DNS Lookup Examples · Example 12 of 13 in Record Types
DS Record: DNSSEC Delegation
The DS record of cloudflare.com: the DNSSEC delegation signer published in the parent zone.
Asks for the DS record of cloudflare.com.
A DS record in the parent zone (.com) links it to the domain's DNSSEC key. The value reads key tag 2371, algorithm 13 (ECDSA P-256 with SHA-256), digest type 2 (SHA-256) and the digest itself.