DNSSEC Debugger - shorturl.at

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-02 03:58:18 UTC

Analyzing DNSSEC problems for shorturl.at

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1139 octets ;; HEADER SECTION ;; id = 27878 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260920000000 20260830000000 20326 . PvfCYsLIvqwE52D32Fx+zL43nm8ojP/W3MbsbUu4IsBqewjFRvAv00Mp2ehX2IyjRUV2fhtHPFzL 3G0PK9GucRv7Ab97RauaOiVJnAqqUjELQR4HedSNVnprjF8UUmRiXPOTXAD/WEWLAk9MOOcwF+xK eB4f8spcLMIVDA9r32afCpu2lhs/3rwDD687GCz2HN5y4/Ew5Wi8ZSD3TMtbaSoGOb73Zpzw0XqB k9PqBVEZPcR2bZkgPRQZRYz8Pwga658J1hhw6qn3eocf4WluAldJGd2wYvXLUrwdZESnYac0aq8O Y2t3Z2MYoX1JnLQttItxyltVQIv8AoQnUMet/w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to b.root-servers.net for shorturl.at/A
	Received 860 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 860 octets ;; HEADER SECTION ;; id = 55217 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; shorturl.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) at. 172800 IN NS d.ns.at. at. 172800 IN NS j.ns.at. at. 172800 IN NS n.ns.at. at. 172800 IN NS r.ns.at. at. 172800 IN NS u.ns.at. at. 172800 IN NS ns1.univie.ac.at. at. 172800 IN NS ns2.univie.ac.at. at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e ) at. 86400 IN DS ( 60960 13 2 a00073dd75c499465fe829381ce3f5488fc353d06e68c7f90a04d26a0d71a694 ) at. 86400 IN RRSIG ( DS 8 1 86400 20260914200000 20260901190000 57780 . QUIUrA3TEdYbyKG7Y7cg1WYsnayiVlMVjb6zqF7A7e4OOlwiPjerpljrEHPslMYj9f0C34TR89tV QkzK3HyRF1eSe841J4hcs8s5LyAStPk5W6id0U4DizTu46kJnq/C/M5Un6yxCeGCDL0CKI2u/n3z D3H34i1I1xMFOFi1t6mC2qJ4XavtDTLwna1BuCK3SYPZFYpQlKkCRjuyd65canAE+AyP+FQkHwf2 GGDk/4lqA8g8w7akAQ97NuuqcusAvuBRy2Yf8j8fp0pWAAtScm08kxhjZT1yT7FmpzqAgf5YtJIf PQCB5IuQwWcomfbFH1dFmxKGubn2fCKAJTDPqg== ) ;; ADDITIONAL SECTION (15 records) d.ns.at. 172800 IN A 81.91.161.98 d.ns.at. 172800 IN AAAA 2a02:568:20:1::d j.ns.at. 172800 IN A 194.146.106.50 j.ns.at. 172800 IN AAAA 2001:67c:1010:12::53 n.ns.at. 172800 IN A 81.91.173.130 n.ns.at. 172800 IN AAAA 2a02:568:281::130 r.ns.at. 172800 IN A 194.0.25.10 r.ns.at. 172800 IN AAAA 2001:678:20::10 u.ns.at. 172800 IN A 185.102.12.2 u.ns.at. 172800 IN AAAA 2a02:850:ffff::2 ns1.univie.ac.at. 172800 IN A 78.104.144.2 ns1.univie.ac.at. 172800 IN AAAA 2001:628:2030:4301::2 ns2.univie.ac.at. 172800 IN A 192.92.125.2 ns2.univie.ac.at. 172800 IN AAAA 2001:678:1c::2 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for at/DNSKEY
	Received 855 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 855 octets ;; HEADER SECTION ;; id = 17556 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; at. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) at. 172800 IN NS r.ns.at. at. 172800 IN NS d.ns.at. at. 172800 IN NS ns1.univie.ac.at. at. 172800 IN NS j.ns.at. at. 172800 IN NS ns2.univie.ac.at. at. 172800 IN NS n.ns.at. at. 172800 IN NS u.ns.at. at. 86400 IN DS ( 60960 13 2 a00073dd75c499465fe829381ce3f5488fc353d06e68c7f90a04d26a0d71a694 ) at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e ) at. 86400 IN RRSIG ( DS 8 1 86400 20260914200000 20260901190000 57780 . QUIUrA3TEdYbyKG7Y7cg1WYsnayiVlMVjb6zqF7A7e4OOlwiPjerpljrEHPslMYj9f0C34TR89tV QkzK3HyRF1eSe841J4hcs8s5LyAStPk5W6id0U4DizTu46kJnq/C/M5Un6yxCeGCDL0CKI2u/n3z D3H34i1I1xMFOFi1t6mC2qJ4XavtDTLwna1BuCK3SYPZFYpQlKkCRjuyd65canAE+AyP+FQkHwf2 GGDk/4lqA8g8w7akAQ97NuuqcusAvuBRy2Yf8j8fp0pWAAtScm08kxhjZT1yT7FmpzqAgf5YtJIf PQCB5IuQwWcomfbFH1dFmxKGubn2fCKAJTDPqg== ) ;; ADDITIONAL SECTION (15 records) ns2.univie.ac.at. 172800 IN A 192.92.125.2 ns1.univie.ac.at. 172800 IN A 78.104.144.2 u.ns.at. 172800 IN A 185.102.12.2 r.ns.at. 172800 IN A 194.0.25.10 n.ns.at. 172800 IN A 81.91.173.130 j.ns.at. 172800 IN A 194.146.106.50 d.ns.at. 172800 IN A 81.91.161.98 ns2.univie.ac.at. 172800 IN AAAA 2001:678:1c::2 ns1.univie.ac.at. 172800 IN AAAA 2001:628:2030:4301::2 u.ns.at. 172800 IN AAAA 2a02:850:ffff::2 r.ns.at. 172800 IN AAAA 2001:678:20::10 n.ns.at. 172800 IN AAAA 2a02:568:281::130 j.ns.at. 172800 IN AAAA 2001:67c:1010:12::53 d.ns.at. 172800 IN AAAA 2a02:568:20:1::d ;; { "EDNS-VERSION": 0 }
	Found child zone at

	Checking DS between . and at
	Query to d.root-servers.net for at/DS
	Received 414 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 414 octets ;; HEADER SECTION ;; id = 18906 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; at. IN DS ;; ANSWER SECTION (3 records) at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e ) at. 86400 IN DS ( 60960 13 2 a00073dd75c499465fe829381ce3f5488fc353d06e68c7f90a04d26a0d71a694 ) at. 86400 IN RRSIG ( DS 8 1 86400 20260914200000 20260901190000 57780 . QUIUrA3TEdYbyKG7Y7cg1WYsnayiVlMVjb6zqF7A7e4OOlwiPjerpljrEHPslMYj9f0C34TR89tV QkzK3HyRF1eSe841J4hcs8s5LyAStPk5W6id0U4DizTu46kJnq/C/M5Un6yxCeGCDL0CKI2u/n3z D3H34i1I1xMFOFi1t6mC2qJ4XavtDTLwna1BuCK3SYPZFYpQlKkCRjuyd65canAE+AyP+FQkHwf2 GGDk/4lqA8g8w7akAQ97NuuqcusAvuBRy2Yf8j8fp0pWAAtScm08kxhjZT1yT7FmpzqAgf5YtJIf PQCB5IuQwWcomfbFH1dFmxKGubn2fCKAJTDPqg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for at in the . zone
	DS=1253/SHA-256 has algorithm ECDSAP256SHA256
	DS=60960/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`at. 86400 IN RRSIG ( DS 8 1 86400 20260914200000 20260901190000 57780 . QUIUrA3TEdYbyKG7Y7cg1WYsnayiVlMVjb6zqF7A7e4OOlwiPjerpljrEHPslMYj9f0C34TR89tV QkzK3HyRF1eSe841J4hcs8s5LyAStPk5W6id0U4DizTu46kJnq/C/M5Un6yxCeGCDL0CKI2u/n3z D3H34i1I1xMFOFi1t6mC2qJ4XavtDTLwna1BuCK3SYPZFYpQlKkCRjuyd65canAE+AyP+FQkHwf2 GGDk/4lqA8g8w7akAQ97NuuqcusAvuBRy2Yf8j8fp0pWAAtScm08kxhjZT1yT7FmpzqAgf5YtJIf PQCB5IuQwWcomfbFH1dFmxKGubn2fCKAJTDPqg== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=1253/SHA-256 is now in the chain-of-trust
	DS=60960/SHA-256 is now in the chain-of-trust
	`at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e )`
	`at. 86400 IN DS ( 60960 13 2 a00073dd75c499465fe829381ce3f5488fc353d06e68c7f90a04d26a0d71a694 )`
	Query to j.ns.at for at/DNSKEY
	Received 449 bytes from 194.146.106.50
	;; Response received from [194.146.106.50] 449 octets ;; HEADER SECTION ;; id = 9843 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; at. IN DNSKEY ;; ANSWER SECTION (5 records) at. 3600 IN DNSKEY ( 256 3 13 Yye3yFQfyzze/CB9a+89JY/Zyf7L9gEXx9dI72oHyNU1mrMXdKU69LXiNAl9xnW+7BEFjO2NaxoI +h3F4tsF/A== ) ; keytag 8460 at. 3600 IN DNSKEY ( 257 3 13 2JRF0JhWxU1FWmhF7eY9oPu4XkUdqPDVNi3tm6uXJ9DxltWjAS2JMBdAmm6ehsMdlsvsMV+cz+7D ZGMzNhbX1g== ) ; keytag 1253 at. 3600 IN DNSKEY ( 257 3 13 cENbBW6K638g3qhCIb8Ca2Ib++VQKxjaLBFE8Cb57+IixxSBgkLHOGlM8vwlrYDJdb8zgenq16zj ryvvKuRfsQ== ) ; keytag 60960 at. 3600 IN DNSKEY ( 256 3 13 8AqJCm3TBuUqMy9FTWVMXdeJnZuSWLsR7vMYmn1Mm2gOUwqe0xt7MS4JpwBprgcxf/NCpvbouI6t 2SgPb+d3ag== ) ; keytag 42076 at. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260910225150 20260827090119 60960 at. QOzFemRWN/ANSnA8NNhW/47kFVVl4ugpBfpRL0O/gECkGnLBNlYAHeUZPeDyii+H/aZDVdSpSSUI qN6VbEJpUw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for at
	`at. 3600 IN DNSKEY ( 256 3 13 Yye3yFQfyzze/CB9a+89JY/Zyf7L9gEXx9dI72oHyNU1mrMXdKU69LXiNAl9xnW+7BEFjO2NaxoI +h3F4tsF/A== ) ; keytag 8460`
	`at. 3600 IN DNSKEY ( 257 3 13 2JRF0JhWxU1FWmhF7eY9oPu4XkUdqPDVNi3tm6uXJ9DxltWjAS2JMBdAmm6ehsMdlsvsMV+cz+7D ZGMzNhbX1g== ) ; keytag 1253`
	`at. 3600 IN DNSKEY ( 257 3 13 cENbBW6K638g3qhCIb8Ca2Ib++VQKxjaLBFE8Cb57+IixxSBgkLHOGlM8vwlrYDJdb8zgenq16zj ryvvKuRfsQ== ) ; keytag 60960`
	`at. 3600 IN DNSKEY ( 256 3 13 8AqJCm3TBuUqMy9FTWVMXdeJnZuSWLsR7vMYmn1Mm2gOUwqe0xt7MS4JpwBprgcxf/NCpvbouI6t 2SgPb+d3ag== ) ; keytag 42076`
	DNSKEY=1253/SEP is now in the chain-of-trust
	DS=1253/SHA-256 verifies DNSKEY=1253/SEP
	DNSKEY=60960/SEP is now in the chain-of-trust
	DS=60960/SHA-256 verifies DNSKEY=60960/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`at. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260910225150 20260827090119 60960 at. QOzFemRWN/ANSnA8NNhW/47kFVVl4ugpBfpRL0O/gECkGnLBNlYAHeUZPeDyii+H/aZDVdSpSSUI qN6VbEJpUw== )`
	RRSIG=60960 and DNSKEY=60960/SEP verifies the DNSKEY RRset
	DNSKEY=8460 is now in the chain-of-trust
	DNSKEY=42076 is now in the chain-of-trust
	Query to ns2.univie.ac.at for shorturl.at/A
	Received 450 bytes from 192.92.125.2
	;; Response received from [192.92.125.2] 450 octets ;; HEADER SECTION ;; id = 10682 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; shorturl.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) shorturl.at. 10800 IN NS mia.ns.cloudflare.com. shorturl.at. 10800 IN NS jason.ns.cloudflare.com. fjscbioio98ccv4od6ka4d7oh5bgrn00.at. 10800 IN NSEC3 ( 1 1 0 - fjsj3n30b4jhq6nnjb7cela8fntkneg3 NS SOA RRSIG DNSKEY NSEC3PARAM ) fjscbioio98ccv4od6ka4d7oh5bgrn00.at. 10800 IN RRSIG ( NSEC3 13 2 10800 20260915183338 20260901030119 42076 at. c1wK+ZfFSKCTJU3N3tIu5IR26H16glQgs6eWvY0SFfrjU2eLI0vAFoDvT1iHjpY2H6kG0hFLdaYv PHng+JXZaA== ) f1s0hdbdjmar8r0ahq7mh5dg5eu7jjq2.at. 10800 IN NSEC3 ( 1 1 0 - f1sb0r7ukk54ul5n9a9b0uokveikj8po TXT RRSIG ) f1s0hdbdjmar8r0ahq7mh5dg5eu7jjq2.at. 10800 IN RRSIG ( NSEC3 13 2 10800 20260912004937 20260829100120 42076 at. sESmJtZldPrXZxNGNf0jzgdgU+agrmWw21TJJOHvLpQyQIVpEifzb58NSk3PKSYqrtZnKlo02nVF wM3Nurgsig== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n.ns.at for shorturl.at/DNSKEY
	Received 450 bytes from 81.91.173.130
	;; Response received from [81.91.173.130] 450 octets ;; HEADER SECTION ;; id = 51517 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; shorturl.at. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) shorturl.at. 10800 IN NS mia.ns.cloudflare.com. shorturl.at. 10800 IN NS jason.ns.cloudflare.com. fjscbioio98ccv4od6ka4d7oh5bgrn00.at. 10800 IN NSEC3 ( 1 1 0 - fjsj3n30b4jhq6nnjb7cela8fntkneg3 NS SOA RRSIG DNSKEY NSEC3PARAM ) f1s0hdbdjmar8r0ahq7mh5dg5eu7jjq2.at. 10800 IN NSEC3 ( 1 1 0 - f1sb0r7ukk54ul5n9a9b0uokveikj8po TXT RRSIG ) fjscbioio98ccv4od6ka4d7oh5bgrn00.at. 10800 IN RRSIG ( NSEC3 13 2 10800 20260915183338 20260901030119 42076 at. c1wK+ZfFSKCTJU3N3tIu5IR26H16glQgs6eWvY0SFfrjU2eLI0vAFoDvT1iHjpY2H6kG0hFLdaYv PHng+JXZaA== ) f1s0hdbdjmar8r0ahq7mh5dg5eu7jjq2.at. 10800 IN RRSIG ( NSEC3 13 2 10800 20260912004937 20260829100120 42076 at. sESmJtZldPrXZxNGNf0jzgdgU+agrmWw21TJJOHvLpQyQIVpEifzb58NSk3PKSYqrtZnKlo02nVF wM3Nurgsig== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone shorturl.at

shorturl.at

	Checking DS between at and shorturl.at
	Query to d.ns.at for shorturl.at/DS
	Received 560 bytes from 81.91.161.98
	;; Response received from [81.91.161.98] 560 octets ;; HEADER SECTION ;; id = 40818 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; shorturl.at. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fjscbioio98ccv4od6ka4d7oh5bgrn00.at. 10800 IN NSEC3 ( 1 1 0 - fjsj3n30b4jhq6nnjb7cela8fntkneg3 NS SOA RRSIG DNSKEY NSEC3PARAM ) fjscbioio98ccv4od6ka4d7oh5bgrn00.at. 10800 IN RRSIG ( NSEC3 13 2 10800 20260915183338 20260901030119 42076 at. c1wK+ZfFSKCTJU3N3tIu5IR26H16glQgs6eWvY0SFfrjU2eLI0vAFoDvT1iHjpY2H6kG0hFLdaYv PHng+JXZaA== ) at. 10800 IN SOA ( dns.nic.at. domain-admin.univie.ac.at. 1788318003 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) at. 10800 IN RRSIG ( SOA 13 1 172800 20260916041000 20260902020120 42076 at. 98DsuySQYWRYgokAMQ03gnXMa86D82PVTpoX/NB3X14RT2YPaCNJ9Zl+CgE6RmJrT1LcW4PkViWz HsuaQRJoMQ== ) f1s0hdbdjmar8r0ahq7mh5dg5eu7jjq2.at. 10800 IN NSEC3 ( 1 1 0 - f1sb0r7ukk54ul5n9a9b0uokveikj8po TXT RRSIG ) f1s0hdbdjmar8r0ahq7mh5dg5eu7jjq2.at. 10800 IN RRSIG ( NSEC3 13 2 10800 20260912004937 20260829100120 42076 at. sESmJtZldPrXZxNGNf0jzgdgU+agrmWw21TJJOHvLpQyQIVpEifzb58NSk3PKSYqrtZnKlo02nVF wM3Nurgsig== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for shorturl.at in the at zone
	Query to mia.ns.cloudflare.com for shorturl.at/DNSKEY
	Received 103 bytes from 172.64.32.200
	;; Response received from [172.64.32.200] 103 octets ;; HEADER SECTION ;; id = 2511 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; shorturl.at. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) shorturl.at. 1800 IN SOA ( jason.ns.cloudflare.com. dns.cloudflare.com. 2411828278 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to jason.ns.cloudflare.com for shorturl.at/A
	Received 88 bytes from 172.64.33.179
	;; Response received from [172.64.33.179] 88 octets ;; HEADER SECTION ;; id = 18873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; shorturl.at. IN A ;; ANSWER SECTION (3 records) shorturl.at. 300 IN A 104.26.8.129 shorturl.at. 300 IN A 172.67.69.88 shorturl.at. 300 IN A 104.26.9.129 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	jason.ns.cloudflare.com is authoritative for shorturl.at
	Query to mia.ns.cloudflare.com for shorturl.at/SOA
	Received 103 bytes from 172.64.32.200
	;; Response received from [172.64.32.200] 103 octets ;; HEADER SECTION ;; id = 35700 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; shorturl.at. IN SOA ;; ANSWER SECTION (1 record) shorturl.at. 1800 IN SOA ( jason.ns.cloudflare.com. dns.cloudflare.com. 2411828278 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to jason.ns.cloudflare.com for shorturl.at/A
	shorturl.at A RR has value 104.26.8.129
	shorturl.at A RR has value 172.67.69.88
	shorturl.at A RR has value 104.26.9.129
	No RRSIGs found

shorturl.at

	Query to mia.ns.cloudflare.com for shorturl.at/A
	Received 88 bytes from 172.64.32.200
	;; Response received from [172.64.32.200] 88 octets ;; HEADER SECTION ;; id = 27700 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; shorturl.at. IN A ;; ANSWER SECTION (3 records) shorturl.at. 300 IN A 172.67.69.88 shorturl.at. 300 IN A 104.26.8.129 shorturl.at. 300 IN A 104.26.9.129 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	mia.ns.cloudflare.com is authoritative for shorturl.at
	Query to mia.ns.cloudflare.com for shorturl.at/A
	shorturl.at A RR has value 172.67.69.88
	shorturl.at A RR has value 104.26.8.129
	shorturl.at A RR has value 104.26.9.129
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test shorturl.at at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: