NexaYori Tools DNSSEC chainHelp
DNSSEC chain
Try: cloudflare.com · ietf.org · dnssec-failed.org
Every signature is verified here against the IANA root keys, not just taken from a resolver’s “validated” flag. Unsigned delegations show as insecure; NSEC/NSEC3 denial proofs aren’t checked. Terminal: curl "…/dnssec?q=example.com"