CHECK-Z...PIRATION(1)

πŸ“¦ version 2.2.3, in arch rolling

πŸ’… check-zone-expiration(1)

okay so this is check-zone-expiration, straight out of the User Contributed Perl Documentation section, and bestie… it's literally just a little script that tells you how long your DNS zones have left before they ghost you. πŸ•°οΈβœ¨


✨ NAME ✨

check-zone-expiration β€” displays how long until a zone's records expire πŸŽ€


🌸 SYNOPSIS 🌸

first example, no flags, just vibes:

# check-zone-expiration dnssec-tools.org paypal.com dnssec-tools.org
will expire in 26 days, 2 hours, 16 minutes, 36 seconds paypal.com
will expire in 12 days, 17 hours, 7 minutes, 1 second

and here's the same thing but with -m doing its little filter thing:

# check-zone-expiration -m 1123200 dnssec-tools.org paypal.com
paypal.com          will expire in 12 days, 17 hours, 6 minutes, 22
seconds

like, notice how dnssec-tools.org didn't show up the second time? πŸ‘€ that's the whole point of -m, we'll get there. 🫢


πŸ¦‹ DESCRIPTION πŸ¦‹

the check-zone-exiration script reports how long until a zone will expire by querying for the zone's (top level) RRSIG and calculating how much time is left before the signatures will no longer be valid πŸ”₯ it will then report how much time is left in human readable form.

that's it. that's the girl. she queries the sigs, does the math, tells you "26 days, 2 hours, 16 minutes, 36 seconds" instead of some cursed epoch number. main character energy. πŸ‘‘

if the -m switch is provided with a time argument (in seconds), it will only print output for zones that have less than that time left πŸ™ˆ so like, it stays quiet about the zones that are fine and only yells about the ones that are lowkey about to expire. selective attention, honestly iconic. πŸ’…


πŸŽ€ OPTIONS πŸŽ€

  • -m STRING, --minimum-reporting=STRING β€” Minimum reporting time, or else be silent for the zone 🀐 so if a zone has more time left than STRING, she simply does not speak on it. periodt.

Copyright 2012-2014 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. πŸ“„ (yes bestie, the legal girlies were consulted, pls actually read the COPYING file.)


🌈 AUTHOR 🌈

Wes Hardaker, hardaker@tislabs.com β€” ty for the script king πŸ«‘πŸ’–


⭐ SEE ALSO ⭐

  • donuts(1) β€” yes that's really the name and yes I'm obsessed 🍩✨

ngl the whole thing is one option deep. one. -m and that's it. we love a low-maintenance legend. πŸ§šβ€β™€οΈ

and that's the page! perl v5.44.0, dated 2026-10-17 β€” catch you on the next manpage, bestie πŸ’œπŸŒΈπŸ¦‹

πŸ“¦ where this page comes from