DNSSEC Debugger - www.epidauros.be

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-08-12 17:41:14 UTC

Analyzing DNSSEC problems for www.epidauros.be

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 354 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260831000000 20260810000000 20326 . V78PtBnjcahYNt6ZWnzGlM+EExU9UNP4kRg5NGdsDW8OUHNRWY86PPVrQoWY3uwSbIVxs/mv9XJx oH/NdZm46Amyns74QH6IuPcCk055P1xF8f37JaSzrn+AA9vJCicqH8fnOSG7mSXs6W+or+1tJ5zL Npqjj+IuXyWOcTB0/W3loQYrPxdYIieY2DuSPRmXvpC4Z3LjMnOSvO4Q87V2ayUuPIdhO2w6Ltr3 /k6qRfSnyAcvhomTnf55nzn/Pl3urhbB/sx8VypzJZg/76nLCSxrS4XuDU8ORagQA99GeeuqFgLu fdMhNgr5m/QE6tworB9ptU8CHkhizUgIZxCd4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260831000000 20260810000000 20326 . V78PtBnjcahYNt6ZWnzGlM+EExU9UNP4kRg5NGdsDW8OUHNRWY86PPVrQoWY3uwSbIVxs/mv9XJx oH/NdZm46Amyns74QH6IuPcCk055P1xF8f37JaSzrn+AA9vJCicqH8fnOSG7mSXs6W+or+1tJ5zL Npqjj+IuXyWOcTB0/W3loQYrPxdYIieY2DuSPRmXvpC4Z3LjMnOSvO4Q87V2ayUuPIdhO2w6Ltr3 /k6qRfSnyAcvhomTnf55nzn/Pl3urhbB/sx8VypzJZg/76nLCSxrS4XuDU8ORagQA99GeeuqFgLu fdMhNgr5m/QE6tworB9ptU8CHkhizUgIZxCd4A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to k.root-servers.net for www.epidauros.be/A
	Received 746 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 746 octets ;; HEADER SECTION ;; id = 8891 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) be. 172800 IN NS a.nsset.be. be. 172800 IN NS b.nsset.be. be. 172800 IN NS c.nsset.be. be. 172800 IN NS d.nsset.be. be. 172800 IN NS y.nsset.be. be. 172800 IN NS z.nsset.be. be. 86400 IN DS ( 45588 13 2 687575c3f0fa4570be3ac23af40ffafc5e28a8de69de855a2db1fb9b4d277319 ) be. 86400 IN RRSIG ( DS 8 1 86400 20260825050000 20260812040000 57780 . S/2HiI/DpwxHnU7kXlgt5/8Hy+IKM5nBOvXOw2ohV10HSTzQt6hh7QqGyCHMDdY189lrcpY4K9hS 4qaHqHx4m7cYor3DMxB+JYKuY+p6mZvjIBq4vS9tFKXd6GWmZ9TNrLK9NmR+uZjVZeitox+Pxsf4 4Dv91BtCDcYVAKYS6N3fx6F6LGuvD8A6JEw047HdQhupSYIQEE5WFbmkTClXAq0TBVjgaWJKVdfP soGYjOpNsncPeOky8znP7UzOqKNtY/2PLrOPRtU36l6JyQa9/MardmtAJw+bdXoKrLe7Zg7eTJLY nUbincq8kENFRQO84mfmjDW6T0lSLk2jAEynqw== ) ;; ADDITIONAL SECTION (13 records) a.nsset.be. 172800 IN A 194.0.6.1 b.nsset.be. 172800 IN A 194.0.37.1 c.nsset.be. 172800 IN A 194.0.43.1 d.nsset.be. 172800 IN A 194.0.44.1 y.nsset.be. 172800 IN A 120.29.253.8 z.nsset.be. 172800 IN A 194.0.25.36 a.nsset.be. 172800 IN AAAA 2001:678:9::1 b.nsset.be. 172800 IN AAAA 2001:678:64::1 c.nsset.be. 172800 IN AAAA 2001:678:68::1 d.nsset.be. 172800 IN AAAA 2001:678:6c::1 y.nsset.be. 172800 IN AAAA 2001:dcd:7::8 z.nsset.be. 172800 IN AAAA 2001:678:20::36 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for be/DNSKEY
	Received 732 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 732 octets ;; HEADER SECTION ;; id = 6090 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) be. 172800 IN NS a.nsset.be. be. 172800 IN NS b.nsset.be. be. 172800 IN NS c.nsset.be. be. 172800 IN NS d.nsset.be. be. 172800 IN NS y.nsset.be. be. 172800 IN NS z.nsset.be. be. 86400 IN DS ( 45588 13 2 687575c3f0fa4570be3ac23af40ffafc5e28a8de69de855a2db1fb9b4d277319 ) be. 86400 IN RRSIG ( DS 8 1 86400 20260825050000 20260812040000 57780 . S/2HiI/DpwxHnU7kXlgt5/8Hy+IKM5nBOvXOw2ohV10HSTzQt6hh7QqGyCHMDdY189lrcpY4K9hS 4qaHqHx4m7cYor3DMxB+JYKuY+p6mZvjIBq4vS9tFKXd6GWmZ9TNrLK9NmR+uZjVZeitox+Pxsf4 4Dv91BtCDcYVAKYS6N3fx6F6LGuvD8A6JEw047HdQhupSYIQEE5WFbmkTClXAq0TBVjgaWJKVdfP soGYjOpNsncPeOky8znP7UzOqKNtY/2PLrOPRtU36l6JyQa9/MardmtAJw+bdXoKrLe7Zg7eTJLY nUbincq8kENFRQO84mfmjDW6T0lSLk2jAEynqw== ) ;; ADDITIONAL SECTION (13 records) a.nsset.be. 172800 IN A 194.0.6.1 b.nsset.be. 172800 IN A 194.0.37.1 c.nsset.be. 172800 IN A 194.0.43.1 d.nsset.be. 172800 IN A 194.0.44.1 y.nsset.be. 172800 IN A 120.29.253.8 z.nsset.be. 172800 IN A 194.0.25.36 a.nsset.be. 172800 IN AAAA 2001:678:9::1 b.nsset.be. 172800 IN AAAA 2001:678:64::1 c.nsset.be. 172800 IN AAAA 2001:678:68::1 d.nsset.be. 172800 IN AAAA 2001:678:6c::1 y.nsset.be. 172800 IN AAAA 2001:dcd:7::8 z.nsset.be. 172800 IN AAAA 2001:678:20::36 ;; { "EDNS-VERSION": 0 }
	Found child zone be

	Checking DS between . and be
	Query to g.root-servers.net for be/DS
	Received 366 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 366 octets ;; HEADER SECTION ;; id = 56873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; be. IN DS ;; ANSWER SECTION (2 records) be. 86400 IN DS ( 45588 13 2 687575c3f0fa4570be3ac23af40ffafc5e28a8de69de855a2db1fb9b4d277319 ) be. 86400 IN RRSIG ( DS 8 1 86400 20260825050000 20260812040000 57780 . S/2HiI/DpwxHnU7kXlgt5/8Hy+IKM5nBOvXOw2ohV10HSTzQt6hh7QqGyCHMDdY189lrcpY4K9hS 4qaHqHx4m7cYor3DMxB+JYKuY+p6mZvjIBq4vS9tFKXd6GWmZ9TNrLK9NmR+uZjVZeitox+Pxsf4 4Dv91BtCDcYVAKYS6N3fx6F6LGuvD8A6JEw047HdQhupSYIQEE5WFbmkTClXAq0TBVjgaWJKVdfP soGYjOpNsncPeOky8znP7UzOqKNtY/2PLrOPRtU36l6JyQa9/MardmtAJw+bdXoKrLe7Zg7eTJLY nUbincq8kENFRQO84mfmjDW6T0lSLk2jAEynqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for be in the . zone
	DS=45588/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`be. 86400 IN RRSIG ( DS 8 1 86400 20260825050000 20260812040000 57780 . S/2HiI/DpwxHnU7kXlgt5/8Hy+IKM5nBOvXOw2ohV10HSTzQt6hh7QqGyCHMDdY189lrcpY4K9hS 4qaHqHx4m7cYor3DMxB+JYKuY+p6mZvjIBq4vS9tFKXd6GWmZ9TNrLK9NmR+uZjVZeitox+Pxsf4 4Dv91BtCDcYVAKYS6N3fx6F6LGuvD8A6JEw047HdQhupSYIQEE5WFbmkTClXAq0TBVjgaWJKVdfP soGYjOpNsncPeOky8znP7UzOqKNtY/2PLrOPRtU36l6JyQa9/MardmtAJw+bdXoKrLe7Zg7eTJLY nUbincq8kENFRQO84mfmjDW6T0lSLk2jAEynqw== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=45588/SHA-256 is now in the chain-of-trust
	`be. 86400 IN DS ( 45588 13 2 687575c3f0fa4570be3ac23af40ffafc5e28a8de69de855a2db1fb9b4d277319 )`
	Query to a.nsset.be for be/DNSKEY
	Received 449 bytes from 194.0.6.1
	;; Response received from [194.0.6.1] 449 octets ;; HEADER SECTION ;; id = 51800 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (5 records) be. 86400 IN DNSKEY ( 256 3 13 syuq0Hb4DcxTfNdATdBRgAExGAC+7jcbaeJZJTOnD7XqnMf80DCePQTluSR3r3WVtrjZlNOOKU4D 4gCHLRX5kw== ) ; keytag 19214 be. 86400 IN DNSKEY ( 257 3 13 rqDMl0oIO7xaei757+vjjUA4kI4s9+k0lXuvYRbCJkZevzKOquRNCidC4XriS2oc9NCFKDX3yVYD r9/wYxJI6A== ) ; keytag 45588 be. 86400 IN DNSKEY ( 256 3 13 SEHK+gcb3Z5v3CwH/qyIEopT60acduidQNX20UTZXV87iLMZvhsPMIojFM966V6g7NQavHk4HCz7 RlSI+W2eSA== ) ; keytag 44058 be. 86400 IN DNSKEY ( 256 3 13 jQwbkuG/TfLWObGFyPRtuI/UbLQton1x0x2+agdFAeSyz6+UO08xHlH7IRLYz+95yqinnaKmjuQx pMA1uiODLg== ) ; keytag 47679 be. 86400 IN RRSIG ( DNSKEY 13 1 86400 20261004002838 20260618072332 45588 be. Q38rboyvPF86AET/POzZSPckhElkJ7knnGRkIvw/zlLZ76bN3Y509y2oFY0yll1Uz0rwK6jC9Zoa q/PWxZOZUQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for be
	`be. 86400 IN DNSKEY ( 256 3 13 syuq0Hb4DcxTfNdATdBRgAExGAC+7jcbaeJZJTOnD7XqnMf80DCePQTluSR3r3WVtrjZlNOOKU4D 4gCHLRX5kw== ) ; keytag 19214`
	`be. 86400 IN DNSKEY ( 257 3 13 rqDMl0oIO7xaei757+vjjUA4kI4s9+k0lXuvYRbCJkZevzKOquRNCidC4XriS2oc9NCFKDX3yVYD r9/wYxJI6A== ) ; keytag 45588`
	`be. 86400 IN DNSKEY ( 256 3 13 SEHK+gcb3Z5v3CwH/qyIEopT60acduidQNX20UTZXV87iLMZvhsPMIojFM966V6g7NQavHk4HCz7 RlSI+W2eSA== ) ; keytag 44058`
	`be. 86400 IN DNSKEY ( 256 3 13 jQwbkuG/TfLWObGFyPRtuI/UbLQton1x0x2+agdFAeSyz6+UO08xHlH7IRLYz+95yqinnaKmjuQx pMA1uiODLg== ) ; keytag 47679`
	DNSKEY=45588/SEP is now in the chain-of-trust
	DS=45588/SHA-256 verifies DNSKEY=45588/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`be. 86400 IN RRSIG ( DNSKEY 13 1 86400 20261004002838 20260618072332 45588 be. Q38rboyvPF86AET/POzZSPckhElkJ7knnGRkIvw/zlLZ76bN3Y509y2oFY0yll1Uz0rwK6jC9Zoa q/PWxZOZUQ== )`
	RRSIG=45588 and DNSKEY=45588/SEP verifies the DNSKEY RRset
	DNSKEY=19214 is now in the chain-of-trust
	DNSKEY=44058 is now in the chain-of-trust
	DNSKEY=47679 is now in the chain-of-trust
	Query to a.nsset.be for www.epidauros.be/A
	Received 368 bytes from 194.0.6.1
	;; Response received from [194.0.6.1] 368 octets ;; HEADER SECTION ;; id = 22753 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) epidauros.be. 86400 IN NS ns1.ghen.be. epidauros.be. 86400 IN NS ns2.ghen.be. epidauros.be. 86400 IN DS ( 20780 13 2 cf17f32d0e659ae4989c8cc1a0d9c925508f934784f0f674e6b1a03e40c708be ) epidauros.be. 86400 IN DS ( 33420 15 2 43ef50003c6dda12cdd7b3c1a11442e50d20128bf55c80fc9cb239680f8f2af3 ) epidauros.be. 86400 IN RRSIG ( DS 13 2 86400 20260901224012 20260812051100 47679 be. j3hTKdQ8hWUk0waCEudIzLY6Y8CIToDaBIaxybNcmKNuYFRVs52kJAauY4ImKuarrMWiGNewr48/ B8zEbhqW2Q== ) ;; ADDITIONAL SECTION (5 records) ns1.ghen.be. 86400 IN A 178.21.113.79 ns2.ghen.be. 86400 IN A 178.21.118.235 ns1.ghen.be. 86400 IN AAAA 2a02:2308:0:277::1 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20:277::1 ;; { "EDNS-VERSION": 0 }
	Query to c.nsset.be for epidauros.be/DNSKEY
	Received 364 bytes from 194.0.43.1
	;; Response received from [194.0.43.1] 364 octets ;; HEADER SECTION ;; id = 15828 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epidauros.be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) epidauros.be. 86400 IN NS ns1.ghen.be. epidauros.be. 86400 IN NS ns2.ghen.be. epidauros.be. 86400 IN DS ( 20780 13 2 cf17f32d0e659ae4989c8cc1a0d9c925508f934784f0f674e6b1a03e40c708be ) epidauros.be. 86400 IN DS ( 33420 15 2 43ef50003c6dda12cdd7b3c1a11442e50d20128bf55c80fc9cb239680f8f2af3 ) epidauros.be. 86400 IN RRSIG ( DS 13 2 86400 20260901224012 20260812051100 47679 be. j3hTKdQ8hWUk0waCEudIzLY6Y8CIToDaBIaxybNcmKNuYFRVs52kJAauY4ImKuarrMWiGNewr48/ B8zEbhqW2Q== ) ;; ADDITIONAL SECTION (5 records) ns1.ghen.be. 86400 IN A 178.21.113.79 ns2.ghen.be. 86400 IN A 178.21.118.235 ns1.ghen.be. 86400 IN AAAA 2a02:2308:0:277::1 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20:277::1 ;; { "EDNS-VERSION": 0 }
	Found child zone epidauros.be

epidauros.be

	Checking DS between be and epidauros.be
	Query to b.nsset.be for epidauros.be/DS
	Received 235 bytes from 194.0.37.1
	;; Response received from [194.0.37.1] 235 octets ;; HEADER SECTION ;; id = 12058 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epidauros.be. IN DS ;; ANSWER SECTION (3 records) epidauros.be. 86400 IN DS ( 20780 13 2 cf17f32d0e659ae4989c8cc1a0d9c925508f934784f0f674e6b1a03e40c708be ) epidauros.be. 86400 IN DS ( 33420 15 2 43ef50003c6dda12cdd7b3c1a11442e50d20128bf55c80fc9cb239680f8f2af3 ) epidauros.be. 86400 IN RRSIG ( DS 13 2 86400 20260901224012 20260812051100 47679 be. j3hTKdQ8hWUk0waCEudIzLY6Y8CIToDaBIaxybNcmKNuYFRVs52kJAauY4ImKuarrMWiGNewr48/ B8zEbhqW2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for epidauros.be in the be zone
	DS=20780/SHA-256 has algorithm ECDSAP256SHA256
	DS=33420/SHA-256 has algorithm ED25519
	Found 1 RRSIGs over DS RRset
	`epidauros.be. 86400 IN RRSIG ( DS 13 2 86400 20260901224012 20260812051100 47679 be. j3hTKdQ8hWUk0waCEudIzLY6Y8CIToDaBIaxybNcmKNuYFRVs52kJAauY4ImKuarrMWiGNewr48/ B8zEbhqW2Q== )`
	RRSIG=47679 and DNSKEY=47679 verifies the DS RRset
	DS=20780/SHA-256 is now in the chain-of-trust
	DS=33420/SHA-256 is now in the chain-of-trust
	`epidauros.be. 86400 IN DS ( 20780 13 2 cf17f32d0e659ae4989c8cc1a0d9c925508f934784f0f674e6b1a03e40c708be )`
	`epidauros.be. 86400 IN DS ( 33420 15 2 43ef50003c6dda12cdd7b3c1a11442e50d20128bf55c80fc9cb239680f8f2af3 )`
	Query to ns1.ghen.be for epidauros.be/DNSKEY
	Received 385 bytes from 178.21.113.79
	;; Response received from [178.21.113.79] 385 octets ;; HEADER SECTION ;; id = 41097 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epidauros.be. IN DNSKEY ;; ANSWER SECTION (4 records) epidauros.be. 86400 IN DNSKEY ( 257 3 13 1bEJTa99MYNBKq+RWubf6BLkOt5fL7Wcg06d4skcF+a2/99c+rtg9aqAIA340SX1rBNqNOApAv+B 2b5/QWemPA== ) ; keytag 20780 epidauros.be. 86400 IN DNSKEY ( 257 3 15 LoaKS/7223TFuP8qYZaNlnfwFy9YBJAnjik4BDS0xQA= ) ; keytag 33420 epidauros.be. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260819005840 20260804232840 20780 epidauros.be. yKY8VbTGECkpbWlHA5nNYd/z/e6fHTn3GdhHlcKWwuQyZRmQqxZzNcv766FpkjOdbVX+SYG+9o9a +STcIGd3sA== ) epidauros.be. 86400 IN RRSIG ( DNSKEY 15 2 86400 20260819005840 20260804232840 33420 epidauros.be. GHfajtit66WS7DGq8FYDSn3oVN5mowoT6noOsw0rVRZcwNCVowKidjWbbohqpRyj/SuwqykSQKkI eescxUljBQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for epidauros.be
	`epidauros.be. 86400 IN DNSKEY ( 257 3 13 1bEJTa99MYNBKq+RWubf6BLkOt5fL7Wcg06d4skcF+a2/99c+rtg9aqAIA340SX1rBNqNOApAv+B 2b5/QWemPA== ) ; keytag 20780`
	`epidauros.be. 86400 IN DNSKEY ( 257 3 15 LoaKS/7223TFuP8qYZaNlnfwFy9YBJAnjik4BDS0xQA= ) ; keytag 33420`
	DNSKEY=20780/SEP is now in the chain-of-trust
	DS=20780/SHA-256 verifies DNSKEY=20780/SEP
	DNSKEY=33420/SEP is now in the chain-of-trust
	DS=33420/SHA-256 verifies DNSKEY=33420/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`epidauros.be. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260819005840 20260804232840 20780 epidauros.be. yKY8VbTGECkpbWlHA5nNYd/z/e6fHTn3GdhHlcKWwuQyZRmQqxZzNcv766FpkjOdbVX+SYG+9o9a +STcIGd3sA== )`
	`epidauros.be. 86400 IN RRSIG ( DNSKEY 15 2 86400 20260819005840 20260804232840 33420 epidauros.be. GHfajtit66WS7DGq8FYDSn3oVN5mowoT6noOsw0rVRZcwNCVowKidjWbbohqpRyj/SuwqykSQKkI eescxUljBQ== )`
	RRSIG=20780 and DNSKEY=20780/SEP verifies the DNSKEY RRset
	RRSIG=33420 and DNSKEY=33420/SEP verifies the DNSKEY RRset
	Query to ns2.ghen.be for www.epidauros.be/A
	Received 277 bytes from 178.21.118.235
	;; Response received from [178.21.118.235] 277 octets ;; HEADER SECTION ;; id = 33500 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN A ;; ANSWER SECTION (3 records) www.epidauros.be. 86400 IN A 178.21.118.235 www.epidauros.be. 86400 IN RRSIG ( A 13 3 86400 20260819005840 20260804232840 20780 epidauros.be. DIVtARxcFaNFRcFyx/ZJI/sQYT12Rdy4X/8vsq5tKAd5mTboF5BtGQ/IO5P/yZtjV0V/Mpj/L1Ei EVUfkYP6Kg== ) www.epidauros.be. 86400 IN RRSIG ( A 15 3 86400 20260819005840 20260804232840 33420 epidauros.be. hC/nYY/2E56YvJl5QFtSEqAKG7eV5c2OqCslf9ipjKstJDb39i4arxUhjYKoDoc2q3w1Q6bl4PNP VG6KVsm0DA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.ghen.be is authoritative for www.epidauros.be
	Query to ns2.ghen.be for www.epidauros.be/DNSKEY
	Received 612 bytes from 178.21.118.235
	;; Response received from [178.21.118.235] 612 octets ;; HEADER SECTION ;; id = 58725 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) epidauros.be. 3600 IN SOA ( ns1.ghen.be. hostmaster.ghen.be. 1785891520 ;serial 86400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) d0cngrle6j9bhgi1pupck40io4oc1h4k.epidauros.be. 3600 IN NSEC3 ( 1 0 0 - lqrgold76e1488mcseo847bpef1vmbdp A AAAA RRSIG ) epidauros.be. 3600 IN RRSIG ( SOA 13 2 86400 20260819005840 20260804232840 20780 epidauros.be. 1yyYUJUg7Hq+MC4k5uqOCyTBdg620f5msEkq/o1rJPQCUzt//j5tKrZ/i1FB+kNYYtM1kHirFhZW +WsY27URgA== ) epidauros.be. 3600 IN RRSIG ( SOA 15 2 86400 20260819005840 20260804232840 33420 epidauros.be. OMpoqKg+o1O3ydLuHDCipNX/v6Pfs7CL5M7vMAYQzLGMTpKQ/iIzsozeLOOv7pwtnIGtxkPWN12Z gy7qJhx5DQ== ) d0cngrle6j9bhgi1pupck40io4oc1h4k.epidauros.be. 3600 IN RRSIG ( NSEC3 13 3 3600 20260816232242 20260802215242 20780 epidauros.be. aNoB6sjPymIfOk312Bg65YIn73g8l+NGEm6YrVpKFMmLI0asuM9QIQ6BMN+TNkYYFJsQ5Qdv+199 LbNiO0miLw== ) d0cngrle6j9bhgi1pupck40io4oc1h4k.epidauros.be. 3600 IN RRSIG ( NSEC3 15 3 3600 20260816232242 20260802215242 33420 epidauros.be. j1/Hp4kHNhRH1SX7oY/UVrkgLNs+jIUSly52vcFFCmPFAYFVPZp4jISOWKobh3sHjepYsy4jgq5f RD4IQfeaAQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by epidauros.be zone
	Query to ns1.ghen.be for epidauros.be/SOA
	Received 313 bytes from 178.21.113.79
	;; Response received from [178.21.113.79] 313 octets ;; HEADER SECTION ;; id = 33167 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epidauros.be. IN SOA ;; ANSWER SECTION (3 records) epidauros.be. 86400 IN SOA ( ns1.ghen.be. hostmaster.ghen.be. 1785891520 ;serial 86400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) epidauros.be. 86400 IN RRSIG ( SOA 13 2 86400 20260819005840 20260804232840 20780 epidauros.be. 1yyYUJUg7Hq+MC4k5uqOCyTBdg620f5msEkq/o1rJPQCUzt//j5tKrZ/i1FB+kNYYtM1kHirFhZW +WsY27URgA== ) epidauros.be. 86400 IN RRSIG ( SOA 15 2 86400 20260819005840 20260804232840 33420 epidauros.be. OMpoqKg+o1O3ydLuHDCipNX/v6Pfs7CL5M7vMAYQzLGMTpKQ/iIzsozeLOOv7pwtnIGtxkPWN12Z gy7qJhx5DQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.ghen.be for www.epidauros.be/A
	www.epidauros.be A RR has value 178.21.118.235
	Found 2 RRSIGs over A RRset
	`www.epidauros.be. 86400 IN RRSIG ( A 13 3 86400 20260819005840 20260804232840 20780 epidauros.be. DIVtARxcFaNFRcFyx/ZJI/sQYT12Rdy4X/8vsq5tKAd5mTboF5BtGQ/IO5P/yZtjV0V/Mpj/L1Ei EVUfkYP6Kg== )`
	`www.epidauros.be. 86400 IN RRSIG ( A 15 3 86400 20260819005840 20260804232840 33420 epidauros.be. hC/nYY/2E56YvJl5QFtSEqAKG7eV5c2OqCslf9ipjKstJDb39i4arxUhjYKoDoc2q3w1Q6bl4PNP VG6KVsm0DA== )`
	RRSIG=20780 and DNSKEY=20780/SEP verifies the A RRset
	RRSIG=33420 and DNSKEY=33420/SEP verifies the A RRset

epidauros.be

	Query to ns1.ghen.be for www.epidauros.be/A
	Received 277 bytes from 178.21.113.79
	;; Response received from [178.21.113.79] 277 octets ;; HEADER SECTION ;; id = 25649 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN A ;; ANSWER SECTION (3 records) www.epidauros.be. 86400 IN A 178.21.118.235 www.epidauros.be. 86400 IN RRSIG ( A 13 3 86400 20260819005840 20260804232840 20780 epidauros.be. DIVtARxcFaNFRcFyx/ZJI/sQYT12Rdy4X/8vsq5tKAd5mTboF5BtGQ/IO5P/yZtjV0V/Mpj/L1Ei EVUfkYP6Kg== ) www.epidauros.be. 86400 IN RRSIG ( A 15 3 86400 20260819005840 20260804232840 33420 epidauros.be. hC/nYY/2E56YvJl5QFtSEqAKG7eV5c2OqCslf9ipjKstJDb39i4arxUhjYKoDoc2q3w1Q6bl4PNP VG6KVsm0DA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.ghen.be is authoritative for www.epidauros.be
	Query to ns1.ghen.be for www.epidauros.be/DNSKEY
	Received 612 bytes from 178.21.113.79
	;; Response received from [178.21.113.79] 612 octets ;; HEADER SECTION ;; id = 61146 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) epidauros.be. 3600 IN SOA ( ns1.ghen.be. hostmaster.ghen.be. 1785891520 ;serial 86400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) d0cngrle6j9bhgi1pupck40io4oc1h4k.epidauros.be. 3600 IN NSEC3 ( 1 0 0 - lqrgold76e1488mcseo847bpef1vmbdp A AAAA RRSIG ) epidauros.be. 3600 IN RRSIG ( SOA 13 2 86400 20260819005840 20260804232840 20780 epidauros.be. 1yyYUJUg7Hq+MC4k5uqOCyTBdg620f5msEkq/o1rJPQCUzt//j5tKrZ/i1FB+kNYYtM1kHirFhZW +WsY27URgA== ) epidauros.be. 3600 IN RRSIG ( SOA 15 2 86400 20260819005840 20260804232840 33420 epidauros.be. OMpoqKg+o1O3ydLuHDCipNX/v6Pfs7CL5M7vMAYQzLGMTpKQ/iIzsozeLOOv7pwtnIGtxkPWN12Z gy7qJhx5DQ== ) d0cngrle6j9bhgi1pupck40io4oc1h4k.epidauros.be. 3600 IN RRSIG ( NSEC3 13 3 3600 20260816232242 20260802215242 20780 epidauros.be. aNoB6sjPymIfOk312Bg65YIn73g8l+NGEm6YrVpKFMmLI0asuM9QIQ6BMN+TNkYYFJsQ5Qdv+199 LbNiO0miLw== ) d0cngrle6j9bhgi1pupck40io4oc1h4k.epidauros.be. 3600 IN RRSIG ( NSEC3 15 3 3600 20260816232242 20260802215242 33420 epidauros.be. j1/Hp4kHNhRH1SX7oY/UVrkgLNs+jIUSly52vcFFCmPFAYFVPZp4jISOWKobh3sHjepYsy4jgq5f RD4IQfeaAQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by epidauros.be zone
	Query to ns1.ghen.be for www.epidauros.be/A
	www.epidauros.be A RR has value 178.21.118.235
	Found 2 RRSIGs over A RRset
	`www.epidauros.be. 86400 IN RRSIG ( A 13 3 86400 20260819005840 20260804232840 20780 epidauros.be. DIVtARxcFaNFRcFyx/ZJI/sQYT12Rdy4X/8vsq5tKAd5mTboF5BtGQ/IO5P/yZtjV0V/Mpj/L1Ei EVUfkYP6Kg== )`
	`www.epidauros.be. 86400 IN RRSIG ( A 15 3 86400 20260819005840 20260804232840 33420 epidauros.be. hC/nYY/2E56YvJl5QFtSEqAKG7eV5c2OqCslf9ipjKstJDb39i4arxUhjYKoDoc2q3w1Q6bl4PNP VG6KVsm0DA== )`
	RRSIG=20780 and DNSKEY=20780/SEP verifies the A RRset
	RRSIG=33420 and DNSKEY=33420/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.epidauros.be at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: