset
	RRSIG=41179 and DNSKEY=41179 verifies the DNSKEY RRset
	DNSKEY=58075 is now in the chain-of-trust
	DNSKEY=41179 is now in the chain-of-trust
	Query to nse1.unige.ch for unige.ch/A
	Received 221 bytes from 129.194.3.7
	;; Response received from [129.194.3.7] 221 octets ;; HEADER SECTION ;; id = 58343 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unige.ch. IN A ;; ANSWER SECTION (2 records) unige.ch. 300 IN A 129.194.17.21 unige.ch. 300 IN RRSIG ( A 8 2 300 20260909085903 20260905083023 41179 unige.ch. CJ2SfNJxX+LolSv3lwnM8UoF7/Hhy4o/r625ofQaH1MuhjehV0c6nj/CS6q2uIZVp+/793P1DzmL xgKwUUa7V4pZmsrw9dNYZc4lZv9aO09QKGDKwbSkad2snU6Rli+05TJBiMLHpKpXaedUMgETBEcH nGlYivDkUPQkkpdEaS0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nse1.unige.ch is authoritative for unige.ch
	Found RRSIG signed by unige.ch zone
	Query to scsnms.switch.ch for unige.ch/SOA
	Received 253 bytes from 130.59.31.26
	;; Response received from [130.59.31.26] 253 octets ;; HEADER SECTION ;; id = 15282 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unige.ch. IN SOA ;; ANSWER SECTION (2 records) unige.ch. 28800 IN SOA ( nse1.unige.ch. netops.unige.ch. 536757 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) unige.ch. 28800 IN RRSIG ( SOA 8 2 28800 20260909170835 20260905160835 41179 unige.ch. I29Ueze9CgM3pddL+rP/5Jq0Xi4+j0wwsVRyvulaJ2SFR/H3h6JGn+SwkrFVMldc3NN8Uuz47Idu c2nZMTru/9acx/UTowhB8LV0cj8aygmhyhLf/QsMBYY8/0CBVtKVVCJx14wI5+jreB9Ht0bG8bMV HLRiEZE+avs6gt+UJ+g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nse2.unige.ch for unige.ch/SOA
	Received 253 bytes from 129.194.3.6
	;; Response received from [129.194.3.6] 253 octets ;; HEADER SECTION ;; id = 35671 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unige.ch. IN SOA ;; ANSWER SECTION (2 records) unige.ch. 28800 IN SOA ( nse1.unige.ch. netops.unige.ch. 536757 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) unige.ch. 28800 IN RRSIG ( SOA 8 2 28800 20260909170835 20260905160835 41179 unige.ch. I29Ueze9CgM3pddL+rP/5Jq0Xi4+j0wwsVRyvulaJ2SFR/H3h6JGn+SwkrFVMldc3NN8Uuz47Idu c2nZMTru/9acx/UTowhB8LV0cj8aygmhyhLf/QsMBYY8/0CBVtKVVCJx14wI5+jreB9Ht0bG8bMV HLRiEZE+avs6gt+UJ+g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nse1.unige.ch for unige.ch/A
	unige.ch A RR has value 129.194.17.21
	Found 1 RRSIGs over A RRset
	`unige.ch. 300 IN RRSIG ( A 8 2 300 20260909085903 20260905083023 41179 unige.ch. CJ2SfNJxX+LolSv3lwnM8UoF7/Hhy4o/r625ofQaH1MuhjehV0c6nj/CS6q2uIZVp+/793P1DzmL xgKwUUa7V4pZmsrw9dNYZc4lZv9aO09QKGDKwbSkad2snU6Rli+05TJBiMLHpKpXaedUMgETBEcH nGlYivDkUPQkkpdEaS0= )`
	RRSIG=41179 and DNSKEY=41179 verifies the A RRset

unige.ch

	Query to scsnms.switch.ch for unige.ch/A
	Received 221 bytes from 130.59.31.26
	;; Response received from [130.59.31.26] 221 octets ;; HEADER SECTION ;; id = 4585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unige.ch. IN A ;; ANSWER SECTION (2 records) unige.ch. 300 IN A 129.194.17.21 unige.ch. 300 IN RRSIG ( A 8 2 300 20260909085903 20260905083023 41179 unige.ch. CJ2SfNJxX+LolSv3lwnM8UoF7/Hhy4o/r625ofQaH1MuhjehV0c6nj/CS6q2uIZVp+/793P1DzmL xgKwUUa7V4pZmsrw9dNYZc4lZv9aO09QKGDKwbSkad2snU6Rli+05TJBiMLHpKpXaedUMgETBEcH nGlYivDkUPQkkpdEaS0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	scsnms.switch.ch is authoritative for unige.ch
	Found RRSIG signed by unige.ch zone
	Query to scsnms.switch.ch for unige.ch/A
	unige.ch A RR has value 129.194.17.21
	Found 1 RRSIGs over A RRset
	`unige.ch. 300 IN RRSIG ( A 8 2 300 20260909085903 20260905083023 41179 unige.ch. CJ2SfNJxX+LolSv3lwnM8UoF7/Hhy4o/r625ofQaH1MuhjehV0c6nj/CS6q2uIZVp+/793P1DzmL xgKwUUa7V4pZmsrw9dNYZc4lZv9aO09QKGDKwbSkad2snU6Rli+05TJBiMLHpKpXaedUMgETBEcH nGlYivDkUPQkkpdEaS0= )`
	RRSIG=41179 and DNSKEY=41179 verifies the A RRset

unige.ch

	Query to nse2.unige.ch for unige.ch/A
	Received 221 bytes from 129.194.3.6
	;; Response received from [129.194.3.6] 221 octets ;; HEADER SECTION ;; id = 11681 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unige.ch. IN A ;; ANSWER SECTION (2 records) unige.ch. 300 IN A 129.194.17.21 unige.ch. 300 IN RRSIG ( A 8 2 300 20260909085903 20260905083023 41179 unige.ch. CJ2SfNJxX+LolSv3lwnM8UoF7/Hhy4o/r625ofQaH1MuhjehV0c6nj/CS6q2uIZVp+/793P1DzmL xgKwUUa7V4pZmsrw9dNYZc4lZv9aO09QKGDKwbSkad2snU6Rli+05TJBiMLHpKpXaedUMgETBEcH nGlYivDkUPQkkpdEaS0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nse2.unige.ch is authoritative for unige.ch
	Found RRSIG signed by unige.ch zone
	Query to nse2.unige.ch for unige.ch/A
	unige.ch A RR has value 129.194.17.21
	Found 1 RRSIGs over A RRset
	`unige.ch. 300 IN RRSIG ( A 8 2 300 20260909085903 20260905083023 41179 unige.ch. CJ2SfNJxX+LolSv3lwnM8UoF7/Hhy4o/r625ofQaH1MuhjehV0c6nj/CS6q2uIZVp+/793P1DzmL xgKwUUa7V4pZmsrw9dNYZc4lZv9aO09QKGDKwbSkad2snU6Rli+05TJBiMLHpKpXaedUMgETBEcH nGlYivDkUPQkkpdEaS0= )`
	RRSIG=41179 and DNSKEY=41179 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test unige.ch at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: