DNSSEC Debugger - comunidad.madrid

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-05-17 17:55:01 UTC

Analyzing DNSSEC problems for comunidad.madrid

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 64153 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260601000000 20260511000000 20326 . Psn+BsMNwRdKsw1pSQPmOm/QeUqgjveusWdT5NL9sOxccMKpzbYOgLqYNmJsOrAjj0MDy0/X/xbU gAGdRVuOt9mv4yk+TaBs7rpd0IgDZu++2bIAvxu3W82fKEKpJqLucDiPu1l+GKZ87zRYrJrQZZWk 01LmCEIIED9P62/QbhdDVIG3ZdcvXQpRPjWyQOom2tZ0APZ+59PyOxjNMgnOaeoAD8QWZ+iKVY8k o2GRoHRqrzEq46SGDh1YuFxuw67oG7mn+Mt2b9HUjYWgQCvBRSUMb4XRxhNnKQiOS4ECEXCDozMD yXk8727l6bFK0THkaFEqW64F/5CAL8adNRyUoQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260601000000 20260511000000 20326 . Psn+BsMNwRdKsw1pSQPmOm/QeUqgjveusWdT5NL9sOxccMKpzbYOgLqYNmJsOrAjj0MDy0/X/xbU gAGdRVuOt9mv4yk+TaBs7rpd0IgDZu++2bIAvxu3W82fKEKpJqLucDiPu1l+GKZ87zRYrJrQZZWk 01LmCEIIED9P62/QbhdDVIG3ZdcvXQpRPjWyQOom2tZ0APZ+59PyOxjNMgnOaeoAD8QWZ+iKVY8k o2GRoHRqrzEq46SGDh1YuFxuw67oG7mn+Mt2b9HUjYWgQCvBRSUMb4XRxhNnKQiOS4ECEXCDozMD yXk8727l6bFK0THkaFEqW64F/5CAL8adNRyUoQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to c.root-servers.net for comunidad.madrid/A
	Received 662 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 662 octets ;; HEADER SECTION ;; id = 63239 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comunidad.madrid. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) madrid. 172800 IN NS anycast10.irondns.net. madrid. 172800 IN NS anycast24.irondns.net. madrid. 172800 IN NS anycast9.irondns.net. madrid. 172800 IN NS anycast23.irondns.net. madrid. 86400 IN DS ( 54534 10 2 b04cbf4df277fb7ab0799b9cce1469e120df69caaae1118dac9c408a970e35cc ) madrid. 86400 IN RRSIG ( DS 8 1 86400 20260530170000 20260517160000 54393 . qaWhLpWH8yEF6e25byDAODIQvExHhIDoFIcLk/LI4OiG/LmlIiwPFpwBNcIKGzxhF1Qshwips1ec s0819btm44ZdPEsN6/G6ChgFxxcKUqx+7wgOgMh/LqkxkVpmBHJ26eUOFR/RyrSeEZpwvy6dYU0/ bHDGwxYPjz8YlX16QwSEkUcmk7QpttW7D+XPaL1F6e8Y5PjjZVKHGr161+R9Wpk8meITCtCmp/F+ tx9rr4F7We6ejbI0OxI3dRMQjz9J/XImYzVcG//k1tpJJUssX+weQVRxt6tDIMrKo7xD/wXl03wE hLMPCmViCq5zxQvvc0iIZwfG1S/VnlptLqNpTw== ) ;; ADDITIONAL SECTION (9 records) anycast24.irondns.net. 172800 IN A 195.253.65.12 anycast23.irondns.net. 172800 IN A 195.253.65.11 anycast10.irondns.net. 172800 IN A 195.253.64.12 anycast9.irondns.net. 172800 IN A 195.253.64.11 anycast24.irondns.net. 172800 IN AAAA 2a01:5b0:5::c anycast23.irondns.net. 172800 IN AAAA 2a01:5b0:5::b anycast10.irondns.net. 172800 IN AAAA 2a01:5b0:4::c anycast9.irondns.net. 172800 IN AAAA 2a01:5b0:4::b ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for madrid/DNSKEY
	Received 652 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 652 octets ;; HEADER SECTION ;; id = 23285 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madrid. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) madrid. 172800 IN NS anycast10.irondns.net. madrid. 172800 IN NS anycast23.irondns.net. madrid. 172800 IN NS anycast24.irondns.net. madrid. 172800 IN NS anycast9.irondns.net. madrid. 86400 IN DS ( 54534 10 2 b04cbf4df277fb7ab0799b9cce1469e120df69caaae1118dac9c408a970e35cc ) madrid. 86400 IN RRSIG ( DS 8 1 86400 20260530170000 20260517160000 54393 . qaWhLpWH8yEF6e25byDAODIQvExHhIDoFIcLk/LI4OiG/LmlIiwPFpwBNcIKGzxhF1Qshwips1ec s0819btm44ZdPEsN6/G6ChgFxxcKUqx+7wgOgMh/LqkxkVpmBHJ26eUOFR/RyrSeEZpwvy6dYU0/ bHDGwxYPjz8YlX16QwSEkUcmk7QpttW7D+XPaL1F6e8Y5PjjZVKHGr161+R9Wpk8meITCtCmp/F+ tx9rr4F7We6ejbI0OxI3dRMQjz9J/XImYzVcG//k1tpJJUssX+weQVRxt6tDIMrKo7xD/wXl03wE hLMPCmViCq5zxQvvc0iIZwfG1S/VnlptLqNpTw== ) ;; ADDITIONAL SECTION (9 records) anycast24.irondns.net. 172800 IN A 195.253.65.12 anycast23.irondns.net. 172800 IN A 195.253.65.11 anycast10.irondns.net. 172800 IN A 195.253.64.12 anycast9.irondns.net. 172800 IN A 195.253.64.11 anycast24.irondns.net. 172800 IN AAAA 2a01:5b0:5::c anycast23.irondns.net. 172800 IN AAAA 2a01:5b0:5::b anycast10.irondns.net. 172800 IN AAAA 2a01:5b0:4::c anycast9.irondns.net. 172800 IN AAAA 2a01:5b0:4::b ;; { "EDNS-VERSION": 0 }
	Found child zone madrid

madrid

	Checking DS between . and madrid
	Query to i.root-servers.net for madrid/DS
	Received 370 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 370 octets ;; HEADER SECTION ;; id = 55888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madrid. IN DS ;; ANSWER SECTION (2 records) madrid. 86400 IN DS ( 54534 10 2 b04cbf4df277fb7ab0799b9cce1469e120df69caaae1118dac9c408a970e35cc ) madrid. 86400 IN RRSIG ( DS 8 1 86400 20260530170000 20260517160000 54393 . qaWhLpWH8yEF6e25byDAODIQvExHhIDoFIcLk/LI4OiG/LmlIiwPFpwBNcIKGzxhF1Qshwips1ec s0819btm44ZdPEsN6/G6ChgFxxcKUqx+7wgOgMh/LqkxkVpmBHJ26eUOFR/RyrSeEZpwvy6dYU0/ bHDGwxYPjz8YlX16QwSEkUcmk7QpttW7D+XPaL1F6e8Y5PjjZVKHGr161+R9Wpk8meITCtCmp/F+ tx9rr4F7We6ejbI0OxI3dRMQjz9J/XImYzVcG//k1tpJJUssX+weQVRxt6tDIMrKo7xD/wXl03wE hLMPCmViCq5zxQvvc0iIZwfG1S/VnlptLqNpTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for madrid in the . zone
	DS=54534/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`madrid. 86400 IN RRSIG ( DS 8 1 86400 20260530170000 20260517160000 54393 . qaWhLpWH8yEF6e25byDAODIQvExHhIDoFIcLk/LI4OiG/LmlIiwPFpwBNcIKGzxhF1Qshwips1ec s0819btm44ZdPEsN6/G6ChgFxxcKUqx+7wgOgMh/LqkxkVpmBHJ26eUOFR/RyrSeEZpwvy6dYU0/ bHDGwxYPjz8YlX16QwSEkUcmk7QpttW7D+XPaL1F6e8Y5PjjZVKHGr161+R9Wpk8meITCtCmp/F+ tx9rr4F7We6ejbI0OxI3dRMQjz9J/XImYzVcG//k1tpJJUssX+weQVRxt6tDIMrKo7xD/wXl03wE hLMPCmViCq5zxQvvc0iIZwfG1S/VnlptLqNpTw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=54534/SHA-256 is now in the chain-of-trust
	`madrid. 86400 IN DS ( 54534 10 2 b04cbf4df277fb7ab0799b9cce1469e120df69caaae1118dac9c408a970e35cc )`
	Query to anycast10.irondns.net for madrid/DNSKEY
	Received 785 bytes from 195.253.64.12
	;; Response received from [195.253.64.12] 785 octets ;; HEADER SECTION ;; id = 46784 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; madrid. IN DNSKEY ;; ANSWER SECTION (3 records) madrid. 43200 IN DNSKEY ( 256 3 10 AwEAAZqOJK7Tbd+zo72x6cPnthZT3GUYrfgaWT7osEK/MaAQPybU0SSchcYJs6/W9Z9s+bc5qT1o FwLas8dtOb2FLIOaTnRcovrc2UGhtjXtikLGg3grltjAgwbwJoctfHa0iwVBFX+ZJef4JcUuKpsA v8wbW7QfRHubOXnf3peWuExe9SSD5iVzF0y2aqOExxb0t6YFbjRfBShPallIVn9JpCc= ) ; keytag 42522 madrid. 43200 IN DNSKEY ( 257 3 10 AwEAAYOtYBpU/JKRR7UtJ1aEkuwpVWmIWrsbafv/epgiVj1VrZlH7lpNTApQfU+c9YrbvHta2f6k oaIOWBtPDG0IeLwLb/OtBUqP7ZxSA8YJjThj2JiE9Fbr2QOEJ66bkWt1YxvNo6D6v9cQf2p+jYNc C28BCdIJCTu1wTWHZEgiTwl92r6u+Q3EmydSY9guVsKTOrviCACgyAOfmjhmaFg1CSeMHQNLBcpR Xz7S7Frx3BqyX20wllNoHooVbtLlXeh5ICme3riB7Ms5XR1iW4f0OVJv5Fvrf6W2+TZ38exGABar 6kULun2+8J6P5XgNQ6p60/Bhc9nNX/YEdt52WFCz/I8= ) ; keytag 54534 madrid. 43200 IN RRSIG ( DNSKEY 10 1 43200 20260530062959 20260516062959 54534 madrid. SEwtXx/y4hVNMxH9ZDRg6aZ0f35bCLxFi4Myl9rxyhw8W1ORV+OmPyNt6sMmr2wonYOPlXyYVBOb ilhC3009+A24k8+jwRHNTSGQSNO1r26NBjm6+60m1s7OBoq55nc/Me7ZlZdfKvrxlINWddN3WZvd GbXYmM8uUSVjlJpc3htcAUNOZt/SMxz8GXHleK3SIcQ3DwArJWtWFayZilK/lVXtkc1QeUyHDVlV HPwW5GVe+nivLoiKu1APwfwkI73fAWK1A3XHgoyPsXgkXR1dBsynCDmfCPtdViGPo9gJHQ7Xilny 6UVEo4xaTLzZ4FhWtebUFy6vdm5M/3wkFzWglg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for madrid
	`madrid. 43200 IN DNSKEY ( 256 3 10 AwEAAZqOJK7Tbd+zo72x6cPnthZT3GUYrfgaWT7osEK/MaAQPybU0SSchcYJs6/W9Z9s+bc5qT1o FwLas8dtOb2FLIOaTnRcovrc2UGhtjXtikLGg3grltjAgwbwJoctfHa0iwVBFX+ZJef4JcUuKpsA v8wbW7QfRHubOXnf3peWuExe9SSD5iVzF0y2aqOExxb0t6YFbjRfBShPallIVn9JpCc= ) ; keytag 42522`
	`madrid. 43200 IN DNSKEY ( 257 3 10 AwEAAYOtYBpU/JKRR7UtJ1aEkuwpVWmIWrsbafv/epgiVj1VrZlH7lpNTApQfU+c9YrbvHta2f6k oaIOWBtPDG0IeLwLb/OtBUqP7ZxSA8YJjThj2JiE9Fbr2QOEJ66bkWt1YxvNo6D6v9cQf2p+jYNc C28BCdIJCTu1wTWHZEgiTwl92r6u+Q3EmydSY9guVsKTOrviCACgyAOfmjhmaFg1CSeMHQNLBcpR Xz7S7Frx3BqyX20wllNoHooVbtLlXeh5ICme3riB7Ms5XR1iW4f0OVJv5Fvrf6W2+TZ38exGABar 6kULun2+8J6P5XgNQ6p60/Bhc9nNX/YEdt52WFCz/I8= ) ; keytag 54534`
	DNSKEY=54534/SEP is now in the chain-of-trust
	DS=54534/SHA-256 verifies DNSKEY=54534/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`madrid. 43200 IN RRSIG ( DNSKEY 10 1 43200 20260530062959 20260516062959 54534 madrid. SEwtXx/y4hVNMxH9ZDRg6aZ0f35bCLxFi4Myl9rxyhw8W1ORV+OmPyNt6sMmr2wonYOPlXyYVBOb ilhC3009+A24k8+jwRHNTSGQSNO1r26NBjm6+60m1s7OBoq55nc/Me7ZlZdfKvrxlINWddN3WZvd GbXYmM8uUSVjlJpc3htcAUNOZt/SMxz8GXHleK3SIcQ3DwArJWtWFayZilK/lVXtkc1QeUyHDVlV HPwW5GVe+nivLoiKu1APwfwkI73fAWK1A3XHgoyPsXgkXR1dBsynCDmfCPtdViGPo9gJHQ7Xilny 6UVEo4xaTLzZ4FhWtebUFy6vdm5M/3wkFzWglg== )`
	RRSIG=54534 and DNSKEY=54534/SEP verifies the DNSKEY RRset
	DNSKEY=42522 is now in the chain-of-trust
	Query to anycast24.irondns.net for comunidad.madrid/A
	Received 420 bytes from 195.253.65.12
	;; Response received from [195.253.65.12] 420 octets ;; HEADER SECTION ;; id = 45073 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comunidad.madrid. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) comunidad.madrid. 86400 IN NS olimpia.madrid.org. comunidad.madrid. 86400 IN NS icmcom.madrid.org. comunidad.madrid. 86400 IN NS a11-64.akam.net. comunidad.madrid. 86400 IN NS a1-232.akam.net. 2g8apq3541u29ou3th2pequ14lr7bps7.madrid. 43200 IN NSEC3 ( 1 0 0 - 2gkm5qeam28qndrl19mg9ub0b3d1gljl NS ) 2g8apq3541u29ou3th2pequ14lr7bps7.madrid. 43200 IN RRSIG ( NSEC3 10 2 43200 20260529182833 20260515182833 42522 madrid. O9qwTx2iiXL34z76antcEfBtmyT7KbnefM2wOjIXkwA/aLcQzI50L5c7hyg2cCDeBo3lCPhhi0H3 Bi2lbM1afWwiOFPVlU15PL3TPStmOcsPErc8aE4XUGcf1Jo/5QNswduWsdHMlQbvtNhQSqy5b6z5 Qpd4Ib1BmtG7DtaxcUsm59b8lOOy1VkBosXGYhW95o7kDpqFul55QwH7FNGtMA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to anycast23.irondns.net for comunidad.madrid/DNSKEY
	Received 420 bytes from 195.253.65.11
	;; Response received from [195.253.65.11] 420 octets ;; HEADER SECTION ;; id = 36677 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comunidad.madrid. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) comunidad.madrid. 86400 IN NS icmcom.madrid.org. comunidad.madrid. 86400 IN NS a11-64.akam.net. comunidad.madrid. 86400 IN NS a1-232.akam.net. comunidad.madrid. 86400 IN NS olimpia.madrid.org. 2g8apq3541u29ou3th2pequ14lr7bps7.madrid. 43200 IN NSEC3 ( 1 0 0 - 2gkm5qeam28qndrl19mg9ub0b3d1gljl NS ) 2g8apq3541u29ou3th2pequ14lr7bps7.madrid. 43200 IN RRSIG ( NSEC3 10 2 43200 20260529182833 20260515182833 42522 madrid. O9qwTx2iiXL34z76antcEfBtmyT7KbnefM2wOjIXkwA/aLcQzI50L5c7hyg2cCDeBo3lCPhhi0H3 Bi2lbM1afWwiOFPVlU15PL3TPStmOcsPErc8aE4XUGcf1Jo/5QNswduWsdHMlQbvtNhQSqy5b6z5 Qpd4Ib1BmtG7DtaxcUsm59b8lOOy1VkBosXGYhW95o7kDpqFul55QwH7FNGtMA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone comunidad.madrid

comunidad.madrid

	Checking DS between madrid and comunidad.madrid
	Query to anycast23.irondns.net for comunidad.madrid/DS
	Received 592 bytes from 195.253.65.11
	;; Response received from [195.253.65.11] 592 octets ;; HEADER SECTION ;; id = 61333 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comunidad.madrid. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) madrid. 900 IN SOA ( anycast9.irondns.net. dnsmaster.corenic.org. 2605171532 ;serial 7200 ;refresh 7200 ;retry 604800 ;expire 900 ;minimum ) madrid. 900 IN RRSIG ( SOA 10 1 900 20260531133207 20260517133207 42522 madrid. Ml+OmdHmeNyhslXvBCejrOTNN4I+ToEg5F64ch1Z39A7AS0vjUmLBP+L3twFx884/d614nP1C6n2 yHpnklJWuMo1snuvWJTeE+629kuNTzCu641p4HKnOoUa8mKCImwM9qGj7RT/+8cvS5BwEZ4B8dva O/aM5H3EAdy88wmuDH3oarLkFC/jxbELj3AmW2Tm8xhzyWo9U1/fqnYWISQhkA== ) 2g8apq3541u29ou3th2pequ14lr7bps7.madrid. 43200 IN NSEC3 ( 1 0 0 - 2gkm5qeam28qndrl19mg9ub0b3d1gljl NS ) 2g8apq3541u29ou3th2pequ14lr7bps7.madrid. 43200 IN RRSIG ( NSEC3 10 2 43200 20260529182833 20260515182833 42522 madrid. O9qwTx2iiXL34z76antcEfBtmyT7KbnefM2wOjIXkwA/aLcQzI50L5c7hyg2cCDeBo3lCPhhi0H3 Bi2lbM1afWwiOFPVlU15PL3TPStmOcsPErc8aE4XUGcf1Jo/5QNswduWsdHMlQbvtNhQSqy5b6z5 Qpd4Ib1BmtG7DtaxcUsm59b8lOOy1VkBosXGYhW95o7kDpqFul55QwH7FNGtMA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for comunidad.madrid in the madrid zone
	Query to icmcom.madrid.org for comunidad.madrid/DNSKEY
	Received 103 bytes from 195.77.128.10
	;; Response received from [195.77.128.10] 103 octets ;; HEADER SECTION ;; id = 13449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comunidad.madrid. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) comunidad.madrid. 900 IN SOA ( ddi-gm.madrid.org. mail.madrid.org. 1353 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to olimpia.madrid.org for comunidad.madrid/A
	Received 61 bytes from 213.0.53.140
	;; Response received from [213.0.53.140] 61 octets ;; HEADER SECTION ;; id = 23953 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comunidad.madrid. IN A ;; ANSWER SECTION (1 record) comunidad.madrid. 28800 IN A 195.77.128.115 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	olimpia.madrid.org is authoritative for comunidad.madrid
	Query to a11-64.akam.net for comunidad.madrid/SOA
	Received 304 bytes from 84.53.139.64
	;; Response received from [84.53.139.64] 304 octets ;; HEADER SECTION ;; id = 40140 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 8 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comunidad.madrid. IN SOA ;; ANSWER SECTION (1 record) comunidad.madrid. 28800 IN SOA ( ddi-gm.madrid.org. mail.madrid.org. 1353 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (8 records) comunidad.madrid. 28800 IN NS a20-66.akam.net. comunidad.madrid. 28800 IN NS a12-64.akam.net. comunidad.madrid. 28800 IN NS a7-65.akam.net. comunidad.madrid. 28800 IN NS ns1.comunidad.madrid. comunidad.madrid. 28800 IN NS ns2.comunidad.madrid. comunidad.madrid. 28800 IN NS a24-64.akam.net. comunidad.madrid. 28800 IN NS a1-232.akam.net. comunidad.madrid. 28800 IN NS a11-64.akam.net. ;; ADDITIONAL SECTION (3 records) ns1.comunidad.madrid. 28800 IN A 195.77.128.10 ns2.comunidad.madrid. 28800 IN A 213.0.53.140 ;; { "EDNS-VERSION": 0 }
	Query to icmcom.madrid.org for comunidad.madrid/SOA
	Received 103 bytes from 195.77.128.10
	;; Response received from [195.77.128.10] 103 octets ;; HEADER SECTION ;; id = 37332 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comunidad.madrid. IN SOA ;; ANSWER SECTION (1 record) comunidad.madrid. 28800 IN SOA ( ddi-gm.madrid.org. mail.madrid.org. 1353 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-232.akam.net for comunidad.madrid/SOA
	Received 304 bytes from 193.108.91.232
	;; Response received from [193.108.91.232] 304 octets ;; HEADER SECTION ;; id = 52021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 8 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comunidad.madrid. IN SOA ;; ANSWER SECTION (1 record) comunidad.madrid. 28800 IN SOA ( ddi-gm.madrid.org. mail.madrid.org. 1353 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (8 records) comunidad.madrid. 28800 IN NS ns1.comunidad.madrid. comunidad.madrid. 28800 IN NS a7-65.akam.net. comunidad.madrid. 28800 IN NS a11-64.akam.net. comunidad.madrid. 28800 IN NS a20-66.akam.net. comunidad.madrid. 28800 IN NS a12-64.akam.net. comunidad.madrid. 28800 IN NS a24-64.akam.net. comunidad.madrid. 28800 IN NS a1-232.akam.net. comunidad.madrid. 28800 IN NS ns2.comunidad.madrid. ;; ADDITIONAL SECTION (3 records) ns2.comunidad.madrid. 28800 IN A 213.0.53.140 ns1.comunidad.madrid. 28800 IN A 195.77.128.10 ;; { "EDNS-VERSION": 0 }
	Query to olimpia.madrid.org for comunidad.madrid/A
	comunidad.madrid A RR has value 195.77.128.115
	No RRSIGs found

comunidad.madrid

	Query to icmcom.madrid.org for comunidad.madrid/A
	Received 61 bytes from 195.77.128.10
	;; Response received from [195.77.128.10] 61 octets ;; HEADER SECTION ;; id = 16558 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comunidad.madrid. IN A ;; ANSWER SECTION (1 record) comunidad.madrid. 28800 IN A 195.77.128.115 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	icmcom.madrid.org is authoritative for comunidad.madrid
	Query to icmcom.madrid.org for comunidad.madrid/A
	comunidad.madrid A RR has value 195.77.128.115
	No RRSIGs found

comunidad.madrid

	Query to a11-64.akam.net for comunidad.madrid/A
	Received 61 bytes from 84.53.139.64
	;; Response received from [84.53.139.64] 61 octets ;; HEADER SECTION ;; id = 5234 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comunidad.madrid. IN A ;; ANSWER SECTION (1 record) comunidad.madrid. 28800 IN A 195.77.128.115 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a11-64.akam.net is authoritative for comunidad.madrid
	Query to a11-64.akam.net for comunidad.madrid/A
	comunidad.madrid A RR has value 195.77.128.115
	No RRSIGs found

comunidad.madrid

	Query to a1-232.akam.net for comunidad.madrid/A
	Received 61 bytes from 193.108.91.232
	;; Response received from [193.108.91.232] 61 octets ;; HEADER SECTION ;; id = 44528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; comunidad.madrid. IN A ;; ANSWER SECTION (1 record) comunidad.madrid. 28800 IN A 195.77.128.115 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-232.akam.net is authoritative for comunidad.madrid
	Query to a1-232.akam.net for comunidad.madrid/A
	comunidad.madrid A RR has value 195.77.128.115
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test comunidad.madrid at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: