diff --git a/lib/dns/zone.c b/lib/dns/zone.c
index 672d2997bc..fd8431408e 100644
--- a/lib/dns/zone.c
+++ b/lib/dns/zone.c
@@ -5921,6 +5921,10 @@ dns_kasp_t *
 dns_zone_getkasp(dns_zone_t *zone) {
 	REQUIRE(DNS_ZONE_VALID(zone));
 
+	if (inline_raw(zone) && zone->secure != NULL) {
+		return (zone->secure->kasp);
+	}
+
 	return (zone->kasp);
 }