This page shows the live KSK rollover status for the root zone on a.root-servers.net. As long as the root DNSKEY is signed by key tag 19036 (aka KSK 2010) the KSK did not roll. Once the key tag 20326 (aka KSK 2017) is used, the first root zone KSK rollover completed. Further key rollovers will not show the named KSK.

Idea by Jan-Piet Mens