DNSSEC Debugger

Domain Name:

Time: 2025-05-11 12:40:40 UTC

Analyzing DNSSEC problems for dbs.si

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1139 octets ;; HEADER SECTION ;; id = 42436 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250601000000 20250511000000 20326 . VWTPvGJYPHue7aTc+b49y1cCggFM0t6ULKEPuAeITCgRgd5aAee5yrqEirwkq/Us7zDM1g1HliOO L8kCVbZ6ub5esuVSjlZ/mcEOdlOrkXt4I6AiVhAbaaCaOsEO7XiNaEWbNqiSQ0RcS7h2/A1E7thx F4xr9n8IXSI9bzyoGsH+HBf01Pne5ko34JgS2AuQj6pmksimN0GZ+/TTTtuo0w+mBbWswth1HCB6 5KuFuKfT4T97pLDK1ElPsFR2Ue7m7HMZeKfsb4nWg7LOCfGQVVu+bOVlgqIduXVgu/MsGbGd1A4+ /Wq7j5l7451NQeXfapnGtgJK9tsD1e1yZ83AbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250601000000 20250511000000 20326 . VWTPvGJYPHue7aTc+b49y1cCggFM0t6ULKEPuAeITCgRgd5aAee5yrqEirwkq/Us7zDM1g1HliOO L8kCVbZ6ub5esuVSjlZ/mcEOdlOrkXt4I6AiVhAbaaCaOsEO7XiNaEWbNqiSQ0RcS7h2/A1E7thx F4xr9n8IXSI9bzyoGsH+HBf01Pne5ko34JgS2AuQj6pmksimN0GZ+/TTTtuo0w+mBbWswth1HCB6 5KuFuKfT4T97pLDK1ElPsFR2Ue7m7HMZeKfsb4nWg7LOCfGQVVu+bOVlgqIduXVgu/MsGbGd1A4+ /Wq7j5l7451NQeXfapnGtgJK9tsD1e1yZ83AbQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to l.root-servers.net for dbs.si/A
	Received 734 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 734 octets ;; HEADER SECTION ;; id = 11276 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dbs.si. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) si. 172800 IN NS b.dns.si. si. 172800 IN NS f.dns.si. si. 172800 IN NS h.dns.si. si. 172800 IN NS i.dns.si. si. 172800 IN NS k.dns.si. si. 172800 IN NS l.dns.si. si. 86400 IN DS ( 1635 13 2 c2977306e3439d4f8d40a1a7f5dea9e93a408c9fb3c5aa32bad08febf0eb848b ) si. 86400 IN RRSIG ( DS 8 1 86400 20250524050000 20250511040000 53148 . BvsmtGbCez1eERF/Mv7CN+hzBvosCN/sf58GUp5tfrZ7+yLjR/+63YvrX7SC5rSoz02W3OVbKpQ3 VqKNUl+hObLKsqLJBIh0PRuk4g6vwutojtJcu8WNoR20nR1iIyT0HoQ3oww8MDLtTw4PysR79dSe RhorMOYAHskDtcEf0wMRyXQL2alhbdxs9C4arupYciUGikZeJjyLr+8V14xUCnFmCj683CtDBnms e/2M8sQHOyj1qUJM8IxaQnNzaMJpjoIrzKay4B3P72C612SD1KZmEYe6us3PxAVzHn7BrstT+H6Y G3+67vRnhp4sI1GWHXzCOUAX0TkLfy4rmxBkzA== ) ;; ADDITIONAL SECTION (13 records) b.dns.si. 172800 IN A 153.5.81.140 b.dns.si. 172800 IN AAAA 2001:1470:8000:53::44 f.dns.si. 172800 IN A 194.146.106.62 f.dns.si. 172800 IN AAAA 2001:67c:1010:15::53 h.dns.si. 172800 IN A 204.61.216.54 h.dns.si. 172800 IN AAAA 2001:500:14:6054:ad::1 i.dns.si. 172800 IN A 194.0.25.22 i.dns.si. 172800 IN AAAA 2001:678:20::22 k.dns.si. 172800 IN A 185.159.197.11 k.dns.si. 172800 IN AAAA 2620:10a:80aa::11 l.dns.si. 172800 IN A 185.159.198.11 l.dns.si. 172800 IN AAAA 2620:10a:80ab::11 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for si/DNSKEY
	Received 730 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 730 octets ;; HEADER SECTION ;; id = 51230 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; si. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) si. 172800 IN NS b.dns.si. si. 172800 IN NS f.dns.si. si. 172800 IN NS h.dns.si. si. 172800 IN NS i.dns.si. si. 172800 IN NS k.dns.si. si. 172800 IN NS l.dns.si. si. 86400 IN DS ( 1635 13 2 c2977306e3439d4f8d40a1a7f5dea9e93a408c9fb3c5aa32bad08febf0eb848b ) si. 86400 IN RRSIG ( DS 8 1 86400 20250524050000 20250511040000 53148 . BvsmtGbCez1eERF/Mv7CN+hzBvosCN/sf58GUp5tfrZ7+yLjR/+63YvrX7SC5rSoz02W3OVbKpQ3 VqKNUl+hObLKsqLJBIh0PRuk4g6vwutojtJcu8WNoR20nR1iIyT0HoQ3oww8MDLtTw4PysR79dSe RhorMOYAHskDtcEf0wMRyXQL2alhbdxs9C4arupYciUGikZeJjyLr+8V14xUCnFmCj683CtDBnms e/2M8sQHOyj1qUJM8IxaQnNzaMJpjoIrzKay4B3P72C612SD1KZmEYe6us3PxAVzHn7BrstT+H6Y G3+67vRnhp4sI1GWHXzCOUAX0TkLfy4rmxBkzA== ) ;; ADDITIONAL SECTION (13 records) b.dns.si. 172800 IN A 153.5.81.140 f.dns.si. 172800 IN A 194.146.106.62 h.dns.si. 172800 IN A 204.61.216.54 i.dns.si. 172800 IN A 194.0.25.22 k.dns.si. 172800 IN A 185.159.197.11 l.dns.si. 172800 IN A 185.159.198.11 b.dns.si. 172800 IN AAAA 2001:1470:8000:53::44 f.dns.si. 172800 IN AAAA 2001:67c:1010:15::53 h.dns.si. 172800 IN AAAA 2001:500:14:6054:ad::1 i.dns.si. 172800 IN AAAA 2001:678:20::22 k.dns.si. 172800 IN AAAA 2620:10a:80aa::11 l.dns.si. 172800 IN AAAA 2620:10a:80ab::11 ;; { "EDNS-VERSION": 0 }
	Found child zone si

	Checking DS between . and si
	Query to g.root-servers.net for si/DS
	Received 366 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 366 octets ;; HEADER SECTION ;; id = 39867 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; si. IN DS ;; ANSWER SECTION (2 records) si. 86400 IN DS ( 1635 13 2 c2977306e3439d4f8d40a1a7f5dea9e93a408c9fb3c5aa32bad08febf0eb848b ) si. 86400 IN RRSIG ( DS 8 1 86400 20250524050000 20250511040000 53148 . BvsmtGbCez1eERF/Mv7CN+hzBvosCN/sf58GUp5tfrZ7+yLjR/+63YvrX7SC5rSoz02W3OVbKpQ3 VqKNUl+hObLKsqLJBIh0PRuk4g6vwutojtJcu8WNoR20nR1iIyT0HoQ3oww8MDLtTw4PysR79dSe RhorMOYAHskDtcEf0wMRyXQL2alhbdxs9C4arupYciUGikZeJjyLr+8V14xUCnFmCj683CtDBnms e/2M8sQHOyj1qUJM8IxaQnNzaMJpjoIrzKay4B3P72C612SD1KZmEYe6us3PxAVzHn7BrstT+H6Y G3+67vRnhp4sI1GWHXzCOUAX0TkLfy4rmxBkzA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for si in the . zone
	DS=1635/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`si. 86400 IN RRSIG ( DS 8 1 86400 20250524050000 20250511040000 53148 . BvsmtGbCez1eERF/Mv7CN+hzBvosCN/sf58GUp5tfrZ7+yLjR/+63YvrX7SC5rSoz02W3OVbKpQ3 VqKNUl+hObLKsqLJBIh0PRuk4g6vwutojtJcu8WNoR20nR1iIyT0HoQ3oww8MDLtTw4PysR79dSe RhorMOYAHskDtcEf0wMRyXQL2alhbdxs9C4arupYciUGikZeJjyLr+8V14xUCnFmCj683CtDBnms e/2M8sQHOyj1qUJM8IxaQnNzaMJpjoIrzKay4B3P72C612SD1KZmEYe6us3PxAVzHn7BrstT+H6Y G3+67vRnhp4sI1GWHXzCOUAX0TkLfy4rmxBkzA== )`
	RRSIG=53148 and DNSKEY=53148 verifies the DS RRset
	DS=1635/SHA-256 is now in the chain-of-trust
	`si. 86400 IN DS ( 1635 13 2 c2977306e3439d4f8d40a1a7f5dea9e93a408c9fb3c5aa32bad08febf0eb848b )`
	Query to l.dns.si for si/DNSKEY
	Received 289 bytes from 185.159.198.11
	;; Response received from [185.159.198.11] 289 octets ;; HEADER SECTION ;; id = 36467 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; si. IN DNSKEY ;; ANSWER SECTION (3 records) si. 3600 IN DNSKEY ( 256 3 13 KCdF+wgDTFOj9DVd7ITeY6kKV9HvfUHUVaOPtwr7Lwbyv46mKMJeos/Ye2A7j7/17+aJP2NG2+05 ft8NL0LaaA== ) ; keytag 58981 si. 3600 IN DNSKEY ( 257 3 13 8/CvsxqmtNEHc5Wo8gZ2ojj0KRGKGm352prynsy02kUdUSIvUnJXKb0VXvZzu5e7f3vUSkH4dAwt 2+WTexMSOQ== ) ; keytag 1635 si. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250517201757 20250503111520 1635 si. pHKDbrmRIpU+ziIwPW6XP5RHI3uhFq4LOMsyVj9Zr3n6opWicGL4qAbc2zqVgji5MWYGPGukVWms +WN//bLCsg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for si
	`si. 3600 IN DNSKEY ( 256 3 13 KCdF+wgDTFOj9DVd7ITeY6kKV9HvfUHUVaOPtwr7Lwbyv46mKMJeos/Ye2A7j7/17+aJP2NG2+05 ft8NL0LaaA== ) ; keytag 58981`
	`si. 3600 IN DNSKEY ( 257 3 13 8/CvsxqmtNEHc5Wo8gZ2ojj0KRGKGm352prynsy02kUdUSIvUnJXKb0VXvZzu5e7f3vUSkH4dAwt 2+WTexMSOQ== ) ; keytag 1635`
	DNSKEY=1635/SEP is now in the chain-of-trust
	DS=1635/SHA-256 verifies DNSKEY=1635/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`si. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250517201757 20250503111520 1635 si. pHKDbrmRIpU+ziIwPW6XP5RHI3uhFq4LOMsyVj9Zr3n6opWicGL4qAbc2zqVgji5MWYGPGukVWms +WN//bLCsg== )`
	RRSIG=1635 and DNSKEY=1635/SEP verifies the DNSKEY RRset
	DNSKEY=58981 is now in the chain-of-trust
	Query to b.dns.si for dbs.si/A
	Received 458 bytes from 153.5.81.140
	;; Response received from [153.5.81.140] 458 octets ;; HEADER SECTION ;; id = 54436 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1432, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dbs.si. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dbs.si. 7200 IN NS ns1.dbs.si. dbs.si. 7200 IN NS ns2.dbs.si. no3eu5aipg1p9u2t7uvjakvhtq7jvkhb.si. 3600 IN NSEC3 ( 1 1 0 - npcfqr5qi2pj6aon7j0prln5tnll2rj5 NS SOA RRSIG DNSKEY NSEC3PARAM ) no3eu5aipg1p9u2t7uvjakvhtq7jvkhb.si. 3600 IN RRSIG ( NSEC3 13 2 3600 20250516011706 20250501045420 58981 si. n2wcIxlAH74FxpkfTzSJVbgwt02BiWSyL8YS0qIpx4sMIr14DgRK2XS5XAc15XcGlQPnOkvGsFGZ 09yPyK0LFw== ) upgu0825gt4lthlet9ai8lc1tu5q11jf.si. 3600 IN NSEC3 ( 1 1 0 - us5158ogiglgnb1ou6s9ffklqtmrhm90 NS DS RRSIG ) upgu0825gt4lthlet9ai8lc1tu5q11jf.si. 3600 IN RRSIG ( NSEC3 13 2 3600 20250522103923 20250508195420 58981 si. QVAfPpEsDza33RpeEFNXyc45O8+HJ1oSSciZKwPY4sJq7gz+gFFSXfKpxmCXar+GoBI+O3TjAQBB Y/261zSPJA== ) ;; ADDITIONAL SECTION (3 records) ns1.dbs.si. 7200 IN A 195.47.224.11 ns2.dbs.si. 7200 IN A 195.47.224.12 ;; { "EDNS-VERSION": 0 }
	Query to k.dns.si for dbs.si/DNSKEY
	Received 458 bytes from 185.159.197.11
	;; Response received from [185.159.197.11] 458 octets ;; HEADER SECTION ;; id = 55126 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dbs.si. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dbs.si. 7200 IN NS ns1.dbs.si. dbs.si. 7200 IN NS ns2.dbs.si. no3eu5aipg1p9u2t7uvjakvhtq7jvkhb.si. 3600 IN NSEC3 ( 1 1 0 - npcfqr5qi2pj6aon7j0prln5tnll2rj5 NS SOA RRSIG DNSKEY NSEC3PARAM ) upgu0825gt4lthlet9ai8lc1tu5q11jf.si. 3600 IN NSEC3 ( 1 1 0 - us5158ogiglgnb1ou6s9ffklqtmrhm90 NS DS RRSIG ) no3eu5aipg1p9u2t7uvjakvhtq7jvkhb.si. 3600 IN RRSIG ( NSEC3 13 2 3600 20250516011706 20250501045420 58981 si. n2wcIxlAH74FxpkfTzSJVbgwt02BiWSyL8YS0qIpx4sMIr14DgRK2XS5XAc15XcGlQPnOkvGsFGZ 09yPyK0LFw== ) upgu0825gt4lthlet9ai8lc1tu5q11jf.si. 3600 IN RRSIG ( NSEC3 13 2 3600 20250522103923 20250508195420 58981 si. QVAfPpEsDza33RpeEFNXyc45O8+HJ1oSSciZKwPY4sJq7gz+gFFSXfKpxmCXar+GoBI+O3TjAQBB Y/261zSPJA== ) ;; ADDITIONAL SECTION (3 records) ns1.dbs.si. 7200 IN A 195.47.224.11 ns2.dbs.si. 7200 IN A 195.47.224.12 ;; { "EDNS-VERSION": 0 }
	Found child zone dbs.si

dbs.si

	Checking DS between si and dbs.si
	Query to h.dns.si for dbs.si/DS
	Received 547 bytes from 204.61.216.54
	;; Response received from [204.61.216.54] 547 octets ;; HEADER SECTION ;; id = 56746 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dbs.si. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) no3eu5aipg1p9u2t7uvjakvhtq7jvkhb.si. 3600 IN NSEC3 ( 1 1 0 - npcfqr5qi2pj6aon7j0prln5tnll2rj5 NS SOA RRSIG DNSKEY NSEC3PARAM ) no3eu5aipg1p9u2t7uvjakvhtq7jvkhb.si. 3600 IN RRSIG ( NSEC3 13 2 3600 20250516011706 20250501045420 58981 si. n2wcIxlAH74FxpkfTzSJVbgwt02BiWSyL8YS0qIpx4sMIr14DgRK2XS5XAc15XcGlQPnOkvGsFGZ 09yPyK0LFw== ) si. 3600 IN SOA ( b.dns.si. dns.register.si. 1746964817 ;serial 3600 ;refresh 1800 ;retry 720000 ;expire 3600 ;minimum ) si. 3600 IN RRSIG ( SOA 13 1 3600 20250525031357 20250511115419 58981 si. ePwrarKM1GnY7LJ2HO8hZkEWGFbnQtCDs+6VmOU4DwFDshbXFE3T9UwxRaqpHO69vhbaBxl8slKd fBTegsvd+Q== ) upgu0825gt4lthlet9ai8lc1tu5q11jf.si. 3600 IN NSEC3 ( 1 1 0 - us5158ogiglgnb1ou6s9ffklqtmrhm90 NS DS RRSIG ) upgu0825gt4lthlet9ai8lc1tu5q11jf.si. 3600 IN RRSIG ( NSEC3 13 2 3600 20250522103923 20250508195420 58981 si. QVAfPpEsDza33RpeEFNXyc45O8+HJ1oSSciZKwPY4sJq7gz+gFFSXfKpxmCXar+GoBI+O3TjAQBB Y/261zSPJA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for dbs.si in the si zone
	Query to ns1.dbs.si for dbs.si/DNSKEY
	Received 86 bytes from 195.47.224.11
	;; Response received from [195.47.224.11] 86 octets ;; HEADER SECTION ;; id = 45854 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dbs.si. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dbs.si. 3600 IN SOA ( ns1.dbs.si. postmaster.dbs.si. 301 ;serial 28800 ;refresh 604800 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns2.dbs.si for dbs.si/A
	Received 51 bytes from 195.47.224.12
	;; Response received from [195.47.224.12] 51 octets ;; HEADER SECTION ;; id = 51069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dbs.si. IN A ;; ANSWER SECTION (1 record) dbs.si. 3600 IN A 46.19.15.28 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.dbs.si is authoritative for dbs.si
	Query to ns1.dbs.si for dbs.si/SOA
	Received 102 bytes from 195.47.224.11
	;; Response received from [195.47.224.11] 102 octets ;; HEADER SECTION ;; id = 35998 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 2 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dbs.si. IN SOA ;; ANSWER SECTION (1 record) dbs.si. 3600 IN SOA ( ns1.dbs.si. postmaster.dbs.si. 301 ;serial 28800 ;refresh 604800 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (2 records) ns1.dbs.si. 3600 IN A 195.47.224.11 ;; { "EDNS-VERSION": 0 }
	Query to ns2.dbs.si for dbs.si/A
	Received 51 bytes from 195.47.224.12
	;; Response received from [195.47.224.12] 51 octets ;; HEADER SECTION ;; id = 14700 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dbs.si. IN A ;; ANSWER SECTION (1 record) dbs.si. 3600 IN A 46.19.15.28 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dbs.si A RR has value 46.19.15.28
	No RRSIGs found

dbs.si

	Query to ns1.dbs.si for dbs.si/A
	Received 51 bytes from 195.47.224.11
	;; Response received from [195.47.224.11] 51 octets ;; HEADER SECTION ;; id = 44664 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dbs.si. IN A ;; ANSWER SECTION (1 record) dbs.si. 3600 IN A 46.19.15.28 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.dbs.si is authoritative for dbs.si
	Query to ns1.dbs.si for dbs.si/A
	Received 51 bytes from 195.47.224.11
	;; Response received from [195.47.224.11] 51 octets ;; HEADER SECTION ;; id = 46469 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dbs.si. IN A ;; ANSWER SECTION (1 record) dbs.si. 3600 IN A 46.19.15.28 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dbs.si A RR has value 46.19.15.28
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dbs.si at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: