DS Record Lookup
Check the DS (delegation signer) records that link a domain to DNSSEC at its parent zone.
Continue your work
- DNSKEY Lookup — See the keys the DS record should match.
- NS Lookup — Confirm which DNS host holds the zone.
Share this tool
Found it useful? Send it to a friend or teammate.
Rate this tool
0.0
0 ratings
- 5 stars 0
- 4 stars 0
- 3 stars 0
- 2 stars 0
- 1 star 0
Clear instructions
Find steps, examples and limitations below.
Use online
Open the tool in a supported web browser.
Free to use
No sign-up required. Tool-specific limits may apply.
How to use the DS Record Lookup
Check the DS (delegation signer) records that link a domain to DNSSEC at its parent zone.
- 1 Enter the domain name, such as example.com.
- 2 Click Find DS records.
- 3 Compare the key tag and algorithm with the domain’s DNSKEY records; they must match for DNSSEC to validate.
Example and practical tips
If your DNS host shows DNSSEC as “on” but the DS lookup finds nothing, copy the DS details from the DNS host into your registrar’s DNSSEC settings.
Frequently asked questions
Where does the DS record live?
In the parent zone, such as .com for example.com. You add it at your registrar, which passes it to the registry.
Which digest type should I use?
SHA-256 (digest type 2) is the recommended choice today. SHA-1 (type 1) is outdated.
Report an issue
Something broken or not quite right? Tell us and we will look into it.