🚀 Experience the new and improved APIVoid! Check out what's new

DNSSEC Status API: Check if DNS Records are Fully DNSSEC-Signed

An JSON API to verify if a domain's DNS records are fully DNSSEC-signed and validated. Use this API to ensure that the entire DNSSEC chain is correctly signed and secure.

Get started now
View pricing

Consumes 1 credits per API call

# Example Curl request from the command line:
                          
curl -X POST "https://api.apivoid.com/v2/dnssec-status" \
     -H "Content-Type: application/json" \
     -H "X-API-Key: YOUR_API_KEY_HERE" \
     -d '{
           "host":"www.paypal.com",
           "dns_type":"A"
         }'

# Example JSON output for a 200 HTTP status code:

{
    "host": "www.paypal.com",
    "dns_type": "A",
    "dnssec_enabled": true,
    "dnssec_signed": false,
    "rrsig_records": [
        {
            "name": "www.paypal.com",
            "type": "RRSIG",
            "ttl": 3417,
            "data": "CNAME 13 3 3600 1744928484 1742333294 paypal.com f5l9SOGnbgf8H23QOu+uunwLwMgxt7jAYHvuW8d9KNPnQf3FMX80Lxhqzdla6K/f6AOjIyCaBuk2RFKlrTe9iA=="
        },
        {
            "name": "www.glb.paypal.com",
            "type": "RRSIG",
            "ttl": 117,
            "data": "CNAME 13 4 300 1742907859 1742735059 glb.paypal.com 1Ue0053RPP/8+PbTQP1kGQ9QsSzhR8ecKgSvMSZiEyZ/S++1qso9ZFNRnkVMbxlOvUCrmS9szcuvWB1b4Px4Ow=="
        },
        {
            "name": "www.paypal.com",
            "type": "RRSIG",
            "ttl": 3600,
            "data": "CNAME 13 3 3600 1744928484 1742333294 paypal.com f5l9SOGnbgf8H23QOu+uunwLwMgxt7jAYHvuW8d9KNPnQf3FMX80Lxhqzdla6K/f6AOjIyCaBuk2RFKlrTe9iA=="
        },
        {
            "name": "www.glb.paypal.com",
            "type": "RRSIG",
            "ttl": 300,
            "data": "CNAME 13 4 300 1742908055 1742735255 glb.paypal.com UBLdB8tJpzF/WMeV370JjeNo2nDMeflysiKeI34GOC2Dw7g8HtbgMvc5FkfL/jmxglwcLrsnb1x7kFfmkBOReA=="
        },
        {
            "name": "www.paypal.com",
            "type": "RRSIG",
            "ttl": 3600,
            "data": "CNAME 13 3 3600 1744928484 1742333294 paypal.com f5l9SOGnbgf8H23QOu+uunwLwMgxt7jAYHvuW8d9KNPnQf3FMX80Lxhqzdla6K/f6AOjIyCaBuk2RFKlrTe9iA=="
        },
        {
            "name": "www.glb.paypal.com",
            "type": "RRSIG",
            "ttl": 300,
            "data": "CNAME 13 4 300 1742908056 1742735256 glb.paypal.com 6Fx9cnpencNHlQiPy3m66tGymPvuCQ19fBQNebQTLJSEYv60p9likEjDISpJ+sI0GX/0fu3bdEwCU0VJk4ledw=="
        },
        {
            "name": "www.paypal.com",
            "type": "RRSIG",
            "ttl": 3600,
            "data": "CNAME 13 3 3600 1744928484 1742333294 paypal.com f5l9SOGnbgf8H23QOu+uunwLwMgxt7jAYHvuW8d9KNPnQf3FMX80Lxhqzdla6K/f6AOjIyCaBuk2RFKlrTe9iA=="
        },
        {
            "name": "www.glb.paypal.com",
            "type": "RRSIG",
            "ttl": 300,
            "data": "CNAME 13 4 300 1742908056 1742735256 glb.paypal.com imTdzyhprpa8RdHiR7UNGnzDWMPmWcLsbXuDr5x5OMOUws923pMQCLsAViQ01BaFL7UlazxNPdszb9QuXsGoDA=="
        },
        {
            "name": "paypal.com",
            "type": "RRSIG",
            "ttl": 59,
            "data": "A 13 2 300 1744930569 1742335033 paypal.com lJWZJ+jrUFF1YK0VNdbQv/SCCNcGgs1VHAeGnzl/ch7FoZ7Ij0iFAxcj2Lx0lrC/EqzcKg/Ow40ZM4YzMZSZcQ=="
        },
        {
            "name": "paypal.com",
            "type": "RRSIG",
            "ttl": 2189,
            "data": "MX 13 2 3600 1744911592 1742316283 paypal.com hMLziyfQZNgBumBMCs/hOVJbiBu7hmN+cqDz/y2U919BIuxOFa5ASnmy+uPSTfGxMYuMS8Sc8sO79w9qjBmykw=="
        },
        {
            "name": "paypal.com",
            "type": "RRSIG",
            "ttl": 57,
            "data": "NS 13 2 300 1744922379 1742329900 paypal.com YoHzfPnxMZiDe/c/GJuznmW7VoMGi/+RtwgPjcFZcjo6UIlj3Yc4OeciTg+VroPS0GNiNw/mAwMhPmqQNSUEog=="
        }
    ],
    "dnskey_records": [
        {
            "name": "paypal.com",
            "type": "DNSKEY",
            "ttl": 37,
            "data": "256 3 13 P82aHv27vjeEDMJUhvU8f02W9/WeblsvfMCL+ywMEJgD/9xsRStpOJhZC9EwZ4nQBsP8rlA5rhyXZfBcgc877g=="
        },
        {
            "name": "paypal.com",
            "type": "DNSKEY",
            "ttl": 37,
            "data": "256 3 13 t7/xPcfCnzUrxKawsmnR+SxQAJSSLABBt+y7eV2/BylpqG6vhGuJRVGSsHeuBt/VjC6IByqVMYGu1J9+/s1QbQ=="
        },
        {
            "name": "paypal.com",
            "type": "DNSKEY",
            "ttl": 37,
            "data": "256 3 13 zJFO6JcpeZIZXwqycK0s1dx2o2WscPt3mltjObZe2pfHRGeBROSwdseufTJyQSyfNn+3ZgvcJZq4foKZfXT/WA=="
        },
        {
            "name": "paypal.com",
            "type": "DNSKEY",
            "ttl": 37,
            "data": "257 3 13 UfWINtfVS/tASNWSjcw5K3jSqovFZ6saO8xTwAL3QniwgHkBzBUQHh1Xh4s5eIuEcPZFJ3YY1cem5yQo2Lsq1w=="
        },
        {
            "name": "paypal.com",
            "type": "DNSKEY",
            "ttl": 37,
            "data": "257 3 13 1NYmUeN/Ens1c5m8lmq5/SiqjpMK+dfGDY+3j8KkDgDSiDQev59JlxpQSIgRV723NGBrM5wyDtORZ20rSVkCqA=="
        }
    ],
    "ds_records": [
        {
            "name": "paypal.com",
            "type": "DS",
            "ttl": 76862,
            "data": "7037 13 2 9778f2ff96889ebed549795deaa40a6113f1899af7ca8dd7947fddfeca9a190b"
        },
        {
            "name": "paypal.com",
            "type": "DS",
            "ttl": 76862,
            "data": "34800 13 2 d9e64ba8c8718fd93b596f9d109d9dac47c3f557312201dfcce5dd4128c08f50"
        }
    ],
    "answer": [
        {
            "name": "www.paypal.com",
            "type": "CNAME",
            "ttl": 3357,
            "data": "www.glb.paypal.com"
        },
        {
            "name": "www.paypal.com",
            "type": "RRSIG",
            "ttl": 3357,
            "data": "CNAME 13 3 3600 1744928484 1742333294 paypal.com f5l9SOGnbgf8H23QOu+uunwLwMgxt7jAYHvuW8d9KNPnQf3FMX80Lxhqzdla6K/f6AOjIyCaBuk2RFKlrTe9iA=="
        },
        {
            "name": "www.glb.paypal.com",
            "type": "CNAME",
            "ttl": 57,
            "data": "paypal-dynamic.map.fastly.net"
        },
        {
            "name": "www.glb.paypal.com",
            "type": "RRSIG",
            "ttl": 57,
            "data": "CNAME 13 4 300 1742907789 1742734989 glb.paypal.com Uf7VXZU5DE6knhXR8QqQQiuaQMFhqOtWfYk+duF8tPQaZQ2In04/fimFy6Z3PjDo7CCSkiAmEK36HYY4hF4Dow=="
        },
        {
            "name": "paypal-dynamic.map.fastly.net",
            "type": "A",
            "ttl": 57,
            "data": "151.101.129.21"
        },
        {
            "name": "paypal-dynamic.map.fastly.net",
            "type": "A",
            "ttl": 57,
            "data": "151.101.193.21"
        },
        {
            "name": "paypal-dynamic.map.fastly.net",
            "type": "A",
            "ttl": 57,
            "data": "151.101.65.21"
        },
        {
            "name": "paypal-dynamic.map.fastly.net",
            "type": "A",
            "ttl": 57,
            "data": "151.101.1.21"
        }
    ],
    "elapsed_ms": 169
}
Code analysis

Key Features

Verify if a domain's DNS records are fully DNSSEC-signed

Businesses and startups use this DNSSEC Status API to lookup DNSSEC records of domains, ensuring the domain's DNS records are signed and have not been tampered with.

Check DNSSEC records

This API performs a DNSSEC lookup to verify DNS records are fully signed and validated.

Verify DNS records

Check the "dnssec_signed" JSON field, if it is true it means DNS records are DNSSEC-signed.

Useful details

The API returns if DNSSEC records are signed, along with the full DNS answer and CNAME redirects.

Throubleshoot with Ease

With this API you can easily check if DNS records of your domain are correctly DNSSEC-signed.

Common Use Cases

Take a look at some real-world use cases of this API service

Our API can be used in many ways, from cybersecurity tasks to domain analysis/research tasks. Here we showcase the most popular use cases according to our customers usage:

Perform DNSSEC Tests

Test the DNSSEC records of your domains, verify that the entire DNSSEC chain is correctly signed.

Monitor Your Customers

With this API you can monitor the DNSSEC records of your customers, making sure they are signed.

Better Risk Assessment

Ensure a company's domain has a properly configured DNSSEC records for compliance reasons.

Domain Analysis Tasks

Scan a list of domains to identify those with DNSSEC-signed records for statistical purposes.

Use cases

USAGE EXAMPLE

Learn how seamless it is to add and use DNSSEC Status API anywhere you want

All it takes is a HTTPS POST request with JSON payload to our endpoint, and you’ll receive the response within seconds, usually within 1-5 seconds. Here are a few code examples to use the API:

$host = 'www.paypal.com';
$dnsType = 'A';

$apiUrl = 'https://api.apivoid.com/v2/dnssec-status';
$apiKey = 'your_api_key_here';

$ch = curl_init($apiUrl);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json', 'X-API-Key: ' . $apiKey]);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode(['host' => $host, 'dns_type' => $dnsType]));
$response = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

if ($httpCode === 200) {
    $responseData = json_decode($response, true);

    print_r($responseData);
}

Start using our API services, it takes just a few minutes

Create your account, pick a subscription plan, and make your first API call instantly with your API key—simple as that!

Get started now