dnssec-tracker

groot53.com

Key directory: /mnt/bind/keys/groot53.com
Tracked since 2026-04-11T11:03:18Z, last observation 2026-04-13T11:08:49Z

Export HTML report Export PDF report

Keys

TagRoleAlgorithmKey idFirst seen
15484 KSK 14 Kgroot53.com.+014+15484 2026-04-11T11:03:18Z
17863 KSK 14 Kgroot53.com.+014+17863 2026-04-11T11:03:18Z
45657 KSK 14 Kgroot53.com.+014+45657 2026-04-11T11:03:18Z
46848 KSK 14 Kgroot53.com.+014+46848 2026-04-11T11:03:18Z
19094 ZSK 14 Kgroot53.com.+014+19094 2026-04-11T11:03:18Z
21000 ZSK 14 Kgroot53.com.+014+21000 2026-04-11T11:03:18Z
43098 ZSK 14 Kgroot53.com.+014+43098 2026-04-11T11:03:18Z
43138 ZSK 14 Kgroot53.com.+014+43138 2026-04-11T11:03:18Z

Rollover view

Every observed key on a time axis, grouped by (role, algorithm), subdivided into pre-publication / published / active / retired / removed phases. KSK rows carry a thin DS-at-parent overlay stripe showing exactly when the chain of trust was complete. Simultaneous active phases across two algorithms are highlighted to make algorithm rollovers pop at a glance.

2026-04-11 11:03 → 2026-04-13 11:09 UTC2026-04-112026-04-112026-04-112026-04-122026-04-122026-04-122026-04-122026-04-132026-04-13KSK · alg 14ZSK · alg 14tag 15484KSK tag 15484 alg 14 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-13 11:09 UTCactiveDS observed at parent 2026-04-11 11:03 → 2026-04-13 11:09 UTCDStag 17863KSK tag 17863 alg 14 — past-deletion-date past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-04-13 11:09 UTCpast deletion dateDStag 45657KSK tag 45657 alg 14 — past-deletion-date past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-04-13 11:09 UTCpast deletion dateDStag 46848KSK tag 46848 alg 14 — past-deletion-date past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-04-13 11:09 UTC LINGERING: both lingering — key should have been removed by 2026-04-11 11:03OVERDUE: still publishedDS observed at parent 2026-04-11 11:03 → 2026-04-13 11:09 UTCDStag 19094ZSK tag 19094 alg 14 — past-deletion-date past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-04-13 11:09 UTCpast deletion datetag 21000ZSK tag 21000 alg 14 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-13 11:09 UTCactivetag 43098ZSK tag 43098 alg 14 — past-deletion-date past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-04-13 11:09 UTCpast deletion datetag 43138ZSK tag 43138 alg 14 — past-deletion-date past scheduled delete time — should no longer be in the zone 2026-04-11 11:03 → 2026-04-13 11:09 UTCpast deletion datenowpre-publicationpublishedactiveto be deletedpast deletion date

Calendar view

← earlier 2025-12 later →
on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
November 2025
MonTueWedThuFriSatSun
272829303112
3456789
10111213141516
17181920212223
24252627282930
December 2025
MonTueWedThuFriSatSun
1234567
891011121314
15161718192021
22232425262728
2930311234
January 2026
MonTueWedThuFriSatSun
2930311234
567891011
12131415161718
19202122232425
2627282930311

DNS event timeline

Events observed via live DNS queries and reported by rndc dnssec -status.

2026-04-11T11:03:19+00:00 → 2026-04-13T08:58:26+00:0004-11 11:0304-11 16:4704-11 22:3204-12 04:1604-12 10:0004-12 15:4504-12 21:2904-13 03:1404-13 08:5811:03:19 [rndc] rndc_first_observation: groot53.com: observed 8 key(s) via rndc 11:03:19 [dns] dns_ds_appeared_at_parent: DS (key tag 46848) appeared at parent for groot53.com 11:03:19 [dns] dns_ds_appeared_at_parent: DS (key tag 15484) appeared at parent for groot53.com 11:03:19 [dns] dns_cdnskey_appeared_at_zone: CDNSKEY (key tag 46848) appeared at zone for groot53.com 11:03:19 [dns] dns_cdnskey_appeared_at_zone: CDNSKEY (key tag 15484) appeared at zone for groot53.com 11:03:19 [dns] dns_cds_appeared_at_zone: CDS (key tag 46848) appeared at zone for groot53.com 11:03:19 [dns] dns_cds_appeared_at_zone: CDS (key tag 15484) appeared at zone for groot53.com 11:03:19 [dns] dns_soa_appeared_at_zone: SOA observed at zone for groot53.com (serial 732) 11:03:19 [dns] dns_dnskey_appeared_at_zone: DNSKEY (key tag 46848) appeared at zone for groot53.com 11:03:19 [dns] dns_dnskey_appeared_at_zone: DNSKEY (key tag 15484) appeared at zone for groot53.com 11:03:19 [dns] dns_dnskey_appeared_at_zone: DNSKEY (key tag 21000) appeared at zone for groot53.com1113:03:18 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 21000) appeared at zone for groot53.com 13:03:18 [dns] dns_rrsig_appeared_at_zone: RRSIG over DNSKEY (key tag 46848) appeared at zone for groot53.com 13:03:18 [dns] dns_rrsig_appeared_at_zone: RRSIG over DNSKEY (key tag 15484) appeared at zone for groot53.com 13:03:18 [dns] dns_rrsig_appeared_at_zone: RRSIG over CDS (key tag 46848) appeared at zone for groot53.com 13:03:18 [dns] dns_rrsig_appeared_at_zone: RRSIG over CDS (key tag 15484) appeared at zone for groot53.com 13:03:18 [dns] dns_rrsig_appeared_at_zone: RRSIG over CDNSKEY (key tag 46848) appeared at zone for groot53.com 13:03:18 [dns] dns_rrsig_appeared_at_zone: RRSIG over CDNSKEY (key tag 15484) appeared at zone for groot53.com721:53:18 [dns] dns_rrsig_disappeared_at_zone: RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com 21:53:18 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 21000) appeared at zone for groot53.com222:35:14 [dns] dns_rrsig_disappeared_at_zone: RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com 22:35:14 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 21000) appeared at zone for groot53.com223:30:30 [dns] dns_rrsig_disappeared_at_zone: RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com 23:30:30 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 21000) appeared at zone for groot53.com201:45:31 [dns] dns_rrsig_disappeared_at_zone: RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com 01:45:31 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 21000) appeared at zone for groot53.com 01:54:45 [dns] dns_rrsig_disappeared_at_zone: RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com 01:54:45 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 21000) appeared at zone for groot53.com402:23:23 [dns] dns_rrsig_disappeared_at_zone: RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com 02:23:23 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 21000) appeared at zone for groot53.com206:14:27 [dns] dns_rrsig_disappeared_at_zone: RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com 06:14:27 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 21000) appeared at zone for groot53.com206:44:30 [dns] dns_rrsig_disappeared_at_zone: RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com 06:44:30 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 21000) appeared at zone for groot53.com208:58:26 [dns] dns_rrsig_disappeared_at_zone: RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com 08:58:26 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 21000) appeared at zone for groot53.com2dnsrndc

File event timeline

Changes observed in the K*.state and K*.key files.

2026-04-11T11:03:18+00:00 → 2026-04-13T02:07:42+00:0004-11 11:0304-11 15:5604-11 20:4904-12 01:4204-12 06:3504-12 11:2804-12 16:2104-12 21:1404-13 02:0711:03:18 [key] key_file_observed: new K*.key for groot53.com ZSK tag=43138 11:03:18 [key] key_file_observed: new K*.key for groot53.com KSK tag=45657 11:03:18 [key] key_file_observed: new K*.key for groot53.com KSK tag=46848 11:03:18 [key] key_file_observed: new K*.key for groot53.com ZSK tag=21000 11:03:18 [key] key_file_observed: new K*.key for groot53.com ZSK tag=19094 11:03:18 [key] key_file_observed: new K*.key for groot53.com ZSK tag=43098 11:03:18 [key] key_file_observed: new K*.key for groot53.com KSK tag=17863 11:03:18 [key] key_file_observed: new K*.key for groot53.com KSK tag=15484 11:03:18 [state] state_key_observed: new K*.state for groot53.com ZSK tag=43138 11:03:18 [state] state_key_observed: new K*.state for groot53.com KSK tag=17863 11:03:18 [state] state_key_observed: new K*.state for groot53.com KSK tag=46848 11:03:18 [state] state_key_observed: new K*.state for groot53.com ZSK tag=43098 11:03:18 [state] state_key_observed: new K*.state for groot53.com ZSK tag=21000 11:03:18 [state] state_key_observed: new K*.state for groot53.com KSK tag=45657 11:03:18 [state] state_key_observed: new K*.state for groot53.com ZSK tag=19094 11:03:18 [state] state_key_observed: new K*.state for groot53.com KSK tag=154841601:56:09 [state] state_timing_changed: groot53.com KSK tag=15484 DSPublish: (unset) -> 20260413015543 (Mon Apr 13 01:55:43 2026) 02:07:42 [state] state_timing_changed: groot53.com KSK tag=15484 DSPublish: 20260413015543 (Mon Apr 13 01:55:43 2026) -> 20260413020715 (Mon Apr 13 02:07:15 2026)2statekey

State transition timeline

No state transitions recorded in this window.

Event log

Clear

Filters apply to every section on this page (timelines, calendar, and the event table below). DNSKEY focus is a preset for hide_types=rrsig,soa. role=ZSK additionally drops DS/CDS/CDNSKEY events. Invalid regexes are silently ignored.

WhenSourceKeyTypeSummary
2026-04-13T08:58:26Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-13T08:58:26Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-13T06:44:30Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-13T06:44:30Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-13T02:07:42Z state KSK 15484 state_timing_changed groot53.com KSK tag=15484 DSPublish: 20260413015543 (Mon Apr 13 01:55:43 2026) -> 20260413020715 (Mon Apr 13 02:07:15 2026)
2026-04-13T01:56:09Z state KSK 15484 state_timing_changed groot53.com KSK tag=15484 DSPublish: (unset) -> 20260413015543 (Mon Apr 13 01:55:43 2026)
2026-04-12T06:14:27Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-12T06:14:27Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-12T02:23:23Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-12T02:23:23Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-12T01:54:45Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-12T01:54:45Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-12T01:45:31Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-12T01:45:31Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-11T23:30:30Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-11T23:30:30Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-11T22:35:14Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-11T22:35:14Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-11T21:53:18Z dns 21000 dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 21000) disappeared at zone for groot53.com
2026-04-11T21:53:18Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-11T13:03:18Z dns 21000 dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 21000) appeared at zone for groot53.com
2026-04-11T13:03:18Z dns 46848 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 46848) appeared at zone for groot53.com
2026-04-11T13:03:18Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over DNSKEY (key tag 15484) appeared at zone for groot53.com
2026-04-11T13:03:18Z dns 46848 dns_rrsig_appeared_at_zone RRSIG over CDS (key tag 46848) appeared at zone for groot53.com
2026-04-11T13:03:18Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDS (key tag 15484) appeared at zone for groot53.com
2026-04-11T13:03:18Z dns 46848 dns_rrsig_appeared_at_zone RRSIG over CDNSKEY (key tag 46848) appeared at zone for groot53.com
2026-04-11T13:03:18Z dns 15484 dns_rrsig_appeared_at_zone RRSIG over CDNSKEY (key tag 15484) appeared at zone for groot53.com
2026-04-11T11:03:19Z rndc rndc_first_observation groot53.com: observed 8 key(s) via rndc
2026-04-11T11:03:19Z dns 46848 dns_ds_appeared_at_parent DS (key tag 46848) appeared at parent for groot53.com
2026-04-11T11:03:19Z dns 15484 dns_ds_appeared_at_parent DS (key tag 15484) appeared at parent for groot53.com
2026-04-11T11:03:19Z dns 46848 dns_cdnskey_appeared_at_zone CDNSKEY (key tag 46848) appeared at zone for groot53.com
2026-04-11T11:03:19Z dns 15484 dns_cdnskey_appeared_at_zone CDNSKEY (key tag 15484) appeared at zone for groot53.com
2026-04-11T11:03:19Z dns 46848 dns_cds_appeared_at_zone CDS (key tag 46848) appeared at zone for groot53.com
2026-04-11T11:03:19Z dns 15484 dns_cds_appeared_at_zone CDS (key tag 15484) appeared at zone for groot53.com
2026-04-11T11:03:19Z dns dns_soa_appeared_at_zone SOA observed at zone for groot53.com (serial 732)
2026-04-11T11:03:19Z dns 46848 dns_dnskey_appeared_at_zone DNSKEY (key tag 46848) appeared at zone for groot53.com
2026-04-11T11:03:19Z dns 15484 dns_dnskey_appeared_at_zone DNSKEY (key tag 15484) appeared at zone for groot53.com
2026-04-11T11:03:19Z dns 21000 dns_dnskey_appeared_at_zone DNSKEY (key tag 21000) appeared at zone for groot53.com
2026-04-11T11:03:18Z key ZSK 43138 key_file_observed new K*.key for groot53.com ZSK tag=43138
2026-04-11T11:03:18Z key KSK 45657 key_file_observed new K*.key for groot53.com KSK tag=45657
2026-04-11T11:03:18Z key KSK 46848 key_file_observed new K*.key for groot53.com KSK tag=46848
2026-04-11T11:03:18Z key ZSK 21000 key_file_observed new K*.key for groot53.com ZSK tag=21000
2026-04-11T11:03:18Z key ZSK 19094 key_file_observed new K*.key for groot53.com ZSK tag=19094
2026-04-11T11:03:18Z key ZSK 43098 key_file_observed new K*.key for groot53.com ZSK tag=43098
2026-04-11T11:03:18Z key KSK 17863 key_file_observed new K*.key for groot53.com KSK tag=17863
2026-04-11T11:03:18Z key KSK 15484 key_file_observed new K*.key for groot53.com KSK tag=15484
2026-04-11T11:03:18Z state ZSK 43138 state_key_observed new K*.state for groot53.com ZSK tag=43138
2026-04-11T11:03:18Z state KSK 17863 state_key_observed new K*.state for groot53.com KSK tag=17863
2026-04-11T11:03:18Z state KSK 46848 state_key_observed new K*.state for groot53.com KSK tag=46848
2026-04-11T11:03:18Z state ZSK 43098 state_key_observed new K*.state for groot53.com ZSK tag=43098
2026-04-11T11:03:18Z state ZSK 21000 state_key_observed new K*.state for groot53.com ZSK tag=21000
2026-04-11T11:03:18Z state KSK 45657 state_key_observed new K*.state for groot53.com KSK tag=45657
2026-04-11T11:03:18Z state ZSK 19094 state_key_observed new K*.state for groot53.com ZSK tag=19094
2026-04-11T11:03:18Z state KSK 15484 state_key_observed new K*.state for groot53.com KSK tag=15484