DNSSEC Debugger - lowend.talk

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-08 19:36:26 UTC

Analyzing DNSSEC problems for lowend.talk

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1139 octets ;; HEADER SECTION ;; id = 42864 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to f.root-servers.net for lowend.talk/A
	Received 883 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 883 octets ;; HEADER SECTION ;; id = 23844 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.talk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) talk. 172800 IN NS dns1.nic.talk. talk. 172800 IN NS dns2.nic.talk. talk. 172800 IN NS dns3.nic.talk. talk. 172800 IN NS dns4.nic.talk. talk. 172800 IN NS dnsa.nic.talk. talk. 172800 IN NS dnsb.nic.talk. talk. 172800 IN NS dnsc.nic.talk. talk. 172800 IN NS dnsd.nic.talk. talk. 86400 IN DS ( 63701 8 2 6eafd932eddd45279072054c3cdfcf9cf04ee9cc5847de8f7ae6442a3ecac117 ) talk. 86400 IN RRSIG ( DS 8 1 86400 20260921170000 20260908160000 57780 . QQp4+k/RC0N2QhsTUO8tDG9aQT0KJnh1hDCzbagzge/Xqks4tNbfgNJuTa6bOZ164tUZILDqVtTs KHBEJ6nvmP44ZELTchkq/Cqw3ukhMbp0wZ27t2x768SzhY/VSfITM00GHbW5mxAibl50kD7PKsYO /SMmtc+7PPFyCotkc0TnYgJMsR45+OJKvYrdP/vJoTg0E6i2Nn+x4uJ2nZkSJHWUC1PCWyu/FyTy H/ObR+tLO3fM/cm8kRgZ7fvKjRxuMzwty/YX5zJeer6jU80cx6ecaTzmsmoJV6JELBL2hFg49edw zkJuG9gi+QjOiG9wiq+H9GymyAxBMMdLjZUcOg== ) ;; ADDITIONAL SECTION (17 records) dns1.nic.talk. 172800 IN A 213.248.218.83 dns1.nic.talk. 172800 IN AAAA 2a01:618:402::83 dns2.nic.talk. 172800 IN A 103.49.82.83 dns2.nic.talk. 172800 IN AAAA 2401:fd80:402::83 dns3.nic.talk. 172800 IN A 213.248.222.83 dns3.nic.talk. 172800 IN AAAA 2a01:618:406::83 dns4.nic.talk. 172800 IN A 43.230.50.83 dns4.nic.talk. 172800 IN AAAA 2401:fd80:406::83 dnsa.nic.talk. 172800 IN A 156.154.100.3 dnsa.nic.talk. 172800 IN AAAA 2001:502:ad09::3 dnsb.nic.talk. 172800 IN A 156.154.101.3 dnsb.nic.talk. 172800 IN AAAA 2001:502:2eda::3 dnsc.nic.talk. 172800 IN A 156.154.102.3 dnsc.nic.talk. 172800 IN AAAA 2610:a1:1009::3 dnsd.nic.talk. 172800 IN A 156.154.103.3 dnsd.nic.talk. 172800 IN AAAA 2610:a1:1010::3 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for talk/DNSKEY
	Received 876 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 876 octets ;; HEADER SECTION ;; id = 5732 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; talk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) talk. 172800 IN NS dnsa.nic.talk. talk. 172800 IN NS dnsc.nic.talk. talk. 172800 IN NS dns1.nic.talk. talk. 172800 IN NS dns2.nic.talk. talk. 172800 IN NS dns3.nic.talk. talk. 172800 IN NS dnsd.nic.talk. talk. 172800 IN NS dns4.nic.talk. talk. 172800 IN NS dnsb.nic.talk. talk. 86400 IN DS ( 63701 8 2 6eafd932eddd45279072054c3cdfcf9cf04ee9cc5847de8f7ae6442a3ecac117 ) talk. 86400 IN RRSIG ( DS 8 1 86400 20260921170000 20260908160000 57780 . QQp4+k/RC0N2QhsTUO8tDG9aQT0KJnh1hDCzbagzge/Xqks4tNbfgNJuTa6bOZ164tUZILDqVtTs KHBEJ6nvmP44ZELTchkq/Cqw3ukhMbp0wZ27t2x768SzhY/VSfITM00GHbW5mxAibl50kD7PKsYO /SMmtc+7PPFyCotkc0TnYgJMsR45+OJKvYrdP/vJoTg0E6i2Nn+x4uJ2nZkSJHWUC1PCWyu/FyTy H/ObR+tLO3fM/cm8kRgZ7fvKjRxuMzwty/YX5zJeer6jU80cx6ecaTzmsmoJV6JELBL2hFg49edw zkJuG9gi+QjOiG9wiq+H9GymyAxBMMdLjZUcOg== ) ;; ADDITIONAL SECTION (17 records) dns1.nic.talk. 172800 IN A 213.248.218.83 dns2.nic.talk. 172800 IN A 103.49.82.83 dns3.nic.talk. 172800 IN A 213.248.222.83 dns4.nic.talk. 172800 IN A 43.230.50.83 dnsa.nic.talk. 172800 IN A 156.154.100.3 dnsb.nic.talk. 172800 IN A 156.154.101.3 dnsc.nic.talk. 172800 IN A 156.154.102.3 dnsd.nic.talk. 172800 IN A 156.154.103.3 dns1.nic.talk. 172800 IN AAAA 2a01:618:402::83 dns2.nic.talk. 172800 IN AAAA 2401:fd80:402::83 dns3.nic.talk. 172800 IN AAAA 2a01:618:406::83 dns4.nic.talk. 172800 IN AAAA 2401:fd80:406::83 dnsa.nic.talk. 172800 IN AAAA 2001:502:ad09::3 dnsb.nic.talk. 172800 IN AAAA 2001:502:2eda::3 dnsc.nic.talk. 172800 IN AAAA 2610:a1:1009::3 dnsd.nic.talk. 172800 IN AAAA 2610:a1:1010::3 ;; { "EDNS-VERSION": 0 }
	Found child zone talk

talk

	Checking DS between . and talk
	Query to l.root-servers.net for talk/DS
	Received 368 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 368 octets ;; HEADER SECTION ;; id = 38354 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; talk. IN DS ;; ANSWER SECTION (2 records) talk. 86400 IN DS ( 63701 8 2 6eafd932eddd45279072054c3cdfcf9cf04ee9cc5847de8f7ae6442a3ecac117 ) talk. 86400 IN RRSIG ( DS 8 1 86400 20260921170000 20260908160000 57780 . QQp4+k/RC0N2QhsTUO8tDG9aQT0KJnh1hDCzbagzge/Xqks4tNbfgNJuTa6bOZ164tUZILDqVtTs KHBEJ6nvmP44ZELTchkq/Cqw3ukhMbp0wZ27t2x768SzhY/VSfITM00GHbW5mxAibl50kD7PKsYO /SMmtc+7PPFyCotkc0TnYgJMsR45+OJKvYrdP/vJoTg0E6i2Nn+x4uJ2nZkSJHWUC1PCWyu/FyTy H/ObR+tLO3fM/cm8kRgZ7fvKjRxuMzwty/YX5zJeer6jU80cx6ecaTzmsmoJV6JELBL2hFg49edw zkJuG9gi+QjOiG9wiq+H9GymyAxBMMdLjZUcOg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for talk in the . zone
	DS=63701/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`talk. 86400 IN RRSIG ( DS 8 1 86400 20260921170000 20260908160000 57780 . QQp4+k/RC0N2QhsTUO8tDG9aQT0KJnh1hDCzbagzge/Xqks4tNbfgNJuTa6bOZ164tUZILDqVtTs KHBEJ6nvmP44ZELTchkq/Cqw3ukhMbp0wZ27t2x768SzhY/VSfITM00GHbW5mxAibl50kD7PKsYO /SMmtc+7PPFyCotkc0TnYgJMsR45+OJKvYrdP/vJoTg0E6i2Nn+x4uJ2nZkSJHWUC1PCWyu/FyTy H/ObR+tLO3fM/cm8kRgZ7fvKjRxuMzwty/YX5zJeer6jU80cx6ecaTzmsmoJV6JELBL2hFg49edw zkJuG9gi+QjOiG9wiq+H9GymyAxBMMdLjZUcOg== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=63701/SHA-256 is now in the chain-of-trust
	`talk. 86400 IN DS ( 63701 8 2 6eafd932eddd45279072054c3cdfcf9cf04ee9cc5847de8f7ae6442a3ecac117 )`
	Query to dnsd.nic.talk for talk/DNSKEY
	Received 877 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 877 octets ;; HEADER SECTION ;; id = 19551 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; talk. IN DNSKEY ;; ANSWER SECTION (3 records) talk. 7200 IN DNSKEY ( 256 3 8 AwEAAamdLnKNCqRtA3qVF9H1ZeYqqTdjNdIvu2OHvd3j/AXQBCr6fZl3y2pFasTUV5iW1YQmYUas QM00D1ghAPfJU+23byb0uhdI75bwYh2kRlUIEIZGTbblCJ5aSyhabBfOM67ZcfxTDHNTGmp8QY7K U2wCCM1khWqTjJdN151TNmygkAr0eHFUyYHhM6cFCoza7fNyGYXACuyAYfPpzQv3JBq+2a76AChX AGDAvd/WZjyjHAb6Qy7qBa72HOUMQWvVnd1CVkW79PoB/27tt+CPLzb7cHrMTiXXljlVYJRlcNBs h88xXM/zuPPPV9JbQNeFNTPlFz8sXUnY2H60P9tkfJM= ) ; keytag 16755 talk. 7200 IN DNSKEY ( 257 3 8 AwEAAYUTdZbzpNhiMIIKrrsTIBsmFEeUfbuy872flv2P+XgODThOexE25mPcdn+OFsd0c1979KZT Ypa3DJmI2Dg6Cq8sXAr8umQm1TkUAEZG3H0cM2k63qut08Rb+UG91tSFpMS60gW3cnwMIfgy8lz7 uEcAalSre2PF20gtVGG3x0XeGiqCIBBPPyQaFa/4m+aAtK9cCzVBLJ+D8QN9St6wcHrpL1CzR5l1 xISokzdCYAcQSrTvkN6VH6S5AhKhhx56DJ5w4LkCRk7d2CvUSb6ycDImaKBibEmqwmqTIvDiLqFi 6GvTp7yY0u6RnIbIU4CHkBQRwr++Um/8pZCk7XKwQN0= ) ; keytag 63701 talk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20261013083615 20260908074217 63701 talk. DRXsHO9bJtOjg6fWQiPeY8rr8cOdjFoDvQEXZFjmJIBt9JtHcQBd/jEJGIE8XYZ0ogy7h48O5R/i LZZy3f9HkAxHW3oyQoZHExvaZr2aHluz47ThonfYnFuMwfAKO+R0hYl1RiPPNdwGN3pbMkoFCzrh zdtuY4fD+yPTk1sW5nvTAqx9cjCa0ZoHm39izYkus6SElFOtmsMiztOXZ34yPbeN1sqoXERzJgMi GeyyGwuUZQQ5HCGYS51alUy6cny3M9pXSRKKTyfcQaqSRrzLpEy6s9mLgZUw0+0LVqeRBF8dU++A gMyS2WEGJ5kKvKj5teW6jP47wbnfAmHGhxHGsg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for talk
	`talk. 7200 IN DNSKEY ( 256 3 8 AwEAAamdLnKNCqRtA3qVF9H1ZeYqqTdjNdIvu2OHvd3j/AXQBCr6fZl3y2pFasTUV5iW1YQmYUas QM00D1ghAPfJU+23byb0uhdI75bwYh2kRlUIEIZGTbblCJ5aSyhabBfOM67ZcfxTDHNTGmp8QY7K U2wCCM1khWqTjJdN151TNmygkAr0eHFUyYHhM6cFCoza7fNyGYXACuyAYfPpzQv3JBq+2a76AChX AGDAvd/WZjyjHAb6Qy7qBa72HOUMQWvVnd1CVkW79PoB/27tt+CPLzb7cHrMTiXXljlVYJRlcNBs h88xXM/zuPPPV9JbQNeFNTPlFz8sXUnY2H60P9tkfJM= ) ; keytag 16755`
	`talk. 7200 IN DNSKEY ( 257 3 8 AwEAAYUTdZbzpNhiMIIKrrsTIBsmFEeUfbuy872flv2P+XgODThOexE25mPcdn+OFsd0c1979KZT Ypa3DJmI2Dg6Cq8sXAr8umQm1TkUAEZG3H0cM2k63qut08Rb+UG91tSFpMS60gW3cnwMIfgy8lz7 uEcAalSre2PF20gtVGG3x0XeGiqCIBBPPyQaFa/4m+aAtK9cCzVBLJ+D8QN9St6wcHrpL1CzR5l1 xISokzdCYAcQSrTvkN6VH6S5AhKhhx56DJ5w4LkCRk7d2CvUSb6ycDImaKBibEmqwmqTIvDiLqFi 6GvTp7yY0u6RnIbIU4CHkBQRwr++Um/8pZCk7XKwQN0= ) ; keytag 63701`
	DNSKEY=63701/SEP is now in the chain-of-trust
	DS=63701/SHA-256 verifies DNSKEY=63701/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`talk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20261013083615 20260908074217 63701 talk. DRXsHO9bJtOjg6fWQiPeY8rr8cOdjFoDvQEXZFjmJIBt9JtHcQBd/jEJGIE8XYZ0ogy7h48O5R/i LZZy3f9HkAxHW3oyQoZHExvaZr2aHluz47ThonfYnFuMwfAKO+R0hYl1RiPPNdwGN3pbMkoFCzrh zdtuY4fD+yPTk1sW5nvTAqx9cjCa0ZoHm39izYkus6SElFOtmsMiztOXZ34yPbeN1sqoXERzJgMi GeyyGwuUZQQ5HCGYS51alUy6cny3M9pXSRKKTyfcQaqSRrzLpEy6s9mLgZUw0+0LVqeRBF8dU++A gMyS2WEGJ5kKvKj5teW6jP47wbnfAmHGhxHGsg== )`
	RRSIG=63701 and DNSKEY=63701/SEP verifies the DNSKEY RRset
	DNSKEY=16755 is now in the chain-of-trust
	Query to dns3.nic.talk for lowend.talk/A
	Received 878 bytes from 213.248.222.83
	;; Response received from [213.248.222.83] 878 octets ;; HEADER SECTION ;; id = 32439 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.talk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) lowend.talk. 172800 IN NS graham.ns.cloudflare.com. lowend.talk. 172800 IN NS izabella.ns.cloudflare.com. s1hca5vapdgskomsp5s52bsf8e4pr4lg.talk. 60 IN NSEC3 ( 1 1 0 - s44nr7a5ubcb91tltimv4lsthl1r498f NS SOA TXT RRSIG DNSKEY NSEC3PARAM TYPE65534 ) s1hca5vapdgskomsp5s52bsf8e4pr4lg.talk. 60 IN RRSIG ( NSEC3 8 2 60 20261008005241 20260902235718 16755 talk. LZmy8H19/z5gKlsM/vcwxLWBWKb/1JPpaQu26VeHoPX5MhqyyzJEjA1Y15IBqGd2OWHluKXRyFU/ GHAtSSxVQSYAFoGqXqvW8tqAJSejzBwQB4LC38H1P94cNKuelnyv0plPSDBDyJVJUzfrOyV7m4w/ jkW/u+XwYQi4Bf6XTFx9eWTirYSjcWb/pVa60F+pnvW5xHPp2TmCPfNPj0JuQv63VPz9R0Lx5L4J nD9ZErU2owwFqwiAVNVFS+yPcw+GIwi16Mgy3+fobb1eoLyRBUyuTlYBhgzq2UMTOoHp8N6egenC xZiCwnrn45aJujcOybcPPnD7Mg4fwU8wlgfAbg== ) c4nocqh4e1joh2kfe1re0204nph6gkre.talk. 60 IN NSEC3 ( 1 1 0 - cdfo4261ovpg9sa5h70b6ge95e8v68s3 NS DS RRSIG ) c4nocqh4e1joh2kfe1re0204nph6gkre.talk. 60 IN RRSIG ( NSEC3 8 2 60 20261013014244 20260908004723 16755 talk. p3QvFwoOosNWN19CDgy3Y0kESpQwSUqqqbqDUH2LotxXEUxVDWC4kEjBw/iMeCNMe2LwyfBuTMt+ v0v1tykoSGDugyT4mzFcm4EnLaVvqoCJ2gsY/grc5LkCUuDSn3vDUweNGS0VM6kPqa8phEVuTzp3 TozA1KzxOfop3ju+KX5ZVlBMzGTudRg4x4eofEGb/FkAap1FkNKmIijiBjW84hTpUhQF28VkNAr6 WzL4NBwtaJSaK3uA9b5n3DCTFdLUEyaoNH6xwFRIiOn4Ut25KUL7XiSNf2ExDFPHMA9/kHcto0S3 D+mIo6WHSGthw+5eLX1Z4Rl/2hn6EHAtfT9j9Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dnsb.nic.talk for lowend.talk/DNSKEY
	Received 878 bytes from 156.154.101.3
	;; Response received from [156.154.101.3] 878 octets ;; HEADER SECTION ;; id = 1988 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.talk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) lowend.talk. 172800 IN NS graham.ns.cloudflare.com. lowend.talk. 172800 IN NS izabella.ns.cloudflare.com. S1HCA5VAPDGSKOMSP5S52BSF8E4PR4LG.talk. 60 IN NSEC3 ( 1 1 0 - s44nr7a5ubcb91tltimv4lsthl1r498f NS SOA TXT RRSIG DNSKEY NSEC3PARAM TYPE65534 ) S1HCA5VAPDGSKOMSP5S52BSF8E4PR4LG.talk. 60 IN RRSIG ( NSEC3 8 2 60 20261008005241 20260902235718 16755 talk. LZmy8H19/z5gKlsM/vcwxLWBWKb/1JPpaQu26VeHoPX5MhqyyzJEjA1Y15IBqGd2OWHluKXRyFU/ GHAtSSxVQSYAFoGqXqvW8tqAJSejzBwQB4LC38H1P94cNKuelnyv0plPSDBDyJVJUzfrOyV7m4w/ jkW/u+XwYQi4Bf6XTFx9eWTirYSjcWb/pVa60F+pnvW5xHPp2TmCPfNPj0JuQv63VPz9R0Lx5L4J nD9ZErU2owwFqwiAVNVFS+yPcw+GIwi16Mgy3+fobb1eoLyRBUyuTlYBhgzq2UMTOoHp8N6egenC xZiCwnrn45aJujcOybcPPnD7Mg4fwU8wlgfAbg== ) C4NOCQH4E1JOH2KFE1RE0204NPH6GKRE.talk. 60 IN NSEC3 ( 1 1 0 - cdfo4261ovpg9sa5h70b6ge95e8v68s3 NS DS RRSIG ) C4NOCQH4E1JOH2KFE1RE0204NPH6GKRE.talk. 60 IN RRSIG ( NSEC3 8 2 60 20261013014244 20260908004723 16755 talk. p3QvFwoOosNWN19CDgy3Y0kESpQwSUqqqbqDUH2LotxXEUxVDWC4kEjBw/iMeCNMe2LwyfBuTMt+ v0v1tykoSGDugyT4mzFcm4EnLaVvqoCJ2gsY/grc5LkCUuDSn3vDUweNGS0VM6kPqa8phEVuTzp3 TozA1KzxOfop3ju+KX5ZVlBMzGTudRg4x4eofEGb/FkAap1FkNKmIijiBjW84hTpUhQF28VkNAr6 WzL4NBwtaJSaK3uA9b5n3DCTFdLUEyaoNH6xwFRIiOn4Ut25KUL7XiSNf2ExDFPHMA9/kHcto0S3 D+mIo6WHSGthw+5eLX1Z4Rl/2hn6EHAtfT9j9Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone lowend.talk

lowend.talk

	Checking DS between talk and lowend.talk
	Query to dns4.nic.talk for lowend.talk/DS
	Received 1179 bytes from 43.230.50.83
	;; Response received from [43.230.50.83] 1179 octets ;; HEADER SECTION ;; id = 18988 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.talk. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) talk. 60 IN SOA ( dns1.nic.talk. hostmaster.nominet.org.uk. 1788895802 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 60 ;minimum ) talk. 60 IN RRSIG ( SOA 8 1 172800 20261013193002 20260908183002 16755 talk. Qwn9QUSFoL+jkyOeh4f9+XjmQlyZLdbq9RFuQBcEmAQC1AV+o6BjdCzE+MOzhl6zMkOviD1xXmCq AeeCUS++Hdv14C4BdVy/E3SdhpEK5V0tC/1vra4zRXLVQeHkoea0ejf+JG/VID/yEe2EbdE+SdQP AC8KRAEAGE6roVO11iKFENW/lC5KxfpZKla50MwLkkw7zCTNM+Oh2STL4X+stJQOlNffi+lP8pI2 ZNGfwVC4Lxmcm1Vvotm7U4ODuYtuc9upvGN9MwHrr1rI8w9CdrQ89XiEvBC+cafrzKR9dU3TXO32 k8kEItcpaNCvSIkmK3Kpjf2bNzB1dboxdPsVLQ== ) s1hca5vapdgskomsp5s52bsf8e4pr4lg.talk. 60 IN NSEC3 ( 1 1 0 - s44nr7a5ubcb91tltimv4lsthl1r498f NS SOA TXT RRSIG DNSKEY NSEC3PARAM TYPE65534 ) s1hca5vapdgskomsp5s52bsf8e4pr4lg.talk. 60 IN RRSIG ( NSEC3 8 2 60 20261008005241 20260902235718 16755 talk. LZmy8H19/z5gKlsM/vcwxLWBWKb/1JPpaQu26VeHoPX5MhqyyzJEjA1Y15IBqGd2OWHluKXRyFU/ GHAtSSxVQSYAFoGqXqvW8tqAJSejzBwQB4LC38H1P94cNKuelnyv0plPSDBDyJVJUzfrOyV7m4w/ jkW/u+XwYQi4Bf6XTFx9eWTirYSjcWb/pVa60F+pnvW5xHPp2TmCPfNPj0JuQv63VPz9R0Lx5L4J nD9ZErU2owwFqwiAVNVFS+yPcw+GIwi16Mgy3+fobb1eoLyRBUyuTlYBhgzq2UMTOoHp8N6egenC xZiCwnrn45aJujcOybcPPnD7Mg4fwU8wlgfAbg== ) c4nocqh4e1joh2kfe1re0204nph6gkre.talk. 60 IN NSEC3 ( 1 1 0 - cdfo4261ovpg9sa5h70b6ge95e8v68s3 NS DS RRSIG ) c4nocqh4e1joh2kfe1re0204nph6gkre.talk. 60 IN RRSIG ( NSEC3 8 2 60 20261013014244 20260908004723 16755 talk. p3QvFwoOosNWN19CDgy3Y0kESpQwSUqqqbqDUH2LotxXEUxVDWC4kEjBw/iMeCNMe2LwyfBuTMt+ v0v1tykoSGDugyT4mzFcm4EnLaVvqoCJ2gsY/grc5LkCUuDSn3vDUweNGS0VM6kPqa8phEVuTzp3 TozA1KzxOfop3ju+KX5ZVlBMzGTudRg4x4eofEGb/FkAap1FkNKmIijiBjW84hTpUhQF28VkNAr6 WzL4NBwtaJSaK3uA9b5n3DCTFdLUEyaoNH6xwFRIiOn4Ut25KUL7XiSNf2ExDFPHMA9/kHcto0S3 D+mIo6WHSGthw+5eLX1Z4Rl/2hn6EHAtfT9j9Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for lowend.talk in the talk zone
	Query to graham.ns.cloudflare.com for lowend.talk/DNSKEY
	Received 307 bytes from 173.245.59.171
	;; Response received from [173.245.59.171] 307 octets ;; HEADER SECTION ;; id = 30737 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.talk. IN DNSKEY ;; ANSWER SECTION (3 records) lowend.talk. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371 lowend.talk. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505 lowend.talk. 3600 IN RRSIG ( DNSKEY 13 2 3600 20261018172619 20260818172619 2371 lowend.talk. 2/DuRkiictcFCVNrwnOP1b2TCj4715umhht0Xg2p+eCI5S4cbEmDiKHEaPB+OQP5/5lawCQQsdQE P73oJM9LqQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for lowend.talk
	`lowend.talk. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371`
	`lowend.talk. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505`
	Found 1 RRSIGs over DNSKEY RRset
	`lowend.talk. 3600 IN RRSIG ( DNSKEY 13 2 3600 20261018172619 20260818172619 2371 lowend.talk. 2/DuRkiictcFCVNrwnOP1b2TCj4715umhht0Xg2p+eCI5S4cbEmDiKHEaPB+OQP5/5lawCQQsdQE P73oJM9LqQ== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	Query to izabella.ns.cloudflare.com for lowend.talk/A
	Received 179 bytes from 172.64.34.46
	;; Response received from [172.64.34.46] 179 octets ;; HEADER SECTION ;; id = 14021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.talk. IN A ;; ANSWER SECTION (3 records) lowend.talk. 300 IN A 104.21.22.145 lowend.talk. 300 IN A 172.67.205.82 lowend.talk. 300 IN RRSIG ( A 13 2 300 20260909203626 20260907183626 34505 lowend.talk. r1B2z642Uo0PB9SdUdiFv6muK0gV07okj8tW1HqgRdPyOm33zw3dfaWje28rr2fWCEUekPCvKoeo tAih002nAQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	izabella.ns.cloudflare.com is authoritative for lowend.talk
	Found RRSIG signed by lowend.talk zone
	Query to graham.ns.cloudflare.com for lowend.talk/SOA
	Received 211 bytes from 173.245.59.171
	;; Response received from [173.245.59.171] 211 octets ;; HEADER SECTION ;; id = 6290 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.talk. IN SOA ;; ANSWER SECTION (2 records) lowend.talk. 1800 IN SOA ( graham.ns.cloudflare.com. dns.cloudflare.com. 2412646084 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) lowend.talk. 1800 IN RRSIG ( SOA 13 2 1800 20260909203626 20260907183626 34505 lowend.talk. uMuRazDtCJbZpkc97ENfvTM0iJp8oxpAZcdZyjKMYRS8vb8kiJ2f9sX27tz2rPnNePT866KhDMJx CFzxx8BBAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to izabella.ns.cloudflare.com for lowend.talk/A
	lowend.talk A RR has value 104.21.22.145
	lowend.talk A RR has value 172.67.205.82
	Found 1 RRSIGs over A RRset
	`lowend.talk. 300 IN RRSIG ( A 13 2 300 20260909203626 20260907183626 34505 lowend.talk. r1B2z642Uo0PB9SdUdiFv6muK0gV07okj8tW1HqgRdPyOm33zw3dfaWje28rr2fWCEUekPCvKoeo tAih002nAQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

lowend.talk

	Query to graham.ns.cloudflare.com for lowend.talk/A
	Received 179 bytes from 172.64.33.171
	;; Response received from [172.64.33.171] 179 octets ;; HEADER SECTION ;; id = 50468 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.talk. IN A ;; ANSWER SECTION (3 records) lowend.talk. 300 IN A 104.21.22.145 lowend.talk. 300 IN A 172.67.205.82 lowend.talk. 300 IN RRSIG ( A 13 2 300 20260909203626 20260907183626 34505 lowend.talk. vUXZ8QQU4Lm3Cac7x+FbLlAoympKgI6vrXVnTIuc+BVeBjhFacEWPvNgC5TsI9326pxeJzYLKVqi yPqEQhbtFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	graham.ns.cloudflare.com is authoritative for lowend.talk
	Found RRSIG signed by lowend.talk zone
	Query to graham.ns.cloudflare.com for lowend.talk/A
	lowend.talk A RR has value 104.21.22.145
	lowend.talk A RR has value 172.67.205.82
	Found 1 RRSIGs over A RRset
	`lowend.talk. 300 IN RRSIG ( A 13 2 300 20260909203626 20260907183626 34505 lowend.talk. vUXZ8QQU4Lm3Cac7x+FbLlAoympKgI6vrXVnTIuc+BVeBjhFacEWPvNgC5TsI9326pxeJzYLKVqi yPqEQhbtFg== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test lowend.talk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: