diff --git a/scripts/check-named-zones.sh b/scripts/check-named-zones.sh
new file mode 100755
index 0000000..915b36b
--- /dev/null
+++ b/scripts/check-named-zones.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+# shellcheck disable=SC1091
+set -eo pipefail
+
+[ -n "$CI" ]
+
+apt update -qq
+DEBIAN_FRONTEND=noninteractive apt -o Dpkg::Options::=--force-confold install -y --no-install-recommends bind9-utils
+
+alias check='PATH=/sbin:/usr/sbin:$PATH named-checkzone -i local'
+
+pushd dns
+
+check 'neo'                      neonetwork
+check '127.10.in-addr.arpa'      db.10.127
+check '7.2.1.0.0.1.d.f.ip6.arpa' db.fd10.127
+
+popd
diff --git a/scripts/generate-roa.sh b/scripts/generate-roa.sh
index ae3d67c..6ad09ab 100755
--- a/scripts/generate-roa.sh
+++ b/scripts/generate-roa.sh
@@ -21,3 +21,5 @@ scripts/roa.py -m "$MAX_LEN_4" -M "$MAX_LEN_6" -j -o generated/roa46.json
 scripts/roa.py -m "$MAX_LEN_4" -M "$MAX_LEN_6" -e -o generated/neonetwork.json
 scripts/roa.py -m "$MAX_LEN_4" -M "$MAX_LEN_6" -r -o generated/rfc8416.json
 scripts/roa.py --summary --output generated/README.md
+
+scripts/check-named-zones.sh