DNSSEC Debugger

Domain Name:

Time: 2025-08-30 12:28:09 UTC

Analyzing DNSSEC problems for off.gay

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1414 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1414 octets ;; HEADER SECTION ;; id = 22445 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250920000000 20250830000000 20326 . HFh19AJ3Cl/pJR5753g7bQVFy1nsrX0ly1znWtWDxH+AnsvhaOv8V97g4Oyo9rkvMvuM84CMlWQK 6Of80RtX2UizsnSa5Tt5n91mXSs3oXlAGv2khTSVKFnyKISpy5Um4Uf7hnt80UYwBKA4XprSeKpB qbY0BdY2cz3IIvaosX2er8AOCHF9VYxtOjMVxsL/NHm1NykP5c6fGygIlJUcXsMTBev6YCYDVM/D QP/o2bgJpEDqnN2OThTL7+xsfzlnq3d297G8E1iVlrH21gF20yIxJrrIWrsrVcswpdBhXWFHpdr7 hBpbfqHBWAsaaz3PdgfRLhnSlxqvh0f9qxxCuw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250920000000 20250830000000 20326 . HFh19AJ3Cl/pJR5753g7bQVFy1nsrX0ly1znWtWDxH+AnsvhaOv8V97g4Oyo9rkvMvuM84CMlWQK 6Of80RtX2UizsnSa5Tt5n91mXSs3oXlAGv2khTSVKFnyKISpy5Um4Uf7hnt80UYwBKA4XprSeKpB qbY0BdY2cz3IIvaosX2er8AOCHF9VYxtOjMVxsL/NHm1NykP5c6fGygIlJUcXsMTBev6YCYDVM/D QP/o2bgJpEDqnN2OThTL7+xsfzlnq3d297G8E1iVlrH21gF20yIxJrrIWrsrVcswpdBhXWFHpdr7 hBpbfqHBWAsaaz3PdgfRLhnSlxqvh0f9qxxCuw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	Query to b.root-servers.net for off.gay/A
	Received 735 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 735 octets ;; HEADER SECTION ;; id = 30886 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; off.gay. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) gay. 172800 IN NS a.nic.gay. gay. 172800 IN NS b.nic.gay. gay. 172800 IN NS c.nic.gay. gay. 172800 IN NS x.nic.gay. gay. 172800 IN NS y.nic.gay. gay. 172800 IN NS z.nic.gay. gay. 86400 IN DS ( 4816 8 2 960f543d3ead5c2e0fd6d1e792265f7c795170d793acd073f84c52a2f72eea85 ) gay. 86400 IN RRSIG ( DS 8 1 86400 20250912050000 20250830040000 46441 . Od4UqSMFnpvM2F87Dp41EJyIr70bFQxLg1sovybySyJ9F0j5W5QnbCXIkWvds31Ar0PyMaLMxIOt Ok3UWSTOeVoHh2ZIZu7zBt2hY0zrR3bIpYv6ckTQtWVeUqSC02oPIxdZ1QgsExMj888RAfjMrU0o nClU+isEF7UI8KPxAxdxljs6K8jB/zqxFoidHfxVAr0MYsaTmnmwAUs3k1dQYYcALQ6FQ6Hzsf0+ VYis2uLajBEg47/sGiFB8ULbox6QjKAW2P7SlyZwl8ZExvKt27KXMZtb98JklB66vypc9XVwDlIN rXVAQgStcv6PrmYg61Q0PN4sWs+oIEwEN1yIgg== ) ;; ADDITIONAL SECTION (13 records) a.nic.gay. 172800 IN A 37.209.192.10 a.nic.gay. 172800 IN AAAA 2001:dcd:1::10 b.nic.gay. 172800 IN A 37.209.194.10 b.nic.gay. 172800 IN AAAA 2001:dcd:2::10 c.nic.gay. 172800 IN A 37.209.196.10 c.nic.gay. 172800 IN AAAA 2001:dcd:3::10 x.nic.gay. 172800 IN A 156.154.172.82 x.nic.gay. 172800 IN AAAA 2610:a1:1074::1:82 y.nic.gay. 172800 IN A 156.154.173.82 y.nic.gay. 172800 IN AAAA 2610:a1:1075::1:82 z.nic.gay. 172800 IN A 156.154.174.82 z.nic.gay. 172800 IN AAAA 2610:a1:1076::1:82 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for gay/DNSKEY
	Received 731 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 731 octets ;; HEADER SECTION ;; id = 45905 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gay. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) gay. 172800 IN NS a.nic.gay. gay. 172800 IN NS b.nic.gay. gay. 172800 IN NS c.nic.gay. gay. 172800 IN NS x.nic.gay. gay. 172800 IN NS y.nic.gay. gay. 172800 IN NS z.nic.gay. gay. 86400 IN DS ( 4816 8 2 960f543d3ead5c2e0fd6d1e792265f7c795170d793acd073f84c52a2f72eea85 ) gay. 86400 IN RRSIG ( DS 8 1 86400 20250912050000 20250830040000 46441 . Od4UqSMFnpvM2F87Dp41EJyIr70bFQxLg1sovybySyJ9F0j5W5QnbCXIkWvds31Ar0PyMaLMxIOt Ok3UWSTOeVoHh2ZIZu7zBt2hY0zrR3bIpYv6ckTQtWVeUqSC02oPIxdZ1QgsExMj888RAfjMrU0o nClU+isEF7UI8KPxAxdxljs6K8jB/zqxFoidHfxVAr0MYsaTmnmwAUs3k1dQYYcALQ6FQ6Hzsf0+ VYis2uLajBEg47/sGiFB8ULbox6QjKAW2P7SlyZwl8ZExvKt27KXMZtb98JklB66vypc9XVwDlIN rXVAQgStcv6PrmYg61Q0PN4sWs+oIEwEN1yIgg== ) ;; ADDITIONAL SECTION (13 records) a.nic.gay. 172800 IN A 37.209.192.10 b.nic.gay. 172800 IN A 37.209.194.10 c.nic.gay. 172800 IN A 37.209.196.10 x.nic.gay. 172800 IN A 156.154.172.82 y.nic.gay. 172800 IN A 156.154.173.82 z.nic.gay. 172800 IN A 156.154.174.82 a.nic.gay. 172800 IN AAAA 2001:dcd:1::10 b.nic.gay. 172800 IN AAAA 2001:dcd:2::10 c.nic.gay. 172800 IN AAAA 2001:dcd:3::10 x.nic.gay. 172800 IN AAAA 2610:a1:1074::1:82 y.nic.gay. 172800 IN AAAA 2610:a1:1075::1:82 z.nic.gay. 172800 IN AAAA 2610:a1:1076::1:82 ;; { "EDNS-VERSION": 0 }
	Found child zone gay

gay

	Checking DS between . and gay
	Query to m.root-servers.net for gay/DS
	Received 367 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 367 octets ;; HEADER SECTION ;; id = 52394 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gay. IN DS ;; ANSWER SECTION (2 records) gay. 86400 IN DS ( 4816 8 2 960f543d3ead5c2e0fd6d1e792265f7c795170d793acd073f84c52a2f72eea85 ) gay. 86400 IN RRSIG ( DS 8 1 86400 20250912050000 20250830040000 46441 . Od4UqSMFnpvM2F87Dp41EJyIr70bFQxLg1sovybySyJ9F0j5W5QnbCXIkWvds31Ar0PyMaLMxIOt Ok3UWSTOeVoHh2ZIZu7zBt2hY0zrR3bIpYv6ckTQtWVeUqSC02oPIxdZ1QgsExMj888RAfjMrU0o nClU+isEF7UI8KPxAxdxljs6K8jB/zqxFoidHfxVAr0MYsaTmnmwAUs3k1dQYYcALQ6FQ6Hzsf0+ VYis2uLajBEg47/sGiFB8ULbox6QjKAW2P7SlyZwl8ZExvKt27KXMZtb98JklB66vypc9XVwDlIN rXVAQgStcv6PrmYg61Q0PN4sWs+oIEwEN1yIgg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gay in the . zone
	DS=4816/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gay. 86400 IN RRSIG ( DS 8 1 86400 20250912050000 20250830040000 46441 . Od4UqSMFnpvM2F87Dp41EJyIr70bFQxLg1sovybySyJ9F0j5W5QnbCXIkWvds31Ar0PyMaLMxIOt Ok3UWSTOeVoHh2ZIZu7zBt2hY0zrR3bIpYv6ckTQtWVeUqSC02oPIxdZ1QgsExMj888RAfjMrU0o nClU+isEF7UI8KPxAxdxljs6K8jB/zqxFoidHfxVAr0MYsaTmnmwAUs3k1dQYYcALQ6FQ6Hzsf0+ VYis2uLajBEg47/sGiFB8ULbox6QjKAW2P7SlyZwl8ZExvKt27KXMZtb98JklB66vypc9XVwDlIN rXVAQgStcv6PrmYg61Q0PN4sWs+oIEwEN1yIgg== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=4816/SHA-256 is now in the chain-of-trust
	`gay. 86400 IN DS ( 4816 8 2 960f543d3ead5c2e0fd6d1e792265f7c795170d793acd073f84c52a2f72eea85 )`
	Query to b.nic.gay for gay/DNSKEY
	Received 779 bytes from 37.209.194.10
	;; Response received from [37.209.194.10] 779 octets ;; HEADER SECTION ;; id = 28037 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gay. IN DNSKEY ;; ANSWER SECTION (3 records) gay. 7200 IN DNSKEY ( 257 3 8 AwEAAblRpFzARELClAEIwyRjQpfvfs7OCJaR4TK+D8KeKGNlofFW7Mdgd1uCNCO0VqKPl3Eiorj/ 4JAhpfDvLx6fUV1065iH3Wg6Wp+hwghEKI3vx8gPyfhdQex7MHJ0ygtTLJ4ilv3amFvs3vWFuUY9 a77p9FQ2s4RM0QwSvleU/8LMzrf3L2Na7+QUH8mViTxGLX9lGKpNKmtyFiZDtVvfAOYU/+xe1rJi qK5ZmB7ngkURcChgHx5bRdCCE3cuMZvA0iG12OxYlNBSFZ2LBmbUCwU3TOWLqpcW/T2PdsEUu1Uz c8Csovjm1Rr6Sg2tQ0TrSwqXLpBk2y4tC/KZQpjJR8M= ) ; keytag 4816 gay. 7200 IN DNSKEY ( 256 3 8 AwEAAdDuKFv2/GEbW978KO4fHY184/Xl/znnQKp2JU+5UV2ZAfTzZnzbN3aVlM4AWk3vZaJ9HjNr kNOu7y5LWtbCNvWX8ZHoPYWf2SvJPn0msKJX9G92hIOu4xAI0BWoXXA6sH7+s5158Gig9h42ZzjS k8Syvsvaqid/3d94GlssmSeDgZpzYQ9aEu7b9kuUnKBWqQgsOu4PU8WeC/WTrrPqjvE= ) ; keytag 36750 gay. 7200 IN RRSIG ( DNSKEY 8 1 7200 20250910130338 20250827125633 4816 gay. qTMhxojKzjlv4PrFPxZenLMyGkI7u/s6XEINloicFTzgnwXpQgxK79SZHP2nCKed+VtUuJPUgKhq i4eZi12BqcZmgBosIBc0NUFEwHNvDuUC8zxcFZgfrI/3lz23msoY/vWp0E42F5kmjDpke6siWur3 EP6qYeBKpEdsIwWfhIy/Hm9JOXmBiZeOqUwib9vu0wLtQTuw98LgI+jslRhLj2A8yRdyd5yMiaDj dyDGH3eFjp2w5LKHd1a/qZVgXlm+HnzIVTBaBiVFWMIzRR2Y00vKWJsnPf2fhcUwsNoazJy3qSIs wMbQzEiDi2pnrsQjkfljf54WWKUBgmRKkFnDjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gay
	`gay. 7200 IN DNSKEY ( 257 3 8 AwEAAblRpFzARELClAEIwyRjQpfvfs7OCJaR4TK+D8KeKGNlofFW7Mdgd1uCNCO0VqKPl3Eiorj/ 4JAhpfDvLx6fUV1065iH3Wg6Wp+hwghEKI3vx8gPyfhdQex7MHJ0ygtTLJ4ilv3amFvs3vWFuUY9 a77p9FQ2s4RM0QwSvleU/8LMzrf3L2Na7+QUH8mViTxGLX9lGKpNKmtyFiZDtVvfAOYU/+xe1rJi qK5ZmB7ngkURcChgHx5bRdCCE3cuMZvA0iG12OxYlNBSFZ2LBmbUCwU3TOWLqpcW/T2PdsEUu1Uz c8Csovjm1Rr6Sg2tQ0TrSwqXLpBk2y4tC/KZQpjJR8M= ) ; keytag 4816`
	`gay. 7200 IN DNSKEY ( 256 3 8 AwEAAdDuKFv2/GEbW978KO4fHY184/Xl/znnQKp2JU+5UV2ZAfTzZnzbN3aVlM4AWk3vZaJ9HjNr kNOu7y5LWtbCNvWX8ZHoPYWf2SvJPn0msKJX9G92hIOu4xAI0BWoXXA6sH7+s5158Gig9h42ZzjS k8Syvsvaqid/3d94GlssmSeDgZpzYQ9aEu7b9kuUnKBWqQgsOu4PU8WeC/WTrrPqjvE= ) ; keytag 36750`
	DNSKEY=4816/SEP is now in the chain-of-trust
	DS=4816/SHA-256 verifies DNSKEY=4816/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gay. 7200 IN RRSIG ( DNSKEY 8 1 7200 20250910130338 20250827125633 4816 gay. qTMhxojKzjlv4PrFPxZenLMyGkI7u/s6XEINloicFTzgnwXpQgxK79SZHP2nCKed+VtUuJPUgKhq i4eZi12BqcZmgBosIBc0NUFEwHNvDuUC8zxcFZgfrI/3lz23msoY/vWp0E42F5kmjDpke6siWur3 EP6qYeBKpEdsIwWfhIy/Hm9JOXmBiZeOqUwib9vu0wLtQTuw98LgI+jslRhLj2A8yRdyd5yMiaDj dyDGH3eFjp2w5LKHd1a/qZVgXlm+HnzIVTBaBiVFWMIzRR2Y00vKWJsnPf2fhcUwsNoazJy3qSIs wMbQzEiDi2pnrsQjkfljf54WWKUBgmRKkFnDjw== )`
	RRSIG=4816 and DNSKEY=4816/SEP verifies the DNSKEY RRset
	DNSKEY=36750 is now in the chain-of-trust
	Query to b.nic.gay for off.gay/A
	Received 644 bytes from 37.209.194.10
	;; Response received from [37.209.194.10] 644 octets ;; HEADER SECTION ;; id = 34751 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; off.gay. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) off.gay. 3600 IN NS jocelyn.ns.cloudflare.com. off.gay. 3600 IN NS skip.ns.cloudflare.com. s9uhr6ve101568o792eiuh7nruaf79nd.gay. 900 IN NSEC3 ( 1 1 0 - san4luioj31t1aqaap2n0tjldlah09sn NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY ) s9uhr6ve101568o792eiuh7nruaf79nd.gay. 900 IN RRSIG ( NSEC3 8 2 900 20250907145719 20250824143428 36750 gay. QRf2YzNGOQQmmQHA/d1Sq99RqChdeLwR9EiC//ZcUpNwqaW68indWNXiRsixFkGHc3ayORv4D0uM yrVWPcFmCH9c1zX99XJd/6eRcC09c7/63p9TTwHew2avgsGWn1L2g/Axynm27yqjfrpbkvIECY8Q KBH4vP1CPVp/3au2slsak9Eo3xw+p2ZNJ4n74NrrQKlqn6cUSRhswR3fLwYQ9A== ) ojh27m79f5keiibcpr2ifar7re63e8m2.gay. 900 IN NSEC3 ( 1 1 0 - ok7j8bs4em9v6ag4m7u2o6kp4u590oqv NS DS RRSIG ) ojh27m79f5keiibcpr2ifar7re63e8m2.gay. 900 IN RRSIG ( NSEC3 8 2 900 20250909130112 20250826125548 36750 gay. t8W9AriZx9ZTgRfUglNB7bwnUJUSJZE2rIrEgfLl2oibn9FIYtSJIsYoy066n93EpDsga3zLDyG/ BSGH5AUSVuxxaR6ld+E+bwk3MsFjlOjwqCAB1SBGkUJERu+Whay7GS9VNCPxPeVWOz/vF4Ucl82k rSOb8+XJ8rNDXGGWmBMj6HEOrfXAd5Ks8O2BD1Ua1Oa0xhG8e2i3FQ9qzENP2A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to x.nic.gay for off.gay/DNSKEY
	Received 644 bytes from 156.154.172.82
	;; Response received from [156.154.172.82] 644 octets ;; HEADER SECTION ;; id = 33229 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; off.gay. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) off.gay. 3600 IN NS jocelyn.ns.cloudflare.com. off.gay. 3600 IN NS skip.ns.cloudflare.com. s9uhr6ve101568o792eiuh7nruaf79nd.gay. 900 IN NSEC3 ( 1 1 0 - san4luioj31t1aqaap2n0tjldlah09sn NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY ) ojh27m79f5keiibcpr2ifar7re63e8m2.gay. 900 IN NSEC3 ( 1 1 0 - ok7j8bs4em9v6ag4m7u2o6kp4u590oqv NS DS RRSIG ) ojh27m79f5keiibcpr2ifar7re63e8m2.gay. 900 IN RRSIG ( NSEC3 8 2 900 20250909130112 20250826125548 36750 gay. t8W9AriZx9ZTgRfUglNB7bwnUJUSJZE2rIrEgfLl2oibn9FIYtSJIsYoy066n93EpDsga3zLDyG/ BSGH5AUSVuxxaR6ld+E+bwk3MsFjlOjwqCAB1SBGkUJERu+Whay7GS9VNCPxPeVWOz/vF4Ucl82k rSOb8+XJ8rNDXGGWmBMj6HEOrfXAd5Ks8O2BD1Ua1Oa0xhG8e2i3FQ9qzENP2A== ) s9uhr6ve101568o792eiuh7nruaf79nd.gay. 900 IN RRSIG ( NSEC3 8 2 900 20250907145719 20250824143428 36750 gay. QRf2YzNGOQQmmQHA/d1Sq99RqChdeLwR9EiC//ZcUpNwqaW68indWNXiRsixFkGHc3ayORv4D0uM yrVWPcFmCH9c1zX99XJd/6eRcC09c7/63p9TTwHew2avgsGWn1L2g/Axynm27yqjfrpbkvIECY8Q KBH4vP1CPVp/3au2slsak9Eo3xw+p2ZNJ4n74NrrQKlqn6cUSRhswR3fLwYQ9A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone off.gay

off.gay

	Checking DS between gay and off.gay
	Query to z.nic.gay for off.gay/DS
	Received 842 bytes from 156.154.174.82
	;; Response received from [156.154.174.82] 842 octets ;; HEADER SECTION ;; id = 29255 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; off.gay. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gay. 900 IN SOA ( a.nic.gay. admin.tldns.godaddy. 1756554910 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 1800 ;minimum ) s9uhr6ve101568o792eiuh7nruaf79nd.gay. 900 IN NSEC3 ( 1 1 0 - san4luioj31t1aqaap2n0tjldlah09sn NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY ) ojh27m79f5keiibcpr2ifar7re63e8m2.gay. 900 IN NSEC3 ( 1 1 0 - ok7j8bs4em9v6ag4m7u2o6kp4u590oqv NS DS RRSIG ) gay. 900 IN RRSIG ( SOA 8 1 900 20250913122004 20250830112004 36750 gay. Witv5gxNaoIJyKMpUP80xHLY0n5lVizNd1meix2CHlJwlj1y83gkZDuQkWKVYT5RPj6bnGPl5mBu K2kjTwL/rcpGQdwVhHfmQIzbz/vLfoLR2BoTTu0OrBy1YxC+kT5gRMZa6YfyR2MzjbiQLuqJWHDd AyDJlITTdBB0qo5v47NNp1AZQEzZFEAjMekbmIxAstL6bhwpms2iE8kvV/wzkA== ) ojh27m79f5keiibcpr2ifar7re63e8m2.gay. 900 IN RRSIG ( NSEC3 8 2 900 20250909130112 20250826125548 36750 gay. t8W9AriZx9ZTgRfUglNB7bwnUJUSJZE2rIrEgfLl2oibn9FIYtSJIsYoy066n93EpDsga3zLDyG/ BSGH5AUSVuxxaR6ld+E+bwk3MsFjlOjwqCAB1SBGkUJERu+Whay7GS9VNCPxPeVWOz/vF4Ucl82k rSOb8+XJ8rNDXGGWmBMj6HEOrfXAd5Ks8O2BD1Ua1Oa0xhG8e2i3FQ9qzENP2A== ) s9uhr6ve101568o792eiuh7nruaf79nd.gay. 900 IN RRSIG ( NSEC3 8 2 900 20250907145719 20250824143428 36750 gay. QRf2YzNGOQQmmQHA/d1Sq99RqChdeLwR9EiC//ZcUpNwqaW68indWNXiRsixFkGHc3ayORv4D0uM yrVWPcFmCH9c1zX99XJd/6eRcC09c7/63p9TTwHew2avgsGWn1L2g/Axynm27yqjfrpbkvIECY8Q KBH4vP1CPVp/3au2slsak9Eo3xw+p2ZNJ4n74NrrQKlqn6cUSRhswR3fLwYQ9A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for off.gay in the gay zone
	Query to skip.ns.cloudflare.com for off.gay/DNSKEY
	Received 101 bytes from 172.64.33.233
	;; Response received from [172.64.33.233] 101 octets ;; HEADER SECTION ;; id = 16905 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; off.gay. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) off.gay. 1800 IN SOA ( jocelyn.ns.cloudflare.com. dns.cloudflare.com. 2379880972 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to skip.ns.cloudflare.com for off.gay/A
	Received 68 bytes from 108.162.193.233
	;; Response received from [108.162.193.233] 68 octets ;; HEADER SECTION ;; id = 56045 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; off.gay. IN A ;; ANSWER SECTION (2 records) off.gay. 300 IN A 172.67.199.40 off.gay. 300 IN A 104.21.92.223 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	skip.ns.cloudflare.com is authoritative for off.gay
	Query to jocelyn.ns.cloudflare.com for off.gay/SOA
	Received 101 bytes from 108.162.192.174
	;; Response received from [108.162.192.174] 101 octets ;; HEADER SECTION ;; id = 11266 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; off.gay. IN SOA ;; ANSWER SECTION (1 record) off.gay. 1800 IN SOA ( jocelyn.ns.cloudflare.com. dns.cloudflare.com. 2379880972 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to skip.ns.cloudflare.com for off.gay/A
	Received 68 bytes from 173.245.59.233
	;; Response received from [173.245.59.233] 68 octets ;; HEADER SECTION ;; id = 37303 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; off.gay. IN A ;; ANSWER SECTION (2 records) off.gay. 300 IN A 104.21.92.223 off.gay. 300 IN A 172.67.199.40 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	off.gay A RR has value 104.21.92.223
	off.gay A RR has value 172.67.199.40
	No RRSIGs found

off.gay

	Query to jocelyn.ns.cloudflare.com for off.gay/A
	Received 68 bytes from 108.162.192.174
	;; Response received from [108.162.192.174] 68 octets ;; HEADER SECTION ;; id = 41233 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; off.gay. IN A ;; ANSWER SECTION (2 records) off.gay. 300 IN A 104.21.92.223 off.gay. 300 IN A 172.67.199.40 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	jocelyn.ns.cloudflare.com is authoritative for off.gay
	Query to jocelyn.ns.cloudflare.com for off.gay/A
	Received 68 bytes from 108.162.192.174
	;; Response received from [108.162.192.174] 68 octets ;; HEADER SECTION ;; id = 46097 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; off.gay. IN A ;; ANSWER SECTION (2 records) off.gay. 300 IN A 104.21.92.223 off.gay. 300 IN A 172.67.199.40 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	off.gay A RR has value 104.21.92.223
	off.gay A RR has value 172.67.199.40
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test off.gay at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: