DNSSEC Debugger - tristanself.co.uk

Domain Name:

Time: 2026-02-08 08:18:19 UTC

Analyzing DNSSEC problems for tristanself.co.uk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1141 octets ;; HEADER SECTION ;; id = 36556 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260221000000 20260131000000 20326 . ULrD2Zl+nPNutE2pzdrRyF+tYiDursnMx4JgtQtXxNNLXWYYTuuX+9QL11bs2wAqqQMeAw2I6/WK pxrd0bTBLkZM+wpE57mXVISo+KyyAYWvQF9BUMWZ8dTtRxsHsM5oKhhstYGooaULjcuorrty7Csf T3JJIa1PBaK79L0mUERVJx9tsQPbDF3CM+29ImvMxs3z6PN8d3vbI2tvbR1L222/CyuSm1JAfcke 1sKbOzWo1+RL6ZUBm+cYNIl+7TQ80NbnWDmHyNamJ/geuEWvHG0RNEdFL1Y8fvIHI2BCHht+hnVa Tv+s/WAjR/xU3wh2mMBHe4m9fNcnOmodkSk5tQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260221000000 20260131000000 20326 . ULrD2Zl+nPNutE2pzdrRyF+tYiDursnMx4JgtQtXxNNLXWYYTuuX+9QL11bs2wAqqQMeAw2I6/WK pxrd0bTBLkZM+wpE57mXVISo+KyyAYWvQF9BUMWZ8dTtRxsHsM5oKhhstYGooaULjcuorrty7Csf T3JJIa1PBaK79L0mUERVJx9tsQPbDF3CM+29ImvMxs3z6PN8d3vbI2tvbR1L222/CyuSm1JAfcke 1sKbOzWo1+RL6ZUBm+cYNIl+7TQ80NbnWDmHyNamJ/geuEWvHG0RNEdFL1Y8fvIHI2BCHht+hnVa Tv+s/WAjR/xU3wh2mMBHe4m9fNcnOmodkSk5tQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to e.root-servers.net for tristanself.co.uk/A
	Received 885 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 885 octets ;; HEADER SECTION ;; id = 1189 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260221050000 20260208040000 21831 . nxKz2dNLYjUd3DQBPYvN5EPvkwxOI4lZuHOjERfDRwsEDVMjSdEdNKHe7Hn4V4vzd5buEaUe2CT6 PnroFDOroOjL2PdWBlX4lFieJpZOPdpEJHipk+WrLpdaWOjO83QJJUeEp8dabupHTPTViuncwLbL w+MNgs3d8yaFtXLXzGIZ1J50UkrmUruhW+nzaB4MK+eER0AQ9F4TZPvPAQyOTtX4KpL3I3+xBcu5 GTq9m+H8Y4j8BFhWLiINIXrfJwCOGLUgRMDERAe1X7fWMlP0Aoxe/zUmEQYHGTSY7+ZGleZhloZ5 yfUcJAhWd3LsgEMY7W+mDaKy8xWyqDWJ1L13Lg== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN A 156.154.103.3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN A 43.230.48.1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for uk/DNSKEY
	Received 870 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 870 octets ;; HEADER SECTION ;; id = 63106 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260221050000 20260208040000 21831 . nxKz2dNLYjUd3DQBPYvN5EPvkwxOI4lZuHOjERfDRwsEDVMjSdEdNKHe7Hn4V4vzd5buEaUe2CT6 PnroFDOroOjL2PdWBlX4lFieJpZOPdpEJHipk+WrLpdaWOjO83QJJUeEp8dabupHTPTViuncwLbL w+MNgs3d8yaFtXLXzGIZ1J50UkrmUruhW+nzaB4MK+eER0AQ9F4TZPvPAQyOTtX4KpL3I3+xBcu5 GTq9m+H8Y4j8BFhWLiINIXrfJwCOGLUgRMDERAe1X7fWMlP0Aoxe/zUmEQYHGTSY7+ZGleZhloZ5 yfUcJAhWd3LsgEMY7W+mDaKy8xWyqDWJ1L13Lg== ) ;; ADDITIONAL SECTION (17 records) dns1.nic.uk. 172800 IN A 213.248.216.1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 nsc.nic.uk. 172800 IN A 156.154.102.3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsa.nic.uk. 172800 IN A 156.154.100.3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsd.nic.uk. 172800 IN A 156.154.103.3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns2.nic.uk. 172800 IN A 103.49.80.1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns4.nic.uk. 172800 IN A 43.230.48.1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 nsb.nic.uk. 172800 IN A 156.154.101.3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 ;; { "EDNS-VERSION": 0 }
	Found child zone uk

	Checking DS between . and uk
	Query to j.root-servers.net for uk/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 366 octets ;; HEADER SECTION ;; id = 35205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DS ;; ANSWER SECTION (2 records) uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260221050000 20260208040000 21831 . nxKz2dNLYjUd3DQBPYvN5EPvkwxOI4lZuHOjERfDRwsEDVMjSdEdNKHe7Hn4V4vzd5buEaUe2CT6 PnroFDOroOjL2PdWBlX4lFieJpZOPdpEJHipk+WrLpdaWOjO83QJJUeEp8dabupHTPTViuncwLbL w+MNgs3d8yaFtXLXzGIZ1J50UkrmUruhW+nzaB4MK+eER0AQ9F4TZPvPAQyOTtX4KpL3I3+xBcu5 GTq9m+H8Y4j8BFhWLiINIXrfJwCOGLUgRMDERAe1X7fWMlP0Aoxe/zUmEQYHGTSY7+ZGleZhloZ5 yfUcJAhWd3LsgEMY7W+mDaKy8xWyqDWJ1L13Lg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for uk in the . zone
	DS=43876/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uk. 86400 IN RRSIG ( DS 8 1 86400 20260221050000 20260208040000 21831 . nxKz2dNLYjUd3DQBPYvN5EPvkwxOI4lZuHOjERfDRwsEDVMjSdEdNKHe7Hn4V4vzd5buEaUe2CT6 PnroFDOroOjL2PdWBlX4lFieJpZOPdpEJHipk+WrLpdaWOjO83QJJUeEp8dabupHTPTViuncwLbL w+MNgs3d8yaFtXLXzGIZ1J50UkrmUruhW+nzaB4MK+eER0AQ9F4TZPvPAQyOTtX4KpL3I3+xBcu5 GTq9m+H8Y4j8BFhWLiINIXrfJwCOGLUgRMDERAe1X7fWMlP0Aoxe/zUmEQYHGTSY7+ZGleZhloZ5 yfUcJAhWd3LsgEMY7W+mDaKy8xWyqDWJ1L13Lg== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=43876/SHA-256 is now in the chain-of-trust
	`uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 )`
	Query to dns1.nic.uk for uk/DNSKEY
	Received 745 bytes from 213.248.216.1
	;; Response received from [213.248.216.1] 745 octets ;; HEADER SECTION ;; id = 8829 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (3 records) uk. 7200 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056 uk. 7200 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876 uk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20260312055459 20260205051708 43876 uk. AX8KSc3+P25gfabLnvAmUjZAFGXj9GBrgEjzB02ryKjT6Y2dxfjUuOPouxG9vFcLPpqz849YtCJI Z4BQ9ROzqGujjWMHF39jfmUKL5BquuAazDv4AjayFntuY/f5A4r+gB+2AU30EuWimzLl3cEO1WZZ xvYi2+l6PCV24xqYiXEuw/Ua4zvptQcnbYK0YRTCgn/tOJ3HCJ1sYY8Z66fQ+XilIYieHMzyjN1F 1g/HgEp4EkRXqZuNKULdomAlbSK4+wG7RR40S8CIWCh2BmTZq+2O5BqyET7M17lZCoiie32+fi9X K9Tm2Zoqr1waigvSvYrq3Y26T0z+AtZI8vP/vg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for uk
	`uk. 7200 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056`
	`uk. 7200 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876`
	DNSKEY=43876/SEP is now in the chain-of-trust
	DS=43876/SHA-256 verifies DNSKEY=43876/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`uk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20260312055459 20260205051708 43876 uk. AX8KSc3+P25gfabLnvAmUjZAFGXj9GBrgEjzB02ryKjT6Y2dxfjUuOPouxG9vFcLPpqz849YtCJI Z4BQ9ROzqGujjWMHF39jfmUKL5BquuAazDv4AjayFntuY/f5A4r+gB+2AU30EuWimzLl3cEO1WZZ xvYi2+l6PCV24xqYiXEuw/Ua4zvptQcnbYK0YRTCgn/tOJ3HCJ1sYY8Z66fQ+XilIYieHMzyjN1F 1g/HgEp4EkRXqZuNKULdomAlbSK4+wG7RR40S8CIWCh2BmTZq+2O5BqyET7M17lZCoiie32+fi9X K9Tm2Zoqr1waigvSvYrq3Y26T0z+AtZI8vP/vg== )`
	RRSIG=43876 and DNSKEY=43876/SEP verifies the DNSKEY RRset
	DNSKEY=43056 is now in the chain-of-trust
	Query to dns3.nic.uk for tristanself.co.uk/A
	Received 522 bytes from 213.248.220.1
	;; Response received from [213.248.220.1] 522 octets ;; HEADER SECTION ;; id = 51094 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tristanself.co.uk. 172800 IN NS ns-316.awsdns-39.com. tristanself.co.uk. 172800 IN NS ns-997.awsdns-60.net. tristanself.co.uk. 172800 IN NS ns-1057.awsdns-04.org. tristanself.co.uk. 172800 IN NS ns-1817.awsdns-35.co.uk. tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260312043458 20260205035124 44346 co.uk. GQRJJZUF/+arLFmnQORXg7U0ST4iAbjRIp7AjX1wj2U0T4M6sAIRQGpUaYGKK43A73M678ZAanhb cyF3wu4JcstOddTjY8U0X9itO14Fp9B9ezqo3peMNACzc57zJoWTqojxyzKmOICQlIaclAxiMUeb 7RVz1/N1w61Co/lkdG8PxnrPH/92z14XY8VEXqBhy2T0VvewmbslSSeetaok4b1hsz1I7HWufdg5 e6bz8SqBhUigLu9lnNK00pvxwEnciJ35B3M0U+gVOTakW3KgjGe3HWAegeWDh7S6BAWYdGly41k4 MOA9rMW8uv7g9INesG1B3v7n5Bcyaesjug+5VQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns4.nic.uk for co.uk/DNSKEY
	Received 879 bytes from 43.230.48.1
	;; Response received from [43.230.48.1] 879 octets ;; HEADER SECTION ;; id = 58898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (3 records) co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346 co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810 co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260311083546 20260204075820 11810 co.uk. euypRo57hpFIz6Z5VVsvMh3vWAZZzMguGZ6FPs7ki2l2oUmifRhNB9xayMEFv+iMo+xwR44CnYM8 lnfAnUaAV0KO+2T/V8jfIhoYPWYKjgNPX5YIocfJ3B+dsOiLvCxFDWVqpwH1VJfdFQHw9BBqB5Oo v9qPLGMAfcejG594JcCKtbHSIkAqVvkBPYXU2oPV2kctvOeXeOQIvmD/vYrmp0Eb8WpPw2KUbTIo 8/LGGcqmLQilgqKJVMLUfnnpGC3KpZ+3fR4VH9HzWnIHQZCkp3/vXdr7hoU2eQZFY7e8AyAvcCIJ C7yM2FvZurowNMI9OJRQGG6goDtervHKrT0vlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone co.uk
	Attempting to learn nameservers for co.uk
	Query to dns1.nic.uk for co.uk/NS
	Received 479 bytes from 213.248.216.1
	;; Response received from [213.248.216.1] 479 octets ;; HEADER SECTION ;; id = 15285 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 9 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN NS ;; ANSWER SECTION (9 records) co.uk. 172800 IN NS nsa.nic.uk. co.uk. 172800 IN NS nsb.nic.uk. co.uk. 172800 IN NS nsc.nic.uk. co.uk. 172800 IN NS nsd.nic.uk. co.uk. 172800 IN NS dns1.nic.uk. co.uk. 172800 IN NS dns2.nic.uk. co.uk. 172800 IN NS dns3.nic.uk. co.uk. 172800 IN NS dns4.nic.uk. co.uk. 172800 IN RRSIG ( NS 8 2 172800 20260311203125 20260204201613 44346 co.uk. nmQ52e6/0m1OvNoclQis+4KMov1qJjd9hOFM+aI9ZteWDsqGatexM/xDSt136V0HM0+g+MAnjyaL WMsTpEDJOZohCy5O8mAWXIn/mRHWjg1UuCNgFx5WnKvLT0vUNB2W6CBdDv4q+1TpiRqzd4AdGqeb 79tZo/9GhSmkrL31Hl9y0+g/iQEU9/fYaKE323eIkIJHTNp0UqZbodCeXrUmBqxudMQZwaP9SxXS MDgozd8kmS/wxnuEFPQRtHhpjcFZ9axPp93BiGMvuHg03kgVGfKVxrJcx9uNl6NwR/sQD8YhbNc3 YPVrynvmSZJepxPCLXfKMxAHprq3Q/eGWRTcrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found co.uk nameservers: nsa.nic.uk, nsb.nic.uk, nsc.nic.uk, nsd.nic.uk, dns1.nic.uk, dns2.nic.uk, dns3.nic.uk, dns4.nic.uk

co.uk

	Checking DS between uk and co.uk
	Query to dns3.nic.uk for co.uk/DS
	Received 244 bytes from 213.248.220.1
	;; Response received from [213.248.220.1] 244 octets ;; HEADER SECTION ;; id = 21551 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DS ;; ANSWER SECTION (2 records) co.uk. 300 IN DS ( 11810 8 2 1df4681bdacc3e6296ac7667c42ca33cb57efbc2005ce23064f15fbffa286ff5 ) co.uk. 300 IN RRSIG ( DS 8 2 300 20260309035700 20260202034317 43056 uk. tTKsY7veIjsi9SQ3OJAVmW4KnlGy6NLEeVdpru1ByRvEa3soDyr8LFAOhlf1dxADjB+hlvDeCERC wNwuYVuLwusrKfID86fAgCcck9NgXFqNhna/xpoJynbnjz3uOTEW/2aIn4jG5GpXqRg4SEX5gi2j IMPBj2Z+1z/JszZJNFw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for co.uk in the uk zone
	DS=11810/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co.uk. 300 IN RRSIG ( DS 8 2 300 20260309035700 20260202034317 43056 uk. tTKsY7veIjsi9SQ3OJAVmW4KnlGy6NLEeVdpru1ByRvEa3soDyr8LFAOhlf1dxADjB+hlvDeCERC wNwuYVuLwusrKfID86fAgCcck9NgXFqNhna/xpoJynbnjz3uOTEW/2aIn4jG5GpXqRg4SEX5gi2j IMPBj2Z+1z/JszZJNFw= )`
	RRSIG=43056 and DNSKEY=43056 verifies the DS RRset
	DS=11810/SHA-256 is now in the chain-of-trust
	`co.uk. 300 IN DS ( 11810 8 2 1df4681bdacc3e6296ac7667c42ca33cb57efbc2005ce23064f15fbffa286ff5 )`
	Query to dns3.nic.uk for co.uk/DNSKEY
	Received 879 bytes from 213.248.220.1
	;; Response received from [213.248.220.1] 879 octets ;; HEADER SECTION ;; id = 37929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (3 records) co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346 co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810 co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260311083546 20260204075820 11810 co.uk. euypRo57hpFIz6Z5VVsvMh3vWAZZzMguGZ6FPs7ki2l2oUmifRhNB9xayMEFv+iMo+xwR44CnYM8 lnfAnUaAV0KO+2T/V8jfIhoYPWYKjgNPX5YIocfJ3B+dsOiLvCxFDWVqpwH1VJfdFQHw9BBqB5Oo v9qPLGMAfcejG594JcCKtbHSIkAqVvkBPYXU2oPV2kctvOeXeOQIvmD/vYrmp0Eb8WpPw2KUbTIo 8/LGGcqmLQilgqKJVMLUfnnpGC3KpZ+3fR4VH9HzWnIHQZCkp3/vXdr7hoU2eQZFY7e8AyAvcCIJ C7yM2FvZurowNMI9OJRQGG6goDtervHKrT0vlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for co.uk
	`co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346`
	`co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810`
	DNSKEY=11810/SEP is now in the chain-of-trust
	DS=11810/SHA-256 verifies DNSKEY=11810/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260311083546 20260204075820 11810 co.uk. euypRo57hpFIz6Z5VVsvMh3vWAZZzMguGZ6FPs7ki2l2oUmifRhNB9xayMEFv+iMo+xwR44CnYM8 lnfAnUaAV0KO+2T/V8jfIhoYPWYKjgNPX5YIocfJ3B+dsOiLvCxFDWVqpwH1VJfdFQHw9BBqB5Oo v9qPLGMAfcejG594JcCKtbHSIkAqVvkBPYXU2oPV2kctvOeXeOQIvmD/vYrmp0Eb8WpPw2KUbTIo 8/LGGcqmLQilgqKJVMLUfnnpGC3KpZ+3fR4VH9HzWnIHQZCkp3/vXdr7hoU2eQZFY7e8AyAvcCIJ C7yM2FvZurowNMI9OJRQGG6goDtervHKrT0vlQ== )`
	RRSIG=11810 and DNSKEY=11810/SEP verifies the DNSKEY RRset
	DNSKEY=44346 is now in the chain-of-trust
	Query to nsb.nic.uk for tristanself.co.uk/A
	Received 527 bytes from 156.154.101.3
	;; Response received from [156.154.101.3] 527 octets ;; HEADER SECTION ;; id = 40185 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tristanself.co.uk. 172800 IN NS ns-1057.awsdns-04.org. tristanself.co.uk. 172800 IN NS ns-1817.awsdns-35.co.uk. tristanself.co.uk. 172800 IN NS ns-316.awsdns-39.com. tristanself.co.uk. 172800 IN NS ns-997.awsdns-60.net. tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260312043458 20260205035124 44346 co.uk. GQRJJZUF/+arLFmnQORXg7U0ST4iAbjRIp7AjX1wj2U0T4M6sAIRQGpUaYGKK43A73M678ZAanhb cyF3wu4JcstOddTjY8U0X9itO14Fp9B9ezqo3peMNACzc57zJoWTqojxyzKmOICQlIaclAxiMUeb 7RVz1/N1w61Co/lkdG8PxnrPH/92z14XY8VEXqBhy2T0VvewmbslSSeetaok4b1hsz1I7HWufdg5 e6bz8SqBhUigLu9lnNK00pvxwEnciJ35B3M0U+gVOTakW3KgjGe3HWAegeWDh7S6BAWYdGly41k4 MOA9rMW8uv7g9INesG1B3v7n5Bcyaesjug+5VQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsc.nic.uk for tristanself.co.uk/DNSKEY
	Received 527 bytes from 156.154.102.3
	;; Response received from [156.154.102.3] 527 octets ;; HEADER SECTION ;; id = 10240 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tristanself.co.uk. 172800 IN NS ns-316.awsdns-39.com. tristanself.co.uk. 172800 IN NS ns-997.awsdns-60.net. tristanself.co.uk. 172800 IN NS ns-1057.awsdns-04.org. tristanself.co.uk. 172800 IN NS ns-1817.awsdns-35.co.uk. tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260312043458 20260205035124 44346 co.uk. GQRJJZUF/+arLFmnQORXg7U0ST4iAbjRIp7AjX1wj2U0T4M6sAIRQGpUaYGKK43A73M678ZAanhb cyF3wu4JcstOddTjY8U0X9itO14Fp9B9ezqo3peMNACzc57zJoWTqojxyzKmOICQlIaclAxiMUeb 7RVz1/N1w61Co/lkdG8PxnrPH/92z14XY8VEXqBhy2T0VvewmbslSSeetaok4b1hsz1I7HWufdg5 e6bz8SqBhUigLu9lnNK00pvxwEnciJ35B3M0U+gVOTakW3KgjGe3HWAegeWDh7S6BAWYdGly41k4 MOA9rMW8uv7g9INesG1B3v7n5Bcyaesjug+5VQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone tristanself.co.uk

tristanself.co.uk

	Checking DS between co.uk and tristanself.co.uk
	Query to dns1.nic.uk for tristanself.co.uk/DS
	Received 387 bytes from 213.248.216.1
	;; Response received from [213.248.216.1] 387 octets ;; HEADER SECTION ;; id = 36018 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN DS ;; ANSWER SECTION (2 records) tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260312043458 20260205035124 44346 co.uk. GQRJJZUF/+arLFmnQORXg7U0ST4iAbjRIp7AjX1wj2U0T4M6sAIRQGpUaYGKK43A73M678ZAanhb cyF3wu4JcstOddTjY8U0X9itO14Fp9B9ezqo3peMNACzc57zJoWTqojxyzKmOICQlIaclAxiMUeb 7RVz1/N1w61Co/lkdG8PxnrPH/92z14XY8VEXqBhy2T0VvewmbslSSeetaok4b1hsz1I7HWufdg5 e6bz8SqBhUigLu9lnNK00pvxwEnciJ35B3M0U+gVOTakW3KgjGe3HWAegeWDh7S6BAWYdGly41k4 MOA9rMW8uv7g9INesG1B3v7n5Bcyaesjug+5VQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for tristanself.co.uk in the co.uk zone
	DS=11383/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260312043458 20260205035124 44346 co.uk. GQRJJZUF/+arLFmnQORXg7U0ST4iAbjRIp7AjX1wj2U0T4M6sAIRQGpUaYGKK43A73M678ZAanhb cyF3wu4JcstOddTjY8U0X9itO14Fp9B9ezqo3peMNACzc57zJoWTqojxyzKmOICQlIaclAxiMUeb 7RVz1/N1w61Co/lkdG8PxnrPH/92z14XY8VEXqBhy2T0VvewmbslSSeetaok4b1hsz1I7HWufdg5 e6bz8SqBhUigLu9lnNK00pvxwEnciJ35B3M0U+gVOTakW3KgjGe3HWAegeWDh7S6BAWYdGly41k4 MOA9rMW8uv7g9INesG1B3v7n5Bcyaesjug+5VQ== )`
	RRSIG=44346 and DNSKEY=44346 verifies the DS RRset
	DS=11383/SHA-256 is now in the chain-of-trust
	`tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 )`
	Query to ns-1057.awsdns-04.org for tristanself.co.uk/DNSKEY
	Received 399 bytes from 205.251.196.33
	;; Response received from [205.251.196.33] 399 octets ;; HEADER SECTION ;; id = 35606 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN DNSKEY ;; ANSWER SECTION (4 records) tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 7NU53HAd5pdbUs6gd0aCsf6KVBgVPWojUftUEJ9tnCmbni0gk1errkQrpbr+LL6Hqtd0yKunn19W SEDJNOxA1Q== ) ; keytag 32480 tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 bP1Vzum83SC3db1Ocs1PJowDOff2zkZHEGAJpYNVSOd+FMF/mfawocKRhyrUb5vBbsjNr9UY1THT cMir17rDxQ== ) ; keytag 4156 tristanself.co.uk. 3600 IN DNSKEY ( 257 3 13 HJgXnjrKo/pK21P9LgSDs3p6DpIGteExwDTnfrZiUDoooFMdMEWnNwrgQZdGIJl1I+HgT/700IFU U0QcL5mKoQ== ) ; keytag 11383 tristanself.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20260208180000 20260208070000 11383 tristanself.co.uk. Lrx5eGP7ShlGqbG5GJX4Qn83+mI+bq4e8Ykyz0Z6aGX9YOiQuoFgSK/LHiz3QnVh3TVJPy9WMRnR QWRUPWbdcA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for tristanself.co.uk
	`tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 7NU53HAd5pdbUs6gd0aCsf6KVBgVPWojUftUEJ9tnCmbni0gk1errkQrpbr+LL6Hqtd0yKunn19W SEDJNOxA1Q== ) ; keytag 32480`
	`tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 bP1Vzum83SC3db1Ocs1PJowDOff2zkZHEGAJpYNVSOd+FMF/mfawocKRhyrUb5vBbsjNr9UY1THT cMir17rDxQ== ) ; keytag 4156`
	`tristanself.co.uk. 3600 IN DNSKEY ( 257 3 13 HJgXnjrKo/pK21P9LgSDs3p6DpIGteExwDTnfrZiUDoooFMdMEWnNwrgQZdGIJl1I+HgT/700IFU U0QcL5mKoQ== ) ; keytag 11383`
	DNSKEY=11383/SEP is now in the chain-of-trust
	DS=11383/SHA-256 verifies DNSKEY=11383/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`tristanself.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20260208180000 20260208070000 11383 tristanself.co.uk. Lrx5eGP7ShlGqbG5GJX4Qn83+mI+bq4e8Ykyz0Z6aGX9YOiQuoFgSK/LHiz3QnVh3TVJPy9WMRnR QWRUPWbdcA== )`
	RRSIG=11383 and DNSKEY=11383/SEP verifies the DNSKEY RRset
	DNSKEY=32480 is now in the chain-of-trust
	DNSKEY=4156 is now in the chain-of-trust
	Query to ns-1817.awsdns-35.co.uk for tristanself.co.uk/A
	Received 405 bytes from 205.251.199.25
	;; Response received from [205.251.199.25] 405 octets ;; HEADER SECTION ;; id = 14339 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260208093320 20260208071820 4156 tristanself.co.uk. XqRtwpXU1rFN64yoADyBGQJ52WQ44nLng2VavTK/mlHXM42bLswLedSet/Zrf+n3WvuF6rXTXM20 yA0ceq6eRQ== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260209091820 20260208071820 4156 tristanself.co.uk. tPYph8pSLJ4JPSiB4XUn9Bj7ImwOGrXN7NHQh1acgZqKS/9ep5wZVolL5DPAQHSAk4zP5NWFfVM5 1dX/OWliKg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1817.awsdns-35.co.uk is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-316.awsdns-39.com for tristanself.co.uk/SOA
	Received 241 bytes from 205.251.193.60
	;; Response received from [205.251.193.60] 241 octets ;; HEADER SECTION ;; id = 1142 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN SOA ;; ANSWER SECTION (2 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260208093320 20260208071820 4156 tristanself.co.uk. 0SFX2VHlnFh8KDgeCrziL807XaQG0fiw3RBbrgPJEpY8yjqv1c59MjiwAnBimUH66APlX4XR2C2H SwTrKZIIWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1057.awsdns-04.org for tristanself.co.uk/SOA
	Received 241 bytes from 205.251.196.33
	;; Response received from [205.251.196.33] 241 octets ;; HEADER SECTION ;; id = 37664 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN SOA ;; ANSWER SECTION (2 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260208093320 20260208071820 4156 tristanself.co.uk. /tUFMEQAAkMBbsZJVD+IM5xrumr7YwgdHP7HrfBxNn2TvLNegcyRUvTgdFU/1UKQdu74X3DMUKsd OpVz838s7A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-997.awsdns-60.net for tristanself.co.uk/SOA
	Received 241 bytes from 205.251.195.229
	;; Response received from [205.251.195.229] 241 octets ;; HEADER SECTION ;; id = 17661 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN SOA ;; ANSWER SECTION (2 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260208093321 20260208071821 4156 tristanself.co.uk. KlVlxD+fmMkcaS+ItMR3A1Wjv3LJegxQQWy9ngVOouVA1X3i8LJiDfDsdubXccuD4FYZKssV5COy h2J2gean5w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1817.awsdns-35.co.uk for tristanself.co.uk/A
	Received 405 bytes from 205.251.199.25
	;; Response received from [205.251.199.25] 405 octets ;; HEADER SECTION ;; id = 36827 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260208093321 20260208071821 4156 tristanself.co.uk. 5dShD2APrqDCl1wmDuYA1qjabAlclh54QMaBLvqCBqrOm2IMo2mtDrvB4UzP58V/8BqdrblJn2g4 Hg9tfOyecA== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260209091821 20260208071821 4156 tristanself.co.uk. U/XB3QalgNeaUr11B73WpVIZQMll2rOcvnh6f3cj1ck+DnGzBkk9sHnsN4cue6D7UUuXB4txi4Ky 991ji/xHSA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260209091821 20260208071821 4156 tristanself.co.uk. U/XB3QalgNeaUr11B73WpVIZQMll2rOcvnh6f3cj1ck+DnGzBkk9sHnsN4cue6D7UUuXB4txi4Ky 991ji/xHSA== )`
	RRSIG=4156 and DNSKEY=4156 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260208093320 20260208071820 4156 tristanself.co.uk. XqRtwpXU1rFN64yoADyBGQJ52WQ44nLng2VavTK/mlHXM42bLswLedSet/Zrf+n3WvuF6rXTXM20 yA0ceq6eRQ== )`
	RRSIG=4156 and DNSKEY=4156 verifies the SOA RRset

tristanself.co.uk

	Query to ns-316.awsdns-39.com for tristanself.co.uk/A
	Received 405 bytes from 205.251.193.60
	;; Response received from [205.251.193.60] 405 octets ;; HEADER SECTION ;; id = 21441 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260208093321 20260208071821 4156 tristanself.co.uk. dOD/TZbzbURTm+mOhxafXmnvojUqp2yKOM1+UqrbD7FfrnHwIG1lt47SvTKCtzTkXC4P8zU4d20P ceZmXEDKvA== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260209091821 20260208071821 4156 tristanself.co.uk. X7koDwW3AdhcPjMuFkzrf4p8bLAnVzhisOnbJZ7OXo7Oq8FJpnpyb+XUmXIe3tRTHChGpqrA2PJF kH2DE2/2hQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-316.awsdns-39.com is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-316.awsdns-39.com for tristanself.co.uk/A
	Received 405 bytes from 205.251.193.60
	;; Response received from [205.251.193.60] 405 octets ;; HEADER SECTION ;; id = 22213 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260208093321 20260208071821 4156 tristanself.co.uk. /6Kc7Z7KnB6Ba/yVt1LAj4EInZ2eTtzfjKQfpi/2Y2oJ7Z8DFc1pbjil8mpqdjxmFUVpiovhil93 gRWfc4eZ8g== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260209091821 20260208071821 4156 tristanself.co.uk. ckWc/A53IT1U3fiDpn0kMd34sf2x1wQub7wFILMBu+dZ7slnUE2+OWy/yhSWuAzO04l26IesmAtQ Bzb1liLLAw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260209091821 20260208071821 4156 tristanself.co.uk. ckWc/A53IT1U3fiDpn0kMd34sf2x1wQub7wFILMBu+dZ7slnUE2+OWy/yhSWuAzO04l26IesmAtQ Bzb1liLLAw== )`
	RRSIG=4156 and DNSKEY=4156 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260208093321 20260208071821 4156 tristanself.co.uk. dOD/TZbzbURTm+mOhxafXmnvojUqp2yKOM1+UqrbD7FfrnHwIG1lt47SvTKCtzTkXC4P8zU4d20P ceZmXEDKvA== )`
	RRSIG=4156 and DNSKEY=4156 verifies the SOA RRset

tristanself.co.uk

	Query to ns-997.awsdns-60.net for tristanself.co.uk/A
	Received 405 bytes from 205.251.195.229
	;; Response received from [205.251.195.229] 405 octets ;; HEADER SECTION ;; id = 58511 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260208093321 20260208071821 4156 tristanself.co.uk. v6+6PoYmEMuGsZVYWNxJtKMcRFkr/DOKoq1m3lct7Mvs3itbGGKu3IZZ/+WGjOqf+BqD21a8nXV4 BVJeAn+nMg== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260209091821 20260208071821 4156 tristanself.co.uk. BnKVmX6uKek4T3//NBUO3heJrZV6cIlVhOSRbeksanrFEfqHk1GbrJa6FXrJ2lEIbOXy0ystaq94 Xm7hKWgmaw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-997.awsdns-60.net is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-997.awsdns-60.net for tristanself.co.uk/A
	Received 405 bytes from 205.251.195.229
	;; Response received from [205.251.195.229] 405 octets ;; HEADER SECTION ;; id = 23507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260208093321 20260208071821 4156 tristanself.co.uk. qKpthl6Hfr67+wKAOHHn0dz8bc8d4pGS/cz2HWAVpJb+7isoLXwe1KPjlrvh4ZRNvPce1pNPlD0I LwxQ9Ll2nw== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260209091821 20260208071821 4156 tristanself.co.uk. 0im/eKf50cWwYY/juEKlGO3x9oTQecua1kv3fmv8vW9iWdoXDz+POXYgorv9M2dfNPEV8b76h0cY nmy33gwptA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260209091821 20260208071821 4156 tristanself.co.uk. 0im/eKf50cWwYY/juEKlGO3x9oTQecua1kv3fmv8vW9iWdoXDz+POXYgorv9M2dfNPEV8b76h0cY nmy33gwptA== )`
	RRSIG=4156 and DNSKEY=4156 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260208093321 20260208071821 4156 tristanself.co.uk. v6+6PoYmEMuGsZVYWNxJtKMcRFkr/DOKoq1m3lct7Mvs3itbGGKu3IZZ/+WGjOqf+BqD21a8nXV4 BVJeAn+nMg== )`
	RRSIG=4156 and DNSKEY=4156 verifies the SOA RRset

tristanself.co.uk

	Query to ns-1057.awsdns-04.org for tristanself.co.uk/A
	Received 405 bytes from 205.251.196.33
	;; Response received from [205.251.196.33] 405 octets ;; HEADER SECTION ;; id = 21597 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260208093321 20260208071821 4156 tristanself.co.uk. FoP1VdSAurlpJacj/YJZztJPHGdYmeta8/KDXAGx28zj0E8NqsO+OMaYOXuwvrvMA9j+cazYUlIR XGMQAgXEHQ== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260209091821 20260208071821 4156 tristanself.co.uk. nvQU197m+C2XnW8oUb/YX3mgL6kHhMJILac2Ua7noCirWZRtRZvpVRCB4PndhsTBYPwiMHZ+0nVH GLmHhVBoyg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1057.awsdns-04.org is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-1057.awsdns-04.org for tristanself.co.uk/A
	Received 405 bytes from 205.251.196.33
	;; Response received from [205.251.196.33] 405 octets ;; HEADER SECTION ;; id = 32359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260208093321 20260208071821 4156 tristanself.co.uk. EMGcfLpl7RcwupdTpWyieBZIbtYjnCscJL2G1rTX3Ag+TS896RRNrwUhcgajJ99RcsJW2PVsyPpC Q7uQr0imuQ== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260209091821 20260208071821 4156 tristanself.co.uk. 7/dw4MZET/5DSARaU1E3/yi34gH7G88JOBJ9+YHLq2TSc5XO61OtlE+vf1TG6iYZeJij83+eaxOx B1fk5RiPQA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260209091821 20260208071821 4156 tristanself.co.uk. 7/dw4MZET/5DSARaU1E3/yi34gH7G88JOBJ9+YHLq2TSc5XO61OtlE+vf1TG6iYZeJij83+eaxOx B1fk5RiPQA== )`
	RRSIG=4156 and DNSKEY=4156 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260208093321 20260208071821 4156 tristanself.co.uk. FoP1VdSAurlpJacj/YJZztJPHGdYmeta8/KDXAGx28zj0E8NqsO+OMaYOXuwvrvMA9j+cazYUlIR XGMQAgXEHQ== )`
	RRSIG=4156 and DNSKEY=4156 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test tristanself.co.uk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: