Trace DNS delegation from the root to the authoritative answer
Build a paste-ready command, then review its compatibility and effects before running it.
dig +trace +nodnssec <domain>Complete required fields to copy the generated command.
Compatibility
Linux + macOSVerified for Linux, macOS using bash, zsh syntax.
Operational knowledgereview due 2027-01-19
Requirementsdigdig must be installed and available on PATH.Network accessThe target must be reachable from the current environment.
Version supportdig Current supported releasesVerified for linux, macos using bash, zsh syntax; consult compatibility notes for platform-specific differences.
Expected signals. 518400 IN NS a.root-servers.net.Representative successful output; values vary with the selected target and system state.
Known errorsdig: command not founddig is missing or is not available on PATH.
Verifydig +trace +nodnssec {{domain}}The output matches the expected target and exits without an error.Rollback noteNot required: this command is read-only and does not change system state.
Command breakdown
01digCommandRuns the dig stage of this one-liner.
02+traceOptionConfigures dig with the +trace option.
03+nodnssecOptionConfigures dig with the +nodnssec option.
04<domain>ParameterA value supplied in the Fill parameters section.
This advanced community-curated one-liner combines several stages. Review every option and placeholder before running it.
Example input
dig +trace +nodnssec www.example.com
Example output
. 518400 IN NS a.root-servers.net.
com. 172800 IN NS a.gtld-servers.net.
example.com. 86400 IN NS a.iana-servers.net.
www.example.com. 300 IN A 93.184.216.34
Illustrative output — exact values vary by system and data.
Official sources