https://labs.ripe.net/author/roland_van_rijswijk/a-virtual-canary-in-the-coalmine-for-the-dnssec-root-key-rollover/