DNSSEC Debugger - thingelstad.xyz

Domain Name:

Time: 2025-10-20 22:07:32 UTC

Analyzing DNSSEC problems for thingelstad.xyz

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 16021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to j.root-servers.net for thingelstad.xyz/A
	Received 683 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 683 octets ;; HEADER SECTION ;; id = 11992 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) xyz. 172800 IN NS x.nic.xyz. xyz. 172800 IN NS y.nic.xyz. xyz. 172800 IN NS z.nic.xyz. xyz. 172800 IN NS generationxyz.nic.xyz. xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 ) xyz. 86400 IN DS ( 18130 8 2 5aa5961266594cceac50949a99219fe004f130e1864a427143e9ff2e641cac6f ) xyz. 86400 IN RRSIG ( DS 8 1 86400 20251102170000 20251020160000 61809 . siedFOF1GBf050evwz/oCn2m8DQvIPuiiPRAwv+84NJ2f1lBB8unWh5R349LKdxHcmHB90GS0yb+ XR4GiC3oFdT3ykUluvN4lcQSaiEHbjXPhW4Y2cOJB2W7KEQYz/BZl3RtsgTKuauH5heoUilPyzDK IIE93KreA9AeBjweu5XEBSRuotsUUqNe5jOlf5swxKVpP16BvV+axfryGx1VCHn8Ple835mjfdUs jk2iv5Y0KAdywIcUTaO5alkO6EdZXP0sK4nAUwVmOWBbbik6oWN6QuVooE0m/PvY6JYDScEDFpeN taN8KxvtyDOOB/5b/JCLDU1ce8b4/72uczGEOg== ) ;; ADDITIONAL SECTION (9 records) x.nic.xyz. 172800 IN A 194.169.218.42 y.nic.xyz. 172800 IN A 185.24.64.42 z.nic.xyz. 172800 IN A 212.18.248.42 generationxyz.nic.xyz. 172800 IN A 212.18.249.42 x.nic.xyz. 172800 IN AAAA 2001:67c:13cc::1:42 y.nic.xyz. 172800 IN AAAA 2a04:2b00:13cc::1:42 z.nic.xyz. 172800 IN AAAA 2a04:2b00:13ee::42 generationxyz.nic.xyz. 172800 IN AAAA 2a04:2b00:13ff::42 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for xyz/DNSKEY
	Received 671 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 671 octets ;; HEADER SECTION ;; id = 51291 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xyz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) xyz. 172800 IN NS x.nic.xyz. xyz. 172800 IN NS y.nic.xyz. xyz. 172800 IN NS z.nic.xyz. xyz. 172800 IN NS generationxyz.nic.xyz. xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 ) xyz. 86400 IN DS ( 18130 8 2 5aa5961266594cceac50949a99219fe004f130e1864a427143e9ff2e641cac6f ) xyz. 86400 IN RRSIG ( DS 8 1 86400 20251102170000 20251020160000 61809 . siedFOF1GBf050evwz/oCn2m8DQvIPuiiPRAwv+84NJ2f1lBB8unWh5R349LKdxHcmHB90GS0yb+ XR4GiC3oFdT3ykUluvN4lcQSaiEHbjXPhW4Y2cOJB2W7KEQYz/BZl3RtsgTKuauH5heoUilPyzDK IIE93KreA9AeBjweu5XEBSRuotsUUqNe5jOlf5swxKVpP16BvV+axfryGx1VCHn8Ple835mjfdUs jk2iv5Y0KAdywIcUTaO5alkO6EdZXP0sK4nAUwVmOWBbbik6oWN6QuVooE0m/PvY6JYDScEDFpeN taN8KxvtyDOOB/5b/JCLDU1ce8b4/72uczGEOg== ) ;; ADDITIONAL SECTION (9 records) x.nic.xyz. 172800 IN A 194.169.218.42 x.nic.xyz. 172800 IN AAAA 2001:67c:13cc::1:42 y.nic.xyz. 172800 IN A 185.24.64.42 y.nic.xyz. 172800 IN AAAA 2a04:2b00:13cc::1:42 z.nic.xyz. 172800 IN A 212.18.248.42 z.nic.xyz. 172800 IN AAAA 2a04:2b00:13ee::42 generationxyz.nic.xyz. 172800 IN A 212.18.249.42 generationxyz.nic.xyz. 172800 IN AAAA 2a04:2b00:13ff::42 ;; { "EDNS-VERSION": 0 }
	Found child zone xyz

xyz

	Checking DS between . and xyz
	Query to g.root-servers.net for xyz/DS
	Received 415 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 415 octets ;; HEADER SECTION ;; id = 42741 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xyz. IN DS ;; ANSWER SECTION (3 records) xyz. 86400 IN DS ( 18130 8 2 5aa5961266594cceac50949a99219fe004f130e1864a427143e9ff2e641cac6f ) xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 ) xyz. 86400 IN RRSIG ( DS 8 1 86400 20251102170000 20251020160000 61809 . siedFOF1GBf050evwz/oCn2m8DQvIPuiiPRAwv+84NJ2f1lBB8unWh5R349LKdxHcmHB90GS0yb+ XR4GiC3oFdT3ykUluvN4lcQSaiEHbjXPhW4Y2cOJB2W7KEQYz/BZl3RtsgTKuauH5heoUilPyzDK IIE93KreA9AeBjweu5XEBSRuotsUUqNe5jOlf5swxKVpP16BvV+axfryGx1VCHn8Ple835mjfdUs jk2iv5Y0KAdywIcUTaO5alkO6EdZXP0sK4nAUwVmOWBbbik6oWN6QuVooE0m/PvY6JYDScEDFpeN taN8KxvtyDOOB/5b/JCLDU1ce8b4/72uczGEOg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for xyz in the . zone
	DS=18130/SHA-256 has algorithm RSASHA256
	DS=3599/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`xyz. 86400 IN RRSIG ( DS 8 1 86400 20251102170000 20251020160000 61809 . siedFOF1GBf050evwz/oCn2m8DQvIPuiiPRAwv+84NJ2f1lBB8unWh5R349LKdxHcmHB90GS0yb+ XR4GiC3oFdT3ykUluvN4lcQSaiEHbjXPhW4Y2cOJB2W7KEQYz/BZl3RtsgTKuauH5heoUilPyzDK IIE93KreA9AeBjweu5XEBSRuotsUUqNe5jOlf5swxKVpP16BvV+axfryGx1VCHn8Ple835mjfdUs jk2iv5Y0KAdywIcUTaO5alkO6EdZXP0sK4nAUwVmOWBbbik6oWN6QuVooE0m/PvY6JYDScEDFpeN taN8KxvtyDOOB/5b/JCLDU1ce8b4/72uczGEOg== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=18130/SHA-256 is now in the chain-of-trust
	DS=3599/SHA-256 is now in the chain-of-trust
	`xyz. 86400 IN DS ( 18130 8 2 5aa5961266594cceac50949a99219fe004f130e1864a427143e9ff2e641cac6f )`
	`xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 )`
	Query to y.nic.xyz for xyz/DNSKEY
	Received 747 bytes from 185.24.64.42
	;; Response received from [185.24.64.42] 747 octets ;; HEADER SECTION ;; id = 32160 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; xyz. IN DNSKEY ;; ANSWER SECTION (3 records) xyz. 3600 IN DNSKEY ( 256 3 8 AwEAAdxwKRPzwGisdCW3zq52Xauj13cM6PdRNDOlMtFKvtL3xBArrgCRFR4bS2ezEuKcjU4yEzxk m1sjoMQaSBNEevu97w7klH14kmryqD0Z4wsao1XOb7CxkkXAryTWZDnftMPvrSYb1pFjuGphgOzR GaCK1Bba7No+m+1/1X5LXNej ) ; keytag 65206 xyz. 3600 IN DNSKEY ( 257 3 8 AwEAAcvWCc5hliofE77l08zf5hFIsaIW6Miw03Ya4LiwEcJukQYm4vLBCD9HH/nyMp5fWbnCyPie rHBTw6OBJTMX49sqKazNyTLsJXPjQQHVmpM44Uodq/jdqw6WViKPu0W5oXLDhEgEwUj58LAXMi0X SGwMu9P7ghSlqScPMiO6TWX53DfekBHi53rxRom0gN8zW6m3CcukUmDzIYhRvLThjxAV0olIlpux ibzsoesMcsTdRJetwCegGAWYqmIb/nCahxw3Sir4E21ybZdNhnHtZgcfKBOwegkhc1ZP8VI/fRuB hkNyXOIoOyk5fhOGgXeOglssAi64QSyMcuxRtemZTi8= ) ; keytag 18130 xyz. 3600 IN RRSIG ( DNSKEY 8 1 3600 20251031154444 20251001141444 18130 xyz. cjbLQm77D6gBdnj1YfNf62MUEIi/48JXn53eGyy65dXreAQYefO91w9b30JivRc/QPQ80v7otGOj 0LZBCsa0a3i7ff5hNZt/NWIxGLyO/PBHYZo1Jk91dpu4QMawvm8kTQfQMM/P5+TeK/2Fja0t2nIb JXlYXOL7HjZipCRzf1wUsF6U3l0EMCKz2WgRoZsdfGBd3WPK4z+iFcWnw1pdH9m/tVTUz5UxMa/7 AMz4/GuCUt1ys18PnOjUg7D56vqyUsTrzz/lA7K9KrKT91bbEyk4AaaHmHiy+KZNu6qRQF1L6Xf+ OMy5Sb849QAkNukXlal0MRY9dWL8HE3TSYxZDw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for xyz
	`xyz. 3600 IN DNSKEY ( 256 3 8 AwEAAdxwKRPzwGisdCW3zq52Xauj13cM6PdRNDOlMtFKvtL3xBArrgCRFR4bS2ezEuKcjU4yEzxk m1sjoMQaSBNEevu97w7klH14kmryqD0Z4wsao1XOb7CxkkXAryTWZDnftMPvrSYb1pFjuGphgOzR GaCK1Bba7No+m+1/1X5LXNej ) ; keytag 65206`
	`xyz. 3600 IN DNSKEY ( 257 3 8 AwEAAcvWCc5hliofE77l08zf5hFIsaIW6Miw03Ya4LiwEcJukQYm4vLBCD9HH/nyMp5fWbnCyPie rHBTw6OBJTMX49sqKazNyTLsJXPjQQHVmpM44Uodq/jdqw6WViKPu0W5oXLDhEgEwUj58LAXMi0X SGwMu9P7ghSlqScPMiO6TWX53DfekBHi53rxRom0gN8zW6m3CcukUmDzIYhRvLThjxAV0olIlpux ibzsoesMcsTdRJetwCegGAWYqmIb/nCahxw3Sir4E21ybZdNhnHtZgcfKBOwegkhc1ZP8VI/fRuB hkNyXOIoOyk5fhOGgXeOglssAi64QSyMcuxRtemZTi8= ) ; keytag 18130`
	DNSKEY=18130/SEP is now in the chain-of-trust
	DS=18130/SHA-256 verifies DNSKEY=18130/SEP
	DS=3599/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`xyz. 3600 IN RRSIG ( DNSKEY 8 1 3600 20251031154444 20251001141444 18130 xyz. cjbLQm77D6gBdnj1YfNf62MUEIi/48JXn53eGyy65dXreAQYefO91w9b30JivRc/QPQ80v7otGOj 0LZBCsa0a3i7ff5hNZt/NWIxGLyO/PBHYZo1Jk91dpu4QMawvm8kTQfQMM/P5+TeK/2Fja0t2nIb JXlYXOL7HjZipCRzf1wUsF6U3l0EMCKz2WgRoZsdfGBd3WPK4z+iFcWnw1pdH9m/tVTUz5UxMa/7 AMz4/GuCUt1ys18PnOjUg7D56vqyUsTrzz/lA7K9KrKT91bbEyk4AaaHmHiy+KZNu6qRQF1L6Xf+ OMy5Sb849QAkNukXlal0MRY9dWL8HE3TSYxZDw== )`
	RRSIG=18130 and DNSKEY=18130/SEP verifies the DNSKEY RRset
	DNSKEY=65206 is now in the chain-of-trust
	Query to y.nic.xyz for thingelstad.xyz/A
	Received 376 bytes from 185.24.64.42
	;; Response received from [185.24.64.42] 376 octets ;; HEADER SECTION ;; id = 15361 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) thingelstad.xyz. 3600 IN NS ns-cloud-d3.googledomains.com. thingelstad.xyz. 3600 IN NS ns-cloud-d2.googledomains.com. thingelstad.xyz. 3600 IN NS ns-cloud-d4.googledomains.com. thingelstad.xyz. 3600 IN NS ns-cloud-d1.googledomains.com. thingelstad.xyz. 3600 IN DS ( 16595 8 2 c9f97a1175a343a86c14f2cc877ae2e30ff943d03a5d9487b8715c973542fd2c ) thingelstad.xyz. 3600 IN RRSIG ( DS 8 2 3600 20251031154444 20251001141444 65206 xyz. DTj6LhdvDJQ6o2Pgzu/2o+niN4yW4zu0fnnzQ0lSrjqPReK4nOnO+c9FwuyAdOBA/uzvDpYMYWNx fv3CwCBDwNAfldxQklNNsHmB/wqSSy6O5SkZLV/LJxgNsfudoR7ydqwIEd/0b5MLrz3187hy/z4j ZIlrNqhl9k2jcWY1vDw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to y.nic.xyz for thingelstad.xyz/DNSKEY
	Received 376 bytes from 185.24.64.42
	;; Response received from [185.24.64.42] 376 octets ;; HEADER SECTION ;; id = 40996 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) thingelstad.xyz. 3600 IN NS ns-cloud-d3.googledomains.com. thingelstad.xyz. 3600 IN NS ns-cloud-d2.googledomains.com. thingelstad.xyz. 3600 IN NS ns-cloud-d4.googledomains.com. thingelstad.xyz. 3600 IN NS ns-cloud-d1.googledomains.com. thingelstad.xyz. 3600 IN DS ( 16595 8 2 c9f97a1175a343a86c14f2cc877ae2e30ff943d03a5d9487b8715c973542fd2c ) thingelstad.xyz. 3600 IN RRSIG ( DS 8 2 3600 20251031154444 20251001141444 65206 xyz. DTj6LhdvDJQ6o2Pgzu/2o+niN4yW4zu0fnnzQ0lSrjqPReK4nOnO+c9FwuyAdOBA/uzvDpYMYWNx fv3CwCBDwNAfldxQklNNsHmB/wqSSy6O5SkZLV/LJxgNsfudoR7ydqwIEd/0b5MLrz3187hy/z4j ZIlrNqhl9k2jcWY1vDw= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone thingelstad.xyz

thingelstad.xyz

	Checking DS between xyz and thingelstad.xyz
	Query to y.nic.xyz for thingelstad.xyz/DS
	Received 255 bytes from 185.24.64.42
	;; Response received from [185.24.64.42] 255 octets ;; HEADER SECTION ;; id = 52962 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN DS ;; ANSWER SECTION (2 records) thingelstad.xyz. 3600 IN DS ( 16595 8 2 c9f97a1175a343a86c14f2cc877ae2e30ff943d03a5d9487b8715c973542fd2c ) thingelstad.xyz. 3600 IN RRSIG ( DS 8 2 3600 20251031154444 20251001141444 65206 xyz. DTj6LhdvDJQ6o2Pgzu/2o+niN4yW4zu0fnnzQ0lSrjqPReK4nOnO+c9FwuyAdOBA/uzvDpYMYWNx fv3CwCBDwNAfldxQklNNsHmB/wqSSy6O5SkZLV/LJxgNsfudoR7ydqwIEd/0b5MLrz3187hy/z4j ZIlrNqhl9k2jcWY1vDw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for thingelstad.xyz in the xyz zone
	DS=16595/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`thingelstad.xyz. 3600 IN RRSIG ( DS 8 2 3600 20251031154444 20251001141444 65206 xyz. DTj6LhdvDJQ6o2Pgzu/2o+niN4yW4zu0fnnzQ0lSrjqPReK4nOnO+c9FwuyAdOBA/uzvDpYMYWNx fv3CwCBDwNAfldxQklNNsHmB/wqSSy6O5SkZLV/LJxgNsfudoR7ydqwIEd/0b5MLrz3187hy/z4j ZIlrNqhl9k2jcWY1vDw= )`
	RRSIG=65206 and DNSKEY=65206 verifies the DS RRset
	DS=16595/SHA-256 is now in the chain-of-trust
	`thingelstad.xyz. 3600 IN DS ( 16595 8 2 c9f97a1175a343a86c14f2cc877ae2e30ff943d03a5d9487b8715c973542fd2c )`
	Query to ns-cloud-d4.googledomains.com for thingelstad.xyz/DNSKEY
	Received 771 bytes from 216.239.38.109
	;; Response received from [216.239.38.109] 771 octets ;; HEADER SECTION ;; id = 63757 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN DNSKEY ;; ANSWER SECTION (3 records) thingelstad.xyz. 300 IN DNSKEY ( 256 3 8 AwEAAbMBC8qVYiPe3w+GOeWpSfzBLr7MgLKNfGpDpPUADQj95Hpb/26HfQu5vnnYSBhatsNfROKT GZENTaTTcGgKcF3a83SnTmIQiqg4VS54BL8U+lcjxEuYUbiY/bzDtS8b6L42Mx35ZA9Yo22EIbl8 gwyFXuHHSXkzDcykivt5K40p ) ; keytag 18406 thingelstad.xyz. 300 IN DNSKEY ( 257 3 8 AwEAAaioan2x2ZdibSbKWmldFVo6qEX8c5GxKal5fo+wsm06dAFPC7fPiaZj4sS50n6jy3axjhBJ U5D0KjfcOtiz1nUgs7bRb1OmY+FiKtBtImKJG0tv1xvjRWmjtkZOrasosBIL2HpHKl9Nyk9LNKhm dLE8iDp8kdb90+YLA1mj/Pldo0OM5FV54itHNuXWcTEObjhw//yTLxBmQSvggzG3PVF91xs2Mm7z tTPCJzoXJkg99ubSDa7ikQb6LtcLrHUyM6EQgbG7IUFzQw7oO1D5NijMhMA3CtWXLlg9iq2No2Sl ObXH8EkvPvkBXslIm9NFbIK31Q/BHTQh0lCnmPsFu+s= ) ; keytag 16595 thingelstad.xyz. 300 IN RRSIG ( DNSKEY 8 2 300 20251110182426 20251019182426 16595 thingelstad.xyz. W6Ejt2kI+AyQNORqvEV4MEZQKR1UY2kCq4cGIwS3PralXNSGjlyTO6hK/PTavrARaLagT4daEubD XT41JZeIg/mGXNJS4ICFtxu/rZcPyJvzLoriEW34wve8EWC/SprR5ZlO25y8akEhvBu0crqaaJ+X BiSsis8uKhnzyJPBRpjl/uaCjekN7UCD06gNKr8NNisvu/E3G1SblsVtHr2XbnIztGM6KnODfjyN GgdkFBQNRwv7d63Y356BoAIUhQ43tsB3YRdLLi4RwqZY2v/z+Kjtn796PvkfOB4Ul/y5p4H8ZT4U axwNaJ82DRulinrnLt8Mr55aZqH1eIh5ozCTrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for thingelstad.xyz
	`thingelstad.xyz. 300 IN DNSKEY ( 256 3 8 AwEAAbMBC8qVYiPe3w+GOeWpSfzBLr7MgLKNfGpDpPUADQj95Hpb/26HfQu5vnnYSBhatsNfROKT GZENTaTTcGgKcF3a83SnTmIQiqg4VS54BL8U+lcjxEuYUbiY/bzDtS8b6L42Mx35ZA9Yo22EIbl8 gwyFXuHHSXkzDcykivt5K40p ) ; keytag 18406`
	`thingelstad.xyz. 300 IN DNSKEY ( 257 3 8 AwEAAaioan2x2ZdibSbKWmldFVo6qEX8c5GxKal5fo+wsm06dAFPC7fPiaZj4sS50n6jy3axjhBJ U5D0KjfcOtiz1nUgs7bRb1OmY+FiKtBtImKJG0tv1xvjRWmjtkZOrasosBIL2HpHKl9Nyk9LNKhm dLE8iDp8kdb90+YLA1mj/Pldo0OM5FV54itHNuXWcTEObjhw//yTLxBmQSvggzG3PVF91xs2Mm7z tTPCJzoXJkg99ubSDa7ikQb6LtcLrHUyM6EQgbG7IUFzQw7oO1D5NijMhMA3CtWXLlg9iq2No2Sl ObXH8EkvPvkBXslIm9NFbIK31Q/BHTQh0lCnmPsFu+s= ) ; keytag 16595`
	DNSKEY=16595/SEP is now in the chain-of-trust
	DS=16595/SHA-256 verifies DNSKEY=16595/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`thingelstad.xyz. 300 IN RRSIG ( DNSKEY 8 2 300 20251110182426 20251019182426 16595 thingelstad.xyz. W6Ejt2kI+AyQNORqvEV4MEZQKR1UY2kCq4cGIwS3PralXNSGjlyTO6hK/PTavrARaLagT4daEubD XT41JZeIg/mGXNJS4ICFtxu/rZcPyJvzLoriEW34wve8EWC/SprR5ZlO25y8akEhvBu0crqaaJ+X BiSsis8uKhnzyJPBRpjl/uaCjekN7UCD06gNKr8NNisvu/E3G1SblsVtHr2XbnIztGM6KnODfjyN GgdkFBQNRwv7d63Y356BoAIUhQ43tsB3YRdLLi4RwqZY2v/z+Kjtn796PvkfOB4Ul/y5p4H8ZT4U axwNaJ82DRulinrnLt8Mr55aZqH1eIh5ozCTrA== )`
	RRSIG=16595 and DNSKEY=16595/SEP verifies the DNSKEY RRset
	DNSKEY=18406 is now in the chain-of-trust
	Query to ns-cloud-d3.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.36.109
	;; Response received from [216.239.36.109] 576 octets ;; HEADER SECTION ;; id = 42364 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. Qgzbllz8YiykjAkghtuAgL1X45STtbb09rfUW4cPQE6kX1Km03tTGkYKDwNZ7b+LjYPW+rYvLOc+ SAJ1gtVbibFVcTzrTpoFGlVFwMRUk5KHLA+a1lbsjGdl7QTZCh93NBOWWjoifraK/UFqgfkuE2+F AsvGK+6e/2L9TWY4WqM= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f cphr4pn8rglc9dt8d3fll9gndpeooqms NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20251110182426 20251019182426 18406 thingelstad.xyz. nHAfEm4vDKKoLbmaJd9DIHATuzi7Eb/Jzj6BQd3HvkXnh0UulCAUcWfPZY9COlwzao4xvt/QeRnQ IdE2xKLDimQ+NwldPvX5BNiFigskWTMVuEczonpm75tAwLAVb0CugjtT3VqJY0J7zQRS9dRAbUt1 yFSg69e93izmt6vf4TU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-cloud-d3.googledomains.com is authoritative for thingelstad.xyz
	Found RRSIG signed by thingelstad.xyz zone
	Query to ns-cloud-d4.googledomains.com for thingelstad.xyz/SOA
	Received 579 bytes from 216.239.38.109
	;; Response received from [216.239.38.109] 579 octets ;; HEADER SECTION ;; id = 52460 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN SOA ;; ANSWER SECTION (2 records) thingelstad.xyz. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 21600 IN RRSIG ( SOA 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. Qgzbllz8YiykjAkghtuAgL1X45STtbb09rfUW4cPQE6kX1Km03tTGkYKDwNZ7b+LjYPW+rYvLOc+ SAJ1gtVbibFVcTzrTpoFGlVFwMRUk5KHLA+a1lbsjGdl7QTZCh93NBOWWjoifraK/UFqgfkuE2+F AsvGK+6e/2L9TWY4WqM= ) ;; AUTHORITY SECTION (5 records) thingelstad.xyz. 21600 IN NS ns-cloud-d2.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d1.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d3.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d4.googledomains.com. thingelstad.xyz. 21600 IN RRSIG ( NS 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. X6dI38olG/4LwOWqXtiol/gBxvQDjI4wUTaM6mfFz41MNGmGMCPf12YnjSvBvm5rmZd8hqZNHJES 32adh6YapWiyIfuOuzeOYfcqARL4+Oi0g0T7w3u1LvfKVds29/I08iU8oEwH6n0SfIgqN0VcJFQj Y5Rf1HTno8ZNxDwXu0s= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-cloud-d2.googledomains.com for thingelstad.xyz/SOA
	Received 579 bytes from 216.239.34.109
	;; Response received from [216.239.34.109] 579 octets ;; HEADER SECTION ;; id = 28317 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN SOA ;; ANSWER SECTION (2 records) thingelstad.xyz. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 21600 IN RRSIG ( SOA 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. Qgzbllz8YiykjAkghtuAgL1X45STtbb09rfUW4cPQE6kX1Km03tTGkYKDwNZ7b+LjYPW+rYvLOc+ SAJ1gtVbibFVcTzrTpoFGlVFwMRUk5KHLA+a1lbsjGdl7QTZCh93NBOWWjoifraK/UFqgfkuE2+F AsvGK+6e/2L9TWY4WqM= ) ;; AUTHORITY SECTION (5 records) thingelstad.xyz. 21600 IN NS ns-cloud-d3.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d4.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d2.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d1.googledomains.com. thingelstad.xyz. 21600 IN RRSIG ( NS 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. X6dI38olG/4LwOWqXtiol/gBxvQDjI4wUTaM6mfFz41MNGmGMCPf12YnjSvBvm5rmZd8hqZNHJES 32adh6YapWiyIfuOuzeOYfcqARL4+Oi0g0T7w3u1LvfKVds29/I08iU8oEwH6n0SfIgqN0VcJFQj Y5Rf1HTno8ZNxDwXu0s= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-cloud-d1.googledomains.com for thingelstad.xyz/SOA
	Received 579 bytes from 216.239.32.109
	;; Response received from [216.239.32.109] 579 octets ;; HEADER SECTION ;; id = 26738 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN SOA ;; ANSWER SECTION (2 records) thingelstad.xyz. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 21600 IN RRSIG ( SOA 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. Qgzbllz8YiykjAkghtuAgL1X45STtbb09rfUW4cPQE6kX1Km03tTGkYKDwNZ7b+LjYPW+rYvLOc+ SAJ1gtVbibFVcTzrTpoFGlVFwMRUk5KHLA+a1lbsjGdl7QTZCh93NBOWWjoifraK/UFqgfkuE2+F AsvGK+6e/2L9TWY4WqM= ) ;; AUTHORITY SECTION (5 records) thingelstad.xyz. 21600 IN NS ns-cloud-d4.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d2.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d3.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d1.googledomains.com. thingelstad.xyz. 21600 IN RRSIG ( NS 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. X6dI38olG/4LwOWqXtiol/gBxvQDjI4wUTaM6mfFz41MNGmGMCPf12YnjSvBvm5rmZd8hqZNHJES 32adh6YapWiyIfuOuzeOYfcqARL4+Oi0g0T7w3u1LvfKVds29/I08iU8oEwH6n0SfIgqN0VcJFQj Y5Rf1HTno8ZNxDwXu0s= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-cloud-d3.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.36.109
	;; Response received from [216.239.36.109] 576 octets ;; HEADER SECTION ;; id = 12938 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. Qgzbllz8YiykjAkghtuAgL1X45STtbb09rfUW4cPQE6kX1Km03tTGkYKDwNZ7b+LjYPW+rYvLOc+ SAJ1gtVbibFVcTzrTpoFGlVFwMRUk5KHLA+a1lbsjGdl7QTZCh93NBOWWjoifraK/UFqgfkuE2+F AsvGK+6e/2L9TWY4WqM= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f cphr4pn8rglc9dt8d3fll9gndpeooqms NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20251110182426 20251019182426 18406 thingelstad.xyz. nHAfEm4vDKKoLbmaJd9DIHATuzi7Eb/Jzj6BQd3HvkXnh0UulCAUcWfPZY9COlwzao4xvt/QeRnQ IdE2xKLDimQ+NwldPvX5BNiFigskWTMVuEczonpm75tAwLAVb0CugjtT3VqJY0J7zQRS9dRAbUt1 yFSg69e93izmt6vf4TU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. Qgzbllz8YiykjAkghtuAgL1X45STtbb09rfUW4cPQE6kX1Km03tTGkYKDwNZ7b+LjYPW+rYvLOc+ SAJ1gtVbibFVcTzrTpoFGlVFwMRUk5KHLA+a1lbsjGdl7QTZCh93NBOWWjoifraK/UFqgfkuE2+F AsvGK+6e/2L9TWY4WqM= )`
	RRSIG=18406 and DNSKEY=18406 verifies the SOA RRset

thingelstad.xyz

	Query to ns-cloud-d4.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.38.109
	;; Response received from [216.239.38.109] 576 octets ;; HEADER SECTION ;; id = 46489 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. Qgzbllz8YiykjAkghtuAgL1X45STtbb09rfUW4cPQE6kX1Km03tTGkYKDwNZ7b+LjYPW+rYvLOc+ SAJ1gtVbibFVcTzrTpoFGlVFwMRUk5KHLA+a1lbsjGdl7QTZCh93NBOWWjoifraK/UFqgfkuE2+F AsvGK+6e/2L9TWY4WqM= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f cphr4pn8rglc9dt8d3fll9gndpeooqms NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20251110182426 20251019182426 18406 thingelstad.xyz. nHAfEm4vDKKoLbmaJd9DIHATuzi7Eb/Jzj6BQd3HvkXnh0UulCAUcWfPZY9COlwzao4xvt/QeRnQ IdE2xKLDimQ+NwldPvX5BNiFigskWTMVuEczonpm75tAwLAVb0CugjtT3VqJY0J7zQRS9dRAbUt1 yFSg69e93izmt6vf4TU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-cloud-d4.googledomains.com is authoritative for thingelstad.xyz
	Found RRSIG signed by thingelstad.xyz zone
	Query to ns-cloud-d4.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.38.109
	;; Response received from [216.239.38.109] 576 octets ;; HEADER SECTION ;; id = 21122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. Qgzbllz8YiykjAkghtuAgL1X45STtbb09rfUW4cPQE6kX1Km03tTGkYKDwNZ7b+LjYPW+rYvLOc+ SAJ1gtVbibFVcTzrTpoFGlVFwMRUk5KHLA+a1lbsjGdl7QTZCh93NBOWWjoifraK/UFqgfkuE2+F AsvGK+6e/2L9TWY4WqM= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f cphr4pn8rglc9dt8d3fll9gndpeooqms NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20251110182426 20251019182426 18406 thingelstad.xyz. nHAfEm4vDKKoLbmaJd9DIHATuzi7Eb/Jzj6BQd3HvkXnh0UulCAUcWfPZY9COlwzao4xvt/QeRnQ IdE2xKLDimQ+NwldPvX5BNiFigskWTMVuEczonpm75tAwLAVb0CugjtT3VqJY0J7zQRS9dRAbUt1 yFSg69e93izmt6vf4TU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. Qgzbllz8YiykjAkghtuAgL1X45STtbb09rfUW4cPQE6kX1Km03tTGkYKDwNZ7b+LjYPW+rYvLOc+ SAJ1gtVbibFVcTzrTpoFGlVFwMRUk5KHLA+a1lbsjGdl7QTZCh93NBOWWjoifraK/UFqgfkuE2+F AsvGK+6e/2L9TWY4WqM= )`
	RRSIG=18406 and DNSKEY=18406 verifies the SOA RRset

thingelstad.xyz

	Query to ns-cloud-d2.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.34.109
	;; Response received from [216.239.34.109] 576 octets ;; HEADER SECTION ;; id = 57113 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. Qgzbllz8YiykjAkghtuAgL1X45STtbb09rfUW4cPQE6kX1Km03tTGkYKDwNZ7b+LjYPW+rYvLOc+ SAJ1gtVbibFVcTzrTpoFGlVFwMRUk5KHLA+a1lbsjGdl7QTZCh93NBOWWjoifraK/UFqgfkuE2+F AsvGK+6e/2L9TWY4WqM= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f cphr4pn8rglc9dt8d3fll9gndpeooqms NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20251110182426 20251019182426 18406 thingelstad.xyz. nHAfEm4vDKKoLbmaJd9DIHATuzi7Eb/Jzj6BQd3HvkXnh0UulCAUcWfPZY9COlwzao4xvt/QeRnQ IdE2xKLDimQ+NwldPvX5BNiFigskWTMVuEczonpm75tAwLAVb0CugjtT3VqJY0J7zQRS9dRAbUt1 yFSg69e93izmt6vf4TU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-cloud-d2.googledomains.com is authoritative for thingelstad.xyz
	Found RRSIG signed by thingelstad.xyz zone
	Query to ns-cloud-d2.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.34.109
	;; Response received from [216.239.34.109] 576 octets ;; HEADER SECTION ;; id = 22433 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. Qgzbllz8YiykjAkghtuAgL1X45STtbb09rfUW4cPQE6kX1Km03tTGkYKDwNZ7b+LjYPW+rYvLOc+ SAJ1gtVbibFVcTzrTpoFGlVFwMRUk5KHLA+a1lbsjGdl7QTZCh93NBOWWjoifraK/UFqgfkuE2+F AsvGK+6e/2L9TWY4WqM= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f cphr4pn8rglc9dt8d3fll9gndpeooqms NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20251110182426 20251019182426 18406 thingelstad.xyz. nHAfEm4vDKKoLbmaJd9DIHATuzi7Eb/Jzj6BQd3HvkXnh0UulCAUcWfPZY9COlwzao4xvt/QeRnQ IdE2xKLDimQ+NwldPvX5BNiFigskWTMVuEczonpm75tAwLAVb0CugjtT3VqJY0J7zQRS9dRAbUt1 yFSg69e93izmt6vf4TU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. Qgzbllz8YiykjAkghtuAgL1X45STtbb09rfUW4cPQE6kX1Km03tTGkYKDwNZ7b+LjYPW+rYvLOc+ SAJ1gtVbibFVcTzrTpoFGlVFwMRUk5KHLA+a1lbsjGdl7QTZCh93NBOWWjoifraK/UFqgfkuE2+F AsvGK+6e/2L9TWY4WqM= )`
	RRSIG=18406 and DNSKEY=18406 verifies the SOA RRset

thingelstad.xyz

	Query to ns-cloud-d1.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.32.109
	;; Response received from [216.239.32.109] 576 octets ;; HEADER SECTION ;; id = 24485 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. Qgzbllz8YiykjAkghtuAgL1X45STtbb09rfUW4cPQE6kX1Km03tTGkYKDwNZ7b+LjYPW+rYvLOc+ SAJ1gtVbibFVcTzrTpoFGlVFwMRUk5KHLA+a1lbsjGdl7QTZCh93NBOWWjoifraK/UFqgfkuE2+F AsvGK+6e/2L9TWY4WqM= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f cphr4pn8rglc9dt8d3fll9gndpeooqms NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20251110182426 20251019182426 18406 thingelstad.xyz. nHAfEm4vDKKoLbmaJd9DIHATuzi7Eb/Jzj6BQd3HvkXnh0UulCAUcWfPZY9COlwzao4xvt/QeRnQ IdE2xKLDimQ+NwldPvX5BNiFigskWTMVuEczonpm75tAwLAVb0CugjtT3VqJY0J7zQRS9dRAbUt1 yFSg69e93izmt6vf4TU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-cloud-d1.googledomains.com is authoritative for thingelstad.xyz
	Found RRSIG signed by thingelstad.xyz zone
	Query to ns-cloud-d1.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.32.109
	;; Response received from [216.239.32.109] 576 octets ;; HEADER SECTION ;; id = 51191 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. Qgzbllz8YiykjAkghtuAgL1X45STtbb09rfUW4cPQE6kX1Km03tTGkYKDwNZ7b+LjYPW+rYvLOc+ SAJ1gtVbibFVcTzrTpoFGlVFwMRUk5KHLA+a1lbsjGdl7QTZCh93NBOWWjoifraK/UFqgfkuE2+F AsvGK+6e/2L9TWY4WqM= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f cphr4pn8rglc9dt8d3fll9gndpeooqms NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20251110182426 20251019182426 18406 thingelstad.xyz. nHAfEm4vDKKoLbmaJd9DIHATuzi7Eb/Jzj6BQd3HvkXnh0UulCAUcWfPZY9COlwzao4xvt/QeRnQ IdE2xKLDimQ+NwldPvX5BNiFigskWTMVuEczonpm75tAwLAVb0CugjtT3VqJY0J7zQRS9dRAbUt1 yFSg69e93izmt6vf4TU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20251110182426 20251019182426 18406 thingelstad.xyz. Qgzbllz8YiykjAkghtuAgL1X45STtbb09rfUW4cPQE6kX1Km03tTGkYKDwNZ7b+LjYPW+rYvLOc+ SAJ1gtVbibFVcTzrTpoFGlVFwMRUk5KHLA+a1lbsjGdl7QTZCh93NBOWWjoifraK/UFqgfkuE2+F AsvGK+6e/2L9TWY4WqM= )`
	RRSIG=18406 and DNSKEY=18406 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test thingelstad.xyz at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: