DNSSEC Record Viewer
Structurally parse pasted DS, DNSKEY, RRSIG, NSEC, and NSEC3 records and explain their fields without performing DNSSEC validation.
This tool handles input and primary processing in your browser and is designed not to send the input to QuickKit’s server.
Parsed records
How it works
Paste one complete presentation-format record per line, with optional owner/TTL/class fields. The viewer performs bounded structural checks only. It does not verify signatures, match DS records to DNSKEY records, validate an authentication chain, query DNS, or determine a zone’s current security state. For DS, the standardized SHA-1, SHA-256, and SHA-384 digest lengths are checked; other digest types receive only basic hexadecimal checks. NSEC3 permits only the defined Opt-Out flag bit. Sources: RFC 4034 and RFC 5155.