My DNS Stuff
Home Recursive DNS Lookup DNSSEC Authentication
  • DNS Response to Authenticate
    • domain: example.com.
    • type: A
    • answers found:
      • example.com. 3600 IN A 93.184.215.14
      • example.com. 3600 IN RRSIG A 13 2 3600 20241206041826 20241115121713 60915 example.com. vRP5fmIUOIHdIXJsnFkSLYL84OEh4isvOeIkPdGR1Ro+YUs4tTNO6J3ajnDvcIZfc5p+j8R35Z/SOOqD9ZY95w==
    • DNS Lookup
      • domain: example.com.
      • type: DNSKEY
      • answers found:
        • example.com. 3600 IN DNSKEY 256 3 13 OtuN/SL9sE+SDQ0tOLeezr1KzUNi77FflTjxQylUhm3V7m13Vz9tYQucSGK0pyxISo9CQsszubAwJSypq3li3g==
        • example.com. 3600 IN DNSKEY 256 3 13 ai2pvpijJjeNTpBu4yg6T375JqIStPtLABDTAILb+f4J7XpofUNXGQn6FpQvZ6CARWn2xQapbjGtDRjTf4qYxg==
        • example.com. 3600 IN DNSKEY 257 3 13 kXKkvWU3vGYfTJGl3qBd4qhiWp5aRs7YtkCJxD2d+t7KXqwahww5IgJtxJT2yFItlggazyfXqJEVOmMJ3qT0tQ==
        • example.com. 3600 IN RRSIG DNSKEY 13 2 3600 20241206232316 20241115121713 370 example.com. 439FtTTOW2jiZMuQao9wDvuqARVdMnySqVKtiIbtfXc5pg1OATg0USy+cXYxgKixsiozuZxQxD97ovU3dNrQGg==
      • Signature Validation
        • type: Zone Signing Key
        • for: example.com.
        • in: example.com.
        • key: example.com. 3600 IN DNSKEY 256 3 13 ai2pvpijJjeNTpBu4yg6T375JqIStPtLABDTAILb+f4J7XpofUNXGQn6FpQvZ6CARWn2xQapbjGtDRjTf4qYxg==
        • algorithm: ECDSA P256 SHA256
        • signature: example.com. 3600 IN RRSIG A 13 2 3600 20241206041826 20241115121713 60915 example.com. vRP5fmIUOIHdIXJsnFkSLYL84OEh4isvOeIkPdGR1Ro+YUs4tTNO6J3ajnDvcIZfc5p+j8R35Z/SOOqD9ZY95w==
        • hash: 74510431a97d383d2d8b9101643ee493a6ec754aafb7431295210d59b6e501f6
        • records:
          • example.com. 3600 IN A 93.184.215.14
      • Signature Validation
        • type: Key Signing Key
        • for: example.com.
        • in: example.com.
        • key: example.com. 3600 IN DNSKEY 257 3 13 kXKkvWU3vGYfTJGl3qBd4qhiWp5aRs7YtkCJxD2d+t7KXqwahww5IgJtxJT2yFItlggazyfXqJEVOmMJ3qT0tQ==
        • algorithm: ECDSA P256 SHA256
        • signature: example.com. 3600 IN RRSIG DNSKEY 13 2 3600 20241206232316 20241115121713 370 example.com. 439FtTTOW2jiZMuQao9wDvuqARVdMnySqVKtiIbtfXc5pg1OATg0USy+cXYxgKixsiozuZxQxD97ovU3dNrQGg==
        • hash: be74359954660069d5c63d200c39f5603827d7dd02b56f120ee9f3a86764247c
        • records:
          • example.com. 3600 IN DNSKEY 256 3 13 OtuN/SL9sE+SDQ0tOLeezr1KzUNi77FflTjxQylUhm3V7m13Vz9tYQucSGK0pyxISo9CQsszubAwJSypq3li3g==
          • example.com. 3600 IN DNSKEY 256 3 13 ai2pvpijJjeNTpBu4yg6T375JqIStPtLABDTAILb+f4J7XpofUNXGQn6FpQvZ6CARWn2xQapbjGtDRjTf4qYxg==
          • example.com. 3600 IN DNSKEY 257 3 13 kXKkvWU3vGYfTJGl3qBd4qhiWp5aRs7YtkCJxD2d+t7KXqwahww5IgJtxJT2yFItlggazyfXqJEVOmMJ3qT0tQ==
      • DNS Lookup
        • domain: example.com.
        • type: DS
        • answers found:
          • example.com. 86400 IN DS 370 13 2 BE74359954660069D5C63D200C39F5603827D7DD02B56F120EE9F3A86764247C
          • example.com. 86400 IN RRSIG DS 13 2 86400 20241127012707 20241120001707 29942 com. CJ1jdnYaEOT8i+lkobsL83lsLSHtNYe038mmPQfcC1HcEQj9b0xzj1dzgOjm27c8tkx7cJUy4pV2Gq9Cd6NaFg==
        • Delegation Signer Validation
          • zone: example.com.
          • from: DNS Lookup
          • hash: SHA256
          • digest: be74359954660069d5c63d200c39f5603827d7dd02b56f120ee9f3a86764247c
        • DNS Response to Authenticate
          • domain: example.com.
          • type: DS
          • answers found:
            • example.com. 86400 IN DS 370 13 2 BE74359954660069D5C63D200C39F5603827D7DD02B56F120EE9F3A86764247C
            • example.com. 86400 IN RRSIG DS 13 2 86400 20241127012707 20241120001707 29942 com. CJ1jdnYaEOT8i+lkobsL83lsLSHtNYe038mmPQfcC1HcEQj9b0xzj1dzgOjm27c8tkx7cJUy4pV2Gq9Cd6NaFg==
          • DNS Lookup
            • domain: com.
            • type: DNSKEY
            • answers found:
              • com. 86400 IN DNSKEY 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAywEp1FCsEINQ==
              • com. 86400 IN DNSKEY 256 3 13 uugEQOG7/3zv3rVGq43NQTqfmZxWn4fMIpi6ph7JKEvTRwhtw3aIV4dSk+fgpFFmORrKNznT7AIuJKy6P/Mi1Q==
              • com. 86400 IN RRSIG DNSKEY 13 1 86400 20241128150235 20241113145735 19718 com. Dfzjc+2UUoMlj2tDz1V3ZsTR3Rk08k354U2kom69ZStmwuHv+OVMhkCoi2x79cE0AU844dgdAO+u/bXd2oiy0w==
            • Signature Validation
              • type: Zone Signing Key
              • for: example.com.
              • in: com.
              • key: com. 86400 IN DNSKEY 256 3 13 uugEQOG7/3zv3rVGq43NQTqfmZxWn4fMIpi6ph7JKEvTRwhtw3aIV4dSk+fgpFFmORrKNznT7AIuJKy6P/Mi1Q==
              • algorithm: ECDSA P256 SHA256
              • signature: example.com. 86400 IN RRSIG DS 13 2 86400 20241127012707 20241120001707 29942 com. CJ1jdnYaEOT8i+lkobsL83lsLSHtNYe038mmPQfcC1HcEQj9b0xzj1dzgOjm27c8tkx7cJUy4pV2Gq9Cd6NaFg==
              • hash: e5ffb0ba4a87f837508fd02eeb7b86db8604e05fa02aa1c84d9c8272efb05706
              • records:
                • example.com. 86400 IN DS 370 13 2 BE74359954660069D5C63D200C39F5603827D7DD02B56F120EE9F3A86764247C
            • Signature Validation
              • type: Key Signing Key
              • for: com.
              • in: com.
              • key: com. 86400 IN DNSKEY 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAywEp1FCsEINQ==
              • algorithm: ECDSA P256 SHA256
              • signature: com. 86400 IN RRSIG DNSKEY 13 1 86400 20241128150235 20241113145735 19718 com. Dfzjc+2UUoMlj2tDz1V3ZsTR3Rk08k354U2kom69ZStmwuHv+OVMhkCoi2x79cE0AU844dgdAO+u/bXd2oiy0w==
              • hash: 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a
              • records:
                • com. 86400 IN DNSKEY 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAywEp1FCsEINQ==
                • com. 86400 IN DNSKEY 256 3 13 uugEQOG7/3zv3rVGq43NQTqfmZxWn4fMIpi6ph7JKEvTRwhtw3aIV4dSk+fgpFFmORrKNznT7AIuJKy6P/Mi1Q==
            • DNS Lookup
              • domain: com.
              • type: DS
              • answers found:
                • com. 86400 IN DS 19718 13 2 8ACBB0CD28F41250A80A491389424D341522D946B0DA0C0291F2D3D771D7805A
                • com. 86400 IN RRSIG DS 8 1 86400 20241204050000 20241121040000 61050 . MS+JKGBVPomoOOKMRVUki5Zu4m7qJEjAaCGzuoC57/Ef2k5aJqpcgQr4lvVd4t/divpk32qSp8oX6kNurvYJOG88V2itHdnoOO+SqkmjV4Ob3dYbK7ogfoSKeOJn7v9xsGY7BepCXvTefhEnapuZj8apLkt1Juhf5tu5SSAKTnlbiiFl6zIF4NBiTIsEp5rpTtZZWfWfndYPtnvYSWBp41fb+Xb9Q5QDfFRdmZq9SsTMuSGYXAWTxNCjdeE4bo4CWRn30q1zPdL2EnYeUNqknThzR9rbuF9w6lVaMa2aK5d7RS0Kj2DnnWWKLVf5OcKgkA+ZVHQCeWEPWWrOYUfhbQ==
              • Delegation Signer Validation
                • zone: com.
                • from: DNS Lookup
                • hash: SHA256
                • digest: 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a
              • DNS Response to Authenticate
                • domain: com.
                • type: DS
                • answers found:
                  • com. 86400 IN DS 19718 13 2 8ACBB0CD28F41250A80A491389424D341522D946B0DA0C0291F2D3D771D7805A
                  • com. 86400 IN RRSIG DS 8 1 86400 20241204050000 20241121040000 61050 . MS+JKGBVPomoOOKMRVUki5Zu4m7qJEjAaCGzuoC57/Ef2k5aJqpcgQr4lvVd4t/divpk32qSp8oX6kNurvYJOG88V2itHdnoOO+SqkmjV4Ob3dYbK7ogfoSKeOJn7v9xsGY7BepCXvTefhEnapuZj8apLkt1Juhf5tu5SSAKTnlbiiFl6zIF4NBiTIsEp5rpTtZZWfWfndYPtnvYSWBp41fb+Xb9Q5QDfFRdmZq9SsTMuSGYXAWTxNCjdeE4bo4CWRn30q1zPdL2EnYeUNqknThzR9rbuF9w6lVaMa2aK5d7RS0Kj2DnnWWKLVf5OcKgkA+ZVHQCeWEPWWrOYUfhbQ==
                • DNS Lookup
                  • domain: .
                  • type: DNSKEY
                  • answers found:
                    • . 172800 IN DNSKEY 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/dUOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs=
                    • . 172800 IN DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
                    • . 172800 IN RRSIG DNSKEY 8 0 172800 20241211000000 20241120000000 20326 . rHkeh+xkmliumsXauoWZKkik68pYa7SRMItqPyBibSnyK2FIhPPWgR0oDKiS+6RR74/Eu1q/L1NGt3phSSuUF9Y1XV1gbdlv3CwTd6CnOFyYZr1hG6YP3oNcKCZsVZG9+nEC71LywlG2ZVzl+6mJNOQmP4f6RGqXq97vwFMy1S8pCmDMcVX57Y5Kdp9BfqvP//YgZ4rtqkif8H1ENRsEtQVINRWpWftq1jdcZ/N7wyLlkeNa17VS+/2WNMsaNusX+TmCdTJG1Xd2LRRxfK5dORku9f0Pq6rhXUkKY7coGF8wI4EVmW37lBAsPdnI50x9UmGvlx6mOdSnVrxseLA5+A==
                  • Signature Validation
                    • type: Zone Signing Key
                    • for: com.
                    • in: .
                    • key: . 172800 IN DNSKEY 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/dUOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs=
                    • algorithm: RSA SHA256
                    • signature: com. 86400 IN RRSIG DS 8 1 86400 20241204050000 20241121040000 61050 . MS+JKGBVPomoOOKMRVUki5Zu4m7qJEjAaCGzuoC57/Ef2k5aJqpcgQr4lvVd4t/divpk32qSp8oX6kNurvYJOG88V2itHdnoOO+SqkmjV4Ob3dYbK7ogfoSKeOJn7v9xsGY7BepCXvTefhEnapuZj8apLkt1Juhf5tu5SSAKTnlbiiFl6zIF4NBiTIsEp5rpTtZZWfWfndYPtnvYSWBp41fb+Xb9Q5QDfFRdmZq9SsTMuSGYXAWTxNCjdeE4bo4CWRn30q1zPdL2EnYeUNqknThzR9rbuF9w6lVaMa2aK5d7RS0Kj2DnnWWKLVf5OcKgkA+ZVHQCeWEPWWrOYUfhbQ==
                    • hash: 66ff3bdaa056ee6e671b4efa669c640cff5280bf957e2ad632ab4c2644937fb7
                    • records:
                      • com. 86400 IN DS 19718 13 2 8ACBB0CD28F41250A80A491389424D341522D946B0DA0C0291F2D3D771D7805A
                  • Signature Validation
                    • type: Key Signing Key
                    • for: .
                    • in: .
                    • key: . 172800 IN DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
                    • algorithm: RSA SHA256
                    • signature: . 172800 IN RRSIG DNSKEY 8 0 172800 20241211000000 20241120000000 20326 . rHkeh+xkmliumsXauoWZKkik68pYa7SRMItqPyBibSnyK2FIhPPWgR0oDKiS+6RR74/Eu1q/L1NGt3phSSuUF9Y1XV1gbdlv3CwTd6CnOFyYZr1hG6YP3oNcKCZsVZG9+nEC71LywlG2ZVzl+6mJNOQmP4f6RGqXq97vwFMy1S8pCmDMcVX57Y5Kdp9BfqvP//YgZ4rtqkif8H1ENRsEtQVINRWpWftq1jdcZ/N7wyLlkeNa17VS+/2WNMsaNusX+TmCdTJG1Xd2LRRxfK5dORku9f0Pq6rhXUkKY7coGF8wI4EVmW37lBAsPdnI50x9UmGvlx6mOdSnVrxseLA5+A==
                    • hash: e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
                    • records:
                      • . 172800 IN DNSKEY 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/dUOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs=
                      • . 172800 IN DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
                    • Delegation Signer Validation
                      • zone: .
                      • from: Trust Anchors
                      • hash: SHA256
                      • digest: e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d

The following digests are valid DNSSEC trust anchors:

  • e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d