DNSSEC Debugger - tristanself.co.uk

Domain Name:

Time: 2026-02-15 07:05:16 UTC

Analyzing DNSSEC problems for tristanself.co.uk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1141 octets ;; HEADER SECTION ;; id = 53697 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260303000000 20260210000000 20326 . TNriFzthFM1hKzGD2meB96QrMIdTe/9ZFzMPdP3wWZAOvyfH9F9wuIhjT0V3H/0UE2cq04wvOtdG sEdmJaF7fCIj8aEE3e9Zn/woJXXXl9J3fhZQyGMq5jQLr+4KAuaNPwaMwlGHMDgZuwVJx1KpsAii b+GldJsCAVqM9hW9FpPwtuiN3c8xKT+A8DlAImzKTAUyQEyfSa9UlQzRwPeWcs2HQA/5GL0eosEW pwfdCHfpMw7JPFIMhUEsRftyZuxDgrPQs/geHoSXMeI+bgIRirnRkOLVDaNSiAKt1VtWeDrVeOBc IEzocdRicpX7VmwFHiHM1BblamwYCsX/nfexFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260303000000 20260210000000 20326 . TNriFzthFM1hKzGD2meB96QrMIdTe/9ZFzMPdP3wWZAOvyfH9F9wuIhjT0V3H/0UE2cq04wvOtdG sEdmJaF7fCIj8aEE3e9Zn/woJXXXl9J3fhZQyGMq5jQLr+4KAuaNPwaMwlGHMDgZuwVJx1KpsAii b+GldJsCAVqM9hW9FpPwtuiN3c8xKT+A8DlAImzKTAUyQEyfSa9UlQzRwPeWcs2HQA/5GL0eosEW pwfdCHfpMw7JPFIMhUEsRftyZuxDgrPQs/geHoSXMeI+bgIRirnRkOLVDaNSiAKt1VtWeDrVeOBc IEzocdRicpX7VmwFHiHM1BblamwYCsX/nfexFg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to h.root-servers.net for tristanself.co.uk/A
	Received 885 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 885 octets ;; HEADER SECTION ;; id = 14679 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . JJmk8c4eji/uA77Z1VgCHuaFHZuwdXWnlUx4AsS9G7SrrK33K18K8yTufj7c+2RSH5p3uYfYuYRE ImoUVBDNDre0e/nQjtRLnwiohK8xGvc7OQ0lpBAgFA+WmaN9tCt24J9HWBjHKekM/I51CYduQub3 YuLmKn6gQ29dri2MfXJBa9txXaZ5WTzObkAbwl3Mm8lHQydursHtzVhMtKQPCLiKYqpwn+DfJG+Y 09FKGJ5X1XIA28smV3TXk3NbTievd8+qrgsl23cWEPxrxnzl5zuVSTxBFFvTy3VfoyY0d1Xtu47r L8tWAKeelRhLTI2arKg1Y/114cUrvDarfmABdA== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsd.nic.uk. 172800 IN A 156.154.103.3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns4.nic.uk. 172800 IN A 43.230.48.1 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for uk/DNSKEY
	Received 870 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 870 octets ;; HEADER SECTION ;; id = 51753 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . JJmk8c4eji/uA77Z1VgCHuaFHZuwdXWnlUx4AsS9G7SrrK33K18K8yTufj7c+2RSH5p3uYfYuYRE ImoUVBDNDre0e/nQjtRLnwiohK8xGvc7OQ0lpBAgFA+WmaN9tCt24J9HWBjHKekM/I51CYduQub3 YuLmKn6gQ29dri2MfXJBa9txXaZ5WTzObkAbwl3Mm8lHQydursHtzVhMtKQPCLiKYqpwn+DfJG+Y 09FKGJ5X1XIA28smV3TXk3NbTievd8+qrgsl23cWEPxrxnzl5zuVSTxBFFvTy3VfoyY0d1Xtu47r L8tWAKeelRhLTI2arKg1Y/114cUrvDarfmABdA== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN A 156.154.103.3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN A 43.230.48.1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Found child zone uk

	Checking DS between . and uk
	Query to f.root-servers.net for uk/DS
	Received 366 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 366 octets ;; HEADER SECTION ;; id = 21084 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DS ;; ANSWER SECTION (2 records) uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . JJmk8c4eji/uA77Z1VgCHuaFHZuwdXWnlUx4AsS9G7SrrK33K18K8yTufj7c+2RSH5p3uYfYuYRE ImoUVBDNDre0e/nQjtRLnwiohK8xGvc7OQ0lpBAgFA+WmaN9tCt24J9HWBjHKekM/I51CYduQub3 YuLmKn6gQ29dri2MfXJBa9txXaZ5WTzObkAbwl3Mm8lHQydursHtzVhMtKQPCLiKYqpwn+DfJG+Y 09FKGJ5X1XIA28smV3TXk3NbTievd8+qrgsl23cWEPxrxnzl5zuVSTxBFFvTy3VfoyY0d1Xtu47r L8tWAKeelRhLTI2arKg1Y/114cUrvDarfmABdA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for uk in the . zone
	DS=43876/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uk. 86400 IN RRSIG ( DS 8 1 86400 20260228050000 20260215040000 21831 . JJmk8c4eji/uA77Z1VgCHuaFHZuwdXWnlUx4AsS9G7SrrK33K18K8yTufj7c+2RSH5p3uYfYuYRE ImoUVBDNDre0e/nQjtRLnwiohK8xGvc7OQ0lpBAgFA+WmaN9tCt24J9HWBjHKekM/I51CYduQub3 YuLmKn6gQ29dri2MfXJBa9txXaZ5WTzObkAbwl3Mm8lHQydursHtzVhMtKQPCLiKYqpwn+DfJG+Y 09FKGJ5X1XIA28smV3TXk3NbTievd8+qrgsl23cWEPxrxnzl5zuVSTxBFFvTy3VfoyY0d1Xtu47r L8tWAKeelRhLTI2arKg1Y/114cUrvDarfmABdA== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=43876/SHA-256 is now in the chain-of-trust
	`uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 )`
	Query to dns1.nic.uk for uk/DNSKEY
	Received 745 bytes from 213.248.216.1
	;; Response received from [213.248.216.1] 745 octets ;; HEADER SECTION ;; id = 25929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (3 records) uk. 7200 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056 uk. 7200 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876 uk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20260319054801 20260212045459 43876 uk. b+kv8IsSRSoib2vLot6INvgU/Ui1p2B99nPqVX2rmlulLpfnfZtns9XAZ3j2rus1MSIny7yeNYsI Z29C4QZwNF6EpNmxJYyZdiTnIdN5A94YC2R+um9W8nbsiXQ6X/KijfoD/eZFbiq3EFRfOMG8gqBz R/uEUgkFtJ2JCuIbVZ6Nvb3QD1ClvlReEW2o5Lr5wBIjzuZojMIKwNdXjWiobCPX/lMEEgF/X3em vuWFAmuUOvh62iL5o7jxeiEtCivEVdnxS93dTULEcwBLHIV6PIuwKrok+hbzt6EU6quvm3HDX0hI jPn++/WOA1gS1VL36HRVN6yc4JY3n1bCmdiLlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for uk
	`uk. 7200 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056`
	`uk. 7200 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876`
	DNSKEY=43876/SEP is now in the chain-of-trust
	DS=43876/SHA-256 verifies DNSKEY=43876/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`uk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20260319054801 20260212045459 43876 uk. b+kv8IsSRSoib2vLot6INvgU/Ui1p2B99nPqVX2rmlulLpfnfZtns9XAZ3j2rus1MSIny7yeNYsI Z29C4QZwNF6EpNmxJYyZdiTnIdN5A94YC2R+um9W8nbsiXQ6X/KijfoD/eZFbiq3EFRfOMG8gqBz R/uEUgkFtJ2JCuIbVZ6Nvb3QD1ClvlReEW2o5Lr5wBIjzuZojMIKwNdXjWiobCPX/lMEEgF/X3em vuWFAmuUOvh62iL5o7jxeiEtCivEVdnxS93dTULEcwBLHIV6PIuwKrok+hbzt6EU6quvm3HDX0hI jPn++/WOA1gS1VL36HRVN6yc4JY3n1bCmdiLlQ== )`
	RRSIG=43876 and DNSKEY=43876/SEP verifies the DNSKEY RRset
	DNSKEY=43056 is now in the chain-of-trust
	Query to nsc.nic.uk for tristanself.co.uk/A
	Received 527 bytes from 156.154.102.3
	;; Response received from [156.154.102.3] 527 octets ;; HEADER SECTION ;; id = 32398 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tristanself.co.uk. 172800 IN NS ns-1817.awsdns-35.co.uk. tristanself.co.uk. 172800 IN NS ns-316.awsdns-39.com. tristanself.co.uk. 172800 IN NS ns-997.awsdns-60.net. tristanself.co.uk. 172800 IN NS ns-1057.awsdns-04.org. tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260319040656 20260212033457 44346 co.uk. n/SA1bcq9MLwUU+aZEya4uW14qkXl7MzFKkJ1s/92/Yak5FN0mMbY1AYAkR02W7pmBSgUau81R9d xYQnoPSKBC4SK+rT0c7cH1+MC8HJ2k4DhBeA7ZiOMlXVxA1u9gROFTDgbu/Cb8OwCVeBr3a1MEUD sGap5Ka+C1xGTPZBkJlJeYJc0kM8Qa++rY5c27xA9WAG9niJk3qv5TK+/osr+kiTfmNGlxQk1WXb q1SAeYkCJRYmtv9XxHAhC6wSjia+37tHP+Xa92rBCBwJs0J683Rw7yski7XmceM8/uOtKtzjPNuf pvilX0y39o7umhyhuOwxGqjFU4ExPKBZjABXag== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns4.nic.uk for co.uk/DNSKEY
	Received 879 bytes from 43.230.48.1
	;; Response received from [43.230.48.1] 879 octets ;; HEADER SECTION ;; id = 12451 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (3 records) co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346 co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810 co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260318080614 20260211073546 11810 co.uk. AWFP7kPNVfOYN+Aj+0U0XJSvRDIXGyZ13SgIxcwxmHoJL//eq54r9IMn/ubSyKtGWmpi/iQ1fdba qyY+ECDFeXUvkLd5l/+gt5RjjCO3H+W4a6ljwhpOXXoeUZZcNy6JdI9JGH5PfTSnMluiliajwAt2 oPwrP7ZrXTmreZL5GhKgOuVHHcNtW9nzNmvFualXQo/BrG1wqbN4pkuWR1XWD20Q2HOw/B2Op1Ll HuNBNYFMN4HbFIqf6qD2cqIf9Nz8ja53HHEClhM+pgaY8tcUcWVGp0jcNwRtZ1K/+VdXH07y9d3S mV9LQrPBj/zSLJl6arewv/IRYrzTed+kU1uT6w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone co.uk
	Attempting to learn nameservers for co.uk
	Query to nsb.nic.uk for co.uk/NS
	Received 481 bytes from 156.154.101.3
	;; Response received from [156.154.101.3] 481 octets ;; HEADER SECTION ;; id = 45905 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 9 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN NS ;; ANSWER SECTION (9 records) co.uk. 172800 IN NS dns1.nic.uk. co.uk. 172800 IN NS nsc.nic.uk. co.uk. 172800 IN NS nsb.nic.uk. co.uk. 172800 IN NS dns2.nic.uk. co.uk. 172800 IN NS nsa.nic.uk. co.uk. 172800 IN NS nsd.nic.uk. co.uk. 172800 IN NS dns3.nic.uk. co.uk. 172800 IN NS dns4.nic.uk. co.uk. 172800 IN RRSIG ( NS 8 2 172800 20260318202653 20260211193125 44346 co.uk. FPXUK+5SacQskY7AC3U7ux/akTXN6ahfnUQfCU9wbbTBV7mGC++ZBNG9L5OOfyJZyuA8fDtocJ2S yswMtPg5BqTWSasPwXRzQjQrJ84tgi9ctfJQ6EdrTSfIn11qIda1flsJPi/MAZSYByH2nzKnHGP3 EzQ4DuhuDFu06q6snL/N42oM5BvCGVKsOvJr7TH7vQF2McKJgbAvK3WePqMBh2OR7n8aliYVcHOG BsRrM8UorqzDyQo5PaL+EzmQbHyEhWt3g4DjjPwaRLKESs5XnoNDiEG5Q1kMNPNyV1XwJo3IzBFw 6AE+wE7eXTtOj6thWSMhuFh3EsvUobGiwRlpyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found co.uk nameservers: dns1.nic.uk, nsc.nic.uk, nsb.nic.uk, dns2.nic.uk, nsa.nic.uk, nsd.nic.uk, dns3.nic.uk, dns4.nic.uk

co.uk

	Checking DS between uk and co.uk
	Query to nsd.nic.uk for co.uk/DS
	Received 244 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 244 octets ;; HEADER SECTION ;; id = 62444 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DS ;; ANSWER SECTION (2 records) co.uk. 300 IN DS ( 11810 8 2 1df4681bdacc3e6296ac7667c42ca33cb57efbc2005ce23064f15fbffa286ff5 ) co.uk. 300 IN RRSIG ( DS 8 2 300 20260316030655 20260209025655 43056 uk. NwejxEmpwx83+pgAtjWBlK40U04tA7IkFkt3UmLGRfM/8CSef1/2S7Xebh7K0F0xckbsTHCV6ULy MrSmZggO1eg3OoCTYIIF6bKSB5i4MFIj0buBt1N4QDeUCdWhzoexNoTG4g+KsvAbeKR6r0FC05us smbbHKgeKZrv7MPa/ZQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for co.uk in the uk zone
	DS=11810/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co.uk. 300 IN RRSIG ( DS 8 2 300 20260316030655 20260209025655 43056 uk. NwejxEmpwx83+pgAtjWBlK40U04tA7IkFkt3UmLGRfM/8CSef1/2S7Xebh7K0F0xckbsTHCV6ULy MrSmZggO1eg3OoCTYIIF6bKSB5i4MFIj0buBt1N4QDeUCdWhzoexNoTG4g+KsvAbeKR6r0FC05us smbbHKgeKZrv7MPa/ZQ= )`
	RRSIG=43056 and DNSKEY=43056 verifies the DS RRset
	DS=11810/SHA-256 is now in the chain-of-trust
	`co.uk. 300 IN DS ( 11810 8 2 1df4681bdacc3e6296ac7667c42ca33cb57efbc2005ce23064f15fbffa286ff5 )`
	Query to nsd.nic.uk for co.uk/DNSKEY
	Received 879 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 879 octets ;; HEADER SECTION ;; id = 59888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (3 records) co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810 co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346 co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260318080614 20260211073546 11810 co.uk. AWFP7kPNVfOYN+Aj+0U0XJSvRDIXGyZ13SgIxcwxmHoJL//eq54r9IMn/ubSyKtGWmpi/iQ1fdba qyY+ECDFeXUvkLd5l/+gt5RjjCO3H+W4a6ljwhpOXXoeUZZcNy6JdI9JGH5PfTSnMluiliajwAt2 oPwrP7ZrXTmreZL5GhKgOuVHHcNtW9nzNmvFualXQo/BrG1wqbN4pkuWR1XWD20Q2HOw/B2Op1Ll HuNBNYFMN4HbFIqf6qD2cqIf9Nz8ja53HHEClhM+pgaY8tcUcWVGp0jcNwRtZ1K/+VdXH07y9d3S mV9LQrPBj/zSLJl6arewv/IRYrzTed+kU1uT6w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for co.uk
	`co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810`
	`co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346`
	DNSKEY=11810/SEP is now in the chain-of-trust
	DS=11810/SHA-256 verifies DNSKEY=11810/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260318080614 20260211073546 11810 co.uk. AWFP7kPNVfOYN+Aj+0U0XJSvRDIXGyZ13SgIxcwxmHoJL//eq54r9IMn/ubSyKtGWmpi/iQ1fdba qyY+ECDFeXUvkLd5l/+gt5RjjCO3H+W4a6ljwhpOXXoeUZZcNy6JdI9JGH5PfTSnMluiliajwAt2 oPwrP7ZrXTmreZL5GhKgOuVHHcNtW9nzNmvFualXQo/BrG1wqbN4pkuWR1XWD20Q2HOw/B2Op1Ll HuNBNYFMN4HbFIqf6qD2cqIf9Nz8ja53HHEClhM+pgaY8tcUcWVGp0jcNwRtZ1K/+VdXH07y9d3S mV9LQrPBj/zSLJl6arewv/IRYrzTed+kU1uT6w== )`
	RRSIG=11810 and DNSKEY=11810/SEP verifies the DNSKEY RRset
	DNSKEY=44346 is now in the chain-of-trust
	Query to dns1.nic.uk for tristanself.co.uk/A
	Received 522 bytes from 213.248.216.1
	;; Response received from [213.248.216.1] 522 octets ;; HEADER SECTION ;; id = 27107 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tristanself.co.uk. 172800 IN NS ns-316.awsdns-39.com. tristanself.co.uk. 172800 IN NS ns-997.awsdns-60.net. tristanself.co.uk. 172800 IN NS ns-1057.awsdns-04.org. tristanself.co.uk. 172800 IN NS ns-1817.awsdns-35.co.uk. tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260319040656 20260212033457 44346 co.uk. n/SA1bcq9MLwUU+aZEya4uW14qkXl7MzFKkJ1s/92/Yak5FN0mMbY1AYAkR02W7pmBSgUau81R9d xYQnoPSKBC4SK+rT0c7cH1+MC8HJ2k4DhBeA7ZiOMlXVxA1u9gROFTDgbu/Cb8OwCVeBr3a1MEUD sGap5Ka+C1xGTPZBkJlJeYJc0kM8Qa++rY5c27xA9WAG9niJk3qv5TK+/osr+kiTfmNGlxQk1WXb q1SAeYkCJRYmtv9XxHAhC6wSjia+37tHP+Xa92rBCBwJs0J683Rw7yski7XmceM8/uOtKtzjPNuf pvilX0y39o7umhyhuOwxGqjFU4ExPKBZjABXag== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns2.nic.uk for tristanself.co.uk/DNSKEY
	Received 522 bytes from 103.49.80.1
	;; Response received from [103.49.80.1] 522 octets ;; HEADER SECTION ;; id = 6112 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tristanself.co.uk. 172800 IN NS ns-316.awsdns-39.com. tristanself.co.uk. 172800 IN NS ns-997.awsdns-60.net. tristanself.co.uk. 172800 IN NS ns-1057.awsdns-04.org. tristanself.co.uk. 172800 IN NS ns-1817.awsdns-35.co.uk. tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260319040656 20260212033457 44346 co.uk. n/SA1bcq9MLwUU+aZEya4uW14qkXl7MzFKkJ1s/92/Yak5FN0mMbY1AYAkR02W7pmBSgUau81R9d xYQnoPSKBC4SK+rT0c7cH1+MC8HJ2k4DhBeA7ZiOMlXVxA1u9gROFTDgbu/Cb8OwCVeBr3a1MEUD sGap5Ka+C1xGTPZBkJlJeYJc0kM8Qa++rY5c27xA9WAG9niJk3qv5TK+/osr+kiTfmNGlxQk1WXb q1SAeYkCJRYmtv9XxHAhC6wSjia+37tHP+Xa92rBCBwJs0J683Rw7yski7XmceM8/uOtKtzjPNuf pvilX0y39o7umhyhuOwxGqjFU4ExPKBZjABXag== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone tristanself.co.uk

tristanself.co.uk

	Checking DS between co.uk and tristanself.co.uk
	Query to nsb.nic.uk for tristanself.co.uk/DS
	Received 387 bytes from 156.154.101.3
	;; Response received from [156.154.101.3] 387 octets ;; HEADER SECTION ;; id = 50913 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN DS ;; ANSWER SECTION (2 records) tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260319040656 20260212033457 44346 co.uk. n/SA1bcq9MLwUU+aZEya4uW14qkXl7MzFKkJ1s/92/Yak5FN0mMbY1AYAkR02W7pmBSgUau81R9d xYQnoPSKBC4SK+rT0c7cH1+MC8HJ2k4DhBeA7ZiOMlXVxA1u9gROFTDgbu/Cb8OwCVeBr3a1MEUD sGap5Ka+C1xGTPZBkJlJeYJc0kM8Qa++rY5c27xA9WAG9niJk3qv5TK+/osr+kiTfmNGlxQk1WXb q1SAeYkCJRYmtv9XxHAhC6wSjia+37tHP+Xa92rBCBwJs0J683Rw7yski7XmceM8/uOtKtzjPNuf pvilX0y39o7umhyhuOwxGqjFU4ExPKBZjABXag== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for tristanself.co.uk in the co.uk zone
	DS=11383/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260319040656 20260212033457 44346 co.uk. n/SA1bcq9MLwUU+aZEya4uW14qkXl7MzFKkJ1s/92/Yak5FN0mMbY1AYAkR02W7pmBSgUau81R9d xYQnoPSKBC4SK+rT0c7cH1+MC8HJ2k4DhBeA7ZiOMlXVxA1u9gROFTDgbu/Cb8OwCVeBr3a1MEUD sGap5Ka+C1xGTPZBkJlJeYJc0kM8Qa++rY5c27xA9WAG9niJk3qv5TK+/osr+kiTfmNGlxQk1WXb q1SAeYkCJRYmtv9XxHAhC6wSjia+37tHP+Xa92rBCBwJs0J683Rw7yski7XmceM8/uOtKtzjPNuf pvilX0y39o7umhyhuOwxGqjFU4ExPKBZjABXag== )`
	RRSIG=44346 and DNSKEY=44346 verifies the DS RRset
	DS=11383/SHA-256 is now in the chain-of-trust
	`tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 )`
	Query to ns-997.awsdns-60.net for tristanself.co.uk/DNSKEY
	Received 399 bytes from 205.251.195.229
	;; Response received from [205.251.195.229] 399 octets ;; HEADER SECTION ;; id = 19480 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN DNSKEY ;; ANSWER SECTION (4 records) tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 bP1Vzum83SC3db1Ocs1PJowDOff2zkZHEGAJpYNVSOd+FMF/mfawocKRhyrUb5vBbsjNr9UY1THT cMir17rDxQ== ) ; keytag 4156 tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 xZljBWtA0lgTDRdC7DSFDTic06BAuQnzi84LXrCw+qpczi/svNhbSNGA63XRuIHUJRHPZtxt/Jit N0NtdY8hCQ== ) ; keytag 43364 tristanself.co.uk. 3600 IN DNSKEY ( 257 3 13 HJgXnjrKo/pK21P9LgSDs3p6DpIGteExwDTnfrZiUDoooFMdMEWnNwrgQZdGIJl1I+HgT/700IFU U0QcL5mKoQ== ) ; keytag 11383 tristanself.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20260215100000 20260214230000 11383 tristanself.co.uk. 4nhSEPvsmAXSuj8/7mPdIuI7LrjCQ8IzXZ4cHiii+/JGyg/xpcnG+Golx6jRf76s0osx1I6C2xAL t1fcVreVqg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for tristanself.co.uk
	`tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 bP1Vzum83SC3db1Ocs1PJowDOff2zkZHEGAJpYNVSOd+FMF/mfawocKRhyrUb5vBbsjNr9UY1THT cMir17rDxQ== ) ; keytag 4156`
	`tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 xZljBWtA0lgTDRdC7DSFDTic06BAuQnzi84LXrCw+qpczi/svNhbSNGA63XRuIHUJRHPZtxt/Jit N0NtdY8hCQ== ) ; keytag 43364`
	`tristanself.co.uk. 3600 IN DNSKEY ( 257 3 13 HJgXnjrKo/pK21P9LgSDs3p6DpIGteExwDTnfrZiUDoooFMdMEWnNwrgQZdGIJl1I+HgT/700IFU U0QcL5mKoQ== ) ; keytag 11383`
	DNSKEY=11383/SEP is now in the chain-of-trust
	DS=11383/SHA-256 verifies DNSKEY=11383/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`tristanself.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20260215100000 20260214230000 11383 tristanself.co.uk. 4nhSEPvsmAXSuj8/7mPdIuI7LrjCQ8IzXZ4cHiii+/JGyg/xpcnG+Golx6jRf76s0osx1I6C2xAL t1fcVreVqg== )`
	RRSIG=11383 and DNSKEY=11383/SEP verifies the DNSKEY RRset
	DNSKEY=4156 is now in the chain-of-trust
	DNSKEY=43364 is now in the chain-of-trust
	Query to ns-1057.awsdns-04.org for tristanself.co.uk/A
	Received 405 bytes from 205.251.196.33
	;; Response received from [205.251.196.33] 405 octets ;; HEADER SECTION ;; id = 1297 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260215082017 20260215060517 43364 tristanself.co.uk. JZwlBSKO2bI67OZTFuHpK6G11EIziBo9VyOMZ+4GkmknPHYJVnfr3Gm2EyIe0Q8ZwlxDAx/Q4XFt Mas9NaMk0Q== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260216080517 20260215060517 43364 tristanself.co.uk. KnustSkFkJ9zuJIKo1nOH0g3FxQy92u+HppLYoBJVsHMvZb4gatOf15hZYhba2Fbh/YlLuVwbFXB disH0YvQQw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1057.awsdns-04.org is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-1817.awsdns-35.co.uk for tristanself.co.uk/SOA
	Received 241 bytes from 205.251.199.25
	;; Response received from [205.251.199.25] 241 octets ;; HEADER SECTION ;; id = 45433 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN SOA ;; ANSWER SECTION (2 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260215082017 20260215060517 43364 tristanself.co.uk. gPC0yARtcMfSWSZyXTSwV1uKXXwbMSflJthhtV0fIoqGmjnXE0yiYl2nEvLv5Aow0/GekGXM1UVM Gk3sI0xkCg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-997.awsdns-60.net for tristanself.co.uk/SOA
	Received 241 bytes from 205.251.195.229
	;; Response received from [205.251.195.229] 241 octets ;; HEADER SECTION ;; id = 13894 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN SOA ;; ANSWER SECTION (2 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260215082017 20260215060517 43364 tristanself.co.uk. 48zp0psSw5Tn30A1UQIPe06HCVXeiMMCQHk6+h8tDDsHHyVtzi8Wy5iOa4vYmfL3R9+22Kx6LZw8 tpc3EliCsA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-316.awsdns-39.com for tristanself.co.uk/SOA
	Received 241 bytes from 205.251.193.60
	;; Response received from [205.251.193.60] 241 octets ;; HEADER SECTION ;; id = 24929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN SOA ;; ANSWER SECTION (2 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260215082017 20260215060517 43364 tristanself.co.uk. XHYZpBGzktizdlRiRtmjm7gDteJYw0uL9O+DoZRlZsej2rNO8AGdacsPh0OoER18znBDRfO2ZoEG hgAD50iAuw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1057.awsdns-04.org for tristanself.co.uk/A
	Received 405 bytes from 205.251.196.33
	;; Response received from [205.251.196.33] 405 octets ;; HEADER SECTION ;; id = 54355 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260215082017 20260215060517 43364 tristanself.co.uk. oheJLzboqOLYhEDS//pYRfXJ3vPDDMWtEtEmisht0QonDSPgZy79iJFNW1MtJdXqu9a8t6s1Zf/C 4J6aRRPeiA== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260216080517 20260215060517 43364 tristanself.co.uk. d6ERsjlTSP/L91oj+3M8p3HlFKMZBys2Ff26y2asBY1LQCoOhuQa9ODXPIJ9P1UPnVqMPC7eGQWU g/2Xaor7Ag== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260216080517 20260215060517 43364 tristanself.co.uk. d6ERsjlTSP/L91oj+3M8p3HlFKMZBys2Ff26y2asBY1LQCoOhuQa9ODXPIJ9P1UPnVqMPC7eGQWU g/2Xaor7Ag== )`
	RRSIG=43364 and DNSKEY=43364 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260215082017 20260215060517 43364 tristanself.co.uk. JZwlBSKO2bI67OZTFuHpK6G11EIziBo9VyOMZ+4GkmknPHYJVnfr3Gm2EyIe0Q8ZwlxDAx/Q4XFt Mas9NaMk0Q== )`
	RRSIG=43364 and DNSKEY=43364 verifies the SOA RRset

tristanself.co.uk

	Query to ns-1817.awsdns-35.co.uk for tristanself.co.uk/A
	Received 405 bytes from 205.251.199.25
	;; Response received from [205.251.199.25] 405 octets ;; HEADER SECTION ;; id = 59563 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260215082017 20260215060517 43364 tristanself.co.uk. 2E9HP0ERMRbeFdpSNS4eoFaM+RWjLUbAuL29aBeg+oiLg/ZsY33RNIbpz2Q+m+xeXCk0e1JQXNri FS4EosV3aA== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260216080517 20260215060517 43364 tristanself.co.uk. f7gEjYkZHVWCke1BJ/o4+ow4y9YBIAlO3LSOvaiXlaCyfcXiPfr8CFrXWlScm3nVVg05+JYccJ1g XdUx/or5Og== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1817.awsdns-35.co.uk is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-1817.awsdns-35.co.uk for tristanself.co.uk/A
	Received 405 bytes from 205.251.199.25
	;; Response received from [205.251.199.25] 405 octets ;; HEADER SECTION ;; id = 44134 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260215082017 20260215060517 43364 tristanself.co.uk. Vn/ApPYPEmrBIuTg8TOqiAwXPOhgClEiUSXHd6yRb3RvWX0Si9ceb6Zlcw/3WFa5pibGLDDpsdBC jz5ApoL30g== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260216080517 20260215060517 43364 tristanself.co.uk. CLY8OnAMutPaTyb2U2+MFMUmPYvCYKKwao7KKjbdIDOzBi2hGhVY5daB3aPbo7v0iLSiO4oZjP1w W8sN+v8gQw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260216080517 20260215060517 43364 tristanself.co.uk. CLY8OnAMutPaTyb2U2+MFMUmPYvCYKKwao7KKjbdIDOzBi2hGhVY5daB3aPbo7v0iLSiO4oZjP1w W8sN+v8gQw== )`
	RRSIG=43364 and DNSKEY=43364 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260215082017 20260215060517 43364 tristanself.co.uk. 2E9HP0ERMRbeFdpSNS4eoFaM+RWjLUbAuL29aBeg+oiLg/ZsY33RNIbpz2Q+m+xeXCk0e1JQXNri FS4EosV3aA== )`
	RRSIG=43364 and DNSKEY=43364 verifies the SOA RRset

tristanself.co.uk

	Query to ns-997.awsdns-60.net for tristanself.co.uk/A
	Received 405 bytes from 205.251.195.229
	;; Response received from [205.251.195.229] 405 octets ;; HEADER SECTION ;; id = 28767 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260215082018 20260215060518 43364 tristanself.co.uk. wmKaQuNOyNKdzK3Hl8+stQntrhruKUUmuU+v8T9OdTecmyx5objWNcYJVIk5sSTzw8I9jWEWC/Tt IsolygGnkg== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260216080518 20260215060518 43364 tristanself.co.uk. ZrfNxOpSl1JPaVaWqmwccn324yUjQDrBMz2q67iMbo6kcWTH/m+coY+noLeCvz+an1V2MOC7PgRw o72o81LHLQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-997.awsdns-60.net is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-997.awsdns-60.net for tristanself.co.uk/A
	Received 405 bytes from 205.251.195.229
	;; Response received from [205.251.195.229] 405 octets ;; HEADER SECTION ;; id = 16002 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260215082018 20260215060518 43364 tristanself.co.uk. 3Y5GlBOGb66Qw+QJ0NKgkLn1FDZT3c5cio6B1VyR4MYlKllY8wkfe2/XjQVmSo7g6qRGgHFU4Tyl SzdWiyI0dw== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260216080518 20260215060518 43364 tristanself.co.uk. FKAgF4h08mNJY6kgyjxlBtj6JlRD1Nmd5C3xOJLjqENYprT+AG6Wr/5fcpB26E4kzKoUDV/ICZTN dfde1wQixw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260216080518 20260215060518 43364 tristanself.co.uk. FKAgF4h08mNJY6kgyjxlBtj6JlRD1Nmd5C3xOJLjqENYprT+AG6Wr/5fcpB26E4kzKoUDV/ICZTN dfde1wQixw== )`
	RRSIG=43364 and DNSKEY=43364 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260215082018 20260215060518 43364 tristanself.co.uk. wmKaQuNOyNKdzK3Hl8+stQntrhruKUUmuU+v8T9OdTecmyx5objWNcYJVIk5sSTzw8I9jWEWC/Tt IsolygGnkg== )`
	RRSIG=43364 and DNSKEY=43364 verifies the SOA RRset

tristanself.co.uk

	Query to ns-316.awsdns-39.com for tristanself.co.uk/A
	Received 405 bytes from 205.251.193.60
	;; Response received from [205.251.193.60] 405 octets ;; HEADER SECTION ;; id = 43462 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260215082018 20260215060518 43364 tristanself.co.uk. CJv/vVhEdLbns/u03wYWYVkbCSvOQr8tNwAqTRLAuzaap5QfSo6oV20xrwZ4JxkAd0hTxj/Fu68j LNofxXncFw== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260216080518 20260215060518 43364 tristanself.co.uk. E03bKoMYd0cMBBu7aD8NVlE8gikX6O3LXFA2O5tf8fF9htHIPUTyj+Oo+5+LkIItqnyRfa0uKZEu Pqu77mbm6g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-316.awsdns-39.com is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-316.awsdns-39.com for tristanself.co.uk/A
	Received 405 bytes from 205.251.193.60
	;; Response received from [205.251.193.60] 405 octets ;; HEADER SECTION ;; id = 621 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260215082018 20260215060518 43364 tristanself.co.uk. wFi4vI7t4PNmfd20Fm4Ud5NNTnPpNfxEVL+Ozea9xGXMUzqHFGEppj4qdv1Vk9zXm8orKu1c/bjE TOsQyI3lFw== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260216080518 20260215060518 43364 tristanself.co.uk. CRamV4RVtYP3ivHhwUYondergBOSNf5/HFCriF18jgQcvwMahtEHpPbP/+w+QZKkf5zXgh7QAmpn Ml40q98Qqg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260216080518 20260215060518 43364 tristanself.co.uk. CRamV4RVtYP3ivHhwUYondergBOSNf5/HFCriF18jgQcvwMahtEHpPbP/+w+QZKkf5zXgh7QAmpn Ml40q98Qqg== )`
	RRSIG=43364 and DNSKEY=43364 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260215082018 20260215060518 43364 tristanself.co.uk. CJv/vVhEdLbns/u03wYWYVkbCSvOQr8tNwAqTRLAuzaap5QfSo6oV20xrwZ4JxkAd0hTxj/Fu68j LNofxXncFw== )`
	RRSIG=43364 and DNSKEY=43364 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test tristanself.co.uk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: