DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-07-19 02:59:23 UTC

Analyzing DNSSEC problems for ua.es

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1141 octets ;; HEADER SECTION ;; id = 4077 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260801000000 20260711000000 20326 . UR8aFDzTrvuP+LQH7NgPIau8IJlyf9kN9SRU6o6eR8GPOOTiMO24KVLBKqfPUHSWe4IoJDPgzRLi KJO281dRTQtMot+lDoJdMMqLI+dhD4BTr+Nm6xK0QqfQ8FVeZmm75bCjtJ7chnvyxoGqkIX6dDO2 m3uQnlnMMm9yqMLaPTQLp9uV1Rs8SF53Lv01aNcpOT1eHZNmBg4JtKHBPwSVjoepqahHUXzR+3LT pQ27pNgsOCcqfKMG/ac8lSpVVxQbGDe8LQcMq7RVL/MJ1F3Yqcbld13d3mCiPj7JobKTsp0X0dbR nRbWhh3NiKA99i3880pBYnj15FlUW7W5iUnDNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260801000000 20260711000000 20326 . UR8aFDzTrvuP+LQH7NgPIau8IJlyf9kN9SRU6o6eR8GPOOTiMO24KVLBKqfPUHSWe4IoJDPgzRLi KJO281dRTQtMot+lDoJdMMqLI+dhD4BTr+Nm6xK0QqfQ8FVeZmm75bCjtJ7chnvyxoGqkIX6dDO2 m3uQnlnMMm9yqMLaPTQLp9uV1Rs8SF53Lv01aNcpOT1eHZNmBg4JtKHBPwSVjoepqahHUXzR+3LT pQ27pNgsOCcqfKMG/ac8lSpVVxQbGDe8LQcMq7RVL/MJ1F3Yqcbld13d3mCiPj7JobKTsp0X0dbR nRbWhh3NiKA99i3880pBYnj15FlUW7W5iUnDNw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to h.root-servers.net for ua.es/A
	Received 613 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 613 octets ;; HEADER SECTION ;; id = 38383 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 54404 8 2 c130df280cd8ebb99c8b6c8335b9fd5f1d709641494e044c8085b1ac21833b47 ) es. 86400 IN RRSIG ( DS 8 1 86400 20260731170000 20260718160000 57780 . 2JJV9IJNSRE5rp9OBD76zaZkxMsALsP1L878kUTMmyqVygQZZwQ8T30IODj6pDZ8SStljYRQcojZ UXJqixypI0oHVqRpt5SLwysuD2oNg7hKOiPuQyDSiYRQKlzJcBSEXA7rYbOW7YnSA9BZVYutxrpW oTYzEMV57fM8T+y+JIdOnAN239/9+3r0ZOwmy4TwwwME+2mxoaycKQHTSwAvbyYotkZ97HBs7EMQ 2mw1+wOqumCTHSA3Qu8rdh1SR5RkcfoA9aOYPL9LpcNlsOyZbLSye25eZO+3X7AYQG/l1ZtGt7cd PJTdEv9a0wh8KcTyydCTvW3ivZcadUwpN8lFDw== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 c.nic.es. 172800 IN A 194.0.34.53 g.nic.es. 172800 IN A 204.61.217.1 h.nic.es. 172800 IN A 194.0.33.53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for es/DNSKEY
	Received 610 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 610 octets ;; HEADER SECTION ;; id = 47515 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 54404 8 2 c130df280cd8ebb99c8b6c8335b9fd5f1d709641494e044c8085b1ac21833b47 ) es. 86400 IN RRSIG ( DS 8 1 86400 20260731170000 20260718160000 57780 . 2JJV9IJNSRE5rp9OBD76zaZkxMsALsP1L878kUTMmyqVygQZZwQ8T30IODj6pDZ8SStljYRQcojZ UXJqixypI0oHVqRpt5SLwysuD2oNg7hKOiPuQyDSiYRQKlzJcBSEXA7rYbOW7YnSA9BZVYutxrpW oTYzEMV57fM8T+y+JIdOnAN239/9+3r0ZOwmy4TwwwME+2mxoaycKQHTSwAvbyYotkZ97HBs7EMQ 2mw1+wOqumCTHSA3Qu8rdh1SR5RkcfoA9aOYPL9LpcNlsOyZbLSye25eZO+3X7AYQG/l1ZtGt7cd PJTdEv9a0wh8KcTyydCTvW3ivZcadUwpN8lFDw== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 c.nic.es. 172800 IN A 194.0.34.53 g.nic.es. 172800 IN A 204.61.217.1 h.nic.es. 172800 IN A 194.0.33.53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; { "EDNS-VERSION": 0 }
	Found child zone es

	Checking DS between . and es
	Query to m.root-servers.net for es/DS
	Received 366 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 366 octets ;; HEADER SECTION ;; id = 24973 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; es. IN DS ;; ANSWER SECTION (2 records) es. 86400 IN DS ( 54404 8 2 c130df280cd8ebb99c8b6c8335b9fd5f1d709641494e044c8085b1ac21833b47 ) es. 86400 IN RRSIG ( DS 8 1 86400 20260731170000 20260718160000 57780 . 2JJV9IJNSRE5rp9OBD76zaZkxMsALsP1L878kUTMmyqVygQZZwQ8T30IODj6pDZ8SStljYRQcojZ UXJqixypI0oHVqRpt5SLwysuD2oNg7hKOiPuQyDSiYRQKlzJcBSEXA7rYbOW7YnSA9BZVYutxrpW oTYzEMV57fM8T+y+JIdOnAN239/9+3r0ZOwmy4TwwwME+2mxoaycKQHTSwAvbyYotkZ97HBs7EMQ 2mw1+wOqumCTHSA3Qu8rdh1SR5RkcfoA9aOYPL9LpcNlsOyZbLSye25eZO+3X7AYQG/l1ZtGt7cd PJTdEv9a0wh8KcTyydCTvW3ivZcadUwpN8lFDw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for es in the . zone
	DS=54404/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`es. 86400 IN RRSIG ( DS 8 1 86400 20260731170000 20260718160000 57780 . 2JJV9IJNSRE5rp9OBD76zaZkxMsALsP1L878kUTMmyqVygQZZwQ8T30IODj6pDZ8SStljYRQcojZ UXJqixypI0oHVqRpt5SLwysuD2oNg7hKOiPuQyDSiYRQKlzJcBSEXA7rYbOW7YnSA9BZVYutxrpW oTYzEMV57fM8T+y+JIdOnAN239/9+3r0ZOwmy4TwwwME+2mxoaycKQHTSwAvbyYotkZ97HBs7EMQ 2mw1+wOqumCTHSA3Qu8rdh1SR5RkcfoA9aOYPL9LpcNlsOyZbLSye25eZO+3X7AYQG/l1ZtGt7cd PJTdEv9a0wh8KcTyydCTvW3ivZcadUwpN8lFDw== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=54404/SHA-256 is now in the chain-of-trust
	`es. 86400 IN DS ( 54404 8 2 c130df280cd8ebb99c8b6c8335b9fd5f1d709641494e044c8085b1ac21833b47 )`
	Query to g.nic.es for es/DNSKEY
	Received 873 bytes from 204.61.217.1
	;; Response received from [204.61.217.1] 873 octets ;; HEADER SECTION ;; id = 18813 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (3 records) es. 86400 IN DNSKEY ( 256 3 8 AwEAAdTH4Anj0ZWoAn61E/20YOwox2MZSKV0TxmVuu3DH/i0txzTCk+U2mK75QOuDK3kAtRla8Ku 8Ez20LbD7N/v64HeJPBYuc7tHj++d5R5BpC4P619OhHIBroz3FSPnDMhIaPE81T5oVgubERj7xxt FS+3Ph3kvh7mMxuTngp/unc5lWLgsD2sNHpSTmW3XZmix0pFmASu7+NmE05SYjto5CNsYm9olB2O ibOIxIruvYPI62Bjdu9uP1w8OKWDjSuo3WrlQ85NK8iU7NGf3LXbNMTwDIOcvbmtSVi4AR/61dvc Z6gJ/8MrE947xWMoIXZHgly6nc/99uLkiQFnDvErPKE= ) ; keytag 14698 es. 86400 IN DNSKEY ( 257 3 8 AwEAAa5NdXYbSw7Xsd5m3k15HRCjmQaywwqvVrYtP9c9dB+vs2lCpRO8A5pxfSeHWzEswSRwIAUk avrM4cGFfSTajM4fYqc+Kfi1LIBErqa+K4YUvQ8w0kLk/Jh57RPeXjSb1kAyxKMqY7ODLH1hBc/I 9Mg0pVCi5MJ7L4RxIpiQy6Hq7DudX5/nvpgZ2oZT6fP34k2t0QfcT7TdC7NyOf+YCtoLCCfjybi3 m/NL79perMF6RQy7LBXXi+nKAMhfNcg0MaBziH+AnH8Sa4VitB8W6iC4SL8iCs7q5cFB0Ys3afaE bU+AXKL+MgS3TD6aDfWD7llSweMEPyGTV+ve89lCXb8= ) ; keytag 54404 es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260730015059 20260715190755 54404 es. RyKiZyDrNmvkOAAj7fdS8AYfk3jwO5PmA2ZBVbvqS56y1tme3hAVjmxoYyInStyoEkh/vyl2TuMc Ysn4NPirQSgwd3MIa+jgGRpV5tzv9BZ7yGELN7J7yUt789Rq9qMD+0MmU87CaaJF7kBviMeEUF2Y C30kpPjekkfr18e3wSVogxUIUyYuFXQPKn3MLhAV5s7AR5+GtuRJFetAA1YF1B3PDVIxSjVx8+2a M9O/1Bb7oT3ZQ//zOz2DLiMkLnPZ8xSuhowYVs3UCOvLe2OVZqXWPGb1F5vN4tXwMZiwMGbFLiRG H4il1Kf6sOlZw85LgpvUMiYswFDGfeSKW/Cs5A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for es
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAdTH4Anj0ZWoAn61E/20YOwox2MZSKV0TxmVuu3DH/i0txzTCk+U2mK75QOuDK3kAtRla8Ku 8Ez20LbD7N/v64HeJPBYuc7tHj++d5R5BpC4P619OhHIBroz3FSPnDMhIaPE81T5oVgubERj7xxt FS+3Ph3kvh7mMxuTngp/unc5lWLgsD2sNHpSTmW3XZmix0pFmASu7+NmE05SYjto5CNsYm9olB2O ibOIxIruvYPI62Bjdu9uP1w8OKWDjSuo3WrlQ85NK8iU7NGf3LXbNMTwDIOcvbmtSVi4AR/61dvc Z6gJ/8MrE947xWMoIXZHgly6nc/99uLkiQFnDvErPKE= ) ; keytag 14698`
	`es. 86400 IN DNSKEY ( 257 3 8 AwEAAa5NdXYbSw7Xsd5m3k15HRCjmQaywwqvVrYtP9c9dB+vs2lCpRO8A5pxfSeHWzEswSRwIAUk avrM4cGFfSTajM4fYqc+Kfi1LIBErqa+K4YUvQ8w0kLk/Jh57RPeXjSb1kAyxKMqY7ODLH1hBc/I 9Mg0pVCi5MJ7L4RxIpiQy6Hq7DudX5/nvpgZ2oZT6fP34k2t0QfcT7TdC7NyOf+YCtoLCCfjybi3 m/NL79perMF6RQy7LBXXi+nKAMhfNcg0MaBziH+AnH8Sa4VitB8W6iC4SL8iCs7q5cFB0Ys3afaE bU+AXKL+MgS3TD6aDfWD7llSweMEPyGTV+ve89lCXb8= ) ; keytag 54404`
	DNSKEY=54404/SEP is now in the chain-of-trust
	DS=54404/SHA-256 verifies DNSKEY=54404/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260730015059 20260715190755 54404 es. RyKiZyDrNmvkOAAj7fdS8AYfk3jwO5PmA2ZBVbvqS56y1tme3hAVjmxoYyInStyoEkh/vyl2TuMc Ysn4NPirQSgwd3MIa+jgGRpV5tzv9BZ7yGELN7J7yUt789Rq9qMD+0MmU87CaaJF7kBviMeEUF2Y C30kpPjekkfr18e3wSVogxUIUyYuFXQPKn3MLhAV5s7AR5+GtuRJFetAA1YF1B3PDVIxSjVx8+2a M9O/1Bb7oT3ZQ//zOz2DLiMkLnPZ8xSuhowYVs3UCOvLe2OVZqXWPGb1F5vN4tXwMZiwMGbFLiRG H4il1Kf6sOlZw85LgpvUMiYswFDGfeSKW/Cs5A== )`
	RRSIG=54404 and DNSKEY=54404/SEP verifies the DNSKEY RRset
	DNSKEY=14698 is now in the chain-of-trust
	Query to a.nic.es for ua.es/A
	Received 1002 bytes from 194.69.254.1
	;; Response received from [194.69.254.1] 1002 octets ;; HEADER SECTION ;; id = 63952 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ua.es. 86400 IN NS tabarca.cpd.ua.es. ua.es. 86400 IN NS aitana.cpd.ua.es. ua.es. 86400 IN NS sun.rediris.es. ua.es. 86400 IN NS chico.rediris.es. 9talf9dipa0herm090jd0mncf507fku4.es. 86400 IN NSEC3 ( 1 1 5 87c4e15d163c1bc5 9taujrf3208srsvnkujcdn30j7o7snjf NS SOA RRSIG DNSKEY NSEC3PARAM ) 9talf9dipa0herm090jd0mncf507fku4.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20260729132410 20260715190755 14698 es. cCqGsHP5f5He8VDfilFRTv/Whn7Byk2CdzSUA/uWmJ7s+lCvg73o5tP+FFWMX0mCm7UkqbMlnk1r ZG+4ANQ8ClyEM9fjmt0i8mo0pQyk6VBA//FXhXT/GT2oPvlbARX159XQussd7SPXgPyK6i78R17I DqdEUoR/y5dunQeD8pMuOFQjaj1hhbzOJR27ORK9QdEtov4Zd432RjTBdZtxRDgOkMIx2okSximD bZvUH4OCtL/sRiWBtA63rGt43BSvGjEmPqEbT/8S7fN+oaN691RfnKWWnkmtgvbf1HqR2Ts7GLW9 tvhAmI6FTuXJ1kuZVDsHoEPjaEm3xm2UrnSE7A== ) rvgt072ba21ch1u4vg2krassqmaf0mq4.es. 86400 IN NSEC3 ( 1 1 5 87c4e15d163c1bc5 rvhm8sai135mgcq9snaj9q6ll4gpn1tm NS DS RRSIG ) rvgt072ba21ch1u4vg2krassqmaf0mq4.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20260729035058 20260715070833 14698 es. Tr15tqx5KwP7jV8+RH5jaP4Hep92Je9C7w+2xOkmanIcTMdirUFuNCQLEN7iUjz59LWl56po74B2 FpdynsfqEdqGKLhMpZHy5Mh4rzYMS4iiYDN+i+FWtpm3XOWvGfESjAU8TgdoIlrD4op4wv5Fe6bg 5LunHG7KDjUQZdBzD+ZBb7Nc4wWyjUmIzO/YqUoFWOV5akQ+x8jIdeCcSx1uT57d5i6LNhnZ1JfI /XIQO2hCtzR8Y1ZgjOVweqSZ6pqCgDsOLDkmJO5T1CONZt+QIaN7gnwp6Z/r2wEhAP37+0zjH3at r7/OpxrlP79UP9INgB9xN+fuC9xFGIda8Nxg0Q== ) ;; ADDITIONAL SECTION (7 records) aitana.cpd.ua.es. 86400 IN A 193.145.233.5 tabarca.cpd.ua.es. 86400 IN A 193.145.233.6 chico.rediris.es. 86400 IN A 162.219.54.2 sun.rediris.es. 86400 IN A 199.184.182.1 chico.rediris.es. 86400 IN AAAA 2620:10a:80eb::2 sun.rediris.es. 86400 IN AAAA 2620:171:808::1 ;; { "EDNS-VERSION": 0 }
	Query to a.nic.es for ua.es/DNSKEY
	Received 1002 bytes from 194.69.254.1
	;; Response received from [194.69.254.1] 1002 octets ;; HEADER SECTION ;; id = 43579 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ua.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ua.es. 86400 IN NS chico.rediris.es. ua.es. 86400 IN NS aitana.cpd.ua.es. ua.es. 86400 IN NS tabarca.cpd.ua.es. ua.es. 86400 IN NS sun.rediris.es. 9talf9dipa0herm090jd0mncf507fku4.es. 86400 IN NSEC3 ( 1 1 5 87c4e15d163c1bc5 9taujrf3208srsvnkujcdn30j7o7snjf NS SOA RRSIG DNSKEY NSEC3PARAM ) 9talf9dipa0herm090jd0mncf507fku4.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20260729132410 20260715190755 14698 es. cCqGsHP5f5He8VDfilFRTv/Whn7Byk2CdzSUA/uWmJ7s+lCvg73o5tP+FFWMX0mCm7UkqbMlnk1r ZG+4ANQ8ClyEM9fjmt0i8mo0pQyk6VBA//FXhXT/GT2oPvlbARX159XQussd7SPXgPyK6i78R17I DqdEUoR/y5dunQeD8pMuOFQjaj1hhbzOJR27ORK9QdEtov4Zd432RjTBdZtxRDgOkMIx2okSximD bZvUH4OCtL/sRiWBtA63rGt43BSvGjEmPqEbT/8S7fN+oaN691RfnKWWnkmtgvbf1HqR2Ts7GLW9 tvhAmI6FTuXJ1kuZVDsHoEPjaEm3xm2UrnSE7A== ) rvgt072ba21ch1u4vg2krassqmaf0mq4.es. 86400 IN NSEC3 ( 1 1 5 87c4e15d163c1bc5 rvhm8sai135mgcq9snaj9q6ll4gpn1tm NS DS RRSIG ) rvgt072ba21ch1u4vg2krassqmaf0mq4.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20260729035058 20260715070833 14698 es. Tr15tqx5KwP7jV8+RH5jaP4Hep92Je9C7w+2xOkmanIcTMdirUFuNCQLEN7iUjz59LWl56po74B2 FpdynsfqEdqGKLhMpZHy5Mh4rzYMS4iiYDN+i+FWtpm3XOWvGfESjAU8TgdoIlrD4op4wv5Fe6bg 5LunHG7KDjUQZdBzD+ZBb7Nc4wWyjUmIzO/YqUoFWOV5akQ+x8jIdeCcSx1uT57d5i6LNhnZ1JfI /XIQO2hCtzR8Y1ZgjOVweqSZ6pqCgDsOLDkmJO5T1CONZt+QIaN7gnwp6Z/r2wEhAP37+0zjH3at r7/OpxrlP79UP9INgB9xN+fuC9xFGIda8Nxg0Q== ) ;; ADDITIONAL SECTION (7 records) aitana.cpd.ua.es. 86400 IN A 193.145.233.5 tabarca.cpd.ua.es. 86400 IN A 193.145.233.6 chico.rediris.es. 86400 IN A 162.219.54.2 sun.rediris.es. 86400 IN A 199.184.182.1 chico.rediris.es. 86400 IN AAAA 2620:10a:80eb::2 sun.rediris.es. 86400 IN AAAA 2620:171:808::1 ;; { "EDNS-VERSION": 0 }
	Found child zone ua.es

ua.es

	Checking DS between es and ua.es
	Query to g.nic.es for ua.es/DS
	Received 1136 bytes from 204.61.217.1
	;; Response received from [204.61.217.1] 1136 octets ;; HEADER SECTION ;; id = 27860 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ua.es. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 9talf9dipa0herm090jd0mncf507fku4.es. 86400 IN NSEC3 ( 1 1 5 87c4e15d163c1bc5 9taujrf3208srsvnkujcdn30j7o7snjf NS SOA RRSIG DNSKEY NSEC3PARAM ) 9talf9dipa0herm090jd0mncf507fku4.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20260729132410 20260715190755 14698 es. cCqGsHP5f5He8VDfilFRTv/Whn7Byk2CdzSUA/uWmJ7s+lCvg73o5tP+FFWMX0mCm7UkqbMlnk1r ZG+4ANQ8ClyEM9fjmt0i8mo0pQyk6VBA//FXhXT/GT2oPvlbARX159XQussd7SPXgPyK6i78R17I DqdEUoR/y5dunQeD8pMuOFQjaj1hhbzOJR27ORK9QdEtov4Zd432RjTBdZtxRDgOkMIx2okSximD bZvUH4OCtL/sRiWBtA63rGt43BSvGjEmPqEbT/8S7fN+oaN691RfnKWWnkmtgvbf1HqR2Ts7GLW9 tvhAmI6FTuXJ1kuZVDsHoEPjaEm3xm2UrnSE7A== ) es. 3600 IN SOA ( ns1.nic.es. hostmaster.nic.es. 2026071901 ;serial 7200 ;refresh 7200 ;retry 2592000 ;expire 86400 ;minimum ) es. 3600 IN RRSIG ( SOA 8 1 3600 20260801221102 20260718230759 14698 es. HLnWv7DpwGJzKbEB0XsnGK/vlukwmjivKJy8iDxN72yQMttdMOJMElMb7aF9fY8ZRdPwAVX7d58c KqUatEwVPM0GSugpoD3sZbwpdsJW3eYefyuDj+oKXg+nPqAqelF36MEKxSG5+959m0oaVC25migL cTlgtOPiu1T8JXvhpxlRnXqE+gcbAXqShx/0qCR3jCrGUISbIbeTq2wGkxEOSolo/h6QyWnCvBqP xY4zqvbyxtCiLd1h7bOTVsC3hDHdRZoedbrCTNHAezqFyRfW2rE4vY/RT4bVPtA1o8VW+jZBCk9a quyZDyCULN0I+EWaoYG10QrdkXN2v6NGVnutqQ== ) rvgt072ba21ch1u4vg2krassqmaf0mq4.es. 86400 IN NSEC3 ( 1 1 5 87c4e15d163c1bc5 rvhm8sai135mgcq9snaj9q6ll4gpn1tm NS DS RRSIG ) rvgt072ba21ch1u4vg2krassqmaf0mq4.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20260729035058 20260715070833 14698 es. Tr15tqx5KwP7jV8+RH5jaP4Hep92Je9C7w+2xOkmanIcTMdirUFuNCQLEN7iUjz59LWl56po74B2 FpdynsfqEdqGKLhMpZHy5Mh4rzYMS4iiYDN+i+FWtpm3XOWvGfESjAU8TgdoIlrD4op4wv5Fe6bg 5LunHG7KDjUQZdBzD+ZBb7Nc4wWyjUmIzO/YqUoFWOV5akQ+x8jIdeCcSx1uT57d5i6LNhnZ1JfI /XIQO2hCtzR8Y1ZgjOVweqSZ6pqCgDsOLDkmJO5T1CONZt+QIaN7gnwp6Z/r2wEhAP37+0zjH3at r7/OpxrlP79UP9INgB9xN+fuC9xFGIda8Nxg0Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for ua.es in the es zone
	Query to sun.rediris.es for ua.es/DNSKEY
	Received 86 bytes from 199.184.182.1
	;; Response received from [199.184.182.1] 86 octets ;; HEADER SECTION ;; id = 22634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ua.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ua.es. 600 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2026071001 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to chico.rediris.es for ua.es/A
	Received 86 bytes from 162.219.54.2
	;; Response received from [162.219.54.2] 86 octets ;; HEADER SECTION ;; id = 6075 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ua.es. 600 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2026071603 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	chico.rediris.es is authoritative for ua.es
	Query to sun.rediris.es for ua.es/SOA
	Received 200 bytes from 199.184.182.1
	;; Response received from [199.184.182.1] 200 octets ;; HEADER SECTION ;; id = 10870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ua.es. IN SOA ;; ANSWER SECTION (1 record) ua.es. 7200 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2026071603 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (4 records) ua.es. 7200 IN NS aitana.cpd.ua.es. ua.es. 7200 IN NS tabarca.cpd.ua.es. ua.es. 7200 IN NS sun.rediris.es. ua.es. 7200 IN NS chico.rediris.es. ;; ADDITIONAL SECTION (3 records) aitana.cpd.ua.es. 7200 IN A 193.145.233.5 tabarca.cpd.ua.es. 7200 IN A 193.145.233.6 ;; { "EDNS-VERSION": 0 }
	Query to aitana.cpd.ua.es for ua.es/SOA
	Received 200 bytes from 193.145.233.5
	;; Response received from [193.145.233.5] 200 octets ;; HEADER SECTION ;; id = 20363 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ua.es. IN SOA ;; ANSWER SECTION (1 record) ua.es. 7200 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2026071603 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (4 records) ua.es. 7200 IN NS chico.rediris.es. ua.es. 7200 IN NS aitana.cpd.ua.es. ua.es. 7200 IN NS sun.rediris.es. ua.es. 7200 IN NS tabarca.cpd.ua.es. ;; ADDITIONAL SECTION (3 records) aitana.cpd.ua.es. 7200 IN A 193.145.233.5 tabarca.cpd.ua.es. 7200 IN A 193.145.233.6 ;; { "EDNS-VERSION": 0 }
	Query to tabarca.cpd.ua.es for ua.es/SOA
	Received 200 bytes from 193.145.233.6
	;; Response received from [193.145.233.6] 200 octets ;; HEADER SECTION ;; id = 18808 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ua.es. IN SOA ;; ANSWER SECTION (1 record) ua.es. 7200 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2026071603 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (4 records) ua.es. 7200 IN NS chico.rediris.es. ua.es. 7200 IN NS sun.rediris.es. ua.es. 7200 IN NS aitana.cpd.ua.es. ua.es. 7200 IN NS tabarca.cpd.ua.es. ;; ADDITIONAL SECTION (3 records) aitana.cpd.ua.es. 7200 IN A 193.145.233.5 tabarca.cpd.ua.es. 7200 IN A 193.145.233.6 ;; { "EDNS-VERSION": 0 }
	Query to chico.rediris.es for ua.es/A
	No NSEC records in response
	No RRSIGs found

ua.es

	Query to aitana.cpd.ua.es for ua.es/A
	Received 86 bytes from 193.145.233.5
	;; Response received from [193.145.233.5] 86 octets ;; HEADER SECTION ;; id = 49121 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 0 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ua.es. 600 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2026071603 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	aitana.cpd.ua.es is authoritative for ua.es
	Query to aitana.cpd.ua.es for ua.es/A
	No NSEC records in response
	No RRSIGs found

ua.es

	Query to tabarca.cpd.ua.es for ua.es/A
	Received 86 bytes from 193.145.233.6
	;; Response received from [193.145.233.6] 86 octets ;; HEADER SECTION ;; id = 24309 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ua.es. 600 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2026071603 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tabarca.cpd.ua.es is authoritative for ua.es
	Query to tabarca.cpd.ua.es for ua.es/A
	No NSEC records in response
	No RRSIGs found

ua.es

	Query to sun.rediris.es for ua.es/A
	Received 86 bytes from 199.184.182.1
	;; Response received from [199.184.182.1] 86 octets ;; HEADER SECTION ;; id = 6060 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ua.es. 600 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2026071603 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sun.rediris.es is authoritative for ua.es
	Query to sun.rediris.es for ua.es/A
	No NSEC records in response
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ua.es at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: