DNSSEC Debugger - www.epidauros.be

Domain Name:

Time: 2026-03-12 13:39:36 UTC

Analyzing DNSSEC problems for www.epidauros.be

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 43885 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260402000000 20260312000000 20326 . hcmCK2q88XH00Hynv8IgIMVTKrwyb8Lh/uvRpqBPMALNQunyrS+VKrlKb6rBQTFnGHeVR/jj3Eay Uuxv4fy2evliMYKLrfTHtdqD3oUvJMnwmxEMmhS84Ttw+bbTcHeYxb52NFiYVHKb37Y0OWN4lr0p V+3fwFtWumb1NlWZDMNsaHFv6UIdxgUGNBVEyUaTAK6E2jseQcoqv6A0rNxCG+xtz2zSpRV2JM1g dC8zVAcc068OamqrwZlzKqsqAgXP78NOERrFkzffoRaSEmOORcAQpUdCK265DL1Y7Xeq0QaNEKd2 fXglm/IxS+4sMPT+83Q/XasxUu5C3d0qEz76fw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to d.root-servers.net for www.epidauros.be/A
	Received 746 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 746 octets ;; HEADER SECTION ;; id = 24967 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) be. 172800 IN NS a.nsset.be. be. 172800 IN NS b.nsset.be. be. 172800 IN NS c.nsset.be. be. 172800 IN NS d.nsset.be. be. 172800 IN NS y.nsset.be. be. 172800 IN NS z.nsset.be. be. 86400 IN DS ( 45588 13 2 687575c3f0fa4570be3ac23af40ffafc5e28a8de69de855a2db1fb9b4d277319 ) be. 86400 IN RRSIG ( DS 8 1 86400 20260325050000 20260312040000 21831 . XmyBMVhK6T7YV0efJ0xLrO3n8sFELl3SQYxtKWCW40D/bG7ym1ExNlWnGT1VxcRhFDXbDzMDOhbQ AwnL5hXGKWpGQv9W9XKLbnd3l7ZOdTMnhIoDHQktk2S0+FJupKzYtb365XnkBMeC6tGhvu49G1dh GWyY4w1OivofstXmfEGDdB6qdzyLEt04aFnBPNT0B1PEIHSTLVCDjj+Rfwd8RAQG8L0ff/2Ncjqp xXN02fYvAEOoNp9VJGZXgTDj5QPqdh21qIiefOE7WIY9b75z9Qe7Bjzka9MxMJ6jadOtu9P7+kYq lyHXakvie1T5zkvCloySPyYH06cv620H1EtGfg== ) ;; ADDITIONAL SECTION (13 records) a.nsset.be. 172800 IN A 194.0.6.1 b.nsset.be. 172800 IN A 194.0.37.1 c.nsset.be. 172800 IN A 194.0.43.1 d.nsset.be. 172800 IN A 194.0.44.1 y.nsset.be. 172800 IN A 120.29.253.8 z.nsset.be. 172800 IN A 194.0.25.36 a.nsset.be. 172800 IN AAAA 2001:678:9::1 b.nsset.be. 172800 IN AAAA 2001:678:64::1 c.nsset.be. 172800 IN AAAA 2001:678:68::1 d.nsset.be. 172800 IN AAAA 2001:678:6c::1 y.nsset.be. 172800 IN AAAA 2001:dcd:7::8 z.nsset.be. 172800 IN AAAA 2001:678:20::36 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for be/DNSKEY
	Received 732 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 732 octets ;; HEADER SECTION ;; id = 28431 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) be. 172800 IN NS a.nsset.be. be. 172800 IN NS b.nsset.be. be. 172800 IN NS c.nsset.be. be. 172800 IN NS d.nsset.be. be. 172800 IN NS y.nsset.be. be. 172800 IN NS z.nsset.be. be. 86400 IN DS ( 45588 13 2 687575c3f0fa4570be3ac23af40ffafc5e28a8de69de855a2db1fb9b4d277319 ) be. 86400 IN RRSIG ( DS 8 1 86400 20260325050000 20260312040000 21831 . XmyBMVhK6T7YV0efJ0xLrO3n8sFELl3SQYxtKWCW40D/bG7ym1ExNlWnGT1VxcRhFDXbDzMDOhbQ AwnL5hXGKWpGQv9W9XKLbnd3l7ZOdTMnhIoDHQktk2S0+FJupKzYtb365XnkBMeC6tGhvu49G1dh GWyY4w1OivofstXmfEGDdB6qdzyLEt04aFnBPNT0B1PEIHSTLVCDjj+Rfwd8RAQG8L0ff/2Ncjqp xXN02fYvAEOoNp9VJGZXgTDj5QPqdh21qIiefOE7WIY9b75z9Qe7Bjzka9MxMJ6jadOtu9P7+kYq lyHXakvie1T5zkvCloySPyYH06cv620H1EtGfg== ) ;; ADDITIONAL SECTION (13 records) a.nsset.be. 172800 IN A 194.0.6.1 b.nsset.be. 172800 IN A 194.0.37.1 c.nsset.be. 172800 IN A 194.0.43.1 d.nsset.be. 172800 IN A 194.0.44.1 y.nsset.be. 172800 IN A 120.29.253.8 z.nsset.be. 172800 IN A 194.0.25.36 a.nsset.be. 172800 IN AAAA 2001:678:9::1 b.nsset.be. 172800 IN AAAA 2001:678:64::1 c.nsset.be. 172800 IN AAAA 2001:678:68::1 d.nsset.be. 172800 IN AAAA 2001:678:6c::1 y.nsset.be. 172800 IN AAAA 2001:dcd:7::8 z.nsset.be. 172800 IN AAAA 2001:678:20::36 ;; { "EDNS-VERSION": 0 }
	Found child zone be

	Checking DS between . and be
	Query to i.root-servers.net for be/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 17271 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; be. IN DS ;; ANSWER SECTION (2 records) be. 86400 IN DS ( 45588 13 2 687575c3f0fa4570be3ac23af40ffafc5e28a8de69de855a2db1fb9b4d277319 ) be. 86400 IN RRSIG ( DS 8 1 86400 20260325050000 20260312040000 21831 . XmyBMVhK6T7YV0efJ0xLrO3n8sFELl3SQYxtKWCW40D/bG7ym1ExNlWnGT1VxcRhFDXbDzMDOhbQ AwnL5hXGKWpGQv9W9XKLbnd3l7ZOdTMnhIoDHQktk2S0+FJupKzYtb365XnkBMeC6tGhvu49G1dh GWyY4w1OivofstXmfEGDdB6qdzyLEt04aFnBPNT0B1PEIHSTLVCDjj+Rfwd8RAQG8L0ff/2Ncjqp xXN02fYvAEOoNp9VJGZXgTDj5QPqdh21qIiefOE7WIY9b75z9Qe7Bjzka9MxMJ6jadOtu9P7+kYq lyHXakvie1T5zkvCloySPyYH06cv620H1EtGfg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for be in the . zone
	DS=45588/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`be. 86400 IN RRSIG ( DS 8 1 86400 20260325050000 20260312040000 21831 . XmyBMVhK6T7YV0efJ0xLrO3n8sFELl3SQYxtKWCW40D/bG7ym1ExNlWnGT1VxcRhFDXbDzMDOhbQ AwnL5hXGKWpGQv9W9XKLbnd3l7ZOdTMnhIoDHQktk2S0+FJupKzYtb365XnkBMeC6tGhvu49G1dh GWyY4w1OivofstXmfEGDdB6qdzyLEt04aFnBPNT0B1PEIHSTLVCDjj+Rfwd8RAQG8L0ff/2Ncjqp xXN02fYvAEOoNp9VJGZXgTDj5QPqdh21qIiefOE7WIY9b75z9Qe7Bjzka9MxMJ6jadOtu9P7+kYq lyHXakvie1T5zkvCloySPyYH06cv620H1EtGfg== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=45588/SHA-256 is now in the chain-of-trust
	`be. 86400 IN DS ( 45588 13 2 687575c3f0fa4570be3ac23af40ffafc5e28a8de69de855a2db1fb9b4d277319 )`
	Query to z.nsset.be for be/DNSKEY
	Received 289 bytes from 194.0.25.36
	;; Response received from [194.0.25.36] 289 octets ;; HEADER SECTION ;; id = 39372 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (3 records) be. 86400 IN DNSKEY ( 256 3 13 syuq0Hb4DcxTfNdATdBRgAExGAC+7jcbaeJZJTOnD7XqnMf80DCePQTluSR3r3WVtrjZlNOOKU4D 4gCHLRX5kw== ) ; keytag 19214 be. 86400 IN DNSKEY ( 257 3 13 rqDMl0oIO7xaei757+vjjUA4kI4s9+k0lXuvYRbCJkZevzKOquRNCidC4XriS2oc9NCFKDX3yVYD r9/wYxJI6A== ) ; keytag 45588 be. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260501214830 20260114084919 45588 be. cJRGbpDQK6otU6dHAdx+9Q4V4kGsf0CKVj6rCetOYaCF73K7XmBKfjoO58dTo8L8v6dclSLhGdCN NwYJc/0gNg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for be
	`be. 86400 IN DNSKEY ( 256 3 13 syuq0Hb4DcxTfNdATdBRgAExGAC+7jcbaeJZJTOnD7XqnMf80DCePQTluSR3r3WVtrjZlNOOKU4D 4gCHLRX5kw== ) ; keytag 19214`
	`be. 86400 IN DNSKEY ( 257 3 13 rqDMl0oIO7xaei757+vjjUA4kI4s9+k0lXuvYRbCJkZevzKOquRNCidC4XriS2oc9NCFKDX3yVYD r9/wYxJI6A== ) ; keytag 45588`
	DNSKEY=45588/SEP is now in the chain-of-trust
	DS=45588/SHA-256 verifies DNSKEY=45588/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`be. 86400 IN RRSIG ( DNSKEY 13 1 86400 20260501214830 20260114084919 45588 be. cJRGbpDQK6otU6dHAdx+9Q4V4kGsf0CKVj6rCetOYaCF73K7XmBKfjoO58dTo8L8v6dclSLhGdCN NwYJc/0gNg== )`
	RRSIG=45588 and DNSKEY=45588/SEP verifies the DNSKEY RRset
	DNSKEY=19214 is now in the chain-of-trust
	Query to b.nsset.be for www.epidauros.be/A
	Received 368 bytes from 194.0.37.1
	;; Response received from [194.0.37.1] 368 octets ;; HEADER SECTION ;; id = 7263 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) epidauros.be. 86400 IN NS ns1.ghen.be. epidauros.be. 86400 IN NS ns2.ghen.be. epidauros.be. 86400 IN DS ( 20780 13 2 cf17f32d0e659ae4989c8cc1a0d9c925508f934784f0f674e6b1a03e40c708be ) epidauros.be. 86400 IN DS ( 33420 15 2 43ef50003c6dda12cdd7b3c1a11442e50d20128bf55c80fc9cb239680f8f2af3 ) epidauros.be. 86400 IN RRSIG ( DS 13 2 86400 20260403115345 20260311175116 19214 be. sLHxlPihxRcwbA128cKbupyDYLT867DuVqG1JI/NG/qHimbPVslDle8wj1OX00pA7o62/iBvc2T2 W7ZFUc8P4A== ) ;; ADDITIONAL SECTION (5 records) ns1.ghen.be. 86400 IN A 178.21.113.79 ns2.ghen.be. 86400 IN A 178.21.118.235 ns1.ghen.be. 86400 IN AAAA 2a02:2308:0:277::1 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20:277::1 ;; { "EDNS-VERSION": 0 }
	Query to y.nsset.be for epidauros.be/DNSKEY
	Received 364 bytes from 120.29.253.8
	;; Response received from [120.29.253.8] 364 octets ;; HEADER SECTION ;; id = 22707 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epidauros.be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) epidauros.be. 86400 IN NS ns2.ghen.be. epidauros.be. 86400 IN NS ns1.ghen.be. epidauros.be. 86400 IN DS ( 20780 13 2 cf17f32d0e659ae4989c8cc1a0d9c925508f934784f0f674e6b1a03e40c708be ) epidauros.be. 86400 IN DS ( 33420 15 2 43ef50003c6dda12cdd7b3c1a11442e50d20128bf55c80fc9cb239680f8f2af3 ) epidauros.be. 86400 IN RRSIG ( DS 13 2 86400 20260403115345 20260311175116 19214 be. sLHxlPihxRcwbA128cKbupyDYLT867DuVqG1JI/NG/qHimbPVslDle8wj1OX00pA7o62/iBvc2T2 W7ZFUc8P4A== ) ;; ADDITIONAL SECTION (5 records) ns2.ghen.be. 86400 IN A 178.21.118.235 ns1.ghen.be. 86400 IN A 178.21.113.79 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20:277::1 ns1.ghen.be. 86400 IN AAAA 2a02:2308:0:277::1 ;; { "EDNS-VERSION": 0 }
	Found child zone epidauros.be

epidauros.be

	Checking DS between be and epidauros.be
	Query to c.nsset.be for epidauros.be/DS
	Received 235 bytes from 194.0.43.1
	;; Response received from [194.0.43.1] 235 octets ;; HEADER SECTION ;; id = 39655 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epidauros.be. IN DS ;; ANSWER SECTION (3 records) epidauros.be. 86400 IN DS ( 33420 15 2 43ef50003c6dda12cdd7b3c1a11442e50d20128bf55c80fc9cb239680f8f2af3 ) epidauros.be. 86400 IN DS ( 20780 13 2 cf17f32d0e659ae4989c8cc1a0d9c925508f934784f0f674e6b1a03e40c708be ) epidauros.be. 86400 IN RRSIG ( DS 13 2 86400 20260403115345 20260311175116 19214 be. sLHxlPihxRcwbA128cKbupyDYLT867DuVqG1JI/NG/qHimbPVslDle8wj1OX00pA7o62/iBvc2T2 W7ZFUc8P4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for epidauros.be in the be zone
	DS=33420/SHA-256 has algorithm ED25519
	DS=20780/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`epidauros.be. 86400 IN RRSIG ( DS 13 2 86400 20260403115345 20260311175116 19214 be. sLHxlPihxRcwbA128cKbupyDYLT867DuVqG1JI/NG/qHimbPVslDle8wj1OX00pA7o62/iBvc2T2 W7ZFUc8P4A== )`
	RRSIG=19214 and DNSKEY=19214 verifies the DS RRset
	DS=33420/SHA-256 is now in the chain-of-trust
	DS=20780/SHA-256 is now in the chain-of-trust
	`epidauros.be. 86400 IN DS ( 33420 15 2 43ef50003c6dda12cdd7b3c1a11442e50d20128bf55c80fc9cb239680f8f2af3 )`
	`epidauros.be. 86400 IN DS ( 20780 13 2 cf17f32d0e659ae4989c8cc1a0d9c925508f934784f0f674e6b1a03e40c708be )`
	Query to ns1.ghen.be for epidauros.be/DNSKEY
	Received 385 bytes from 178.21.113.79
	;; Response received from [178.21.113.79] 385 octets ;; HEADER SECTION ;; id = 45204 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epidauros.be. IN DNSKEY ;; ANSWER SECTION (4 records) epidauros.be. 86400 IN DNSKEY ( 257 3 13 1bEJTa99MYNBKq+RWubf6BLkOt5fL7Wcg06d4skcF+a2/99c+rtg9aqAIA340SX1rBNqNOApAv+B 2b5/QWemPA== ) ; keytag 20780 epidauros.be. 86400 IN DNSKEY ( 257 3 15 LoaKS/7223TFuP8qYZaNlnfwFy9YBJAnjik4BDS0xQA= ) ; keytag 33420 epidauros.be. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260320184639 20260306171639 20780 epidauros.be. 70TXRCYKUWS+dzPTYFaOovCghyvXnjP1abNr/t6E3Srd4rVOAP8qZykUtfZRXDFAuAw8MpwqFIt/ GGqDZVjDPw== ) epidauros.be. 86400 IN RRSIG ( DNSKEY 15 2 86400 20260320184639 20260306171639 33420 epidauros.be. /zDTJ05faTBXrNBE9YuJkmZw03ufxg0IR5KHpxPx8bwUkGaLQzKtQrtezvFBoP82vdosFppb8eJA qKKgNo24Cg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for epidauros.be
	`epidauros.be. 86400 IN DNSKEY ( 257 3 13 1bEJTa99MYNBKq+RWubf6BLkOt5fL7Wcg06d4skcF+a2/99c+rtg9aqAIA340SX1rBNqNOApAv+B 2b5/QWemPA== ) ; keytag 20780`
	`epidauros.be. 86400 IN DNSKEY ( 257 3 15 LoaKS/7223TFuP8qYZaNlnfwFy9YBJAnjik4BDS0xQA= ) ; keytag 33420`
	DNSKEY=20780/SEP is now in the chain-of-trust
	DS=20780/SHA-256 verifies DNSKEY=20780/SEP
	DNSKEY=33420/SEP is now in the chain-of-trust
	DS=33420/SHA-256 verifies DNSKEY=33420/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`epidauros.be. 86400 IN RRSIG ( DNSKEY 13 2 86400 20260320184639 20260306171639 20780 epidauros.be. 70TXRCYKUWS+dzPTYFaOovCghyvXnjP1abNr/t6E3Srd4rVOAP8qZykUtfZRXDFAuAw8MpwqFIt/ GGqDZVjDPw== )`
	`epidauros.be. 86400 IN RRSIG ( DNSKEY 15 2 86400 20260320184639 20260306171639 33420 epidauros.be. /zDTJ05faTBXrNBE9YuJkmZw03ufxg0IR5KHpxPx8bwUkGaLQzKtQrtezvFBoP82vdosFppb8eJA qKKgNo24Cg== )`
	RRSIG=20780 and DNSKEY=20780/SEP verifies the DNSKEY RRset
	RRSIG=33420 and DNSKEY=33420/SEP verifies the DNSKEY RRset
	Query to ns1.ghen.be for www.epidauros.be/A
	Received 277 bytes from 178.21.113.79
	;; Response received from [178.21.113.79] 277 octets ;; HEADER SECTION ;; id = 42895 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN A ;; ANSWER SECTION (3 records) www.epidauros.be. 86400 IN A 178.21.118.235 www.epidauros.be. 86400 IN RRSIG ( A 13 3 86400 20260320184639 20260306171639 20780 epidauros.be. fddO+ABc4H5c4wL8slWBzepM/joTXErGc7lL4l63JtS1HYgdPHGr4yqo6HnPNCod+4EbKTIKPTle R/be1etl4Q== ) www.epidauros.be. 86400 IN RRSIG ( A 15 3 86400 20260320184639 20260306171639 33420 epidauros.be. EXIdFLUfDjMRTb8iyr24+obGSeBYbmfGE6rWULZ6w0MB9dejOVEoDmX+vOejNbwkkJk/mT21Jouz jhGXRDIrAw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.ghen.be is authoritative for www.epidauros.be
	Query to ns1.ghen.be for www.epidauros.be/DNSKEY
	Received 612 bytes from 178.21.113.79
	;; Response received from [178.21.113.79] 612 octets ;; HEADER SECTION ;; id = 59687 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) epidauros.be. 3600 IN SOA ( ns1.ghen.be. hostmaster.ghen.be. 1773238682 ;serial 86400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) d0cngrle6j9bhgi1pupck40io4oc1h4k.epidauros.be. 3600 IN NSEC3 ( 1 0 0 - f4ia1oqp082t9t6ie483l7ucjrpg3bo9 A AAAA RRSIG ) epidauros.be. 3600 IN RRSIG ( SOA 13 2 86400 20260325141802 20260311124802 20780 epidauros.be. MgQ+PWG9bUAw6Psm96yCY1Ksm6rx+K0DYG/v8bniqREg2kctRoGAGUDpY6hj8zl2/1PnTlk3PwzL GMIwWlrx6A== ) epidauros.be. 3600 IN RRSIG ( SOA 15 2 86400 20260325141802 20260311124802 33420 epidauros.be. a2aHXkPyj2EvDJMhEkwRxFu4ATcHR8iRoJrHYVPn/f7K/8LJ5Mxcvzpkgww2yPHP2pUlANjEjKXA ctMw6y0JCg== ) d0cngrle6j9bhgi1pupck40io4oc1h4k.epidauros.be. 3600 IN RRSIG ( NSEC3 13 3 3600 20260325080700 20260311063700 20780 epidauros.be. dOtrA/13Z8Syq82tI9yQbkn2YLFxxTZrUZtnWD9hWVKsZTfhk2Fi6l5h3wL9vgDOjNUtotTYao3i ggRFvDiHjQ== ) d0cngrle6j9bhgi1pupck40io4oc1h4k.epidauros.be. 3600 IN RRSIG ( NSEC3 15 3 3600 20260325080700 20260311063700 33420 epidauros.be. RQtVY4Ag1l9KS02g4y+I1sHZYQPe55DKpY8vflVrPqQm+ubx1dN1xPsoWLQ3p61v4OnEKMPVclin HKGCQt9NCQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by epidauros.be zone
	Query to ns2.ghen.be for epidauros.be/SOA
	Received 313 bytes from 178.21.118.235
	;; Response received from [178.21.118.235] 313 octets ;; HEADER SECTION ;; id = 6799 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; epidauros.be. IN SOA ;; ANSWER SECTION (3 records) epidauros.be. 86400 IN SOA ( ns1.ghen.be. hostmaster.ghen.be. 1773238682 ;serial 86400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) epidauros.be. 86400 IN RRSIG ( SOA 13 2 86400 20260325141802 20260311124802 20780 epidauros.be. MgQ+PWG9bUAw6Psm96yCY1Ksm6rx+K0DYG/v8bniqREg2kctRoGAGUDpY6hj8zl2/1PnTlk3PwzL GMIwWlrx6A== ) epidauros.be. 86400 IN RRSIG ( SOA 15 2 86400 20260325141802 20260311124802 33420 epidauros.be. a2aHXkPyj2EvDJMhEkwRxFu4ATcHR8iRoJrHYVPn/f7K/8LJ5Mxcvzpkgww2yPHP2pUlANjEjKXA ctMw6y0JCg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.ghen.be for www.epidauros.be/A
	Received 277 bytes from 178.21.113.79
	;; Response received from [178.21.113.79] 277 octets ;; HEADER SECTION ;; id = 53884 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN A ;; ANSWER SECTION (3 records) www.epidauros.be. 86400 IN A 178.21.118.235 www.epidauros.be. 86400 IN RRSIG ( A 13 3 86400 20260320184639 20260306171639 20780 epidauros.be. fddO+ABc4H5c4wL8slWBzepM/joTXErGc7lL4l63JtS1HYgdPHGr4yqo6HnPNCod+4EbKTIKPTle R/be1etl4Q== ) www.epidauros.be. 86400 IN RRSIG ( A 15 3 86400 20260320184639 20260306171639 33420 epidauros.be. EXIdFLUfDjMRTb8iyr24+obGSeBYbmfGE6rWULZ6w0MB9dejOVEoDmX+vOejNbwkkJk/mT21Jouz jhGXRDIrAw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.epidauros.be A RR has value 178.21.118.235
	Found 2 RRSIGs over A RRset
	`www.epidauros.be. 86400 IN RRSIG ( A 13 3 86400 20260320184639 20260306171639 20780 epidauros.be. fddO+ABc4H5c4wL8slWBzepM/joTXErGc7lL4l63JtS1HYgdPHGr4yqo6HnPNCod+4EbKTIKPTle R/be1etl4Q== )`
	`www.epidauros.be. 86400 IN RRSIG ( A 15 3 86400 20260320184639 20260306171639 33420 epidauros.be. EXIdFLUfDjMRTb8iyr24+obGSeBYbmfGE6rWULZ6w0MB9dejOVEoDmX+vOejNbwkkJk/mT21Jouz jhGXRDIrAw== )`
	RRSIG=20780 and DNSKEY=20780/SEP verifies the A RRset
	RRSIG=33420 and DNSKEY=33420/SEP verifies the A RRset

epidauros.be

	Query to ns2.ghen.be for www.epidauros.be/A
	Received 277 bytes from 178.21.118.235
	;; Response received from [178.21.118.235] 277 octets ;; HEADER SECTION ;; id = 43609 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN A ;; ANSWER SECTION (3 records) www.epidauros.be. 86400 IN A 178.21.118.235 www.epidauros.be. 86400 IN RRSIG ( A 13 3 86400 20260320184639 20260306171639 20780 epidauros.be. fddO+ABc4H5c4wL8slWBzepM/joTXErGc7lL4l63JtS1HYgdPHGr4yqo6HnPNCod+4EbKTIKPTle R/be1etl4Q== ) www.epidauros.be. 86400 IN RRSIG ( A 15 3 86400 20260320184639 20260306171639 33420 epidauros.be. EXIdFLUfDjMRTb8iyr24+obGSeBYbmfGE6rWULZ6w0MB9dejOVEoDmX+vOejNbwkkJk/mT21Jouz jhGXRDIrAw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.ghen.be is authoritative for www.epidauros.be
	Query to ns2.ghen.be for www.epidauros.be/DNSKEY
	Received 612 bytes from 178.21.118.235
	;; Response received from [178.21.118.235] 612 octets ;; HEADER SECTION ;; id = 24504 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) epidauros.be. 3600 IN SOA ( ns1.ghen.be. hostmaster.ghen.be. 1773238682 ;serial 86400 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) d0cngrle6j9bhgi1pupck40io4oc1h4k.epidauros.be. 3600 IN NSEC3 ( 1 0 0 - f4ia1oqp082t9t6ie483l7ucjrpg3bo9 A AAAA RRSIG ) epidauros.be. 3600 IN RRSIG ( SOA 13 2 86400 20260325141802 20260311124802 20780 epidauros.be. MgQ+PWG9bUAw6Psm96yCY1Ksm6rx+K0DYG/v8bniqREg2kctRoGAGUDpY6hj8zl2/1PnTlk3PwzL GMIwWlrx6A== ) epidauros.be. 3600 IN RRSIG ( SOA 15 2 86400 20260325141802 20260311124802 33420 epidauros.be. a2aHXkPyj2EvDJMhEkwRxFu4ATcHR8iRoJrHYVPn/f7K/8LJ5Mxcvzpkgww2yPHP2pUlANjEjKXA ctMw6y0JCg== ) d0cngrle6j9bhgi1pupck40io4oc1h4k.epidauros.be. 3600 IN RRSIG ( NSEC3 13 3 3600 20260325080700 20260311063700 20780 epidauros.be. dOtrA/13Z8Syq82tI9yQbkn2YLFxxTZrUZtnWD9hWVKsZTfhk2Fi6l5h3wL9vgDOjNUtotTYao3i ggRFvDiHjQ== ) d0cngrle6j9bhgi1pupck40io4oc1h4k.epidauros.be. 3600 IN RRSIG ( NSEC3 15 3 3600 20260325080700 20260311063700 33420 epidauros.be. RQtVY4Ag1l9KS02g4y+I1sHZYQPe55DKpY8vflVrPqQm+ubx1dN1xPsoWLQ3p61v4OnEKMPVclin HKGCQt9NCQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by epidauros.be zone
	Query to ns2.ghen.be for www.epidauros.be/A
	Received 277 bytes from 178.21.118.235
	;; Response received from [178.21.118.235] 277 octets ;; HEADER SECTION ;; id = 60072 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN A ;; ANSWER SECTION (3 records) www.epidauros.be. 86400 IN A 178.21.118.235 www.epidauros.be. 86400 IN RRSIG ( A 13 3 86400 20260320184639 20260306171639 20780 epidauros.be. fddO+ABc4H5c4wL8slWBzepM/joTXErGc7lL4l63JtS1HYgdPHGr4yqo6HnPNCod+4EbKTIKPTle R/be1etl4Q== ) www.epidauros.be. 86400 IN RRSIG ( A 15 3 86400 20260320184639 20260306171639 33420 epidauros.be. EXIdFLUfDjMRTb8iyr24+obGSeBYbmfGE6rWULZ6w0MB9dejOVEoDmX+vOejNbwkkJk/mT21Jouz jhGXRDIrAw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.epidauros.be A RR has value 178.21.118.235
	Found 2 RRSIGs over A RRset
	`www.epidauros.be. 86400 IN RRSIG ( A 13 3 86400 20260320184639 20260306171639 20780 epidauros.be. fddO+ABc4H5c4wL8slWBzepM/joTXErGc7lL4l63JtS1HYgdPHGr4yqo6HnPNCod+4EbKTIKPTle R/be1etl4Q== )`
	`www.epidauros.be. 86400 IN RRSIG ( A 15 3 86400 20260320184639 20260306171639 33420 epidauros.be. EXIdFLUfDjMRTb8iyr24+obGSeBYbmfGE6rWULZ6w0MB9dejOVEoDmX+vOejNbwkkJk/mT21Jouz jhGXRDIrAw== )`
	RRSIG=20780 and DNSKEY=20780/SEP verifies the A RRset
	RRSIG=33420 and DNSKEY=33420/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.epidauros.be at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: