diff --git a/lib/dns/keymgr.c b/lib/dns/keymgr.c
index 8c1441cacd..61bb3182e7 100644
--- a/lib/dns/keymgr.c
+++ b/lib/dns/keymgr.c
@@ -89,7 +89,7 @@ keymgr_keyrole(dst_key_t* key)
 		return ("CSK");
 	} else if (ksk) {
 		return ("KSK");
-	} else {
+	} else if (zsk) {
 		return ("ZSK");
 	}
 	return ("NOSIGN");