DNSSEC Debugger - tristanself.co.uk

Domain Name:

Time: 2025-03-26 23:27:32 UTC

Analyzing DNSSEC problems for tristanself.co.uk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1414 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1414 octets ;; HEADER SECTION ;; id = 5061 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250412000000 20250322000000 20326 . b2kcHcO2v3F/EEvNO86YQXeOTVzFdOgE2DfKaLv76yf5ysmz+W2/2Nyk8c6l+JRyclrKXPeWjI2k 6E2MneyTCXosQLDMXxw/aQ+lxVWJzBqC1c5rtlTD11cbYV1KQQl/AIdrKheI5FMmmwi7e+LV7pN9 MV1Q7oImWQoRpCjhwic3zBmLUs3wUc2hb6nBswUQsecqOxkBQeqfCb8tOwiylzr8rg5G7dTeYzMt pJqSOoL/QfsuoQrGNZOEkMHKesbg8FP+tCF/iQpWU1zLpZ/jB7sF0C/FJFo9dKn6lzPKvL+VoJfr NO7GcXUspveBZUXlSbFlcbw8QmVmVxjAvHcrtg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250412000000 20250322000000 20326 . b2kcHcO2v3F/EEvNO86YQXeOTVzFdOgE2DfKaLv76yf5ysmz+W2/2Nyk8c6l+JRyclrKXPeWjI2k 6E2MneyTCXosQLDMXxw/aQ+lxVWJzBqC1c5rtlTD11cbYV1KQQl/AIdrKheI5FMmmwi7e+LV7pN9 MV1Q7oImWQoRpCjhwic3zBmLUs3wUc2hb6nBswUQsecqOxkBQeqfCb8tOwiylzr8rg5G7dTeYzMt pJqSOoL/QfsuoQrGNZOEkMHKesbg8FP+tCF/iQpWU1zLpZ/jB7sF0C/FJFo9dKn6lzPKvL+VoJfr NO7GcXUspveBZUXlSbFlcbw8QmVmVxjAvHcrtg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26470 is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to f.root-servers.net for tristanself.co.uk/A
	Received 885 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 885 octets ;; HEADER SECTION ;; id = 63489 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20250408200000 20250326190000 26470 . OXB7OrTmiJthIqQOJCBzvmTJeSilr/Q/eL+ZtcFcVYBvAki9VW+575Gks2Btg7vLsYtMXs8gxnam wXe8ytfx2OFfdOFnQrxW+ELje6DKtSTX1gFbMZOWzYdxAjS2pkUf+3mjJIxw75nsjSfF0Q0C0Hzq tsNMRLbwIfMRrK7LT1pIOOS4hi6eqewNedu2cfXwAOF9WIu0JPZSjjJtiGvSCt8iwOJPdJ941Z7D gSr6WTVL85zuqI8XNPMdMhl5SkR4VGqg01V0p4F+hoJ/Z4t9hd1P3DVZt0h3k31GwoGQiWNg69p5 ZQZu3OOcRpNmex2omqlRRL3FQmvkBaf7ZGX6Eg== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN A 156.154.103.3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN A 43.230.48.1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for uk/DNSKEY
	Received 870 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 870 octets ;; HEADER SECTION ;; id = 53137 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20250408200000 20250326190000 26470 . OXB7OrTmiJthIqQOJCBzvmTJeSilr/Q/eL+ZtcFcVYBvAki9VW+575Gks2Btg7vLsYtMXs8gxnam wXe8ytfx2OFfdOFnQrxW+ELje6DKtSTX1gFbMZOWzYdxAjS2pkUf+3mjJIxw75nsjSfF0Q0C0Hzq tsNMRLbwIfMRrK7LT1pIOOS4hi6eqewNedu2cfXwAOF9WIu0JPZSjjJtiGvSCt8iwOJPdJ941Z7D gSr6WTVL85zuqI8XNPMdMhl5SkR4VGqg01V0p4F+hoJ/Z4t9hd1P3DVZt0h3k31GwoGQiWNg69p5 ZQZu3OOcRpNmex2omqlRRL3FQmvkBaf7ZGX6Eg== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsd.nic.uk. 172800 IN A 156.154.103.3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns4.nic.uk. 172800 IN A 43.230.48.1 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Found child zone uk

	Checking DS between . and uk
	Query to l.root-servers.net for uk/DS
	Received 366 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 366 octets ;; HEADER SECTION ;; id = 65000 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DS ;; ANSWER SECTION (2 records) uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20250408200000 20250326190000 26470 . OXB7OrTmiJthIqQOJCBzvmTJeSilr/Q/eL+ZtcFcVYBvAki9VW+575Gks2Btg7vLsYtMXs8gxnam wXe8ytfx2OFfdOFnQrxW+ELje6DKtSTX1gFbMZOWzYdxAjS2pkUf+3mjJIxw75nsjSfF0Q0C0Hzq tsNMRLbwIfMRrK7LT1pIOOS4hi6eqewNedu2cfXwAOF9WIu0JPZSjjJtiGvSCt8iwOJPdJ941Z7D gSr6WTVL85zuqI8XNPMdMhl5SkR4VGqg01V0p4F+hoJ/Z4t9hd1P3DVZt0h3k31GwoGQiWNg69p5 ZQZu3OOcRpNmex2omqlRRL3FQmvkBaf7ZGX6Eg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for uk in the . zone
	DS=43876/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uk. 86400 IN RRSIG ( DS 8 1 86400 20250408200000 20250326190000 26470 . OXB7OrTmiJthIqQOJCBzvmTJeSilr/Q/eL+ZtcFcVYBvAki9VW+575Gks2Btg7vLsYtMXs8gxnam wXe8ytfx2OFfdOFnQrxW+ELje6DKtSTX1gFbMZOWzYdxAjS2pkUf+3mjJIxw75nsjSfF0Q0C0Hzq tsNMRLbwIfMRrK7LT1pIOOS4hi6eqewNedu2cfXwAOF9WIu0JPZSjjJtiGvSCt8iwOJPdJ941Z7D gSr6WTVL85zuqI8XNPMdMhl5SkR4VGqg01V0p4F+hoJ/Z4t9hd1P3DVZt0h3k31GwoGQiWNg69p5 ZQZu3OOcRpNmex2omqlRRL3FQmvkBaf7ZGX6Eg== )`
	RRSIG=26470 and DNSKEY=26470 verifies the DS RRset
	DS=43876/SHA-256 is now in the chain-of-trust
	`uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 )`
	Query to dns2.nic.uk for uk/DNSKEY
	Received 745 bytes from 103.49.80.1
	;; Response received from [103.49.80.1] 745 octets ;; HEADER SECTION ;; id = 41131 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (3 records) uk. 3600 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056 uk. 3600 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876 uk. 3600 IN RRSIG ( DNSKEY 8 1 3600 20250429011435 20250325010958 43876 uk. Hhjdm0mH7iA+RAqAB8BHJs5jr66QEkten0b7ooTZMUV2WinFPdTOOvYHoPGwMIxAH/q62nWjNHSC yHo7ssYWE+qVPi9TG4BNhQAj8ekFOnAegoNSyiPYFM/57gPB8XRH5J85MeNUUQHhWzqgiWolFJ0m JJSbqftIJ+BSFKWJ1UF45HpGH1Xoviv+iuK1BhBKZTvqobcmkAzLVR4ZhZV5+eBGQdry4QmNaBVh pa0FAjP3GCI2yivBFTzNUbmBlYIKJsfkqvgNpBDr3ROmu41RR1bbwkUkxNiEfWa8M+6hXet16TV5 In4Afkeyn3u5m9uSK+ke7fEAsr4+ue//GasohA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for uk
	`uk. 3600 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056`
	`uk. 3600 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876`
	DNSKEY=43876/SEP is now in the chain-of-trust
	DS=43876/SHA-256 verifies DNSKEY=43876/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`uk. 3600 IN RRSIG ( DNSKEY 8 1 3600 20250429011435 20250325010958 43876 uk. Hhjdm0mH7iA+RAqAB8BHJs5jr66QEkten0b7ooTZMUV2WinFPdTOOvYHoPGwMIxAH/q62nWjNHSC yHo7ssYWE+qVPi9TG4BNhQAj8ekFOnAegoNSyiPYFM/57gPB8XRH5J85MeNUUQHhWzqgiWolFJ0m JJSbqftIJ+BSFKWJ1UF45HpGH1Xoviv+iuK1BhBKZTvqobcmkAzLVR4ZhZV5+eBGQdry4QmNaBVh pa0FAjP3GCI2yivBFTzNUbmBlYIKJsfkqvgNpBDr3ROmu41RR1bbwkUkxNiEfWa8M+6hXet16TV5 In4Afkeyn3u5m9uSK+ke7fEAsr4+ue//GasohA== )`
	RRSIG=43876 and DNSKEY=43876/SEP verifies the DNSKEY RRset
	DNSKEY=43056 is now in the chain-of-trust
	Query to dns4.nic.uk for tristanself.co.uk/A
	Received 394 bytes from 43.230.48.1
	;; Response received from [43.230.48.1] 394 octets ;; HEADER SECTION ;; id = 36577 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tristanself.co.uk. 172800 IN NS ns-316.awsdns-39.com. tristanself.co.uk. 172800 IN NS ns-997.awsdns-60.net. tristanself.co.uk. 172800 IN NS ns-1057.awsdns-04.org. tristanself.co.uk. 172800 IN NS ns-1817.awsdns-35.co.uk. tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20250427080143 20250323072237 33621 co.uk. KqGYlcUf4jQreE9phZG9e3Hqah8N3ipYqadrfZzfcQdnQz5qrrOyx4qaIW4NjDj0dDvoZ8Qo7GEe DLMvc9J8SiYMMdhzv/nPagoet49I21t1PGaVYLxCiivOJmCFN+Rnp4IphTmlMMZxSPEBjPsXdW8V /Z/QxhT9mqB+Q32YjWo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns1.nic.uk for co.uk/DNSKEY
	Received 347 bytes from 213.248.216.1
	;; Response received from [213.248.216.1] 347 octets ;; HEADER SECTION ;; id = 56359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (2 records) co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAcf+56ydE3WHB5vn1UxYBXJJXBlJfHlS/MWEVn+8KVJyED0iNLvSEvSr47VeBnp7e53TbVQS 1pLMGaL/Upq4Hb70kY8LrlPOG9b7Guhbm7jRaosC6PETNPQ1aoNrZtAagRJQX3Jzh3o+xjQwTcUx LsQ97j/hB3zZtFuZOw6+8uLL ) ; keytag 33621 co.uk. 300 IN RRSIG ( DNSKEY 8 2 300 20250429045116 20250325043434 33621 co.uk. ri7RNTtkX7WBaotPwKhhfCYX2WSQDv0cftMDlTnfUFehB46NpsFx5HxtDmRnMjSVr4BzmiUjDXhq pO94AJC1vdbQb1a0wAyYkN1dhZHzzbjZ9bEv8CruSqyYOqp5qLnM3VkYVBQdBjas0p37y/J3cW7H /+rOZqSoHTuS6Stph9w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone co.uk
	Attempting to learn nameservers for co.uk
	Query to nsc.nic.uk for co.uk/NS
	Received 353 bytes from 156.154.102.3
	;; Response received from [156.154.102.3] 353 octets ;; HEADER SECTION ;; id = 30107 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 9 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN NS ;; ANSWER SECTION (9 records) co.uk. 172800 IN NS dns2.nic.uk. co.uk. 172800 IN NS nsd.nic.uk. co.uk. 172800 IN NS dns4.nic.uk. co.uk. 172800 IN NS nsb.nic.uk. co.uk. 172800 IN NS nsa.nic.uk. co.uk. 172800 IN NS nsc.nic.uk. co.uk. 172800 IN NS dns1.nic.uk. co.uk. 172800 IN NS dns3.nic.uk. co.uk. 172800 IN RRSIG ( NS 8 2 172800 20250428134337 20250324133208 33621 co.uk. fLAhERC87ixPdAWiloem5gldr+1TDVoV3D8mN/5XZq+vHbhxlgxIEs1ffLVu/7y3w9EX2Cpu+qWK r2ziF3O/ZyohQOlZJdZWIRH1mN0/aNlqKt0vKagh4YbI/q2fduC7z5r/F0z5KiW2RwEcF3pSybWW PSa7VnzOlaufkDd9tek= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found co.uk nameservers: dns2.nic.uk, nsd.nic.uk, dns4.nic.uk, nsb.nic.uk, nsa.nic.uk, nsc.nic.uk, dns1.nic.uk, dns3.nic.uk

co.uk

	Checking DS between uk and co.uk
	Query to dns3.nic.uk for co.uk/DS
	Received 244 bytes from 213.248.220.1
	;; Response received from [213.248.220.1] 244 octets ;; HEADER SECTION ;; id = 915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DS ;; ANSWER SECTION (2 records) co.uk. 300 IN DS ( 33621 8 2 b9199d8b7fca7107d78c418d1d1bc9e9fe9d9b9b187bd13c96dc4b6582425cd8 ) co.uk. 300 IN RRSIG ( DS 8 2 300 20250426133625 20250322123805 43056 uk. 1J9W9ZrWKORcjnUb9eETZWvHKLe0qVa0TBOS3yYKfG3p/+/7Kyd69ebV24fJoo6qgGcWN5nAor5l kXI4HzuSMTKTptlrKHwoTwmygR4UQ2KZ00fpMv57zwTQ9aiEKPu8ns2NSyuaM8zbViKmqtREpfR6 NDrlceQY2HTn8ia6+6E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for co.uk in the uk zone
	DS=33621/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co.uk. 300 IN RRSIG ( DS 8 2 300 20250426133625 20250322123805 43056 uk. 1J9W9ZrWKORcjnUb9eETZWvHKLe0qVa0TBOS3yYKfG3p/+/7Kyd69ebV24fJoo6qgGcWN5nAor5l kXI4HzuSMTKTptlrKHwoTwmygR4UQ2KZ00fpMv57zwTQ9aiEKPu8ns2NSyuaM8zbViKmqtREpfR6 NDrlceQY2HTn8ia6+6E= )`
	RRSIG=43056 and DNSKEY=43056 verifies the DS RRset
	DS=33621/SHA-256 is now in the chain-of-trust
	`co.uk. 300 IN DS ( 33621 8 2 b9199d8b7fca7107d78c418d1d1bc9e9fe9d9b9b187bd13c96dc4b6582425cd8 )`
	Query to dns2.nic.uk for co.uk/DNSKEY
	Received 347 bytes from 103.49.80.1
	;; Response received from [103.49.80.1] 347 octets ;; HEADER SECTION ;; id = 19676 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (2 records) co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAcf+56ydE3WHB5vn1UxYBXJJXBlJfHlS/MWEVn+8KVJyED0iNLvSEvSr47VeBnp7e53TbVQS 1pLMGaL/Upq4Hb70kY8LrlPOG9b7Guhbm7jRaosC6PETNPQ1aoNrZtAagRJQX3Jzh3o+xjQwTcUx LsQ97j/hB3zZtFuZOw6+8uLL ) ; keytag 33621 co.uk. 300 IN RRSIG ( DNSKEY 8 2 300 20250429045116 20250325043434 33621 co.uk. ri7RNTtkX7WBaotPwKhhfCYX2WSQDv0cftMDlTnfUFehB46NpsFx5HxtDmRnMjSVr4BzmiUjDXhq pO94AJC1vdbQb1a0wAyYkN1dhZHzzbjZ9bEv8CruSqyYOqp5qLnM3VkYVBQdBjas0p37y/J3cW7H /+rOZqSoHTuS6Stph9w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for co.uk
	`co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAcf+56ydE3WHB5vn1UxYBXJJXBlJfHlS/MWEVn+8KVJyED0iNLvSEvSr47VeBnp7e53TbVQS 1pLMGaL/Upq4Hb70kY8LrlPOG9b7Guhbm7jRaosC6PETNPQ1aoNrZtAagRJQX3Jzh3o+xjQwTcUx LsQ97j/hB3zZtFuZOw6+8uLL ) ; keytag 33621`
	DNSKEY=33621 is now in the chain-of-trust
	DS=33621/SHA-256 verifies DNSKEY=33621
	Found 1 RRSIGs over DNSKEY RRset
	`co.uk. 300 IN RRSIG ( DNSKEY 8 2 300 20250429045116 20250325043434 33621 co.uk. ri7RNTtkX7WBaotPwKhhfCYX2WSQDv0cftMDlTnfUFehB46NpsFx5HxtDmRnMjSVr4BzmiUjDXhq pO94AJC1vdbQb1a0wAyYkN1dhZHzzbjZ9bEv8CruSqyYOqp5qLnM3VkYVBQdBjas0p37y/J3cW7H /+rOZqSoHTuS6Stph9w= )`
	RRSIG=33621 and DNSKEY=33621 verifies the DNSKEY RRset
	Query to nsc.nic.uk for tristanself.co.uk/A
	Received 399 bytes from 156.154.102.3
	;; Response received from [156.154.102.3] 399 octets ;; HEADER SECTION ;; id = 29542 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tristanself.co.uk. 172800 IN NS ns-316.awsdns-39.com. tristanself.co.uk. 172800 IN NS ns-1817.awsdns-35.co.uk. tristanself.co.uk. 172800 IN NS ns-1057.awsdns-04.org. tristanself.co.uk. 172800 IN NS ns-997.awsdns-60.net. tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20250427080143 20250323072237 33621 co.uk. KqGYlcUf4jQreE9phZG9e3Hqah8N3ipYqadrfZzfcQdnQz5qrrOyx4qaIW4NjDj0dDvoZ8Qo7GEe DLMvc9J8SiYMMdhzv/nPagoet49I21t1PGaVYLxCiivOJmCFN+Rnp4IphTmlMMZxSPEBjPsXdW8V /Z/QxhT9mqB+Q32YjWo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsd.nic.uk for tristanself.co.uk/DNSKEY
	Received 399 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 399 octets ;; HEADER SECTION ;; id = 16075 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tristanself.co.uk. 172800 IN NS ns-1817.awsdns-35.co.uk. tristanself.co.uk. 172800 IN NS ns-316.awsdns-39.com. tristanself.co.uk. 172800 IN NS ns-997.awsdns-60.net. tristanself.co.uk. 172800 IN NS ns-1057.awsdns-04.org. tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20250427080143 20250323072237 33621 co.uk. KqGYlcUf4jQreE9phZG9e3Hqah8N3ipYqadrfZzfcQdnQz5qrrOyx4qaIW4NjDj0dDvoZ8Qo7GEe DLMvc9J8SiYMMdhzv/nPagoet49I21t1PGaVYLxCiivOJmCFN+Rnp4IphTmlMMZxSPEBjPsXdW8V /Z/QxhT9mqB+Q32YjWo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone tristanself.co.uk

tristanself.co.uk

	Checking DS between co.uk and tristanself.co.uk
	Query to nsa.nic.uk for tristanself.co.uk/DS
	Received 259 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 259 octets ;; HEADER SECTION ;; id = 54509 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN DS ;; ANSWER SECTION (2 records) tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20250427080143 20250323072237 33621 co.uk. KqGYlcUf4jQreE9phZG9e3Hqah8N3ipYqadrfZzfcQdnQz5qrrOyx4qaIW4NjDj0dDvoZ8Qo7GEe DLMvc9J8SiYMMdhzv/nPagoet49I21t1PGaVYLxCiivOJmCFN+Rnp4IphTmlMMZxSPEBjPsXdW8V /Z/QxhT9mqB+Q32YjWo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for tristanself.co.uk in the co.uk zone
	DS=11383/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20250427080143 20250323072237 33621 co.uk. KqGYlcUf4jQreE9phZG9e3Hqah8N3ipYqadrfZzfcQdnQz5qrrOyx4qaIW4NjDj0dDvoZ8Qo7GEe DLMvc9J8SiYMMdhzv/nPagoet49I21t1PGaVYLxCiivOJmCFN+Rnp4IphTmlMMZxSPEBjPsXdW8V /Z/QxhT9mqB+Q32YjWo= )`
	RRSIG=33621 and DNSKEY=33621 verifies the DS RRset
	DS=11383/SHA-256 is now in the chain-of-trust
	`tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 )`
	Query to ns-316.awsdns-39.com for tristanself.co.uk/DNSKEY
	Received 399 bytes from 205.251.193.60
	;; Response received from [205.251.193.60] 399 octets ;; HEADER SECTION ;; id = 60892 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN DNSKEY ;; ANSWER SECTION (4 records) tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 sfNWfFgbPXf2rQnWARAQjZhMn9lmRtFDlRYfmvr4ccBlFYYU9TsW3S1+v3TLJpA2wHwdQHyEd2t/ ww9lks+vwg== ) ; keytag 10310 tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 tG+5j2HtsfAYKXnlm5ERcX8hnHV3tkVTKG2RvJ7jPpNIjGBVuh7Ge0PeU4VrQfBA1c96Fd4Ol68s 9WapoAjK7w== ) ; keytag 5594 tristanself.co.uk. 3600 IN DNSKEY ( 257 3 13 HJgXnjrKo/pK21P9LgSDs3p6DpIGteExwDTnfrZiUDoooFMdMEWnNwrgQZdGIJl1I+HgT/700IFU U0QcL5mKoQ== ) ; keytag 11383 tristanself.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20250327020000 20250326150000 11383 tristanself.co.uk. MxxL0GHAQ/OeTavyFiA8RzRcXTKaDJdWAT7ExspAtTxRz678E8+ZbyyGgkqOwPtSkwekIlRTV2hb iAff5IxrLQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for tristanself.co.uk
	`tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 sfNWfFgbPXf2rQnWARAQjZhMn9lmRtFDlRYfmvr4ccBlFYYU9TsW3S1+v3TLJpA2wHwdQHyEd2t/ ww9lks+vwg== ) ; keytag 10310`
	`tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 tG+5j2HtsfAYKXnlm5ERcX8hnHV3tkVTKG2RvJ7jPpNIjGBVuh7Ge0PeU4VrQfBA1c96Fd4Ol68s 9WapoAjK7w== ) ; keytag 5594`
	`tristanself.co.uk. 3600 IN DNSKEY ( 257 3 13 HJgXnjrKo/pK21P9LgSDs3p6DpIGteExwDTnfrZiUDoooFMdMEWnNwrgQZdGIJl1I+HgT/700IFU U0QcL5mKoQ== ) ; keytag 11383`
	DNSKEY=11383/SEP is now in the chain-of-trust
	DS=11383/SHA-256 verifies DNSKEY=11383/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`tristanself.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20250327020000 20250326150000 11383 tristanself.co.uk. MxxL0GHAQ/OeTavyFiA8RzRcXTKaDJdWAT7ExspAtTxRz678E8+ZbyyGgkqOwPtSkwekIlRTV2hb iAff5IxrLQ== )`
	RRSIG=11383 and DNSKEY=11383/SEP verifies the DNSKEY RRset
	DNSKEY=10310 is now in the chain-of-trust
	DNSKEY=5594 is now in the chain-of-trust
	Query to ns-997.awsdns-60.net for tristanself.co.uk/A
	Received 405 bytes from 205.251.195.229
	;; Response received from [205.251.195.229] 405 octets ;; HEADER SECTION ;; id = 60294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20250327004233 20250326222733 5594 tristanself.co.uk. dwBHjeviQeFmPbeGwtr6B2x88XnTvwkVw3w1DfK+XLyPhA/OrMjeVMYCXfbdsVK+Jlnhb6Lwql21 bhEEANQ+kg== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20250328002733 20250326222733 5594 tristanself.co.uk. /nGJari7qx/EBOQ51BdQAQgNrctiz7Kv84xz3mNxq0Zb02omgn5YAq3u8PZ6LR+TJDZkwXDODdQG r3FvaQwY2g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-997.awsdns-60.net is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-1057.awsdns-04.org for tristanself.co.uk/SOA
	Received 241 bytes from 205.251.196.33
	;; Response received from [205.251.196.33] 241 octets ;; HEADER SECTION ;; id = 13310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN SOA ;; ANSWER SECTION (2 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20250327004233 20250326222733 5594 tristanself.co.uk. 17USSVQr9/pDBXMG4aNl7IyerQdi08MCX6kJSFFxqj4ez5P+9FoNTC2nY7irYU+sV54n/a6XiCPj A86LtiFJOQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-316.awsdns-39.com for tristanself.co.uk/SOA
	Received 241 bytes from 205.251.193.60
	;; Response received from [205.251.193.60] 241 octets ;; HEADER SECTION ;; id = 5929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN SOA ;; ANSWER SECTION (2 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20250327004233 20250326222733 5594 tristanself.co.uk. TCvWU5ncifBSo1uKpWSz+EpM2/8REmWvheZDwzMaL2tqyb1yVxxcCBX7QqrMHV7VRWFGKHn/L6fJ ux1JwjHu7g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1817.awsdns-35.co.uk for tristanself.co.uk/SOA
	Received 241 bytes from 205.251.199.25
	;; Response received from [205.251.199.25] 241 octets ;; HEADER SECTION ;; id = 244 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN SOA ;; ANSWER SECTION (2 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20250327004233 20250326222733 5594 tristanself.co.uk. i96c6+ux4pEkRv8+LWJPAmKvI44XhrBmRq2EGAPS//DAx/G6HWi+i8Z1/N3FtXn7axDIda5GeTHn Iu3d/7/NOg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-997.awsdns-60.net for tristanself.co.uk/A
	Received 405 bytes from 205.251.195.229
	;; Response received from [205.251.195.229] 405 octets ;; HEADER SECTION ;; id = 21808 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20250327004233 20250326222733 5594 tristanself.co.uk. FnPuW9d3+/2VpXMDzSbIgBUjHF0jOMQQrjbpPRYO4wjAQmGdfmlwRJs9nxraq2nUx/Js49XCXIvb PP7YCQg4VA== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20250328002733 20250326222733 5594 tristanself.co.uk. B4DaTkSk0aZH8Z6mvc93W5HPQwjkgG0zeE9lIPA1toiePANcOZ8Xbd+vIgfP/OMqWV7pNgsQOiK/ 5sQsySzpZw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20250328002733 20250326222733 5594 tristanself.co.uk. B4DaTkSk0aZH8Z6mvc93W5HPQwjkgG0zeE9lIPA1toiePANcOZ8Xbd+vIgfP/OMqWV7pNgsQOiK/ 5sQsySzpZw== )`
	RRSIG=5594 and DNSKEY=5594 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20250327004233 20250326222733 5594 tristanself.co.uk. dwBHjeviQeFmPbeGwtr6B2x88XnTvwkVw3w1DfK+XLyPhA/OrMjeVMYCXfbdsVK+Jlnhb6Lwql21 bhEEANQ+kg== )`
	RRSIG=5594 and DNSKEY=5594 verifies the SOA RRset

tristanself.co.uk

	Query to ns-1057.awsdns-04.org for tristanself.co.uk/A
	Received 405 bytes from 205.251.196.33
	;; Response received from [205.251.196.33] 405 octets ;; HEADER SECTION ;; id = 7704 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20250327004233 20250326222733 5594 tristanself.co.uk. h1BOebwVKaeMoPdEGPU7ahOkvFwer78BedRbk9U2s/7Fl4JwDkoRgBpTURWzIfy2tmaKbisJFPgl CWV9xEbtwA== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20250328002733 20250326222733 5594 tristanself.co.uk. jbIl88MxzJe4TlGcPzu4t4AuHXuVdm00nc3KEkJcP6VLHMuUbyMj+cPwKB8m9Nh23acfAbG1DSIT 3RqI7jAK7g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1057.awsdns-04.org is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-1057.awsdns-04.org for tristanself.co.uk/A
	Received 405 bytes from 205.251.196.33
	;; Response received from [205.251.196.33] 405 octets ;; HEADER SECTION ;; id = 37147 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20250327004233 20250326222733 5594 tristanself.co.uk. JhzBjsHxennUJ8wIcHuoYnSgh5IWnO7GbmqWUm7hb3hxICUJXRchu9aLZpRdfWi6e6UgEOf9SGUE efZkWOjNrA== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20250328002733 20250326222733 5594 tristanself.co.uk. pLVr8eXuelGLyfgTMbpLPBiV78ei4cwo3LzRdYeTXYngXH7GncJkV1wLgJSwL0tIzSenWrpX2Qtp qpaTmabkTQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20250328002733 20250326222733 5594 tristanself.co.uk. pLVr8eXuelGLyfgTMbpLPBiV78ei4cwo3LzRdYeTXYngXH7GncJkV1wLgJSwL0tIzSenWrpX2Qtp qpaTmabkTQ== )`
	RRSIG=5594 and DNSKEY=5594 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20250327004233 20250326222733 5594 tristanself.co.uk. h1BOebwVKaeMoPdEGPU7ahOkvFwer78BedRbk9U2s/7Fl4JwDkoRgBpTURWzIfy2tmaKbisJFPgl CWV9xEbtwA== )`
	RRSIG=5594 and DNSKEY=5594 verifies the SOA RRset

tristanself.co.uk

	Query to ns-316.awsdns-39.com for tristanself.co.uk/A
	Received 405 bytes from 205.251.193.60
	;; Response received from [205.251.193.60] 405 octets ;; HEADER SECTION ;; id = 16984 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20250327004233 20250326222733 5594 tristanself.co.uk. LnLomBbutkqULSA+YEMaj7BJCS9RnTbwp9pHLfN2/8arE6rSp35bCZLWfVZlVpB/oJm9ST3orS1F +ldqbBMpxw== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20250328002733 20250326222733 5594 tristanself.co.uk. sDfvXe5ghVQ5HN2qHvJxBPTBGUZwbv2DS775rGwLLrdA/u1mELKtSizZiiVSidLXjE8BZT20GyR3 CvFW5YEnUA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-316.awsdns-39.com is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-316.awsdns-39.com for tristanself.co.uk/A
	Received 405 bytes from 205.251.193.60
	;; Response received from [205.251.193.60] 405 octets ;; HEADER SECTION ;; id = 18942 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20250327004233 20250326222733 5594 tristanself.co.uk. 1NGAMBsi6XOn60/1aJ0wzGJ0EwHA8U9ThubrwTUppxDYxYjBZHmCK9Tl65+llCBpx2NtgIVCWc+u c2TEXfio2A== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20250328002733 20250326222733 5594 tristanself.co.uk. 4pg6wchzqpVSIsqNANn+p5AhQFNzTqh8azcPc+HD/aRwBntpkhNiCkPrzvlQq+mAZ7rS5aXaJ2Kv EIoMrwBLrg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20250328002733 20250326222733 5594 tristanself.co.uk. 4pg6wchzqpVSIsqNANn+p5AhQFNzTqh8azcPc+HD/aRwBntpkhNiCkPrzvlQq+mAZ7rS5aXaJ2Kv EIoMrwBLrg== )`
	RRSIG=5594 and DNSKEY=5594 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20250327004233 20250326222733 5594 tristanself.co.uk. LnLomBbutkqULSA+YEMaj7BJCS9RnTbwp9pHLfN2/8arE6rSp35bCZLWfVZlVpB/oJm9ST3orS1F +ldqbBMpxw== )`
	RRSIG=5594 and DNSKEY=5594 verifies the SOA RRset

tristanself.co.uk

	Query to ns-1817.awsdns-35.co.uk for tristanself.co.uk/A
	Received 405 bytes from 205.251.199.25
	;; Response received from [205.251.199.25] 405 octets ;; HEADER SECTION ;; id = 63928 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20250327004233 20250326222733 5594 tristanself.co.uk. Fy6hkZvE7BJKOi8FzIn4OuxemJnPQlz+lf8HJZmbo4Z9EQ4mX9duvluUkuHMEK2rAAcRovY0wgQD 9WKqaKKlmw== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20250328002733 20250326222733 5594 tristanself.co.uk. V2PAhrdYqoYtDpKsfGN1AKwsSXnbebYRKog3DfeNerWaO9DAzFfcIzCYv3kFEODrLotOGnJ120dw mK6hlqThGA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1817.awsdns-35.co.uk is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-1817.awsdns-35.co.uk for tristanself.co.uk/A
	Received 405 bytes from 205.251.199.25
	;; Response received from [205.251.199.25] 405 octets ;; HEADER SECTION ;; id = 8360 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20250327004233 20250326222733 5594 tristanself.co.uk. UbuMXh6Gk6uHy2MXq0HsOwZIbppNCKNY+8oYNyKqkj/zErvVj2gzooKWzglYtmYIGyvSgmg3WzGI EUGKhFWTMQ== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20250328002733 20250326222733 5594 tristanself.co.uk. EW3Az6RPWH6NyyyOEktjTunrhThQVZSIJ6XUil7JqOEeV7lmL3QeCjRzf4Ir75iVge6dbeGiN603 abcyJ2CfyA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20250328002733 20250326222733 5594 tristanself.co.uk. EW3Az6RPWH6NyyyOEktjTunrhThQVZSIJ6XUil7JqOEeV7lmL3QeCjRzf4Ir75iVge6dbeGiN603 abcyJ2CfyA== )`
	RRSIG=5594 and DNSKEY=5594 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20250327004233 20250326222733 5594 tristanself.co.uk. Fy6hkZvE7BJKOi8FzIn4OuxemJnPQlz+lf8HJZmbo4Z9EQ4mX9duvluUkuHMEK2rAAcRovY0wgQD 9WKqaKKlmw== )`
	RRSIG=5594 and DNSKEY=5594 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test tristanself.co.uk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: