diff --git a/dnssec_keyscan.go b/dnssec_keyscan.go
index 5e654223..26f812a0 100644
--- a/dnssec_keyscan.go
+++ b/dnssec_keyscan.go
@@ -322,6 +322,11 @@ func (kl *klexer) Next() (lex, bool) {
 				commt = false
 			}
 
+			if kl.key && str.Len() == 0 {
+				// ignore empty lines
+				break
+			}
+
 			kl.key = true
 
 			l.value = zValue