# DNSKEY Records: DNSSEC Keys

The DNSKEY records of cloudflare.com: its DNSSEC public keys, flags 256 and 257.

Source: https://docs.deepinfo.com/reference/lookup/dns/examples/type-dnskey/

Last updated: 2026-09-24

---
`GET https://api.deepinfo.com/v1/lookup/dns?domain=cloudflare.com&type=DNSKEY`

The DNSKEY records of cloudflare.com: its DNSSEC public keys, flags 256 and 257.

Example 13 of 13 in **Record Types** · [DNS Lookup Examples](/reference/lookup/dns/examples/) · endpoint: [DNS](/reference/lookup/dns/)

Tags: `param` `domain` · `param` `type` · `value` `cloudflare.com` · `value` `DNSKEY`

Asks for the `DNSKEY` records of `cloudflare.com`.

The answer holds the domain's two DNSSEC public keys: flags `256` mark the zone-signing key and `257` the key-signing key (the one the `DS` record in `.com` points to). Both use algorithm `13`; the key material is base64.

## Request

| Parameter | In | Value |
|---|---|---|
| `domain` | query | `cloudflare.com` |
| `type` | query | `DNSKEY` |

```bash
curl 'https://api.deepinfo.com/v1/lookup/dns?domain=cloudflare.com&type=DNSKEY' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'
```

## Response

### 200 · OK

`Content-Type: application/json` · `ratelimit-limit: 100000` · `ratelimit-remaining: 99987` · `ratelimit-reset: 31` · `x-ratelimit-limit-minute: 100000` · `x-ratelimit-remaining-minute: 99987` · `deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a`

```json
{
  "fqdn": "cloudflare.com",
  "requested_types": [
    "DNSKEY"
  ],
  "responses": [
    {
      "type": "DNSKEY",
      "conn_status": "success",
      "rcode": "NOERROR",
      "raw": "cloudflare.com. 2470 IN DNSKEY 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWz JaOau8XNEZeqCYKD5ar0IRd8KqXXFJkq mVfRvMGPmM1x8fGAa2XhSA==\ncloudflare.com. 2470 IN DNSKEY 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0d xCjjnopKl+GqJxpVXckHAeF+KkxLbxIL fDLUT0rAK9iUzy1L53eKGQ==",
      "values": [
        "256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWz JaOau8XNEZeqCYKD5ar0IRd8KqXXFJkq mVfRvMGPmM1x8fGAa2XhSA==",
        "257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0d xCjjnopKl+GqJxpVXckHAeF+KkxLbxIL fDLUT0rAK9iUzy1L53eKGQ=="
      ],
      "server": "8.8.8.8"
    }
  ],
  "servers": [
    "8.8.8.8"
  ],
  "check_date": "2026-09-24T07:48:29Z"
}
```

## Related Examples

- [DS Record: DNSSEC Delegation](/reference/lookup/dns/examples/type-ds/)
- [AAAA Records: IPv6 Addresses](/reference/lookup/dns/examples/type-aaaa/)
- [IPv4 and IPv6 Addresses Together](/reference/lookup/dns/examples/types-a-aaaa/)
- [DMARC Policy in a TXT Record](/reference/lookup/dns/examples/dmarc-txt/)
- [PTR Record: Reverse DNS](/reference/lookup/dns/examples/type-ptr/)
- [SRV Record of a Service](/reference/lookup/dns/examples/type-srv/)