Rollin, Rollin, Keep them doggies rollin

root zone with continually rolling KSK and ZSKs (rickroll-alternate)

29 July 2015 NOTE: New root KSK rollover schedule proposed. I will be changing the rollover schedule on this site later today to match Extended Rickroll Final. I will attempt to make this seamless by using the existing key on the live system so that your resolvers should keep working. If they do not, update your key (e.g., unbound.root.key file) to the current one.
28 July 2015 NOTE: I will be doing some development work over the next 2 days at the request of KSK team members. I see a number of others relying on this system so I will do my best not to effect the current system but such work being what it is, you may see a reboot. System has been up since end of April 2015 and no failures seen on MSFT DNS or Unbound resolvers operating under accelerated 5011 timings.

Root server (NSD) Current state indicated by red block in first row. ~60 seconds per slot

Corresponding resolver config:
unbound.conf
root.hints:
.                        3600  IN NS    A.MOOT-SERVERS.NET.
A.MOOT-SERVERS.NET.      3600  IN A     192.101.186.81
A.MOOT-SERVERS.NET.      3600  IN AAAA  2001:470:8165:1::81

unbound.root.key:
.			12	IN	DNSKEY	257 3 8 AwEAAb7x2cORHl77INcdzNDeOqqYgijkrP55JsExgiBWo15mTkvLh3yE xvLCtXPcym3o3yetSgrWonle5NJR/IZI1FSvwKplcsYGMkRC7jNOXQiQ fxOTWtJQxYnMc5V2g6kA+5H/1EiOV4tUvHhBuwezc+ziXC79j9tAwlsH IzmjS55fiSI8EW6SI3kKkb7NMlQy7klT0VCfFCn1Xr8sY/AY8k7T5ROv ImBYGDq8wUSebdVQPghzFUKAVS7l0IxumRSgK2AbPz+kMu7fyEZndM1u QCy+syF+bWQYdJj7/ykgbXftnp+2W3attryMQOH/PDxpwLyhFdlDdQw3 OomjH7z7/0k=
.			12	IN	DNSKEY	257 3 8 AwEAAdgZBVktfsRgbVlav9s2/+XOAK7EA1ahqpDkDQnt+FRblc9+unZu 7voZc+Rv0YKFyJ4zfTpuBHb/hHIjdhEG5R7Xlxp6Fm7HXkV98TPJC+Oi mUCVDy6tVdeKfiasMT9GCea2O43wNiMaQ25Gl9FrWFwrfmHw6Litj30p GYa+U9zr0y7IT+6lOIUh6tnX35hJkixHpeuCvNft6VxJ2H2Tj8UerShS azt3+6xCDpbt72HC9Tw+OoHTuf5+SjMCC2VUhzjOhx/JhTviwlyVgy3n Ss+eONtpGw+fyb5Z8orNTRoLygN5yFkht7KlTHNFnXddOAravYTbz4ff iLAckXcFOhk=

T+0	T+10	T+20	T+30	T+40	T+50	T+60	T+70	T+80	T+0	T+10	T+20	T+30	T+40	T+50	T+60	T+70	T+80	T+0	T+10	T+20	T+30	T+40	T+50	T+60	T+70	T+80	T+0	T+10	T+20	T+30	T+40	T+50	T+60	T+70	T+80
32331
57933	57933	57933	57933	57933	57933	57933	57933	57933	57933
								07059	07059	07059	07059	07059	07059	07059	07059	07059	07059	07059
																	60036	60036	60036	60036	60036	60036	60036	60036	60036	60036	60036
																										32331	32331	32331	32331	32331	32331	32331	32331	32331	32331
																																			57933
54139	54139	54139	54139	54139	54139	54139	54139	54139	54139	54139	54139	54139	54139	54139	54139	54139	54139	54139	54139	54139	54139	54139	54139							54139	54139	54139
										03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592	03592

nsd.conf zonefile usefull-link

Public Faux Root Resolvers using above:

Windows Server 2012 R2 192.101.186.53 (howto)
...

Copyright (c) 2015 RLamb
Permission to use, copy, modify, and/or distribute this software for non-commercial use without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies.
THE SERVICE AND SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SERVICE OR SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SERVICE OR SOFTWARE.