DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-10-20 11:35:47 UTC

Analyzing DNSSEC problems for web.de

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1139 octets ;; HEADER SECTION ;; id = 26052 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261101000000 20261011000000 38696 . llXxlp+gWc4h/F9G8UPj3VXhNDQoZrco3Piivk7YMKS7pi8B+CBQHHPO/QNw+VfpNq7CtBDA6gxu cyia1ZZx8yM0oLve7qJKgPuRVNnw5AOegtdxy+NKSy8rT6XNtCdM2gL9EmqKux+/JNATbZG2efGk VpHuirkq0Vs1bvYglVl6fvHbqoHpfjbnHVheuKpq+HvdsZOphoEJu74Y4lpYNBNTJijGgajnJ64A UMPbMfu76uLi68CcWKDGWhzCNeSwnSjK7CA6aKte5StW61Nuz0Nv8mvzqMX0epPQ7lXJ9Yc/6850 81BdzAYK3yMAfTOqL4EgluNZQAtAAh9bseJVyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261101000000 20261011000000 38696 . llXxlp+gWc4h/F9G8UPj3VXhNDQoZrco3Piivk7YMKS7pi8B+CBQHHPO/QNw+VfpNq7CtBDA6gxu cyia1ZZx8yM0oLve7qJKgPuRVNnw5AOegtdxy+NKSy8rT6XNtCdM2gL9EmqKux+/JNATbZG2efGk VpHuirkq0Vs1bvYglVl6fvHbqoHpfjbnHVheuKpq+HvdsZOphoEJu74Y4lpYNBNTJijGgajnJ64A UMPbMfu76uLi68CcWKDGWhzCNeSwnSjK7CA6aKte5StW61Nuz0Nv8mvzqMX0epPQ7lXJ9Yc/6850 81BdzAYK3yMAfTOqL4EgluNZQAtAAh9bseJVyw== )`
	RRSIG=38696 and DNSKEY=38696/SEP verifies the DNSKEY RRset
	DNSKEY=8763 is now in the chain-of-trust
	Query to b.root-servers.net for web.de/A
	Received 746 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 746 octets ;; HEADER SECTION ;; id = 36985 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20261102050000 20261020040000 8763 . qrRkFQM/kjNqZp+OCpWcFNUrh52w/dYPxDwviDcgtMKNOGXbS0eSaY9sBuFre6EM46q9/Qiw9dvm +7gZIhxTvrQnBH9TNuN3wG227HeEefebscF8jGXJhXNn+nMXBHXenoNfWL/EXhZriLJ4sa5DONNf 8Men2oxJqvWRsn5FaUxhgmj5PUi1tWiY/ih+TanquLrRJoIbv3ZeewOdre9Sfr4+4P4TKhfIntwQ 0nLeVdDmg1dIX2GaKrgq893cJHvc+X9oSpzkmAhbF/1cowOgB5ci2Pcrun9TE3aphjKleabePNz+ r0DZsFEQGXkHQy2C7sGx5FmOnsBQYbO4rWVuxw== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN A 81.91.164.5 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 z.nic.de. 172800 IN A 194.246.96.1 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de l.de.net. 172800 IN A 77.67.63.105 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN A 194.146.107.6 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN A 195.243.137.26 s.de.net. 172800 IN AAAA 2003:8:14::53 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for de/DNSKEY
	Received 736 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 736 octets ;; HEADER SECTION ;; id = 58697 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS f.nic.de. de. 172800 IN NS z.nic.de. de. 172800 IN NS n.de.net. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20261102050000 20261020040000 8763 . qrRkFQM/kjNqZp+OCpWcFNUrh52w/dYPxDwviDcgtMKNOGXbS0eSaY9sBuFre6EM46q9/Qiw9dvm +7gZIhxTvrQnBH9TNuN3wG227HeEefebscF8jGXJhXNn+nMXBHXenoNfWL/EXhZriLJ4sa5DONNf 8Men2oxJqvWRsn5FaUxhgmj5PUi1tWiY/ih+TanquLrRJoIbv3ZeewOdre9Sfr4+4P4TKhfIntwQ 0nLeVdDmg1dIX2GaKrgq893cJHvc+X9oSpzkmAhbF/1cowOgB5ci2Pcrun9TE3aphjKleabePNz+ r0DZsFEQGXkHQy2C7sGx5FmOnsBQYbO4rWVuxw== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 a.nic.de. 172800 IN AAAA 2001:678:2::53 l.de.net. 172800 IN A 77.67.63.105 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 s.de.net. 172800 IN A 195.243.137.26 s.de.net. 172800 IN AAAA 2003:8:14::53 f.nic.de. 172800 IN A 81.91.164.5 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 z.nic.de. 172800 IN A 194.246.96.1 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de n.de.net. 172800 IN A 194.146.107.6 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 ;; { "EDNS-VERSION": 0 }
	Found child zone de

	Checking DS between . and de
	Query to h.root-servers.net for de/DS
	Received 366 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 366 octets ;; HEADER SECTION ;; id = 29610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20261102050000 20261020040000 8763 . qrRkFQM/kjNqZp+OCpWcFNUrh52w/dYPxDwviDcgtMKNOGXbS0eSaY9sBuFre6EM46q9/Qiw9dvm +7gZIhxTvrQnBH9TNuN3wG227HeEefebscF8jGXJhXNn+nMXBHXenoNfWL/EXhZriLJ4sa5DONNf 8Men2oxJqvWRsn5FaUxhgmj5PUi1tWiY/ih+TanquLrRJoIbv3ZeewOdre9Sfr4+4P4TKhfIntwQ 0nLeVdDmg1dIX2GaKrgq893cJHvc+X9oSpzkmAhbF/1cowOgB5ci2Pcrun9TE3aphjKleabePNz+ r0DZsFEQGXkHQy2C7sGx5FmOnsBQYbO4rWVuxw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20261102050000 20261020040000 8763 . qrRkFQM/kjNqZp+OCpWcFNUrh52w/dYPxDwviDcgtMKNOGXbS0eSaY9sBuFre6EM46q9/Qiw9dvm +7gZIhxTvrQnBH9TNuN3wG227HeEefebscF8jGXJhXNn+nMXBHXenoNfWL/EXhZriLJ4sa5DONNf 8Men2oxJqvWRsn5FaUxhgmj5PUi1tWiY/ih+TanquLrRJoIbv3ZeewOdre9Sfr4+4P4TKhfIntwQ 0nLeVdDmg1dIX2GaKrgq893cJHvc+X9oSpzkmAhbF/1cowOgB5ci2Pcrun9TE3aphjKleabePNz+ r0DZsFEQGXkHQy2C7sGx5FmOnsBQYbO4rWVuxw== )`
	RRSIG=8763 and DNSKEY=8763 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to n.de.net for de/DNSKEY
	Received 745 bytes from 194.146.107.6
	;; Response received from [194.146.107.6] 745 octets ;; HEADER SECTION ;; id = 7478 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (3 records) de. 3600 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; keytag 26755 de. 3600 IN DNSKEY ( 256 3 8 AwEAAbTe1PJi8EgIudNGb+KRTxBL2aCu5rXkZ+aIe/TC88pwRdrXYeXODp1ihZWFop5CrbWRBLrk /YUPBE8aBc6oJP+58dSkdMLYkjSkmvdvYx+zXnRLWlF2bapxvZxshATJDfGjGbCiWxKEOoyRx3Uh ICtHC+cUSddsEvzfacUcBb6n ) ; keytag 32911 de. 3600 IN RRSIG ( DNSKEY 8 1 3600 20261102071532 20261019054532 26755 de. RXZNyGuc+o0BW7xICSegMf9N/jrxZyBKHQ6thjQAP089XQ//Q6TdDAPH/J+FIwcotylsoX3pyyZ3 hy5wKcDodUDuPcvv1rUckEg/YhefWqa1X6XUnZ/JS0onq9msk8JrBC4PG9pGfTG9sEB6WJ7YS3dW Ko41puSZxIQ4l7T6LldhcfuS1zuO8SVMKRjFr/L0Cu0veOn437OU+BzUdQxdO5wnVX2MXZ1AnAxq JrsMnYSBmR8ndEZ0k5OVF/LoFzaoR/+oT5Lgqennp0zwxjA7Y8WWN9recbVvc0L39lCbO7Skxp73 wAvqc/jr3ADpIClE5VVai92gQYHoioTRBwW9qQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for de
	`de. 3600 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; keytag 26755`
	`de. 3600 IN DNSKEY ( 256 3 8 AwEAAbTe1PJi8EgIudNGb+KRTxBL2aCu5rXkZ+aIe/TC88pwRdrXYeXODp1ihZWFop5CrbWRBLrk /YUPBE8aBc6oJP+58dSkdMLYkjSkmvdvYx+zXnRLWlF2bapxvZxshATJDfGjGbCiWxKEOoyRx3Uh ICtHC+cUSddsEvzfacUcBb6n ) ; keytag 32911`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 3600 IN RRSIG ( DNSKEY 8 1 3600 20261102071532 20261019054532 26755 de. RXZNyGuc+o0BW7xICSegMf9N/jrxZyBKHQ6thjQAP089XQ//Q6TdDAPH/J+FIwcotylsoX3pyyZ3 hy5wKcDodUDuPcvv1rUckEg/YhefWqa1X6XUnZ/JS0onq9msk8JrBC4PG9pGfTG9sEB6WJ7YS3dW Ko41puSZxIQ4l7T6LldhcfuS1zuO8SVMKRjFr/L0Cu0veOn437OU+BzUdQxdO5wnVX2MXZ1AnAxq JrsMnYSBmR8ndEZ0k5OVF/LoFzaoR/+oT5Lgqennp0zwxjA7Y8WWN9recbVvc0L39lCbO7Skxp73 wAvqc/jr3ADpIClE5VVai92gQYHoioTRBwW9qQ== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=32911 is now in the chain-of-trust
	Query to l.de.net for web.de/A
	Received 374 bytes from 77.67.63.105
	;; Response received from [77.67.63.105] 374 octets ;; HEADER SECTION ;; id = 52207 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) web.de. 86400 IN NS ns-webde.ui-dns.de. web.de. 86400 IN NS ns-webde.ui-dns.biz. web.de. 86400 IN NS ns-webde.ui-dns.com. web.de. 86400 IN NS ns-webde.ui-dns.org. web.de. 86400 IN DS ( 32842 8 2 16d7f4d035a7d30fedbb344e29b8e9ac988aa1bac7a94aad077b7049a4475fd9 ) web.de. 86400 IN RRSIG ( DS 8 2 86400 20261102071532 20261019054532 32911 de. Pcgy4f1x9VyFFml2rAR1dGol2G9EcAegKEb+uRB1gAKrlVG4CiCTxSiHwMOdVYAAIl+x1p+DESmW uDphPeEsqxW7wbH2V/Eh8eJU4qpcYTJQ42FJ2MIGB46jt6OMqtUs+q7Gjfj+dPE5Z5pfGlIMw1l0 V3eq/uL3fDQ9bJQkbJE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to f.nic.de for web.de/DNSKEY
	Received 374 bytes from 81.91.164.5
	;; Response received from [81.91.164.5] 374 octets ;; HEADER SECTION ;; id = 21338 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) web.de. 86400 IN NS ns-webde.ui-dns.de. web.de. 86400 IN NS ns-webde.ui-dns.biz. web.de. 86400 IN NS ns-webde.ui-dns.com. web.de. 86400 IN NS ns-webde.ui-dns.org. web.de. 86400 IN DS ( 32842 8 2 16d7f4d035a7d30fedbb344e29b8e9ac988aa1bac7a94aad077b7049a4475fd9 ) web.de. 86400 IN RRSIG ( DS 8 2 86400 20261102071532 20261019054532 32911 de. Pcgy4f1x9VyFFml2rAR1dGol2G9EcAegKEb+uRB1gAKrlVG4CiCTxSiHwMOdVYAAIl+x1p+DESmW uDphPeEsqxW7wbH2V/Eh8eJU4qpcYTJQ42FJ2MIGB46jt6OMqtUs+q7Gjfj+dPE5Z5pfGlIMw1l0 V3eq/uL3fDQ9bJQkbJE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone web.de

web.de

	Checking DS between de and web.de
	Query to l.de.net for web.de/DS
	Received 245 bytes from 77.67.63.105
	;; Response received from [77.67.63.105] 245 octets ;; HEADER SECTION ;; id = 19982 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.de. IN DS ;; ANSWER SECTION (2 records) web.de. 86400 IN DS ( 32842 8 2 16d7f4d035a7d30fedbb344e29b8e9ac988aa1bac7a94aad077b7049a4475fd9 ) web.de. 86400 IN RRSIG ( DS 8 2 86400 20261102071532 20261019054532 32911 de. Pcgy4f1x9VyFFml2rAR1dGol2G9EcAegKEb+uRB1gAKrlVG4CiCTxSiHwMOdVYAAIl+x1p+DESmW uDphPeEsqxW7wbH2V/Eh8eJU4qpcYTJQ42FJ2MIGB46jt6OMqtUs+q7Gjfj+dPE5Z5pfGlIMw1l0 V3eq/uL3fDQ9bJQkbJE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for web.de in the de zone
	DS=32842/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`web.de. 86400 IN RRSIG ( DS 8 2 86400 20261102071532 20261019054532 32911 de. Pcgy4f1x9VyFFml2rAR1dGol2G9EcAegKEb+uRB1gAKrlVG4CiCTxSiHwMOdVYAAIl+x1p+DESmW uDphPeEsqxW7wbH2V/Eh8eJU4qpcYTJQ42FJ2MIGB46jt6OMqtUs+q7Gjfj+dPE5Z5pfGlIMw1l0 V3eq/uL3fDQ9bJQkbJE= )`
	RRSIG=32911 and DNSKEY=32911 verifies the DS RRset
	DS=32842/SHA-256 is now in the chain-of-trust
	`web.de. 86400 IN DS ( 32842 8 2 16d7f4d035a7d30fedbb344e29b8e9ac988aa1bac7a94aad077b7049a4475fd9 )`
	Query to ns-webde.ui-dns.org for web.de/DNSKEY
	Received 881 bytes from 185.132.35.198
	;; Response received from [185.132.35.198] 881 octets ;; HEADER SECTION ;; id = 3673 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.de. IN DNSKEY ;; ANSWER SECTION (3 records) web.de. 600 IN RRSIG ( DNSKEY 8 2 600 20261031065306 20261017065306 32842 web.de. i5oAw85VdjspcKiXdrqZHe5cUdq/PdD8IJprc7zsNdqwYajJSk9BoZwQRwoXkXuKTkMuyoYAWYZi WdaTd0uhAfzTWGlmiViviH9DNLsD3ZXoDx0P1GLwwwZjtxPMK3MCqrhKllO3/EdPH7nLlNBzZVjg rZGhanSmFqYAoG3iWqg92vWB9ntytTgeIMMZHqrRybArpfYJUp6l9Buv3KwZkvsQsSPy4Lhy5D/3 2CfzqN8PmD8GE2mHPlu53gQdhikWiVmh5XXUqByyKKNDOKgrcRrlhuo9Y68niN4PHDf21NWRdl/1 WWT4G0Cgyb3N0SZaFS/6b6saaqTj1+hMgGJlCQ== ) web.de. 600 IN DNSKEY ( 256 3 8 AwEAAcXRpr9APbDArCZLvkbCbyJztg7B3a1MAQ2E6xI7muXi5RK8IRM3UM9Yns74jDDPCzDlm8dr hZ+jmvNR0i7pa6+1IrTLYRXLMtI4vtIrhwKyruS2+6foA593crKvimzS578gQ/lc3BKILY/tQWYb ytOoBi9hQj+FlpdpX6XshUmk+nibHyAqpyfCUFc8Wq4X/sLwvt+HEOLDNOPl2fiB3vbXCa7r/HOR 9cOEztKSIi8szqB/rzhmtEOO+HZpj5oFLcFv4O/V19HCqmCGUHMyOaFRBJKWD+qlO91xEXKqKo2e cTpuIzuBFlyzC3cQRWpgsq8nkuIilvEgJq36Ucvzxcs= ) ; keytag 11769 web.de. 600 IN DNSKEY ( 257 3 8 AwEAAcBs30zgmOeYcUYzJetRzRYGQXlnXpv2gO3KWf5BYRn9OqFtUBzFOqO16Ow2XPqR8SWqpAVp nToQICICZyf58SHaefGn94fTj+PlwJi4HhoCbim2U3G5sYtl5xoNfUCaDXDQFJp+HnZlaA9afHut OVFtqCmMHV+2ApSyOFFETQNmq4YoxLxiJoxSjvQAaaiJKVoA4wykjXALMyCmbXGH4aMVbW2m0Fuq e+nKU8myW14nCASBo0mDO6cBNsBwu7IiL4SxxnflDCSTkn/FnCKtzf7aVzzrRM4SqTe4NOm7wPmC ZiAGoxOL15PZ7YQSt9BEXU6gMdGxCGVBdtgM13NfziM= ) ; keytag 32842 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for web.de
	`web.de. 600 IN DNSKEY ( 256 3 8 AwEAAcXRpr9APbDArCZLvkbCbyJztg7B3a1MAQ2E6xI7muXi5RK8IRM3UM9Yns74jDDPCzDlm8dr hZ+jmvNR0i7pa6+1IrTLYRXLMtI4vtIrhwKyruS2+6foA593crKvimzS578gQ/lc3BKILY/tQWYb ytOoBi9hQj+FlpdpX6XshUmk+nibHyAqpyfCUFc8Wq4X/sLwvt+HEOLDNOPl2fiB3vbXCa7r/HOR 9cOEztKSIi8szqB/rzhmtEOO+HZpj5oFLcFv4O/V19HCqmCGUHMyOaFRBJKWD+qlO91xEXKqKo2e cTpuIzuBFlyzC3cQRWpgsq8nkuIilvEgJq36Ucvzxcs= ) ; keytag 11769`
	`web.de. 600 IN DNSKEY ( 257 3 8 AwEAAcBs30zgmOeYcUYzJetRzRYGQXlnXpv2gO3KWf5BYRn9OqFtUBzFOqO16Ow2XPqR8SWqpAVp nToQICICZyf58SHaefGn94fTj+PlwJi4HhoCbim2U3G5sYtl5xoNfUCaDXDQFJp+HnZlaA9afHut OVFtqCmMHV+2ApSyOFFETQNmq4YoxLxiJoxSjvQAaaiJKVoA4wykjXALMyCmbXGH4aMVbW2m0Fuq e+nKU8myW14nCASBo0mDO6cBNsBwu7IiL4SxxnflDCSTkn/FnCKtzf7aVzzrRM4SqTe4NOm7wPmC ZiAGoxOL15PZ7YQSt9BEXU6gMdGxCGVBdtgM13NfziM= ) ; keytag 32842`
	DNSKEY=32842/SEP is now in the chain-of-trust
	DS=32842/SHA-256 verifies DNSKEY=32842/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`web.de. 600 IN RRSIG ( DNSKEY 8 2 600 20261031065306 20261017065306 32842 web.de. i5oAw85VdjspcKiXdrqZHe5cUdq/PdD8IJprc7zsNdqwYajJSk9BoZwQRwoXkXuKTkMuyoYAWYZi WdaTd0uhAfzTWGlmiViviH9DNLsD3ZXoDx0P1GLwwwZjtxPMK3MCqrhKllO3/EdPH7nLlNBzZVjg rZGhanSmFqYAoG3iWqg92vWB9ntytTgeIMMZHqrRybArpfYJUp6l9Buv3KwZkvsQsSPy4Lhy5D/3 2CfzqN8PmD8GE2mHPlu53gQdhikWiVmh5XXUqByyKKNDOKgrcRrlhuo9Y68niN4PHDf21NWRdl/1 WWT4G0Cgyb3N0SZaFS/6b6saaqTj1+hMgGJlCQ== )`
	RRSIG=32842 and DNSKEY=32842/SEP verifies the DNSKEY RRset
	DNSKEY=11769 is now in the chain-of-trust
	Query to ns-webde.ui-dns.de for web.de/A
	Received 345 bytes from 185.132.32.198
	;; Response received from [185.132.32.198] 345 octets ;; HEADER SECTION ;; id = 1284 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.de. IN A ;; ANSWER SECTION (2 records) web.de. 300 IN RRSIG ( A 8 2 300 20261031065306 20261017065306 11769 web.de. C1DYzgvXmh4dDk/0w4KjqipWLstdxDaA+Rs21XYGcx8wuhcucpGQFaN9REKNkCweIq/Ey//9Yv5L pgB7QS1eOzwIE5GIqljbs6IAN302DsAJnBw/ch+r9W1W5G0zGrHzNQ/wxIMq1iTF411OdZvd5fWS L4+kKBeb2mR6RB/APNMKx4ORuDoTlwfT5ggHEVDl7pVJYAP9tSg0QHdZ4ZegPerEYBVtUCQU1q1Z /dfAxj5vzOObRZmBq6NjX5PvuosmWwUZwc4TGrAQPTjZHeGYaZKFSV6QOA7D9OsSSOCGrvq56pgT SiFSe6DdTADe+lSWtgYF3L+QEfojtd1QxS3u9w== ) web.de. 300 IN A 217.72.199.68 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-webde.ui-dns.de is authoritative for web.de
	Found RRSIG signed by web.de zone
	Query to ns-webde.ui-dns.org for web.de/SOA
	Received 396 bytes from 217.160.83.198
	;; Response received from [217.160.83.198] 396 octets ;; HEADER SECTION ;; id = 37022 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.de. IN SOA ;; ANSWER SECTION (2 records) web.de. 40000 IN SOA ( ns-webde.ui-dns.de. dnsadmin.1und1.de. 2005105927 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 600 ;minimum ) web.de. 40000 IN RRSIG ( SOA 8 2 40000 20261031065306 20261017065306 11769 web.de. AF2CapRPRsj+nEZoBRg8jnKGq1xfBPZw2ld/EkPaPSOySQwDBYDY2+WhbaVpx19LCaxAA0NoTOCl P916FNbafwpg5wWQbDRSLsbJDNSJOg8wlYe3GjJYSuKfo9SO/0WduSDhZwniJLBtelag+STsG2dB jx951fGVgdKcMDo659ckM/j92b1/33CMuejgV4B97v+FXZePiP+UoGOeWgVKtz2J9zvLIymVw0+X Zp2Hy1H8E8v4tHVC4k8etTNN7WMk8wOqDKEBLieAKBpWx5u2scOEBXTgF0pGJRChsmDmRXJCnxDy Ptmu0+JbaUpTj/zJjUL+NiHZhAiqxU4bindXdw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-webde.ui-dns.com for web.de/SOA
	Received 396 bytes from 217.160.82.198
	;; Response received from [217.160.82.198] 396 octets ;; HEADER SECTION ;; id = 3389 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.de. IN SOA ;; ANSWER SECTION (2 records) web.de. 40000 IN RRSIG ( SOA 8 2 40000 20261031065306 20261017065306 11769 web.de. AF2CapRPRsj+nEZoBRg8jnKGq1xfBPZw2ld/EkPaPSOySQwDBYDY2+WhbaVpx19LCaxAA0NoTOCl P916FNbafwpg5wWQbDRSLsbJDNSJOg8wlYe3GjJYSuKfo9SO/0WduSDhZwniJLBtelag+STsG2dB jx951fGVgdKcMDo659ckM/j92b1/33CMuejgV4B97v+FXZePiP+UoGOeWgVKtz2J9zvLIymVw0+X Zp2Hy1H8E8v4tHVC4k8etTNN7WMk8wOqDKEBLieAKBpWx5u2scOEBXTgF0pGJRChsmDmRXJCnxDy Ptmu0+JbaUpTj/zJjUL+NiHZhAiqxU4bindXdw== ) web.de. 40000 IN SOA ( ns-webde.ui-dns.de. dnsadmin.1und1.de. 2005105927 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-webde.ui-dns.biz for web.de/SOA
	Received 396 bytes from 185.132.33.198
	;; Response received from [185.132.33.198] 396 octets ;; HEADER SECTION ;; id = 15697 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.de. IN SOA ;; ANSWER SECTION (2 records) web.de. 40000 IN RRSIG ( SOA 8 2 40000 20261031065306 20261017065306 11769 web.de. AF2CapRPRsj+nEZoBRg8jnKGq1xfBPZw2ld/EkPaPSOySQwDBYDY2+WhbaVpx19LCaxAA0NoTOCl P916FNbafwpg5wWQbDRSLsbJDNSJOg8wlYe3GjJYSuKfo9SO/0WduSDhZwniJLBtelag+STsG2dB jx951fGVgdKcMDo659ckM/j92b1/33CMuejgV4B97v+FXZePiP+UoGOeWgVKtz2J9zvLIymVw0+X Zp2Hy1H8E8v4tHVC4k8etTNN7WMk8wOqDKEBLieAKBpWx5u2scOEBXTgF0pGJRChsmDmRXJCnxDy Ptmu0+JbaUpTj/zJjUL+NiHZhAiqxU4bindXdw== ) web.de. 40000 IN SOA ( ns-webde.ui-dns.de. dnsadmin.1und1.de. 2005105927 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-webde.ui-dns.de for web.de/A
	web.de A RR has value 217.72.199.68
	Found 1 RRSIGs over A RRset
	`web.de. 300 IN RRSIG ( A 8 2 300 20261031065306 20261017065306 11769 web.de. C1DYzgvXmh4dDk/0w4KjqipWLstdxDaA+Rs21XYGcx8wuhcucpGQFaN9REKNkCweIq/Ey//9Yv5L pgB7QS1eOzwIE5GIqljbs6IAN302DsAJnBw/ch+r9W1W5G0zGrHzNQ/wxIMq1iTF411OdZvd5fWS L4+kKBeb2mR6RB/APNMKx4ORuDoTlwfT5ggHEVDl7pVJYAP9tSg0QHdZ4ZegPerEYBVtUCQU1q1Z /dfAxj5vzOObRZmBq6NjX5PvuosmWwUZwc4TGrAQPTjZHeGYaZKFSV6QOA7D9OsSSOCGrvq56pgT SiFSe6DdTADe+lSWtgYF3L+QEfojtd1QxS3u9w== )`
	RRSIG=11769 and DNSKEY=11769 verifies the A RRset

web.de

	Query to ns-webde.ui-dns.com for web.de/A
	Received 345 bytes from 217.160.82.198
	;; Response received from [217.160.82.198] 345 octets ;; HEADER SECTION ;; id = 51955 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.de. IN A ;; ANSWER SECTION (2 records) web.de. 300 IN A 217.72.199.68 web.de. 300 IN RRSIG ( A 8 2 300 20261031065306 20261017065306 11769 web.de. C1DYzgvXmh4dDk/0w4KjqipWLstdxDaA+Rs21XYGcx8wuhcucpGQFaN9REKNkCweIq/Ey//9Yv5L pgB7QS1eOzwIE5GIqljbs6IAN302DsAJnBw/ch+r9W1W5G0zGrHzNQ/wxIMq1iTF411OdZvd5fWS L4+kKBeb2mR6RB/APNMKx4ORuDoTlwfT5ggHEVDl7pVJYAP9tSg0QHdZ4ZegPerEYBVtUCQU1q1Z /dfAxj5vzOObRZmBq6NjX5PvuosmWwUZwc4TGrAQPTjZHeGYaZKFSV6QOA7D9OsSSOCGrvq56pgT SiFSe6DdTADe+lSWtgYF3L+QEfojtd1QxS3u9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-webde.ui-dns.com is authoritative for web.de
	Found RRSIG signed by web.de zone
	Query to ns-webde.ui-dns.com for web.de/A
	web.de A RR has value 217.72.199.68
	Found 1 RRSIGs over A RRset
	`web.de. 300 IN RRSIG ( A 8 2 300 20261031065306 20261017065306 11769 web.de. C1DYzgvXmh4dDk/0w4KjqipWLstdxDaA+Rs21XYGcx8wuhcucpGQFaN9REKNkCweIq/Ey//9Yv5L pgB7QS1eOzwIE5GIqljbs6IAN302DsAJnBw/ch+r9W1W5G0zGrHzNQ/wxIMq1iTF411OdZvd5fWS L4+kKBeb2mR6RB/APNMKx4ORuDoTlwfT5ggHEVDl7pVJYAP9tSg0QHdZ4ZegPerEYBVtUCQU1q1Z /dfAxj5vzOObRZmBq6NjX5PvuosmWwUZwc4TGrAQPTjZHeGYaZKFSV6QOA7D9OsSSOCGrvq56pgT SiFSe6DdTADe+lSWtgYF3L+QEfojtd1QxS3u9w== )`
	RRSIG=11769 and DNSKEY=11769 verifies the A RRset

web.de

	Query to ns-webde.ui-dns.biz for web.de/A
	Received 345 bytes from 217.160.81.198
	;; Response received from [217.160.81.198] 345 octets ;; HEADER SECTION ;; id = 21374 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.de. IN A ;; ANSWER SECTION (2 records) web.de. 300 IN A 217.72.199.68 web.de. 300 IN RRSIG ( A 8 2 300 20261031065306 20261017065306 11769 web.de. C1DYzgvXmh4dDk/0w4KjqipWLstdxDaA+Rs21XYGcx8wuhcucpGQFaN9REKNkCweIq/Ey//9Yv5L pgB7QS1eOzwIE5GIqljbs6IAN302DsAJnBw/ch+r9W1W5G0zGrHzNQ/wxIMq1iTF411OdZvd5fWS L4+kKBeb2mR6RB/APNMKx4ORuDoTlwfT5ggHEVDl7pVJYAP9tSg0QHdZ4ZegPerEYBVtUCQU1q1Z /dfAxj5vzOObRZmBq6NjX5PvuosmWwUZwc4TGrAQPTjZHeGYaZKFSV6QOA7D9OsSSOCGrvq56pgT SiFSe6DdTADe+lSWtgYF3L+QEfojtd1QxS3u9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-webde.ui-dns.biz is authoritative for web.de
	Found RRSIG signed by web.de zone
	Query to ns-webde.ui-dns.biz for web.de/A
	web.de A RR has value 217.72.199.68
	Found 1 RRSIGs over A RRset
	`web.de. 300 IN RRSIG ( A 8 2 300 20261031065306 20261017065306 11769 web.de. C1DYzgvXmh4dDk/0w4KjqipWLstdxDaA+Rs21XYGcx8wuhcucpGQFaN9REKNkCweIq/Ey//9Yv5L pgB7QS1eOzwIE5GIqljbs6IAN302DsAJnBw/ch+r9W1W5G0zGrHzNQ/wxIMq1iTF411OdZvd5fWS L4+kKBeb2mR6RB/APNMKx4ORuDoTlwfT5ggHEVDl7pVJYAP9tSg0QHdZ4ZegPerEYBVtUCQU1q1Z /dfAxj5vzOObRZmBq6NjX5PvuosmWwUZwc4TGrAQPTjZHeGYaZKFSV6QOA7D9OsSSOCGrvq56pgT SiFSe6DdTADe+lSWtgYF3L+QEfojtd1QxS3u9w== )`
	RRSIG=11769 and DNSKEY=11769 verifies the A RRset

web.de

	Query to ns-webde.ui-dns.org for web.de/A
	Received 345 bytes from 217.160.83.198
	;; Response received from [217.160.83.198] 345 octets ;; HEADER SECTION ;; id = 42492 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.de. IN A ;; ANSWER SECTION (2 records) web.de. 300 IN A 217.72.199.68 web.de. 300 IN RRSIG ( A 8 2 300 20261031065306 20261017065306 11769 web.de. C1DYzgvXmh4dDk/0w4KjqipWLstdxDaA+Rs21XYGcx8wuhcucpGQFaN9REKNkCweIq/Ey//9Yv5L pgB7QS1eOzwIE5GIqljbs6IAN302DsAJnBw/ch+r9W1W5G0zGrHzNQ/wxIMq1iTF411OdZvd5fWS L4+kKBeb2mR6RB/APNMKx4ORuDoTlwfT5ggHEVDl7pVJYAP9tSg0QHdZ4ZegPerEYBVtUCQU1q1Z /dfAxj5vzOObRZmBq6NjX5PvuosmWwUZwc4TGrAQPTjZHeGYaZKFSV6QOA7D9OsSSOCGrvq56pgT SiFSe6DdTADe+lSWtgYF3L+QEfojtd1QxS3u9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-webde.ui-dns.org is authoritative for web.de
	Found RRSIG signed by web.de zone
	Query to ns-webde.ui-dns.org for web.de/A
	web.de A RR has value 217.72.199.68
	Found 1 RRSIGs over A RRset
	`web.de. 300 IN RRSIG ( A 8 2 300 20261031065306 20261017065306 11769 web.de. C1DYzgvXmh4dDk/0w4KjqipWLstdxDaA+Rs21XYGcx8wuhcucpGQFaN9REKNkCweIq/Ey//9Yv5L pgB7QS1eOzwIE5GIqljbs6IAN302DsAJnBw/ch+r9W1W5G0zGrHzNQ/wxIMq1iTF411OdZvd5fWS L4+kKBeb2mR6RB/APNMKx4ORuDoTlwfT5ggHEVDl7pVJYAP9tSg0QHdZ4ZegPerEYBVtUCQU1q1Z /dfAxj5vzOObRZmBq6NjX5PvuosmWwUZwc4TGrAQPTjZHeGYaZKFSV6QOA7D9OsSSOCGrvq56pgT SiFSe6DdTADe+lSWtgYF3L+QEfojtd1QxS3u9w== )`
	RRSIG=11769 and DNSKEY=11769 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test web.de at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: