---
name: "getdns_root_trust_anchor"
section: "3"
platform: "linux"
package: "getdns"
version: "1.7.3-2"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/getdns_root_trust_anchor"
---

# getdns\_root\_trust\_anchor(3)

## NAME

**getdns\_root\_trust\_anchor** -- return the getdns list of default root trust anchors

## LIBRARY

DNS Resolver library (libgetdns, -lgetdns)

## SYNOPSIS

\#include \<getdns.h\>

getdns\_list \* \
 **getdns\_root\_trust\_anchor** (time\_t \*utc\_date\_of\_anchor)

## DESCRIPTION

If an application wants the API to perform DNSSEC validation without using the extensions, it can use the getdns\_validate\_dnssec() helper function. The API will use the resource records in bundle\_of\_support\_records to construct the validation chain and the DNSKEY or DS records in trust\_anchor\_records as trust anchors. The default list of trust anchor records that is used by the library to validate DNSSEC can be retrieved by using the getdns\_root\_trust\_anchor helper function.

*utc\_date\_of\_anchor* time the trust anchors were obtained in epoch seconds (on success)

## RETURN VALUES

Returns the default list of trust anchor records used by the library to validate DNSSEC or NULL if no default trust anchors are available.

## EXAMPLES

TBD

## SEE ALSO

[**getdns\_validate\_dnssec**(3)](/getdns_validate_dnssec/3.md) [**libgetdns**(3)](/libgetdns/3.md)