Request DNSSEC validation details
Build a paste-ready command, then review its compatibility and effects before running it.
dig +dnssec <domain> A | rg 'flags:|ANSWER SECTION|RRSIG' -A3Complete required fields to copy the generated command.
read-onlyno known side effects Compatibility
LinuxVerified for Linux using posix, bash, zsh syntax.
Operational knowledgereview due 2027-01-20
Requirementsdigdig must be installed and available on PATH.
Version supportdig Current supported releasesVerified for linux using posix, bash, zsh syntax; consult compatibility notes for platform-specific differences.
Expected signals;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2Representative successful output; values vary with the selected target and system state.
Known errorsdig: command not founddig is missing or is not available on PATH.
Verifydig +dnssec {{domain}} A | rg 'flags:|ANSWER SECTION|RRSIG' -A3The output matches the expected target and exits without an error.Rollback noteNot required: this command is read-only and does not change system state.
Command breakdown
01digCommandRuns the dig stage of this one-liner.
02+dnssecOptionConfigures dig with the +dnssec option.
03<domain>ParameterA value supplied in the Fill parameters section.
05|PipelinePasses the output on the left to the command on the right.
06rgCommandRuns the rg stage of this one-liner.
07'flags:|ANSWER SECTION|RRSIG'ArgumentPasses 'flags:|ANSWER SECTION|RRSIG' to rg.
08-A3OptionConfigures rg with the -A3 option.
Example input
dig +dnssec example.com A | rg 'flags:|ANSWER SECTION|RRSIG' -A3
Example output
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2
;; ANSWER SECTION:
example.com. 300 IN A 93.184.216.34
example.com. 300 IN RRSIG A 13 2 300 ...
Illustrative output — exact values vary by system and data.
Official sources