DNSSEC Validator
Paste RRSIG or DNSKEY records and validate that their expected fields are present.
Runs in your browser. Nothing is uploaded — your input is processed on this device and discarded when you close the tab.
DNSSEC Validator
How to use this tool
- Enter your values in the fields above.
- Press Generate to see the result.
- Use Load sample to try the worked example, Copy result to copy it, or Clear to start again.
Worked example
Pasting an RRSIG record covering type A with a key tag and signer reports its fields as present.
What this tool does not do / Limits
This tool only checks the format of RRSIG and DNSKEY text you paste. It does not fetch a zone, does not verify signatures cryptographically, and cannot prove a domain validates.
Frequently asked questions
Does this validate my domain for real?
No. Real validation needs the live zone and its chain of trust. This tool only checks the format of pasted text.
What is checked?
That the expected fields are present and in order for RRSIG and DNSKEY records.
Related tools
JSON Studio
Format, validate, minify, query and compare JSON in your browser, with precise line-and-column errors.
LiveRegex Tester
Test patterns against sample text with match highlighting, capture groups and a safe one-second timeout.
LiveSecurity Header and DNS Checker
Check HSTS, CSP and other security headers, TLS details, and DNS/email authentication records (SPF, DKIM, DMARC).
Live