dnssec-tracker

groot53.com

Key directory: /mnt/bind/keys/groot53.com
Tracked since 2026-04-11T11:03:18Z, last observation 2026-04-16T21:44:09Z

Export HTML report Export PDF report

Keys

TagRoleAlgorithmKey idFirst seen
15484 KSK 14 Kgroot53.com.+014+15484 2026-04-11T11:03:18Z
17863 KSK 14 Kgroot53.com.+014+17863 2026-04-11T11:03:18Z
45657 KSK 14 Kgroot53.com.+014+45657 2026-04-11T11:03:18Z
46848 KSK 14 Kgroot53.com.+014+46848 2026-04-11T11:03:18Z
19094 ZSK 14 Kgroot53.com.+014+19094 2026-04-11T11:03:18Z
21000 ZSK 14 Kgroot53.com.+014+21000 2026-04-11T11:03:18Z
40142 ZSK 14 Kgroot53.com.+014+40142 2026-04-16T00:30:27Z
43098 ZSK 14 Kgroot53.com.+014+43098 2026-04-11T11:03:18Z
43138 ZSK 14 Kgroot53.com.+014+43138 2026-04-11T11:03:18Z

Rollover view

Every observed key on a time axis, grouped by (role, algorithm), subdivided into pre-published / published / active / retired / removed phases. KSK rows carry a thin DS-at-parent overlay stripe showing exactly when the chain of trust was complete. Simultaneous active phases across two algorithms are highlighted to make algorithm rollovers pop at a glance.

2026-04-11 11:03 → 2026-04-16 21:44 UTC2026-04-112026-04-122026-04-122026-04-132026-04-142026-04-142026-04-152026-04-162026-04-16KSK · alg 14ZSK · alg 14tag 15484KSK tag 15484 alg 14 — pre-published generated but not yet in the DNSKEY RRset 2026-04-11 11:03 → 2026-04-11 11:03 UTCKSK tag 15484 alg 14 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-16 21:44 UTCactiveDS overlap with another KSK 2026-04-11 11:03 → 2026-04-16 21:44 UTCDStag 17863KSK tag 17863 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-04-16 21:44 UTCremovedDStag 45657KSK tag 45657 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-04-16 21:44 UTCremovedDStag 46848KSK tag 46848 alg 14 — pre-published generated but not yet in the DNSKEY RRset 2026-04-11 11:03 → 2026-04-11 11:03 UTCKSK tag 46848 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-04-16 21:44 UTC LINGERING: ds lingering — key should have been removed by 2026-04-11 11:03OVERDUE: still publishedDS overlap with another KSK 2026-04-11 11:03 → 2026-04-16 21:44 UTCDStag 19094ZSK tag 19094 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-04-16 21:44 UTCremovedtag 21000ZSK tag 21000 alg 14 — pre-published generated but not yet in the DNSKEY RRset 2026-04-11 11:03 → 2026-04-11 11:03 UTCZSK tag 21000 alg 14 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-16 01:45 UTCactiveZSK tag 21000 alg 14 — inactive not signing, published for resolver caches, awaiting delete 2026-04-16 01:45 → 2026-04-16 21:44 UTCinactivetag 43098ZSK tag 43098 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-04-16 21:44 UTCremovedtag 43138ZSK tag 43138 alg 14 — removed past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-04-16 21:44 UTCremovedtag 40142ZSK tag 40142 alg 14 — pre-published generated but not yet in the DNSKEY RRset 2026-04-16 00:30 → 2026-04-16 00:31 UTCZSK tag 40142 alg 14 — published DNSKEY visible but not yet signing 2026-04-16 00:31 → 2026-04-16 01:45 UTCZSK tag 40142 alg 14 — active signing DNSKEY / zone data 2026-04-16 01:45 → 2026-04-16 21:44 UTCactivenowpre-publishedpublishedactiveinactiveremoved

Calendar view

← earlier 2023-07 later →
on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
June 2023
MonTueWedThuFriSatSun
2930311234
567891011
12131415161718
19202122232425
262728293012
July 2023
MonTueWedThuFriSatSun
262728293012
3456789
10111213141516
17181920212223
24252627282930
31123456
August 2023
MonTueWedThuFriSatSun
31123456
78910111213
14151617181920
21222324252627
28293031123

DNS event timeline

Events observed via live DNS queries and reported by rndc dnssec -status.

2026-04-11 11:03 → 2026-04-16 01:48 UTCrndcdns2026-04-112026-04-122026-04-122026-04-132026-04-132026-04-142026-04-142026-04-152026-04-16865107426222422214222298

File event timeline

Changes observed in the K*.state and K*.key files.

2026-04-11 11:03 → 2026-04-16 01:45 UTCstatekey2026-04-112026-04-122026-04-122026-04-132026-04-132026-04-142026-04-142026-04-152026-04-1682312268

State transition timeline

2026-04-14T13:27:48+00:00 → 2026-04-16T01:45:35+00:00KSK 15484 · DSStateomnipresentomnipresentZSK 21000 · GoalStatehiddenZSK 21000 · ZRRSIGStateunretentiveZSK 40142 · DNSKEYStateomnipresentZSK 40142 · ZRRSIGStaterumouredKSK 46848 · DNSKEYStateunretentivehiddenhiddenKSK 46848 · DSStateunretentiveunretentiveKSK 46848 · KRRSIGStateunretentivehiddenhiddenhiddenrumouredomnipresentunretentiveN/A

Event log

Clear

Filters apply to every section on this page (timelines, calendar, and the event table below). DNSKEY focus is a preset for hide_types=rrsig,soa. role=ZSK additionally drops DS/CDS/CDNSKEY events. Invalid regexes are silently ignored.

WhenSourceKeyTypeSummary
2026-04-16T01:48:24Z rndc ZSK 21000 rndc_state_changed groot53.com ZSK tag=21000 zone_signing: yes -> no
2026-04-16T01:48:24Z rndc ZSK 21000 rndc_state_changed groot53.com ZSK tag=21000 zone_rrsig: omnipresent -> unretentive
2026-04-16T01:48:24Z rndc ZSK 40142 rndc_state_changed groot53.com ZSK tag=40142 zone_signing: no -> yes
2026-04-16T01:48:24Z rndc ZSK 40142 rndc_state_changed groot53.com ZSK tag=40142 zone_rrsig: hidden -> rumoured
2026-04-16T01:48:24Z rndc ZSK 40142 rndc_state_changed groot53.com ZSK tag=40142 dnskey: rumoured -> omnipresent
2026-04-16T01:45:38Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-16T01:45:38Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over DNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-04-16T01:45:38Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDS (key tag 15484) disappeared at zone for groot53.com
2026-04-16T01:45:38Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-04-16T01:45:38Z dns 40142 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 40142) appeared at zone for groot53.com
2026-04-16T01:45:38Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 15484) appeared at zone for groot53.com
2026-04-16T01:45:38Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDS (key tag 15484) appeared at zone for groot53.com
2026-04-16T01:45:38Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDNSKEY (key tag 15484) appeared at zone for groot53.com
2026-04-16T01:45:35Z state ZSK 40142 state_timing_changed groot53.com ZSK tag=40142 ZRRSIGChange: 20260416003027 (Thu Apr 16 00:30:27 2026) -> 20260416014527 (Thu Apr 16 01:45:27 2026)
2026-04-16T01:45:35Z state ZSK 40142 state_timing_changed groot53.com ZSK tag=40142 DNSKEYChange: 20260416003027 (Thu Apr 16 00:30:27 2026) -> 20260416014527 (Thu Apr 16 01:45:27 2026)
2026-04-16T01:45:35Z state ZSK 40142 state_changed groot53.com ZSK tag=40142 ZRRSIGState: hidden -> rumoured
2026-04-16T01:45:35Z state ZSK 40142 state_changed groot53.com ZSK tag=40142 DNSKEYState: rumoured -> omnipresent
2026-04-16T01:45:35Z state ZSK 21000 state_timing_changed groot53.com ZSK tag=21000 ZRRSIGChange: 20260327025027 (Fri Mar 27 02:50:27 2026) -> 20260416014527 (Thu Apr 16 01:45:27 2026)
2026-04-16T01:45:35Z state ZSK 21000 state_changed groot53.com ZSK tag=21000 ZRRSIGState: omnipresent -> unretentive
2026-04-16T00:33:10Z rndc ZSK 21000 rndc_state_changed groot53.com ZSK tag=21000 goal: omnipresent -> hidden
2026-04-16T00:33:10Z rndc ZSK 40142 rndc_state_changed groot53.com ZSK tag=40142 zone_signing: (none) -> no
2026-04-16T00:33:10Z rndc ZSK 40142 rndc_state_changed groot53.com ZSK tag=40142 published: (none) -> yes
2026-04-16T00:33:10Z rndc ZSK 40142 rndc_state_changed groot53.com ZSK tag=40142 zone_rrsig: (none) -> hidden
2026-04-16T00:33:10Z rndc ZSK 40142 rndc_state_changed groot53.com ZSK tag=40142 dnskey: (none) -> rumoured
2026-04-16T00:33:10Z rndc ZSK 40142 rndc_state_changed groot53.com ZSK tag=40142 goal: (none) -> omnipresent
2026-04-16T00:31:03Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-16T00:31:03Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over DNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-04-16T00:31:03Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDS (key tag 15484) disappeared at zone for groot53.com
2026-04-16T00:31:03Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-04-16T00:31:03Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-16T00:31:03Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 15484) appeared at zone for groot53.com
2026-04-16T00:31:03Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDS (key tag 15484) appeared at zone for groot53.com
2026-04-16T00:31:03Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDNSKEY (key tag 15484) appeared at zone for groot53.com
2026-04-16T00:31:03Z dns 40142 dns_dnskey_appeared_at_zone DNSKEY (key tag 40142) appeared at zone for groot53.com
2026-04-16T00:30:29Z key ZSK 40142 key_file_observed new K*.key for groot53.com ZSK tag=40142
2026-04-16T00:30:27Z state ZSK 40142 state_key_observed new K*.state for groot53.com ZSK tag=40142
2026-04-16T00:30:27Z state ZSK 21000 state_changed groot53.com ZSK tag=21000 GoalState: omnipresent -> hidden
2026-04-15T04:35:34Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-15T04:35:34Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-14T20:32:38Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-14T20:32:38Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-14T13:47:00Z rndc KSK 46848 rndc_state_changed groot53.com KSK tag=46848 key_rrsig: unretentive -> hidden
2026-04-14T13:47:00Z rndc KSK 46848 rndc_state_changed groot53.com KSK tag=46848 dnskey: unretentive -> hidden
2026-04-14T13:42:50Z state KSK 46848 state_timing_changed groot53.com KSK tag=46848 KRRSIGChange: 20260414132723 (Tue Apr 14 13:27:23 2026) -> 20260414134223 (Tue Apr 14 13:42:23 2026)
2026-04-14T13:42:50Z state KSK 46848 state_timing_changed groot53.com KSK tag=46848 DNSKEYChange: 20260414132723 (Tue Apr 14 13:27:23 2026) -> 20260414134223 (Tue Apr 14 13:42:23 2026)
2026-04-14T13:42:50Z state KSK 46848 state_changed groot53.com KSK tag=46848 KRRSIGState: unretentive -> hidden
2026-04-14T13:42:50Z state KSK 46848 state_changed groot53.com KSK tag=46848 DNSKEYState: unretentive -> hidden
2026-04-14T13:42:46Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-14T13:42:46Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over DNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-04-14T13:42:46Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDS (key tag 15484) disappeared at zone for groot53.com
2026-04-14T13:42:46Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-04-14T13:42:46Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-14T13:42:46Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 15484) appeared at zone for groot53.com
2026-04-14T13:42:46Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDS (key tag 15484) appeared at zone for groot53.com
2026-04-14T13:42:46Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDNSKEY (key tag 15484) appeared at zone for groot53.com
2026-04-14T13:42:46Z dns 46848 dns_cdnskey_disappeared_at_zone CDNSKEY (key tag 46848) disappeared at zone for groot53.com
2026-04-14T13:31:57Z rndc KSK 15484 rndc_state_changed groot53.com KSK tag=15484 ds: rumoured -> omnipresent
2026-04-14T13:31:57Z rndc KSK 46848 rndc_state_changed groot53.com KSK tag=46848 key_signing: yes -> no
2026-04-14T13:31:57Z rndc KSK 46848 rndc_state_changed groot53.com KSK tag=46848 published: yes -> no
2026-04-14T13:31:57Z rndc KSK 46848 rndc_state_changed groot53.com KSK tag=46848 key_rrsig: omnipresent -> unretentive
2026-04-14T13:31:57Z rndc KSK 46848 rndc_state_changed groot53.com KSK tag=46848 ds: omnipresent -> unretentive
2026-04-14T13:31:57Z rndc KSK 46848 rndc_state_changed groot53.com KSK tag=46848 dnskey: omnipresent -> unretentive
2026-04-14T13:27:48Z state KSK 46848 state_timing_changed groot53.com KSK tag=46848 DSChange: 20251229080036 (Mon Dec 29 08:00:36 2025) -> 20260414132723 (Tue Apr 14 13:27:23 2026)
2026-04-14T13:27:48Z state KSK 46848 state_timing_changed groot53.com KSK tag=46848 KRRSIGChange: 20251217014527 (Wed Dec 17 01:45:27 2025) -> 20260414132723 (Tue Apr 14 13:27:23 2026)
2026-04-14T13:27:48Z state KSK 46848 state_timing_changed groot53.com KSK tag=46848 DNSKEYChange: 20251217014527 (Wed Dec 17 01:45:27 2025) -> 20260414132723 (Tue Apr 14 13:27:23 2026)
2026-04-14T13:27:48Z state KSK 46848 state_changed groot53.com KSK tag=46848 DSState: omnipresent -> unretentive
2026-04-14T13:27:48Z state KSK 46848 state_changed groot53.com KSK tag=46848 KRRSIGState: omnipresent -> unretentive
2026-04-14T13:27:48Z state KSK 46848 state_changed groot53.com KSK tag=46848 DNSKEYState: omnipresent -> unretentive
2026-04-14T13:27:48Z state KSK 15484 state_timing_changed groot53.com KSK tag=15484 DSChange: 20260317014527 (Tue Mar 17 01:45:27 2026) -> 20260414132723 (Tue Apr 14 13:27:23 2026)
2026-04-14T13:27:48Z state KSK 15484 state_changed groot53.com KSK tag=15484 DSState: rumoured -> omnipresent
2026-04-14T13:27:29Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-14T13:27:29Z dns 46848 dns_rrsig_disappeared_at_zone RRSIG over DNSKEY (key tag 46848) disappeared at zone for groot53.com
2026-04-14T13:27:29Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over DNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-04-14T13:27:29Z dns 46848 dns_rrsig_disappeared_at_zone RRSIG over CDS (key tag 46848) disappeared at zone for groot53.com
2026-04-14T13:27:29Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDS (key tag 15484) disappeared at zone for groot53.com
2026-04-14T13:27:29Z dns 46848 dns_rrsig_disappeared_at_zone RRSIG over CDNSKEY (key tag 46848) disappeared at zone for groot53.com
2026-04-14T13:27:29Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-04-14T13:27:29Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-14T13:27:29Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 15484) appeared at zone for groot53.com
2026-04-14T13:27:29Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDS (key tag 15484) appeared at zone for groot53.com
2026-04-14T13:27:29Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDNSKEY (key tag 15484) appeared at zone for groot53.com
2026-04-14T13:27:29Z dns 46848 dns_cds_disappeared_at_zone CDS (key tag 46848) disappeared at zone for groot53.com
2026-04-14T13:27:29Z dns 46848 dns_dnskey_disappeared_at_zone DNSKEY (key tag 46848) disappeared at zone for groot53.com
2026-04-14T02:14:23Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-14T02:14:23Z dns 46848 dns_rrsig_disappeared_at_zone RRSIG over DNSKEY (key tag 46848) disappeared at zone for groot53.com
2026-04-14T02:14:23Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over DNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-04-14T02:14:23Z dns 46848 dns_rrsig_disappeared_at_zone RRSIG over CDS (key tag 46848) disappeared at zone for groot53.com
2026-04-14T02:14:23Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDS (key tag 15484) disappeared at zone for groot53.com
2026-04-14T02:14:23Z dns 46848 dns_rrsig_disappeared_at_zone RRSIG over CDNSKEY (key tag 46848) disappeared at zone for groot53.com
2026-04-14T02:14:23Z dns 15484 dns_rrsig_disappeared_at_zone RRSIG over CDNSKEY (key tag 15484) disappeared at zone for groot53.com
2026-04-14T02:14:23Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-14T02:14:23Z dns 46848 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 46848) appeared at zone for groot53.com
2026-04-14T02:14:23Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 15484) appeared at zone for groot53.com
2026-04-14T02:14:23Z dns 46848 dns_rrsig_appeared_at_zone RRSIG over CDS (key tag 46848) appeared at zone for groot53.com
2026-04-14T02:14:23Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDS (key tag 15484) appeared at zone for groot53.com
2026-04-14T02:14:23Z dns 46848 dns_rrsig_appeared_at_zone RRSIG over CDNSKEY (key tag 46848) appeared at zone for groot53.com
2026-04-14T02:14:23Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDNSKEY (key tag 15484) appeared at zone for groot53.com
2026-04-14T01:08:59Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-14T01:08:59Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-13T18:02:15Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com