DNSSEC Debugger - www.cloudflare.com

Domain Name:

Time: 2025-05-11 16:45:58 UTC

Analyzing DNSSEC problems for www.cloudflare.com

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1141 octets ;; HEADER SECTION ;; id = 28035 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250601000000 20250511000000 20326 . VWTPvGJYPHue7aTc+b49y1cCggFM0t6ULKEPuAeITCgRgd5aAee5yrqEirwkq/Us7zDM1g1HliOO L8kCVbZ6ub5esuVSjlZ/mcEOdlOrkXt4I6AiVhAbaaCaOsEO7XiNaEWbNqiSQ0RcS7h2/A1E7thx F4xr9n8IXSI9bzyoGsH+HBf01Pne5ko34JgS2AuQj6pmksimN0GZ+/TTTtuo0w+mBbWswth1HCB6 5KuFuKfT4T97pLDK1ElPsFR2Ue7m7HMZeKfsb4nWg7LOCfGQVVu+bOVlgqIduXVgu/MsGbGd1A4+ /Wq7j5l7451NQeXfapnGtgJK9tsD1e1yZ83AbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250601000000 20250511000000 20326 . VWTPvGJYPHue7aTc+b49y1cCggFM0t6ULKEPuAeITCgRgd5aAee5yrqEirwkq/Us7zDM1g1HliOO L8kCVbZ6ub5esuVSjlZ/mcEOdlOrkXt4I6AiVhAbaaCaOsEO7XiNaEWbNqiSQ0RcS7h2/A1E7thx F4xr9n8IXSI9bzyoGsH+HBf01Pne5ko34JgS2AuQj6pmksimN0GZ+/TTTtuo0w+mBbWswth1HCB6 5KuFuKfT4T97pLDK1ElPsFR2Ue7m7HMZeKfsb4nWg7LOCfGQVVu+bOVlgqIduXVgu/MsGbGd1A4+ /Wq7j5l7451NQeXfapnGtgJK9tsD1e1yZ83AbQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	Query to k.root-servers.net for www.cloudflare.com/A
	Received 1178 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1178 octets ;; HEADER SECTION ;; id = 45157 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cloudflare.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20250524050000 20250511040000 53148 . NFPqWxrk06Qqk7h+9L43fuVRWNfz1ljBMp6eO12w2TgljR7wwhh1ZwdQz0kfL02ZGdRGZBN35FeK u9lugBNwja1/7lzpmQJjDJL2OcxL94HtGThuH6N2zDOm7hnqdogCXQwm3lj317h8co8cwCHpWg8O vy21uOXiYZNKDY8XYYHbQrDtkXN16/h7zuGffp4WpRYfaDm1s3nIVOgKC/o3DOICUKBaPtRIRopC 38YThIlmiSjgBFW2p+JK3XRXnOamGeryuUO+lnDFIUHDPwYbpUXW4Su/5LMDQeDF2eZhvrc3RUqN OOb/IzXLXTO0AZheT7tPd+jm8TPeReyXcVYbmw== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for com/DNSKEY
	Received 1163 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1163 octets ;; HEADER SECTION ;; id = 15843 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 15 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20250524050000 20250511040000 53148 . NFPqWxrk06Qqk7h+9L43fuVRWNfz1ljBMp6eO12w2TgljR7wwhh1ZwdQz0kfL02ZGdRGZBN35FeK u9lugBNwja1/7lzpmQJjDJL2OcxL94HtGThuH6N2zDOm7hnqdogCXQwm3lj317h8co8cwCHpWg8O vy21uOXiYZNKDY8XYYHbQrDtkXN16/h7zuGffp4WpRYfaDm1s3nIVOgKC/o3DOICUKBaPtRIRopC 38YThIlmiSjgBFW2p+JK3XRXnOamGeryuUO+lnDFIUHDPwYbpUXW4Su/5LMDQeDF2eZhvrc3RUqN OOb/IzXLXTO0AZheT7tPd+jm8TPeReyXcVYbmw== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone com

com

	Checking DS between . and com
	Query to b.root-servers.net for com/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 37156 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DS ;; ANSWER SECTION (2 records) com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20250524050000 20250511040000 53148 . NFPqWxrk06Qqk7h+9L43fuVRWNfz1ljBMp6eO12w2TgljR7wwhh1ZwdQz0kfL02ZGdRGZBN35FeK u9lugBNwja1/7lzpmQJjDJL2OcxL94HtGThuH6N2zDOm7hnqdogCXQwm3lj317h8co8cwCHpWg8O vy21uOXiYZNKDY8XYYHbQrDtkXN16/h7zuGffp4WpRYfaDm1s3nIVOgKC/o3DOICUKBaPtRIRopC 38YThIlmiSjgBFW2p+JK3XRXnOamGeryuUO+lnDFIUHDPwYbpUXW4Su/5LMDQeDF2eZhvrc3RUqN OOb/IzXLXTO0AZheT7tPd+jm8TPeReyXcVYbmw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for com in the . zone
	DS=19718/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`com. 86400 IN RRSIG ( DS 8 1 86400 20250524050000 20250511040000 53148 . NFPqWxrk06Qqk7h+9L43fuVRWNfz1ljBMp6eO12w2TgljR7wwhh1ZwdQz0kfL02ZGdRGZBN35FeK u9lugBNwja1/7lzpmQJjDJL2OcxL94HtGThuH6N2zDOm7hnqdogCXQwm3lj317h8co8cwCHpWg8O vy21uOXiYZNKDY8XYYHbQrDtkXN16/h7zuGffp4WpRYfaDm1s3nIVOgKC/o3DOICUKBaPtRIRopC 38YThIlmiSjgBFW2p+JK3XRXnOamGeryuUO+lnDFIUHDPwYbpUXW4Su/5LMDQeDF2eZhvrc3RUqN OOb/IzXLXTO0AZheT7tPd+jm8TPeReyXcVYbmw== )`
	RRSIG=53148 and DNSKEY=53148 verifies the DS RRset
	DS=19718/SHA-256 is now in the chain-of-trust
	`com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a )`
	Query to e.gtld-servers.net for com/DNSKEY
	Received 291 bytes from 192.12.94.30
	;; Response received from [192.12.94.30] 291 octets ;; HEADER SECTION ;; id = 50709 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (3 records) com. 86400 IN DNSKEY ( 256 3 13 /L1iK7+vk9/xnk/lIfYbxgKsMts1KA09X/hNRRqolimHaVj9W+Qng/+irvLjbkyRKENf00mzPzGv NLRrDTTMqw== ) ; keytag 40097 com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; keytag 19718 com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20250517140235 20250502135735 19718 com. mua/TFot4bwRX0RmCrkTdohK4ewLbRdHAe0GgKWC4lFG2VjjqPEZz6JwelT0iCbBLf4b/g3QdGpz qU+fqmrv5g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for com
	`com. 86400 IN DNSKEY ( 256 3 13 /L1iK7+vk9/xnk/lIfYbxgKsMts1KA09X/hNRRqolimHaVj9W+Qng/+irvLjbkyRKENf00mzPzGv NLRrDTTMqw== ) ; keytag 40097`
	`com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; keytag 19718`
	DNSKEY=19718/SEP is now in the chain-of-trust
	DS=19718/SHA-256 verifies DNSKEY=19718/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20250517140235 20250502135735 19718 com. mua/TFot4bwRX0RmCrkTdohK4ewLbRdHAe0GgKWC4lFG2VjjqPEZz6JwelT0iCbBLf4b/g3QdGpz qU+fqmrv5g== )`
	RRSIG=19718 and DNSKEY=19718/SEP verifies the DNSKEY RRset
	DNSKEY=40097 is now in the chain-of-trust
	Query to c.gtld-servers.net for www.cloudflare.com/A
	Received 724 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 724 octets ;; HEADER SECTION ;; id = 64000 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 21 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cloudflare.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cloudflare.com. 172800 IN NS ns3.cloudflare.com. cloudflare.com. 172800 IN NS ns5.cloudflare.com. cloudflare.com. 172800 IN NS ns4.cloudflare.com. cloudflare.com. 172800 IN NS ns6.cloudflare.com. cloudflare.com. 172800 IN NS ns7.cloudflare.com. cloudflare.com. 86400 IN DS ( 2371 13 2 32996839a6d808afe3eb4a795a0e6a7a39a76fc52ff228b22b76f6d63826f2b9 ) cloudflare.com. 86400 IN RRSIG ( DS 13 2 86400 20250518010610 20250510235610 40097 com. h0uclE2c4v2kzS4/8T8ic7V6NoeH2EV7ISGJMkLQxgX49McwG1skQEJaPFvtdpStt9b/KnFBYqNL GVk3lDeXbw== ) ;; ADDITIONAL SECTION (21 records) ns3.cloudflare.com. 172800 IN A 162.159.0.33 ns3.cloudflare.com. 172800 IN A 162.159.7.226 ns3.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:21 ns3.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:7e2 ns5.cloudflare.com. 172800 IN A 162.159.2.9 ns5.cloudflare.com. 172800 IN A 162.159.9.55 ns5.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:209 ns5.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:937 ns4.cloudflare.com. 172800 IN A 162.159.1.33 ns4.cloudflare.com. 172800 IN A 162.159.8.55 ns4.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:121 ns4.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:837 ns6.cloudflare.com. 172800 IN A 162.159.3.11 ns6.cloudflare.com. 172800 IN A 162.159.5.6 ns6.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:30b ns6.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:506 ns7.cloudflare.com. 172800 IN A 162.159.4.8 ns7.cloudflare.com. 172800 IN A 162.159.6.6 ns7.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:408 ns7.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:606 ;; { "EDNS-VERSION": 0 }
	Query to i.gtld-servers.net for cloudflare.com/DNSKEY
	Received 720 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 720 octets ;; HEADER SECTION ;; id = 18434 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 21 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cloudflare.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cloudflare.com. 172800 IN NS ns3.cloudflare.com. cloudflare.com. 172800 IN NS ns5.cloudflare.com. cloudflare.com. 172800 IN NS ns4.cloudflare.com. cloudflare.com. 172800 IN NS ns6.cloudflare.com. cloudflare.com. 172800 IN NS ns7.cloudflare.com. cloudflare.com. 86400 IN DS ( 2371 13 2 32996839a6d808afe3eb4a795a0e6a7a39a76fc52ff228b22b76f6d63826f2b9 ) cloudflare.com. 86400 IN RRSIG ( DS 13 2 86400 20250518010610 20250510235610 40097 com. h0uclE2c4v2kzS4/8T8ic7V6NoeH2EV7ISGJMkLQxgX49McwG1skQEJaPFvtdpStt9b/KnFBYqNL GVk3lDeXbw== ) ;; ADDITIONAL SECTION (21 records) ns3.cloudflare.com. 172800 IN A 162.159.0.33 ns3.cloudflare.com. 172800 IN A 162.159.7.226 ns3.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:21 ns3.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:7e2 ns5.cloudflare.com. 172800 IN A 162.159.2.9 ns5.cloudflare.com. 172800 IN A 162.159.9.55 ns5.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:209 ns5.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:937 ns4.cloudflare.com. 172800 IN A 162.159.1.33 ns4.cloudflare.com. 172800 IN A 162.159.8.55 ns4.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:121 ns4.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:837 ns6.cloudflare.com. 172800 IN A 162.159.3.11 ns6.cloudflare.com. 172800 IN A 162.159.5.6 ns6.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:30b ns6.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:506 ns7.cloudflare.com. 172800 IN A 162.159.4.8 ns7.cloudflare.com. 172800 IN A 162.159.6.6 ns7.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:408 ns7.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:606 ;; { "EDNS-VERSION": 0 }
	Found child zone cloudflare.com

cloudflare.com

	Checking DS between com and cloudflare.com
	Query to m.gtld-servers.net for cloudflare.com/DS
	Received 1085 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 1085 octets ;; HEADER SECTION ;; id = 56659 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 14 arcount = 27 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cloudflare.com. IN DS ;; ANSWER SECTION (2 records) cloudflare.com. 86400 IN DS ( 2371 13 2 32996839a6d808afe3eb4a795a0e6a7a39a76fc52ff228b22b76f6d63826f2b9 ) cloudflare.com. 86400 IN RRSIG ( DS 13 2 86400 20250518010610 20250510235610 40097 com. h0uclE2c4v2kzS4/8T8ic7V6NoeH2EV7ISGJMkLQxgX49McwG1skQEJaPFvtdpStt9b/KnFBYqNL GVk3lDeXbw== ) ;; AUTHORITY SECTION (14 records) com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN RRSIG ( NS 13 1 172800 20250516002547 20250508231547 40097 com. DRNAkjMsxaMIgzXCO1Nk8l2npsac6VRPi/UtPGnDbzU3DOFJw7RDSe5cxQWhlpKv2C4/11j81/kO ndLztp6juQ== ) ;; ADDITIONAL SECTION (27 records) d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for cloudflare.com in the com zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cloudflare.com. 86400 IN RRSIG ( DS 13 2 86400 20250518010610 20250510235610 40097 com. h0uclE2c4v2kzS4/8T8ic7V6NoeH2EV7ISGJMkLQxgX49McwG1skQEJaPFvtdpStt9b/KnFBYqNL GVk3lDeXbw== )`
	RRSIG=40097 and DNSKEY=40097 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`cloudflare.com. 86400 IN DS ( 2371 13 2 32996839a6d808afe3eb4a795a0e6a7a39a76fc52ff228b22b76f6d63826f2b9 )`
	Query to ns3.cloudflare.com for cloudflare.com/DNSKEY
	Received 313 bytes from 162.159.0.33
	;; Response received from [162.159.0.33] 313 octets ;; HEADER SECTION ;; id = 63771 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cloudflare.com. IN DNSKEY ;; ANSWER SECTION (3 records) cloudflare.com. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371 cloudflare.com. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505 cloudflare.com. 3600 IN RRSIG ( DNSKEY 13 2 3600 20250703045441 20250503045441 2371 cloudflare.com. yGiCjiYRIJBQR2fKqB8i7qAjyofVCD8fjCIeTnVEjxW32uA+OmC9OhrDgifJgkAsxydDTEdJY2J9 JQVid2QVeA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for cloudflare.com
	`cloudflare.com. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371`
	`cloudflare.com. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cloudflare.com. 3600 IN RRSIG ( DNSKEY 13 2 3600 20250703045441 20250503045441 2371 cloudflare.com. yGiCjiYRIJBQR2fKqB8i7qAjyofVCD8fjCIeTnVEjxW32uA+OmC9OhrDgifJgkAsxydDTEdJY2J9 JQVid2QVeA== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to ns6.cloudflare.com for www.cloudflare.com/A
	Received 193 bytes from 162.159.5.6
	;; Response received from [162.159.5.6] 193 octets ;; HEADER SECTION ;; id = 34795 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cloudflare.com. IN A ;; ANSWER SECTION (3 records) www.cloudflare.com. 300 IN A 104.16.124.96 www.cloudflare.com. 300 IN A 104.16.123.96 www.cloudflare.com. 300 IN RRSIG ( A 13 3 300 20250512174559 20250510154559 34505 www.cloudflare.com. ijOyTRf4cq/gtX/a/uBUcanm7/e34DMW1KVjFI8OR2zbJyBAOR32CAdOlTiuCyaPyxSz+2VXuoGL 9cMSOHfFWg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns6.cloudflare.com is authoritative for www.cloudflare.com
	Query to ns5.cloudflare.com for www.cloudflare.com/DNSKEY
	Received 321 bytes from 162.159.9.55
	;; Response received from [162.159.9.55] 321 octets ;; HEADER SECTION ;; id = 32794 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cloudflare.com. IN DNSKEY ;; ANSWER SECTION (3 records) www.cloudflare.com. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371 www.cloudflare.com. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505 www.cloudflare.com. 3600 IN RRSIG ( DNSKEY 13 3 3600 20250703033347 20250503033347 2371 www.cloudflare.com. TVmz4HmmZiq3pgy5KDGVPR4iasXy0qlvJUQsd9cDjGYfhMHWFgcNXDbH93yW9q4mLAKXZrg70mjc qvPprpKVxA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone www.cloudflare.com
	Attempting to learn nameservers for www.cloudflare.com
	Query to ns7.cloudflare.com for www.cloudflare.com/NS
	Received 201 bytes from 162.159.6.6
	;; Response received from [162.159.6.6] 201 octets ;; HEADER SECTION ;; id = 27026 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cloudflare.com. IN NS ;; ANSWER SECTION (3 records) www.cloudflare.com. 86400 IN NS jule.ns.cloudflare.com. www.cloudflare.com. 86400 IN NS vin.ns.cloudflare.com. www.cloudflare.com. 86400 IN RRSIG ( NS 13 3 86400 20250512174559 20250510154559 34505 www.cloudflare.com. 9ztLsx++BneT7EXZGo8hkXLWdgY+MLXZeqvkdUhF0nvh691YGdtYNwDVyt20ekZz/zoi0Lazc/wA PnWQA9Goug== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found www.cloudflare.com nameservers: jule.ns.cloudflare.com, vin.ns.cloudflare.com

www.cloudflare.com

	Checking DS between cloudflare.com and www.cloudflare.com
	Query to ns7.cloudflare.com for www.cloudflare.com/DS
	Received 205 bytes from 162.159.4.8
	;; Response received from [162.159.4.8] 205 octets ;; HEADER SECTION ;; id = 24563 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cloudflare.com. IN DS ;; ANSWER SECTION (2 records) www.cloudflare.com. 300 IN DS ( 2371 13 2 56171d8070a7e777c000824b52799a576bbafbfe97a6412cecd9c115a3ec35d2 ) www.cloudflare.com. 300 IN RRSIG ( DS 13 3 300 20250512174559 20250510154559 34505 cloudflare.com. PVN5RltuKAGGGpnX9vuQ2DKI5AWGjncMRln4z1IG+jJ20AVWzLvF0jt+jM9+C7TOhEwtxEh+l4wB bAIan9k9qA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for www.cloudflare.com in the cloudflare.com zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`www.cloudflare.com. 300 IN RRSIG ( DS 13 3 300 20250512174559 20250510154559 34505 cloudflare.com. PVN5RltuKAGGGpnX9vuQ2DKI5AWGjncMRln4z1IG+jJ20AVWzLvF0jt+jM9+C7TOhEwtxEh+l4wB bAIan9k9qA== )`
	RRSIG=34505 and DNSKEY=34505 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`www.cloudflare.com. 300 IN DS ( 2371 13 2 56171d8070a7e777c000824b52799a576bbafbfe97a6412cecd9c115a3ec35d2 )`
	Query to vin.ns.cloudflare.com for www.cloudflare.com/DNSKEY
	Received 321 bytes from 172.64.33.245
	;; Response received from [172.64.33.245] 321 octets ;; HEADER SECTION ;; id = 42399 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cloudflare.com. IN DNSKEY ;; ANSWER SECTION (3 records) www.cloudflare.com. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371 www.cloudflare.com. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505 www.cloudflare.com. 3600 IN RRSIG ( DNSKEY 13 3 3600 20250703033347 20250503033347 2371 www.cloudflare.com. TVmz4HmmZiq3pgy5KDGVPR4iasXy0qlvJUQsd9cDjGYfhMHWFgcNXDbH93yW9q4mLAKXZrg70mjc qvPprpKVxA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for www.cloudflare.com
	`www.cloudflare.com. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371`
	`www.cloudflare.com. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`www.cloudflare.com. 3600 IN RRSIG ( DNSKEY 13 3 3600 20250703033347 20250503033347 2371 www.cloudflare.com. TVmz4HmmZiq3pgy5KDGVPR4iasXy0qlvJUQsd9cDjGYfhMHWFgcNXDbH93yW9q4mLAKXZrg70mjc qvPprpKVxA== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to vin.ns.cloudflare.com for www.cloudflare.com/A
	Received 193 bytes from 108.162.193.245
	;; Response received from [108.162.193.245] 193 octets ;; HEADER SECTION ;; id = 58281 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cloudflare.com. IN A ;; ANSWER SECTION (3 records) www.cloudflare.com. 300 IN A 104.16.124.96 www.cloudflare.com. 300 IN A 104.16.123.96 www.cloudflare.com. 300 IN RRSIG ( A 13 3 300 20250512174559 20250510154559 34505 www.cloudflare.com. tFI3GucqpOv+SFmSki2qSeFTxUM4AzLX3E8GHNsaKAUV4O6yTp8bT+FtABXOWMmkBbl0gPNcQPpA 4IDGNaf3xA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	vin.ns.cloudflare.com is authoritative for www.cloudflare.com
	Found RRSIG signed by www.cloudflare.com zone
	Query to jule.ns.cloudflare.com for www.cloudflare.com/SOA
	Received 209 bytes from 108.162.192.175
	;; Response received from [108.162.192.175] 209 octets ;; HEADER SECTION ;; id = 14822 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cloudflare.com. IN SOA ;; ANSWER SECTION (2 records) www.cloudflare.com. 1800 IN SOA ( jule.ns.cloudflare.com. dns.cloudflare.com. 2371815332 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) www.cloudflare.com. 1800 IN RRSIG ( SOA 13 3 1800 20250512174559 20250510154559 34505 www.cloudflare.com. RQLRERR7WlyG941bHBtK+6z5sWn4L6WCj8ygUN/kyHhVjBWu0sSe1nPVqlsNIeYLTMDFnVt7YcRx HMwIj9EpcA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to vin.ns.cloudflare.com for www.cloudflare.com/A
	Received 193 bytes from 108.162.193.245
	;; Response received from [108.162.193.245] 193 octets ;; HEADER SECTION ;; id = 30518 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cloudflare.com. IN A ;; ANSWER SECTION (3 records) www.cloudflare.com. 300 IN A 104.16.124.96 www.cloudflare.com. 300 IN A 104.16.123.96 www.cloudflare.com. 300 IN RRSIG ( A 13 3 300 20250512174541 20250510154541 34505 www.cloudflare.com. DzloS6urrA6YYgUVqOtOLUyaxTdWwv9Tv11gFUYgbofyPZkTsWC2/VpDx0VUDhoC+esgcV/MLEpy Gw76jZDiNg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.cloudflare.com A RR has value 104.16.124.96
	www.cloudflare.com A RR has value 104.16.123.96
	Found 1 RRSIGs over A RRset
	`www.cloudflare.com. 300 IN RRSIG ( A 13 3 300 20250512174541 20250510154541 34505 www.cloudflare.com. DzloS6urrA6YYgUVqOtOLUyaxTdWwv9Tv11gFUYgbofyPZkTsWC2/VpDx0VUDhoC+esgcV/MLEpy Gw76jZDiNg== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

www.cloudflare.com

	Query to jule.ns.cloudflare.com for www.cloudflare.com/A
	Received 193 bytes from 172.64.32.175
	;; Response received from [172.64.32.175] 193 octets ;; HEADER SECTION ;; id = 58288 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cloudflare.com. IN A ;; ANSWER SECTION (3 records) www.cloudflare.com. 300 IN A 104.16.124.96 www.cloudflare.com. 300 IN A 104.16.123.96 www.cloudflare.com. 300 IN RRSIG ( A 13 3 300 20250512174559 20250510154559 34505 www.cloudflare.com. aAWtVtToTJrEKz8h97jsnebnYnbE7Sk85Y6nodNzdhtmcF/+IdlCXZmKi8vociuo6xy6QvPi4U8R +SQOQ6oLxw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	jule.ns.cloudflare.com is authoritative for www.cloudflare.com
	Found RRSIG signed by www.cloudflare.com zone
	Query to jule.ns.cloudflare.com for www.cloudflare.com/A
	Received 193 bytes from 173.245.58.175
	;; Response received from [173.245.58.175] 193 octets ;; HEADER SECTION ;; id = 43402 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.cloudflare.com. IN A ;; ANSWER SECTION (3 records) www.cloudflare.com. 300 IN A 104.16.123.96 www.cloudflare.com. 300 IN A 104.16.124.96 www.cloudflare.com. 300 IN RRSIG ( A 13 3 300 20250512174553 20250510154553 34505 www.cloudflare.com. Y6whui/E36p/3WZSKl49jdjy/0ooTLTZFTSyP0ThA2N8tAbgjvm75fxG8CCbUhjQN2ZD64xr5olq 4KBJWvBVgA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.cloudflare.com A RR has value 104.16.123.96
	www.cloudflare.com A RR has value 104.16.124.96
	Found 1 RRSIGs over A RRset
	`www.cloudflare.com. 300 IN RRSIG ( A 13 3 300 20250512174553 20250510154553 34505 www.cloudflare.com. Y6whui/E36p/3WZSKl49jdjy/0ooTLTZFTSyP0ThA2N8tAbgjvm75fxG8CCbUhjQN2ZD64xr5olq 4KBJWvBVgA== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.cloudflare.com at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: