Root Zone

DNS Root Server Infrastructure Monitoring

TLD SLA Compliance Metrics

Spec 10

No metrics available yet

Metrics will appear after probes start reporting data. Check back in about an hour.

Current Check Status

Reported by Any53 Probes
Type AF RTT Last Check Source Details Status TSLAC
DNS v4 46ms 33 days, 11 hours ago local NSID: M-SFO-4 OK
DNSSEC v4 18ms 33 days, 11 hours ago local Key: 20326 OK
DNSSEC v6 18ms 33 days, 11 hours ago local — FAIL

Root Server Details

13 Root Servers

The 13 root servers operated by 12 organizations form the foundation of the DNS hierarchy. We test each server independently over both IPv4 and IPv6.

Server Operator IPv4 RTT IPv6 RTT IPv4 NSID IPv6 NSID Anchor Status
a.root-servers.net Verisign — — — — —
b.root-servers.net USC-ISI — — — — —
c.root-servers.net Cogent — — — — —
d.root-servers.net UMD — — — — —
e.root-servers.net NASA — — — — —
f.root-servers.net ISC — — — — —
g.root-servers.net DISA — — — — —
h.root-servers.net US Army — — — — —
i.root-servers.net Netnod — — — — —
j.root-servers.net Verisign — — — — —
k.root-servers.net RIPE NCC — — — — —
l.root-servers.net ICANN — — — — —
m.root-servers.net WIDE — — — — —

NSID (Name Server Identifier) helps identify which anycast instance responded. Anchor validation confirms the DNSSEC root trust anchor matches across address families.

Test With Your Computer

DNS

dig @a.root-servers.net root. SOA +dnssec +nsid Query SOA with DNSSEC validation and NSID
drill -D root. SOA @a.root-servers.net Alternative using drill with DNSSEC trace

Registry Information

Active
TLD Root Zone
Operator Root Server System

ICANN SLA Requirements

Per ICANN Registry Agreement Specification 10:

DNS SLA UDP RTT ≤ 500ms for 95% of queries. Availability: 99% (max 432 min/month downtime).

API Access

JSON API

Access Root Zone compliance metrics programmatically via our REST API.

Quick Start

GET /any53/api/v1/compliance/root/
curl -H "X-API-Key: ${YOUR_API_KEY}" \
  "https://www.any53.com/any53/api/v1/compliance/root/"

Example Response

{
  "tld": "root",
  "display_name": "Root Zone",
  "operator": "Root Server System",
  "updated_at": "2026-01-31T12:00:00Z",
  "dns": {
    "availability_24h": 99.99,
    "rtt_p50_ms": 12,
    "rtt_p95_ms": 42,
    "sla_threshold_ms": 500
  },
  "spec10_compliant": true
}

Generate API Key

Get a free API key to start making requests. Provide an email to upgrade to the verified tier (600 requests/hour).

Endpoints

Endpoint Description Tier
GET /compliance/ List all monitored TLDs All
GET /compliance/{tld}/ Current metrics for a TLD All
GET /compliance/{tld}/history/ Historical time-series data Organization
GET /compliance/{tld}/probes/ Per-probe breakdown Organization
POST /compliance/keys/ Generate a new API key No auth

Rate Limits

Tier Rate Limit Features
Anonymous 100/hour Current snapshot, hourly aggregates
Verified 600/hour Current snapshot, hourly aggregates
Organization 6000/hour Historical data, per-minute resolution, per-probe breakdown